Maritime analysis. Real-time insight.

QUESTION 8.7.8

Shuttle-tanker DP FMEA

OilDocumentation, Bridge, Engine Control Room, Chief Engineer's Office

What is being checked

The inspector is checking whether the vessel's arrangements for use and maintenance of the DP FMEA and proving trials are planned, understood and executed using vessel-specific limits, verified line-up, effective communication and traceable records.

Ready onboard

0/6 complete

Practice questions

Answer aloud, then open the preparation point.

1What are the critical controls for use and maintenance of the DP FMEA and proving trials?

Explain the vessel-specific sequence, limits and safeguards for worst-case failure design intent, redundancy groups, hidden failures, annual trials, modifications, operational limits and activity-specific capability.

2How was the line-up independently verified?

Identify both verifiers, the physical route checked, valve-position confirmation and the record completed before starting.

3What conditions require the operation to stop?

Stop for loss of communication, unexpected pressure or level, leakage, alarm, incorrect line-up or any of these specific failures: FMEA not matching plant, untested failure, overdue trial, modification without analysis, wrong redundancy assumption or operation beyond capability.

4Show the most recent complete operation.

Trace the plan through approved FMEA, proving trials, annual DP trials, modification review, ASOG or equivalent and defect history, including any deviation and its authorisation.

5What is the first response to an abnormal condition?

Stop or stabilise the operation, raise the alarm, isolate the source where safe, verify tank and system condition and coordinate with the terminal and Master.

Where an observation may arise

PROCEDURE GAP

The vessel procedure did not adequately address worst-case failure design intent, redundancy groups, hidden failures, annual trials, modifications, operational limits and activity-specific capability.

GENERIC PLAN

The plan was copied or did not reflect the actual cargo, tank condition, terminal limits or equipment status.

LINE-UP ERROR

A critical valve or connection was not independently checked, or the recorded position conflicted with the physical system.

KNOWLEDGE GAP

Responsible personnel could not explain their limits, monitoring duty, communications or stop-work authority.

RECORD CONFLICT

The plan, log or checklist could not be reconciled with approved FMEA, proving trials, annual DP trials, modification review, ASOG or equivalent and defect history.

ABNORMALITY UNCONTROLLED

The response did not adequately control FMEA not matching plant, untested failure, overdue trial, modification without analysis, wrong redundancy assumption or operation beyond capability.

Master's practical note

Use the latest real operation, not a model checklist. Follow one critical parameter from the agreed plan to the CCR display, deck condition and final record.

Equipment boundary and references

Equipment boundary: Apply the vessel's approved cargo manuals, cargo-specific data, terminal agreement and company limits. Do not operate cargo equipment solely to demonstrate it during an inspection.

References

  • OCIMF SIRE 2.0 Question Library Part 2, Version 1.0, Question 8.7.8
  • IMO MSC.1/Circ.1580
  • IMCA M 166
  • IMCA M 190

Last reviewed: 2026-09-14