In this document
- Purpose, Scope, and Safety Principles
- Roles, Competence, and Accountability
- Course-Specific Hazards and Risk Assessment
- Preventive Controls and Safe Work Practices
- Equipment, Environment, Information, and Protective Safeguards
- Incident Reporting, Emergency Response, and Escalation
- Records, Training, Inspection, and Review
- Conclusion and Use of This Document
- Implementation checklist
OverviewThis document sets out practical safety norms for marine and naval engineering work on vessels, shipboard machinery, shipyards, and associated shore facilities. It identifies the activities, people, tools, environments, and decisions that create risk, then defines mandatory rules and recommended practices for preventing injury, protecting workers and the public, safeguarding the environment, and responding to incidents. It covers hazard identification, machinery safeguards, permit to work systems, personal protective equipment, maintenance, emergency response, and environmental protection. The norms are educational guidance and a starting point for locally approved procedures. They do not replace classification society rules, flag state or navy requirements, port regulations, manufacturer instructions, formal training, or supervision by qualified personnel. Verify all applicable laws and standards with competent authorities or qualified professionals.
1Purpose, Scope, and Safety Principles
These norms apply to engineering work on ships, boats, offshore platforms, naval auxiliaries, and their shore support. They cover design review, installation, operation, maintenance, repair, testing, and decommissioning of propulsion, power generation, auxiliary systems, cargo and ballast handling, and fire and flooding control systems. They also cover the effect of this work on crew, contractors, visitors, port workers, and the public.
Mandatory rules use the word must. Recommendations use the word should. Jurisdiction dependent items, including flag state, port state, classification society, navy, and occupational safety requirements, must be verified with competent authorities before use.
- Stop work when a hazard cannot be controlled with the current plan.
- Isolate and verify energy removal before access, rather than relying on warning signs alone.
- Design out hazards first, then apply engineering controls, administrative controls, and PPE last.
- Never bypass an alarm, interlock, or safety device to keep equipment running.
2Roles, Competence, and Accountability
The owner or operator holds overall accountability for safe engineering work. The chief engineer, or the responsible engineering manager ashore, approves work plans, controls isolations, and maintains machinery records. The engineering watch officer or designated authorizing person issues and closes permits. Competent persons inspect and sign off specific activities such as lifting equipment, pressure testing, or confined space entry where local rules require it.
Competence means documented training, demonstrated skill, and authorization for the specific task. Required certificates and endorsements vary by jurisdiction and employer, so verify them with the relevant authority. Trainees work only under direct supervision of an authorized person. Nobody may operate high voltage switchgear, enter a machinery space under fire suppression discharge, or perform hot work unless specifically authorized.
- Each work order names a responsible person, a supervisor, and every worker with access.
- Contractors receive a site induction and present competence records before starting.
- Any worker may stop work without penalty if they reasonably believe conditions are unsafe.
3Course-Specific Hazards and Risk Assessment
Marine and naval engineering combines high energy systems with confined, moving, and often remote workplaces. Typical activities include engine room maintenance, shafting and propeller work, boiler and steam system service, pump and compressor overhaul, welding and cutting, switchboard work, tank entry, dry docking, ship repair, and sea trials. People involved include engineers, riggers, welders, electricians, pipefitters, divers, crane operators, contractors, and surveyors. Common tools and equipment include pneumatic and hydraulic tools, lifting gear, portable grinders, gas cylinders, and test instruments.
Risk assessment identifies each hazard, who could be harmed, existing controls, the likelihood and severity of harm, and additional controls needed. Use a simple likelihood and severity scale documented in the local procedure. A risk rated high or extreme must not proceed until controls reduce it to an acceptable level and an authorized person accepts any residual risk in writing.
- Stored energy: pressurized steam, hydraulic accumulators, compressed air, springs, and rotating shafts.
- Hot surfaces and fluids: exhaust manifolds, boiler casings, and thermal oil systems.
- Confined spaces: tanks, cofferdams, voids, and double bottoms with oxygen deficiency, toxic gases, or residual vapors.
- Flammable atmospheres: fuel tanks, bilges, paint lockers, and battery rooms that may release hydrogen.
- Electrical energy: shore power, switchboards, and high voltage generator circuits.
- Suspended loads: engine parts, hatch covers, and crane handled equipment.
- Flooding: sea chests, stern tube seals, and damaged hull penetrations.
- Fire and explosion: welding or grinding sparks near fuel, oil, or paint.
- Slips, trips, and falls: wet decks, gratings, ladders, and rough weather exposure.
- Example: an engineer must open a running fuel purifier for cleaning. Likelihood is possible and severity is major, so the risk is high. Required controls include electrical lockout of the motor, closing and blinding the fuel inlet valves, draining and depressurizing the bowl, verifying zero energy by test, and issuing a permit for hot oil areas.
4Preventive Controls and Safe Work Practices
Energy isolation is the most important control in engineering work. Before anyone enters or touches machinery, the responsible engineer prepares an isolation schedule listing every electrical breaker, valve, damper, and pneumatic or hydraulic source, with its position and locking method. Each isolation point is locked and tagged with the lock holder's name. Zero energy is verified by a documented test, such as a voltage test at the point of work or a pressure gauge reading at zero. Stored energy must be released or blocked. Isolations are removed only by the person who applied them, or through a documented handover.
Permit systems control high risk tasks. The permit records the task, location, hazards, isolations, atmospheric test results, required PPE, rescue arrangements, and the time window. Work outside the permit scope stops until a new permit is issued. Verify gas testing thresholds, hot work durations, and entry rules against local procedures, classification society rules, and national regulations, because these vary.
- Lockout tagout is mandatory for maintenance on energized or stored energy equipment.
- A permit to work is mandatory for hot work, confined space entry, electrical work beyond the authorized voltage, lifting over personnel, and work on systems carrying flammable or toxic substances.
- Hot work requires a cleared area, fire extinguishers at hand, a fire watch, and a post work check for the period stated on the permit.
- Confined space entry requires atmospheric testing for oxygen, flammable gases, and toxic gases before entry and during work, a standby attendant outside the space, a rescue plan, and reliable communication.
- Lifting uses inspected lifting gear with a load rating check, a designated signaler, and no personnel under suspended loads.
- Rotating machinery guards remain in place while equipment runs. Guards are removed only under a permit and replaced before test running.
- Pressure and hot fluid systems are depressurized and cooled before opening. Confirm safe temperature and pressure on gauges before breaking any joint.
- Temporary bypasses of trips, interlocks, or alarms require written approval, a time limit, a compensating control, and removal before return to service.
- Recommended: hold a pre job briefing covering task steps, hazards, escape routes, and stop conditions. Keep drip trays and absorbent material under pumps and joints, and keep walkways free of oil.
5Equipment, Environment, Information, and Protective Safeguards
PPE is the last line of defense after elimination, engineering, and administrative controls. Minimum PPE for engine room work includes slip resistant safety footwear, eye protection, task suited hand protection, and hearing protection where noise levels require it. Hot work needs flame resistant clothing and face protection. Respiratory protection is selected, fit tested, and issued by a competent person. Many confined spaces require supplied air breathing apparatus rather than filtering devices. Work at height requires guarded platforms or a rated harness and lanyard with a suitable anchor point.
Environmental controls protect the sea and air. Oily waste, bilge water, sludge, and paint residues are handled under the approved waste management plan. Discharge overboard is prohibited except as permitted under applicable pollution prevention rules. Spill kits and containment boom must be ready at fuel transfer points. Ventilation in machinery spaces and paint lockers stays operating during work. Engineering drawings, maintenance records, and control system details are restricted to authorized personnel. Remote access to propulsion or navigation control systems requires approval and logging.
- Inspect PPE before each use and remove damaged items from service.
- Check noise levels and safety data sheets for chemicals before choosing protection and handling methods.
- Do not share network credentials or automation passwords with unauthorized parties.
6Incident Reporting, Emergency Response, and Escalation
Every injury, near miss, oil spill, unauthorized discharge, fire, and equipment failure is reported to the chief engineer or shore engineering manager within the time set by local procedure. Near misses are reported because they reveal control weaknesses before serious harm occurs. Reports record what happened, immediate actions, persons involved, and the evidence preserved, such as failed parts and logs.
Emergency response must follow the posted plan. Raise the alarm immediately using the general alarm or site emergency number. Do not enter a confined space or dangerous area to rescue a casualty unless a rescue plan is in place, proper breathing apparatus is worn, and trained rescuers are available. Call emergency services for serious injury, fire, flooding, or loss of stability. Medical treatment is provided by qualified medical personnel or trained first aiders, and their guidance takes priority over this document.
- Use machinery emergency stops only where it is safe to do so and the operator is trained.
- Escalate fire, flooding, gas exposure, pollution, and loss of propulsion to the master or site manager immediately.
- Notify flag state, port authorities, or regulators as required by local rules, and verify the reporting deadlines.
- Do not discuss incident details with outside parties except through the authorized spokesperson.
7Records, Training, Inspection, and Review
Permits, isolation schedules, atmospheric test results, lifting records, inspection certificates, and training records are kept in an accessible file for the retention period set by applicable rules and company policy. Planned maintenance records show when inspections and tests were completed and who performed them. Records are complete, legible, and signed, and corrections are made by initialing the original entry rather than erasing it.
Training must match the tasks people perform. Initial induction covers hazards, emergency arrangements, and stop work rights. Task training covers lockout tagout, permit procedures, confined space entry, lifting, and hot work. Emergency drills for fire, flooding, and man overboard are run at intervals required by the flag state, classification society, or company procedure. Performance is monitored through permit audits, overdue maintenance reports, and near miss trends. Reviews follow every serious incident and occur at regular intervals defined in the local safety management system.
- Keep training records current and withdraw authorization when competence lapses.
- Audit a sample of permits and compare them with the work actually performed.
- Update norms when equipment, crew, or operating areas change.
8Conclusion and Use of This Document
These norms are a starting point, not a complete procedure. Each organization should adapt them to its vessels, facilities, equipment, and legal obligations, then approve the resulting procedures through its safety management system. Where this document conflicts with a classification society rule, flag state requirement, manufacturer instruction, or regulator direction, follow the stricter requirement and seek professional advice.
Safe marine and naval engineering depends on disciplined isolation, clear permits, competent people, and the willingness to stop work. Treat every unclear step as a reason to pause and ask a qualified person before proceeding.
Implementation checklist
- Confirm the task has an approved work plan, risk assessment, and responsible person before starting.
- Apply lockout tagout and verify zero energy by test before touching machinery.
- Issue and review the permit to work for hot work, confined spaces, and high risk lifting.
- Check atmosphere readings before entry and keep an attendant and rescue plan in place.
- Keep machinery guards in place and never bridge alarms or interlocks.
- Wear the PPE specified for the task, and inspect it before use.
- Keep spill containment ready and route oily waste through the approved plan.
- Report every injury, near miss, and spill to the responsible manager immediately.
- Verify training, certificates, and jurisdiction specific rules with qualified authorities.