In the maritime domain, hydrogen fuel cell propulsion and autonomous vessels are two important issues that are yet to be implemented together because of a few challenges. It is obvious that there are several individual safety studies on Maritime Autonomous Surface Ships and hydrogen storage as well as fuel cells based on various risk assessment tools but the combined safety studies that include hydrogen fuel cells on autonomous vessels with recent risk analysis methods are extremely limited. This research chooses the “System-Theoretic Process Analysis” (STPA) method which is a recent method for potential risk identification and mitigation. Both hydrogen and autonomous vessels are analyzed and assessed together with the STPA method. Results are not speculative but rather flexible compared to conventional systems. The study finds a total of 44 unsafe control actions (UCAs) evolved from human and central control unit controllers through STPA. Further, the loss scenarios (LS) are identified that lead to those UCAs so that loss scenarios can be assessed and UCAs can be mitigated for safe operation. The objective of this study is to ensure adequate safety for hydrogen fuel cell propulsion on autonomous vessels.

Maritime Autonomous Surface Ships (MASSs) incorporate advanced digital technologies, thus rendering their systems more complex and diverse than those of conventional ships. Furthermore, the operation of MASSs, which introduces new risks not encountered in conventional ship operations, differs significantly from that of conventional manned vessels. These challenges highlight the necessity for a more systematic and structured approach to risk analysis and control. This study presents a qualitative risk assessment methodology to identify and manage hazardous scenarios associated with MASS operations systematically. The key feature of the proposed methodology is the integration of cognitive model-based functional analysis with the widely adopted hazard identification (HAZID) method, which enables a structured and comprehensive analysis process. Functional analysis is used to examine the functions required for MASS operations and to analyze interconnected systems to fulfill these functions. Subsequently, HAZID is performed to identify hazardous scenarios that may cause functional degradation or failure. To illustrate the proposed methodology, a case study is presented based on a qualitative risk assessment conducted in preparation for the field trial of an Autonomous Navigation System. Practical applications, including the presented case study, demonstrated the effectiveness of this methodology as a systematic tool for identifying and evaluating potentially hazards in MASS operations.