16.2.1 Stabilization systems should be so designed
that in case of failure or malfunctioning of any one of the stabilization
devices, or equipment, it would be possible either to ensure maintaining
the main parameters of craft's motion within safe limits with the
aid of working stabilization devices or to put the craft into the
displacement or other safe mode.
16.2.2 In case of failure of any automatic equipment
or stabilization device, or its power drive, the parameters of craft
motion should remain within safe limits.
16.2.3 Craft fitted with an automatic stabilization
system should be provided with an automatic safety control unless
the redundancy in the system provides equivalent safety. Where an
automatic safety control is fitted, provision should be made to override
it and to cancel the override from the main operating station.
16.2.4 The parameters and the levels at which
any automatic safety control gives the command to decrease speed and
put the craft safely in the displacement or other safe mode should
take account of the safe values of heel, trim, yaw and combination
of trim and draught appropriate to the particular craft and service;
also to the possible consequences of power failure for propulsion,
lift or stabilization devices.
16.2.5 The parameters and the degree of stabilization
of the craft provided by the automatic stabilization system should
be satisfactory having regard to the purpose and service conditions
of the craft.
16.2.6 Failure mode and effect analysis should
include the stabilization system.