10.1 Definitions
10.1.1 Remote control systems comprise all equipment necessary to operate units
from a control position where the operator cannot directly observe the effect of his
actions.
10.1.2 Back-up control systems comprise all equipment necessary to maintain
control of essential functions required for the craft's safe operation when the main
control systems have failed or malfunctioned.
10.2 General
10.2.1 Failure of any remote or automatic control systems should initiate an audible and
visual alarm and should not prevent normal manual control.
10.2.2 Manoeuvring and emergency controls should permit the operating crew to perform
the duties for which they are responsible in the correct manner without difficulty,
fatigue or excessive concentration.
10.3 Emergency Controls
In all craft, the station or stations in the operating compartment from which control of
craft manoeuvring and/or of its main machinery is exercised should be provided, within
easy reach of the crew member at that station, with controls for use in an emergency to:
-
.1 activate fixed fire-extinguishing systems;
-
.2 close ventilation openings and stop ventilating machinery supplying spaces
covered by fixed fire-extinguishing systems, if not incorporated in .1;
-
.3 shut off fuel supplies to machinery in main and auxiliary machinery spaces;
-
.4 disconnect all electrical power sources from the normal power distribution
system (the operating control should be guarded to reduce the risk of inadvertent
or careless operation); and
-
.5 stop main engine(s) and auxiliary machinery.
10.4 Alarm System
10.4.1 Alarm systems should be provided which announce at the craft's control position,
by visual and audible means, malfunctions or unsafe conditions. Alarms should be
maintained until they are accepted and the visual indications of individual alarms
should remain until the fault has been corrected, when the alarm should automatically
reset to the normal operating condition. If an alarm has been accepted and a second
fault occurs before the first is rectified, the audible and visual alarms should operate
again. Alarm systems should incorporate a test facility.
10.4.1.1 Emergency alarms giving indication of conditions requiring immediate action
should be distinctive and in full view of crew members in the operating compartment, and
should be provided for the following:
-
.1 activation of a fire-detection system;
-
.2 total loss of normal electrical supply;
-
.3 overspeed of main engines;
-
.4 thermal runaway of any permanently installed nickel-cadmium battery;
-
.5 approaching of WIG craft's altitude and attitude to the borders of range of
admissible values and an exceeding of their limits; and
-
.6 linear or angular accelerations exceeding 90% of the design limitations of the
craft for more than one second.
10.4.1.2 The alarm required by 10.4.1.1.5 should operate with sufficient safety margin
to prevent inadvertent stalling and must be clear and distinctive to the pilot in
straight and turning flight. The warning may be furnished either through the inherent
aerodynamic qualities of the craft or by a device that will give clearly distinguishable
indications under expected conditions of flight. However, a visual stall warning device
that requires the attention of the crew within the cockpit is not acceptable by itself.
If a warning device is used, it must provide a warning in all craft configurations. The
stall warning must begin at a speed exceeding the stalling speed (i.e. the speed at
which the craft stalls or the minimum speed demonstrated) by seven percent or at any
lesser margin if the stall warning has enough clarity, duration, distinctiveness, or
similar properties.
10.4.1.3 Additional alarms and warning signals should be fitted in the operating
compartment as required by the Administration. These may include:
-
.1 exceeding the limiting value of any craft, machinery or system parameter other
than engine overspeed;
-
.2 failure of normal power supply to any powered control devices;
-
.3 activation of any bilge alarm;
-
.4 operation of any automatic bilge pump;
-
.5 failure of compass system;
-
.6 low level of a fuel tank contents;
-
.7 fuel oil tank overflow;
-
.8 extinction of any navigation light;
-
.9 low level of contents of any fluid reservoir the contents of which are
essential for normal craft operation;
-
.10 failure of any connected electrical power source;
-
.11 failure of any ventilation fan installed for ventilating spaces in which
inflammable vapours may accumulate; and
-
.12 fuel line failure.
10.4.1.4 All warnings required by 10.4.1.1 and 10.4.1.2 should be provided at all
stations at which control functions may be exercised.
10.4.2 The alarm system should meet appropriate constructional and
operational provisions for required alarms.footnote
10.4.3 Equipment monitoring the passenger, cargo and machinery spaces for fire and
flooding should, so far as is practicable, form an integrated sub-centre incorporating
monitoring and activation control for all emergency situations. This sub-centre may
require feedback instrumentation to indicate that actions initiated have been fully
implemented.