Terumo Advanced Perfusion System 1 Operator's Manual page 286

Emergency Procedures
Loss of Local Control (roller pump or centrifugal control unit)
A failure of the local controls may result in the pump failing to respond to a user
command from these local control points: Start/Stop button, pump speed control
knob, Select button, or Manual button. Specific user commands that may be affected
include: starting/stopping of the pump, speed adjustment, return to continuous mode
from Pulse mode or Servo mode, or reset of an active air bubble detection alarm.
• If this occurs while not on bypass, replace and re-assign the pump with
backup equipment
• If this occurs while on bypass, the pump controls on the CCM may still be
completely functional. Attempt to finish the case with the controls on the
CCM.
WARNING: If the local controls fail, the pump can be controlled through the
controls on the CCM. The CCM controls provide all necessary commands
including: starting, stopping, or adjusting the speed of the pump, returning to
continuous mode from pulse mode or servo mode, and resetting an active air
bubble detection alarm.
WARNING: If any of the local controls fail, the pump may still be operational
and other local controls may still function. Confirm the pump status using other
indicators before attempting to start/stop the pump or adjust speed. Pressing the
Start/Stop button could result in the unintentional stopping of a running pump.
Module Failure
If a module fails and/or loses communication with the network, all safety connections
related to that module will become inactive. For example, an occluder which has a
safety connection response to close when the arterial pump stops, will not respond if
the occluder module or pump fails and/or loses communication with the network.
Check the LED on the module itself to determine if there has been a module failure.
The LED will display constant red in the event of a broken module. A module failure
may also be accompanied by a message in the message area of the CCM. A
question mark or a red X may appear over the broken module icon (see Network
Malfunction subsection). Operating parameters for each module can be viewed
using the Module Info subtab within the System tab.
To verify a module is broken, connect the module to another base receptacle and
allow the Power-On Self-Test to run again. If the module fails again, replace the
module.
Broken modules can be replaced with the same type module. Plug the sensors into
the new module and plug the new module into the system base. Use the Reassign
Module subtab within the System tab to reassign the new module. Enable safety
systems and calibrate pressure transducers and, if necessary, the occluder.
10-7