← All reports
PDF Excel ReqIF

Container Ship Cargo Management System

System Requirements Specification (SyRS) — ISO/IEC/IEEE 15289 — Specification | IEEE 29148 §6.2–6.4
Generated 2026-03-27 — UHT Journal / universalhex.org

Referenced Standards

StandardTitle
IEC 61162-1
IEC 61162-450
IEC 62923
IMDG Code Dangerous Goods List is the authoritative reference for all DG classification
IMDG Code Database SHALL contain the complete Dangerous Goods List per the current IMDG Code amendment
IMDG Code Database SHALL provide batch query capability for segregation group membership and Table 7.2.4 compatibility data
IMDG Code Database SHALL support synchronous query
IMDG Code Database SHALL support update ingestion for new IMDG Code amendments within 48 hours of amendment data availability
IMDG Code Database and return a pass
IMDG Code Database as central hub enforces a single source of truth for DG classification data. Separating segregation from stowage validation reflects the distinct IMDG Code chapters
IMDG Code Database as the central reference hub. The Segregation Rules Engine and DG Stowage Position Validator are separated rather than merged because segregation
IMDG Code Table 7.2.4
IMDG Code Table 7.2.4 defines mandatory segregation distances between hazard classes. Automated enforcement prevents human error in stowage planning that could place incompatible dangerous goods adjacent
IMDG Code Table 7.2.4 for each class pair combination. Calculating separation in three
IMDG Code Table 7.2.4 rules for the most hazardous pairings. These specific combinations are chosen because they represent the highest
IMDG Code Table 7.2.4 segregation enforcement is a SOLAS Chapter VII regulatory requirement. Failure to enforce correct segregation of incompatible dangerous goods classes has caused vessel fires and explosions
IMDG Code Table 7.2.4 segregation requirements during placement
IMDG Code Table 7.2.4 segregation rules for all 9 hazard classes and 3 segregation groups
IMDG Code chapters
IMDG Code compliance checking appear in the IMO FAL Form 7 output. The interface between the Dangerous Goods Management System and the Stowage Planning Engine SHALL transmit stowage constraint data comprising
IMDG Code compliance is a SOLAS requirement
IMDG Code is amended on a two
IMDG Code is required by SOLAS VII and the IMDG Code Chapter 5.4. Processing 500 declarations within 60 seconds matches the rate at which large terminal operating systems submit booking confirmations during peak loading operations. Automated validation replaces manual DG officer review
IMDG Code reference. Batch query testing at 25
IMDG Code section and stowage category code in the rejection reason. Hard rejection of stowage positions violating segregation rules is the safety
IMDG Code segregation
IMDG Database directly
IMDG hazard classes and verify that the Dangerous Goods system returns correct segregation matrices. Intentionally place containers violating segregation distances and confirm the SPE rejects these placements. Pass criteria
IMDG hazard classes must be represented in the test manifest because segregation rules and stowage categories differ significantly between classes. A test covering only common classes
IMDG hazard classes placed in known violation configurations
IMDG segregation
IMDG stowage category rules
ISO 1496-1
ISO 6346
SOLAS
SOLAS 2009 Chapter II
SOLAS Chapter II
SOLAS Chapter VI Regulation 2
SOLAS Chapter VI Regulation 2 requires VGM for all packed containers before vessel loading. Non
SOLAS Chapter VII Regulation 4 and IMDG Code Section 5.4.3
SOLAS VGM amendments. The 2000
SOLAS VGM compliance evidence. Storing declared VGM
SOLAS VGM compliance is achievable regardless of terminal infrastructure. Mandatory fields prevent incomplete declarations from entering the system. The Weighbridge Data Interface SHALL acquire gross weight measurements from terminal weighbridge equipment via Modbus TCP
SOLAS VGM verification requirements. The interface between the Container Weight Database and the Container Tracking and Inventory System SHALL synchronize VGM status and verified gross mass for each container
SOLAS VI
SOLAS VII and IMDG Code 5.4.3
SOLAS VII. Automated generation from the cargo database eliminates manual transcription errors that could delay port entry clearance. The Communication Link Manager SHALL detect primary VSAT link failure within 5 seconds and complete automatic failover to Inmarsat Fleet Broadband backup within 30 seconds
SOLAS amendments or flag state circulars change
SOLAS compliance concern
SOLAS record retention expectations. The intact stability calculation
SOLAS requires VGM declarations to identify the weighing method and authorized person. The validator enforces these mandatory fields at the point of entry to prevent incomplete declarations from propagating through the system and causing downstream audit failures. The VGM Compliance Validator SHALL issue a loading authorization status for each container
SOLAS requires that weighing equipment used for Method 1 VGM be certified and calibrated per national regulations. Maintaining the calibration register enables the system to reject measurements from expired or uncertified equipment
SOLAS to ensure all containers have valid VGM before departure. The VGM Reporting and Audit Module SHALL generate individual container VGM certificates showing the full chain of custody from declaration receipt through discrepancy check to loading authorization
SOLAS weighing accuracy standards. The Weighbridge Data Interface SHALL maintain a calibration certificate register for each connected weighing device

Acronyms & Abbreviations

AcronymExpansion
ARC Architecture Decisions
CCCS Completeness, Consistency, Correctness, Stability
EARS Easy Approach to Requirements Syntax
IFC Interface Requirements
STK Stakeholder Requirements
SUB Subsystem Requirements
SYS System Requirements
UHT Universal Hex Taxonomy
VER Verification Plan

Stakeholder Requirements (STK)

RefRequirementV&VTags
STK-NEEDS-001 The Container Ship Cargo Management System SHALL enable the cargo officer to plan, execute, and monitor cargo operations such that the vessel's intact stability margins remain above IMO A.749 minimum criteria at all times during loading, discharge, and voyage.
Rationale: Core operational need: cargo officers require an integrated system to manage container operations safely and efficiently across port calls, replacing fragmented manual processes that increase turnaround time and error rates.
Analysis stakeholder, session-277
STK-NEEDS-002 The Container Ship Cargo Management System SHALL produce stowage plans that minimise the number of restows (shifting moves) at each port of call in the vessel's rotation, targeting less than 5% restow ratio against total discharge moves.
Rationale: Each restow costs approximately USD 200-400 in crane time and delays vessel departure. Minimising restows directly reduces port costs and improves schedule reliability for liner services.
Test stakeholder, session-277
STK-NEEDS-003 The Container Ship Cargo Management System SHALL enforce IMDG Code segregation, stowage, and documentation requirements for all dangerous goods containers, preventing loading of non-compliant container placements and generating the mandatory dangerous goods manifest for port authority submission.
Rationale: IMDG Code compliance is a SOLAS requirement (Chapter VII). Non-compliance risks catastrophic cargo incidents (fires, toxic releases) and exposes the vessel to port state detention.
Test stakeholder, session-277
STK-NEEDS-004 The Container Ship Cargo Management System SHALL continuously monitor all connected reefer containers and alert the duty officer within 5 minutes of any temperature deviation exceeding the shipper's tolerance, to prevent spoilage of perishable cargo valued at up to USD 100,000 per container.
Rationale: Reefer cargo losses from undetected temperature excursions can exceed USD 100,000 per container. Continuous monitoring with proactive alerting prevents spoilage of perishable and pharmaceutical cargo.
Test stakeholder, session-277
STK-NEEDS-005 The Container Ship Cargo Management System SHALL prevent the loading of any container that does not have a valid verified gross mass (VGM) declaration as required by SOLAS Chapter VI Regulation 2, and SHALL flag weight discrepancies exceeding 5% between declared VGM and any independent measurement.
Rationale: SOLAS Chapter VI Regulation 2 requires VGM for all packed containers before vessel loading. Non-compliance results in port state detention and potential fines under national maritime legislation.
Test stakeholder, session-277
STK-NEEDS-006 The Container Ship Cargo Management System SHALL exchange stowage plans and container data with any SMDG-compliant terminal operating system via UN/EDIFACT maritime messages, supporting the vessel's operation across a global port rotation of 20+ terminals operated by different terminal operators.
Rationale: Container shipping relies on standardised EDI messaging between ship and terminal systems. Interoperability with SMDG-compliant terminals is essential for efficient port operations globally.
Demonstration stakeholder, session-277
STK-NEEDS-007 The Container Ship Cargo Management System SHALL verify that every on-deck container stack's lashing arrangement meets the forces calculated per the vessel's approved Cargo Securing Manual, and SHALL warn the cargo officer before any stack is loaded that would exceed the lashing capacity for the planned voyage route.
Rationale: Parametric rolling and heavy weather can cause catastrophic container stack collapses. CSS Code and vessel-specific cargo securing manual compliance prevents loss of containers overboard and structural damage.
Analysis stakeholder, session-277
STK-NEEDS-009 The Container Ship Cargo Management System SHALL be designed to meet the type approval requirements of a recognised classification society for a Class-approved loading instrument as required by SOLAS Chapter II-1 Regulation 22, including independent verification of stability calculations and provision for class surveyor audit access.
Rationale: SOLAS Chapter II-1 Regulation 22 mandates that all vessels carry a stability instrument approved by the classification society. Without class type approval, the system cannot be used as the primary loading instrument and the vessel must maintain parallel manual calculations. Class surveyor audit access is required for periodic verification during annual and special surveys. Independent calculation verification prevents single-point software faults from producing undetected erroneous stability results.
Inspection stakeholder, classification-society, validation, session-288

System Requirements (SYS)

RefRequirementV&VTags
SYS-REQS-001 The Container Ship Cargo Management System SHALL calculate intact stability parameters (GM, GZ curve, trim, heel) and longitudinal strength (bending moment, shear force) within 2 seconds of any change to the loading condition, including individual container load/discharge events and ballast tank level changes.
Rationale: SOLAS Chapter II-1 Part B-1 mandates that intact stability and longitudinal strength be verified for every loading condition. Real-time calculation prevents departure in non-compliant conditions that could lead to capsizing or structural failure.
Test system, stability, session-277
SYS-REQS-002 The Container Ship Cargo Management System SHALL generate an optimised stowage plan for a full 20,000 TEU load list within 300 seconds, considering port rotation sequence, container weight/type/destination, stack weight limits, tier height limits, hatch cover limits, and dangerous goods segregation constraints.
Rationale: A 20,000 TEU vessel may load 5,000+ containers per port call. Plan generation within 2 minutes enables the cargo officer to evaluate alternatives during the compressed pre-departure window; exceeding this threshold delays vessel departure.
Test system, stowage, session-277
SYS-REQS-003 The Container Ship Cargo Management System SHALL enforce IMDG Code Table 7.2.4 segregation rules for all 9 hazard classes and 3 segregation groups, preventing the stowage planning engine from placing containers in positions that violate the minimum separation distances (1 container space, 1 container space fore-and-aft, 6m, 12m, 24m, or separate compartment) specified for each incompatible class pair.
Rationale: IMDG Code Table 7.2.4 defines mandatory segregation distances between hazard classes. Automated enforcement prevents human error in stowage planning that could place incompatible dangerous goods adjacent, risking fire or toxic release.
Test system, dangerous-goods, session-277
SYS-REQS-004 The Container Ship Cargo Management System SHALL poll each connected reefer container's temperature, humidity, and compressor status at intervals not exceeding 5 minutes, and SHALL generate an alarm within 60 seconds when any container's cargo temperature deviates more than 2 degrees Celsius from its set-point for two consecutive readings.
Rationale: Reefer containers require continuous power and temperature monitoring. A 5-minute polling interval balances power bus load against the thermal time constant of insulated containers, ensuring excursions are detected before cargo damage occurs.
Test system, reefer, session-277
SYS-REQS-005 The Container Ship Cargo Management System SHALL reject any container loading instruction where the container does not have a VGM declaration recorded in the system, and SHALL flag containers where the absolute difference between declared VGM and any independent weight measurement exceeds 5% of the declared VGM or 1,000 kg, whichever is greater.
Rationale: SOLAS VI/2 makes VGM a hard gate for loading. Automated rejection prevents containers without valid VGM from being loaded, avoiding potential port state detention and ensuring accurate stability calculations.
Test system, vgm, session-277
SYS-REQS-006 The Container Ship Cargo Management System SHALL support transmission and reception of BAPLIE (D.13B or later), COPARN, MOVINS, CUSCAR, IFTDGN, and VERMAS messages conforming to SMDG EDIFACT implementation guidelines, and SHALL process a complete inbound BAPLIE message containing 20,000 container records within 120 seconds.
Rationale: BAPLIE, COPARN, and MOVINS are the SMDG-standard EDI message types used by container terminals worldwide. Supporting D.13B or later ensures compatibility with modern terminal operating systems.
Test system, edi, session-277
SYS-REQS-007 The Container Ship Cargo Management System SHALL calculate lashing forces for every on-deck container stack using the vessel's Cargo Securing Manual acceleration table, and SHALL generate a warning when any stack's calculated lashing force exceeds 90% of the maximum securing load (MSL) of the fitted lashing arrangement for the planned voyage route's design sea state.
Rationale: CSS Code Annex 13 and the vessel-specific cargo securing manual define permissible stack weights and lashing arrangements. Automated lashing force calculation prevents stack collapse in heavy weather conditions.
Analysis system, lashing, session-277
SYS-REQS-008 The Container Ship Cargo Management System SHALL maintain a real-time container inventory with sub-second query response time for the full vessel capacity of 20,000+ containers, and SHALL reconcile the shipboard inventory against terminal-reported loading and discharge events within 60 seconds of each EDI move confirmation.
Rationale: Sub-second query response is needed because stability recalculation and stowage planning algorithms query the container inventory thousands of times per optimisation cycle. Latency above 1 second would make plan generation unacceptably slow.
Test system, inventory, session-277
SYS-REQS-009 The Container Ship Cargo Management System SHALL provide a what-if simulation mode that allows the cargo officer to evaluate the stability, stress, lashing, and DG compliance impact of proposed container moves before committing them, with simulation results displayed within 5 seconds per proposed move set.
Rationale: What-if simulation allows the cargo officer to evaluate the stability and strength impact of proposed loading changes before execution. This prevents committing to load sequences that would violate stability criteria mid-operation.
Demonstration system, simulation, session-277
SYS-REQS-010 The Container Ship Cargo Management System SHALL achieve a system availability of at least 99.95 percent during cargo operations with a mean time between failures of not less than 2000 hours for the stability calculation function and not less than 1000 hours for the stowage planning function.
Rationale: Container vessels operate cargo operations 24/7 in port with typical port stays of 12-36 hours. A system outage during active loading requires halting crane operations at approximately USD 50,000/hour in delay costs. The 99.95% availability target (4.4 hours annual downtime) reflects the operational tempo of ultra-large container vessels calling at 8-12 ports per voyage. The 2000-hour MTBF for stability calculations reflects its safety-critical nature — an undetected stability error during loading could lead to list or capsize. The lower 1000-hour MTBF for stowage planning reflects its operational but non-safety-critical function.
Analysis performance, availability, validation, session-288
SYS-REQS-011 The Container Ship Cargo Management System SHALL implement network segmentation between the cargo management network and external-facing communication interfaces (VSAT, terminal EDI links) in accordance with IACS UR E26, and SHALL log all authentication events, configuration changes, and remote access sessions to a tamper-evident audit trail.
Rationale: IACS Unified Requirement E26 on cyber resilience mandates network segmentation between operational technology and external-facing interfaces on class-approved vessels. The cargo management system connects to external networks (VSAT for EDI, terminal WiFi for BAPLIE exchange) that are exposed to internet-borne threats. Without segmentation, a compromised EDI link could allow lateral movement to the stability calculation function. The tamper-evident audit trail supports forensic investigation after a security event and satisfies port state control requirements for demonstrating cyber hygiene under IMO MSC-FAL.1/Circ.3.
Test cybersecurity, compliance, validation, session-288
SYS-REQS-012 The Container Ship Cargo Management System SHALL retain all loading condition records, VGM declarations, dangerous goods manifests, reefer temperature logs, and stability calculations for a minimum of 3 years from the date of creation, and SHALL support export of retained data in a non-proprietary format for port state control inspection and class society audit.
Rationale: Port state control inspections under the Paris MoU and Tokyo MoU may request historical loading condition records, VGM declarations, and DG manifests up to 3 years after a voyage. Classification society annual and special surveys also require historical stability calculation records. Non-proprietary export format ensures data remains accessible independent of the system vendor, preventing vendor lock-in for regulatory compliance data. The 3-year period covers the typical class survey cycle and aligns with SOLAS record retention expectations.
Inspection data-retention, compliance, validation, session-288

Requirements by Category (IEEE 29148)

5
Functional Requirements
8
Performance Requirements
1
Safety Requirements
1
Security Requirements
2
Environmental Requirements
1
Reliability & Availability
2
Compliance & Regulatory
1
Other

Traceability Matrix — STK to SYS

SourceTargetTypeDescription
STK-NEEDS-009 SYS-REQS-012 derives
STK-NEEDS-009 SYS-REQS-011 derives
STK-NEEDS-009 SYS-REQS-010 derives
STK-NEEDS-002 SYS-REQS-009 derives
STK-NEEDS-001 SYS-REQS-009 derives
STK-NEEDS-002 SYS-REQS-008 derives
STK-NEEDS-001 SYS-REQS-008 derives
STK-NEEDS-007 SYS-REQS-007 derives
STK-NEEDS-006 SYS-REQS-006 derives
STK-NEEDS-005 SYS-REQS-005 derives
STK-NEEDS-004 SYS-REQS-004 derives
STK-NEEDS-003 SYS-REQS-003 derives
STK-NEEDS-002 SYS-REQS-002 derives
STK-NEEDS-001 SYS-REQS-001 derives