16.2.1 Stabilization systems shall be so designed
that, in case of failure or malfunctioning of any one of the stabilization
devices or equipment, it would be possible either to ensure maintaining
the main parameters of the craft's motion within safe limits with
the aid of working stabilization devices or to put the craft into
the displacement or other safe mode.
16.2.2 In case of failure of any automatic equipment
or stabilization device, or of its power drive, the parameters of
craft motion shall remain within safe limits.
16.2.3 Craft fitted with an automatic stabilization
system shall be provided with an automatic safety control unless the
redundancy in the system provides equivalent safety. Where an automatic
safety control is fitted, provision shall be made to override it and
to cancel the override from the main operating station.
16.2.4 The parameters and the levels at which
any automatic safety control gives the command to decrease speed and
put the craft safely in the displacement or other safe mode shall
take account of the safe values of heel, trim, yaw and combination
of trim and draught appropriate to the particular craft and service;
also to the possible consequences of power failure for propulsion,
lift or stabilization devices.
16.2.5 The parameters and the degree of stabilization
of the craft provided by the automatic stabilization system shall
be satisfactory, having regard to the purpose and service conditions
of the craft.
16.2.6 Failure mode and effect analysis shall
include the stabilization system.