- Enter the IMCA Awards 2024: We\'re looking for outstanding Safety, Sustainability, and GHG projects.
- IP Code: Mandatory Code enters into force on 1 July. Make sure your company is up to speed with the changes.
- Early Bird tickets available for the IMCA Global Summit 2024. 3-4 December, Utrecht, Netherlands. Members can save £400.
- Discover how we are helping Members reduce emissions: Explore the ProjectGHG hub now.
- Now booking. Join the Lifting and Rigging community at our Technical Seminar in Amsterdam. Thursday 12 September 2024
- Now booking. Underwater Ship Husbandry Seminar. 10 October 2024, Singapore.
Loss of redundancy in diving bell launch and recovery (LARS) PLC system
What happened
During a vessel transit to an offshore field, Dive Technicians on a routine walkaround noticed an alarm from the LARS for the dive bells. Investigation indicated loss of automatic (LARS) PLC redundancy caused by failure of one of the PLC fibre optic processor synchronisation links. This resulted in the loss of normal operation and increased the risk of single point failure of the dive bell Launch and Recovery System (LARS), so the decision was taken to return to port. No-one was injured. The divers in the saturation chambers were not affected by the system fault.
In port, an independent control system specialist reviewed the diagnostic data and confirmed the dive technician’s initial diagnosis that one of the redundancy synchronisation link fibre optic communication modules had failed.
Unfortunately, it was not possible to immediately repair the loss of automatic redundancy fault as the dive control systems spares inventory did not include spare synchronisation modules. The original equipment manufacturer who designed the dive bell LARS PLC system had made no recommendation to hold spare synchronisation modules in stock. Spares were immediately ordered but were not readily available.
What was the safe workaround?
The company and the client discussed a way forward, and a “return to work” protocol was discussed, risk assessed and approved. Risk assessment involved testing the LARS operation of each of the redundant PLC processors independently and manual changeover of the processors to proof test a temporary manual redundancy option. These tests were carried out successfully on both forward and aft dive bells. The DSV then returned to the field and safely completed the job for the client with no further issues.
At a subsequent port call the spare synchronisation modules were delivered and installed by the Dive Technicians and the automatic LARS PLC redundancy was restored. The repair was witnessed and signed off by the client’s diving subject matter experts. The faulty synchronisation module was returned to the manufacturer for further investigation.
What went wrong
A diode failed: the failure of the LARS redundant PLC synchronisation module is classed as a ‘random hardware failure.’
- The risk of random hardware failures in programmable control system can be mitigated by proof testing. The dive company did carry out annual proof tests to trigger the automatic LARS PLC redundancy and the proof test records were up to date;
- The company had followed the dive control system spares list guidance provided by the original equipment manufacturer (OEM) and did not have the spare synchronisation modules in stock;
- The redundant PLC hardware configuration used on the LARS was a standard, proven solution provided by one of the leaders in automation systems and used globally on many safety-critical applications;
- The available data led everyone involved to assume that it was highly unlikely that the synchronisation module would fail in normal use;
- Following their investigation of the faulty module, the manufacturer concluded that the synchronisation module hardware had developed a faulty transmitting diode.
Safety Event
Published: 24 May 2023
Download: IMCA SF 13/23
IMCA Safety Flashes
Submit a Report
IMCA Safety Flashes summarise key safety matters and incidents, allowing lessons to be more easily learnt for the benefit of all. The effectiveness of the IMCA Safety Flash system depends on Members sharing information and so avoiding repeat incidents. Please consider adding [email protected] to your internal distribution list for safety alerts or manually submitting information on incidents you consider may be relevant. All information is anonymised or sanitised, as appropriate.
IMCA’s store terms and conditions (https://www.imca-int.com/legal-notices/terms/) apply to all downloads from IMCA’s website, including this document.
IMCA makes every effort to ensure the accuracy and reliability of the data contained in the documents it publishes, but IMCA shall not be liable for any guidance and/or recommendation and/or statement herein contained. The information contained in this document does not fulfil or replace any individual’s or Member's legal, regulatory or other duties or obligations in respect of their operations. Individuals and Members remain solely responsible for the safe, lawful and proper conduct of their operations.