Professional Documents
Culture Documents
Equipment Classes
1) A single fault can result in position loss
2) Failure of a single active component should not cause
position loss.Also static components where protection or reliability not
documented.
3) Failure of no component, static or active should cause
position loss.Loss of any single watertight or fire subdivision considered failure.
An act of mal operation is a single failure if it is reasonably probable.
Power
Have adequate response time
Class 2 and 3 have redundancy
Class 3 redundant by space
Power management system should also be redundant
DP Control
Set up with good view of vessel and surrounds
Display power, thrusters, and DP control so function can be checked
Based on an ergonomic design for ease of operation, selection of mode, and mode to be
displayed
No single act of mal operation to cause a critical condition in 2 or 3.
Thrusters
To prove adequate thrust for surge, sway, yaw
To be set up so that after failure still have control in class 2, and 3
Forces used in consequence analysis allow for interaction
Thruster system failure in pitch azimuth speed should not fail to uncontrolled full pitch
and speed
Computers
Class one need not be redundant
Class 2
At least 2 independent computer systems common facilities should not cause a failure of both
Class 3
2 independent systems with self checking and alignment common facilities should not cause
failure of both
A back up computer that is Updated, with manual change over, failure of main should not
affect backup separated by A60 bulkhead.
Redundant computers have an automatic transfer that is as smooth as possible
PRS
Class 2 and 3 to have at least 3 PRS, simultaneously available
Where 2 or more PRS required, they should not all work on the same principle, and
They should be suitable for and accurate enough for intended ops, bearing mind deployment
and expected performance
Provide warning, if PRS incorrect, or substantially degraded
Class 3, one PRS connected directly to backup and behind A60 bulkhead
Vessel Sensors
Measure at least heading, motions, wind direction and speed
When class 2 and 3 is fully dependent on correct sensor readings, then 3 systems should be
installed
(many class 2 systems have only 2)
Sensors should be set up independently so that failure of one does not affect others
One of each type of sensor should be connected to the class 3 back up, and be behind an A60
bulkhead.
DP Control
Alarms should audible and visual, also a permanent record kept
Failure in one system should not be transferred to another
A failed redundant item should be isolated, and the other component started
Manual thruster control by joystick, and levers should be possible
Software should be approved by Administration.
Operations
Systems should be checked
Prior to use
At regular intervals during use
Have checklists and procedures for new location
Regular checks (watch keeping)
Annual tests and procedures
Initial and periodical (5 year) test and procedures
Examples of tests and procedures after mods and non conformities
Systems
Designed to meet IMO guidelines
Do not necessarily follow exactly
Button pushes
Consequence analysis
3 gyros
Not covered FMEA
Systems
Kongsberg Alstom
SDP 11 and 12 ADP 11 and 12
SDP 21 and 22 ADP 21 and 22
SDP 31 and 32 ADP 31 and 32
Diagram
DP C - OPTIONAL SLAVE
DP A DP B DP C
A60
Bulkhead
* 3 UPS
DP NETWORK
DUAL FIBRE FIELDBUS NETWORK
A capability plot