STCW Engine Room Resource Management (ERRM)

Correct: Under the Maritime Labour Convention (MLC) Standard A2.3, records of daily hours of rest must be maintained in a standardized format to allow for effective monitoring of fatigue. These records must be written in the working language of the ship and in English. Furthermore, the seafarer must receive a copy of the records pertaining to them, which must be endorsed by the master, or a person authorized by the master, and by the seafarer.

Incorrect: The strategy of averaging rest hours over a two-week period is incorrect because the convention mandates specific minimum rest periods within any twenty-four-hour and seven-day window. Focusing only on bridge watch personnel is a regulatory failure as the MLC protections apply to all seafarers regardless of their department. Relying on digital logs without individual seafarer signatures or providing copies to the crew members fails to meet the transparency and verification requirements established by international maritime standards.

Takeaway: MLC requires standardized, bilingual rest records signed by both the supervisor and seafarer to ensure compliance with fatigue prevention standards.

Correct: Substituting the hazardous chemical descaler with a non-toxic alternative and installing blank flanges represents the highest levels of risk mitigation within the hierarchy of controls. Substitution removes the chemical hazard at the source, while blank flanges serve as an engineering control providing positive isolation that cannot be bypassed by a leaking valve. These methods are inherently more reliable than administrative procedures or personal protective equipment because they physically reduce or eliminate the danger before human interaction occurs.

Incorrect: Relying solely on personal protective equipment is considered the least effective control strategy because it does not remove the hazard and depends entirely on the equipment’s integrity and the wearer’s compliance. The strategy of using signage and increased monitoring constitutes administrative controls, which are prone to human error and do not provide a physical barrier against high-pressure steam or chemical exposure. Focusing only on emergency preparedness and documentation reviews, while necessary for regulatory compliance, fails to actively reduce the likelihood or severity of an incident occurring during the actual maintenance task.

Takeaway: Effective risk management prioritizes hazard elimination, substitution, and engineering controls over administrative actions and personal protective equipment to ensure maximum safety.

Correct: The position of the oil-water interface in a centrifuge is determined by the balance of centrifugal forces, which depends on the relative densities of the fluids. Since density varies with temperature, maintaining a steady temperature ensures the gravity disc selected for the specific fuel remains effective in preventing oil from discharging through the water outlet.

Incorrect: The strategy of raising viscosity to prevent wear is fundamentally flawed because heating fuel oil actually decreases its viscosity to facilitate easier flow and separation. The idea of boiling off entrained water is incorrect as purifiers are designed to separate liquid water mechanically; heating fuel to the boiling point of water would be dangerous and cause foaming. Focusing on chemical neutralization through thermal activation is a misconception, as purifiers are mechanical separation devices and do not perform chemical treatment of the fuel.

Takeaway: Consistent fuel temperature is necessary to maintain the proper density ratio for stable centrifugal separation.

Correct: USCG regulations and safety management systems require that any impairment to a fire detection system be mitigated by compensatory measures. Establishing a continuous fire watch provides a manual method of detection, ensuring the safety of the vessel while the electronic system is compromised.

Correct: In vibration analysis, the gear mesh frequency is the product of the number of teeth and the shaft rotational speed. While a peak at this frequency is normal, the emergence of sidebands—peaks located at intervals equal to the shaft speed around the mesh frequency—is a classic diagnostic indicator of modulation. This modulation is caused by physical defects such as tooth wear, misalignment, or gear eccentricity, which require internal inspection to prevent gear failure.

Incorrect: Attributing the vibration signature to structural resonance ignores the specific diagnostic meaning of sidebands, which are mathematically linked to the rotational components rather than the natural frequency of the housing. The strategy of treating sidebands as a normal characteristic of helical gears is incorrect because sidebands are recognized indicators of developing mechanical faults regardless of the gear type. Opting for an electrical harmonic explanation is technically flawed as gear mesh frequencies and their sidebands are mechanical phenomena related to physical contact and rotation, not electrical supply issues.

Takeaway: Vibration sidebands around gear mesh frequencies are primary indicators of mechanical gear defects such as wear, misalignment, or eccentricity.

Correct: Under SOLAS Chapter II-1, Regulation 43, and corresponding USCG requirements, the emergency source of electrical power must be capable of automatically starting and connecting to the emergency switchboard within 45 seconds. This standard ensures that critical systems like emergency lighting and steering gear are restored quickly enough to prevent hazardous situations during a loss of main power.

Incorrect: Assuming a 30-second limit is incorrect because while faster restoration is beneficial, it is not the mandated maximum threshold for diesel-driven emergency generators. Proposing a 60-second duration is wrong as this delay is considered too long for maintaining the continuity of essential safety and navigation services. Opting for a 15-second requirement is inaccurate because such rapid response times are generally reserved for transitional sources of power like batteries rather than the primary emergency generator set.

Takeaway: Emergency generators on merchant vessels must automatically start and accept the required load within 45 seconds of a main power failure.

Correct: Under USCG standards and general marine engineering practice, watertight integrity depends on the physical condition of the gasket and the alignment of the knife edge. A chalk test is the recognized method to verify that the knife edge makes continuous contact around the entire perimeter of the door. If the gasket has a permanent set, meaning it has lost its ability to spring back after compression, it must be replaced to ensure a watertight seal under hydrostatic pressure.

Incorrect: Applying petroleum-based lubricants is incorrect because these substances can chemically degrade the rubber elastomer of the gasket and mask underlying sealing failures. Increasing hydraulic pressure beyond the manufacturer’s specifications is a dangerous practice that can lead to mechanical failure of the door linkage or permanent warping of the door frame. Using unapproved materials like adhesive-backed neoprene tape is a violation of safety standards as these materials are not rated for the hydrostatic loads required for main transverse bulkheads.

Takeaway: Watertight integrity is maintained by ensuring gasket elasticity and verifying continuous knife-edge contact through standardized chalk testing.

Correct: Mechanical resistance, often referred to as stiction, in the valve stem packing prevents the valve from moving smoothly in response to small signal changes. This causes the valve to remain stationary until the controller output builds up enough pressure to overcome the friction, at which point the valve jumps past the desired position. This overshoot triggers a corrective action in the opposite direction, leading to the continuous oscillation known as hunting. Similarly, a leaking diaphragm can cause the actuator to fail to maintain a steady position against the spring force.

Incorrect: Focusing on a clogged air filter is incorrect because a restricted air supply typically results in a sluggish response or a total failure of the system to reach the required setpoint rather than rhythmic hunting. Attributing the issue to the calibration of the transmitter bellows is a common misconception; while an uncalibrated transmitter causes an offset error between the actual and indicated pressure, it does not inherently cause the loop to oscillate if the mechanical components are sound. The strategy of blaming moisture in the air header is also flawed, as moisture usually leads to erratic, unpredictable spikes or complete freezing of pneumatic components rather than the consistent, cyclical hunting described in the scenario.

Takeaway: Control loop hunting is frequently caused by mechanical friction or actuator leaks rather than incorrect controller tuning or transmitter calibration errors.

Correct: RTDs operate on the principle that the electrical resistance of a metal increases as its temperature rises. The monitoring system interprets the total resistance in the circuit to determine the temperature. If corrosion creates high contact resistance at a terminal, this additional resistance is added to the resistance of the RTD element itself. Consequently, the transmitter perceives a higher total resistance and outputs a signal representing a temperature higher than the actual process value.

Correct: According to USCG and international regulations, any discharge of oily mixtures must be stopped or diverted if the oil content exceeds 15 parts per million. The three-way valve is designed to automatically recirculate the fluid to a holding tank when this limit is reached. The engineer must ensure this safety function has occurred and stop the process to troubleshoot the separator’s efficiency or the monitor’s accuracy before attempting to resume discharge.

Incorrect: The strategy of manually overriding the three-way valve while cleaning the sensor is a direct violation of environmental laws and constitutes an illegal discharge. Choosing to dilute the oily waste with sea water to bypass the 15 ppm limit is strictly prohibited as a method of meeting discharge standards. Opting to adjust calibration settings to mask high oil content or turbidity is considered tampering with a required pollution prevention device, which can lead to severe civil and criminal penalties.

Takeaway: If the OWS effluent exceeds 15 ppm, the system must automatically divert flow, and operators must never bypass these safety interlocks.

Correct: In accordance with USCG engineering standards and manufacturer specifications, pneumatic control systems require clean, dry, and oil-free air. Moisture in the lines can lead to corrosion, freezing, or the formation of sludge when mixed with oil carryover. Regularly blowing down receivers and ensuring the refrigerant or desiccant dryer is functioning correctly prevents these contaminants from reaching sensitive instrumentation and control components.

Incorrect: The strategy of increasing compressor discharge pressure is incorrect because excessive pressure can rupture sensitive control bellows or damage regulator seats. Choosing to apply petroleum-based lubricants to diaphragms is dangerous as petroleum products typically degrade the synthetic or natural rubber materials used in pneumatic actuators. Opting to bypass filtration systems is a poor practice because it allows particulates and moisture to enter the control loop, which is the primary cause of pilot valve failure and erratic system response.

Takeaway: Consistent moisture removal and air dryer monitoring are essential for maintaining the integrity and responsiveness of shipboard pneumatic control systems.

Correct: A failure of the thermostatic regulating valve to divert water to the heat exchanger causes the coolant to bypass the cooling stage and return directly to the engine. Since the expansion tank level is stable and sea water pressure is normal, the issue lies within the internal distribution of the fresh water circuit rather than a loss of coolant or a failure in the external sea water cooling medium.

Incorrect: Attributing the issue to a partially closed overboard valve is incorrect because this would typically result in an increase in sea water pump discharge pressure or a decrease in flow that would be reflected in pressure gauges. The theory involving combustion gas leakage is unlikely because such a condition would normally cause pressure fluctuations or a visible rise in the expansion tank level as gases displace the liquid. Suggesting pump cavitation is inconsistent with the report of normal discharge pressure and stable system operation in the North Atlantic where sea temperatures are generally low.

Takeaway: When engine temperatures rise despite normal secondary cooling flow and stable primary levels, the thermostatic control valve is the primary suspect.

Correct: Effective decision-making in a maritime environment requires immediate communication with the bridge when a propulsion casualty is imminent, especially in high-traffic areas. Reducing the load is a proactive measure that stabilizes the engine temperature while allowing the bridge team to adjust the vessel’s navigation safely before a total loss of power occurs.

Incorrect: The strategy of manually adjusting valves without notifying the bridge ignores the navigational risks associated with potential engine failure in restricted waters. Simply waiting for an alarm to sound before taking action is a reactive approach that reduces the time available for troubleshooting and emergency maneuvering. Choosing to secure the engine immediately without bridge consultation could lead to a collision or grounding, as the bridge team must be prepared for a loss of steerage way.

Takeaway: Engine room decision-making must prioritize bridge communication and proactive load management to maintain vessel safety during a developing technical casualty.

Correct: A partial rupture or perforation of the diaphragm allows the control air to leak into the atmospheric side of the actuator. This prevents the pressure from building up enough force to fully compress the range spring, resulting in sluggish movement and an inability to reach the full stroke despite receiving a full signal.

Incorrect: Relying on the presence of moisture in the air dryer as a cause is incorrect because moisture typically leads to corrosion or freezing in pilot valves rather than a consistent mid-stroke limitation. The strategy of blaming thermal expansion for increased spring tension is flawed because spring constants are material properties that do not significantly increase with standard engine room temperature fluctuations. Focusing on a blocked atmospheric vent is incorrect because while it might slow movement, it typically creates backpressure that prevents the valve from returning to its fail-safe position rather than limiting the power stroke.

Takeaway: Sluggish response and incomplete travel in pneumatic actuators usually indicate a loss of pressure integrity within the diaphragm chamber or housing.

Correct: Implementing alarm prioritization is a fundamental requirement for marine HMI systems to prevent cognitive overload. By categorizing alerts into levels such as ‘Critical,’ ‘Warning,’ and ‘Advisory,’ the system ensures that the Third Assistant Engineer can immediately identify and react to life-safety or propulsion-threatening events without being distracted by minor maintenance reminders or routine status changes.

Incorrect: The strategy of displaying every available sensor on a single screen creates visual clutter and significantly increases the time required to locate vital information during a crisis. Simply setting all alarms to maximum sensitivity leads to frequent nuisance alarms, which often causes watchstanders to become desensitized to genuine warnings. Opting for a uniform visual alert for all conditions is dangerous because it fails to provide the necessary context to differentiate between a minor auxiliary pump status change and a catastrophic main engine failure.

Takeaway: Effective HMI configuration must prioritize critical alarms to prevent operator information overload during high-stress machinery emergencies.

Correct: The symptoms of ‘gravel’ noise, fluctuating discharge pressure, and erratic motor amperage are classic indicators of cavitation. In a saltwater service system, this is most commonly caused by a restriction in the suction side, such as a clogged sea strainer. By switching to the standby strainer, the engineer restores the required Net Positive Suction Head (NPSH) and prevents further erosive damage to the impeller and casing.

Incorrect: Attempting to tighten a mechanical seal is an incorrect maintenance procedure because these seals are designed to be self-adjusting and do not use gland nuts for compression like traditional packing. Attributing the noise to a stuck discharge check valve is inaccurate because a discharge restriction would typically result in low flow or high pressure without the specific crackling sound of collapsing vapor bubbles. Suggesting that an air-bound pump should be vented while running at full speed is a safety risk and often ineffective, as venting should typically occur at the highest point of the casing under static or low-flow conditions to ensure air is properly displaced.

Takeaway: Cavitation is identified by distinct mechanical noise and pressure instability, usually necessitating an immediate check of suction-side filters or strainers.

Correct: Centrifugal pumps operating with a suction lift are highly susceptible to air leaks on the suction side. If the shaft packing gland is worn or not adjusted to allow a small amount of cooling water leakage, air can be drawn into the pump casing. This air breaks the vacuum required to lift the fluid, leading to a total loss of prime.

Incorrect: The strategy of blaming a stuck discharge check valve is incorrect because high discharge pressure or backflow typically reduces flow rate but does not cause the pump to lose its prime. Focusing only on internal scale buildup is a mistake as this usually results in a gradual decline in pump efficiency rather than a sudden loss of suction. Choosing to attribute the failure to higher motor RPM is technically flawed because increased speed generally improves suction capability unless it leads to cavitation, which is distinct from losing prime due to air ingress.

Takeaway: Maintaining the integrity of the shaft seal is critical for centrifugal pumps operating under suction lift to prevent air from breaking the vacuum.

Correct: Under MARPOL Annex I, as implemented by USCG regulations in 33 CFR 151, every operation involving the transfer or discharge of oil or oily mixtures must be recorded in the Oil Record Book Part I without delay. Each specific operation must be signed by the officer in charge of that operation, and each completed page must be signed by the Master of the vessel to verify the accuracy of the records.

Incorrect: The strategy of only documenting overboard discharges is incorrect because MARPOL requires the tracking of all internal oily waste movements to prevent illegal bypasses. Opting to maintain the log only in a flag state language without an English, French, or Spanish translation violates international requirements for vessels engaged in foreign voyages. Choosing to record entries on a weekly basis is a failure of compliance, as regulations mandate that entries be made promptly after the completion of each operation to ensure real-time accountability.

Takeaway: MARPOL requires the officer in charge to sign each oil-related entry and the Master to sign every completed page.

Correct: Organizing displays by functional system aligns with the operator’s mental model of shipboard operations, allowing for faster diagnostic reasoning. Hierarchical alarm suppression is a critical human factors principle that prevents alarm flooding, ensuring that the watchstander can identify the root cause of a failure without being distracted by secondary or consequential alarms.

Incorrect: Arranging readouts by parameter type fails to account for the interconnected nature of machinery systems, making it difficult for an engineer to trace a fault across different components. The strategy of displaying all data points simultaneously creates excessive visual clutter that obscures critical trends and increases the time required to process information. Opting for high-decibel alerts for every minor deviation leads to alarm fatigue, which desensitizes the crew and can mask the urgency of genuine life-safety or propulsion-loss events.

Takeaway: Effective human factors design prioritizes functional grouping and alarm management to reduce cognitive load during high-stress machinery incidents.

Correct: According to 33 CFR 151 and MARPOL Annex I, oily water separators must be fitted with an oil content monitor and an automatic stopping device. When the oil content of the effluent exceeds 15 parts per million (ppm), the three-way valve must automatically divert the flow away from the overboard discharge and back to the bilge or a dedicated holding tank to prevent illegal pollution.

Incorrect: Choosing to manually adjust valves while continuing discharge fails to comply with the mandatory automatic shutdown requirement for effluent exceeding the 15 ppm limit. Opting for a manual bypass to verify sensor accuracy is a direct violation of operational requirements and can be interpreted as tampering with pollution prevention equipment. The strategy of diluting the sample with sea water is an illegal practice specifically prohibited by environmental regulations to prevent the masking of actual oil concentrations.

Takeaway: Oily water separators must automatically cease overboard discharge and redirect flow whenever the oil content exceeds the 15 ppm regulatory limit.

Correct: Mechanical knocking that occurs specifically when the piston changes direction at the end of its stroke is a classic symptom of excessive clearance in the load-bearing components of the reciprocating assembly. As the piston reaches dead center and the direction of force reverses, any slack in the crosshead or crankpin bearings is taken up suddenly, resulting in a distinct mechanical knock.

Incorrect: Attributing the noise to water carryover or priming is incorrect because hydraulic shock from incompressible water usually produces a much more violent and sharp metallic thud that can lead to immediate cylinder head failure. Focusing on a lack of cylinder lubrication is misplaced as this condition typically manifests as a high-pitched groaning or squealing sound caused by friction rather than a rhythmic knock at the stroke limits. Choosing to investigate the eccentric rod misalignment is unlikely to resolve the issue because valve gear problems generally result in uneven power distribution or irregular engine timing rather than a localized mechanical impact at the piston’s reversal points.

Takeaway: Rhythmic knocking at the end of a reciprocating stroke typically indicates excessive mechanical clearance in the drive train bearings or crosshead assembly.

Correct: Under USCG regulations and standard maritime practice, the relieving officer is responsible for ensuring they are fully aware of the plant’s condition before assuming duty. This requires a physical round of the machinery spaces to verify gauge readings, tank levels, and the mechanical integrity of running equipment. By verifying the status of the problematic purifier and reconciling logbook discrepancies personally, the engineer ensures that they do not inherit an unsafe condition or an inaccurate legal record of the plant’s operation.

Incorrect: Signing the logbook before a full inspection is completed transfers legal responsibility for the plant’s condition to the relieving officer prematurely and ignores potential hazards. Relying on verbal assurances from the outgoing officer fails to meet the professional standard of independent verification required for safe watchkeeping. Utilizing only automated data trends is insufficient because digital sensors can fail or provide misleading information that only a physical inspection and manual gauge comparison can detect.

Takeaway: A relieving engineer must personally verify all machinery conditions and logbook accuracy before formally accepting responsibility for the watch transition.

Correct: A localized hot spot on a bus bar connection is a primary indicator of high resistance, often caused by loose bolts, vibration-induced fatigue, or surface corrosion. The safest and most effective risk mitigation strategy is to isolate the affected component by shifting the load to redundant systems, allowing for a dead-bus inspection and mechanical tightening of the connection to prevent an arc flash or electrical fire.

Incorrect: The strategy of increasing ventilation only addresses the symptom of heat rather than the root cause of high resistance and may allow the connection to deteriorate further until a catastrophic failure occurs. Choosing to apply cleaners to an energized high-voltage bus bar poses a severe risk of electrocution or initiating a phase-to-phase short circuit. Opting to lower the system voltage is ineffective because it does not address the physical connection failure and could lead to improper operation of motor-driven auxiliary equipment.

Takeaway: Localized overheating in switchboard bus bars indicates high contact resistance and requires immediate isolation and mechanical repair to prevent fire or failure.

Correct: Carbon monoxide is a primary indicator of incomplete combustion, which occurs when there is an inadequate supply of oxygen to fully oxidize the carbon in the fuel. In marine boilers, a decrease in oxygen levels alongside an increase in CO and darker stack smoke confirms that the air-fuel ratio has become too rich, necessitating an increase in forced draft or a reduction in fuel to restore efficient combustion.

Incorrect: The strategy of increasing atomizing steam pressure generally improves the mechanical breakup of fuel droplets and would typically enhance combustion efficiency rather than causing a rise in carbon monoxide. Focusing only on fuel oil temperature is incorrect because while temperature affects viscosity and atomization, maintaining it slightly above the setpoint would not cause a sudden drop in oxygen levels. Choosing to attribute the symptoms to high volumes of excess air is logically flawed, as excessive air would result in high oxygen readings on the analyzer and a clear stack rather than dark smoke and CO production.

Takeaway: High carbon monoxide levels and dark stack smoke are definitive indicators of incomplete combustion caused by an insufficient air-to-fuel ratio.

Correct: A thorough visual inspection is necessary to identify structural failures such as fatigue cracking or debonding of the babbitt from the backing shell. Verifying clearances with a bridge gauge or lead wire ensures that the bearing can maintain a proper hydrodynamic oil film, which is essential for preventing metal-to-metal contact during high-speed operation.

Incorrect: The strategy of using high-speed grinders on babbitt is incorrect because it destroys the precision-machined geometry and can embed abrasive grit into the soft bearing metal. Opting to fill physical defects with lubricant is an unsafe practice that fails to address material loss or the potential for further structural degradation. Choosing to replace the bearing based solely on surface staining without verifying clearances or bonding integrity is an inefficient maintenance practice that ignores the fact that some staining is normal and does not indicate failure.

Takeaway: Bearing suitability is determined by confirming structural babbitt integrity and ensuring running clearances meet manufacturer specifications.

Correct: Under United States Coast Guard safety standards and incorporated NFPA 10 guidelines, a portable CO2 fire extinguisher must be recharged if it exhibits a weight loss of more than 10 percent of the net charge. In this scenario, a 2-pound loss on a 15-pound unit represents a 13.3 percent loss, which exceeds the regulatory limit and necessitates immediate servicing.

Correct: Galvanic corrosion occurs when two dissimilar metals are in electrical contact while submerged in an electrolyte like seawater. In this scenario, the copper-nickel piping is less noble than the 316 stainless steel valve. This creates a galvanic cell where the piping acts as the anode and undergoes accelerated corrosion. To prevent this, marine engineering standards require the use of dielectric isolation kits, including non-conductive gaskets and bolt sleeves, to break the electrical path between the two metals.

Incorrect: Attributing the failure to flow-induced impingement ignores the specific material compatibility issues inherent in joining dissimilar metals in a seawater environment. Focusing on cavitation assumes a mechanical failure driven by fluid dynamics rather than the electrochemical reaction clearly indicated by the proximity to the new valve. Suggesting selective leaching is incorrect because that process is generally driven by specific chemical imbalances or extreme temperatures rather than the presence of a more noble metal in the circuit.

Takeaway: Dissimilar metal contact in seawater systems requires electrical isolation or cathodic protection to prevent rapid galvanic degradation of the less noble material.

Correct: Conducting a Job Safety Analysis (JSA) is a fundamental risk management practice that proactively identifies hazards specific to the task, such as residual pressure or hot surfaces. It ensures that all personnel involved understand the Lockout/Tagout (LOTO) procedures and the necessary controls to prevent accidents, aligning with USCG-mandated safety protocols.

Incorrect: The strategy of reviewing technical manuals focuses on the mechanical execution of the task rather than the safety risks inherent in the working environment. Relying solely on verbal turnovers is insufficient as it fails to provide a structured, documented assessment of current hazards and isolation integrity. Opting to increase bilge monitoring or priming fire pumps represents a reactive approach to failure rather than a proactive management of the risks associated with opening a pressurized fuel system.

Takeaway: Effective risk management requires a systematic Job Safety Analysis to identify and mitigate specific hazards before performing high-risk engine room maintenance.

Correct: Quill shafts are engineered to be flexible members that connect the first-reduction gear to the second-reduction pinion. This design allows the various gear components to achieve proper tooth contact and alignment despite minor thermal expansion or hull deflections that occur during vessel operation.

Incorrect: The idea that these shafts are sacrificial components for overspeed protection is incorrect as turbine safety is managed by independent governor and overspeed trip systems. Attributing an increase in gear ratio to the quill shaft misidentifies its role, as the ratio is determined by the tooth counts of the pinions and gears, not the connecting shafts. Suggesting the shafts function as centrifugal purifiers is a misunderstanding of the lubrication system, which relies on external strainers and purifiers rather than the internal rotation of drive shafts.

Takeaway: Quill shafts provide essential flexibility in double-reduction gears to ensure proper tooth alignment under varying operational stresses.

Correct: The Nuclear Ship Safety Assessment (NSSA) is the mandatory document required by the Code of Safety for Nuclear Merchant Ships. It provides the Administration with the detailed technical data and safety analyses necessary to evaluate the safety of the nuclear power plant and the ship’s overall design.

Incorrect: Relying solely on the Nuclear Ship Operating Manual is incorrect because that document is intended for the guidance of the operating personnel during normal and emergency conditions rather than for the initial safety evaluation by the regulator. Simply providing a Radiological Emergency Response Plan is insufficient as it focuses on response protocols for accidents rather than the comprehensive safety analysis of the reactor systems. Opting for a Certificate of Nuclear Vessel Compliance is inaccurate because such a certificate is an authorization issued after the safety assessment has been successfully reviewed and approved, not the evaluation document itself.

Takeaway: The Nuclear Ship Safety Assessment is the primary technical document required for the Administration’s evaluation of a nuclear merchant ship’s safety.