Comment

Comment by crote

I strongly recommend watching/reading the entire report, or the summary by Sal Mercogliano of What's Going On In Shipping [0].

Yes, the loose wire was the immediate cause, but there was far more going wrong here. For example:

- The transformer switchover was set to manual rather than automatic, so it didn't automatically fail over to the backup transformer.

- The crew did not routinely train transformer switchover procedures.

- The two generators were both using a single non-redundant fuel pump (which was never intended to supply fuel to the generators!), which did not automatically restart after power was restored.

- The main engine automatically shut down when the primary coolant pump lost power, rather than using an emergency water supply or letting it overheat.

- The backup generator did not come online in time.

It's a classic Swiss Cheese model. A lot of things had to go wrong for this accident to happen. Focusing on that one wire isn't going to solve all the other issues. Wires, just like all other parts, will occasionally fail. One wire failure should never have caused an incident of this magnitude. Sure, there should probably be slightly better procedures for checking the wiring, but next time it'll be a failed sensor, actuator, or controller board.

If we don't focus on providing and ensuring a defense-in-depth, we will sooner or later see another incident like this.

[0]: https://www.youtube.com/watch?v=znWl_TuUPp0

parent crote 11 months ago

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton