
594
maritime operation [6]. The HRA is not only useful in
academic activity, but it was found to be benefit for
stakeholders such ship owners and safety inspectors
to identify and minimize the potential risk. The
concept of hardware reliability analysis was also
implemented in the HRA methods, including the
hazard analysis and risk control stage. Seeing the
HRA as similar with hardware analysis, it is also
believed similar two combination of method can be fit
to each other and combined to measure system
reliability. Various HRA methods have been
developed, also demonstrated in maritime operation
cases. Cognitive reliability and error analysis
(CREAM) is already applicated to derived the marine
engineers performance reliability by combining
Bayesian inference and fuzzy methods [7]. In seeing
future projection, fuzzy methods also used combine
with success likelihood index methods (SLIM) to
demonstrate the autonomous operation regarding the
human-machine interface [8]. Beyond onboard, the
SLIM methods combined with system theoretic
process analysis (STPA) are also used to analysis
human-machine interaction in ship-to-ship LNG
bunkering [9].
Most HRA aims to measure human error
probability (HEP), that defined as an index to show
the likeliness the human will conduct an error during
the specific event. IMO defines it as the ratio of
number of human error that have occurred, with the
number of opportunities for human error [6]. In
general, denominator for HEP is the number of
chances the human conduct the error, compared to
the hardware reliability where the denominator is the
running time of equipment. This led to quantifying it
by bottom-up approach to predict HEP by retrieving
various data, mostly accident or incident report. The
pitfall of employing only the failure database is the
information only contain the number of failure event,
without number of successful performance, where it is
more close to assess the failure probability with
empiric way [10]. Deciding the human error data from
the accident report also has limitation since the
number of accident reports is considered small
compared to hardware failure data. This limitation
often counters by including the expert judgement as
the input, or the simulator experiment data.
In the lower factors, HRA can be included,
combine, and consist of several performance shaping
factors (PSF)[6]. PSF is often treated independently
from one to the other. Several agree that PSF can be
overlap, or its influence to each other should be
considered [11]. The countermeasure of the
dependency issue between PSF is by utilizing
Bayesian network. The utilization of Bayesian
network in HRA is increasing recently [5]. The
Bayesian network allows us to analyze the likelihood
of human error and identify the dependencies for
complex modelling. It also came with the advantage
of the ability to combine various data.
Bayesian network utilization in maritime operation
is steadily increasing, either for HRA purpose or
system reliability. It has wide application range from
operator safety assessment to the evacuation training,
including its application in offshore operation [12,13],
ship collision [14], emergency situation [15], and ship
engine operation [7]. The Bayesian network suggest
PSF interaction and integrating different sources of
information into the model, once the new information
or data is exist, it can be updated easily to the model
[11]. In the context of HRA, the Bayesian network
provides the ability to contain and combine multiple
types of information and data, including cognitive
literature, operation events, statistical data, and expert
judgment.
SA concept in human factors field is already
applied in various work environments, include in
maritime operation. In this study, loss in SA is
considered as one of the factors that contribute to the
human error event. HRA as the methods in
quantifying human error is applied with adapting the
engine plan simulator data combine with the subject
matter experts. Further, Bayesian concept is employed
to accommodate the dependency between the factors
in contributing the human error.
2 MODEL CONSTRUCTION AND UPDATING
There are two terms involved in model construction
and updating. In model construction, Bayesian
network is applied to construct the model and
calculate the probability of SA failure in the first place.
While in model updating, the concept of Bayesian
inference is used to recalculate the probability of SA
failure by considering the new data from the
simulator. The difference between the two methods is
Bayesian network with its graphical methods does not
necessarily imply the theoretical Bayesian inference.
However, the Bayesian network in this study is called
Bayesian since it employed similar rules for inferring
the probability.
2.1 Model construction
The flow process of model construction and updating
are shown in Figure 1. The Bayesian network in
calculating human error mostly employed subject
matter experts input as weighting factors, in this flow
is to calculate nodes distance. Beyond that, subject
matter experts also use variable control input to
calculate condition probability distribution. Within
this study, the role of subject matter expert is not
removed, but instead reduced by substituting it with
the result from simulator data, specifically in the stage
of calculating the condition probability distribution.
Bayesian network causal model uses directed acyclic
graphs consisting of nodes and arcs. The node plays
as the variable in the model, and the arcs denote the
causal relationship between these variables. The
nodes that the arcs point to are called child nodes,
while the reference nodes are called parents nodes. A
node with child node and no parent node is called
root node. As shown in Figure 1, this part refers to the
first and second stage. For nodes that are discrete,
their effect on the child node can be quantitively
expressed through a conditional probability
distribution (CPD) that shows the influence of parent
nodes. This part takes the three processes on the last
section of model construction.