code_of_practice_V3_2019

6.7 ELECTRICAL SYSTEMS
6.7.1 The electrical system should be designed with a level of integrity sufficient to enable the MASS to be operated
and maintained safely as and when required within its design or imposed limitations in all RFOC.
6.7.2 Sufficient electrical power should be provided to supply the required services of the MASS during all RFOC.
6.7.3 Sufficient power should be provided to supply for MASS to conduct its mission with an appropriate level of
redundancy. It is acknowledged that for some smaller Classes of MASS there may be little, or no redundancy
required.
6.8 FIRE SAFETY
5.8.1 Where fire safety systems are required, they should be designed to detect and extinguish a fire with a level of
integrity sufficient to enable the MASS to be operated and maintained safely and to protect the MASS in all RFOC.
6.9 AUXILIARY SYSTEMS
6.9.1 The auxiliary systems should be designed to support mission equipment and mission functions.
6.9.2 If the MASS is to have a payload or carry cargo, it is not to have a detrimental effect on the MASS for the duration
of its mission.
6.9.3 The MASS is to have sufficient systems to support the embarkation of cargo and equipment for the duration of
its mission.
6.9.4 If seamanship systems are fitted to the MASS, they are to ensure that the MASS can be recovered safely and
undertake any seamanship operations as required (e.g. anchoring, mooring, towing etc).
6.10 SOFTWARE INTEGRITY
6.10.1 Functional Objective. For any activity that relies on the integrated use of equipment or sub-systems that include
software, the risks associated with software and its integration into the equipment or sub-system are properly
managed and that the software is safe to use. A failure or unspecified behaviour of the software shall not result in:
n an event that escalates to a hazard; or
n impairment of the mitigation of a hazard; and
n impairment of recovery from a hazard.
6.10.2 Performance Requirements. The way software could be a stimulus event to a hazard, or impair the mitigation
of a hazard, or impair recovery following such a hazardous event, shall be communicated to the appropriate
parties.
6.10.3 The production of software shall be managed so that the safety risks arising from the software production are
reduced to an acceptable level.
MASS UK Industry Conduct Principles and Code of Practice Version 3 45