Maritime Risk Management & Incident Investigation
Maritime Risk Management & Incident Investigation
Organisation
Course Materials
Handout
Activities
Photo Record
Practical Incident
Investigation & RCA
Practical information
Knowledge &
Smoking Mobile Emergency Time experience
Restrooms Certificate
policy phones exits keeping sharing
(c) DNV GL 1
Your Expectations about the course
Expectations
Course Structure
N
4. Theory & Activity
1. Navigator W E
S
2. Objectives
3. Scenario
(c) DNV GL 2
Learning Objectives
• Risk Management
• Investigation process principles and tools
• Application of investigation tools
• Methods for Gathering evidence
• Human element theory
• Interviewing
• Root cause analysis methods
Tanker “SINKFAST”
(c) DNV GL 3
More than 300 people died in the Sewol disaster (2014).
What are some of the causes of marine incidents?
Know and assimilate the basic concepts of events and loss causation
8 © DNV GL
(c) DNV GL 4
Some definitions A Recap
HAZARD
A source of potential harm or damage or a situation with potential
for harm or damage
SAFETY
9 © DNV GL
Some definitions
Loss – (can result from an Incident)
10 © DNV GL
10
(c) DNV GL 5
Some definitions
11 © DNV GL
11
Incidents …
ACCIDENT
Contact above
Expensive Learning The LOSS has
Thresh-hold
Value already occurred
(LOSS)
12 © DNV GL
12
(c) DNV GL 6
Some definitions
Risk = Effect of uncertainty on objectives
consequence of an action taken in spite of uncertainty.
13 © DNV GL
13
Some definitions
Substandard Conditions.
1. CAN BE IDENTIFIED
2. CAN BE RECTIFIED
14 © DNV GL
14
(c) DNV GL 7
Incident Model
Source: MODEL COURSE 3.11 MARINE ACCIDENT AND INCIDENT INVESTIGATION TRAINING MANUAL
15
Hazards
External Influences
Causes
Safeguard Failures
© DNV GL 16
16
(c) DNV GL 8
Safety Management System – Risk Management exercise
• Risk Assessment (RA) and Incident Investigation (II) are the two key
components of any safety management system. Together RA and II ensure
continuous improvement of safety through risk management.
PROACTIVE REACTIVE
SAFETY
ALARP MANAGEMENT
SYSTEM
17
Administrative
Physical
Supervisory
Responsible Persons
Threat 1 Outcome 1
Hazard
Consequences
Causes
Threat 2 Top
Events
Threat 3 Outcome 2
Preventing Mitigating
Barriers Barriers
Practical Incident Investigation & Root Cause Analysis
18
(c) DNV GL 9
ACCIDENT PREVENTION
RESPONSE TO CHANGES
MEN
MATERIALS
MACHINES
METHODS
ZERO IS ATTAINABLE !”
19 © DNV GL
19
SUBSTITUTE
{replace a hazard with something less hazardous}
ENGINEERING CONTROLS
{isolate people from hazards-Gaurds – Barriers}
ADMINISTRATIVE CONTROLS
{control the way people work. Procedures – Permit Culture – training,- signage
20
(c) DNV GL 10
REASON® ROOT CAUSE ANALYSIS
21
RESOLUTION MSC.255(84)
Practical Incident Investigation & Root Cause Analysis
22
(c) DNV GL 11
Scenario 1 – Principles of investigation
23
Accident Ratio
ACCIDENT RATIO STUDY
24 © DNV GL
24
(c) DNV GL 12
DECISION TREE FOR INCIDENT CLASSIFICATION
25 © DNV GL
25
26 © DNV GL
26
(c) DNV GL 13
ACCIDENT BEWARE - MEDIA FIRST ON SCENE !
27
Activity 1
28
(c) DNV GL 14
Requirements to investigate
http://www.imo.org/en/OurWork/MSAS/Casualties/Pages/Default.aspx
29
30
(c) DNV GL 15
Investigation Process Control the scene
Allocate resources
Evidence Collection
Systemizing facts
Analyse causes
No Yes
Need for more
information?
Follow-up
Practical Incident Investigation & Root Cause Analysis
31 Rev. 4.0
31
BUT
32
(c) DNV GL 16
Decision to investigate
Public expectations;
Availability of resources.
33
Information sources
Expert advice;
…..
34
(c) DNV GL 17
Scenario 2 – Determine loss potential
It is 0830hrs and you are at your desk with notes made after a telephone call
from the Master of the MT Sinkfast / MV Navigator earlier that morning reporting
a grounding / an incident.
There seems to be over 50 new emails on the screen since you logged off
yesterday evening ……….
35
Evaluate Full
risk if not Analysis
controlled if high
Practical Incident Investigation & Root Cause Analysis
36
(c) DNV GL 18
Risk Investigation PROBABILITY/ FREQUENCY
Highly Unlikely Possible Likely Highly Likely
Low local investigation
Unlikely
5% 15% 35% 75% 95+%
Medium Full investigation, discussion &
follow-up by management Never Occurred in Occurs in Occurs in Predicted to
occurred Industry Industry &/or Industry &/or occur during
High Management
involvement in
in Industry
over> 5
once during
last 5 years
Company
Annually
Company
X times/year
course of the
work
investigation & follow-up years
37
37 © DNV GL
37
Activity 2
38
(c) DNV GL 19
Who should investigate?
39
Follow-up
39
Investigator equipment
40
(c) DNV GL 20
Collection of data – Fact-finding
41
Evidence collection
42
Follow-up
42
(c) DNV GL 21
Parts Information
Suitable
Damage for the Safeguards
task
Previous Labels
Damage Wear and
tear Signs
Markings
43
Position Information
Before,
During, Use
drawings,
After
sketches,
the incident maps
Take
photographs
or video
44
(c) DNV GL 22
Direct or Real evidence (sequence of events)
45
46
(c) DNV GL 23
Drawings
47
Taking photos
48
(c) DNV GL 24
What to take pictures of...
View from
4 points
Practical Incident Investigation & Root Cause Analysis
49
50
(c) DNV GL 25
Some Advice on taking photos
51
Paper Information
Certificates
Maintenance
Training
Records
records Licenses
Minutes of
Meetings
Permits
Job Statements
procedures
52
(c) DNV GL 26
Paper information (example)
Paper information
Evidence provided by documented
information such as:
– Charts
– Checklists
– Records
– Logbooks
– Bell books
– Letters
– Manuals
53
Electronic Information
VTS
VDR GPS
CCTV
UMS
ECDIS Fire
Protection
54
(c) DNV GL 27
Electronic Information (example)
55
Because of the severity of the accident it has been decided to send two
investigators to the scene to collect evidence and interview crew members.
Based on the “Statement of Facts” the two investigators prepare a checklist for the
investigation.
56
(c) DNV GL 28
Activity 3
Investigation checklist
57
• Discovering how mismatches between system requirements and human capacity could
have caused or contributed to the occurrence,
58
(c) DNV GL 29
Human Errors & Human Factors
Acts/Practices Conditions
59
Human Errors
Practical Incident Investigation & Root Cause Analysis The Generic Error Modelling System (GEMS) (James Reason 1990)
60
(c) DNV GL 30
Human errors
61
62
(c) DNV GL 31
Human factors
63
Human Evidence
Liveware - L
Hardware - H
Software - S
Environment - E
AMENDMENTS TO THE CODE FOR THE INVESTIGATION OF MARINE CASUALTIES AND INCIDENTS
Practical Incident Investigation & Root Cause Analysis RESOLUTION A.849(20)
64
(c) DNV GL 32
SHEL model
Use of the SHEL model as an organizational tool for the investigator's workplace
system elements;
65
66 © DNV GL
66
(c) DNV GL 33
Activity 4
Human factors
67
Where to Follow up
interview after the
Condition
of people incident
at the
scene
Who to How to
interview handle
multiple
witnesses
68
(c) DNV GL 34
Planning interview
Do not wait with an interview– 50-80% details are lost within first 24hrs,
Witness rights,
………..
69
Potential witness
Eyewitnesses;
Technical experts;
Company personnel;
……
70
(c) DNV GL 35
Why ship board officers are key sources?
They know best how and where to get the information needed
71
Opening meeting
confirmation of understanding;
72
(c) DNV GL 36
Questioning techniques
Open
Closed
Analysing
EASY HARD
Clarifying
Critical
Precise
Leading
Collaborative attitude
73
Questions
Closed Questions
74 Rev. 4.0
74
(c) DNV GL 37
© DNV GL 75
75
© DNV GL 76
76
(c) DNV GL 38
Intercultural Communication – The Iceberg Model
77
Non-verbal Communication
78
(c) DNV GL 39
Non-verbal Communication
79
Non-verbal communication
80
(c) DNV GL 40
Facial expression
81
“All seafarers from whom evidence is sought shall be informed of the nature and basis of
the marine safety investigation. Further, a seafarer from whom evidence is sought shall be
informed, and allowed access to legal advice, regarding:
1. any potential risk that they may incriminate themselves in any proceedings
subsequent to the marine safety investigation;
2. any right not to self‐incriminate or to remain silent;
3. any protections afforded to the seafarer to prevent the evidence being used
against them if they provide the evidence to the marine safety investigation.”
82
(c) DNV GL 41
Cognitive interviewing
https://www.youtube.com/watch?v=3HwcMEwgWqQ
83
84
(c) DNV GL 42
Scenario 4 - The interview
The two investigators are now on board to get some more information regarding
the events leading to the accident. The investigators have decided to interview the
Pump Man (MT Sinkfast) / Chief Officer (MV Navigator) to clarify open items and to
collect evidence (pros and cons).
Open Questions
85
Activity 5
Conducting an Interview
86
(c) DNV GL 43
Incident Investigation Process
Evidence Collection
No Yes
Need for more
information?
Who, What, Where, When, How & Why
Findings and Report
87
Follow-up
87
88
(c) DNV GL 44
Incident investigation techniques (1)
Purpose 1:
Obtaining a full description of the sequence of events which led to the failure
Methods:
• Events and Causal Factors Charting
• Multiple Events Sequencing (MES)
• Sequentially Timed Events Plotting Procedure (STEP)
Purpose 2:
To ascertain the critical events and actions, and thus the direct causes of the incident
Methods:
• Barrier Analysis
• Change Analysis
• Fault Tree Analysis
89
90
(c) DNV GL 45
Events and causal factor charts
Control actions needs???
Condition
Personal
factors??? Condition
Job factors???
Substandard Condition
conditions???
91
92
(c) DNV GL 46
Sequential Time Event Plotting
93
94
(c) DNV GL 47
STEP Diagram for a Grounding Near-Miss
Event: What an actor does, or how the actor is a part in the chain of events
95 © DNV GL Rev. 4.0
95
The investigators are back in the office and start with the cause analysis.
The first step now is to visualize and organize the available accident data.
CONDITIONS
EVENTS
96
(c) DNV GL 48
Activity 6
STEP Diagram
97
Barrier Analysis
HAZARD
ENERGY
EQUIPMENT
PROCEDURES
BEHAVIOUR
98
(c) DNV GL 49
Barrier Analysis
SAFETY BARRIERS
ENERGY SOURCE VICTIMS
HAZARD
ENERGY
99
Barrier Analysis
Advantages Disadvantages
• Easy to use • Basic tool
• Efficient • Not for complex systems
• Further evaluation has to be done
Example: using other tools
• What were the • How did each • Why did the barrier • How did the
barriers? barrier perform? fail? barrier affect
the accident?
Oxygen content has Not sufficient, the The measuring device In a very severe
to be checked prior to oxygen content was was defective for way. This is a
the tank cleaning checked but the unknown reasons. It critical barrier that
device was defective was still displaying data has to function. It
so that the failure was is recommended
not detectable. to revise the
procedure for
oxygen measuring
100
(c) DNV GL 50
Scenario 7 – Evidence matrix
Based on the information available the two investigators establish a list with the
major findings, evidence related to the findings (pro and con) and source of
evidence.
101
Activity 7
Evidence matrix
102
(c) DNV GL 51
Activity 7 – Evidence matrix
103
104
(c) DNV GL 52
Fact Tree Analyses
2. Is it enough?
105
Collecting Facts
Schematic structure of the tree by asking the following
questions every time:
• What was needed?
• Was this necessary?
• Was this enough?
106
(c) DNV GL 53
What is Needed?
For an explosion:
– Explosive Mix
– Ignition
– Oxygen
For a grounding:
– Limited ship’s draft
– Depth shallower than ship’s draft
– Route crossing through shallow waters
107
108
(c) DNV GL 54
Was this Enough?
Verify that the facts needed for the event really are enough to
get that result.
If A = B + C
109
110
(c) DNV GL 55
Activity 8 – Creating Fact Tree
1 Needed
Necessary
but not Needed
Needed and
3 4 5 2 6 Necessary
Irrelevant
1: Explosion in pump Room
2: Explosive Atmosphere
3: Pump Room 7 8 9
4: Ship Alongside
5: Ignition
6: Survey Overdue
7: No Ventilation
8: No Gas detection
9: Gas leak
Practical Incident Investigation & Root Cause Analysis
111
Activity 8
112
(c) DNV GL 56
Analyse of causes
No Yes
Need for more
information?
113
Follow-up
113
1.Direct Causes
4.Soil Factors
Practical Incident Investigation & Root Cause Analysis
/”Environment”
114 © DNV GL Rev. 4.0
114
(c) DNV GL 57
The three “layers”
Immediate Causes:
– the first thing to identify
– sub-standard ACTS/ PRACTICES or CONDITIONS
– E.g.
Basic Causes:
– may be JOB factors or PERSONAL factors
– also called “basic-causes”
System Control:
– the formal or informal SYSTEM to manage the factors
– also called “root-causes”
– elements of the system (IMS)
115
Job Sub-
Factors Standard
Acts/
Policies
Job Subst
Practices
Controls
Factors Acts/
80% Practices
80%
Inadequate
Systems
Personal
Standards
Factors Sub-
Compliance
Standard
Conditions
116
(c) DNV GL 58
The DNV GL Loss Causation Model
How it happened
Inadequate Personal
• System Acts or Event Unintended
Factors Practices or Harm
• Standards
• Compliance Contact or
Job or Conditions Damage
System
Factors
Why it happened
117
What is Loss?
Threshold Limit
Inadequate
• System Personal Acts or Event Unintended
• Standards Factors Practices or Harm
• Compliance Contact or
Job or Conditions Damage
System
Factors
118
(c) DNV GL 59
Incident
Inadequate
• System Personal Acts or Event Unintended
• Standards Factors Practices or Harm
• Compliance Contact or
Job or Conditions Damage
System
Factors
119
Threshold Limit
Immediate Causes
Symptoms
Inadequate
• System Personal Acts or Event Unintended
• Standards Factors Practices or Harm
• Compliance Contact or
Job or Conditions Damage
System
Factors
120
(c) DNV GL 60
Basic Causes
Inadequate
• System Personal Acts or Event Unintended
• Standards Factors Practices or Harm
• Compliance Contact or
Job or Conditions Damage
System
Factors
121
Inadequate Personal
• System Acts or Event Unintended
Factors Practices or Harm
• Standards
• Compliance Contact or
Job or Conditions Damage
System
Factors
Inadequate System:
Too few system activities or System activities are inadequate
Inadequate Standards:
Standards not specific enough, not clear enough and/or not high enough.
122
(c) DNV GL 61
M-SCAT (example)
LACK OF BASIC CAUSES IMMEDIATE INCIDENT LOSS
CONTROL CAUSES
123
Activity 9
124
(c) DNV GL 62
Identify the root causes (example of a method)
125
No Yes
Need for more
information?
126
Follow-up
126
(c) DNV GL 63
Findings and Report
127
Follow-up
127
Safety recommendations
• Practical in application,
• Cannot be misinterpreted,
128
(c) DNV GL 64
Control Action Needs
Inadequate system
ISRS
Action Plan
Practical Incident Investigation & Root Cause Analysis
129
5. Compliance Assurance
6. Project Management
7. Training and Competence
8. Communication and Promotion
9. Risk Control
DO (Implement & Operate)
10. Asset Management
11. Contractor Management and Purchasing
12. Emergency Preparedness
13. Learning from Events
CHECK (Monitor & Measure)
14. Risk Monitoring
15. Results and Review ACT (Review)
Marine Systematic Cause Analysis Technique (MSCAT)
130
© DNV GL
130
(c) DNV GL 65
Findings and Report
131
Follow-up
131
132
Follow-up
132
(c) DNV GL 66
Scenario 9 – Safety recommendations
133
Activity 10
Safety recommendations
134
(c) DNV GL 67
QUESTIONS ?
www.dnvgl.com
135
(c) DNV GL 68
USEFUL INTERNET LINKS
International Organizations
Name Homepage Remark
International Summaries of MSC and MEPC
Maritime meetings (amendments of
www.imo.org
Organisation conventions), description major
(IMO) conventions, status of instruments
European
Maritime Safety www.emsa.europa.eu Marine casualties and incidents
Agency (EMSA)
Oil Companies OVMSA Guide
International TMSA Guide
www.ocimf.org
Marine Forum
(OCIMF)
International Interpretations ISM, STCW, MLC
Chamber of www.ics-shipping.org
Shipping (ICS)
International Quality Management Standards
Standardization
www.iso.org
Organization
(ISO)
UK P&I Club Claims and incidents
www.ukpandi.com
Classification Societies
Name Homepage Remark
Rule application and guidelines,
IACS www.iacs.org.uk description tasks of CS`s, IACS
membership
Classification rules,
surveys and certificates, class
DNVGL www.dnvgl.com
notations, authorizations on
behalf of flag states
2 DNV GL © 2015
Root Cause Analysis and MSCAT
T
H
R
Control Basic Immediate
Incident E Loss
Areas
Lack Causes
Lack Causes
Lack Lack S
Lack
H
O
of
Inadequate: of
Personal of
Substandard ofEvent L ofPeople
Factors Acts/Practices D Property
Contr
• Programme Contr Contr Contr L
Contr
Equipment
• Standards Job/System Substandard Process
ol
• Compliance ol
Factors ol
Conditions ol I
M ol
Environment
I
T
3 DNV GL © 2015
MSCAT Software Functions
Use this simple software on your phone, tablet or desktop and begin driving down
your accident rates and improving organisational performance.
4 DNV GL © 2015
Screen Shots
Tried and tested analysis Learn the keys steps of Understand the root Test your knowledge
tool incident investigation causes of high potential
events
5 DNV GL © 2015
MSCAT License Scheme
MSCAT is supplied under license. The benefits of having an MSCAT license are:
• MSCAT chart customised with your own logo in PDF format
• MSCAT manual explaining how to use MSCAT for incident investigation
• Unlimited users on MSCAT Software
6 DNV GL © 2015
ISRS Product Centre
[email protected]
www.dnvgl.com/isrs
7 DNV GL © 2015
Activities
ACTIVITY 1: PRINCIPLES OF INCIDENT INVESTIGATION
Objectives
To review the key terminology used in incident investigation
To focus on the main principles of marine safety investigation.
Material
Task Description
• Group work,
• Each group must prepare and present selected sections from CIC,
Duration
Time: 15 min for preparation
Purpose
1.1 The objective of this Code is to provide a common approach for States to adopt in
the conduct of marine safety investigations into marine casualties and marine
incidents. Marine safety investigations do not seek to apportion blame or
determine liability. Instead a marine safety investigation, as defined in this Code,
is an investigation conducted with the objective of preventing marine casualties
and marine incidents in the future. The Code envisages that this aim will be
achieved through States:
.1 applying consistent methodology and approach, to enable and encourage a
broad ranging investigation, where necessary, in the interests of uncovering
the causal factors and other safety risks; and
.2 providing reports to the Organization to enable a wide dissemination of
information to assist the international marine industry to address safety
issues.
1.2 A marine safety investigation should be separate from, and independent of, any
other form of investigation. However, it is not the purpose of this Code to preclude
any other form of investigation, including investigations for action in civil, criminal
and administrative proceedings. Further, it is not the intent of the Code for a
State or States conducting a marine safety investigation to refrain from fully
reporting on the causal factors of a marine casualty or marine incident because
blame or liability, may be inferred from the findings.
1.3 This Code recognizes that under the Organization’s instruments, each flag State
has a duty to conduct an investigation into any casualty occurring to any of its
ships, when it judges that such an investigation may assist in determining what
changes in the present regulations may be desirable, or if such a casualty has
produced a major deleterious effect upon the environment. The Code also takes
into account that a flag State shall* cause an inquiry to be held, by or before a
suitably qualified person or persons into certain marine casualties or marine
incidents of navigation on the high seas. However, the Code also recognizes that
where a marine casualty or marine incident occurs within the territory, including
the territorial sea, of a State, that State has a right** to investigate the cause of
any such marine casualty or marine incident which might pose a risk to life or to
the environment, involve the coastal State’s search and rescue authorities, or
otherwise affect the coastal State.
* Reference is made to the United Nations Convention on the Law of the Sea (UNCLOS),
article 94 or requirements of international and customary laws.
** Reference is made to the United Nations Convention on the Law of the Sea (UNCLOS),
article 2 or requirements of international and customary laws.
Definitions
When the following terms are used in the mandatory standards and recommended
practices for marine safety investigations they have the following meaning.
2.1 An agent means any person, natural or legal, engaged on behalf of the owner,
charterer or operator of a ship, or the owner of the cargo, in providing shipping
services, including managing arrangements for the ship being the subject of a
marine safety investigation.
2.2 A causal factor means actions, omissions, events or conditions, without which:
.1 the marine casualty or marine incident would not have occurred; or
.2 adverse consequences associated with the marine casualty or marine
incident would probably not have occurred or have been as serious; or
.3 another action, omission, event or condition, associated with an
outcome in .1 or .2, would probably not have occurred.
2.3 A coastal State means a State in whose territory, including its territorial sea, a
marine casualty or marine incident occurs.
2.4 Exclusive economic zone means the exclusive economic zone as defined by
article 55 of the United Nations Convention on the Law of the Sea.
2.5 Flag State means a State whose flag a ship is entitled to fly.
2.6 High seas means the high seas as defined in article 86 of the United Nations
Convention on the Law of the Sea.
2.7 Interested party means an organization, or individual, who, as determined by
the marine safety investigating State(s), has significant interests, rights or
legitimate expectations with respect to the outcome of a marine safety
investigation.
2.8 International Safety Management (ISM) Code means the International
Management Code for the Safe Operation of Ships and for Pollution Prevention as
adopted by the Organization by resolution A.741(18), as amended.
2.9 Marine casualty means an event, or a sequence of events, that has resulted in
any of the following which has occurred directly in connection with the operations
of a ship:
.1 the death of, or serious injury to, a person;
.2 the loss of a person from a ship;
.3 the loss, presumed loss or abandonment of a ship;
.4 material damage to a ship;
.5 the stranding or disabling of a ship, or the involvement of a ship in a
collision;
.6 material damage to marine infrastructure external to a ship, that could
seriously endanger the safety of the ship, another ship or an individual; or
.7 severe damage to the environment, or the potential for severe damage
to the environment, brought about by the damage of a ship or ships.
However, a marine casualty does not include a deliberate act or omission, with the
intention to cause harm to the safety of a ship, an individual or the environment.
2.10 A marine incident means an event, or sequence of events, other than a marine
casualty, which has occurred directly in connection with the operations of a ship
that endangered, or, if not corrected, would endanger the safety of the ship, its
occupants or any other person or the environment.
Chapter 16
PRINCIPLES OF INVESTIGATION
16.1 Independence: A marine safety investigation should be unbiased to ensure the
free flow of information to it.
16.1.1 In order to achieve the outcome in paragraph 16.1, the investigator(s) carrying
out a marine safety investigation should have functional independence from:
1. the parties involved in the marine casualty or marine incident;
2. anyone who may make a decision to take administrative or disciplinary action
against an individual or organization involved in a marine casualty or marine
incident; and
3. judicial proceedings;
16.1.2 The investigator(s) carrying out a marine safety investigation should be free of
interference from the parties in 1, 2 and 3 of paragraph 16.1.1 with respect to:
1. the gathering of all available information relevant to the marine casualty or
marine incident, including voyage data recordings and vessel traffic services
recordings;
2. analysis of evidence and the determination of causal factors;
3. drawing conclusions relevant to the causal factors;
4. distributing a draft report for comment and preparation of the final report; and
5. if appropriate, the making of safety recommendations.
16.4 Priority: A marine safety investigation should, as far as possible, be afforded the
same priority as any other investigation, including investigations by a State for criminal
purposes being conducted into the marine casualty or marine incident.
16.4.1 In accordance with paragraph 16.4 investigator(s) carrying out a marine safety
investigation should not be prevented from having access to evidence in circumstances
where another person or organization is carrying out a separate investigation into a
marine casualty or marine incident.
16.4.2 The evidence for which ready access should be provided should include:
1. survey and other records held by the flag State, the owners, and classification
societies;
2. all recorded data, including voyage data recorders; and
3. evidence that may be provided by government surveyors, coastguard officers,
vessel traffic service operators, pilots or other marine personnel.
Objectives
Material
• Statement of facts
• Worksheet for the risk assessment
• Risk matrix
Scenario
See relevant „Statement of Facts“
Exercise
Task: Identify the loss potential of the incident in order to decide on:
• The size and composition of the team and the degree of detail of the investigation
@ DNV GL
Activity 2 | Rev. 1.0
SINKFAST - Ship Details
The cargo pump room is situated between the forward engine room bulkhead and the after bulkheads
of No 5 Port, Centre and Starboard Cargo tanks and extends upwards from keel plate to poop deck
level.
18 September 16:36 arrival at terminal and tied up; 16:50 satisfactory completion of ship/shore safety checklist;
16:53 commenced sampling and ullage taking; 18:10 cargo discharge plan approved; 19:15 all checks
completed; 19:30 line and valve setting completed, ready for discharging;
20:00 commenced discharging with Nos 1 and 2 cargo pumps discharging naphtha via No 2 manifold and No 3
cargo pump discharging gasoil via No 3 manifold. Chief Officer handed over the watch to the Third Officer and
the Pump Man.
At 24:00 the watch was taken over by the 12-4 Second Officer together with an AB. For handover both the
Pump Man and the 12-4 Second Officer inspected the pump room and noted a small leakage at pump No.
3 seal. During the next four hours two more visits were made to the pump room to have a look at the
leakage of No. 3 pump seal. At 04:00 the Chief Mate was informed about the leakage. At 06:00 the Chief
Officer asked the Chief Engineer to have look at No. 3 pump. At 06:30 discharging of gasoil with No. 3
pump was completed. 06:45 gasoil discharging lines flushed 07:45 discharging of naphtha completed but
the cargo lines were still partly filled up with cargo 07:50 Chief Engineer ordered the fitter to assist the pump
man in a few small repair jobs in the pump room. 08:05 Pump Man instructed the fitter to start loosening the
bolts of the seal of no 3 Cargo pump, which had been used to discharge gas oil and was already drained and
emptied by him. 08:10 Pump Man left pump room for line and valve setting. 08:20 Explosion in the pump room.
08:30 Master called shore for assistance; 08:40 Fire brigade equipped with SCBA equipment entered pump
room to search for the fitter; 08:50 Fitter found close to the forward pump room bulkhead with severe injuries
08:55 Shore rescue team arrived 09:00 Fitter evacuated to ship’s hospital and after first aid was hospitalized.
The fitter has been thrown by the shock wave against the forward bulkhead causing severe injuries.
© DNV GL Activity 2
Activity 2 –Identify loss potential
The objective is to identify the potential loss and to decide on the scope and timing of the investigation.
Hazard
Risk
(Activity and Consequences
condition (Loss Potential) Timing of Scope of Resources
Event Probability (if not
prior Investigation Investigation required
incident) controlled)
Low Medium High
Evaluation of loss potential starts with identification of a hazards which are represented by safety significant activities leading up to the incident. The activities are
analyzed to determine what actions occurred or conditions were present during the time leading up to the event and present an unacceptable level of risk.
Such actions and/or conditions are identified as hazards and risk assessments are carried out.
Risk is assigned to hazard by determining probability of the hazard occurring and the consequences of that hazard.
1. Is there a history of event like this one or is this an isolated case? (in the organization, in the industry)
2. How many similar events were there under similar circumstances in the past?
3. How many pieces of equipment are there that might have similar defects?
4. How many operating or maintenance are following or are subject to the practices or procedures in question?
5. To what extent are there organizational, management, or regulatory implications which might reflect larger systemic problems?
6. What percentage of the time is the suspect equipment or the questionable procedure or practice in use? (regular practice, main activity on board)
Objectives
To learn application of SHELL model during human factors analysis.
Material
• Statement of facts from Ac_2
• Ac4_SHELL model definitions from the next page
Task Description
Read description of SHELL model elements.
Read provided sample situations and assign them to appropriate component from the SHELL
model.
Duration
Time: 10 min for preparation
Objectives
Material
• Statement of facts from Activity 2 (both cases)
• Pump room explosion summary
• Grounding summary
• Flip chart paper + sticky notes
Method
Group exercise. With use of Materials create STEP diagram. Guidelines from slide 96 are
to be used for references.
The Russian fitter was only 2 days on board and not yet familiar with the pump room lay
out. The Indian pump man told him to start loosening the bolts of the seal of no 3 Cargo
pump, which had been used to discharge gas oil and was already drained and emptied by
him. The pump man told him the tools were in the pump room and went to the deck store
for a small chainblock.
The fitter went down and found some tools close to the third pump from sb side, assuming
this was cargo pump number three. In reality however, the first two pumps on sb side
were the ballast pumps, thus the pump, the fitter choose was cargo pump no 1, which had
unfortunately been used to discharge Gasoline. Being familiar with repairing seals, he
climbed down under the floor plates and tried to loosen the bolts, which were heavily
corroded. Apart from this, the working position was difficult, which prevented him to
exercise enough power on the spanner. As he had still a lot of jobs to do, he was in a
hurry and decided to use a steel hammer to exercise extra impact power in the spanner,
thinking the cargo not being explosive (gas oil).
As he hit the spanner a few times, suddenly the bolt broke and at the same time an
explosion
During the investigation interviews it appeared that the Indian pump man had told him to
take the cargo pump on the port side, which was obviously not understood by his
colleague. It also appeared that:
The ventilation was not switched on, because it was out of order for some time.
The Chief Engineer had ordered the necessary spares already a few months ago, but the
purchasing dept. tried to find a cheaper alternative.
The amount of spares needed for this old vessel was such, that the budget was already
was exceeded after 8 months and the Company tried to save money as much as possible.
Only critical items (needed for the operation of the ship) were ordered without delay, for
the other items, cheaper alternatives had to be found. The spares for the ventilator were
not on any list of critical items.
This list was just a standard list, copied from the list for the general cargo ships; there
was not yet much experience with tankers in the company; in fact this was the first and
only tanker.
Special tools were available, but in a special locker in the pump room; which the fitter was
not aware of.
After further investigation it also appeared that the fitter had only experience on board of
dry cargo vessels. He had made a general safety familiarization tour with the third mate,
but there had not yet been enough time to familiarize him on his jobs
He was hired because of a high turnover rate of personnel in the company. This was
influenced by long contracts in combination with a demanding trade (frequent and short
voyages in the North Sea area )
Lack of skilled manpower was discussed during safety meetings, the Master and senior
officers being aware of the hazards, had requested extra skilled repairmen to get the most
critical jobs done, this was discussed with the superintendent, who found it a delicate
matter. And had told the captain to discuss it with the crewing department
The DPA, being the Technical Manager (and the superior of the superintendent), promised
to try and get things done during next dry-dock.
A work permit system was in use, but only issued by the chief officer, who did not know
anything about this repair.
Objectives
• How to use the evidence matrix to document evidence as pro or con for
an incident hypothesis
Material
• Statement of facts from previous activities
• Results of the Interviews
• Flipchart and pens
Exercise
Establish the pro and con evidence for YOUR accident hypothesis:
Read the accident scenarios and fill in the evidence matrix and ask yourself how the
hypothesis can be supported or denied.
Objectives
To practice creation of fact tree.
Material
• Ac_7_evidence_matrix
Task Description
Group work.
Task1
Read description of fact tree analysis from the page below. Perform provided
exercises to improve your understanding of the process.
Task2
In groups, create fact tree to MT Sinkfast and/or MV Navigator cases using all
available materials.
Duration
Time: 45 min for preparation
EXAMPLE
1. First find the END FACT: in this case : Cannot stop in time
2. What was required to cause this fact? Fact 4: Brakes work insufficiently
3. Is this required at this stage? Yes, if the brakes work properly you can stop in
time.
4. Is this enough to cause the fact? Yes, properly working brakes will assure you
can stop in time.
So: fact 4 is to be placed before fact 2.
4 2
6. What is required to get poorly functioning brakes? They do not function properly
because of 1. Brakes were not maintained.
4 2
EXERCISE
3
1. Mr. X who’s standing in the elevator, panics
2. Mr. X gets unwell
3. The elevator gets stuck between two floors
4. Mr. X has a heart condition
In each of the following exercises four facts are given in random order. Three possible
fact trees are given (marked A, B and C respectively). Only one of these trees is correct.
Choose the correct tree of exercise.
1. Chemical suits were not inspected with frequency required by the manufacturer.
2. OS was not able to use the chemical suit of his size because of defective zipper.
3. OS experienced skin burns during sampling of corrosive cargo.
4. No chemical suit was used during sampling operation.
1 2 4 3
3 3
1 4
B 2 2 4
1
C
3
3
2 4
B 2
1
1 4 C
1 3 2 4
Tree 2
4 2 3 1
B 2
C
@ DNV GL Incident Investigation | Rev. 3.0 Page 4 of 7
1 4
Tree 3
1
2 1
4 3
3 B
2
C
Tree 4
1. Cultural issue 1 4
A 2
3. Not experienced lookout
1
B
4 2 1
4 2
3 3
C
6. Vessel aground
C
2 3 6
B 4
4 6
1
1 3 5
Construct the Fact Tree, starting with the End Fact (or End Facts) working your way
back from cause to cause using available information.
FACTS TREE