10.1 IMO Equipment Classes 1, 2 and 3

Why equipment class is a DPO core topic

On the Nautical Institute induction and simulator pathway, equipment class is not trivia about a plaque in the engine control room. Class tells you what single failures the design is intended to survive without losing position-keeping capability. That frames every later topic in this domain: FMEA, worst-case failure (WCF), consequence analysis, ASOG, and Critical Activity Mode. If you mis-state Class 1 versus Class 2 versus Class 3, you will mis-state what “redundant” means when a generator, thruster, bus section, or gyro fails.

IMO equipment classes (commonly called DP Class 1, 2 and 3) come from international guidelines for vessels and units with dynamic positioning systems. Classification societies and flag administrations apply those principles through class notations (wording varies by society, but the 1 / 2 / 3 philosophy is shared). For exam purposes, master the failure philosophy, not a particular class society’s stamp string.

[!IMPORTANT] Equipment class is a design and certification property of the vessel and DP plant. The DPO does not “switch the ship to Class 3” from a menu. You operate within the class the vessel holds, and you may choose more conservative operating modes (for example open bus-tie, CAM) that use redundancy more safely — but mode choice does not upgrade the class plate.

Class 1 — no redundancy requirement

Equipment Class 1 means the DP system is not required to be redundant for station-keeping after a single fault. In plain language:

• A single fault (generator trip, thruster failure, computer failure, PRS loss, sensor fault, cable failure, etc.) may cause loss of position.
• There is no mandatory design obligation that an independent alternate path keep the vessel on location after that fault.
• The vessel may still have multiple thrusters or generators for performance, but performance is not the same as single-fault tolerance.

Class 1 vessels can be perfectly suitable for some operations far from critical infrastructure, with appropriate risk assessment and client acceptance. They are not suitable where industry, charter, or regulatory practice demands single-fault tolerance. For the DPO exam, the signature phrase is: on Class 1, a single fault may lose position.

Class 2 — redundancy of active components

Equipment Class 2 raises the bar: loss of position shall not occur as a result of a single failure in any active component or system. Active components include items that move, switch, generate, or compute — generators, thrusters, switchboard breakers, DP computers, active sensors, pumps that must run, and similar.

Key ideas the exam expects:

Static components (for example certain passive cable runs, structural items, or passive pipe sections, depending on design rules) may not always need full duplication if reliability and protection are accepted under the applicable guideline and class rules. Do not invent a long list of “static exemptions” on the exam — remember the principle: Class 2 is about surviving single active failures without losing position; detailed static-component treatment is a design/FMEA matter.

Class 2 does not by itself require full fire and flood compartment separation of redundant systems. Two redundant computers sitting in the same space, or two power systems sharing a common vulnerability to one fire or flood event, may still meet a pure “active component” reading if the design failure definition is limited that way — which is exactly why Class 3 exists.

Class 3 — Class 2 plus physical separation (fire/flood)

Equipment Class 3 includes the Class 2 single-fault philosophy and goes further: loss of position shall not occur from any single failure including a completely burnt fire subdivision or flooded watertight compartment. Redundant systems must be physically separated so that fire or flood that destroys one compartment does not remove both sides of a critical function.

Exam contrast in one sentence: Class 2 stops you losing position after a single active equipment failure; Class 3 also stops you losing position after a single compartment fire or flood that takes out co-located gear.

Comparison table (memorise this)

Implications for operations

Knowing the class is not enough; you must use it:

1. Pre-entry / project setup — Confirm vessel class matches client and work-scope requirements. A Class 1 vessel cannot be “operated as Class 2” by procedure alone.
2. Consequence analysis / WCF — On Class 2/3, the design WCF and online consequence analysis assume single-fault survival in the design weather. On Class 1, you should not expect the same design promise.
3. ASOG / CAM — Operating guidelines often set different green/yellow/red limits depending on remaining redundancy. Class 2/3 vessels still need correct bus configuration, thruster enable set, and reference count to actually use their designed redundancy.
4. Degraded plant — If a Class 2 vessel has already lost one thruster set or one bus section, you may be operating below the design class intent until restored. Treat remaining capability honestly; do not claim “we’re Class 2 so we’re fine” after major equipment is already offline.
5. Charter and industry practice — Diving, heavy lift near assets, drilling, and many platform approaches typically specify Class 2 or Class 3 vessels. Class is a commercial and safety filter as well as a technical one.

Implications for NI certificates and sea time

The Nautical Institute offshore scheme ties certificate grade to the class of vessel on which DP sea time is gained:

Exam framing: if a candidate only ever logs DP time on Class 1, that time does not complete the Class 2/3 sea-time requirement for Unlimited. Class 2 and Class 3 both count toward the higher grade’s class requirement; Class 3 is not “more unlimited” than Class 2 for that rule — both are acceptable class levels for Unlimited sea time.

Worked comparison scenario

Three vessels hold near a platform in moderate weather.

• Vessel A (Class 1) loses its only online DP process station. Position-keeping capability is lost or severely compromised; the design never promised single-computer survival. Contingency is manual/joystick, engines, and emergency departure — not “the redundant computer takes over.”
• Vessel B (Class 2) loses one thruster and one generator on the same electrical side. Remaining thrusters and generation on the redundant side should still hold if weather is inside the post-failure envelope and bus configuration supports independence. Online consequence analysis and ASOG decide whether critical work continues.
• Vessel C (Class 3) suffers a fire that destroys one DP equipment room. Because redundant computers, UPS, and critical paths are separated by design, the surviving compartment’s systems should still support position-keeping. On a Class 2 vessel with both computers in one room, the same fire could remove the whole control system even if thrusters and generators were duplicated.

Exam traps for Classes 1, 2 and 3

Bottom line: Class 1 accepts single-fault loss of position; Class 2 requires redundant active systems so one active failure does not lose position; Class 3 adds physical separation so fire or flood in one compartment does not lose position. Use class for operational risk judgement and for NI Unlimited sea-time eligibility (Class 2/3).