01 · GovernanceP1
Performance
HSSE commitment, governing documents, objectives and KPIs, audit close-out, Master’s reviews and company evaluation.
DryBMS · Dry bulk management
Turn self-assessment into a governed improvement cycle.
Connect fleet context, procedures, operational and cyber risks, evidence, findings and actions around DryBMS readiness—without reducing improvement work to a periodic questionnaire.
The supplied STORM technical description does not list DryBMS as a current built-in framework. Official questionnaire content, level scoring and DBCE submission must be confirmed and configured separately.
Dry bulk improvement recordEvidence connected
STORMgoverned record
PerformanceObjectives, audits and reviews
PeopleRoles, competence and welfare
PlantAssets, equipment and inspections
ProcessRisk, operations and incidents
Performance · People · Plant · Process
30ship-management subject areas in the official guidance
4 categoriesPerformance, People, Plant and Process
4 levelsBasic, Intermediate, Advanced and Excellence
17 prioritieshigher-impact subject areas identified in guidance v1.1
How DryBMS is organised
Four lenses on operational excellence.
The DBCE guidance groups the self-assessment into four categories. Together they cover the management system, the people who operate it, the physical fleet and the processes used to control work.
02 · WorkforceP2
People
Shore and crew recruitment, competence, training, familiarisation, contractor management and crew welfare.
03 · Fleet assetsP3
Plant
Maintenance, dry dock and surveys, critical equipment, engine-room operations, bunkering and inspection close-out.
04 · OperationsP4
Process
Shipboard operations, risk, permits, change, environment, security, cyber, emergency planning and incident learning.
Product evidence boundary
Useful readiness workflows, without an unsupported DryBMS claim.
The technical description documents configurable assessments and broad governance workflows, but it does not name DryBMS among STORM’s current built-in frameworks.
Documented STORM building blocks
- Configurable internal and supplier questionnaires
- Evidence, findings and remediation tracking
- Asset, service and dependency cartography
- Policies, procedures and approval workflows
- Risk, incident, audit, KPI and review records
Must be confirmed or configured
- Official DryBMS questionnaire content
- Basic-to-Excellence scoring logic
- Ready-made mappings for all 30 subject areas
- DBCE portal submission or data integration
- Operational maintenance-system functionality
Where STORM can support readiness
Build the operating record behind each answer.
Use documented STORM capabilities to organise evidence and improvement work. Apply the official DryBMS content and DBCE process separately when defining, scoring and submitting a self-assessment.
Scope & cartography
Model services, processes, locations, physical and ICT assets, people, data and external dependencies in a connected inventory.
Company · fleet context · assetsAssessment workspace
Run configured internal or supplier questionnaires, collect evidence, record status, compare periods and schedule reassessments.
Questions · evidence · reviewControlled documents
Manage policies and procedures through authoring, versioning, approval, acknowledgement and scheduled-review workflows.
SMS support · lifecycle · trailRisk & action ownership
Record risks, controls, treatment choices, owners, review dates, mitigation plans and supporting attachments.
Risk register · treatment · close-outAudit & review
Plan internal audits, manage findings and bring risks, incidents, supplier results and actions into management reviews.
Assurance · decisions · follow-upKPIs & incidents
Track defined objectives and KPIs, while retaining security-incident ownership, root cause and corrective-action records.
Trends · lessons · improvement
Evidence by design
Connect assessment responses to controlled documentation.
Configured questionnaires can sit alongside policy and procedure lifecycles, evidence, review schedules and implementation status. This supports a more durable record than an isolated spreadsheet while the official DryBMS criteria remain the source of truth.
- Internal and supplier assessment workflows
- Versioned documents, approvals and acknowledgements
- Evidence, coverage and period-to-period comparison
Improvement with ownership
Turn weaknesses into accountable actions and measurable follow-through.
Record risks and treatment decisions with owners and dates, then track defined objectives and KPIs through dashboards and management reporting. Official DryBMS level and scoring conclusions still belong to the applicable DBCE assessment process.
- Risk levels, controls and mitigation plans
- Objective owners, targets and monitoring periods
- Findings and improvement actions carried into review
Connected operating context
Relate cyber and governance records to the services and assets involved.
Cartography connects processes, services, assets and dependencies. Security incidents can reference affected assets, assigned personnel, root causes and corrective actions—useful evidence for relevant DryBMS subject areas, not a replacement for marine operational systems.
- Service, process, asset and dependency model
- Incident lifecycle, ownership and root-cause records
- Technical vulnerability and third-party risk context
Official expectation structure
01
02
03
04
Progress is evaluated across four levels.
The official guidance describes increasing expectations for the comprehensiveness of the management system. These summaries are directional and do not replace the DryBMS questionnaire or scoring rules.
Basic
Starts with applicable IMO and flag-state obligations, clear HSSE requirements and awareness of relevant industry guidance.
Mandatory baselineIntermediate
Adds a defined continual-improvement approach and clearer treatment of relevant guidance within the safety management system.
Structured improvementAdvanced
Extends the system with lessons learned, emerging obligations and tools for managing indicators and developing HSSE risks.
Forward-looking controlExcellence
Emphasises proactive use of leading indicators and systematic follow-through to close actions addressing HSSE risk.
Proactive assuranceAlways use the current official DryBMS materials to determine the applicable expectation, evidence and score.
Readiness workflow
01
02
03
04
From self-assessment to controlled improvement.
STORM can organise supporting records; the official questionnaire, score and any submission remain governed through DryBMS and DBCE.
Define
Confirm organisational scope, participating roles, applicable subject areas and the official materials to be used.
Scope · owners · criteriaAssess
Evaluate current practice against official expectations and gather evidence from relevant teams and operating records.
Self-assessment · evidenceImprove
Turn weaknesses into risks, findings, document changes and owned actions with dates and retained proof.
Actions · treatment · closureReview
Bring results into management review, monitor progress and use the official DBCE channel for any chosen submission.
Review · repeat · submitPractical questions
Keep readiness support and official assessment distinct.
Clear boundaries help maritime teams evaluate where STORM fits without overstating product coverage.
What is DryBMS?
DryBMS is the Dry Bulk Management Standard administered by the independent Dry Bulk Centre of Excellence. Its official guidance describes a company self-assessment covering 30 ship-management subject areas across Performance, People, Plant and Process.
Is DryBMS self-assessment mandatory?
DBCE guidance v1.1 states that completing and submitting the self-assessment questionnaire is voluntary. Organisations should still confirm contractual, customer, charterer and other applicable obligations for their own situation.
Does STORM include a ready-made DryBMS assessment?
The supplied technical description does not list DryBMS among the current built-in frameworks and does not document a ready-made DryBMS questionnaire. It does document configurable assessments, evidence collection and connected GRC workflows.
Can STORM calculate the official DryBMS score?
No current product evidence supports that claim. STORM supports configurable assessment and risk methodologies, but the official DryBMS levels, dependency rules and scoring must be confirmed and correctly configured against current DBCE materials.
Does STORM replace the DBCE portal or verification process?
No. DBCE maintains the official DryBMS process and portal. STORM can organise internal readiness records, evidence and remediation; no direct DBCE integration or authority to verify a DryBMS assessment is documented.
How can STORM support the cyber-security subject area?
Documented capabilities include asset and dependency cartography, information-security risk assessment, policy workflows, technical vulnerability management, threat intelligence and security-incident management. Their use can support relevant evidence, but does not by itself prove that a DryBMS expectation is met.
Bring your operating context
Book a STORM demo
Test STORM against the evidence your DryBMS journey must actually maintain.
Walk through your official assessment content, fleet context, procedures, risks, evidence and improvement actions—and identify what can be supported now and what requires configuration.