Fatal accident in connection with the operation of an A-frame based launch and recovery system (LARS) used for ROV operations

This work was mainly to undock the ROV from the tether management system (TMS) unit and to cut out and re-terminate a 50-70m section of the umbilical on the ROV winch.

Prior to the incident, the ROV had been separated from the TMS and both units were resting on the base platform in the hangar, with the TMS located just underneath the docking head which was situated 2.5m above the top of the TMS. The ROV was located adjacent to the TMS towards the port side of the hangar.

A total power black out occurred onboard the vessel due to lack of cooling water supply to the auxiliary engines. At this time the TMS unit made a sudden and significant vertical upward movement (of approximately 2.5m) until it was stopped by the docking head overhead. The ROV senior supervisor was standing on top of the TMS with the aim of assisting with the pull-out of the umbilical. He was thus trapped between the TMS and the docking head and subjected to a massive force of 13.7 tonnes, resulting in his death.

At the time of the accident, the ROV supervisor was standing on a small service platform on the side of the TMS facing the accommodation and he was thrown clear, landing on the base platform, with no apparen’t injuries.

The other ROV crew members were located in the following positions:

• One person was strategically located between the ROV/TMS and the accommodation operating the remote control for the LARS system.
• One person was located on the ROV winch deck on top of the ROV hangar, adjusting the position of the transversal crane to keep it well clear of the LARS system.
• Two persons were located on the inboard side of the TMS, pulling out slack on the umbilical from the umbilical winch.
• One ROV trainee was observing the operation from a safe position near the centre of the hangar.

The accident was sudden and the witnesses of the tragedy estimated the time it took for the uncontrolled and rapid spooling of the winch to be in the order of 2-3 seconds.

There was no offshore manager (OM) assigned onboard after the vessel’s departure from its last port.

The ROV crew had allegedly obtained, from the bridge, permission to work at heights.

There were no indications that the ROV crew members were not wearing the correct PPE for this type of operation.

The ROV crew was working on the ROV spread during the de-ballasting of the floating dock.

Relevant crew allegedly knew that a power black out would take place during the dry docking process, although the exact timing of this black out and the permanent loss of 440 VAC was not known to some key personnel beforehand.

The accident occurred at the same time as the power black out. The ROV winch spooled in the umbilical instantly and in an uncontrolled manner, lifting the TMS module vertically up towards the docking head, causing the fatality.

The ROV supervisor was standing on top of the TMS with the aim of assisting the pull-out of the umbilical of which about 5m had been slacked off when the incident occurred. He was trapped and his body subjected to a massive force of 13.7 tonnes between the TMS and the docking head.

Due to power cut the operation of the emergency stop had no effect.

It is anticipated that the task of spooling off (approximately 50m) of umbilical in order to re-terminate had to be completed prior to docking – this may have led to time pressure.

It has been noted that assistant ROV supervisor was in process of lashing down the TMS at the time of the incident.

• Wiring of isolation valve corrected to comply with original drawing.
• Isolation valves hardwired into the emergency stop circuit.
• Brake control valve hardwired into the emergency stop circuit.
• Main controller software updated to request brake on upon an emergency stop.
• Motor controller software updated to request brake on upon an emergency stop.
• Motor controller software updated to de-energise bypass valve upon an emergency stop.

The applied measures of the introduction of modifications to the software and electronic hardware will minimise the probability of any failure to engage the brake, or failure to close the isolation valve, during an emergency stop. The duration of any significant dynamic winch pull will also be minimised as the bypass valve short-circuits the hydraulic motor shortly after an emergency stop.

Further, the following measure will be applied at a later stage due to lead time of components:

• The accumulator will be cut off from the main line, and the stored high pressure oil will be discharged to tank through a hydraulic valve being hardwired into the emergency stop circuit.