QUESTION 8.3.4

Cargo-tank high-level and overfill alarms

Oil, ChemicalCargo Control Room, Main Deck

What is being checked

The inspector is checking whether independent cargo-tank high-level and overfill protection matches the approved arrangement, is physically ready, is tested through its complete operating path and is understood by responsible personnel.

Ready onboard

0/6 complete

APPROVED BASISPlans, manuals and certificates identify sensor identity, alarm set points, independence, CCR and deck indication, acknowledgement, power and tank assignment.PHYSICAL CONDITIONInspection confirms the fitted arrangement is complete, labelled and accessible, with none of these defects or unsafe conditions: wrong tank indication, common sensor dependence, disabled alarm, incorrect set point, failed sounder or overdue test.FUNCTION TESTThe approved test method proves each channel from sensor simulation to audible and visual alarm, set point and independent power.ALARM AND INDICATIONLocal and remote indications, alarms, trips, interlocks and power supplies agree with the actual equipment condition.MAINTENANCEPMS tasks, calibration, service limits, defects and authorised repairs are traceable to the specific equipment.USER KNOWLEDGEResponsible personnel can locate the controls and explain sensor identity, alarm set points, independence, CCR and deck indication, acknowledgement, power and tank assignment, limitations and failure response.

Practice questions

Answer aloud, then open the preparation point.

1What is the purpose and operating limit of independent cargo-tank high-level and overfill protection?

Explain the protection provided by sensor identity, alarm set points, independence, CCR and deck indication, acknowledgement, power and tank assignment, including the condition that requires intervention.

2How is the complete operating path tested?

Use the approved safe test method to prove each channel from sensor simulation to audible and visual alarm, set point and independent power, including the final alarm, trip, movement or indication.

3What happens if the equipment is unavailable?

Notify the Master and terminal as applicable, stop or restrict the affected operation, establish approved compensating controls and obtain repair or formal authority.

4Show the latest maintenance and defect history.

Match the physical identity to PMS, calibration or service records and verify that any temporary control has been closed.

5Which indication proves the equipment is in its safe condition?

Identify the local and remote indication, its source, alarm set point and how a false or frozen signal would be detected.

Where an observation may arise

ARRANGEMENT CONFLICT

The fitted system, drawing, manual or certificate did not agree.

PHYSICAL DEFECT

Inspection identified wrong tank indication, common sensor dependence, disabled alarm, incorrect set point, failed sounder or overdue test.

INCOMPLETE TEST

Records did not prove each channel from sensor simulation to audible and visual alarm, set point and independent power through the complete operating path.

ALARM DEFECT

An alarm, trip, interlock or indication was isolated, incorrect, overdue for test or not understood.

MAINTENANCE GAP

PMS, calibration, service or repair evidence was missing, overdue or not traceable to the item.

KNOWLEDGE GAP

Responsible personnel could not explain sensor identity, alarm set points, independence, CCR and deck indication, acknowledgement, power and tank assignment, operating limitations or failure response.

Master's practical note

Trace one signal or flow path from the field device to the CCR or ECR and back to the final protective action. A successful local test alone may not prove the full system.

Questions reported during inspections

Anonymised user reports, not official OCIMF questions or a prediction of what an inspector will ask.

ProcessReported inspection question

A risk assessment, to enable continued cargo loading, discharge or transfer operations in the event of a failure of the cargo tank high-level or high-high-level alarm system or a single alarm for an individual cargo tank was not available at the time of inspection.

Oil tanker · Deck · Cargo control room · January 2026

Equipment boundary and references

Equipment boundary: Use approved test modes and maker instructions. Do not bypass an interlock, release cargo or defeat protection merely to satisfy an inspection demonstration.

References

OCIMF SIRE 2.0 Question Library Part 2, Version 1.0, Question 8.3.4
SOLAS Chapter II-2
IMO IBC Code
OCIMF ISGOTT, Sixth Edition

Last reviewed: 2026-09-14