2.1.1 The design, construction and operation of control, alert and safety systems
shall employ human-centred activities.
2.1.2 Mobility systems for propulsion and manoeuvring, electrical power
generation, and safety of the ship shall be provided with a continuous electrical
supply. An audible and visual alert shall be initiated in the event of the failure of
any of the power supplies.
2.1.3 The control system must operate Mobility and/or Ship Type systems in a
safe, controlled and stable manner throughout the machinery's/systems’ defined
operational limits and shall recover automatically in a safe manner after a loss of
power supply.
2.1.4 It shall be possible to control machinery/systems from only one location at
a time, with clear indication showing the location of the control. Transfer between
control stations without altering the control set points shall be provided. Transfer of
control location will be indicated with visual and audible indication.
2.1.5 Appropriate indication and feedback shall be provided at each control
station to confirm that the system has responded to the Operator’s demands. The status
of automatic control systems shall be indicated.
2.1.6 Means are to be available to disable the automatic or remote control
operation of Mobility and/or Ship Type systems to allow inspection and maintenance tasks
to be performed safely on the machinery and systems.
2.1.7 Indications of impending slowdown/shutdown of Mobility and/or Ship Type
systems shall be provided at applicable locations with provision to take alternative
actions if approved.
2.1.8 Automated control systems which utilise stored energy to start Mobility
and/or Ship Type machinery shall be configured not to exhaust the stored energy
completely and to provide an alert when the stored energy is below a critical limit.
2.1.9 The monitoring system for system parameters is to have integrity
appropriate for its intended purpose.
2.1.10 Where it is proposed to operate the Mobility or Ship Type machinery in an
unattended space, no matter what period, sufficient controls, alarms and safeguards are
to be provided to enable safe and effective operation of the equipment. A dedicated
control position shall be provided.
2.1.11 Failure of a control system is not to result in the loss of ability to
provide either Mobility or Ship Type systems by alternative means.
2.1.12 Control, Alert and Safety systems shall be designed to fail to the least
hazardous condition. This condition shall be determined for the complete
installation.
2.1.13 Operators shall have an independent, high integrity method to disconnect
all energy sources that shall put machinery for Ship Type safety functions into a known
safe state.
2.1.14 An alert system with appropriate controls and displays shall be located at
key locations.
2.1.15 Where parameters of the alert system can be adjusted, the integrity of the
system shall be maintained.
2.1.16 The status of an alert shall be clearly visible and a means to accept it
from all appropriate locations. Visual indication of the alarm shall remain until the
fault is cleared.
2.1.17 Design of machinery safety systems shall be such that equipment must be
reset manually before being restarted.
2.1.18 Where the function of a safety system might lead to a greater hazard than
the loss of the equipment, an override should be provided.
2.1.19 The status of standby machinery and systems shall be indicated at
appropriate control stations as agreed with the Naval Administration.
2.1.20 Systems shall be readily usable under all intended operating conditions and
shall support effective and efficient operation. Adequate safeguards against incorrect
operation shall be provided.
2.1.21 The systems’ repeatability and accuracy shall be adequate for the proposed
use and shall be maintained at their specified value during their expected lifetime and
normal use.
2.1.22 System design shall take account of any constraints or limitations imposed
due to equipment or machinery.
2.1.23 Where the system design intent includes ‘darken ship’ capability, the controls and
alerts are to be arranged to support safe operation in this state.