Lesson previewMake the Safety System Operate1 section shown
Preview lesson
Make the Safety System Operate
What you will learn
Explain how policy, risk assessment, roles, procedures, maintenance, emergency readiness, records and review form one operating loop rather than a folder of independent forms.
A Safety Management System is credible only when it changes what people prepare, do, stop, record and improve on the real vessel.
The current Sport or Pleasure Vessel Code and Workboat Code Edition 3 each require an appropriate, proportionate Safety Management System for vessels in their scope. Their detailed structures are not identical, and transition provisions matter, but both connect policy, risk assessment, responsibility, training, operating and emergency procedures, accident reporting, maintenance and review. The applicable code, certificate and operator system must be identified before using any requirement on a real vessel.
Treat the system as a closed loop: define the safety boundary and authority; plan from actual risks; prepare competent people and ready equipment; operate through controlled procedures; detect departures and weak signals; control and record them; then review whether the system itself needs to change. A checklist can support one part of that loop, but a tick cannot close an unresolved defect, prove understanding or replace a named decision owner.
MGN 710 is specific to small workboats and pilot boats in its scope. It explains that an owner or operator may use a proportionate self-assessment to demonstrate implementation, while a Certifying Authority samples evidence for limited assurance and does not design, audit in detail or assume responsibility for the SMS. This module cannot create or assess a live SMS, decide which code applies, conduct an audit or prove compliance, competence or operational safety.
Operational safety-management loop
Keep every open condition visible until evidence closes it
Select a constructed vessel case. Compare the observation, current status, immediate control, named owner and exact reopening evidence.
Intermittent steering alarm
The pre-departure steering test produces an intermittent alarm. It clears after the controls are cycled, but no authorised technical inspection has taken place.
- 1Detect
- 2Verify
- 3Set status
- 4Control
- 5Assign and record
- 6Reopen or learn
- Detect
- Record the exact indication, time, test conditions and what changed; do not replace the observation with a guessed diagnosis
- Verify
- Use the applicable operator and manufacturer procedure, defect history, required tests and competent technical route
- Set status
- Keep steering reliability unresolved; a cleared display is not evidence that the underlying condition is safe
- Control
- Hold the affected departure or apply only an authorised restriction while the operator obtains competent technical assessment
- Assign and record
- Name the master, operator and technical action owner; preserve notifications, tests, advice and the current vessel status
- Reopen or learn
- Reopen only on the specified inspection, rectification and verification evidence, then review recurrence and the test procedure
Supported next state
The system keeps the vessel in an explicit unresolved state until authorised evidence supports a fresh whole-operation decision.
Authority boundary
The board cannot diagnose the alarm, prescribe a repair, approve an operational restriction or return a real vessel to service.
Constructed revision cases only; the board cannot diagnose a defect, inspect equipment, approve a restriction, audit a system or return a real vessel to service.
Worked example
A pre-departure steering test gives an intermittent alarm that clears after the controls are cycled. The passenger schedule is due to start in twenty minutes.
- 1Record the observed alarm, timestamp and test conditions without guessing at the cause.
- 2Keep steering reliability as an open condition and use the controlled operator and manufacturer procedure plus competent technical support.
- 3Protect the master's decision from the schedule: hold the affected departure or use only a formally authorised alternative that addresses the actual uncertainty.
- 4Assign the technical action and record the exact inspection, rectification and verification evidence required before a fresh readiness decision.
Sense check: A display that has stopped alarming is a changed observation, not proof that steering reliability has been restored.
| Loop stage | Operational evidence | False closure |
|---|---|---|
| Define | Applicable framework, policy, authority and stop boundary | The vessel is coded |
| Plan | Current risks, people, vessel, route and controls | Last trip was fine |
| Prepare | Competence, familiarisation, maintenance and required records | Everyone signed the sheet |
| Operate | Controlled procedures and live observations | The checklist was printed |
| Respond | Status, control, owner, deadline and reopening evidence | The alarm cleared |
| Improve | Findings, trends, changed procedures and verified closure | We discussed it informally |
Trace one condition through the whole loop
Choose one open item and make the connection between observation, authority, control, evidence and learning visible.
1. State
Separate what was observed from diagnosis, severity and the current authorised operating status.
2. Control
Name the immediate exposure control, responsible owner, deadline and evidence required to reopen.
3. Learn
Ask whether recurrence, a failed check or confused action shows that the procedure, training or maintenance system must change.
Sense check: If the record contains only a tick or the word fixed, the loop cannot show what evidence closed the condition or what should prevent recurrence.
Common mistake or limitation
- Treating SMS as paperwork prepared for an examiner rather than a system that controls today's operation.
- Assuming a Certifying Authority's sample transfers responsibility for design, effectiveness or outcomes away from the owner or operator.
- Applying Workboat Code, Sport or Pleasure Vessel Code or MGN 710 wording without checking the real vessel's applicable and transitional framework.
Recap
- Safety management connects policy, risk, people, procedures, equipment, records and review.
- An open condition needs status, control, ownership and exact reopening evidence.
- A checklist or sampled examination does not by itself prove effective implementation.
- The applicable code and controlled real-world system remain authoritative.
Optional quick check
Section 1 of 1