vaayaa Inclusive Education
Technical risk assessment

Naval Architecture Engineering Risk Assessment: Design Integrity, Approvals and Delivery Controls

A worked example of how a small naval architecture office finds, scores and controls the risks that threaten vessel stability, structural integrity, schedule, confidential data and the people who sign off designs.

Updated November 2026 8 hazards assessed Review every 6 months Highest risk: Critical to High
See the Naval Architecture Engineering course

Executive summary

This assessment shows how a small naval architecture office can find, rate and control the risks that matter most to vessel safety, design integrity and the trust placed in its drawings and calculations. Eight risks were chosen because they are plausible in everyday design, approval and delivery work. Errors in stability and structural calculations carry the highest impact and start as Critical before controls. Unclear briefs, weak testing and version-control failures are the most likely to occur. After existing and added controls, most risks fall to Medium or Low, but stability and structural integrity stay High because a single error can injure people. The first actions are an independent check of stability calculations, a controlled issue register for drawings, a documented test and correction loop and a signed written brief. The office is a teaching example, so every score illustrates method, not a real business.

Focus area
Naval architecture, marine engineering design and vessel delivery
Setting
Design office supporting concept, detailed design and build support for small commercial and workboat vessels
Method
Five by five likelihood and impact risk register with inherent and residual scoring

Scope

This assessment covers a naval architecture design office from client brief through concept, detailed design, calculations, approvals and build support. It looks at risks to vessel safety, design integrity, schedule, budget, intellectual property, confidential data and professional judgement. It does not give design approval, stability certification or advice on any real vessel. Jurisdiction, vessel type, classification route and software are assumptions made for teaching and are listed below.

Context

The office has a lead naval architect, two design engineers, a drafter, a project manager and an IT administrator. Work uses computer-aided design and calculation tools, shared document storage and email with external clients, yards and suppliers. Each project moves through brief, concept, detailed design, review and handover stages. Each hazard is scored before controls to show its natural level, then again after existing controls and the additional controls proposed here.

Objectives, assets and stakeholders

The objective is to deliver vessels that are safe, fit for purpose and built to the agreed scope, on time and within budget, while protecting the designs, client information and professional reputation of the office. The assets in scope are design models and drawings, calculation files, specifications, client data, the design software and its licences, and the professional judgement of the design team. Stakeholders include the clients, the builder and subcontractors, the classification or certifying body, the operators and crews who use the vessels, the project manager and the lead naval architect. Every risk has one owner role. The lead naval architect keeps the register current and reports to the directors each quarter.

Risk matrix: before and after controls

Each cell shows hazard numbers placed by likelihood and impact. Compare the two grids to see how controls move each hazard.

Before controls

Inherent risk

Risk before controls: rows are likelihood from almost certain to rare, columns are impact from insignificant to catastrophic. Cells list hazard numbers.
1
Insignificant
2
Minor
3
Moderate
4
Major
5
Catastrophic
5 Almost certain
4 Likely Likelihood 4, impact 3, score 12, high: H03 H06 Likelihood 4, impact 4, score 16, high: H01 Likelihood 4, impact 5, score 20, critical: H02
3 Possible Likelihood 3, impact 3, score 9, medium: H04 Likelihood 3, impact 4, score 12, high: H05
2 Unlikely Likelihood 2, impact 4, score 8, medium: H07 Likelihood 2, impact 5, score 10, high: H08
1 Rare

After controls

Residual risk

Risk after controls: rows are likelihood from almost certain to rare, columns are impact from insignificant to catastrophic. Cells list hazard numbers.
1
Insignificant
2
Minor
3
Moderate
4
Major
5
Catastrophic
5 Almost certain
4 Likely
3 Possible Likelihood 3, impact 2, score 6, medium: H01 H06
2 Unlikely Likelihood 2, impact 2, score 4, low: H04 Likelihood 2, impact 3, score 6, medium: H03 H05 Likelihood 2, impact 5, score 10, high: H02
1 Rare Likelihood 1, impact 4, score 4, low: H07 Likelihood 1, impact 5, score 5, medium: H08
  • Low 1 to 4
  • Medium 5 to 9
  • High 10 to 16
  • Critical 17 to 25

Hazard register

A summary first, then the detail for each hazard.

Summary of hazards with scores before and after controls
No.HazardBeforeAfterOwner
H01 Unclear brief and uncontrolled scope creep 16 High 6 Medium Project manager
H02 Stability and structural calculation errors 20 Critical 10 High Lead naval architect
H03 Weak testing and corrective iteration 12 High 6 Medium Design manager
H04 Version control and approval failures in drawings 9 Medium 4 Low Design manager
H05 Production and technical compatibility defects 12 High 6 Medium Supplier liaison engineer
H06 Schedule and budget pressure 12 High 6 Medium Project manager
H07 Intellectual property, licensing and confidential data 8 Medium 4 Low Office manager
H08 Ethical pressure and sign off integrity 10 High 5 Medium Directors
H01

Unclear brief and uncontrolled scope creep

Strategic Before 16 After 6

The client brief leaves loads, operating area, speed or safety features undefined, and extra requests are accepted informally, so the design drifts from what is paid for and from what is safe to operate.

Who or what is affected: Clients, project manager, design team and future crew

Causes

Vague client requirements, verbal instructions and pressure to keep a client happy.

Consequences

Redesign cost, late delivery, fee disputes and a vessel that does not match its intended use.

Existing controls

  • A kick off meeting records the main design requirements.
  • Client sign off is requested on the concept drawing.

Control gaps

Informal requests are often actioned before they are logged or costed.

Additional controls

  • Prevent: Issue a written brief with operating limits and get it signed before concept work starts.
  • Detect: Keep a scope change log and review it at each stage gate.
Likelihood 4 x impact 4 before; 3 x 2 after Owner: Project manager Target: Within 30 days Early warning: Design work started on items that are not in the signed brief.
H02

Stability and structural calculation errors

Safety Before 20 After 10

Stability, loading or structural calculations use wrong inputs, units, load cases or sea states, so a vessel may lose stability, flood or fail under load once it is in service.

Who or what is affected: Crew, passengers, operators, builder and the public

Causes

Manual data entry, unit mismatches, reused templates and tight deadlines before design freeze.

Consequences

Loss of stability, structural failure, serious injury or death, loss of the vessel and serious liability.

Existing controls

  • Calculations are prepared with a standard template and input sheet.
  • The lead naval architect reviews the final results before issue.

Control gaps

Self review is the only check on many calculation packages, and load cases are not listed against the brief.

Additional controls

  • Prevent: Require an independent engineer to re-run key stability and structural checks before any issue.
  • Respond: Hold the vessel and inform the client and builder at once if an error is found after issue.
Likelihood 4 x impact 5 before; 2 x 5 after Owner: Lead naval architect Target: Within 30 days Early warning: Calculation packages issued without an independent check record.
H03

Weak testing and corrective iteration

Operational Before 12 After 6

Model tests, sea trials and build checks find defects, but findings are not closed or retested, so the same faults return in later stages and the design is released with known gaps.

Who or what is affected: Design team, builder, trial crew and owners

Causes

Pressure to meet dates, unclear closure rules and findings spread across email and paper.

Consequences

Repeat defects, rework, poor trial results and a vessel that fails its acceptance tests.

Existing controls

  • Trial and inspection results are written up after each test.
  • Defects found on site are logged by the site representative.

Control gaps

Findings are closed by verbal agreement and retests are not recorded.

Additional controls

  • Detect: Track every test finding in a single log with a named reviewer and a closure criterion.
  • Recover: Retest each corrected item against the original test before sign off.
Likelihood 4 x impact 3 before; 2 x 3 after Owner: Design manager Target: Within 60 days Early warning: Open test findings older than 30 days without a closure decision.
H04

Version control and approval failures in drawings

Operational Before 9 After 4

Drawings, models and specifications exist in several revisions, and the wrong one is issued, built or approved, so the yard works from outdated information and handover manuals are hard to read.

Who or what is affected: Builder, yard workers, operators and maintenance crews

Causes

Multiple file copies, email attachments and late design changes.

Consequences

Wrong parts fitted, rework, misread instructions and unsafe maintenance.

Existing controls

  • Drawing numbers and revision letters appear on each sheet.
  • Shared folders are organised by project name.

Control gaps

Printed site copies are not recalled when a revision is issued.

Additional controls

  • Prevent: Use a controlled issue register that withdraws superseded revisions from shared locations.
  • Detect: Audit a sample of site copies against the register each month and write up any mismatch.
Likelihood 3 x impact 3 before; 2 x 2 after Owner: Design manager Target: Within 45 days Early warning: Drawings in circulation that carry a superseded revision code.
H05

Production and technical compatibility defects

Supplier Before 12 After 6

Design files, material data or software formats do not match the builder's tools or processes, and tolerances or weld details are misread, so parts arrive that do not fit or do not perform as designed.

Who or what is affected: Builder, subcontractors, suppliers and future operators

Causes

Mismatched software versions, unclear tolerances and component substitutions.

Consequences

Defective parts, delayed launch, extra cost and warranty claims.

Existing controls

  • Material and component data sheets are supplied with the design.
  • The builder confirms tolerances before fabrication starts.

Control gaps

Component substitutions are accepted by phone and not checked against the approved design.

Additional controls

  • Prevent: Agree file formats, units and tolerance standards with the builder in the contract before design freeze.
  • Respond: Stop fabrication of any affected part and issue a corrected design with a clear change record.
Likelihood 3 x impact 4 before; 2 x 3 after Owner: Supplier liaison engineer Target: Within 60 days Early warning: A substituted component that has not been checked against the approved design.
H06

Schedule and budget pressure

Financial Before 12 After 6

Fixed fees and tight programmes push the team to cut review time, skip trials or accept late changes, so costs rise, deadlines slip and the quality of checking suffers.

Who or what is affected: Directors, project manager, design team and clients

Causes

Optimistic estimates, fixed price contracts and late client decisions.

Consequences

Loss of margin, cut corners in checking, disputes and damaged client trust.

Existing controls

  • A project plan with milestones is agreed at the start.
  • Monthly cost reports are reviewed by the project manager.

Control gaps

Forecasts are based on work already done rather than work remaining.

Additional controls

  • Prevent: Set a fee and time budget for each stage and require approval before any overrun is worked.
  • Detect: Forecast cost and completion each fortnight against the approved baseline.
Likelihood 4 x impact 3 before; 3 x 2 after Owner: Project manager Target: Within 45 days Early warning: Forecast cost or completion date more than 10 percent beyond the approved baseline.
H07

Intellectual property, licensing and confidential data

Legal and compliance Before 8 After 4

Hull forms, client files and design models are copied to unlicensed software, shared with the wrong party or reused on another project without permission, breaching licences, contracts and confidentiality.

Who or what is affected: Clients, the office, designers and software suppliers

Causes

Shared drives, personal devices and reuse of old project files.

Consequences

Breach of contract, legal claims, loss of client trust and penalties where data rules apply.

Existing controls

  • Confidentiality clauses are included in client contracts.
  • Software is installed only from company licences.

Control gaps

Old project folders stay open to all staff and are not reviewed.

Additional controls

  • Prevent: Restrict file access by project and require a licence check before new software is installed.
  • Respond: Withdraw shared links at once and notify the client if confidential material has left the office.
Likelihood 2 x impact 4 before; 1 x 4 after Owner: Office manager Target: Within 60 days Early warning: Project files shared with an address outside the client or project team.
H08

Ethical pressure and sign off integrity

People Before 10 After 5

Engineers feel pressure from clients or colleagues to approve a design, sign a check or hide a problem, so unverified work is released and professional standards are weakened.

Who or what is affected: Engineers, clients, crew and the public

Causes

Commercial pressure, deference to senior staff and unclear rules on sign off.

Consequences

Unsafe vessels, professional discipline, loss of any licence to practise and reputational harm.

Existing controls

  • A professional code is signed on joining the office.
  • Staff can raise concerns with the lead naval architect.

Control gaps

Concerns are raised informally and are not recorded or followed up.

Additional controls

  • Prevent: Keep a written sign off rule that names who may approve a stability or structural result.
  • Respond: Provide a confidential route for concerns, with a record of how each one was resolved.
Likelihood 2 x impact 5 before; 1 x 5 after Owner: Directors Target: Within 60 days Early warning: A sign off given by someone who did not perform the check.

Rating method and evaluation

Each risk is rated on two five-point scales. Likelihood runs from Rare to Almost certain, and impact runs from Insignificant to Catastrophic, where catastrophic impact means loss of life, loss of a vessel or serious injury. Multiplying the two gives a score from 1 to 25, which falls into one of four bands: Low from 1 to 4, Medium from 5 to 9, High from 10 to 16 and Critical from 17 to 25. The score orders the work and is not a measurement. Inherent risk is the score before any controls. Residual risk is the score after existing and added controls, and it must never be higher than the inherent score. A hazard that could injure people is not rated down only because the chance seems low. Critical and High risks need senior attention and a dated plan, Medium risks need routine controls with a named owner, and Low risks are accepted and watched. Ratings are challenged by an independent engineer who did not prepare the work, and by the people who will use the vessel. Each rating is reviewed when an indicator reaches its threshold or when a project changes scope.

Likelihood, impact and rating bands

Likelihood

  • 5 Almost certain: Expected to happen in most circumstances.
  • 4 Likely: Will probably happen in many circumstances.
  • 3 Possible: Could happen at some time.
  • 2 Unlikely: Not expected, but it could happen.
  • 1 Rare: Only in exceptional circumstances.

Impact

  • 1 Insignificant: No lasting effect. Handled within routine work.
  • 2 Minor: Small effect that is quickly corrected.
  • 3 Moderate: Noticeable effect that needs managed effort to correct.
  • 4 Major: Serious effect on people, delivery or reputation.
  • 5 Catastrophic: Severe or lasting effect that threatens the whole activity.

Bands (likelihood x impact)

  • Low (1 to 4): Accept and monitor.
  • Medium (5 to 9): Manage with routine controls.
  • High (10 to 16): Senior attention and a treatment plan.
  • Critical (17 to 25): Act first. Do not proceed until reduced.

Monitoring, escalation and review

Review this assessment every 6 months, and sooner when an indicator below reaches its threshold.

Early-warning indicators and escalation thresholds
Indicator to watchEscalate when
Calculation packages issued without an independent check record.Escalate to the lead naval architect at once, and hold issue until the check is recorded.
Scope change requests received without a signed change log entry.Escalate to the project manager within two working days, and to the directors if the change moves cost or schedule.
Open test findings older than 30 days without a closure decision.Escalate to the design manager after 30 days, and to the lead naval architect if still open after 60 days.
Drawings in circulation that carry a superseded revision code.Escalate to the design manager at once, and withdraw the old revision from all shared locations within one working day.
Forecast cost or completion date more than 10 percent beyond the approved baseline.Escalate to the project manager at once, and to the directors for a re-plan decision within one week.

Contingency arrangements

If a serious design error is found after issue, the lead naval architect stops work on the affected drawings, informs the project manager and the client in writing, and records what was issued and to whom. The affected calculations are rechecked by an independent engineer before any revised issue. The IT administrator restores files from the latest tested backup and locks the old revision. Where a defect touches safety, the client, builder and certifying body are informed through the lead naval architect as the relevant jurisdiction requires, and work on the vessel is paused until a specialist confirms the fix.

Prioritized action plan

  1. Require independent checking of all stability and structural calculations before issue, owner lead naval architect, within 30 days.
  2. Introduce a controlled drawing register with revision codes and withdrawal of superseded issues, owner design manager, within 45 days.
  3. Sign a written brief and scope change log for every project, owner project manager, within 30 days.
  4. Set a documented test and correction loop with named reviewers and closure criteria, owner design manager, within 60 days.
  5. Restrict file access by project, enable multi-factor sign in and confirm intellectual property terms in each contract, owner office manager, within 60 days.

Conclusion

Sound vessel design depends on a few steady habits: a signed brief, independent checks of stability and structure, a controlled issue register, a documented test and correction loop and honest reporting of schedule and budget. The highest scores sit with calculation errors, and each has controls that bring the residual score down. Treat the register as a living record, review it on the stated cycle, and seek qualified specialist review for any real vessel, approval or legal question.

Assumptions and limitations

Assumptions

  • The office designs small commercial vessels and workboats for clients under a written contract, with an independent builder and a classification route.
  • Jurisdiction is not specified, so flag, regulatory and data duties are described in general terms only.
  • Staff are qualified engineers using commercial design software on managed computers with shared project storage.
  • Vessel types, sizes and operating areas are fictional and used only to illustrate method.

Limitations

  • The scores are examples for learning and do not describe any real vessel, yard or client.
  • Stability, structural and classification rules differ by vessel type and jurisdiction and change over time, so specialist review is needed.
  • This is educational content and is not engineering, legal or certification advice.

Related frameworks to study

  • Hazard identification and risk register method
  • Hierarchy of controls
  • Independent design checking practice
  • Three lines model of risk ownership

Technical Risk Assessment

China, India, United States, Indonesia, Pakistan, Nigeria, Brazil, Bangladesh, Russia, Japan, Mexico, Philippines, Vietnam, Egypt, Turkey, Germany, United Kingdom, France, Italy, Canada, South Korea, Australia, Spain.

For Learning Reference Only: This assessment demonstrates how risk assessment principles are applied in a practical setting, providing a useful reference for learning and understanding. Actual assessments may be adapted to suit specific site conditions and circumstances.

Keep learning

Study the subject behind this assessment.

More Technical risk assessments

Hourly Active: 45,552 Learners