Section 6 Integrated computer control - ICC notation

6.1.1 Integrated Computer Control class notation ICC may be assigned where an integrated computer system in compliance with Vol 2, Pt 9, Ch 1, 6.1 General to Vol 2, Pt 9, Ch 1, 6.3 Operator stations provides fault tolerant control and monitoring functions for one or more of the following services:

1. Propulsion.

2. Electrical generation and distribution (power management systems).

3. Ballast.

6.1.2 A Risk Assessment (RA) is to be carried out in accordance with Vol 2, Pt 1, Ch 3, 18 Risk Assessment (RA) and the report and worksheets submitted for consideration, see also Vol 2, Pt 9, Ch 8, 5.5 Additional requirements for integrated systems 5.5.5. The RA is to demonstrate that control and monitoring functions required by Vol 2, Pt 9, Ch 1, 6.2 General requirements will remain available at each operator station in the event of a single fault of the integrated computer control system, including input error, without adverse effect on the service(s).

6.1.3 Special consideration will be given to integrated computer control systems for other applications, except where these are addressed by other control engineering class notations.

6.2.1 The integrated computer control system is to comply with the programmable electronic system requirements of Vol 2, Pt 9, Ch 8, 5 Programmable electronic systems (PES) and the control and monitoring requirements of the Rules applicable to particular equipment, machinery or systems.

6.2.2 Alarm displays are to be provided, in compliance with the requirements of Vol 2, Pt 9, Ch 7, 4.3 Alarm systems, general requirements, which ensure ready identification of faults in the equipment under control.

6.2.3 Alarm and indication functions required byVol 2, Pt 9, Ch 7, 4.5 Control systems, general requirements are to be provided by the integrated computer control system in response to the activation of any safety function for associated machinery. Systems providing the safety functions are in general to be independent of the integrated computer system. See also Vol 2, Pt 9, Ch 8, 5.4 Additional requirements for Mobility category and safety critical systems 5.4.8.

6.2.4 Controls are to be provided, in compliance with Vol 2, Pt 9, Ch 7, 4.5 Control systems, general requirements, to ensure the safe and effective operation of equipment and response to faults, e.g. stopping, starting, adjustment of parameters, etc. Indication of operational status and other such parameters, necessary to satisfy this requirement, is to be provided for all equipment under control by the integrated computer control system.

6.3.1 Each operator station allowing control of equipment is to be provided with a minimum of two multi-function display and control units and is to comply with the ergonomics requirements of Vol 2, Pt 10 Human Factors. The number of units is to be sufficient to allow simultaneous access to control and monitoring functions required by Vol 2, Pt 9, Ch 1, 6.2 General requirements 6.2.2to Vol 2, Pt 9, Ch 1, 6.2 General requirements 6.2.4. See also Vol 2, Pt 9, Ch 8, 5.1 General requirements 5.1.21.

6.3.2 Each multi-function display and control unit is to include a monitor, keyboard and tracker ball. Alternative arrangements will be considered where these enable each unit to be configured by the user to provide required control or monitoring functions.

6.3.3 Where the integrated computer control system is arranged such that control and monitoring functions may be accessed at more than one operator station, the selected mode of operation of each station (e.g. in control, standby, etc.) is to be clearly indicated. See also Vol 2, Pt 9, Ch 7, 4.2 Control stations for machinery.

6.3.4 Means of communication are to be provided between operator stations and any other stations from which the equipment may be controlled. The arrangements are to be permanently installed and are to remain operational in the event of failure of the main electrical power supply to the integrated control system.