Marine Dynamic Positioning Systems

Dynamic positioning (DP) is a computer-controlled system that holds a vessel at a fixed position and heading using its own thrusters and propellers, without anchors and without physical contact with the seabed. The regulatory backbone is IMO MSC.1/Circ.1580 (2017), which superseded MSC/Circ.645 (1994) and establishes three Equipment Classes based on the consequences of a worst-case failure. IMCA M 103, IMCA M 117, and the class-society DP notations (DNV DYNPOS, ABS DPS, LR DP) layer the engineering and operational detail on top.

The global DP-equipped fleet numbered roughly 7,000 vessels as of the mid-2020s, spanning drillships, semi-submersible rigs, FPSOs, platform supply vessels (PSVs), anchor handling tug supply vessels (AHTS), dive support vessels (DSVs), cable-lay ships, offshore wind installation vessels, and shuttle tankers. Each category operates under specific DP-class requirements tied to the consequences of a position loss. Use the DP Footprint Calculator to model environmental-load envelopes and the DP Thrust Capability Calculator to verify whether a vessel’s installed thruster power covers the required station-keeping demand.

IMO regulatory framework: MSC.1/Circ.1580

IMO MSC.1/Circ.1580, adopted in June 2017, is the current authoritative IMO document on DP system design and operation. It supersedes MSC/Circ.645 (1994) and is titled “Guidelines for vessels and units with dynamic positioning systems.” The 2017 revision sharpened the failure-mode language, introduced explicit Consequence Analysis requirements, and aligned the three Equipment Classes with the Worst Case Failure Design Intent (WCFDI) concept.

The circular applies to all vessels fitted with a DP system, including mobile offshore drilling units (MODUs) covered separately by the IMO MODU Code (2009 edition, IMO resolution A.1023(26)), which cross-references the MSC.1/Circ.1580 class definitions for DP-equipped drilling units. For MODUs, the MODU Code requires DP2 as a minimum for operations near a wellhead under certain configurations; the DP class selection for a specific drilling programme is ultimately governed by the operator’s Well Operations Management Plan (WOMP) and the relevant flag state regulations.

IMO MSC.1/Circ.1580 defines three Equipment Classes, each calibrated to the worst acceptable consequence of the worst credible single failure:

The WCFDI concept is central to MSC.1/Circ.1580. The WCFDI is the single failure the system is designed to withstand while maintaining position, established in the FMEA and documented in the DP operations manual. For a DP2 vessel, the WCFDI is typically loss of one switchboard bus or one thruster group; for DP3, it is loss of an entire fire-rated or watertight zone. Operations must remain within this design envelope at all times; the WCFDI is not a target to reach but a boundary not to exceed.

DP Equipment Classes: engineering basis

Equipment Class 1 (DP1)

DP1 imposes no redundancy requirement. A single thruster, a single generator, and a single DP control computer are technically compliant. Loss of any of these stops position-keeping, which the IMO defines as acceptable for DP1 operations. DP1 is appropriate where loss of position results only in operational disruption, with no risk of collision, subsea damage, or personnel injury. Typical applications include harbour manoeuvring, certain cable-route survey work, and supply vessel transits in open water.

Cost is the reason operators choose DP1: the power plant is smaller, the redundant switchboard infrastructure is absent, and the FMEA scope is narrower. DNV’s equivalent notation is DYNPOS-AUTS (or the legacy DPS-1); ABS uses DPS-1; LR uses DP(CM).

Equipment Class 2 (DP2)

DP2 requires that any single active-component failure leaves position-keeping ability intact. “Active component” covers generators, switchboard sections, individual thrusters, thruster drives, and DP controller channels; passive components such as cables and pipes within a zone are not individually covered by the redundancy rule but are addressed by the FMEA. The rule in MSC.1/Circ.1580 is that the system must survive the WCFDI without loss of position.

Practically, this means: at least two independent generator groups with split-bus switchboard arrangement and an automatic bus-tie; at least two independent thruster groups covering both the surge, sway, and yaw axes; and a dual-redundant DP controller where one channel can assume full control on failure of the other. The bus-tie is normally open, meaning the two buses run independent; on failure of one generating set, the bus-tie closes automatically and the remaining set takes the full load. Blackout prevention logic in the power management system (PMS) sheds non-essential loads before that event to avoid overloading the surviving bus.

DP2 does not require physical separation. Both generator rooms can be in the same space, both control computers can be in the same cabinet, both thruster groups share the same hull volume. This absence of zone separation is the distinguishing difference from DP3. DNV notations: DYNPOS-AUT or DPS-2. ABS: DPS-2. LR: DP(AA).

Equipment Class 3 (DP3)

DP3 adds physical separation to DP2’s functional redundancy. IMO MSC.1/Circ.1580 requires that no single fire or flooding casualty disables the entire DP system. Each redundant component group (generators, thrusters, DP computers, sensor arrays) must be separated by a fire-rated bulkhead or a watertight bulkhead capable of containing a casualty on one side while the other side remains fully operational.

In practice, this means separate engine rooms or at minimum separate switchboard rooms separated by A-60 fire division; DP control rooms in different locations, often one on the bridge and one in a machinery control room; cable runs in separate routes or conduits; and HVAC isolation so smoke in one zone doesn’t reach the other. The capital cost of DP3 over DP2 on a newbuild is substantial: separate machinery spaces, additional cabling, blast-rated bulkheads, and additional sensor redundancy add roughly 10-20% to a vessel’s capital cost depending on size and configuration.

DNV notations: DYNPOS-AUTRO or DPS-3 (the R indicates redundant control in separate locations). ABS: DPS-3. LR: DP(AAA).

Class-society DP notations

Each major classification society has its own DP notation scheme, but all map directly onto the three IMO Equipment Classes:

DNV (DYNPOS series, current rules DNV-RU-SHIP Pt.6 Ch.3): DYNPOS-AUTS (DP1, auto position, single sensor); DYNPOS-AUT (DP2, redundant active components); DYNPOS-AUTR (DP2 with redundant DP control room, an intermediate class); DYNPOS-AUTRO (DP3, fully redundant with zone separation). DNV also certifies DP systems independently from the hull class, issuing type approval for DP controllers. The legacy DPS-1/2/3 notation is retired but still appears on older vessels and in contract specifications.

ABS (DPS series, ABS Rules for Building and Classing Mobile Offshore Drilling Units / Offshore Support Vessels): DPS-1, DPS-2, DPS-3, directly aligned with IMO Equipment Classes 1, 2, 3. ABS also provides the optional DPS-AUTRO notation for vessels with additional redundant control systems equivalent to DNV’s AUTR.

LR (DP series, Lloyd’s Register Rules for the Classification of Ships Pt.7): DP(CM) for Equipment Class 1 (computer-managed position); DP(AA) for Equipment Class 2; DP(AAA) for Equipment Class 3. LR’s AAA designation indicates the three “A” layers of redundancy: active redundancy, alternative control, and architectural separation.

BV, ClassNK, KR, RINA each maintain equivalent notations, all traceable to the same three IMO Equipment Classes. A vessel holding a DP3 ABS notation is operationally equivalent to a DYNPOS-AUTRO DNV vessel for contracting purposes.

Control loop architecture: Kalman filter and model-based control

The DP control algorithm runs a continuous control loop that takes position-error inputs, applies a mathematical model of vessel dynamics, and issues thrust commands. The architecture that became the industry standard from the 1970s onward is model-based feedback control using a Kalman filter.

The Kalman filter runs two parallel processes. The prediction step uses a mathematical model of the vessel’s response to thruster forces and environmental loads to estimate where the vessel will be at the next measurement cycle, based purely on what the thrusters are commanded to do. The update step then takes the real position measurement from the position reference systems and corrects the estimate, weighting the measurement by its estimated noise covariance relative to the prediction’s covariance. The output is an optimal state estimate, including position, velocity, and heading, that is smoother than the raw sensor feed and rejects measurement noise without introducing the lag of a simple low-pass filter.

The environmental model within the Kalman filter estimates the slowly varying disturbance forces (current, wind gradient, wave drift) from the residual between predicted and measured position. This disturbance estimate drives the feed-forward component of the thrust command: the DP system doesn’t wait for a position error to develop before applying corrective thrust. It applies the estimated environmental load continuously and only uses the feedback loop to correct the residual error the feed-forward didn’t eliminate. The result is tighter position-keeping with lower thruster activity.

The total thrust demand $\mathbf{F}_{total}$ at each control cycle is:

where $\mathbf{F}_{feedback} = K_P \mathbf{e} + K_D \dot{\mathbf{e}}$ (proportional-derivative on position and velocity error) and $\mathbf{F}_{feedforward}$ is the Kalman-estimated environmental disturbance. The thrust allocation algorithm then distributes $\mathbf{F}_{total}$ among individual thrusters, solving a constrained optimization that minimizes total power consumption while respecting thruster capacity limits and forbidden azimuth zones (sectors where a thruster’s wash would impinge on another thruster or an ROV umbilical).

Modern DP systems from Kongsberg Maritime (K-Pos DP family), Rolls-Royce Marine (now Kongsberg), Wärtsilä (Nacos Platinum), and Norcontrol (now Wärtsilä) all implement variants of this Kalman filter plus thrust allocation architecture. The controllers are type-approved by class societies under IEC 61508 functional safety standards.

Thruster systems and power management

A DP vessel’s ability to hold station depends on having sufficient thrust in every direction: surge (fore-aft), sway (port-starboard), and yaw (rotation). The combination of thruster types varies by vessel class.

Tunnel thrusters are fixed-direction units mounted transversely through the hull, typically in the bow and sometimes the stern. They provide pure lateral force. Capacity on modern PSVs runs 1,500-3,000 kW per unit for the largest bow thrusters. Tunnel thrusters suffer from reduced effectiveness in ahead speed above roughly 3 knots, where the vessel’s own forward motion causes cavitation and flow disruption in the tunnel.

Azimuth thrusters (also called azipods or Z-drives) can rotate 360 degrees, providing thrust in any horizontal direction from a single unit. They are the dominant choice on modern offshore vessels because one azimuth thruster can contribute to surge, sway, and yaw simultaneously, reducing total installed thruster count for a given station-keeping requirement. Wärtsilä’s Azipull, Rolls-Royce’s Azipull series, and ABB’s Azipod are common types. Capacity ranges from 500 kW to over 7,000 kW per unit.

Controllable-pitch propellers (CPP) on the main propeller shafts contribute to surge force and can be combined with tunnel thrusters for DP. On vessels where the main propellers are fixed-pitch, the DP system controls them via variable-frequency drives (VFDs) and uses reversing to provide negative surge force.

The power management system (PMS) is the link between the DP system and the vessel’s electrical plant. The DP system signals the PMS when it needs more power (high environmental load, large position excursion) and the PMS schedules generators to start, synchronize, and connect before the power demand arrives. Blackout prevention is the critical function: when total vessel load approaches the capacity of the running generators, the PMS sheds controllable loads (deck cranes, HVAC, galley, hotel loads) before shedding thruster power. Shedding thrusters causes loss of position; shedding non-essential hotel loads is recoverable. On a DP3 vessel, the bus-isolation arrangement means the PMS must manage separate power islands, with each island sized to sustain its thruster group independently.

Battery hybrid systems have entered DP vessels since the mid-2010s. The battery provides peak-shaving, covering the short spikes in thruster power demand that occur during wave response without spinning up an additional generator. DNV’s Battery notation and ABS’s Battery System notation both apply to DP vessels with integrated battery systems. Operational testing on PSVs fitted with 500-1,000 kWh battery banks has shown 15-20% fuel savings in benign DP operations. The Battery Hybrid Propulsion article covers the technical architecture in more detail.

Position reference systems

IMO MSC.1/Circ.1580 requires that no single common-mode failure can disable all position reference inputs. For DP2 and DP3, this means at least two different types of PRS are required, with a minimum of three independent systems total. The DP controller applies a voting algorithm: if one PRS diverges from the others by more than a defined threshold, the DP system raises an alarm and the operator can exclude the suspect system.

DGNSS

Differential GNSS (most commonly DGPS using the US GPS constellation, supplemented by GLONASS, Galileo, or BeiDou on modern receivers) is the primary position reference on almost every DP vessel. A differential correction signal from a shore-based reference station, broadcast via satellite link (SBAS networks such as WAAS or EGNOS, or private networks such as Fugro’s StarFire and TrimbleCenterPoint RTX) corrects the raw GNSS signal and achieves real-time position accuracy of 0.3-1.0 m RMS. On DP2 vessels, two independent DGNSS receivers on separate antennas, separated by at least 2-3 m, are standard. The separation matters because a radio-frequency interference event affecting one antenna is less likely to affect both.

The DP controller processes DGNSS position at 1-10 Hz, feeding the Kalman filter update step. GPS outages (satellite geometry, jamming, spoofing) are a growing concern in certain offshore regions, particularly in areas with active military exercises. The 2023 GPS jamming incidents in the Baltic and Red Sea regions highlighted the need for DGNSS-independent backup systems on DP2/3 vessels.

Hydroacoustic positioning (HPR/USBL/LBL)

Hydroacoustic systems measure the vessel’s position relative to a transponder or transponder array on the seabed. Ultra-Short BaseLine (USBL) systems, such as Kongsberg Maritime’s HiPAP series and Sonardyne’s SPRINT-Nav, mount a transducer array on the vessel’s hull and range to a single transponder on the seabed or a ROV. The angular measurement of the reply signal, combined with the acoustic range, gives position to within 0.1-0.5% of water depth for modern USBL systems. Long BaseLine (LBL) systems use three or more seabed transponders, providing absolute position accuracy of 0.5-2.0 m at any depth but requiring transponder deployment and calibration before each field.

Hydroacoustic systems are independent of GNSS and do not degrade at water depth; this makes them the primary backup for deep-water drilling, where a single DGNSS outage during a well intervention is the scenario that DP3 is designed to survive. They require an acoustic window through the hull and suffer from sound-velocity profile changes, thruster wash noise, and interference from other vessels’ acoustic equipment operating in the same frequency band.

Taut wire

A taut wire reference deploys a heavy weight (anchor clump) to the seabed on a thin steel wire and measures the wire’s angle and length from the vessel. Position is computed from the wire geometry. Taut wire is mechanically simple, entirely independent of radio and acoustic signals, and was one of the first DP reference systems developed in the 1960s. Modern taut wire units (Innerspace, Nautronix) resolve position to 0.1-0.3 m in moderate water depths. The limitation is water depth: beyond roughly 500 m the wire weight and catenary effects degrade accuracy, and beyond 1,000-1,500 m the system is not practical. On drilling vessels taut wire remains a standard third reference, deployed before critical operations for independent cross-check of the DGNSS and HPR signals.

Laser and microwave optical systems

CyScan (Seatex/Kongsberg) and Fanbeam (Renishaw) systems use laser rangefinding against a retro-reflector target mounted on a fixed installation (platform leg, jacket) to give polar position relative to the target. They achieve centimetre-level accuracy within their operating range (typically up to 500-1,000 m depending on atmospheric conditions) and are used when the vessel is working alongside a platform where extreme position accuracy is needed and the installation provides a hard reference. They’re not usable in rain, fog, or at large distances.

RadaScan (Guidance Marine) uses microwave radar to range to a reflector target, giving millimetre-level accuracy in all weather conditions and at distances up to 1,500 m. It’s the preferred close-proximity reference for shuttle tanker offtake operations alongside FPSOs, where the vessel must maintain a 50-100 m separation in beam seas while the tanker loading hose is connected.

Sensors: heading, motion, and environment

Beyond position references, the DP system needs heading (to resolve the position error into thruster axes), vessel motion (pitch, roll, heave), and wind (for the feed-forward component of environmental load estimation).

Gyrocompasses provide heading to the DP controller. A DP2 vessel carries three independent gyrocompasses; a DP3 vessel carries three or more distributed across its redundancy zones. Modern fibre-optic gyros (FOG) and ring-laser gyros (RLG) have replaced the spinning-mass gyros of the 1980s and achieve heading accuracy of 0.1-0.3 degrees RMS, sufficient for azimuth thruster command calculations. Kongsberg’s Seatex MRU-6 series and Ixblue’s Phins FOG family are common DP-grade units.

Motion reference units (MRUs) measure surge, sway, heave, pitch, and roll accelerations and integrate them to give real-time vessel motion data. The DP controller uses heave velocity and acceleration to compensate for wave-induced position noise in the DGNSS signal; without MRU inputs, wave-frequency vessel motion would alias into the Kalman filter’s position estimate and cause unnecessary thruster activity. MRUs are also required inputs for the vertical reference in acoustic positioning calculation.

Wind sensors measure wind speed and direction at the mast-head. The DP system uses these to compute the expected aerodynamic force on the vessel’s above-waterline profile (using pre-loaded wind coefficients from model tests or CFD) and applies a wind feed-forward correction to the thrust demand. Two independent wind sensors are standard on DP2 vessels, four on DP3 (to provide zone-independent inputs).

FMEA: failure mode and effects analysis

IMCA M 102 (Guidance on Failure Modes and Effects Analyses) and IMCA M 166 (Guidance on the Conduct of Trials and Testing for DP Systems) define the FMEA methodology for DP vessels. The FMEA is not a one-time document: it is a living record that tracks every modification to the DP system, every hardware change, every software update, and every trial result.

The FMEA process identifies every component of the DP system, its failure modes, the effects of each failure on position-keeping capability, and the mitigating redundancy or protective measure. For a DP2 vessel, the FMEA must demonstrate that no single active-component failure causes loss of position; for DP3, it must demonstrate the same for the worst-case zone loss (fire or flooding casualty in any one zone).

The key output of the FMEA is the WCFDI: the Worst Case Failure Design Intent. This is the single failure mode that, if it occurs, results in the maximum degradation to DP capability while still keeping the vessel in position. The WCFDI is vessel-specific and is determined by the engineer conducting the FMEA, not by a generic rule. On a typical DP2 PSV with a split-bus switchboard, the WCFDI is usually the loss of the larger switchboard section, which removes a thruster group. On a DP3 drilling vessel, the WCFDI is the loss of an entire engine room.

Annual DP trials and proving trials

IMCA M 166 defines the proving trials (performed at newbuild or after significant modification) and the annual trials (maintenance of the FMEA verification). Annual DP trials are not optional; they are required by class-society rules and by most charterers’ vetting requirements to confirm that the DP system still performs as the FMEA predicts.

The annual trials programme typically covers: verification of sensor inputs and alarms; FMEA-based failure simulation (testing each identified single fault to confirm the system continues position-keeping); power management response (bus-tie closure timing, generator start-up, load shedding); position reference system voting and exclusion; and documentary update of the trials record. Class society surveyors may attend or review the documented results. DNV’s DP annual trial requirements are set out in DNV-RU-SHIP Pt.6 Ch.3, which specifies the test procedures and the minimum scope of equipment tested.

The proving trials go deeper: they involve physically inducing FMEA failure modes (disconnecting generator bus sections, isolating thruster control loops, injecting faults into the DP controller) while the vessel is in a safe open-water area, and verifying that the DP system’s response matches the FMEA prediction. Proving trials are witnessed by the class-society surveyor. A failure to match the FMEA prediction requires an engineering investigation and FMEA revision before the trial is accepted.

DP capability plots and the consequence analysis

A DP capability plot (also called a DP footprint or DP performance envelope) is a polar diagram showing the maximum sustainable wind speed (and associated current and wave conditions) from each direction for which the vessel can maintain station with all thrusters operational and with the WCFDI condition in effect. It is generated from a vessel model that combines hydrodynamic coefficients (often from model testing or CFD), thruster force/torque characteristics, and environmental load calculations.

IMCA M 140 (Specification for DP Capability Plots) defines the standard for producing and presenting these plots. The plot shows two envelopes on the same polar diagram: the “All Thrusters Operational” envelope (representing full capability), and the “Worst Case Failure” envelope (representing capability after the WCFDI has occurred). The gap between the two envelopes represents the safety margin available to the operator: if the environmental conditions plot inside the WCFDI envelope, the vessel can sustain station even if the worst credible single failure occurs at that moment.

The DP Footprint Calculator provides a simplified capability plot model based on installed thruster power, vessel dimensions, and environmental load coefficients. Use it alongside the DP Thrust Capability Calculator to check whether a planned operation remains inside the WCFDI envelope for the forecast conditions.

The consequence analysis is the operational application of the FMEA. Before each DP operation, the DP operator or DP vessel master reviews the current weather and sea state, compares it to the WCFDI capability envelope, and confirms that the operation can proceed and can be terminated safely if the WCFDI occurs. This review is documented in the DP operations logbook. For operations with a defined critical period (the period during which loss of position is unacceptable, such as when a drillstring is near bottom or a saturation diver is under water), the consequence analysis explicitly defines the alert conditions (watch circles, sector alarms) and the emergency disconnect protocol if the WCFDI occurs during the critical period.

DP operational classes and watch levels

IMCA has developed an operational framework that classifies operations by their risk: the DP operational intent (DPOI). Clients and operators specify the DP class required for an operation based on the consequences of position loss.

Three watch levels describe the operational status of a DP2 or DP3 vessel:

Watch Level 1 (Green): normal DP operations, all systems operational within FMEA parameters, weather inside capability envelope, no critical phase in progress. Standard monitoring applies. See the Offshore DP Watch Level 1 Green Calculator for the associated operational parameters.

Watch Level 2 (Yellow): degraded DP operation, one or more systems operating outside normal parameters (a sensor fault, a thruster advisory, weather approaching the WCFDI boundary), but position still maintained. Heightened monitoring; review of abort criteria; notification of offshore installation manager. The Offshore DP Watch Level 2 Yellow Calculator covers alert thresholds and response protocols.

Watch Level 3 (Red): imminent risk of position loss or position exceedance in progress. Immediate action required; emergency disconnect procedures activated; vessel moving off the location. The Offshore DP Watch Level 3 Red Calculator models the alert and abort conditions.

The IMCA DP station-keeping incident reporting programme (annual results published under IMCA M 232 and predecessors) has consistently identified the same top causes of DP incidents across the fleet: power-management configuration errors, DGNSS signal jumps, operator error in watch-level assessment, and thruster faults that were not identified by the pre-operation FMEA trial. The 2023 IMCA annual DP statistics report recorded 197 station-keeping incidents across 22 incident categories, with power-related failures accounting for 31% of all incidents.

DP operations by vessel type

Drilling and well intervention

Drillships and semi-submersible rigs under IMO MSC.1/Circ.1580 and the IMO MODU Code typically operate at DP3 for deep-water drilling. The WCFDI on a DP3 drillship is the loss of one engine room, which removes typically half the installed power (8-12 MW on a modern drillship out of 16-24 MW total) and a thruster group. The DP system must maintain station on the remaining zone’s thrusters, which is achievable in moderate sea states but defines the operational limit. The well control consequence of a position loss on a drilling vessel justifies the DP3 capital cost: if the drillstring detaches during a loss of position event, the emergency disconnect sequence takes 60-120 seconds depending on water depth and wellhead type; a large drive-off can sever the riser before the EDS completes.

Well intervention and wireline vessels performing operations inside a safety zone (<500 m from a fixed installation) also require DP2 or DP3, with the specific class determined by the installation’s safety case and the relevant flag state / host state regulations.

Offshore construction and cable-lay

Pipe-lay vessels, reel-lay vessels, and heavy-lift construction vessels use DP2 typically, with some critical operations (J-lay close to a fixed asset) requiring DP3. The position-keeping accuracy requirement for pipe-lay is tighter than for supply work: the pipe touchdown point must stay within 1-2 m of the planned route for the pipe stress calculations to remain valid. The DP controller’s lateral error envelope for construction vessels is commonly specified at ±0.5 m RMS in the operating sea state.

Cable-lay vessels maintain heading within tight limits (typically ±2 degrees from planned heading) so the cable is laid on the correct route. The DP system on a cable-lay vessel works closely with the dynamic-load management of the cable-laying machinery: tension spikes in the cable can induce vessel-motion transients that the DP system must absorb without disrupting the lay.

Dive support

Dive support vessels (DSVs) used for saturation diving are among the most demanding DP applications. A saturation diving system with divers in the water requires that the vessel not move more than a defined distance in any direction for the duration of the dive, which can be 6-24 hours at depths of 100-300+ m. Most DSV operations require DP2 at minimum; saturation diving near fixed assets (platforms, wellheads) typically requires DP3. The divers’ umbilical is the critical constraint: a sudden position change of more than 5-10 m can tension or part the umbilical, with potentially fatal consequences. The DP operator on a DSV must hold a DP Advanced certificate (NI/IMCA scheme) and is specifically trained in the emergency protocols for diver recovery.

Shuttle tanker offtake

Shuttle tankers performing tandem offtake from FPSOs use DP2 to maintain station approximately 50-100 m astern of the FPSO during the loading operation, which takes 12-36 hours depending on the cargo parcel. The relative position between the shuttle tanker and FPSO is measured using a dedicated radar-based system (RadaScan or similar) and fed to the DP controller as a relative position reference, rather than an absolute DGNSS position. This keeps the tanker in the correct relative position even if the FPSO itself moves. OCIMF provides guidance on the specific DP requirements and approach procedures for FPSO offtake operations in its “Guidance on the Operation of DP Vessels in Proximity to Offshore Installations.”

Offshore wind installation

Wind turbine installation vessels (WTIVs) use DP2 during the transit and positioning phase, but many jack-up WTIVs transition to jacked-up (seabed-supported) mode for the actual turbine installation and use their DP system only for final positioning before jacking. Monopile installation vessels that do not jack up maintain DP during installation, which requires accurate heading control (within ±1 degree) for the crane operator to align the monopile with the foundation. Cable-lay vessels serving the inter-array and export cable installation for offshore wind farms are DP2 as standard.

DPO certification and the Nautical Institute scheme

The Nautical Institute (NI), in partnership with IMCA, administers the global DP operator certification programme. IMCA M 117 sets out the competence framework. The certification pathway has two levels:

Basic DP Operator Certificate: for operation of DP1 and DP2 vessels in defined circumstances. Requirements: approved DP induction course (DNV-approved simulator training centre, minimum 3-5 days), documented sea time (minimum 30 days DP watchkeeping on an operational DP vessel, recorded in the NI DP logbook), in-service assessment by a qualified DP examiner, and issue of the NI certificate. The 30 days must cover at least 4 watches per day to build genuine operational experience.

Advanced DP Operator Certificate: for operation of any DP class vessel, including DP3, and for senior DPO roles. Requirements: the Basic certificate, additional documented sea time on a DP2 or DP3 vessel (minimum 30 additional days, typically on a different vessel type to the Basic), an advanced simulator course covering DP3 failure scenarios and consequence analysis, and a second in-service assessment. Some flag states (including Norway, UK MCA, and the Bahamas Maritime Authority) have incorporated the NI/IMCA DP certificate into their STCW Chapter V special training requirements for DP-equipped vessels.

STCW Chapter V (Special Training Requirements) does not yet mandate DP certificates by direct regulation, but MSC.1/Circ.1580 states that key DP personnel should meet the competence standards in IMCA M 117. The gap between “should” and “shall” is filled by charterer requirements: virtually all oil-major charters and IMO vetting programmes (e.g., SIRE 2.0 for tankers, OCIMF CMID for offshore supply vessels) require DPO certificates for personnel in DP watchkeeping roles.

A DP vessel is required by MSC.1/Circ.1580 to maintain a DP operations manual (also called the DP operations document or DP operating manual), which specifies the WCFDI, the watch-level criteria, the consequence analysis procedure, the emergency disconnect protocol, and the minimum equipment requirements for each class of operation. The DP operations manual is a class-approved document; any change requires class-society review.

IMCA incident reporting: documented failure patterns

IMCA’s annual DP station-keeping incident statistics, compiled from voluntary reports from IMCA member operators, are the primary industry dataset on DP system reliability. Reports from across the fleet are classified under IMCA M 232 into: Drive-Off (unintended powered position excursion), Drift-Off (loss of power causing uncontrolled position loss), Loss of Position (position exceedance of defined limits), and Near Miss.

The distribution of causal categories has been consistent over the years the programme has run. Power-related failures (generator trips, blackout, bus-tie failure to close) account for approximately 30% of reported incidents. Position reference system failures (DGNSS jumps, acoustic transducer fouling, erroneous sensor exclusion by the DP voting algorithm) account for approximately 25%. Human error (incorrect DP mode selection, watch handover failure, consequence analysis not reviewed) accounts for approximately 20%. Thruster or drive failures account for the remaining 25%.

The practical implication for operators: the FMEA is necessary but not sufficient. Power plant configuration before DP operations (how many generators are on-line, bus-tie state, load shedding thresholds) is the single intervention with the highest incident-reduction potential. Vessels that require DP2 operations on a single bus (because a generator is on maintenance) are operating outside their FMEA envelope and have elevated blackout risk.

DP failure modes and the DP system FMEA in practice

The DP FMEA as required under MSC.1/Circ.1580 and IMCA M 102 is produced by a specialist FMEA team, typically involving the vessel designer, the DP system manufacturer (Kongsberg, Wärtsilä, etc.), the class-society surveyor, and the operator. The initial FMEA for a DP3 drillship runs to thousands of pages, covering every bus breaker, every sensor feed, every thruster drive card, every cooling loop, and every cable run.

The FMEA categorizes each failure by consequence: failures that cause immediate loss of position (Severity A), failures that degrade the system but maintain position (Severity B), and failures that are detectable and correctable before they affect position-keeping (Severity C). For DP2, every Severity A failure must be blocked by a single layer of redundancy. For DP3, every Severity A failure mode within the WCFDI scenario must be blocked by zone separation.

The proving trials validate the FMEA by physically inducing every Severity A failure in a safe operational environment and observing the system response. For a DP3 drillship, this takes 5-10 days of sea trials. Annual trials then re-verify a representative sample of the failure modes, focusing on those most likely to degrade (battery-backed UPS systems, bus-tie contactors, sensor alarm setpoints).

After any modification to the vessel’s power plant, thruster configuration, or DP controller, the FMEA must be reviewed and updated before return to DP operations. This requirement drives significant administrative overhead on vessels where maintenance is frequent: a generator refit, a thruster drive-card replacement, a DP software update, or a change to the bus-tie protection relay settings all trigger an FMEA review cycle. Class societies enforce this through their survey regime.

Related calculators and tools

The DP Footprint Calculator models the station-keeping capability envelope from installed thruster power and vessel geometry. The DP Thrust Capability Calculator checks individual thruster group output against a required station-keeping force. The DP DP2 Failure Envelope Calculator applies the WCFDI condition and shows the residual capability envelope. The DP FMEA Single Fault Calculator steps through a single-fault assessment. The Mass DP Footprint Calculator builds an aggregate capability model across multiple environmental load scenarios. The Class DNV DPAAA Calculator applies the DNV DYNPOS-AUTRO notation requirements.

Limitations of this article

This article covers the principal IMO and IMCA regulatory framework as of MSC.1/Circ.1580 (2017) and IMCA M 103, M 117, M 140, and M 232. Several adjacent areas are noted here rather than treated in full:

The IMO MODU Code (resolution A.1023(26), 2009 edition) contains specific requirements for DP on mobile offshore drilling units that interact with but differ from the general MSC.1/Circ.1580 framework. MODU Code Article 2.7 and Chapter 7 address DP in detail; the specific well-by-well operational requirements for DP drilling are governed by the Well Operations Management Plan framework under IMO and national regulations, not by MSC.1/Circ.1580 directly.

DP cyber security has been addressed by IMO MSC-FAL.1/Circ.3 (Guidelines on Maritime Cyber Risk Management, 2017) and BIMCO/IMCA/IACS guidance, but the specific cyber resilience requirements for DP control systems are still being developed by the industry as of this writing. Class societies (DNV, LR, ABS) have issued cyber notations applicable to DP systems, but there is not yet a single consolidated IMO instrument addressing DP system cybersecurity specifically.

The wave-frequency DP response, where the vessel is allowed to move with wave motion (heave, pitch, roll) rather than attempting to resist it with thrusters, is governed by the control system’s filter bandwidth settings and is handled differently by different manufacturers. The detailed control system tuning and stability analysis for specific vessel-thruster configurations is beyond the scope of this article.

National regulations (USCG, Norwegian PSA, UK HSE, Brazilian ANP) layer additional requirements on top of IMO and IMCA standards for operations in their jurisdictions. Norwegian PSA regulations are particularly detailed for DP operations in the Norwegian Continental Shelf; the PSA’s Activity Regulations reference NORSOK standards (particularly NORSOK D-001 for drilling) that extend the IMO/IMCA framework.

See also

Related wiki articles: Marine Electrical Generation and Distribution covers the power plant architecture that underpins DP3 zone separation. Marine Bridge Equipment and Integrated Bridge Systems addresses the DP operator console within the integrated bridge context. Bow Thruster and Stern Thruster covers the thrust hardware in detail. Marine Engine Room Automation and Monitoring addresses the PMS integration. Marine Mooring Equipment and Winches addresses the alternative station-keeping method and when DP is chosen over mooring. FPSO: Floating Production Storage and Offloading covers the FPSO vessel type that is both a major DP2/3 operator and a fixed reference for shuttle tanker DP operations. Battery Hybrid Propulsion covers the energy-storage integration now common on new DP vessels. STCW Convention and STCW Chapter V Special Training cover the broader certification framework within which the NI DP certificate sits.

Related calculators: Offshore DP Watch Level 1 Green, Offshore DP Watch Level 2 Yellow, Offshore DP Watch Level 3 Red.