@article{Muhammad_Widarbowo_Idris_Kendek_Filemon_Haryanto_Suganjar_2026, author = {Muhammad, Fadel and Widarbowo, Dodik and Idris, Muhammad and Kendek, Meti and Filemon, Filemon and Haryanto, Dwi and Suganjar, Suganjar}, title = {Formal Safety Assessment of Passenger Embarkation and Debarkation at Anchorage: A Case Study of an Indonesian Pioneer Service Vessel}, journal = {TransNav, the International Journal on Marine Navigation and Safety of Sea Transportation}, volume = {20}, number = {3}, pages = {619-627}, year = {2026}, url = {./Article_Formal_Safety_Assessment_of_Passenger_Muhammad,79,1690.html}, abstract = {Passenger transfer between an anchored pioneer service vessel and local connecting boats combines relative motion, limited infrastructure and fragmented operational authority. This study develops risk-control options and an International Safety Management Code-based operating procedure for such transfers. A qualitative single-case design with an adapted semi-quantitative Formal Safety Assessment was applied to Pioneer Service Vessel R-72 at Sofyanin anchorage, Indonesia. Evidence comprised case observations, Safety Management System documents and role-based expert judgement from a master, a harbour master and a certified ISM Code auditor. Fifteen hazards were identified, while five common scenarios were scored on a 5 × 5 likelihood-severity matrix and summarised by median and range. The initial risks of falling overboard and boat capsizing were Extreme, each with a median score of 20. Collision between boats, passenger crushing or impact, and loss of boat position were High, each with a median score of 12. A layered control package reduced four scenarios to Medium, but capsizing remained High with a residual median of 10 because catastrophic severity and uncertainty in overload control persisted. Eight control groups were formulated and mapped to ISM Code clauses 5-12. The resulting Layered Passenger Transfer Safety System integrates no-go criteria, boat acceptance, fit-for-purpose access, transfer-zone control, personal flotation devices and rescue readiness, competence and vulnerable-passenger arrangements, organisational learning, and formal local coordination. A written procedure alone cannot establish tolerable risk unless capacity, equipment, emergency readiness and stop-work authority are objectively verified. Controlled field trials remain necessary before operational adoption.}, doi = {10.12716/1001.20.03.10}, issn = {2083-6473}, publisher = {Gdynia Maritime University, Faculty of Navigation}, keywords = {Risk Assessment, Safety and Security in Sea Transportation, Formal Safety Assessment (FSA), Safety Management, ISM Code, Human Factors and Crew Resource Management, Passenger Safety, Ship Operations} }