1   Introduction

Despite the latest efforts to encourage the use of renewable energy sources, the world at large still relies on crude oil and petroleum-based products (Patel et al. 2015). The world's rising demand on natural oil and gas, combined with the continued exhaustion of its reserves onshore, has prompted mariners inter alia to come up with a fit-for-purpose geodata acquisition, engineering pragmatism, and skills to carry out offshore developments.

These developments have advanced beyond the immediate continental shelf into water depths in excess of 3000 m (Schuler 2016; OET 2016). These developments also commonly require the use of sophisticated seismic vessels navigating about the surface of open water bodies, which let off small explosions to create seismic waves. These waves travel through into the earth and are reflected by subsurface formations, which then return to the surface where they are recorded by hydrophones.

The use of a seismic vessel in offshore surveys is the first and main step in oil and gas exploration and production (E & P) investment, and failure to carry out data acquisition is far too expensive than the potential gains. As an example, in 1982, the priciest dry hole in history was drilled in the Mukluk region, offshore Alaska, owing to the fact that explorations relied on prediction rather than carrying out a seismic survey of the area. In this futile exploration, approximately 1.5 billion USD was spent on a fruitless operation (Westwood 2006).

Seismic vessels come in various lengths and widths, stretching up to 100 m long and up to 40 m wide (Marine-Insight 2011). They tow streamers, sound detectors (hydrophones), and other various sensor technology equipment. On operation, seismic vessels tow streamers at a speed of 4 to 5 knots (approximately 9 km/h). At this rate, the survey vessel could possibly cover some 216 km in a day and nearly 6500 km in 1 month. As survey sizes are not usually greater than 200 km, the seismic vessel must turn at the end of each line before commencing the next in a grid pattern (IAGC 2011), making its navigation more challenging than other vessels (CHIRP-Maritime 2014). The seismic cables or streamers are towed behind the survey vessel, in order to transmit seismic data. The cables are spread by diverters, which can be pictured as a type of mid-water trawl door and can extend to over 500 m in width. It shows a schematic diagram of the towed instruments by a seismic vessel in Figure 1.

Figure  1  Seismic survey vessel with labelled instrument (Buchanan 2016)

Download: Full-Size Img

The survey activity takes place with the rest of the other ocean activities in the area of oil field developments, namely, intense shipping and fishing operations. This last point underlines a significant threat to the safety of the crew and the on-/in-water seismic equipment (especially if the environment is not well investigated or assessed). Rough weather conditions have hampered huge exploration work in the past; for example, the Royal Dutch Shell Company failed to complete their exploration and production operation off the Alaska coast in 2015, partly because of the harsh environmental conditions after a few years of exploration (Eilperin and Mufson 2015).

In addition to weather conditions, location, timing, and duration of the survey can primarily affect the safety of marine seismic operation. Offshore Nigeria, for example, has better weather conditions compared to North Sea conditions in the UK. Hence, two identically sized surveys in these two regions could have significantly different durations and safety plans (IAGC 2011).

Apart from rough weather conditions, the likelihood of having other major hazard events in shipping such as rudder, propeller, and associated machinery damage leading to MOB, collision, and grounding are common and significant to marine seismic survey operations (Emmerson and Lahn 2012). Human error as a contributing factor leading to accidents has also largely contributed to seismic survey vessel accidents and near misses; an example that can be highlighted is the M/S Explorer, which sank in 2007 after reportedly striking ice in benign conditions due to a sequence of errors caused by the crew (JHC 2012). With the prevalence of major hazard events, different stakeholders and national regulators are proposing additional safety measures to reduce the high risk in marine seismic survey operation and shipping activities in general to a tolerable level.

This paper utilises notable risk analysis techniques such as risk matrix and FTA in assessing the risk in marine seismic survey operation. However, the outcome from the risk matrix technique will be further analysed and classified using an FTA technique. An FTA shows graphically basic causes of occurrence of an unwanted event (qualitatively), and estimates the occurrence likelihood or probability (quantitatively), and highlights the contribution of several causes leading to an unwanted top event (Ferdous et al. 2011). An FTA can analyse risks of a complex system with little or no historical accident data, by incorporating event probability estimates from experts. This is evident in its application in the nuclear, aerospace, and petrochemical industry (Suresh et al. 1996; Yuhua and Datao 2005; Hu 2016).

1.1   Formal Safety Assessment (FSA)

FSA methodology is incorporated in this study in order to achieve a reliable risk management structure. The idea of FSA was initially established in the 1990s, after the occurrence of a sequence of ship accidents. The first use of the FSA guidelines took place after the adoption of the 'Interim Guidelines' (IMO 1997); shortly after, the use of FSA was termed 'trial application'. The trial application of FSA and the test case of FSA for helicopter landing area (HLA) on cruise ships did not get consensus acceptance, this, leading to a series of amendments. The case of FSA for HLA carried out by Det Norske Veritas (DNV) for the first time led to the introduction of cost-benefit assessment (CBA) (Vassalos 2009), which was later accepted by the IMO and formed part of the FSA decision-making process.

Generally, the principles of FSA include identifying hazards, evaluating the risk related to the identified hazards, controlling the significant risks, and making a decision centred on CBA. The main aim of FSA methodology is the development of a framework of safety requirements for shipping, in which risks are tackled in an understandable and cost-effective manner (Ikeagwuani and John 2013).

However, there are criticisms that FSA studies confuse 'cause' and 'effect' and failing to determine the root cause of a hazard event (Psaraftis 2012); this setback was revealed in Germany in MSC 86 (Parsons 2016). Collision and grounding, fires, and explosions, for example, are the product of an accident; if these are wrongly categorised as initiating events in a hazard identification (HAZID) stage, the HAZID process and, of course, the entire FSA study would be at a fault. Hence, the entire focus of FSA being a proactive practice of preventing and controlling risk might be invalid. Methods to circumvent this FSA drawback have been suggested; possible methods include the use of Bayesian network (BN) modelling (Haapasaari et al. 2015) and the use of the human reliability assessment (HRA) model (Redmill 2002). Another method is also suggested which involves the use of the failure modes and effect analysis (FMEA) and FTA technique. These both initially identify and list all the possible failures (cause) that could happen subjectively and then make an assessment of the consequences (effect) of each failure (Long and Hillman 2014). These techniques offer a full picture of the problem in a wider context.

Nevertheless, the FSA process is dependent upon subjective judgement, that is, the expert(s) conducting the risk assessment (IMO 2018). There exist lapses on the side of expert utilising any method they can to justify a particular FSA portion, as current FSA guidelines permit FSA expert considerable leeway in their choice of which FSA methodologies to utilise (Parsons 2016). If there are no guidelines put in place to curtail this, then the role of the entire FSA could be weakened and arguably negated.

The use of expert judgement is considered to be an important element within the FSA methodology (IMO 2018); however, the heavy reliance on expert's input (Kontovas and Psaraftis 2009) could potentially lead to a biased judgement. This, coupled with the possibility of data manipulation, could compromise both the FSA's goal of being transparent and the integrity of the whole process.

Despite these shortcomings of FSA, it on its own has gone through critical scrutiny and has been used as a successful tool in various projects. For example, a European Commission project, 'Design, Operation and Regulatory Project for Safety' (SAFEDOR, 2005–2009), produced a case study, and the demonstration of an FSA study has been presented in a published book 'Risk-Based Ship Design' (Papanikolaou 2016).

Since 2009, several researchers have successfully carried out the application of FSA methodology to different aspects of safety in shipping while consolidating the drawbacks with modern risk analysis techniques. Zhang et al. (2011) successfully applied FSA to navigational risk evaluation of the Yangtze River. In order to improve the navigational safety in the Yangtze River, the author estimated the navigational risk of the Yangtze River using the FSA concept and incorporated BN technique to address the issue of cause and effect confusion while tackling the issue with expert judgement. Vidmar and Perkovič (2018) applied FSA methodology in the systematic risk assessment of crude oil tankers, potential hazards were analysed with structured methods such as HAZID and HAZOP, and the author finalised the assessment using event trees to decipher the confusion of cause and effect in the application of FSA methodology. Other researchers who addressed the issue of cause and effect and the issues with expert judgement include Görçün and Burak (2015), Sniegocki (2014), and Hakan et al. (2013).

Since the adoption of FSA in the 1990s and the approval in 2002, an increasing number of publications relating to FSA applications have been published but with limited literature on the application of the FSA methodology on marine seismic survey vessel operation. The dovetailing of the two quantitative risk analysis methods (risk matrix and FTA) with the FSA framework as employed in this paper contributes to both the risk analysis literature and the concerned industry. In addition to the significance of this paper, a complex marine seismic survey operation with dynamic risk is simplified, using the two aforementioned quantitative risk analysis methods.

1.2   Handling Uncertainty in Risk Matrix and Fault Tree

Risk matrix and FTA require event data (frequency and consequence severity for risk matrix), as input to carry out a comprehensive quantitative risk assessment (QRA) for a process system. This input can be categorised into two types in the uncertainty analysis, namely, the aleatory and the epistemic uncertainty. The former refers to the uncertainty of input arising from randomness due to inherent variability in the system, while the latter refers to the uncertainty of input arising from lack of knowledge/information, such as event data from expert judgement (Sun et al. 2018).

When input data is readily available, a probability distribution can be correctly used to represent the aleatory uncertainty, but when input data is very scarce, a probabilistic representation of epistemic uncertainty from expert knowledge could be misleading (Zio 2008). To overcome the probabilistic representation of epistemic uncertainty arising from expert knowledge, most researchers have in recent times incorporated Bayesian subjective probability in their risk analysis studies. Nevertheless, an alternative method has recently been proposed that involves evidential reasoning (ER) with fuzzy sets (Yang et al. 2018; Aven 2016) or a combination of Bayesian network (BN) with Fuzzy ER (Yazdi and Kabir 2018). The fuzzy sets are associated with the interval distribution of probabilistic data, whose elements have degrees of membership to represent the strength of an expert's opinion, to enlighten the risk analyst or decision-maker. The risk analysis outcomes are then summarised in not only risk or probability P but likewise the pair (P, D_oB), where D_oB offers some qualitative measures of the strength of the opinion supporting the risk probability, P. Fuzzy set approach might offer a useful way to solve the impression of input data regarding the fluctuation of parameters (Alyami et al. 2019; Suresh et al. 1996).

Most risk matrix and FTA studies utilise a single value probability estimate in risk analysis, which contradicts the suggestions of handling input data uncertainties. However, in the application of single value probability estimate using the risk matrix and FTA techniques in this research, much effort has been made in the careful selection of experts with a reasonable wealth of experience in the subject. The careful selection of experts offers the confidence that hazard event data are judged with care. In the event of the non-existence of data or incompleteness in hazard event data, experts assign a 'zero' value. This idea of scoring 'zero' for incomplete data has been attempted in several risk analysis and decision-making studies such as Xu and Yang (2001) and Lee and Yang (2017).

The above idea of utilising a single value risk probability estimate in risk matrix and FTA has been criticised in the past, but recently, in a marine risk assessment study, authors found out that the calculated fuzzy risk values were consistent with the results of a single value estimate using the risk matrix technique (Abdussamie et al. 2018). Despite this finding, a number of alternative representation structures to deal with the probabilistic representation of epistemic uncertainty are presented, but not discussed herein; they are the following: Bayesian network (Cai et al. 2019), evidence theory (Curcurù et al. 2012), fuzzy set theory (Komal 2015), possibility theory (Roger Flage et al. 2013), and interval analysis (Oliveira et al. 2016).

1.3   Research Hypothesis

This research is carried out in response to the assumption that the shortage of statistical accident data poses a challenge to analyse risks in a marine seismic survey operation. The research is also carried out in response to the assumption that operational risk control strategy in the form of training and retraining of crew members on how to avoid accidents is not an effective risk control measure to mitigate risks in a marine seismic survey operation. However, the above assumptions presented before the research enabled an opening to further research, and hence, the initial assumptions may be overruled in favour of a more convincing risk analysis approach and a more practical risk control strategy. Consequently, the study's reproductive logic has been modified, and it is based finally on the hypothesis that risk matrix and FTA techniques can address risk by taking risk data from specialists with the first-hand experience in marine seismic survey operation. In addition, both operational and engineering risk control strategies have a role to play in mitigating risks of a marine seismic survey operation.

2   Formal Safety Assessment

As described previously, FSA is a structured and systematic methodology, aimed at enhancing maritime safety, including protection of lives, marine environment, and assets, by using risk analysis and cost-benefit evaluation. FSA can be used as a tool to help in the evaluation of new and existing regulations for maritime safety and protection of the marine environment (Carlos Guedes 2010). It serves as a tool for making a comparison between existing and possibly improved regulations, with a view to achieving a balance between the various technical and operational issues, including human element, and the inherent costs in carrying out safety plans (IMO 2015a).

Any risk assessment approach to maritime safety regulation is often faced with four challenges, and an effective approach should hold these in focus:

1 Systematic: the ability to be implemented using a formal and structured process

2 Proactive: the ability to identify envisaged hazards rather than respond after accidents have happened

3 Transparent: the ability to be clear in the safety level achieved

4 Cost-effective: the ability to find a balance between risk reduction and economic benefits, for the key stakeholders of the proposed risk control measures

The FSA framework provides a platform to conform to the above four maritime safety standards. The steps in FSA are:

1 Identification of hazards

2 Risk estimation

3 Identification of risk control options

4 Cost-benefit analysis (CBA)

5 Recommendation for decision-making

From the above FSA steps, a functional component in an FSA technique is shown in Fig. 2 as presented by IACS in MSC's 75th session in 2002. This risk management approach employs a risk-based technique, which looks quite similar to the offshore QRA procedures, but the actual contents, methods (Bai and Jin 2016), and tools of each FSA step can be quite different (Yong and Wei-Liang 2016).

Figure  2  FSA flow chart (MSC 2002)

Download: Full-Size Img

3   Risk Assessment and Management of a Seismic Survey Vessel Operation

3.1   Preparatory Step

Before initiating the FSA process, the definition of the problem is elaborated with respect to the system, goal, and operation. The purpose of defining the problem is to access the problem carefully with respect to the regulations under review; this in return will assist in determining the extent and depth of the FSA application. This preparatory step is given to all FSA applications; this is important because a misguided definition on a system such as a vessel operation may lead to insufficient recommendations, which in turn may eliminate major risk categories from the system being assessed. This step helps to simplify the goal of the assessment. The goal of the present study will include the consideration of major accidents that have occurred in the North Sea during a marine seismic survey operation.

3.2   Step 1 Hazard Identification

Hazard Identification (HAZID) is a systematic process of identifying hazards and their related events, which could give rise to a significant consequence to personnel, environment, or asset. The focus in HAZID is to ensure that the process is proactive and not confined only to hazards that have materialised in the past (IMO 2012).

This process typically consists of structured group reviews, and experience has proved that the group of experts involved in the HAZID can apply any technique to identify the causes and effects of accidents and the relevant hazard events (Loughran et al. 2002).

The expert judgement methodology, as used in this paper, is divided into three stages:

• Choosing experts

• Elicitation

• Aggregation

The elicitation stage refers to the process of proposing opinions or expert judgements through different means. This is typically supplied through interviews and/or questionnaires. The aggregation phase is the means of taking the average or converging of the different expert opinions offered in the study (Endrina et al. 2018).

3.2.1   List of Hazards

In many cases of identifying marine seismic survey operation hazards and its leading events, a huge amount of information is either incomplete or totally lacking; thus, it is often difficult to identify all hazard events. Consequently, after a pre-elicitation meeting with the co-authors of this study, five sufficiently experienced North Seafarers and managers of marine seismic survey companies in the UK were contacted. These experts contributed their knowledge and opinions through telephone interview on developing the risk matrix approach used in this paper and determining the hazard category and subcategory. Table 1 shows the significant hazard category in a marine seismic survey operation.

The data sets obtained from the HAZID process related to hazard events in a marine seismic survey vessel operation are converted into quantitative values. In order to prioritise the risk level of the identified hazard events, a hazard screening process is conducted to quantify the occurrence and the severity of the consequences of each hazard event in Table 1.

3.2.2   Hazard Screening

Risk Matrix The risk matrix approach, which prioritises hazards, is used in the hazard screening process. This risk-based technique appeals to both non-professionals and risk specialists to stress the uncertainty in risk statements. A risk matrix describes risk in a graphical manner and belongs to the set of probability consequence diagrams (Ale et al. 2015). It is used in risk assessment to define the level of risk by considering the category of likelihood (or probability or frequency), against the category of consequence (or severity). Risk matrices are globally used in risk management and often a regular feature in different risk management standards and guidelines. Risk matrix remains popular and often utilised in the informative sections of several international standards such as IEC (2006) and ISO (2010). They are also being used as formal corporate risk acceptance criteria, and only recently, risk specialists have highlighted some drawbacks of the risk matrix utilisation (Duijm 2015) such as risk ties (Ni et al. 2010). Despite the drawbacks of the risk matrix approach, Ruge (2004) depicts how a single risk matrix technique gained the status of a corporate framework, leading to a risk management decision-making methodology throughout a large business enterprise. Risk matrix still serves as a simple tool to increase the viewer's perception of risks and assist in management decision-making.

The risk matrix approach provides a traceable structure for a clear consideration of the consequence and frequency of the identified hazard events. This approach uses a matrix, which divides the dimension of frequency (F) of the hazard events and the consequence (C) into categories. F and C categories are provided for each hazard event, in order to have a clear evaluation.

In the risk matrix hazard screening, a five-scale dimension is used for the frequency and consequence assignments as shown in Tables 2 and 3.

The combination of frequency and the consequence in Table 4 will help to provide a risk ranking number (RRN) for each identified hazard event (Loughran et al. 2002), thus prioritising risks according to their importance. In the risk matrix formulation, it is logical that the discrete 'C' and 'F' categories are placed in order along the ordinates (sides) of the risk matrix, that is, the frequency categories should be ranked from F1 (remote) to F5 (frequent), and the consequence category should be ranked from C1 (negligible) to C5 (catastrophic). See Table 4 for clarification.

The combination of C_n and F_n amounts to the risk estimate:

where n = 1, 2, 3, 4, 5.

Because of the consequent shortage of statistical data of hazard events in marine seismic survey operation, expert opinion will be relied on for the actual evaluation of the frequency and consequence of each hazard event category given in Table 1. See Table 5 for a summary of the experts' background.

The Delphi method is utilised herein to obtain information from the experts through a developed questionnaire. This method of getting input data has also been used by several researchers such as Nyman et al. (2010). Since there were no huge discrepancies in the collected questionnaire results, an integer input was recorded from their converged judgements. Tables 6, 7, 8, 9, 10, and 11 are established to give a clear representation of the final expert judgement for the identified hazard event categories.

Risk levels are assessed by the RRNs ranging from 1, which is the lowest risk level having least frequency and least consequence, to 9 which is the highest risk level having the most frequent risk and the most severe consequence. Table 12 depicts the number of times each RRN appears within a hazard event category. For instance, RRN 4 appears 7 times for the MOB hazard category.

3.2.3   Equivalent Total

The RRN is considered for each hazard event category at different generic locations; this consideration leads to the formulation of the equivalent total (ET) to give the accident category an index number, which will later be employed to rank the hazard event categories. The outcome of the ET will help to determine allocation of resources to prevent or reduce the risk associated to each hazard event. According to MSC (1997), the ET calculation makes use of the fact that both the severity and frequency bands of the risk matrix are approximately logarithmic (e.g., a risk level of 8 is treated as 10⁴, if the risk level 4 is used as the base). Therefore, using 4 as the base:

A summary of the above calculation is presented in Table 13.

From the above hazard screening, the 'man overboard' hazard is seen as the most significant hazard event with an equivalent total of 9.05 followed by 'Fire' (see Table 13). Further risk estimation will prioritise 'man overboard', followed by 'fire', 'towed array entanglement', 'contact and collision', 'heavy weather damage', and lastly 'loss of hull integrity'. A full-scale risk estimation of all the hazard events would be too large in volume; hence, further analysis will only focus on the 'man overboard'. Safety engineers can use the preceding analysis on 'man overboard' as a reference to analyse other risks in other shipping operations.

3.3   Step 2 Risk Estimation

The main objective of carrying out risk estimation is to provide an explicit investigation of the causes and the consequences (effect) of the most significant hazard event identified in Table 13. The purpose of this is to give proper attention to high-risk areas and focus on factors, which affect the level of risk (IMO 2002).

In risk estimation, fault tree analysis (FTA) is considered one of the most important probabilistic and logical techniques, which operates with either expert knowledge or historical data inputs (Ahmed Ali et al. 2013). Further analysis will involve the application of the FTA technique.

3.3.1   Fault Tree Analysis

FTA is a safety/risk analysis technique that has been used in handing both quantitative and qualitative risk assessment problems. FTA is a top-down approach that systemically considers the contributing events at levels below the top level (Lavasani 2010). It is a logical reasoning approach and can be applied to a system of any size for risk assessment purposes (Godaliyadde et al. 2009).

FTA is constructed with 'AND' or 'OR' gate logic to depict the causes of failure of an event. The 'AND' gate is used to connect the causes of failure of an event if the causes happen simultaneously, while the 'OR' gate is employed if the causes of failure of an event happen directly (i.e. not simultaneously). The logic gates determine the addition or multiplication of probabilities to obtain the values for the top event (Lavasani 2010).

A fault tree (FT) computer application can aid in carrying out calculations in FTA, and this can be used in addressing probabilities of event occurrence associated with risk assessment of a system. Isograph (2015) incorporating fault tree⁺ will be used to analyse the risk of MOB considering the important initiating events.

FTA has gained popularity in the nuclear, aerospace, and petrochemical industry in comprehending system reliability (Yuhua and Datao 2005). FTA can analyse risks from a complex system by combining expert knowledge with its use. Although it has some drawbacks, it is also preferred over some risk analysis techniques in the sense that it shows graphically basic causes of occurrence of a hazard event (qualitatively), estimates the likelihood or probability (quantitatively), and highlights the contribution of several causation factors leading to the top event. The graphical representation of events in FTA appeals to both non-professionals and risk specialists.

A major setback with the application of the FTA technique is in its inability to show or analyse the dependencies of dynamic events. This limitation has led to the extension of the FTA technique with a model-based dependability analysis. Kabir (2017) reveals a more detailed insight concerning the working mechanism of this extension. Nevertheless, in this research, FTA technique fits better than other techniques mainly because it provides a logical hierarchy for analysing the risk factors influencing marine seismic survey vessel operation. The FTA technique also allows experts to understand the relationship between their judgements to provide useful insights when executing their hazard event probability judgement.

Expert Judgement in the FTA Construction: a Case Study The five experts mentioned in Section 3.2.2 and in Table 5 were also interviewed to share their first-hand experience and provide hazard event input for the MOB FT construction of a prospect project in the North Sea area. From the telephone interview session, a consensus was reached: the MOB incident could occur because of human error, insufficient organisation policy, or uncontrollable reasons. Human error contribution could occur because of the lack of experience of a new crew member, sea state affecting human judgement, and fatigue from prolong working hours or because of poor communication. Insufficient organisation policy could occur because of either lack of strict use of alcohol on board ship and/or lack of training on safe work practice and/or congested workspace. Uncontrollable reasons could be in the form of entangled in-water cable, slip/fall, or sea state causing violent ship movement. Slip/fall could occur because of a slippery deck as a result of rain, snow or water splash, or poor lighting conditions. The construction of the FT diagram also agrees to a seismic survey MOB accident reported by IAGC (2013).

The average probabilities of the 11 basic events can be obtained. For example, to obtain the probability of 'slippery deck as a result of rain, snow, or water splash' happening during a seismic survey operation, the average probability would be calculated using the subjective data provided by the five experts and represented in Table 14. Note that some concerns regarding the single value probability estimate utilised in this section have been dealt with and discussed in Section 1.2.

The average prior probabilities of the remaining 10 basic events occurring in the North Sea per 1000 ships in a year as provided by the five experts are presented in Table 15.

These hazard event data are recorded in the isograph computer application (Isograph 2017) to analyse the risk of MOB. With the given data from the experts, the result of the FTA is represented in Fig. 3.

Figure  3  Fault tree analysis of man overboard

Download: Full-Size Img

3.3.2   Results from the FTA

The minimum cut set is X1 + X2 + X3 + X4 + X5 + X6 + X7 + X8 + X9 + X10 + X11.

Once this has been derived, the quantification of the FTA becomes straightforward.

The results from the FTA show that the probability of the top event occurring is 2.0 × 10⁻²/year, meaning on a scale of 1 to 10, the probability of having a MOB accident is '2' for every 100-ship operating in the North Sea per year. In addition, the results reveal that the lack of training on safe work practice is the most significant basic event with a risk rank index (RRI) of 1, followed by slippery deck as a result of rain, snow, or water splash with RRI of 2. See Table 16 for other basic event's prioritisation.

The results from the FTA in Table 16 reveal that the human factor contribution to accidents is still a major concern in the risk management of maritime projects. Sea state in the form of bad weather is also shown to be in the first three critical events, and this affects seafarers/operators' performance. Sea state or bad weather conditions affect human performance and influence seafarers/operators to make unwanted errors (Islam et al. 2017).

3.3.3   FTA Results Validation

Although the process of validating an FTA result can be challenging, it is, in several cases, very important to carry out. This process is not often tackled in textbooks or papers. Validating a fault tree result is difficult since the quantitative outcome of the FT is a probability, which is not at all tangible (Stamatelatos et al. 2002). However, the FTA result can be validated at least indirectly by checking the probability of the top event for its rationality and comparing it to results obtained for similar types of assessments that have been done in the past. Although there is a limited marine MOB risk assessment carried out in the past, however, the probability value estimated in this study agrees to a high degree with the yearly averages of MOB reported cases in the North Sea from 1991 to 2004 (MAIB 2005) and 2016 (MAIB 2016).

In addition to the FTA result validation, the top major basic events leading to MOB risk have also been identified by a report from the Government of Western Australia Department of Commerce—as the lack of training on safe work, slippery decks, and breaking waves (sea state) (GWADC 2010). Similarly, SFS (2018) identified slippery deck as a major cause of MOB accident, and Bell and Healey (2006) similarly identified lack of work training as a major cause of marine accidents including MOB. The aforementioned reports, however, validate the application of FTA of MOB case in this study.

3.3.4   Model Validation

A possible way to validate the FTA model is by carrying out an authentication of the knowledge-based model. Nevertheless, the most frequently used techniques for this are (1) data validation; (2) validation by testing; (3) field tests; (4) subsystem validation, and (5) sensitivity analysis (Mokhtari et al. 2012). Among these techniques, sensitivity analysis is a preferred option in systems relying on probability and uncertainty management (Gonzalez and Dankel 1993; Hoops et al. 2016).

Sensitivity analysis of the developed FTA model proposes an analytical value judgement for the conclusions of risk ordering. However, two possible axioms can be used in this paper as a mechanism to validate the FTA model, and these axioms are based on the system of logic, which requires no proof. In order to validate the certainty of the FTA model, the sensitivity analysis must at least agree to the following two axioms if the technique is reasonable and logical.

Axiom 1 A slight increase in a basic event's subjective prior probabilities should certainly result in a relative increase of the top event probability value. The sensitivity of the application of Axiom 1 is presented in Table 17.

Axiom 2 A slight decrease in a basic event's subjective prior probabilities should certainly result in a relative decrease in the top event probability value. The sensitivity of the application of Axiom 2 is also presented in Table 17.

3.4   Step 3 Risk Control Options (RCOS)

To investigate risk control options, it is necessary to first identify high-risk areas that need to be controlled (Wang and Ruxton 1998) (Wang and Pillay 2003) and later identify the risk reduction options otherwise known as RCOs. The purpose of RCOs is to present effective and practical options having the following stages:

I Targeting areas having high risks

J Identifying possible risk control measures

The expert opinions are summed up here to deduce methods of mitigating the probability of occurrence and/or the consequence of the top event. The options in controlling the most significant basic events to a tolerable limit are done with all or a combination of the methods below with reference to the work of Wang and Pillay (2003).

I Management activities – related to the smooth running of an organisation that helps to develop a safety culture

J Operational strategy – involving the introduction of appropriate procedure to perform risk critical tasks and also improving the skills of personnel involved in the operation of the system by training and retraining them to observe safe working ethics, contingency plans, etc.

K Engineering strategy – involving the design and construction of a ship and its equipment or activities related to the installation of new facilities or devices, to reduce or eliminate hazards after vessel design

The RCOs identified in mitigating the MOB basic events is further described and weighed in the following section.

3.5   Step 4 Cost-Benefit Analysis (CBA)

The selected RCO must be attractive in terms of cost-effectiveness, so that gain can outweigh the financial loss incurred from the implementation (IMO 2015b). In estimating cost-benefits, an equivalent of a typical value of human life according to ICAF (Implied Cost of Averting a Fatality) used by the offshore industry is assumed to be £2 000 000 (IMO 2015b). This ICAF value is contained in Annex D of the first revision of NORSOK standard Z-013 (Skjong et al. 2007), developed for the Norwegian offshore region. Though this assumption is believed to be void in the second and current revision of the standard annex, the approach to environmental risk acceptance criteria is nevertheless believed to still be relevant (Skjong et al. 2007).

3.5.1   CBA Calculation

The most important basic events selected from the FTA result are:

• Lack of training on safe work practice

• Slippery deck as a result of rain, snow, or water splash

• Sea state affecting human judgement

• Poor communication

Engineering preventive strategy as option 1 is chosen to mitigate a MOB accident/incident. This method covers the provision of slip-resistant flooring on board, retrofitted railings, constructing appropriate drainage, keeping working areas (especially back deck and walkways) well lit, using anti-skid adhesive tape in work areas, and selecting proper footwear during work. Engineering preventive strategy might only mitigate the effect of 'slippery deck as a result of rain, snow, or water splash'.

Operational strategy as option 2 is chosen to mitigate a MOB accident/incident. This method covers training and retraining of staff to improve their communication skills such as spoken English language and their safe work practices including how to work safely in bad weather conditions. This method might only mitigate the chance of having 'poor communication', 'the effect of sea state affecting human judgement', and the effect of having 'lack of training on safe work practice'.

For demonstrating the applicability of the CBA calculation, assumptions will be made on the cost of introducing engineering and operational strategies on the vessel per year to mitigate the risk of having the four (4) most important basic events selected from the FTA result. Logically, engineering strategy is assumed not to have any effect on reducing lack of training on safe work practice, sea state affecting human judgement, and poor communication. While operation strategy is assumed not to have any effect on reducing the slippery deck, the actual time spent to train crew and to install retrofit equipment is not considered in this paper, as it is only a simple demonstration of CBA calculation. The inflation rate is also not considered since the risk assessment demonstrated is calculated per year.

Engineering Strategy for RCO1 The amount spent to ensure that there is no slippery deck is assumed to be £8500. This amount covers all expenses to supply slip-resistant flooring on board, constructing appropriate drainage, keeping working areas especially back deck and walkways well lit, using anti-skid adhesive tape in work areas, and selecting proper footwear for 30 crew members. The application of engineering strategy (RCO1) means adjusting the probability of slippery deck to a near zero value. Upon re-running the FTA computer application, the probability of having a MOB accident was reduced to 1.45 × 10⁻²/year.

Therefore, the top event happened at a probability of 2.0 × 10⁻²/year. With the introduction of RCO1, the occurrence probability of the top event is reduced to 1.45 × 10⁻²/year.

By comparing the cost of RCO1 with the benefit derived, it shows that RCO1 is effective.

The Operational Strategy for RCO2 To mitigate the risk of having unsafe working practices, sea state affecting human judgement, and poor communication, proper training of staff will be carried out in order for them to communicate properly, to react appropriately to rough weather conditions, and to perform risk critical tasks safely. Here, 30 seismic crew members are budgeted to be trained, and the cost to train all concerned personnel is calculated to be £7000. The application of operational strategy (RCO2) means adjusting the probability of lack of training on safe work practice, sea state affecting human judgement, and poor communication to a near zero value. Upon re-running the FTA computer application, the probability of having MOB hazard was reduced to 1.40 × 10⁻²/year.

Therefore, the top event happened at a probability of 2.0 × 10⁻²/year. With the introduction of RCO2, the occurrence probability of top event reduced to 1.40 × 10⁻²/year.

By comparing the cost of RCO2 with the benefit derived, it shows that RCO2 is also cost-effective.

From the CBA calculation, RCO2 is more cost-effective than RCO1; this information will be passed onto decision-makers to make the final decision to assess the effectiveness of the RCOs as it improves safety in the system under investigation.

Note that the £2 million estimated costs of human life (IMO 2015b) may vary; hence, the variation might affect the above CBA calculation.

3.6   Step 5 Decision-Making

Decision-making is carried out to select the most cost-effective RCO, which truly addresses the most effective way to improve safety, taking assessment back from step 1 to step 4.

From the RCOs and CBA calculation, it is revealed that the application of RCO2 reduced the top event probability by nearly 40% (i.e. from 2.0 × 10⁻² to 1.40 × 10⁻² /year), and the benefit derived was more cost-effective compared to RCO1. Hence, the decision of training of the 30 crew members in order for them to communicate properly, to react appropriately to rough weather conditions, and to perform risk critical tasks safely is the preferred option for the decision-maker to enforce to ensure that risk level of marine seismic survey operation is reduced to as low as reasonably practicable (ALARP) levels.

4   Discussion

Risk matrix and FTA have been selected in this study to evaluate the risk of a marine seismic survey operation. These two notable techniques have been selected in a complementary manner simply because they both provide a quick method to graphically recognise the risks of the marine seismic survey operation. The lack of thoroughness is a major concern in a risk matrix, and this is because if the tool is employed as the only method of risk evaluation, the complexities of the hazard event could be oversimplified. Both the risk matrix and FTA techniques used in this paper incorporated single value failure inputs from the expert judgement in analysing the risks in the studied area. In handling the imprecision of data arising from expert opinion in the application of the risk matrix and FTA in this research, efforts have made in the careful selection of experts with a reasonable wealth of experience in the subject (marine seismic survey vessel operation). The exclusion of fuzzy set methodology in this research does not necessarily contradict the effectiveness of the traditional single value probability estimation in risk matrix and FTA techniques, as they are still very much effective and in use presently. It is noteworthy that Abdussamie et al. (2018) compared the calculated fuzzy risk values with a single value estimate in a risk matrix assessment study and found consistency between the calculated fuzzy risk estimate and a single probability value risk estimate.

FTA has many computer aids, and a large number of safety engineers use these widely. One of the major advantages of the method is the complementary data delivered from the qualitative and quantitative analysis of the FT. However, the key weakness of the classical FTA technique is in its inability to model the dynamic behaviour of a process system (Kalantarnia et al. 2009). To overcome this, Bucci et al. (2008) recently presented a methodology that uses Markov modelling to construct dynamic FT and tackled the key weakness with the classical FTA.

Computer aids is gradually replacing human calculations in most risk assessment studies—with a high likelihood of error in manual calculations—possibly rendering the whole risk assessment studies void. However, the use of a computer software application should practically eliminate human calculation errors.

Errors made by humans are responsible for over 70% of most marine accidents (Anyanwu and Okoroji 2014). To this concern, the IMO guidelines recommend the application of human error assessment and reduction technique (HEART), to address the problem of human error especially with regard to quantitative risk analysis of marine and offshore operations (Islam et al. 2017).

5   Recommendation for Further Research

This paper has revealed the efficacy of the application of the risk matrix and FTA to mitigate risk in marine seismic survey operations. The former revealed that MOB when compared with other hazard events is a major risk factor in marine seismic survey operation. The latter represented and analysed the significant basic events that could lead to the MOB accident. Lack of training on safe work practice; slippery deck as a result of rain, snow, or water splash; sea state affecting human judgement and poor communication were the top significant risk factors leading to a MOB incident.

With the poor record of accidents and 'near misses' cases in the marine seismic survey sector, an attempt was made to compare the probability of the studied MOB case with a real-life report. The comparison reached coincided with the yearly averages of MOB reported cases in the North Sea from 1991 to 2004 (MAIB 2005) and 2016 (MAIB 2016).

The best RCO to minimise the four most critical risk factors in this research was analysed against its cost and benefit. The decision to provide proper training for the 30 crew members in order for them to communicate properly, to react appropriately to rough weather conditions, and to perform risk critical tasks safely was identified as the most cost-effective RCO.

The final decision that represents the FSA last step has proved a traceable and justifiable means to minimise the risk of the MOB incident in marine seismic survey operation. Hence, the application of FSA guidelines in identifying hazards and analysing the risk associated with the identified hazards and the risk control options alongside the CBA calculation has proved to be:

• Systematic

• Proactive

• Transparent

• Cost-effective

It is revealed from this study that human element contributes greatly to the MOB case study. Therefore, it can be concluded that the human factors' contribution to marine accidents is still a major concern in the maritime industry. The best way to reduce the number of incidents/accidents is with proactive safety culture in place, highlighting safety and providing preventative measures. Training and retraining of the crew members is an effective preventive measure to mitigate incidents/accidents.

With the relentless demand for offshore hydrocarbon resources, it is possible that in years to come, there will be increased activities and traffic in the offshore environment leading to new risks; with this prediction, the marine seismic survey companies presently should focus more on human resources and enhancing training to crew members. The maritime industry will need to open doors to training opportunities and more recruitment, in order to boost confidence in marine and offshore operations.

The main limitation of this research is the fact that expert judgement was solely relied upon. Here, there is a lack of formal quantification or rating of expert opinion, and a case can be cited when an expert might overlook a safety aspect of a system under review, while other experts from a different background might not overlook such safety aspects; this confusion might result in a deadlock. To narrow the disagreement between expert judgements from different backgrounds, a mathematical evaluation such as 'consistency ratio' could be incorporated in further study. However, from the questionnaires received in this study, there was no much disagreement between the expert's judgement.

The CBA technique as demonstrated in this study utilised fictitious values instead of real-life values; however, it should be noted that the CBA technique, as adopted for use in FSA, is not an exact science, and it should only be taken as a means to provide a guide in risk management decision-making process. Further research will focus on case studies that are more practical.

The extension of FTA and evidence theory-based formulations such as fuzzy evidential reasoning (FER) and BN formulations, addressing the issue of uncertainties in hazard data and the lack of interdependencies of dynamic hazard events, not previously addressed in the application of FTA technique will further be looked into, in future research. Nevertheless, this article is of an explorative nature; further research will be required to address data uncertainty and event dependencies in the risk analysis context.