7.1 Open vs Closed Bus-Tie

Why bus-tie configuration is an exam and bridge topic

After diesel-electric architecture and PMS behaviour, the next power skill is how the plant is split. A bus-tie breaker sits between main switchboard sections (often called rings, sides, or independent power systems). With the tie open, those sections are electrically separate. With the tie closed, they form a common bus: generation and many consumers share one electrical pool.

On the NI Induction and Simulator assessments this is not trivia. Bus-tie status changes the worst-case failure, the footprint after a short circuit, and whether the vessel is in a configuration that matches Critical Activity Mode (CAM) or a less protective Task Appropriate Mode (TAM). Misunderstanding “closed is fine because we have more reserve” is a classic exam and incident trap.

Open bus-tie: fault containment first

Open bus-tie means the connecting breaker(s) between redundant bus sections remain open during the operation. Each section has its own online generation (and usually its own thruster feeders). A short circuit, generator trip cascade, or section blackout on one side is contained by isolation: the healthy section continues to feed its thrusters and essential loads.

Open bus is the configuration most aligned with single-failure tolerance on Class 2 and Class 3 vessels: after the worst credible single failure on one partition, the remaining partition should still keep position in the analysed weather. The DPO’s job is not to design the switchboard, but to know whether the plant is actually running the way the FMEA and CAM require.

Closed bus-tie: efficiency and shared reserve vs cascade risk

Closed bus-tie connects the sections into a common electrical node. Benefits are real:

• Shared spinning reserve — any online generator can support thrusters on either “side.”
• Fewer gensets online for the same average load (fuel and maintenance).
• Smoother load sharing across a larger generator pool.
• Easier power availability when industrial loads and thrusters compete.

The price is common-mode exposure. A severe short circuit, protection discrimination failure, or uncontrolled cascade can collapse both sections at once — full main blackout and total thruster loss. That outcome often exceeds the worst-case single failure the DP Class and FMEA assumed when partitions were designed to be independent.

[!IMPORTANT] Exam trap: “Closed bus is safer because more generators support every thruster.” Availability of reserve is not the same as fault isolation. Closed bus can improve reserve and still be less safe for critical DP if a single electrical event blacks everything.

Single-failure tolerance and the design intent

IMO MSC.1/Circ.1580 class philosophy and vessel FMEAs assume a worst-case single failure must not remove position-keeping capability beyond the analysed residual capacity. Electrical partitions exist so that design failure is “one section,” not “all thrusters.” Running closed bus changes the failure graph: events that were section-local can become whole-plant events unless protection, bus-tie trip discrimination, and generator/thruster arrangements have been specifically proven.

So the operational question is always:

1. What does the FMEA / DP operations manual say about bus configuration for this activity?
2. Are we in CAM (critical work requiring robust single-failure behaviour) or TAM (task allows higher risk)?
3. If closed bus is proposed, has protection been proven so that a single fault still cannot black both sides?

FMEA must prove closed-bus critical work

Closed-bus operation during diving, close-proximity construction, heavy lift, or other high-consequence station-keeping is not a casual bridge preference. It is an engineering claim: that advanced protection (selective tripping, differential/high-speed schemes, sometimes closed-bus FMEA addenda, trials evidence) will open ties or clear faults so the remaining plant survives the design failure. If that proof is missing or protection is degraded (inhibited relays, unfinished maintenance, unknown software state), closed bus during critical work is unjustified.

CAM, open bus, and operational preference

Critical Activity Mode (CAM) configures power, thrusters, and references so the worst-case single failure will not cause loss of position during the critical activity. In practice CAM often prefers open bus (or an equivalent proven isolation philosophy) because that is how residual thrusters after one-side loss remain real. Some modern vessels run proven closed-bus CAM when FMEA and class accept it — the exam still expects you to know why open is preferred when proof is absent: fault containment.

Task Appropriate Mode (TAM) may accept configurations where a single failure could exceed the usual worst case (including closed bus with higher blackout risk) when the consequence of a position excursion is acceptable (e.g. open water standby). Never confuse “allowed in TAM” with “safe for diving under the platform.”

Worked configuration scenario

A DP dive support vessel is set up for saturation diving in moderate weather. FMEA residual capability after loss of one bus section is adequate. Engineers propose closing the bus-tie to drop one generator and save fuel. The DPO and dive superintendent refuse: CAM and company ASOG require open bus for diving; a closed-bus short could black all thrusters and produce an uncontrolled excursion while divers are in the water. Later, on a low-risk standby with no divers and large weather margin, the same plant may run closed bus under TAM with clear abort criteria if protection alarms.

Operator actions and exam traps

Bottom line: open bus-tie prioritises fault containment and single-failure tolerance; closed bus prioritises shared reserve and efficiency at the cost of cascading blackout risk. For critical DP work, default to open bus or only accept closed bus when FMEA and protection systems prove the plant still survives a single failure. CAM usually encodes that preference; the DPO must verify the plant matches it before work starts.