code_of_practice_V3_2019

10.8 RELATIONSHIP BETWEEN AUTONOMY LEVELS OF CONTROL AND RCC
10.8.1 There are several levels of control defined in Chapter 1 of Part 2. Irrespective of the LoC, the RCC should be
designed to enable the operator to take control of the MASS at any time, including the ability to change the level
of control or shut down the MASS completely.
10.9 SUGGESTED RCC OPERATIONAL REQUIREMENTS
10.9.1 The following operational requirements are provided as illustrations for guidance:
n The RCC should enable the operator to plan the MASS mission;
n The RCC should enable the operator to execute a MASS mission;
n The RCC should enable the operator to evaluate the MASS mission;
n The RCC should provide the operator with a sufficient level of situational awareness information both for the
safe navigation and control of the MASS;
n The RCC should provide the ability for the operator to re-programme the required activities and responses of
the MASS in timescales appropriate to the MASSs configuration, location and shipping conditions;
n The RCC should enable the operator to take direct control of the MASS at any time:
n In cases where the RCC is unable to assert direct control of the MASS, e.g. when MASS is operating in Level
of Control 5, special provisions and control measures should be required to ensure safe operation.
n The RCC should alert the operator of any emergency warnings or a change in condition such as risk of
collision, fire on board MASS, MASS equipment or functional failure/defect or 3rd party attack/interference;
n The RCC should alert the operator of any changes to the planned mission, such as change in speed, heading,
collision avoidance manoeuvres;
n The RCC should be arranged such that the transfer of control from one base station to another or from one
MASS to another may be undertaken safely;
n The RCC should be compatible with the communications link;
n The RCC should store data:
n This could include log data for fault diagnosis, scenario reconstruction, (e.g. collision event), last known
coordinates following communications loss etc;
n Sufficient to meet international/local regulations;
n Two or more RCCs could be used to control one MASS from different locations. Only one RCC should provide
control at any one time. Transfer of control from one RCC to another should be a simple seamless transition;
n It is possible that certain MASS functions (e.g. payload – instruments and their data) may be controlled from
separate RCCs;
n The RCC should clearly indicate the control status of the RCC and any other RCC that form part of a
networked control;
n The RCC should provide a sufficient level of security to prevent unauthorised access. This may include
separate account access levels for Operator, Maintainer and Supervisor purposes;
n The RCC should be easy to use. The type of information displayed should be based on the priority of
importance. Safety related warnings, graphical or audible, should be displayed on the Graphical User Interface
(GUI), regardless of the GUI configuration.
MASS UK Industry Conduct Principles and Code of Practice Version 3 67