Radar, gyro, autopilot, echo sounder, ECDIS and GMDSS are deck equipment, but the ETO is the one who opens the cabinet, reads the test log, and answers for the numbers when a surveyor asks.
Every radar set on the bridge is, underneath the display, the same chain of stages doing the same job: generate a short burst of RF energy, send it out, listen for the echo, and turn the timing of that echo into a picture. When a set misbehaves, the practical question is never "what's wrong with the radar" — it's which stage in that chain has stopped doing its job, because that tells you where to put your meter and your screwdriver.
The modulator charges up and then dumps its energy into the transmitter — a magnetron on older or simpler sets, a solid-state transmitter (typically a chain of transistor amplifiers) on modern ones. The magnetron produces a short, very high-power pulse directly; it ages as it runs, its output falls off, and it eventually needs replacing as a unit. A solid-state transmitter produces a longer, lower-power pulse and compresses it electronically to get equivalent range performance, but it runs at lower stress and lasts far longer without the abrupt end-of-life a magnetron has. Either way, the duplexer's job is to protect the sensitive receiver from that transmit pulse and then switch the antenna over to receive within microseconds, so a duplexer fault often looks like "transmits fine, sees nothing" or, worse, a burned-out receiver front end.
Two numbers set radar performance directly from the transmitter timing, and they explain complaints you'll actually hear on watch: a set that "can't see far enough" and a set that "can't tell two contacts apart." The pulse repetition frequency (PRF) — how often the transmitter fires — sets the maximum range before an echo would arrive after the next pulse has already gone out and become ambiguous. The pulse length sets both the minimum range (you can't listen while you're still transmitting) and how close together two targets on the same bearing can sit and still show as two separate echoes rather than one merged blob.
Diagnose a radar fault by asking which stage the symptom implicates — no transmission, no reception, or no display — before touching anything. And before touching the transmitter side at all, confirm it is inhibited: a magnetron runs at several kilovolts, and a solid-state transmitter still radiates enough RF to be a hazard to anyone working near the scanner.
A gyrocompass finds north by a completely different mechanism from a magnetic compass, and that mechanism is worth understanding properly rather than just accepting the output, because it explains both why the gyro is more reliable and where its particular errors come from. A fast-spinning rotor resists any twist to its spin axis; applied a small, continuous torque — supplied by a pendulous weight or an equivalent electrical control loop sensing that the rotor is not level — it doesn't tip over, it precesses, moving at right angles to the applied force. Engineered correctly, that precession drives the spin axis to settle on the meridian: the plane of true north, sought the way a compass needle seeks magnetic north, but by a torque-and-precession mechanism rather than a magnetic field. Because it is not sensing the earth's magnetic field at all, it has no variation and no deviation — the two errors that dominate magnetic compass work simply do not apply to it.
What it does have is settling time: after start-up, or after a course or speed change disturbs it, the gyro takes a period to precess back onto the meridian and stop oscillating around it. It also has speed and course-dependent error: a gyro on a moving ship is not quite responding to the earth's rotation alone, because the ship's own velocity over the surface adds a component that shifts the apparent settling point off true north by a small amount depending on the ship's speed, course and latitude. And it has latitude error and, transiently, ballistic deflection — a temporary swing immediately after a rapid speed or course change, before the gyro settles back down. None of this makes the gyro unreliable; it makes it a compass with known, predictable errors rather than an unpredictably deviated one.
Because those errors are predictable but not zero, the gyro heading is checked against a true bearing — typically an azimuth of the sun or a transit — once a watch, a deck duty the ETO supports by keeping the gyro and its repeaters correctly synchronised. The follow-up repeaters around the bridge and on the wings are themselves mechanical or electrical slaves to the master, and they drift out of synchronisation independently of the master unit; a gyro that is "maintenance-free" is a myth that costs marks and, at sea, costs a genuinely reliable heading reference.
The gyro's errors are a signature of how it works, not a maintenance failure: no variation or deviation because it isn't magnetic, but settling time, speed/course error, latitude error and ballistic deflection because it senses motion through precession.
An autopilot is, at its core, a control loop: it compares the heading the gyro (or a magnetic compass repeater) reports against the heading you've set, and it commands the rudder to close that difference. What makes a good autopilot setup is not the electronics but the tuning of that loop to the ship's actual handling characteristics at the time, because a setting that works well for one loading condition and sea state can be actively wrong for another.
Three settings do most of the work. Rudder (or gain) sets how much helm the autopilot applies for a given heading error — too little and the ship wanders and is slow to correct; too much and it oversteers, wasting rudder movement and fuel and inducing a rolling, snaking track. Counter-rudder anticipates the ship's swing and takes off helm before the heading actually reaches the set course, so the vessel arrives on course without overshooting past it — a ship with a lot of momentum needs more counter-rudder applied earlier than a small, quick-turning one. Weather adjustment biases the rudder to compensate for a steady beam wind or sea pushing the bow off, so the autopilot isn't fighting a constant disturbance stroke by stroke.
None of these three are "set once." A ship that is light and high out of the water handles very differently from the same ship deep-loaded; a following sea that starts to push the stern around calls for different rudder and counter-rudder behaviour than head seas do. Part of keeping the steering system serviceable is making sure these settings actually get adjusted for the conditions rather than left on a default from the last passage, and that the off-course alarm and the changeover to manual or hand steering are tested and known to work before they're needed in an emergency, not discovered to be faulty in one.
Rudder, counter-rudder and weather adjustment are tuning parameters, not fixed configuration — they need re-setting for loading and sea state, and the off-course alarm and manual changeover need testing, not just installing.
An echo sounder measures depth the same way a radar measures range, just with sound instead of radio: it transmits a short pulse downward from a transducer in the hull, times how long the echo takes to return, and converts that time into distance using an assumed speed of sound in seawater — commonly taken as about 1500 metres per second, though the true figure varies a little with temperature, salinity and pressure. That reading is the depth below the transducer, and it is worth saying plainly: not below the keel, not below the waterline, and not the charted depth — it is the depth below wherever the transducer happens to be mounted in the hull, and every other figure has to be derived from that by applying known offsets.
Two corrections turn the raw reading into something useful. First, the instrument's own index (or zero) error — a small, fixed offset built into the electronics or introduced by the transducer's exact mounting — is applied to the raw reading before anything else, and it's found and logged by comparison with a lead-line or a known depth, not assumed to be zero. Second, the transducer's own position in the hull — how far above the keel, or below the waterline, it is actually fitted — is applied to convert "depth below transducer" into whichever reference the bridge team actually needs: depth under the keel for grounding risk, or depth below the waterline to compare against a chart.
The speed log works on an entirely different principle but suffers from the same "measured relative to what, exactly" problem. An electromagnetic (EM) log measures speed through the water by the voltage a moving conductor — the ship's hull, in effect — induces as it moves through the earth's magnetic field, picked up by electrodes on a small sensor unit; it always reads speed through the water, never speed over the ground. A Doppler log sends an acoustic beam down at an angle and measures the frequency shift of the return: it can bottom-track, giving true speed over the ground, when the water is shallow enough for the bottom echo to be usable, and falls back to water-track — measuring against a scattering layer in the water column — in deep water. Neither is wrong; they're answering different questions, and confusing "speed through the water" with "speed over the ground" is precisely the kind of error that costs marks and, at sea, costs an inaccurate ETA or a misjudged set and drift.
Every sounder and log reading is relative to something specific — the transducer's position, or the water rather than the ground — and the useful figure is what you get after applying the right offset or knowing which reference you're looking at.
Strip away the chart display and ECDIS is a purpose-built computer, and it needs to be treated with the same two-sided discipline as any other piece of safety-critical IT: the hardware and software have to be of an approved, known type, and the content it's displaying has to be kept current. Type approval covers the unit itself — the manufacturer's hardware and software combination has been tested against the performance standard and found to meet it, which is why you can't simply run chart software on an arbitrary PC and call it an ECDIS. Software version compliance is the part that keeps changing after the unit is installed: as the international chart presentation and content standards are periodically revised, the ECDIS software has to be updated to remain compliant with the current version, and a unit running software that has fallen behind the current standard is exactly the kind of thing a port state control inspector checks — an out-of-date ECDIS software version has genuinely been used as grounds for detention.
Chart updates are the content side of the same discipline: electronic navigational charts (ENCs) are corrected regularly, and the ship needs a working arrangement — automatic where the connectivity supports it, manual update loading where it doesn't — to keep the displayed charts current, with the update history auditable. An ECDIS showing a beautiful, clear picture built from charts that are months out of date is not meeting the requirement just because the screen looks fine.
Finally, ECDIS carriage comes with a backup arrangement, because a vessel navigating primarily on ECDIS cannot simply go dark if the primary unit fails: that backup is either a second, independent ECDIS or an appropriate folio of paper charts, and it needs to be genuinely usable — kept current, and with someone aboard who can actually navigate on it — not a box ticked once at delivery and never revisited. From the ETO's side, the practical work is keeping the unit's software and the vessel's ENC permit and update subscription current, confirming the backup arrangement is real, and knowing what evidence a surveyor will actually want to see for each of those.
ECDIS compliance is two separate things that both have to hold at once: the unit's type approval and software version, and the currency of the charts and updates loaded onto it. Either one slipping is a deficiency even if the display looks normal.
GMDSS equipment earns its keep only if it works the one time it's actually needed, which is why the whole installation is built around a testing schedule rather than an assumption that hardware left switched on stays serviceable. The daily routine is an internal self-test of each set — VHF, MF/HF, NAVTEX, and the rest — checking that the equipment powers up correctly and reports no fault, without transmitting to another station. Weekly, a DSC test call is made to confirm the digital selective calling function — the part that actually triggers an automated distress alert — is genuinely working end to end rather than just the voice channel. Monthly, the reserve batteries are checked and the EPIRB and SART are inspected, including their own battery expiry and hydrostatic release where fitted.
None of this matters to a surveyor if it isn't written down: every one of those tests is logged, with the date, the result, and who carried it out, and a radio survey spends as much time reading that log as it does looking at the equipment itself. A perfectly functioning radio room with a gap in the test log looks, to an inspector, exactly like equipment nobody has actually checked — because from the paperwork, that's indistinguishable from the truth. Keeping the log complete and contemporaneous, not reconstructed from memory the night before a survey, is as much a part of GMDSS maintenance as replacing a battery.
Underneath the testing schedule sits the reserve source of energy: a battery, or batteries, sized and maintained to keep the required GMDSS installation running on its own if the ship's main and emergency supplies are both lost, for a duration set by the vessel's equipment fit and area of operation. Sizing and checking that reserve — working out what it actually has to power, for how long, and whether the battery as it currently stands can still deliver that — is a genuine calculation, not a guess, and it's one the ETO should be able to do from first principles rather than from memory of a number.
A GMDSS installation is judged on its test log as much as its hardware — daily, weekly and monthly tests, all recorded, plus a reserve source of energy that's been sized against its actual load, not assumed adequate.
The three problems below work through the numbers behind a radar timing question, an echo-sounder depth correction, and a GMDSS reserve-battery check — the kind of layered calculation an exam question builds from a single formula into a decision.
A radar set operates with a pulse repetition frequency (PRF) of 600 pulses per second and a pulse length of 1 microsecond (a typical short-pulse setting). (a) Find the maximum unambiguous range. (b) Find the minimum range at which a target can be detected. (c) Two small contacts on the same bearing are separated in range by 200 m. Using the speed of radio waves as 3×10⁸ m/s, will they be shown as two separate echoes at this pulse length?
PRF = 600 pulses/s Pulse length τ = 1 μs = 1×10⁻⁶ s Speed of propagation c = 3×10⁸ m/s Target separation = 200 m, same bearing
(a) Find the maximum unambiguous range
(b) Find the minimum range at which a target can be detected
The maximum unambiguous range is set purely by the time between pulses.
An echo must return before the next pulse fires, or it will be mistaken for a return from the next transmission and shown at the wrong range.
Minimum range is set by pulse length.
The receiver cannot listen for an echo while the transmitter is still sending, so nothing closer than the distance the pulse itself travels — there and back — in its own duration can be seen.
Range resolution.
The closest two same-bearing targets can sit and still appear as two echoes rather than one — is governed by the same pulse-length arithmetic as minimum range, because it is really the same physical limit: the echo from the near target must have fully returned before the echo from the far one arrives.
AnswerYes — with a 150 m minimum discrimination distance and a 200 m actual separation, the two contacts will show as two distinct echoes.
The trap: assuming range resolution is a receiver or display property — it is set by pulse length, exactly like minimum range, so a set switched to long pulse for maximum range will simultaneously lose its ability to separate close-in targets.
A vessel's echo sounder, using an assumed sound velocity of 1500 m/s, indicates a two-way echo time of 0.040 s (40 ms). The instrument has a known index error of +0.6 m (it reads 0.6 m too deep). The transducer is fitted 0.6 m above the bottom of the keel. The passage plan requires a minimum under-keel clearance of 2.0 m at this point. Find the depth of water under the keel, and state whether the clearance requirement is met.
Assumed sound velocity v = 1500 m/s Two-way echo time t = 0.040 s Index error = +0.6 m (instrument over-reads) Transducer height above keel bottom = 0.6 m Required minimum under-keel clearance = 2.0 m
Find the depth of water under the keel, and state whether the clearance requirement is met
The raw reading converts to depth below the transducer using the standard sound-ranging relationship: the pulse travels down and back in the measured time, so only half the distance implied by that time is the actual depth.
Apply the instrument's index error before anything else.
It is a known, fixed fault in the reading itself, found by checking the sounder against a lead-line or a known depth, and it has to be removed before the reading can be trusted for anything downstream.
The transducer sits above the keel.
So the seabed is closer to the keel than it is to the transducer by exactly that mounting offset — subtract it to get depth under the keel, then compare against the required clearance.
AnswerDepth under the keel ≈ 28.8 m — the 2.0 m minimum under-keel clearance is met with a wide margin (26.8 m to spare).
The trap: reporting the raw or index-corrected reading as "depth under the keel" without applying the transducer's own offset — on a vessel with a deep draught that offset is not a rounding error, it is a genuine part of the answer.
The vessel's GMDSS installation, running on its reserve source of energy alone, must supply the following simultaneously: VHF DSC transceiver 3.0 A, MF/HF DSC installation 5.0 A, NAVTEX receiver 1.0 A, and emergency GMDSS-area lighting 2.0 A. The vessel's radio documentation specifies a duty period of 6 hours for the reserve source. The fitted battery bank is rated 100 Ah at its nameplate capacity, but only 80% of that is treated as usable capacity to allow for ageing and temperature. Is the battery bank adequate, and by how much?
VHF DSC = 3.0 A MF/HF DSC = 5.0 A NAVTEX = 1.0 A Emergency lighting = 2.0 A Required duty period = 6 hours Nameplate battery capacity = 100 Ah Usable fraction = 80%
First establish the total simultaneous load.
Everything listed is required to run together for the full duty period, so the currents are simply summed.
Required capacity is that total load sustained for the specified duty period.
A straightforward current × time relationship, but it is the figure the battery bank actually has to be checked against.
Compare against what the battery can actually deliver, not its nameplate figure.
An aged or cold battery does not give its full rated capacity, so the usable fraction, not the nameplate rating, is the honest number to check the requirement against.
AnswerAdequate — the bank's usable 80.0 Ah covers the 66.0 Ah required for the full 6-hour duty period, with 14.0 Ah (about 21%) to spare.
The trap: checking the required capacity against the battery's nameplate rating instead of its usable capacity — a bank that looks adequate on the label can be genuinely short once ageing and derating are accounted for.
Radar chainModulator → transmitter (magnetron/solid-state) → duplexer → antenna → receiver → processor → displayR_max = c / (2 × PRF)Maximum unambiguous range, set by pulse repetition frequencyR_min ≈ c × τ / 2Minimum range and range resolution, set by pulse length τMagnetron vs solid-stateHigh peak power, pulsed, finite tube life vs lower power, continuous, much longer service lifeGyro errorsSettling time, speed/course error, latitude error, ballistic deflectionAutopilot settingsRudder (gain), counter-rudder, weather adjustment — re-tune for sea state and loadingDepth = v × t / 2Echo sounder depth below transducer; then apply index error and transducer offsetEM log vs Doppler logSpeed through water (induced voltage) vs bottom-track/water-track (acoustic Doppler shift)ECDISType approval, current software version, ENC updates, independent backup arrangementGMDSS testsDaily internal, weekly DSC call, monthly battery/EPIRB/SART — every result logged