Editing Dynamic positioning (section)

===Redundancy===
[[Redundancy (engineering)|Redundancy]] is the ability to withstand, while on DP mode, the loss of equipment which is online, without losing position or heading. A single failure can be, amongst others:
*Thruster failure
*Generator (power supply) failure
*[[Power bus]] failure (when generators are combined on one power bus)
*Control computer failure
*Position reference system failure
*Reference system failure{{clarify|date=March 2022}}

For certain operations redundancy is not required. For instance, if a survey ship loses its DP capability, there is normally no risk of damage or injuries. These operations will normally be done in Class 1.

For other operations, such as diving and heavy lifting, there is a risk of damage or injuries. Depending on the risk, the operation is done in Class 2 or 3. This means at least three Position reference systems should be selected. This allows the principle of voting logic, so the failing PRS can be found. For this reason, there are also three DP control computers, three gyrocompasses, three MRU's and three wind sensors on Class 3 ships. If a single fault occurs that jeopardizes the redundancy, i.e., failing of a thruster, generator or a PRS, and this cannot be resolved immediately, the operation should be abandoned as quickly as possible.

To have sufficient redundancy, enough generators and thrusters should be on-line so the failure of one does not result in a loss of position. This is left to the judgment of the DP operator. For Class 2 and Class 3 a [[Consequence Analysis]] should be incorporated in the system to assist the DPO in this process.

The redundancy of a DP ship should be judged by a [[Failure mode and effects analysis|failure mode and effects analysis (FMEA)]] study and proved by FMEA trials.<ref name="IMCA M166" /> Besides that, annual trials are done and normally DP function tests are completed prior to each project.