The required content of an SSA and an SSP is described in the ISPS Code, EU legislation and national legislation. Due to international commitments, the national legislation (the Security Regulations) requires that certain parts of part B of the ISPS Code shall be mandatory for Norwegian-flagged ships.

The SSP shall be available on board in the language defined as the ship's working language. In the cases where the working language is defined as a language other than English, a translation of the SSP into English must also be available.

In the Security Regulations the NMA has defined the corrections and/or updates which can be made to the SSP without needing to reapprove the plan. Amendments to the SSP will be verified by the NMA in connection with an intermediate or renewal verification.