4.11 CARGO CONTROL ROOM SECURITY
As the nerve centre of an automated tanker's cargo operations system,
the cargo control room should be off-limits to all except the master,
chief officer, engineers, the pumpman and cargo watch officers. A notice
'Authorised personnel only', or an equivalent, should be posted at each
access to the CCR.
At sea the CCR will be left unattended at night and some means of security
should be provided. If the access doors are locked, they should be fitted
with viewing ports so that the off-going watch can check the room visually
If the room is left open, the valve control system should be provided
with a key-operated safeguard to prevent operation of cargo system valves
through curiosity or malice.
The valve operation system should be such that a power loss will not
activate the cargo valves, that is, so that they will fail safe 'as-is',
neither closing nor opening until power is restored or they are operated
locally by hand power.
If the CCR is on the main deck, external access doors and port dead-lights
must be closed and fully dogged before going to sea.