PART 138—TOWING SAFETY MANAGEMENT SYSTEM (TSMS) Authority: 46 U.S.C. 3103, 3301, 3306, 3308, 3316, 8104, 8904; 33 CFR 1.05; DHS Delegation 0170.1. Source: 81 FR 40101, June 20, 2016, unless otherwise noted. Subpart A—General § 138.100 Purpose. The purpose of this part is to prescribe requirements for owners or managing operators of towing vessels who adopt a Towing Safety Management System (TSMS) under this subchapter. § 138.115 Compliance. Owners or managing operators selecting the TSMS option must obtain a TSMS certificate issued under § 138.305 at least 6 months before obtaining a Certificate of Inspection (COI) for any of their vessels covered by the TSMS certificate. Subpart B—Towing Safety Management System (TSMS) § 138.205 Purpose of a TSMS. (a) The purpose of a TSMS is to establish policies, procedures, and required documentation to ensure the owner or managing operator meets its established goals while ensuring continuous compliance with all regulatory requirements. The TSMS must contain a method to ensure all levels of the organization are working within the framework. (b) A TSMS establishes and maintains: (1) Management policies and procedures that serve as an operational protocol for all levels within management; (2) Procedures to produce objective evidence that demonstrates compliance with the requirements of this subchapter; (3) Procedures for an owner or managing operator to evaluate that they are following their own policies and procedures and complying with the requirements of this subchapter; (4) Arrangements for a periodic evaluation by an independent third-party organization (TPO) to determine how well an owner or managing operator and their towing vessels are complying with their stated policies and procedures, and to verify that those policies and procedures comply with the requirements of this subchapter; and (5) Procedures for correcting problems identified by management personnel and TPOs and facilitating continuous improvement. § 138.210 Objectives of a TSMS. The TSMS, through policies, procedures, and documentation, must: (a) Demonstrate management responsibility. (b) Document management procedures. (c) Ensure document and data control. (d) Provide a process and criteria for selection of third parties. (e) Establish a system of recordkeeping. (f) Identify and meet training needs. (g) Ensure adequate resources. § 138.215 Functional requirements of a TSMS. The functional requirements of a TSMS include: (a) Policies and procedures to provide direction for the safe operation of towing vessels and protection of the marine environment in compliance with applicable U.S. law, including the Code of Federal Regulations, and, if on an international voyage, applicable international conventions to which the United States is a party; (b) Defined levels of authority and lines of communication between shoreside and vessel personnel; (c) Procedures for reporting accidents and non-conformities; (d) Procedures to prepare for and respond to emergency situations by shoreside and vessel personnel; (e) Procedures for verification of vessel compliance with this subchapter; (f) Procedures for internal auditing of the TSMS, including shoreside and vessel operations; (g) Procedures for external audits; (h) Procedures for management review of internal and external audit reports and correction of non-conformities; and (i) Procedures to evaluate recommendations made by management and other personnel. § 138.220 TSMS elements. The TSMS must include the elements listed in paragrahs (a) through (d) of this section. If an element listed is not applicable to an owner or managing operator, appropriate justification must be documented and is subject to acceptance by the TPO. (a) Administration and management organization. (1) Management organization Responsibilities. (ii) Designated person. (iii) Master authority. (2) Audits Procedures for conducting internal and external audits. (ii) Procedures for identifying and correcting non-conformities. (b) Personnel. (1) Employment procedures. (2) Training of personnel. (i) New-hire orientation; (ii) Duties associated with the execution of the TSMS; (iii) Execution of operational duties; (iv) Execution of emergency procedures; (v) Occupational health; (vi) Crew safety; and (vii) Training required by this Subchapter. (c) Verification of vessel compliance. (1) Maintenance and survey. (2) Safety, environment, and security. (d) Compliance with this subchapter. § 138.225 Existing safety management systems (SMSs). (a) A safety management system (SMS) which is fully compliant with the International Safety Management (ISM) Code requirements, implemented in 33 CFR part 96, will be deemed in compliance with TSMS-related requirements in this subchapter. (b) Other existing SMSs may be considered for acceptance as meeting the TSMS requirements of this part. The Coast Guard may: (1) Accept such system in full; (2) Require modifications to the system as a condition of acceptance; or (3) Reject the system. (c) An owner or managing operator who seeks to meet TSMS requirements using provisions in paragraph (a) or (b) of this section must submit documentation to the Coast Guard based on the initial audit and one full audit cycle of at least 3 years. (d) The Coast Guard may elect to inspect equipment and records, including: (1) Contents of the SMS; (2) Objective evidence of internal and external audits; (3) Objective evidence that non-conformities were identified and corrected; and (4) Objective evidence of vessel compliance with applicable regulations. Subpart C—Documenting Compliance § 138.305 TSMS certificate. (a) The owner or managing operator will be issued a TSMS certificate by a TPO when his or her organization is deemed in compliance with the TSMS requirements. It should be kept on file at the owner or managing operator's shoreside office and available for review, at the request of the Coast Guard. (b) A TSMS certificate is valid for 5 years from the date of issue, unless suspended, revoked or rescinded as provided in paragraphs (d) and (e) of this section. (c) The vessel owner or managing operator must maintain a list of vessels currently covered by each TSMS certificate and must provide it to the Coast Guard upon request. (d) A TSMS certificate may be suspended or revoked by the Coast Guard at any time for non-compliance with the requirements of this part. (e) The TPO that issued the TSMS certificate may rescind the certificate for non-compliance with the requirements of this part. (f) A copy of the TSMS certificate must be maintained on each towing vessel that is covered by the TSMS certificate and on file at the owner or managing operator's shoreside office. § 138.310 Internal audits for a TSMS certificate. (a) Internal management audits must be conducted annually, within 3 months of the anniversary date of the TSMS certificate, to ensure the owner or managing operator is effectively implementing all elements of their TSMS. (b) The internal management audit must ensure that management has implemented the TSMS throughout all levels of the organization, including audits of all the owner or managing operator's towing vessels to which a TSMS applies to ensure implementation at the operational level. (c) The results of internal audits must be documented and maintained for a period of 5 years and made available to the Coast Guard upon request. (d) Internal auditors: (1) Must have knowledge of the management, its SMS, and the standards contained in this subchapter; (2) Must have completed an ANSI/ISO/ASQ Q9001-2000 or ISO 9001:2008(E) (incorporated by reference, see § 136.112 of this subchapter) internal auditor/assessor course or Coast Guard-recognized equivalent; (3) May not be the designated person, or any other person, within the organization that is responsible for development or implementation of the TSMS; and (4) Must be independent of the procedures being audited, unless this is impracticable due to the size and the nature of the organization. § 138.315 External audits for a TSMS certificate. External audits for obtaining and renewing a TSMS certificate are conducted through a TPO and must include both management and vessels as follows: (a) Management audits. (2) A mid-period external management audit must be conducted between the 27th and 33rd month of the certificate's period of validity. (b) Vessel audits. (2) An external audit must be conducted no later than 6 months after the issuance of the initial COI for vessels subject to the owner or managing operator's TSMS that have been owned or operated for fewer than 6 months prior to receiving the initial COI. (3) An external audit of all vessels covered by a TSMS certificate must be conducted during the 5-year period of validity of the TSMS certificate. The vessels must be selected randomly and distributed as evenly as possible. (4) External audits may include the use of objective evidence which may be available at the owner or managing operator's corporate office. Some portions of this audit require visiting each vessel at some point during the 5-year period of validity of the TSMS certificate. (c) Documentation. Subpart D—Audits § 138.400 General. Management and vessels are subject to internal and external audits to assess compliance with TSMS and the vessel standards requirements of this subchapter. § 138.405 Conduct of internal audits. (a) Internal audits are conducted by, or on behalf of, the management and may be performed by a designated employee or by contracted individual(s) who conduct the audit as if an employee of the owner or managing operator. (b) Internal audits are not necessarily conducted as one event; they can be taken in segments over time. (c) Internal audits must be of sufficient depth and breadth to ensure the owner or managing operator established adequate procedures and documentation to comply with the TSMS requirements of this part, that the TSMS was implemented throughout all levels of the organization, and that the owner or managing operator's vessels comply with this subchapter and the TSMS. (d) The auditor must have the authority to examine documentation, question personnel, examine vessel equipment, witness system testing, and observe personnel training, including drills, as necessary to verify TSMS effectiveness. § 138.410 Conduct of external audits. (a) External audits must be conducted by an auditor from a TPO and cover all elements of the TSMS requirements of this subchapter, but may be conducted on a sampling basis of each of those TSMS elements. (b) External audits must be of sufficient depth and breadth to ensure the owner or operating manager effectively implemented its TSMS throughout all levels of the organization, including onboard its vessels. (c) The auditor must be provided access to examine any requested documentation, question personnel, examine vessel equipment, witness system testing, and observe personnel training, including drills, as necessary to verify TSMS effectiveness. (d) The auditor may broaden the scope of the audit if: (1) The TSMS is incomplete or not effectively implemented; (2) Conditions found are not consistent with the records; or (3) Unsafe conditions are identified. (e) The auditor may verify compliance with vessel standards and TSMS requirements through a review of objective evidence such as checklists, invoices, and reports, and may conduct a visual sampling onboard the vessels to determine whether or not the conditions onboard the vessel are consistent with the records reviewed. (f) If an auditor identifies a major non-conformity during the course of the external audit, then the auditor must notify the local Officer in Charge, Marine Inspection (OCMI) within 24 hours and the owner or managing operator's designated representative in accordance with the TSMS applicable to the vessel. Subpart E—Coast Guard or Organizational Oversight and Review § 138.500 Notification prior to audit. (a) The owner or managing operator of a towing vessel must notify the local OCMI at least 72 hours prior to an external audit being conducted under this part. (b) The Coast Guard may require that a Coast Guard representative accompany the auditor during part, or all, of an external audit. (c) The Coast Guard may conduct a separate audit of the owner or managing operator or its towing vessels, at its discretion. § 138.505 Submittal of external audit results. (a) Submission of external management audits. (b) Submission of external vessel audits. (c) Electronic submissions. § 138.510 Required attendance. (a) The TPO and the owner or managing operator may be required to explain or otherwise demonstrate areas of the TSMS to the Coast Guard if there is evidence that a TSMS, for which a TSMS certificate was issued, is not in compliance with the provisions of this part. The Coast Guard may require a third party's attendance at the vessel or the office of the owner or managing operator for this purpose. (b) The Coast Guard will not bear any of the costs for a third party's attendance at the vessel or the office of the owner or managing operator when complying with this provision.