Question 1

The bosun reports that the emergency fire pump in the pump room needs inspection. The pump room is a confined space and the pump is electrically driven. Describe the Permit to Work requirements.

Accepted Answer

ENCLOSED SPACE + ELECTRICAL ISOLATION — PTW REQUIREMENTS: TWO SEPARATE HAZARDS: (1) CONFINED SPACE ENTRY HAZARDS: pump rooms are designated enclosed/confined spaces under the Code of Safe Working Practices (COSWP). Hazards include: (a) Oxygen deficient or enriched atmosphere; (b) Toxic vapours (cargo residues, hydrogen sulphide from ballast tanks); (c) Flooding; (d) Engulfment; (2) ELECTRICAL ISOLATION HAZARD: the electric pump must be isolated before any person enters the space near energised equipment; PTW REQUIREMENTS — DUAL PROCESS: (a) ENCLOSED SPACE ENTRY PERMIT: (i) Atmospheric testing BEFORE entry: O2 19.5-23.5%, flammable gas Enclosed space entry fatality statistics: the MAIB and IMO have repeatedly reported that enclosed space entry is one of the leading causes of maritime fatalities. In many cases, would-be rescuers also die — precisely because they enter without SCBA when they see a colleague collapse. COSWP Chapter 17 is explicit: the standby person MUST NOT enter the space to attempt rescue without SCBA. This seems counter-intuitive (watching a colleague collapse without acting) — but the statistics show that entering without protection kills the rescuer without saving the casualty. LOTO for low-voltage systems: option D reflects a dangerous misconception. LOTO (Lock Out Tag Out) is required for ANY electrical isolation where a person could be harmed by inadvertent energisation — regardless of voltage. 240V AC (low voltage) is sufficient to cause cardiac fibrillation and death. A fire pump running at 440V AC that is started remotely while a person is working on it would be fatal. The local control panel switch (option D) can typically be overridden from the switchboard, bridge, or remote start systems. Only a proper LOTO at the switchboard with the breaker locked off provides adequate protection. Compartmentalised PTWs: pump room entry requires the PTW to cover ALL hazards — atmospheric AND electrical. Option C implies these can be separated and managed independently. In practice, the entry permit must cross-reference any electrical isolation permits and vice versa — they are interdependent. No PTW for bosun (option B): PTWs are required for ALL confined space entry without exception on a well-run vessel. The fact that it is the bosun (an experienced senior rating) does not remove the requirement. Experience does not protect against an oxygen-deficient atmosphere.

Question 2

Your vessel has a UMS (Unattended Machinery Space) notation. At 0200 a UMS alarm activates on the bridge. As Officer of the Watch, describe your response, and what does the master need to ensure is in place for UMS operations?

Accepted Answer

UMS ALARM RESPONSE AND MASTER's UMS OBLIGATIONS: SOLAS REGULATION II-1/46-54 (UMS REQUIREMENTS): UMS notation means the engine room can be operated without a watchkeeper present during normal operations. Requirements include: (a) Automatic alarm systems for all critical machinery; (b) Bridge control systems; (c) Adequate fire detection and fixed fire suppression; (d) Periodic rounds by the duty engineer at intervals (typically 30-60 minutes as per SMS); (e) ENGINEER ON CALL: the duty engineer must be immediately available and must respond to alarms within a defined time (typically 10 minutes to the engine room); UMS ALARM AT 0200 — OOW RESPONSE: (1) ASSESS THE ALARM: identify which alarm — high temperature, low pressure, overload, flooding alarm. Each has different urgency. Check alarm panel for source; (2) WAKE THE DUTY ENGINEER: immediately. The duty engineer responds to all UMS alarms. The OOW does not go to the engine room — their station is the bridge; (3) CALL THE MASTER: UMS alarms at 0200 = call the master as per standing orders. The master determines the response level; (4) MAINTAIN SAFE NAVIGATION: the OOW remains on the bridge. Do not compromise bridge watchkeeping for an engine room alarm — you cannot manage both; (5) MONITOR THE ALARM: note the time, the alarm type, the action taken; MASTER's UMS REQUIREMENTS: the master must ensure: (a) UMS standing orders are in place specifying which alarms require immediate master notification; (b) Engineer on-call duty roster is maintained; (c) SMS procedures for UMS operations are followed; (d) UMS audits are conducted and recorded; (e) The manual for UMS operations is available. SOLAS II-1 Part G (Periodically Unattended Machinery Spaces): SOLAS Regulation II-1/46-54 sets the technical standards for UMS operations. These include mandatory alarm systems, bridge control capability, and requirements for rapid engineer response. Most class societies (Lloyd's, DNV) issue a "UMS" notation on the classification certificate when the vessel meets these standards. Duty engineer response time: most class society UMS requirements and SMS procedures specify that the duty engineer must respond to an alarm within a defined time — typically 10-15 minutes. This is why the engineer is required to live on board (or be immediately contactable). A duty engineer who cannot be raised = UMS procedure failure = immediate master action required. OOW leaving the bridge (option C): the OOW's primary duty is safe navigation of the vessel. Abandoning the bridge to investigate an engine room alarm is a dereliction of watchkeeping duty. STCW A-VIII/2 requires an OOW to maintain continuous watch on the bridge. If the OOW leaves — someone else must take the watch (and that person must be qualified). "False alarm until confirmed" (option D): this attitude is dangerous and professionally unacceptable. Every alarm must be treated as genuine until established otherwise. A UMS alarm for high bilge water that is dismissed as "likely a false alarm" while the engine room floods would be catastrophic. The alarm system exists because the engine room is unmanned — a delayed response could allow a manageable situation to become an emergency. Alarm acknowledgment logging: every UMS alarm acknowledged on the bridge must be logged with time, alarm type, and action taken. This is an ISM SMS requirement and a PSC inspection target.

Question 3

Your vessel uses high-voltage (6.6kV) electrical systems for bow thrusters. A crew member without electrical certification asks to work near the high-voltage switchboard. What are your obligations?

Accepted Answer

HIGH VOLTAGE ELECTRICAL SAFETY — MASTER's OBLIGATIONS: HIGH VOLTAGE ON MODERN VESSELS: modern large vessels (container ships, LNG carriers, cruise ships) frequently use high-voltage distribution systems (3.3kV, 6.6kV, or 11kV) for large motors (thrusters, pumps, compressors). SOLAS II-1 and IEC 60092 standards govern the installation. CRITICAL SAFETY PRINCIPLE — HIGH VOLTAGE: high voltage (defined as >1000V AC or >1500V DC) can cause: (a) Electrocution — very fast (40mA through the heart is lethal at 6.6kV); (b) Arc flash — potentially hundreds of kilojoules of energy in milliseconds, causing severe burns, blindness, hearing damage; (c) Blast injuries; COMPETENCE REQUIREMENT: work on or near high-voltage electrical systems requires: (a) STCW Regulation III/1 (Electro-Technical Officer — ETO) or equivalent electrical certification; (b) Company-specific HV permit to work (PTW) system; (c) Approved Electrician qualification (typically national electrical certification); (d) HV safety training (IET/UK standards or equivalent); MASTER's OBLIGATION: (1) DO NOT PERMIT uncertified crew to work near HV switchboards — this is an absolute prohibition; (2) ISOLATION FIRST: high-voltage circuits must be isolated, locked off, and tested dead (LOTO — Lock Out Tag Out) before any work can be done near them; (3) PTW MANDATORY: a comprehensive Permit to Work is required for any HV electrical work; (4) ONLY QUALIFIED PERSONS: ETO, Chief Engineer with HV certification, or a shore specialist approved by the company; (5) SAFE DISTANCE: even near an energised HV switchboard — non-qualified persons must be kept at a safe distance (minimum approach distance per IEC standards varies — typically 300mm for 6.6kV). Arc flash energy at 6.6kV: an arc flash event at 6.6kV in a medium-voltage switchboard can release energy measured in tens to hundreds of kilojoules — sufficient to cause third-degree burns across the body at distances of several metres, and to destroy switchgear. Protective equipment against arc flash (arc flash suit, face shield rated to the incident energy level) is a specialised requirement beyond ordinary PPE. Rubber gloves (option B): rubber insulating gloves rated to the working voltage are required PPE for HV work — but they are ONE component of the required PPE and competence. Rubber-soled shoes provide minimal protection against high-voltage electrocution. The idea that basic PPE substitutes for HV competence and certification is extremely dangerous. Master responsibility for crew safety: the master bears responsibility for crew safety under ISM Code, SOLAS, and MLC. The chief engineer manages technical systems — but the MASTER has overarching duty of care for all crew. A master who permits uncertified crew to work near HV systems and a fatality results faces potential gross negligence liability. LOTO — Lock Out Tag Out: LOTO is the internationally recognised procedure for making electrical systems safe before work. At 6.6kV: (a) Identify and isolate the circuit; (b) Lock the isolation switch in the OFF position (padlock); (c) Tag the lock with the worker's identity; (d) Test that the circuit is dead (with an approved HV voltage detector); (e) Earth the circuit before working on it. Only after all steps are complete can work begin. "Awareness training" (option D): general electrical awareness training is not sufficient for HV systems. HV competence is a specific higher-level qualification. Even under ETO supervision — an unqualified person assisting with HV work is at risk if an unexpected event occurs (arc flash, accidental energisation).