The Code takes the approach that ensuring the security of ships and port facilities is basically a risk management activity. An assessment of the risks must be made in each particular case to determine what security measures are appropriate.