Risk management in the national system

A practical guide to creating and maintaining an effective risk management system.
AMSA 651
1 September 2020

The Marine Safety (Domestic Commercial Vessel) National Law Act 2012 (the national law) provides a single national framework for ensuring the safe operation, design, construction and equipping of domestic commercial vessels.

The national law imposes safety duty obligations on owners and masters of domestic commercial vessels to ‘so far is reasonably practicable’ ensure the safety of their vessels, marine safety equipment that relates to the vessel, and the operation of the vessel.

Domestic commercial vessels owners and masters must implement and maintain safety management systems on their vessels to comply with their statutory safety obligations.

Documented safety management systems are one way in which domestic commercial vessel owners can demonstrate that they comply with the safety management system requirements of the national law.

Contents

IntroductionTerms associated with risk managementThe risk management processStep 1 – Identify hazardsStep 2 – Consider the risks associated with the identified hazardsStep 3 – Identify and implement ways to control the risksStep 4 – SMS/review | Appendix A – Risk register examples Appendix B – Further example of risk assessment/control and the completed risk register

Download this publication

Introduction

The Marine Safety (Domestic Commercial Vessel) National Law Act 2012 (the National Law) provides a single national framework for ensuring the safe operation, design, construction and equipping of domestic commercial vessels (DCVs). The National Law imposes safety duty obligations on owners and masters of DCVs to ‘so far is reasonably practicable’ ensure the safety of their vessels, marine safety equipment that relates to the vessel, and the operation of the vessel. DCV owners and masters must implement and maintain Safety Management Systems (SMS) on their vessels to comply with their statutory safety obligations. Documented SMS are one way in which DCV owners can demonstrate that they comply with the SMS requirements of the National Law.

The Marine Order 504 (Certificates of operation and operation requirements — national law) – MO504 specifies the minimum requirements for the safe operation of DCVs. 

Marine Order 504 makes clear the owner’s responsibility to manage the risks associated with the operational safety of a DCV. Risk management is a key component in developing an effective SMS. 

Marine Order 504 requires that a risk assessment of the operation of any Class 1, 2, 3 & 4 vessels, be carried out which identify: 

  • key daily tasks to be performed by all crew members
  • any potential risks involved in the conduct of any task that may expose the vessel, operational environment, or persons on or near the vessel to unacceptable risk
  • the appropriate crew for the vessel
  • a person who is responsible for ensuring that actions needed to correct any identified potential risk is carried out.

One of the key responsibilities of a DCV owner is to ensure the risk management process is documented and kept up- to-date. The owner also needs to ensure that the risk assessment is prepared in consultation with the master and crew of the vessel. It’s equally important that a DCV owner regularly monitors and reviews the appropriateness and effectiveness of risk controls. The owner must prepare and review the risk assessment in consultation with the master and crew of the vessel.

Identified risks must be reassessed and risk controls revised as necessary if the vessel’s normal operation changes or if the master considers that the risk to the safe operation of the vessel has changed. These reviews ensure the risk management process remains relevant to the vessel’s ongoing operation and increases the capacity of those involved to effectively manage risk.

The master and crew of the vessel must be able to give AMSA or a marine safety inspector a copy of the risk assessment on request. This should include the appropriate crewing determination.

References

  • AS/NZS ISO 31000
  • IALA Guideline - G1138 The Use Of The Simplified IALA Risk Assessment Method (SIRA)
  • SA/SNZ HB 436:2013, Risk management guidelines — Companion to AS/NZS ISO 31000:2009
  • HB 158—2010, Delivering assurance based on ISO 31000:2009 Risk management — Principles and guidelines

Terms associated with risk assessment

Consequence 

The type and or severity of harm that a person could sustain if they came in contact with the hazard.

Hazard

A hazard has the potential to cause death, injury, illness or environmental damage, for example:

  • the environment in which the vessel operates
  • unsuitable vessel
  • machinery plant and lifting devices
  • inadequate safety systems

It's everyone’s responsibility to identify hazards.

Likelihood

The possibilities, high or low, that someone will come into contact with the hazard.

Risk

Risks arise from interactions with one or more hazards that may have a detrimental impact on safety.

Risk assessment

The process of evaluating the likelihood of an incident or injury:

  • What could cause harm (hazard)?
  • What could go wrong (risk)?
  • How likely is it to happen (likelihood)?
  • How bad will it be (consequences)?

Risk controls

Risk control is a risk modification process. It involves selecting and implementing one or more control options. Once a control has been implemented it assists with managing the risk. You have many control options.

Elimination or removal of hazards and their associated risks is always the best option. However this is not always feasible or possible. So in these circumstances, risk controls are used to reduce the risks to an acceptable level.

Examples of risk controls are: fire suppression systems, wearing lifejackets when on deck and thorough induction and training programs.

Risk rating

The result of using a likelihood and consequence matrix to determine the severity or rating of a risk.

Risk register

A risk register is a central point where all identified risks are listed. It includes all relevant information to the vessel’s risks and must be updated regularly.

The risk management process

The following steps should be completed by vessel owners to effectively manage risk as part of the vessel’s Safety Management System (SMS). It is important to note that masters and crew must also be involved in all of the following four steps of the risk management process.

steps to manage risk

Step 1 – Identify hazards

Identify and document all hazards associated with the vessel and its operation. This should be the start of your risk register (examples at Appendix A). Every vessel operation is different and some hazards are likely to be unique to a particular operation.

There could be hazards associated with the:

  • vessel’s machinery, plant and equipment
  • the type of operation the vessel is involved in for example dive charter and fishing operations
  • the daily activities of the crew such as fuelling, loading of stores and hauling nets
  • passenger access and accommodation
  • operating area and environment.

Example: A commercial fishing vessel owner, master and crew identify the trawl winch associated with fishing operations is a hazard that poses a potential threat to the safety of crew. The hazard is entered into the vessel’s risk register. (Refer Appendix A).

winch

Step 2 – Consider the risks associated with the identified hazards

Once the hazards have been identified consideration needs to be given to the possible impact of these hazards on the safety of people who operate the winch.

The winch has been identified as a potential hazard. The risks associated with the winch are:

  • Crew could be injured during its operation by being drawn into the winch.
  • Crew could be entangled in the net during setting and dragged overboard.

The associated risks have been recorded in the vessel’s risk register at Appendix A.

In order to determine the potential impact of the hazard we need to consider the chance of someone being hurt which we will refer to as the likelihood. We also need to consider the possible harm that it could cause them which we will refer to as the consequence. This is known as the risk assessment phase.

The following tables are based on examples in Australian Standard 31000:2009 and help us to determine the likelihood and consequence.

The vessel owner, master and crew have decided it is likely that a crew member could be caught in the trawl winch so they have circled this on the table.

Likelihood table

The descriptors and value for the “likelihood” of an incident

 DescriptorPercentageChance per year
Almost certainCommon event95%Weeekly occurrence
LikelyKnown to occur60%Monthly event
PossibleCould occur40%Up to three times a year
UnlikelyNot likely to occur20%Once in a year
RarePractically impossible5%Unheard of occuring

Reference: IALA Guideline - G1138 The use of the simplified IALA risk assessment method (SIRA)

The vessel owner, master and crew have decided that injuries from the trawl winch could be fatal or very serious, so they assign a consequence rating of major as circled.

Consequence table

CategoryHuman injuryFinancial costWork/income/reputationEnvironment
Catastrophe Multiple fatalitiesLoss of vessel, total loss of incomeOperations halted, image / reputation is severely damagedExtensive environmental damage
Major FatalityExtensive financial lossMajor disruption to operations/temporary loss of income, image/reputation impactedMajor environmental damange
ModerateDisabling injury requires medical treatmentSignificant financial lossSignificant disruption to operations, image / reputation suffersSignificant environmental damage
MinorFirst aid treatment for bruises or minor cuts, absaisionsNot notable financial lossMinor disruption to operationsMinor environmental damage
InsignificantNo injuriesNegligible financial lossNo adverse effect on operationsNegligible environmental damage

The likelihood and consequence matrix helps the vessel owner, master and crew to use the likelihood and consequence ratings that they’ve assigned to determine the risk rating. As you will see below, the risk rating for a crew member being caught in the trawl winch is extreme.

Likelihood and consequence matrix

Step 3 – Identify and implement ways to control the risks

Once the risks have been assessed they need to be controlled. Risks must be either eliminated or reduced to a level that is as low as is reasonably practicable. Risk controls are specific actions taken by vessel owners to eliminate risks or reduce risks to an acceptable level.

Here are some examples of risk controls:

  • developing operational procedures
  • training and inducting crew
  • developing effective emergency response plans
  • regular inspection and maintenance of the vessel, the machinery onboard and the equipment
  • use of effective personal protective equipment.

The hierarchy of controls as outlined in the table below is part of a globally recognised tool that helps vessel owners, masters and crew to determine the most appropriate approach to control risks. While elimination of the hazard is always the preferred option, it is not always feasible or possible. If a hazard cannot be eliminated steps must be taken to implement a range of risk controls to reduce the risks to an acceptable level.

Hierarchy of controls

Shows the scale of controls from 'elimination' being the most effective to wearing personal protective equipment being least effective. In between there are controls of substitution, isolation/engineering, administration/training.

For the trawl winch the vessel owner, master and crew agree that removal of the winch from the vessel is not a practical step to take. They decide to implement a range of risk control measures to reduce the risk to an acceptable level.

The type of risk controls that can applied will depend on a number of factors that will vary on a case by case basis. Here are some of the factors:

  • nature of the hazard
  • any limitations or constraints imposed by the design of the vessel, machinery or plant
  • competency of crew who interact with the hazard
  • cost of control options by comparison with the likelihood and possible consequence of the risk occurrence

Once suitable risk controls are identified, including when a lifejacket must be worn by any person on board, they need to be implemented as soon as possible to help manage the risk.

The vessel owner, master and crew decide the company’s existing fitness for work procedure, fatigue management policy and planned maintenance program are sufficient, however, they agree to implement the following risk controls:

  1. Standard operating procedures (SOPs) need to be established for operating the trawl winch and for net operations.
  2. All crew will be introduced to the SOPs at the safety induction when they first join the vessel.
  3. All crew will receive refresher training every three months to ensure their currency of knowledge of the SOPs.
  4. An emergency stop will be fitted to the trawl winch.
  5. Install additional deck lighting for night operations.
  6. All crew will be provided with personal protective equipment (PPE) and be required to wear their inflatable lifejacket while on deck.
  7. The new SOPs will form a part of the vessel’s SMS.

The risk controls have been entered into the risk register at Appendix A.

Once suitable risk controls are applied, it is useful to re-assess the risk to see if the risk rating has changed. In many cases the likelihood of a risk occurring will reduce when effective risk controls are in place.

The vessel owner, master and crew re-assess the risks associated with the trawl winch once all of the proposed risk controls have been implemented. This time they find that the likelihood has been reduced from likely to unlikely and that the possible consequence has been reduced from major to moderate. 

The overall risk rating has therefore dropped from an extreme risk to a moderate risk (see risk matrix below). The details are all captured in the vessel’s risk register (see appendix A).

 

consequences ranging from insignificant to catastrophic, by the likelihood of the occurance, ranging from rare to almost certainStep 4 – Safety management system review

Once risk controls have been put in place for all identified risks they should form part of the operation’s SMS and be monitored and reviewed to verify their effectiveness. The outcomes of the review and verification process should be documented. If the monitoring and review process identifies a short coming or failure in the risk control measures, the risk assessment process should be revisited.

The Marine Order 504 requires the SMS and therefore the risk management process upon which it is based to be reviewed at least annually. In addition, another trigger for reviewing the risk register could be as a result of a near miss, incident or accident.

The review of the SMS and risk management process ensures their currency and relevance through the DCV owner, master, and crew/s commitment to continuous improvement. Continuous improvement ensures DCV owners, masters and crew are actively involved in the ongoing maintenance of the SMS and risk management process and this is essential to the development of a safety culture.

Appendix A – Risk register examples

Risk registers come in various formats. The following examples are provided as a guide for vessel owners to assist them with the risk assessment and control process, vessel owners have the flexibility to determine which type of risk register best suits their needs. The first entry in the example below shows
how the outcomes of the trawl winch risk assessment and control process have been recorded. 

Example No. 1

Pre-controlPost-control
ActivityHazard/riskLikelihood and consequenceInitial risk ratingRisk controlLikelihood and consequenceResidual risk ratingAccept: yes or no
FishingTrawl winch

Likelihood: likely

Consequence: high

High
  • Standard operating procedures for safe use of the winch and net operations
  • Emergency stop installed on trawl winch
  • Installed additional deck lighting for night operations
  • Crew receive safety induction and refresher training
  • Fitness for work and fatigue management policy
  • Master has senior first aid certificate
  • Inspection and maintenance program for winch
  • Non-skid deck
  • PPE for crew (lifejackets, strobe light and personal locator beacons)

Likelihood: Unlikely

Consequence: Medium

ModerateYes
Loading storesManual handling
injuries and falls

Likelihood: likely

Consequence: high

High
  • Loading procedure
  • Training and induction
  • First aiders

Likelihood: unlikely

Consequence: minor

LowYes
GeneralPerson overboard

Likelihood: possible

Consequence: high

HighGuard rails, boarding ladder, MOB procedure, training and induction, self-inflating lifejackets, locator beacons

Likelihood: unlikely

Consequence: minor

LowYes

Example No. 2

Here is an example of a simplified risk register, one that might be found on a small commercial fishing vessel. It is important to note, that while not shown in the example the owner/skipper and crew have considered the likelihood and consequence of the risks that have been identified.

ActivityHazardRiskControlsControls in place: yes/no
PreparationLifting or carrying weightsManual handling injury
  • Lifting procedure
  • Manual handling training
yes
PreparationSlippery boat ramp or crush between vessel and trailerCrush injury or slip on boat ramp
  • Suitable footwear
  • Launch and recovery procedure
  • Training and induction
yes
OperationsCrew affected by alcohol/drugsInjury, endanger vessel operations
  • Fitness for work policy
yes
OperationsNavigational hazardsCollision, grounding
  • Qualified skipper
  • Good local knowledge
  • Emergency plan
  • Adequate lookout
  • Fitness for work policy
yes
Incomplete    

Example no. 3

Pre-controlPost-control
ActivityHazard/riskRisk ratingRisk controlsRisk ratingPerson responsible for implementing
CruisePassenger overboardHigh
  • Deckhand lookouts
  • Life rings, lights
  • Person overboard procedure
  • Training and induction
  • Quarterly drills
ModerateOwner and master
Incomplete     

Appendix B – Further example of risk assessment/control and the completed risk register

The owner/skipper and crew of a 10 metre outboard propelled long line fishing boat conduct a risk assessment as part of the process of documenting the SMS for the operation. In order to make the task easier they break their operation down into the various activities that they do on a day-to-day basis. 

As a result of their deliberations and discussions they identify the following hazards and risks. 

While not shown in this example the owner/skipper and crew have considered the likelihood and consequence of the risks identified in the following table. The owner/skipper has then recorded the type of controls that are proposed to either eliminate each risk or reduce the likelihood or the potential consequence of each risk.The owner/skipper then develops and documents the relevant policies and procedures that they need to support implementation of the controls. In addition, the owner/skipper ensures that other controls such as personal protective equipment and the inspection and maintenance of the vessel are in place.

ActivityHazardRiskControlsControls in place: yes/no
PreparationLifting or carrying weightsManual handling injury
  • Lifting procedure 
  • Manual handling training
  
PreparationSlippery boat ramp or crush between vessel and trailerCrush injury or slip on boat ramp
  • Suitable footwear
  • Training and induction
  • Launch and recovery procedure
  
PreparationAdverse weatherCapsize
  • Weather assessment and access to  weather information at sea
  
PreparationVessel not ready for sea (fuel, maintenance, safety equipment)Vessel or equipment break down, fire
  • Programmed inspection and maintenance
  • Daily check procedure
  
PreparationRefuellingFire / explosion
  • Programmed inspection and maintenance
  • Smoking policy
  • Refuelling procedure
  
OperationsCrew affected by alcohol/drugsInjury, endanger vessel operations
  • Fitness for work policy
  
OperationsNavigational hazardsCollision, grounding
  • Qualified skipper
  • Adequate lookout
  • Good local knowledge
  • Fitness for work policy
  • Emergency plan
  
OperationsKnivesBody injury
  • Training and induction
  • Emergency procedure
  • First aid
  
OperationsHooks – long lineCrewman overboard, severe injury / potential
  • Long line procedure
  • PPE (inflatable lifejackets, knife/lanyard, personal locator beacon)
  • Emergency procedure
  • Training and induction
  
OperationsLoss of stability / capsizeCrewman overboard
  • Long line procedure
  • Training and induction
  • PPE (inflatable lifejackets, knife/lanyard, personal locator beacon)
  
OperationsDangerous by-catchCrew injury
  • PPE, gloves
  
OperationsFire at seaFire / explosion
  • Fire extinguisher
  • Smoking policy
  • Emergency plans
  • Programmed inspection and maintenance
  
OperationsExposureHeat stress / sunburn
  • PPE (sunscreen, hats)
  
Vessel (trailering/unloading)  As per preparation above  

 

Author

Australian Maritime Safety Authority
Last updated: 8 November 2023