fireandblast.

com
UKOOA / HSE

Fire and explosion guidance Part 2: Avoidance and mitigation of fires FINAL DRAFT

Main comment review completed

Document number 152-RP-48 Revision A B 0 1 2 Date 1 Mar 05 21 Jun. 05 3 July 05 02 Feb 06 06 Feb 06 Reason for Issue Initial build All received material to date Issued for comment to sponsors, authors and peer review Issued following review of main comments Issued for use

fireandblast.com ltd 8-10 High Street Laurencekirk Scotland AB30 1AE

+44 (0)1561-378383 admin@fireandblast.com http://www.fireandblast.com

fireandblast.com

Foreword
This document has been prepared by fireandblast.com limited by compiling contributions from a selection of industry experts in various aspects of fires on offshore installations. This document has been prepared by fireandblast.com limited under a joint industry project sponsored by UKOOA and the UK HSE. The production of the initial text was undertaken by a number of organizations and individuals, principally:

David Galbraith and Ed Terry Steve Walker Barbara Lowesmith Bassam Burgan John Gregory Theresa Roper Bob Brewerton Graham Dalzell Denis Krahn

fireandblast.com MSL Engineering Loughborough University Steel Construction Institute Risk Management Decisions Aker Kværner Natabelle Technology TBS cubed Mustang Associates

Terry Roberts, Stefan Ledin and Stuart Jagger Health and Safety Laboratory

This document is part of a series being produced by UKOOA and HSE on fires and explosions, the full series being: Part 0 Hazard management (formerly FEHM) Part 1 Avoidance and mitigation of explosions Part 2 Avoidance and mitigation of fires Part 3 Detailed design and assessment guidance

152-RP-48 Rev 02, Feb 2006

Page 2 of 261

fireandblast.com

Contents
1. 1.1 1.2 1.3 1.4 2. 2.1 2.2 2.3 2.4 2.5 2.6 2.7 2.8 2.9 3. 3.1 3.2 3.3 3.4 3.5 3.6 3.7 3.8 3.9 3.10 3.11 4. 4.1 4.2 4.3 4.4 4.5 4.6 4.7 4.8 4.9 5. 5.1 5.2 5.3 Introduction 5 History ................................................................................................................................. 5 Objectives ........................................................................................................................... 6 Fire and explosion hazard management............................................................................. 7 Overview of the guidance.................................................................................................... 8 Fire hazard management philosophy 10 Overview ........................................................................................................................... 10 Understanding the fire hazard........................................................................................... 13 Hazard management principles ........................................................................................ 24 Hazard management systems .......................................................................................... 25 Legislation, standards and guidance in the UK................................................................. 28 Inherently safer design...................................................................................................... 31 Risk screening................................................................................................................... 38 Risk reduction ................................................................................................................... 41 Human factors................................................................................................................... 43 Fires on offshore installations 44 Introduction ....................................................................................................................... 44 Fire types and scenarios ................................................................................................... 44 Fire prevention methods ................................................................................................... 47 Gas and fire detection and control methods ..................................................................... 50 Methods for mitigating the effects of fires ......................................................................... 60 Performance standards..................................................................................................... 66 Methods and approaches to structural analysis................................................................ 69 Particular considerations for floating structures, storage and offloading systems ............ 78 Particular considerations for mobile offshore units ........................................................... 82 Particular considerations for existing installations............................................................. 90 Particular considerations for accommodation and other areas for personnel ................... 95 96 General ............................................................................................................................. 96 Fire and explosion prevention methods ............................................................................ 97 Fire and explosion detection and control methods............................................................ 98 Fire and explosion mitigation methods............................................................................ 101 Combined fire and explosion analysis............................................................................. 106 Safety conflicts ................................................................................................................ 108 Fire and explosion walls.................................................................................................. 110 Decks .............................................................................................................................. 111 Feedback from explosion testing at Spadeadam ............................................................ 112 Derivation of fire loadings and heat transfer 113 Introduction ..................................................................................................................... 113 Fire characteristics and combustion effects .................................................................... 113 Fire and smoke loading................................................................................................... 123
Page 3 of 261

Interaction with explosion hazard management

152-RP-48 Rev 02, Feb 2006

fireandblast.com 5.4 5.5 6. 6.1 6.2 6.3 6.4 6.5 6.6 6.7 7. 7.1 7.2 7.3 7.4 7.5 8. 8.1 8.2 8.3 8.4 8.5 8.6 8.7 Estimating fire and smoke loadings ................................................................................ 127 Heat transfer ................................................................................................................... 136 Response to fires 154 Properties of common materials in use offshore............................................................. 154 Effects of fire and nature of failures ................................................................................ 156 Acceptance criteria.......................................................................................................... 164 Methods of assessment .................................................................................................. 166 Attachments and coat-back............................................................................................. 172 Process responses.......................................................................................................... 173 Personnel ........................................................................................................................ 180 Detailed design guidance for fire resistance 194 General ........................................................................................................................... 194 The design sequence – minimising fire hazards throughout the design ......................... 195 Best practice for fire protection systems ......................................................................... 207 Human factors – man / machine interface ...................................................................... 219 Industry & regulatory authority initiatives ........................................................................ 222 References 225 Section 1 ......................................................................................................................... 225 Section 2 ......................................................................................................................... 225 Section 3 ......................................................................................................................... 225 Section 4 ......................................................................................................................... 225 Section 5 ......................................................................................................................... 225 Section 6 ......................................................................................................................... 225 Section 7 ......................................................................................................................... 225 Acronyms, abbreviations etc. Glossary Details on legislation, standards and guidance Review of models Checklists 226 227 247 252 261

Annex A Annex B Annex C Annex D Annex E

152-RP-48 Rev 02, Feb 2006

Page 4 of 261

fireandblast.com

1. Introduction
1.1 History
Following the Piper Alpha disaster a large Joint Industry Project called ‘Blast and Fire Engineering for Topsides Structures (Phase 1)’ was carried out between May 1990 and July 1991. The main deliverable from this project was the Interim Guidance Notes (IGNs) [1.1] and 26 background reports [1.2 to 1.27] written by the participants and published by the Steel Construction Institute (SCI) in November 1991. These background reports are available as free downloads from the HSE web site [1.28]. The development of the Interim Guidance Notes was a major step forward which consolidated the then existing knowledge of fire and explosion hazards. At about this time the Fire and Blast Information Group (FABIG) was set up and has subsequently issued a number of Technical notes on specific aspects of fire and explosion engineering [1.29 to 1.36], of the eight published Technical Notes, five deal with fire hazard issues. The hazards, characteristics and physical properties of hydrocarbon jet fires were appraised in the Phase 1 reports of the Joint Industry Project on ‘Blast and Fire Engineering of Topside Structures’ (OTI 92 596/597/598) [1.37]. The main source of detailed information on the characteristics of jet fires covered in the reports on the programme of jet-fire research was co-funded by the European Community. This programme studied single fuel natural gas and propane jet fires (Bennett et al, 1990) [1.38]. A further project funded by the CEC, looked at the hazardous consequences of Jet Fire Interactions with Vessels (JIVE), this project covers the modelling of jet fires, large scale natural gas/butane jet fires and taking vessels to failure in jet fires and some results of jet flame impingement trials are reported in OTO 2000 051 [1.39]. Phase I of the JIP (OTI 92 596/597/598) [1.40, 1.41, 1.42] also included a review of open hydrocarbon pool fire models. Three types of model (current at the time) were evaluated, semiempirical proprietary models, field models (e.g. CFD models) and integral models (falling between semi-empirical and field models). Compartment fire modelling looked at two types of code, zone models and field models. At that time, the zone models (typically used for modelling fires within buildings) encountered severe limitations in the modelling of large offshore compartment fires. Three further phases of the Blast and Fire Engineering Project JIP were conducted from 1994 to 2001, Phase 2 [1.43], Phase 3a and Phase 3b [1.44] consisted mainly of experiments to define and determine explosion overpressure load characteristics under a range of conditions and to provide a basis against which load simulation software may be validated. However, Phase 2 did produce notable gains in knowledge in the area of unconfined crude oil jet fires and confined jet fires (compartment fires). Two other separate but widely supported JIPs were also conducted around this period which focussed on offshore fire hazards. One studied the effectiveness of water deluge on jet and pool fires and the second JIP studied jet fires involving ‘live’ crude containing dissolved gas and water. The Phase 2 JIP also focussed on horizontal free jet fires of stabilised light crude oil and mixtures of stabilised light crude oil with natural gas and the main findings are listed below. • • The free flame releases, of crude oil only, were not able to sustain a stable flame and one of the mixed fuel releases was also unstable. All the flames were particularly luminous compared with purely gaseous jet flames and generated large quantities of thick black smoke, mainly towards the tail of the flame. All the flames were highly radiative, with maximum time averaged surface emissive powers (SEPs, heat radiated outwards per unit surface area of the flame) ranging between 200 kWm-2 to 400 kWm-2.
Page 5 of 261

152-RP-48 Rev 02, Feb 2006

Typical values were in the range 50 kWm-2 to 400 kWm-2. 1.2 Objectives The primary objective of this document is to offer guidance on practices and methodologies which can lead to a reduction in risk to life. but no pool-fire scenarios. Both references were among the source documents for Part 1 of this Guidance. This considered three jet-fire scenarios. fire loading and response development and provides a rational design approach to be used as a basis for design of new facilities and the assessment of existing installations.com • The incident total heat fluxes (radiative and convective) measured on the pipe target were significantly higher for the mixed fuel tests than for the crude oil only tests. Feb 2006 Page 6 of 261 . Phase 2 of the JIP included a fire model evaluation exercise.47]. mostly executed in Norway and following the probabilistic approach. reference should be made to Part 1 of this guidance when developing concepts and solutions to a “Type A” decision. Risk is defined as the likelihood of a specified undesired event occurring within a specified period or resulting from specified circumstances. Preventative measures are the most effective means of minimising the probability of an event and its associated risk. Other valuable work. 152-RP-48 Rev 02. This document consolidates the R&D effort from 1988 to the present day. by a factor of two in many cases. Due to the nature in which fire and explosion hazards are closely linked. the key figure of which is illustrated in Figure 1-1 below [1. integrates fire type and scenario definition.46]. and in making operational modifications to. has resulted in the NORSOK guidance documents [1. An additional intent of this Guidance is to move the decision-making processes within the fire and explosion design field as much as possible towards a ‘Type A’ process from ‘Type B or C’ as defined in UKOOA’s document on decision-making.45. The concepts of Inherently Safer Design or ‘Inherent Safety’ are central to the approach described in this document both for modifications of existing structures and new designs.fireandblast. offshore installations in order to optimise and prioritise expenditure where it has most safety benefit. This Guidance is intended to assist designers and duty holders during the design of. 1. the environment and the integrity of offshore facilities exposed to fire hazards. it can be seen that the guidelines for risk and emergency preparedness will support emergency response for fire hazards as well. However it did generate high quality data that were considered suitable for future pool fire model evaluation.

intensity. detection. duration and effects of each hazardous event. identification and specification of the particular prevention.). For these hazardous events the management process is given below: • • • • • • identification of the hazardous events (coarse assessment).3 Fire and explosion hazard management A thorough understanding of all hazards and hazardous events. This Guidance will look to build past experience of the development of fire scenarios and the prediction of design fire load cases and their timelines as part of the “Type A” approach. Page 7 of 261 152-RP-48 Rev 02. control and mitigation measures needed for each hazardous event.fireandblast. reduction of the risks from fires and explosions through inherently safer design. including fires and explosions. A commonly adopted overall process is outlined in the OGP “Guidelines for the Development and Application of Health Safety and Environment Management Systems”. ranging from those decisions that are dominated by purely engineering matters to those where company and societal values predominate. magnitude of the consequences. etc. This Guidance adds more detail to this process and applies it to fires and explosions. duration. confirmation of the suitability and effectiveness of each of the measures selected. design to reduce the likelihood. Feb 2006 . analysis and assessment of the hazardous events (type. likelihood. areas affected.com Figure 1-1 The UKOOA decision making framework The framework in Figure 1-1 defines the weight given to various factors within the decision making process. 1. is at the heart of the Safety Management System (SMS) and it should be proactive to reduce risks. scale. A substantial number of installations will lie in Areas A or B of the chart resulting in an approach which involves codes and guidance based on experience and ‘best practice’ (as described in this document) and supplemented by risk based arguments where required.

It is important that the input and activities of these personnel are fully coordinated and managed. 152-RP-48 Rev 02. is intended to assist practitioners by providing a set of “Rules of Thumb” by which to carry out work effectively and quickly. For an existing installation the process should be applied to current arrangements and modifications. Therefore. The SMS of each organisation should identify the relevant roles and responsibilities.fireandblast.e. The results should then be communicated to personnel operating the installation to ensure that they know the purpose and capability of all the systems. communication and implementation. the Guidance has been developed to consolidate current best practice in the industry and research community and sets out to present this information in a coherent manner of use to industry practitioners. Feb 2006 Page 8 of 261 . that is. from design through commissioning and operations to decommissioning. More information on specifically the philosophy of fire hazard management can also be found in Section 2 of this Part 2 of the Guidance. understand the hazards and are involved during the appropriate stages of the lifecycle. verification. the hazard management process should start in the feasibility study phase It is essential that all parties who can contribute to the reduction of hazards particularly design engineering disciplines and those who will have to operate and maintain the plant. The collation of existing information and the endeavour to relate the information into the form of “Type A” decisions (see Section 1. The lifecycle approach shows how to prepare and implement a strategy for the management of fire and explosion on an offshore installation throughout its life. followed by prevention of identified fire and explosion hazardous events and then by the selection of detection. The process is a multi-disciplinary activity. involving all levels of personnel from senior management to junior staff from a number of different organisations. control and mitigation measures.4 Overview of the guidance Generally. it should be a risk-based process. documentation. can operate them properly and that adequate maintenance schemes are in place. in order to obtain most benefit. • For new installations it should start during feasibility studies and be fully developed during detail design. 1. i. This is developed firstly by inherently safer design (elimination of hazards). These should be assessed to determine if the high level performance standards are achieved and that risks are as low as is reasonably practicable.2). it is used to assess these arrangements to make sure that the high level performance standards have been achieved. The fire and explosion assessment process is used in the lifecycle to provide information on which to base decisions and the design of systems. A more comprehensive and homogeneous view of the role of fire and explosion hazard management within the overall Hazard Management System (HMS) can be found in Part 0 of this Guidance. “Part 0 Fire and explosion hazard management”. • The management of hazards to reduce the risks involves many interests which may often appear to conflict with each other. severity and likelihood of each hazardous event.com • • • • specification of the measures adopted. The hazard management process should be employed in a timely manner and in accordance with the type. Thereafter. The FEHM process can be applied to new or existing installations.

describes the steps to be taken and the base information to be considered in understanding fire hazards and outlining some of the key considerations in managing them. ‘Fire hazard management philosophy’. The section discusses eight fire types and the impacts of the associated heat transfer and considers the manner in which loadings are estimated for the purposes of use within a QRA. Feb 2006 Page 9 of 261 . The annexes provide summary and supplementary material. ‘Interaction with explosion hazard management’. brings together the approaches identified in the other sections and incorporates additional design and operations experience to provide guidance on methods of detailed design. The subject area will be revisited in more detail in Part 3 of the guidance.com Section 2. the process and the implementation steps required when deciding what has to be done in any particular context and the factors that have to be taken into account. The appropriate methods of analysis dependent on the expected risk level are introduced. control and mitigation measures available to combat them. potential conflict between the management of these hazardous events and potential areas of combined analyses. Section 7. ‘Detailed design guidance for fire resistance’. Section 6. The principles of ‘Inherent Safety’ are presented. This section sets out the principles. 152-RP-48 Rev 02. Section 3. identifies situations where fires may precede or follow an explosion and deals with common areas of fire and explosion management. The tasks identified are linked with the relevant phase of a design project or the stage in the life of the installation. ‘Response to fires’ discusses the effects of fire and the manner in which structures fail and links these concepts to definitions of acceptance criteria from national and international standards. This section also gives . The section also reviews potential failure definitions and failure modes of process equipment and impact effects on personnel.particular considerations for particular installations and parts of installations Section 4. ‘Derivation of fire loadings and heat transfer’ describes how appropriate design thermal and smoke loads are derived. The guidance is presented in the context of best practice and identifies other industry initiatives which have generated detailed design and operating practice guidance. ‘Fires on offshore installations' discusses the various scenarios that can occur in hydrocarbon installations and provides assistance on the prevention.fireandblast. Section 5.

The legislative basis is reviewed and some high level performance standards are given. The risk level is an indication of the level of sophistication to be used in the fire assessment process.1.1 General In general terms a release of hydrocarbon with immediate ignition will result in a fire. release of an inflammable vapour or gaseous mixture followed by later ignition (i.3]. systems or human intervention to protect personnel. The measures for frequency and consequence severity are based on process complexity and the exposure potential for people on board.com 2.1 Overview 2. methods of prevention and control of releases are identical for both the fire and explosion hazard. Indeed. In order to focus effort where it is most needed.1] in the form of heat fluxes for engulfed objects in open conditions. 2. many of the hazard management principles and practices apply to both hazards. when the cloud of vapour or gas is adequately large) may result in an explosion.2 Hazard philosophy In this. control and mitigation systems is discussed. It does not rely on control measures.7. Fire hazard management philosophy 2. The main characteristics of the fire hazard are also identified.e. provide escape to TR and other means of escape/evacuation.4 with recommendations on the limits of applicability. The techniques of inherently safer design described in Section 2. 152-RP-48 Rev 02. prevent and mitigate the fire hazard particularly for new designs. This aspect is explored more in Section 4. Consequently some of the probabilities. a risk screening method is described in Section 2. medium and high risk categories. The advantage of an inherently safer design or the ‘Inherent Safety’ design approach is that it attempts to remove the potential for hazards to arise. goals which should be achieved in designing for and managing the fire hazard are identified. the second part of the Guidance.2. The overriding requirements for hazard management philosophy are to: • • • protect personnel in the TR.fireandblast. The features of an effective Safety Management System (SMS) are identified and the choice and management of detection.4 which classifies installations and compartments according to the level of their fire risk. Updated guidance on the selection of fire loads is given in Section 5. Feb 2006 Page 10 of 261 . causes.6 are fundamental to the most effective approach to eliminate. 2. A number of alternative values have since been published including nominal fire loads for confined and ventilation controlled fires [2. Nominal loads for jet and pool fires have been available since the publication of the Interim Guidance Notes (IGN) [2. minimise injuries and fatalities from the initial event. These measures are combined in a risk matrix to give low.1.

hazards posed or specific water demand is not considered. for small projects. Feb 2006 Page 11 of 261 . reliable estimates of fire loads. Prescriptive approaches to fire design generally are a result of compliance with regulations. For existing installations. A performance based approach looks at determining the need for fire and explosion design on a holistic basis. without recognition of site-specific factors.fireandblast. blow down.1. insurance requirements.com The philosophy should ensure that: • • • the hazard scenarios are addressed. plant and equipment minimises escalation. should be sufficiently varied to cover the following: 152-RP-48 Rev 02. However. the cost of performance based design may not be costeffective. personnel are able to escape to a safe location away from the hazard. Performance objectives and measures allow the designer of fire systems more flexibility in meeting requirements and can result in significant cost-savings as compared with the prescriptive approach. In a scenario or performance based approach release scenarios are postulated and their consequences and probabilities of occurrence determined. 2. Performance based design Prescriptive design against the fire hazard can be a valid alternative. Although the initial extent of the engulfed region may be greater. or other means. until such time as the hazard has dissipated to a safe level via shutdown. extents and durations may be available from previous assessments. This method is based on standardized guidance or requirements.3 Prescriptive vs. Performance or scenario based design adopts an objective based approach to provide a desired level of fire and explosion performance. The size of the facility. 2. for example for low risk installations.1. These are generalized approaches largely based on past incidents. a fire risk assessment. industry practices. personnel within the TR do not continue to be threatened by the incident. This approach provides solutions based on performance measured against established goals or performance standards rather than on prescriptive requirements with implied goals. Conversely. it is important to account for apparently small fires that on initial evaluation do not appear to have the potential for escalation. the lower duration may result in lower quantities of heat being delivered to those equipment items and structural members within the affected region. suitable accidental loads are developed (either risk based and/or prescriptive). Solutions are supported by a Fire Hazard Analysis (FHA) or. Dismissing such ‘small events’ can distort the Installation’s risk profile. and includes the likelihood or frequency of the fire and explosion scenarios occurring. • The identification of key SCE’s and corresponding Performance Standards provide the demonstration that such a philosophy has been met. or company procedures.4 Hazard management A fire risk assessment takes account of more than just the consequences. in some cases. The most severe fires from the point of view of initial rate of release may be less frequent and less durable than fires of lesser severity and hence may present a smaller risk. The scenarios considered. The performance based approach presents a more specific prediction of potential fire hazards for a given system or process.

but unlikely cases which give short duration fires with the potential for the maximum number of immediate fatalities small long duration scenarios which still have sufficient size to cause local escalation.2. venting. that is heat flux and temperature. It will be necessary to consider the effect of non-availability of mitigation measures such as shut down. Feb 2006 Page 12 of 261 .4]. inventory isolation and deluge activation together with the probabilities that these measures will be initiated. It is suggested in this guidance. The identification of the common-cause failure modes that may defeat several mitigation measures should needs to be carried out in a rigorous manner. the impact on the SCEs and the overall individual risk including that from other hazards. Some scenarios may also assume a prior explosion has occurred with fire being an escalation event. Typically this frequency of exceedance will be of the order of 10-4 to 10-5 per year depending on the risk to people on board. Further escalation through subsequent release of inventory may occur. smoke and fume generation.2).fireandblast. An acceptable level of risk can be identified within the ALARP framework. piping and equipment. deluge or barriers in the construction of design scenarios. ISO [2. duration.5] uses a threshold probability of exceedance level (10-4 per year) below which individual contributing scenarios may be eliminated from further consideration if the 152-RP-48 Rev 02. that is the area or volume occupied by flame. The consequence measures of relevance to fires are: • • • • • • intensity.com • • • severe. radiation thresholds for personnel safety and escape. the integrity of equipment and supporting structure. fires that disrupt the UPS or auxiliary power supplies or common Installation air supplies. affected by radiation or by combustion products. Following NORSOK [2. for example. structural weakening and possible collapse. both through the justification of the choice of design scenarios and from a determination of the impairment frequency of the SCEs under the fire loads. which identifies the acceptable frequency of exceedance of the severity of the design or dimensioning scenarios. that is the probability of occurrence depending on the probability of immediate or delayed ignition. frequency. extent. blow down. Design or Dimensioning fire scenarios are selected on the basis of the risk they present and should be accommodated by the safety critical elements (SCEs) of the installation which will include parts of the structure. that the number of SCEs which need to be considered in detail is reduced by classification into criticality categories with respect to the fire hazard. Reducing risks to ALARP must be demonstrated in all cases. The direct consequences of fires are immediate fatalities or delayed fatalities by the blockage of access ways by radiation or the development of a hot gas layer. intermediate scenarios which have the greatest potential for escalation or platform impact whilst lasting long enough to realise this potential. Multiple or coincidental failures can lead to events moving from Minor or Controllable to Extreme (see Section 2. mitigation effectiveness will depend on detection.

It is preferable to actively manage the fire hazards such that steps are taken to actively lower their classification by reducing the severity of the effects. This will allow them to decide how the facilities are to be designed and operated. It must also be kept up to date. Designers. 2. This may be done by assessing what is in place either in a design or an existing facility and determining the classification. effects on the facility. Feb 2006 Page 13 of 261 . Operators and Technicians: They need to understand the hazard characteristics so that they may design. One method of classification follows. albeit couched in different terms. severity and consequences will allow them to decide how each of the hazards will be managed and the measures needed to do so. The type of understanding differs according to the level of people in the organisation and the responsibilities that they hold. and require further analysis to determine the size and extent of the resulting loading and subsequent effects.2 Understanding the fire hazard 2. It will also allow them to provide sufficient resources.e.2 Classification of fire hazards It may be helpful to classify fire hazards according to their potential for harm. Events directly affecting other regions where a barrier may be present to prevent impingement on the TR are considered if the probability of exceedance is greater than 10-4 per year. • • Senior Management: They need to know the overall level of risk for the facilities to decide if the design is viable or if existing operations may continue. operate and maintain critical elements to suit the needs of the hazards.6) or by applying or optimising hazard management measures to minimise the size of releases. This applies at all levels of an organisation from the directors to those designing and operating the facilities. Discipline Engineering and the Supervision of Operations: They need an overall understanding of all the hazards for which they have responsibility. Project or Facilities Management: They need to know the pattern of risk by facility and the proportion of that risk which comes from different hazards such as fire.2.com impact on personnel is low enough (i. documented and communicated so that every level and person is kept informed. This knowledge should be used to inform people making critical decisions both in design and operation. In other words.6] proposes a similar approach.2. An (explosion) event will be considered depending on whether the event impinges directly on the Temporary Refuge with probability of exceedance > 10-5 per year. • • It is essential that the information gained from hazard and risk studies is distilled. It also changes throughout the life of the facilities as different activities take place and the fields mature. Events with probabilities above this level are considered to be ‘dimensioning’. The UKOOA Part 1 document [2. 152-RP-48 Rev 02. their location.1 General Understanding the risks from fire hazards is the key to their minimisation. 2. It is a living picture which becomes progressively more detailed and accurate as the design progresses. numbers of personnel affected). It should not be acquired after these decisions have been made in order to retrospectively justify them. This may be done by following the principles for inherently safer design (see Section 2. The understanding of the causes. the knowledge should be used proactively to reduce risk.fireandblast. the rate of release and the duration.

Lack of maintenance. they should burn out under controlled conditions. would be such that evacuation would be necessary. the corrosivity of the fluids. This should then be augmented with the knowledge of engineers. the effects must be fully understood and premature catastrophic escalation delayed. in particular external flaming and dense smoke effects. This type of event should be designed out or very high integrity preventative measures provided such that the likelihood is minimised.e. inherent weaknesses in the business processes and infrastructure supporting design and operation. Effective maintenance regimes are essential to determining the likelihood of plant failures. Evacuation/Extreme: This type of event would have a major impact upon a large part of the installation such that the effects upon people.g.3 Causes and likelihood of hydrocarbon releases The causes of hydrocarbon releases are numerous and it is essential that a full causation is carried out so that effective preventative measures can be put in place. the number of times containment is deliberately breached or the number of weak points such as flanges or tappings. They would be associated with smaller releases from moderate inventories. and personnel protected from smoke and heat until evacuation has been completed. both physical and psychological. Statistical data is a good start point from which to list causes and to determine likelihood. plant or equipment failure. The likelihood of an event is a function of the propensity of the causes. i. These causes can generally be broken down into three categories: • • • human or procedural error. the prolonged effects of these events will be limited to one module or process area and will be of finite duration. Feb 2006 Page 14 of 261 . It may be practical to extinguish some of these events but in other cases. particularly over long periods may distort the understanding of the underlying causes of failures.fireandblast. These events can be managed by limiting the size of the event and allowing it to burn out. process. By their nature these are inherently low frequency events. this may not be possible or may be dangerous in which case. Typically these events are those which would give prolonged effects beyond the source module. In some cases it may be possible to suppress the widespread effects of these fires reducing the categorisation to the lower. Protection would only be needed for asset protection. requiring a significant sized release from a major inventory and/or its combination with safety system failures such as ESD.2. It would also apply to those events where the potential for escalation is widespread including structural. Controllable: These events have the potential for local fatalities and may also be capable of escalation to a scale requiring evacuation. In these cases effective control of the source inventory and the prevention of escalation will be critical. the moderate scale of the effects should allow these events to be controlled such that further escalation is prevented and evacuation is not essential to preserve life. However. these events would overwhelm an installation and it would be impractical to counteract the effects such that the lives of those on board could be saved. • • • 2. They may cause local injuries but would not have either the scale or duration to cause critical escalation. It is also a function of the understanding of those causes and the effectiveness of measures which are put in place to manage them. safety systems or the impairment of muster and escape routes. technicians and operators to give a more accurate picture for each 152-RP-48 Rev 02. Minor: These events are of a very small scale. systemic failure. level. If not. They may lead to damage to plant causing financial loss but not major loss of life. controllable.com • Catastrophic: As the name suggests. e. Typically.

The HSE document OTO 2001 055 [2.11].12] 2.com facility.9] release statistics published annually by the HSE [2. The importance of operational aspects is also shown in proportion of leaks attributable to poor inspection and monitoring. HAZOP procedures will give a rigorous identification of process causes but the overall examination should be sufficiently broad to address external and human effects. Feb 2006 Page 15 of 261 . the most frequent sources of the hazard as given by the history of releases experienced to date are documented as follows. OREDA [2.10] and the HSE/UKOOA publication on the subject [2. • • • • The rate and duration of the release and the size of the consequent gas cloud The location of the release The type of fuel and the proportion of gas or volatile vapours which is generated in the short term The nature of the release. The turbulence caused by high pressure gas releases will cause effective mixing with the air to give a well defined flammable cloud. This examination should be fully documented so that there can be assurances that preventative measures are suitable and sufficient. whether high or lower pressure. Sources of release data include WOAD [2. The Minerals Management Service (MMS) of the US also publishes data on incidents on the Gulf of Mexico [2. 11 % are due to incorrect installation 26 % from degradation of materials (excluding corrosion and erosion) 11 % of all releases are due to vibration/fatigue 19 % of all releases are due to corrosion and erosion It is considered that 40 % of equipment related releases are attributable to poor design and 38 % to inadequate inspection and condition monitoring. For statistical data. High pressure liquid releases will encourage fine droplet formation and increase the vaporisation of any light ends.7 states that for the UK sector of the North Sea: 61 % of all releases are from pipework systems 11 % of all releases are from small bore piping 15 % of all releases are from flanges 14 % of all releases are from seals and packing Of the causes.4 Ignition causes and probability The probability of ignition will depend upon the following factors. 152-RP-48 Rev 02.8].2. Avoidance of potential leak sources in design therefore needs to consider these above issues in particular.fireandblast.

through stoichiometric and rising to a higher limit above which ignition should not occur. Very large releases may have a non flammable rich core but will be surrounded by a flammable region which may engulf ignition sources as it spreads away from the point of release. Each gas or vapour will also have a specific auto ignition temperature ranging from 200 – 550 °C. it is possible to influence the probability of ignition by design. including the presence or not of Ex equipment.5 Fire hazards: Understanding the source 2. good maintenance and operational controls.fireandblast. from a lower flammability limit. location within the hydrocarbon system and the functional characteristics 152-RP-48 Rev 02. The release rate would then vary with time depending upon the source conditions of fluid. Each different gas or vapour has a specific flammability range. the number of these activities and the effectiveness of their control.com • The flammability characteristics of the gases and vapours. 2. such that contact with hot surfaces such as an exhaust turbocharger would cause ignition The dispersion characteristics. ceilings or walls.1 General It is essential that the source of the hydrocarbons is examined and fully understood in order to examine the fire hazard effects resulting from a release. The confinement of the escaping vapours and gases by floors. inventory. The gas detection philosophy and the local and wider shutdown of ignition sources upon detection The detection of gas ingress at the air intakes to enclosures such as accommodation or equipment rooms and the closure of dampers. pressure. Feb 2006 Page 16 of 261 . As with the likelihood of release. whether forced or natural and the variation of those characteristics with wind strength and direction The characteristics of the fluid and its release. Each parameter would be associated with a failure causing a specific hole size. The proximity of the release to areas which are classified as “safe” and therefore are not fitted with flameproof equipment. whether there are heavy vapours which will descend or lighter gases which should rise.2. The probability of ignition should be determined using that guidance together with an assessment of the characteristics listed above. • • • • • • • • • • • Ignition probabilities have been widely studied and this work is summarised in recent work for UKOOA studying ignition probabilities [2. if designed for use in flammable atmospheres.5.13].2. These may also cause flammable gases to be directed towards areas without flameproof equipment The ventilation characteristics in the areas. The possibility of ignition being caused by the action of personnel carrying out emergency response actions such as plant shutdown causing sparks at electrical breakers. The hot work philosophy on the facility. where this might build up static The presence of sulphurous impurities in the fluids which might lead to the formation of pyrophoric scale The number of fixed ignition sources and the standard of their maintenance. Key parameters would include the range of release rates and characteristics which can originate from any part of the plant.

and drainage.5. Flowline releases are considered to be part of the process hazards as they are downstream of the well isolation valves. They may occur during wire lining but only if there are multiple failures of the barriers. A shallow gas blowout is another case in which a pocket of shallow gas is controlled by venting through a diverter. In gas-lifted wells. It may also arise in later life due to seismic action or the deterioration of the well bore. Reservoir and drilling engineers should be consulted to identify the fluid composition and calculate the realistic flow rates.fireandblast. It would show for example the process events which simply do not have sufficient inventory to realistically cause escalation. Each of these is a source with individual characteristics of the fluids. it would show the approximate conditions of hole size and control system operation which would determine whether it was controllable or require evacuation. the oil may build up over much of the top deck leading to a particularly hazardous and unpredictable situation when it ignites. A more realistic scenario is a release from the lubricator via leakage through the valves and wireline BOP. For individual hazardous inventories. In the case of blowouts from an oil reservoir with delayed ignition.2.com (or the failure) of control systems such as ESD. it is possible that the gas within the annulus could backflow into the wellbay with typical inventories and pressures of up to 10 tonnes and up to 130 bar. It the release is below the drilling rig structure. These are likely to be of indefinite duration if the primary well control and blowout prevention systems have failed. The potential for escalation to other wells should be examined but is unlikely if they are fitted with effective downhole isolation or have a heavy-duty integrated Christmas Tree valve assembly. pressures and volumes.2 Reservoir hazards Direct releases from the reservoir may occur due to well intervention such as drilling or workover. Feb 2006 Page 17 of 261 .3 Process hazards The process plant can have up to 40 sections which are segregated by ESD valves. If hazards are being classified as described above. 152-RP-48 Rev 02. This may arise during the initial completion of the well. the releases should be near the top of the platform with the flames rising above it.6 2. Diverters can fail due to erosion giving a large gas release of prolonged but finite duration within or below the drilling facilities with possible escalation as described above.2. In these cases the releases are likely to occur within the drilling facilities. for example by corrosion. those which should be controllable and the events which require evacuation. Typically.5 and 5. In most cases. typically at the bell nipple. 2. the processing will include. The effects of fires on or under the sea are discussed in Sections 5. it will give an initial indication which hazards fall into each category. the potential flow rates and the locations at which hydrocarbons may be released.2. this may collapse onto the wells leading to progressive escalation. Such releases may also contain drilling fluids.2. cuttings and other debris. This will lead to rapid collapse of the derrick and severe radiation onto the top deck.5. Completion failures may result in leakage from the reservoir into the well annuli or around the cement such that oil or gas may surface round the outside of the well at the seabed. depressurisation. Large continuous releases from the Christmas Trees are much less likely due to the multiple valve isolation. Well completion engineers should be consulted about the possibility of this occurrence. A detailed picture of the source terms from each inventory will allow the identification of the cases requiring analysis of the fire characteristics. Again drilling and reservoir engineers should be consulted to determine the possible flowrates and their likelihood.

Transfer pumps to export tankers will run at much lower pressures. Water. the fluid can be three phase with a relatively low density. • The free gas inventory will range from 200 kg for a very low pressure vessel to 5000 kg for a very high pressure vessel with high molecular weight gas. taking into account the operating philosophy standby arrangements for off line pumps and the provision of valves and check valves. see below under liquid fires. However this may be doubled by additional gas released from the liquids as the vessel depressurises. These liquid inventories have the potential to overwhelm a moderate sized platform with a large fire lasting long enough to cause major escalation. These require large vessels which are filled with virtually stable oil plus a small quantity of water in the bottom. This inventory has the potential to cause local escalation but is unlikely to overwhelm a medium sized facility. aggressive nature of the fluids and the complexity of the piping give a relatively high probability of a release. The pump pressures will range from 40 – 120 bar depending upon the pressures within the pipeline infrastructures. generally over 2 – 3 stages.com • Production fluids manifolding and mixing: The manifolds collect the reservoir fluids from the wells via the flowlines. They may have less of an impact if located on an open deck such as an F(P)SO as the smoke and flames can freely rise above the rest of the facility. The liquids have a 3 – 10 minute residence time. There are relatively few release points providing that there is effective isolation at the outlet. this may reduce the classification of these hazards to the controllable level. at least for moderate sized holes. particularly if the separators are located lower down in the topsides. The pump seals and the complex jointed piping leak to a high likelihood of a release. The flammable liquid inventories can be up to 30 tonnes but this may be divided in half by weirs which can reduce the amount which can realistically be released by half. If they can brought below this pressure before escalation can occur or evacuation is required. Typically it will be in the 1000 – 2000 kg range. condensate. Its potential for harm may be minimised by depressurisation. In oil facilities running at low pressures or using gas lift. These pressures will drop to the vapour pressure of the oil on shutdown. The inventory will be based on the combined volumes of these pipes. Typically. Potential process backflows of gas and 2-phase fluids from the gas lift inventories into topside blowdown systems also needs to be addressed when analysing topside hazards. gas. These pumps are usually duplicated with manifold arrangements.fireandblast. They contain well fluids (see below) which may be a mixture of oil. It may also have a high water cut giving small inventories which may not have the potential for escalation if rapidly isolated. mix the fluids and direct them to the appropriate separators. these vessels have total volumes up to 100 m3 and operate at pressures from 70 down to 3 bar. particularly large bore flowline failures which may be caused by corrosion or erosion. If these vessels are depressurised. Typically these are tappings for instruments and the possibility of corrosion in the body or welds of the separator vessel. They operate at 2 – 6 bar and can contain up to 200 tonnes of oil. giving a continuous rate of release until the available inventory is exhausted. water and other materials such as sand. The most likely releases are at the pumps themselves but the study of available inventory should carefully examine how much could realistically be released. This will lead to a low level 152-RP-48 Rev 02. often beneath the separators. These complex piping arrangements can give an isolated inventory of up to 15 tonnes for a field with large throughput. It will range from less than 500 kg in a mature. low pressure gas field up to 5 tonnes of oil for a new field. The potential for harm is governed by the release pressure. minimising the size of the fire and further arrangements dispose of the oil and firewater. The process conditions. Feb 2006 Page 18 of 261 . • Oil/condensate pressurisation for export: Export pump arrangements may use one or two pumps in series. the fires become much more controllable and the time to depressurise is critical. • Stabilisation and final dewatering: Some oil production platforms have a final stage of stabilisation or dewatering. The inherent design of the plant requires the pumps to be located close to the lowest level of the platform. gas and oil/condensate separation: This takes place in large vessels. These lower pressures would result in a pool fire which would only be a threat to the platform if there were no arrangements to bund the release.

this has limited potential for local escalation and this can be minimised with depressurisation.5. Shutdown of the pumps and careful management of the inventory which can be released will help to reduce the impact but it may still require evacuation in some cases. those small long duration cases which still have sufficient size to cause local escalation. smoke affecting most of the topsides and escalation to the inventories above. those large but unlikely cases which give short duration fires with the potential for the maximum number of immediate fatalities. • Gas compression including gas liquids condensing and knockout. typically 1 – 3 tonnes with the potential for local escalation. However it can be as high as 400 bar for some reinjection requirements. The likelihood of release should be low as there are few release points in the liquid sections of these process plants. gas lift and reinjection compression: A typical pressure for these systems is 150 bar. They may be connected to a major pipeline infrastructure or be small infield flow lines from satellite wells or for gas lift. from well fluids to stabilised oil or dry clean gas. These scenarios and associated hole sizes should reflect the failures which have been identified during the causation analysis. Feb 2006 Page 19 of 261 . However.fireandblast. • High pressure export. The gas-liquid inventories should be less than 2 tonnes and in many cases. butane and water to be condensed and returned to the liquids system. The liquids which are condensed and collected in the gas knockout pots may be either liquefied gases or water. The largest inventory is likely to be a contactor with up to 3 tonnes of gas. this has a limited potential for local escalation and can be minimised using depressurisation. The risers may be rigid steel or flexible. The hazards are similar to the export pumping and compression respectively and may be part of the same inventory. will have a high release rate and the vapours may not disperse easily. propane. It is likely that the compressor sections and their associated condensers and knockout pots will be sectionalised with ESD valves. The location of a release may be as follows: 152-RP-48 Rev 02. and those intermediate cases which have the greatest potential for escalation or platform impact whilst still lasting long enough to realise these effects – typically a 10 minute duration. Typically several compressors will be required with the final discharge pressures of 50 – 60 bar. Again. The releases may range from pinholes due to corrosion up to a full shear. • Gas drying: This will use either glycol units or molecular sieves and can operate at up to 60 bar. Gas from the various stages of separation is progressively compressed and cooled allowing liquids such as ethane. The major risk is that to personnel in the immediate area from flash fires or from explosions if the area is congested. The behaviour of each section should be modelled using simple calculations to determine the gas and liquid release characteristics from a range of hole sizes. the inventories will be moderate. there is a major exposure to flash fires or explosions as these liquids are very reactive. Only the larger inventories will have the potential for escalation. increasing the risks from flash fires and explosions. However. There is a moderately high possibility of a gas leak arising from the compressors and associated vibration.2. This reduces the gas inventories to 1000 – 2000 kg. • Oil and gas metering: Metering is generally carried out using inline flowmeters. they are equivalent to piping with additional potential release sites at the instruments.com source with the potential for low level external flaming. From a hazard’s point of view. Again. They should be sufficiently varied to cover the following. just a few hundred kg. 2. The intent is to build up a picture of the types of events that can occur in each part of the platform. the high pressures can give high release rates from moderate hole sizes.4 Import and export risers Risers may contain any of the fluids mentioned above. As with separation. Identification of the inventory of each process section should be carried out to determine the conditions and inventory during operation and immediately after shutdown.

and effervescence as gas separates carrying with it liquids in aerosol form. • Liquid fires can also be the source of overwhelming quantities of smoke. This can exacerbate the effects by increasing the total fuel quantity. A 20 tonne inventory would sustain this fire for 30 minutes assuming a constant release rate.6. see Section 5. • The heat fluxes from pool fires will be lower than gas jets but pressurised oil or gas liquids.fireandblast. • Liquids tend to be located at the lower levels of a platform which causes the fire source to have a greater impact on the facility.com • Immediately under the platform. the elevation of the release point relative to the main inventory on the sea bed. possibly spreading to lower levels prior to ignition. • A moderate sized oil leak of 20 mm at 20 barg would have a flame volume of 4500 m3 and this has the potential to completely engulf a medium sized process module and cause some external flaming. 2. • Closer to sea level where they may be exposed to ship damage or chafing and corrosion. • This confinement with a roof and/or walls will also cause high radiative heat fluxes. The characteristics of pipeline releases from two phase fluids or liquids with dissolved gases should take into account the variation in release characteristics caused by.2. ESD valves would not respond quickly enough to prevent the immediate fatalities rising from a major gas riser failure unless there was delayed ignition. people and plant above it. • The release rates will be much greater than gases for the same hole sizes and pressures. routine tests and maintenance will give a more accurate picture of equipment performance than generic information from generally available databases. They should take into account time delays in the operation of ESD valves and their operability with a high differential pressure following a major riser failure. The modelling should cover cases with and without the operation of subsea isolation valves or confirm where these are fitted or considered. Typically these can be up to 20-30 tonnes in separators. Feb 2006 Page 20 of 261 . In some cases such as subsea releases. the initial fire size and its spread into more vulnerable locations. Release rates from these pipelines may initially be modelled using simple calculations [2. the Sintef and Scandpower fire calculations for the process industry or using more sophisticated methods. • Sub sea or at the sea bed where it may be subject to internal corrosion.Liquids Liquid fires generally have a greater potential for harm than gas fires for the following reasons: • They have greater isolated process inventories arising from the higher densities of between 600 and 850 kg/m3.14]. slug flow. engulfing the levels above and to the sides in flames and smoke and also leading to the exposure of structures.2. Information from incoming ESD valve trips. the fires may burn on the sea surface. 152-RP-48 Rev 02.6 Types of fire hazard: . gas and liquids separation. The location will affect the release characteristics and the ignition probability. even with pool fires. particularly with dissolved gas can give the same or greater radiative heat flux. They should be based upon the hole sizes which could realistically occur as identified in the causation analysis. Data such as valve closure times and internal leak rates should be derived from platform specific datasets. • Liquid releases can be difficult to detect if there is only a small gas content and this can lead to a build-up of oil on the floor.

Feb 2006 Page 21 of 261 . A 20 mm hole at 20 barg would give a methane jet of approximately 10 – 12 m and a flame volume of 100 m3. This may be achieved by isolating the pumps or by depressurisation.7 Types of fire hazard: Gas jet fires Gases will give rise to an intense jet flame with high localised convective and radiative heat fluxes. it will have some dissolved and liquefied gas within it.2. this would reduce to a jet of 7-8m and a flame volume of 25 m3 within 10 minutes of the ESD operating. An additional issue to be considered is the potential escalating effect of flaming “rain out”. If the separator was depressurised.7 discusses further detail of jet fires. Section . These large inventories require both high pressures and large volumes within the process plant or an isolation failure to a primary source such as a riser or well. These two factors will change the heat fluxes. even with moderate pressures and hole sizes on a poorly laid out facility. Gas jets have moderate release rates unless there are very large hole sizes and/or high pressures.2. Lighter liquids such as condensate will have lower transition pressure. The release rate is proportional to the square root of the pressure and will reduce as these actions come into effect. Most oil is only partially stabilised.2.8 Types of fire hazard: Confinement and ventilation control The presence of walls. They are only likely to be found in moderate quantities of 1 – 2 tonnes within the gas compression and drying facilities. The heat fluxes will drop with the pressures and this allows deluge systems to become more effective both in protecting exposed plant and in suppressing the fire itself. 2. the efficiency of combustion and the density of smoke. They are generally not large enough or sustained by a sufficiently large inventory to be significantly affected by confinement within a roofed module except where they directly impact the ceilings or walls. i. The pressure will determine the release rate and the management of that pressure after the fire is detected is a key component of managing these hazards.fireandblast. ceilings.16]. by the pressurised gases above the liquid as in separators.2. especially with butane (also propane) and especially for the scenario of jet flame impingement on an obstruction. typical of the gas content in a separator. It will also be pressurised. as a spray or a pool. some researchers consider that water cuts above 60% make the oil very difficult to ignite. For example.com • The effect of increased water cut of the hydrocarbon from the reservoir on fire hazards should be considered carefully to avoid over-conservatism in the fire risk analysis.17]. In most cases. by the inherent state of the fluid (its own vapour pressure). this would decay even faster but this may be offset by the disassociation of dissolved gas in the oil. by Sintef and Scandpower [2. This makes their potential for escalation highly directional and this is likely only to affect a small number of critical items such as a single structural member. Gas liquids. The air requirements for stoichiometric burning of hydrocarbon fires are between 15 and 17 times the mass burn rate of the fuel. this can occur at ambient temperatures. this is the release rate unless there is containment of a pool fire to reduce the burn rate. Most modules have good ventilation and venting to minimise 152-RP-48 Rev 02. Only very large inventories would have the potential for more widespread simultaneous failure. 2. These potential effects can give liquids the potential to overwhelm a platform giving many cases which could be classified as evacuation/extreme. for example. With a source of 40 m3 in volume. Equations for calculating release rates are given in the Handbook for Fire Calculations and risk assessment in the process industry. ethane. or through pumping. floors and obstructions will significantly affect the way in which air can mix with the fuel. The fire characteristics will vary according to the release pressures and the fuel type. They will also affect the flame shape. reference should also be made to the Phase 2 Blast and Fire Engineering for Topside Structures [2. propane and butane will be pressurised and it is unlikely that their operating temperatures will ever be low enough to allow them to burn as a pool. The pressure will also determine how the liquid will burn. part of a vessel or some piping. The radiative content will increase both with the molecular weight and as the jet encounters obstructions.e. This is discussed in Section 7.

combustion instability. very dense smoke with high concentrations of carbon monoxide. This could lead to structural or riser failure. Consequences are the outcome of an accident expressed in physical phenomena such as gas concentration.18]. a review of pool fires on liquid was undertaken [2. If it does occur it is likely to involve a major liquid inventory rather than gas fires. 2.16]. This is likely to lead to multiple failure of this equipment. 2. These will be highest near to or above the source of the fire but will provide a relatively uniform heating of all structures. the fuel. release characteristics. This effect is graphically illustrated in Ref Piper Alpha Inquiry Report part 2 plates14b through to 18a [2.2. It requires a fairly large release and benign sea and weather conditions before the fire has a major impact on the facility. thermal radiation level. possibly towards the accommodation or TR. This may be very low in the North Sea but not in other parts of the world.e. This is the neutral plane at which air entering the module mixes with the vapours.fireandblast.2.10 Consequences This guidance will generally consider both consequences and impacts.19]. In the initial stages of these fires. and impacts are the effect of 152-RP-48 Rev 02. this becomes a complex calculation. The air input rate through a single opening in a wall is calculated using the formula Ma = ½A √H where Ma is the air input rate in kg/sec. release rate. If the ventilation is severely limited. Unburnt vapours may also burn as they leave the module giving the external flaming described below. A is the area of the opening in m2 and H is the height of the opening in m. Some development information was prepared in 1992 for the HSE and amongst the treatment of other fire types. This can descend to 2/3 of the way down the openings in the walls with significant flame velocities as they travel towards the openings.9 Fires on the sea Fires on the sea will be affected by a number of factors. This will have a major impact upon the whole installation and it is likely to require evacuation if it is sustained for more than a few minutes. Its characteristics may be similar to a large pool fire. the flames build up across the ceilings with a hot flame layer slowly descending across the whole module. that volume up to the top of the highest opening and excluding the volume in between the ceiling beams). With large external flame volumes the width of the base of the flame can be much wider than the opening. It is more likely that a large fire will not be ventilation controlled but that its size will simply exceed that of the module. With openings in the floors and ceilings or multiple openings in the walls of different heights. It can take a few minutes before the fire becomes ventilation controlled as the air inside is used up. it can engulf the whole side of the platform with wind causing it to tilt. where. then the flames will spread across the ceiling and begin to extend beyond the module. then the combustion characteristics within the modules will be affected with reduction in heat fluxes. It either the fire is ventilation controlled or the fire size reaches that described above. There is only limited understanding of this external flaming and there are few if any predictive tools to quantify it accurately. Feb 2006 Page 22 of 261 . reduced liquid vaporisation rates. the sea and weather conditions. If it originates from the lower modules. These areas will have high radiative and moderately high convective heat fluxes.com gas build-up and explosion overpressures respectively. explosion overpressure. All of the contributing factors must be examined to determine the risk of failures and benign conditions occurring simultaneously. then external flaming will occur. smoke engulfment of the topsides or the impairment of evacuation. with the flames subject to tilt in high winds [2. Once the flame volume reaches 1/3 of the free volume in a module (i. piping and upper parts of vessels above the neutral plane. These high fluxes will occur both with pool and spray fires but gas jets are less likely to develop this module engulfment for the reasons described above. Typically the fuel burn rate that can be sustained by a module with one open wall of 30m by 8m is 21kg s-1. It is unlikely that severe ventilation limitation will occur unless there is a very high release rate and this is sustained for several minutes. The area between the ceiling beams becomes stagnant with high radiative but lower convective heat fluxes.

• Impairment of the accommodation or temporary refuge. The time dependent size of fires such as decaying gas jets should be taken into account when making this assessment. They are undoubtedly linked and the terms may be occasionally interchangeable. • The impairment of the ability of people to make rational decisions and to preserve their own lives. particularly flash fire effects. • The inherent mass. • Catastrophic rupture of pressure vessels or containers. • Impairment of critical control and communication centres. • Impairment of escape routes and entrapment of personnel so that they cannot return to a refuge. • The duration of the exposure. structures and equipment. strength and stresses on exposed plant. • Weakening of secondary structures leading to any of the hardware failures listed above. • The release of toxic materials and the generation of toxic fumes through their combustion.com accidents on people.fireandblast.2. Fires may result in any of the following consequences and impacts: • Direct injury or loss of life to personnel exposed to the immediate effects of fire. • The loss of critical safety and communication systems. The probability and timing of these failures is dependent upon the following: • The intensity of the exposure. • Weakening of the primary structure leading to progressive structural collapse. These should be subject to more intense scrutiny than lesser risks and any modelling should be 152-RP-48 Rev 02. • The presence of any protection or insulation which could realistically reduce the rate of heat transfer. A representative selection of scenarios should be selected from each of the hazards which are considered to have the potential for a major accident. • Impairment of evacuation routes and means of evacuation or escape from the platform. • The degree of exposure: Localised exposure rather than complete engulfment will reduce the probability and increase the time to failure. Greater heat fluxes or more dense smoke concentrations will lead to more rapid failures. An initial hazard identification and expert judgement will identify those hydrocarbon sources with the greatest potential for harm and those with a high probability. either through the effects of smoke or the psychological effects of the incident. well containment or risers. • Further escalation through the failure of process plant. 2.11 Developing a set of representative scenarios There is an almost infinite range of events which can occur on an offshore facility. both containing flammable and non flammable fluids. Feb 2006 Page 23 of 261 .

2. location and duration. i.g. • All fire hazards shall be identified. including people. understood and sufficient effective prevention measures shall be implemented. considered and where practicable. e. Where the effects of failure could require evacuation of overwhelm the installation. • All of these measures. processes and plant shall be documented. control and mitigation measures shall be put in place to implement the chosen strategies. have clear ownership and shall have minimum performance standards • All causes shall be identified.3 Hazard management principles • Management responsibilities need to be accurately defined and clear boundaries for roles and responsibilities set out. the effectiveness of systems to counteract the effects can be assessed and the future management of these hazards can be planned as described in Section 2. detection.com based on platform specific parameters not generic fire scenarios with particular attention paid to the uncertainty surrounding two-phase releases. • A strategy should take account of sensitivity of the installation’s overall risk profile to fire hazards and should weight the mitigation and control measures accordingly. documented and implemented. The analysis is a living process and should be capable of future use to examine different cases or the optimisation of control systems such as depressurisation both during design and operation. analysed and understood by everyone with a part to play in their management. those with clearly identified causes giving failures of an identified maximum size. the possible rates and timings to escalation and the effects when such escalation does occur. the largest events with sufficient duration to cause failure • Those events which could realistically occur. • Every opportunity to minimise fire risks at source shall be identified. • An appropriate combination of prevention. Once it is in place. their causes and probability.3. the range of sizes. these measures shall be specifically identified and shall be of high integrity. severity and the exposure of people and plant. i. This should be documented so that everyone with a part to play in their management can see the whole picture. 152-RP-48 Rev 02. • A practical strategy to manage each of the hazards shall be identified. This shall cover minimising the likelihood. implemented. the largest tapping size or the dimensions of typical corrosion failures • Those events of a critical duration such as the time to cause evacuation • The characteristics of the events whenever critical control systems such as ESD fail to operate The examination of these hazards should be used to build up a complete picture of all of the hazards.e. The events chosen for analysis should reflect the installation’s design features as much as possible and encompass the following cases • Those with the greatest potential for escalation.fireandblast. Feb 2006 Page 24 of 261 .e.4.

fireandblast. API RP 75 [2.3.1 General A structured approach to the management of fire hazards shall be put in place by all organisations responsible for the design or operation of offshore facilities. All of these elements need to be underpinned by a commitment to safety from the organization’s management at the highest level.4. • The characteristics of those hazards which may require evacuation shall be carefully studied so that the severity and potential for escalation may be reduced. The management of fire hazards is a complex process: It requires contributions from a very wide range of people. • There shall be effective isolation of all major external sources of hydrocarbons including pipelines and the reservoir. It is not acceptable simply to manage each one in isolation to default standards and to presume that this will give an effective hazard management system.6. These all use the 5 step process as described in Sections 2.20]. • A minimum provision of routes. the prevention of escalation and evacuation. 152-RP-48 Rev 02. with effective leadership to ensure that the above elements are diligently carried out.4. These may be required to prevent. systems and arrangements to allow evacuation shall remain viable under the effects of every incident which may require them • All reasonably practical steps to reduce the risks from fires shall be taken. • Areas required to shelter personnel from fire effects and their supports shall remain viable until either the incidents have been brought under control or full controlled evacuation has taken place. • The systems provided to detect fires shall be suitable for the hazard types and the environmental conditions. protect or evacuate. are implemented throughout the lifecycle. detect control. This shall ensure that the principles outlined in Section 2.2 to 2.22]. Feb 2006 Page 25 of 261 . concentrating first on prevention and thereafter in descending order on control. It shall fit within the overall safety management system for that company and shall show the company safety policy is to be implemented. • Personnel shall be located so that their exposure to fire hazards is minimised • The systems provided to protect personnel. They shall provide sufficient information to warn personnel and to allow an assessment of the hazards to be undertaken without hazardous personnel exposure.4 Hazard management systems 2. This isolation shall be designed to survive all reasonably foreseeable fire hazards on the facility. The management needs to be aware of the safety policy and aims and provide the necessary resources to ensure that these aims are fulfilled. 2. This may be based upon the generic frameworks outlined in HSG 65 [2.4.com • The operating limits for the whole facility shall be identified and clear instructions as to the continued operation of the facility or use of additional controls whenever they are exceeded. plant and processes.21] or ISO 14001 [2. thereby minimising the need to evacuate. plant. structures and safety system shall be suitable for the fire hazard effects. It in necessary to have a fully integrated process that ensures that all hazards have the necessary components in place and that they all work together effectively.

• Regional or business policies: These should apply the overall corporate criteria to that business or region and set minimum standards. The planning process itself needs to be organised so that the requisite information is available to promote proactive hazard management.3 Planning Planning covers five specific items and these apply both in design and in operation.4. Policies may be considered at four levels of increasing detail and specific application: • Corporate policies: These should set the overall ethos of the company.4. the understanding of hazards needs to be in place before key decisions are made rather than using it to retrospectively justify them. this requires the early development and resourcing of the risk assessment and management process 152-RP-48 Rev 02.2 Policy Each company should have a coordinated set of policies which cover the principles listed above and the means by which they are implemented and assured. This would result from the assessment of the facility and would apply controls or set minimum technical requirements so that the risks are kept within the criteria.3. • The assessment of the risks from the hazards based on the chosen strategies and the performance of the elements chosen to reduce risks to ALARP. and set the minimum technical and operational standards which apply across that whole region of business. identification of the people. The organisation may also choose to set tolerable risk criteria for major hazards which may result in multiple fatalities. plant and procedures needed to manage them and the setting or confirmation of the minimum standards for those elements. They should also set the framework for management systems. It should set an overall standard of risk tolerability.e. This will relate to the development of risk assessment processes and the criteria for acceptance in a wide range of activities from discipline engineering applications such as structural assessments and instrument criticalities to operational criteria such as SIMOPs or task risk assessments. • The development of strategies to manage each of the hazards. • The documentation and communication of the hazard knowledge. • The assessment of the business infrastructure and resources needed to implement the strategies both initially and thereafter to maintain them. its overall stance with respect to HSE and its public expression of commitment to the protection of its personnel and those with whom it interacts. • Facility: Specific policies and standards may be required for an individual facility.fireandblast. • Identification of the hazards and the analysis to give the understanding outlined in the principles listed in Section 2. This may apply to operational or technical limits • Specific requirements: These would be the minimum standards for specific items of plant. the strategies and the measures needed to implement them.com 2. or any systems needed to manage hazards effectively. Feb 2006 Page 26 of 261 . In design. Corporate goals may also be set stating how the business should be organised and run in pursuance of their risk criteria. competence. i. Most organisations should also demonstrate a commitment to continuous improvement. It may also set minimum standards relating to design and operations such as the requirements for the use of codes and standards. 2. This may be an expression of individual risk covering all types of exposure including occupational and major hazards risk.

HSE. (FEED): • Update and more thorough hazard identification. Feb 2006 Page 27 of 261 . This includes the discipline engineers. evacuation and emergency response analysis). • Preparation of the operational procedures.e. training. • Comparison and selection of the concept. Each part of the organisation will make specific contributions to the management of each hazard. particularly process and layout who have the greatest opportunities to maximise the inherent safety. i. 152-RP-48 Rev 02. • Selection of the strategy and primary systems to manage each hazard. This should include the identification or cross referencing of critical elements to the hazards and the assurance that the required performance is correctly documented. • Setting of the performance standards for each system. The specialist risk and safety engineers should act in support of these disciplines in furtherance of a safer design rather than as a discrete and independent group providing data for regulatory compliance. integrity management. Front end engineering design.com through the use of an HSE plan. emergency response. It also needs commitment from the project managers to ensure that this proactive culture flourishes and that everyone uses this information to optimise the design. escalation analysis. 2. Typically the HSE plan will include each of the following activities for each of the project stages: Concept development and selection: • Identification of the primary generic risk drivers. The requirements arising from the planning process should be embedded into each of these business processes. Operations should be well represented both to provide their knowledge of the causes and risks and to agree the hazard strategies. • Risk assessment (This may be quantitative where required but is not essential). consequence and escalation. This may include but not be limited to design engineering. • Identification of different viable concepts. cause severity. • Initial characterisation of the hazards. Detail design: • Design of the systems to meet the performance standards. • Hazard identification and qualitative risk ranking.fireandblast.4 Implementation This is the process of putting the hazard decisions into practice and maintaining the minimum standards throughout the lifecycle. • Selection of scenarios and detailed hazard characterisation (HAZOP. procurement. fire analysis. those that will apply whichever concept is chosen. It requires the provision of a business infrastructure both within direct operations control and to support these operations. vulnerability studies. • Use of the hazard knowledge to optimise the inherent safety during the early process and layout design.4.

1 General framework This section details the major legislation covering risks arising due to fire related hazards. Thereafter. detection. Various regulations are enacted under the HSAWA.e. 152-RP-48 Rev 02. All technical issues relating to hazard management are unchanged within the regulations. 2. At the higher level. This should cover both procedures to prevent accidents and those to manage the incidents if they should occur. i. Employers have to take reasonable steps to ensure the health. The primary UK legislation governing safety in the workplace is the ‘Health and Safety at Work Etc. processes and plant are being met.fireandblast.com The operational procedures and controls should be fully developed in conjunction with the operators. 2.6 Review and improvement Periodic review should examine trends from the measurement processes. Feb 2006 Page 28 of 261 . there should be confirmation that it is working. 2. At a more detailed level it is the confirmation that the design of the plant is adequate and that the minimum standards of performance for people. this imposes a responsibility on the employer to ensure the safety at work for all employees.4. The emergency response plans should be written in the full knowledge of the hazards and the timeline of their development. that the linkages between hazards and critical elements are in place and that the resourcing and infrastructure is sufficient.5. from considering how the overall risks are changing down to the specific performance history of plant or changes in personnel and their competence.4.25] Management of Health and Safety at Work and Health and Safety (Consultation with Employees) (Amendment) Regulations 2005 [2. which places an obligation on the employer to actively carry out a risk assessment of the workplace and act accordingly.5. These include the ‘Management of Health and Safety at Work Regulations 1999’ [2. standards and guidance in the UK 2. will be relevant where the potential for a fire exists. It is not exhaustive as any legislation covering general safety or requiring a safety risk assessment to be performed.24]. 2. It should be carried out at the levels described.5 Measurement Measurement covers a range of activities. These measures include identification of fire and explosion hazards and the evaluation of their consequences and likelihood (Regulation 5).5 Legislation. analysis and management process is thorough.2 Offshore regulations More specifically related to fire and explosion risk are the Prevention of Fire and Explosion and Emergency Response on offshore installations (PFEER) [2.27] regulations which place on the Duty Holder the requirement to take appropriate measures to protect persons from major hazards including fires and explosions. that there is a widespread understanding of risks and hazards. It should then give structured proposals for investment in future risk reduction.23].26]. Risks assessed will include those from fire and explosion. It should be noted that the Management of Health and Safety at Work Regulations were amended at the start of 2005 to address issues of employee consultation and are now referred to as SI 2005 [2. control and mitigate explosion hazards. communication and control of emergencies. Regulations 9 to 12 specify the types of measures which are required for prevention. safety and welfare of their employees. Act 1974’ (HSAWA) [2. The regulations also require mitigating measures to be specified and put in place and for performance standards to be set for safety critical measures to prevent. Legislation may be added or amended during the lifetime of this Guidance. it is the verification that the hazard identification. complete and is of adequate quality.

SCEs). the topics covered briefly in the strategy document are: 152-RP-48 Rev 02. • Evaluation of risks associated with the identified hazards.5. Performance standards are used to define the functionality and integrity of these safety critical elements.5. The Safety Case Regulations (SCR) [2. • Details of appropriate measures taken to reduce these risks to as low a level as is reasonably practicable. The APOSC document advises that the following should be demonstrated for Major Accident Hazard assessments to an HSE inspector’s satisfaction: Acceptable safety cases will demonstrate that a structured approach has been taken which: • Identifies all major accident hazards (paragraphs 38-48).fireandblast. The structured approach listed above is generic. the implementation of the risk reduction measures • Describes how major accident risks are managed (paragraphs 90-112).30] provides open guidance for Duty Holders on the basis by which HSE inspectors would assess safety cases. • Describes how any quantified risk assessment (QRA) has been used and how uncertainties have been taken into account (paragraphs 75-82). Feb 2006 Page 29 of 261 . The overall objective of the document is to identify the areas which OSD has identified as requiring possible future work to address significant areas of uncertainty in fire and explosion issues on offshore installations. • Evaluates the risks from the identified major accident hazards (paragraphs 49-74).31] to illustrate their approach. escape recovery and rescue will occur in the case of an explosion event (Regulations 14 to 17). 2. The APOSC provides clarifications on issues which may not have been clear from the regulations and associated ACOP where available. • Describes the evacuation. • Details of the Duty Holder’s (Safety) Management Systems. They will define how these SCEs are expected to function during and after explosion events. 2.com The Duty Holder must ensure that effective evacuation.28] require all installations in UK waters to have an acceptable Safety Case. so that there are no specific requirements for how an assessment of fire hazards should be carried out.29] amended the SCR by placing a responsibility on duty holders to prepare a suitable verification scheme for their installations to ensure independent and competent evaluation of those elements of the installation which are critical to safety (known as safety-critical elements. escape and rescue arrangements (paragraphs 113-144). Information regarding the following issues is required to be addressed in the Safety Case: • Identification of major hazards.3 APOSC The ‘Assessment Principles for Offshore Safety Cases’ document (APOSC) [2.4 Fire and explosion strategy The HSE have recently compiled and published issue 1 of a Fire and Explosion Strategy [2. The document covers a number of areas of relevance to this guidance. The Design and Construction Regulations DCR [2. • Identifies and describes (paragraphs 83-89).

• Summarise current knowledge of the topic (i. Various codes. (IP15) [2. Feb 2006 Page 30 of 261 . 2. awareness of issues). The most relevant are the Interim Guidance Notes (IGN) [2. identify areas of uncertainty. • Prevention. ‘Area Classification Code for installations handling flammable fluids’.fireandblast. • Fire and explosion consequence assessment.5] and PFEER [2. standards. • Fire and explosion hazard assessment. e. apart from ISO 13702 [2. • Based on the results of the knowledge summary and the model capabilities above. For ignition prevention and Hazardous Area Classification: • Institute of Petroleum. • Describe the significance of the topic with regard to the risk of major accidents on offshore installations. hence the guidance below incorporates some references to explosion hazards as well). control and mitigation of fires and explosion. (it should be noted that explosion incidents will often be followed by fire. standards and guidance are available covering elements related to the fire hazards. reference to completed and on-going research. codes of practice.g. The more detailed scope covered by the strategy document is as follows: • Provide an introduction to each topic area. • Dispersion and ventilation. However there is little guidance. • Summarise areas identified to potentially be carried forward as part of OSD 3’s strategy development. design guidance etc). describing the scope of the review. • Summarise existing modelling capabilities (as appropriate to the topic area).5. 152-RP-48 Rev 02. relating specifically to the design of installations against fire hazard events. • Summarise current industry practice (i. reference to approaches taken in Safety Cases.1]] for which this Guidance represents an updated publication.e. • Fire and gas detection. extent of implementation of existing codes. The strategy document emphasises that individual topics are subject to continuous change and their priority is not addressed in the strategy document. Some of the widely used standards are listed below. • Ignition.32].27]. the nature of the hazard etc (as appropriate to the topic area).5 Codes.e. August 2002. standards and guidance Guidance documents are available from the Health and Safety Executive for the legislation mentioned above.com • Fluid characteristics (often referred to as “Source Terms”). guidance etc.

5] also addresses the need to develop a fire and explosion strategy (FES) which describes the role.39]. In setting a SIL it is acknowledged that there is failure potential although this is designed to be inversely proportional to the importance of the loop in risk mitigation.uk/dst/alarp1.6 Inherently safer design 2.gov. Critical loops are designed according to their criticality in mitigating personal.35]. environmental or commercial risk by setting a Safety Integrity Level (SIL). risks to ALARP in Design [2. ‘Electrical apparatus for explosive gas atmospheres Part 10.hse. Further details on legislation. • BS 5958: 1991 ‘Code of practice for control of undesirable static electricity’.36]. Feb 2006 Page 31 of 261 .41].6. • BS EN 60079-10.pdf: HSE guidance relating to Gas Turbine enclosures is relevant as the principles mentioned are applicable to explosions in general: • ‘Control of Risks at Gas Turbines Used for Power Generation’. Classification of hazardous areas’. • Principles and Guidelines to Assist HSE in its Judgement that Duty Holders Have Reduced Risk as Low as Reasonably Practicable [2.uk/dst/r2p2. essential elements and performance standards for each of the systems required to manage possible hazardous events on the installation.38]. [2. • For equipment in hazardous areas ‘BS EN 1127-1: 1998 Explosive atmospheres [2.34]cover electrical and mechanical equipment and protective systems.37]. Guidance Note PM84 HSE.gov.htm.com • The ATEX (Atmospheric Explosion) Directives 94/9/EC [2.hse. These documents only cover operational leaks rather than accidental releases. They do not define the extent of hazardous areas from the point of view of explosion and fire risk.33] and 1999/92/EC [2. [2. systems or human intervention to protect personnel. The advantage of an inherently safer design or the ‘Inherent Safety’ design approach is that it attempts to remove the potential for hazards to arise.htm: HSE Books have published a guide which sets out an overall framework for decision taking by the HSE (“Reducing Risks. [2. EN ISO 13702 [2. which is available in hard copy form [2. http://www. All control systems have the potential for failure to operate as intended – generally expressed as the probability of failure on demand.hsr. It does not rely on control measures.fireandblast. Guidance on the demonstration of ALARP is available throughout this Guidance and from the following sources: • Policy and Guidance on reducing http://www.uk/hid/spc/perm12. 152-RP-48 Rev 02.1 Introduction Having determined the installation concept it is necessary to manage fire and explosion risk within the constraints imposed by the subsequent offshore layout. Alongside UK legislation.gov. 2.40] and as a free download from http://www. standards and guidance can be found in Annex C. Protecting People”). which may be used in potentially explosive atmospheres.

fireandblast.com There is always the potential for the systems to be damaged in a hazardous event. Inherent safety avoids this potential by aiming for prevention rather than protection and the preference for passive protection over active systems. It is particularly important to follow Inherently Safer Design principles where the consequences of process release or system failure are high. Where it is possible to reduce the reliance on engineered (active or passive) safety systems or operational procedures this should be done. The Inherently safer design approach is contrasted with the process design spiral in Figure 2-1 . The result of the application of the Inherently Safer Design approach is reduced complexity and a reduced requirement for human intervention, resulting in a simpler more robust system.

152-RP-48 Rev 02, Feb 2006

Page 32 of 261

fireandblast.com
Enhanced Monitoring Requirement

More Complexity more leak sources

More Maintenance Intervention

Duplication to increase redundancy

More Instrumentation Automation More Safety Systems

Process Design Spiral
Reduced Monitoring Requirement Less instrumentation Less Automation Reduced Complexity fewer leak sources Reduction reduced inventories Less Maintenance Less Intervention Attenuation Substitution Increased Robustness

Inherently safer Design Cycle
Figure 2-1 Comparison between the process design spiral and the inherently safer design cycle

2.6.2 Goals of inherently safer design
The goals of inherently safer design [2.42] are to avoid the hazard and maintain safe conditions through inherent and, where appropriate, passive design features; and to minimise the sensitivity of the plant to potential faults as far as can be reasonably achieved.

152-RP-48 Rev 02, Feb 2006

Page 33 of 261

fireandblast.com This implies that the plant response to the fault should satisfy the following criteria in order: • The response produces no operational response or results in a move to a safer condition; • Passive or engineered safeguards should be continuously available and should make the plant safe; • Active engineered safeguards activated in response to the fault should make the plant safe.

2.6.3 Approaches to achieve the goals of inherently safer design
In Inherently Safer Design the following processes are commonly employed [2.43]: • Reduction – reducing the hazardous inventories or the frequency or duration of exposure; • Substitution – substituting hazardous materials with less hazardous ones; • Attenuation – using the hazardous materials or processes in a way that limits their hazard potential, e.g. storage at lower temperature or pressure; • Simplification – making the plant and process simpler to design, build and operate hence less prone to equipment, control failure and human error. The application of the above principles should result in: • Fewer and smaller hazards; • Fewer causes; • Reduced severity; • Fewer consequences; • More effective management of residual risk. In order to implement the principles, contributions will be required from all levels of the project team. Managers should show leadership in the focus on safety, discipline engineers will be involved in concept choice, plant layout, and engineering detail and safety specialists must make the options visible and available to designers and document the process.

152-RP-48 Rev 02, Feb 2006

Page 34 of 261

fireandblast.com Table 2-1 summarizes the major ‘inherent safety’ and control features necessary to achieve the goals stated above: Table 2-1 Inherent safety features to achieve goals
Goal to minimise fire risk Benefits of good layout (including partitioning effects or not) • • • • • • Minimisation of Potential Leak Sources/Release potential • • • • • • • • Minimisation of Ignition Potential • • • • • • Minimisation of POB Exposure to Fire Effects • • • • • • • • Minimisation of Hazardous Inventory • • • • Inherent safety features to achieve goal place equipment, utilities and personnel areas along a clear hazard gradient where possible use as much segregation as possible to limit escalation avoid congestion in process areas place safety critical equipment in uncongested areas where possible (limits vulnerability to high explosion loads) use height between floors to provide ventilation space (cheap volume) identify measures required by fire and explosions and balance benefits from measures for each hazard category minimise number of pipe joints maximise welded pipe joints minimise invasive instrumentation eliminate/minimise small bore pipework minimise offshore processing and process complexity minimise vibration minimise corrosion/erosion ensure effective inspection ensure there are no naked flames in live plant audit and review safety management system with respect to hot work procedures insulate hot surfaces (where inspection is not critical) ensure effective earth bonding implement hazardous area zoning (area classification) ensure an effective maintenance regime separate quarters and non-operational personnel from process areas minimise maintenance requirements remote operation of processes simplify the offshore process introduce separate accommodation platforms use fully rated fire barriers and protect non-redundant primary structure provide multiple escape routes from each hazardous area introduce structural redundancy simplification/minimisation of offshore processing use of small isolatable inventories effect isolation from large inventories upon gas/leak detection ensure effective blowdown of inventories

152-RP-48 Rev 02, Feb 2006

Page 35 of 261

fireandblast.com
Goal to minimise fire risk Minimisation of potential release mass and severity of consequences • • • • • • Monitoring and maintenance of SCE integrity/functionality • • • • • • • Maintain Effective Management of residual risk • • • • Inherent safety features to achieve goal minimise inventory pressure and potential leak rate minimise hazardous inventory minimise module size, segregation of release sites from ignition sources and personnel – compartmentalisation Minimise congestion and the possibility of obstructed fires Improve natural ventilation (to reduce ignition probability, avoid re-circulation and external flaming) Consider the use of subsea completions implement an effective inspection programme introduce effective maintenance procedures minimise the exposure of the TR and SCEs to smoke and heat improve SCEs resistance to thermal effects protect SCEs from severe vibration effects protect SCEs from structural displacement effects separate process areas from critical non-hazardous areas safety leadership and focus implement an effective safety management system pursue prevention rather than protection use passive systems of control and mitigation in preference to active systems

The above table details inherent safety and control features that minimise the potential for fires to occur, or if a fire should occur, that minimise the consequences and risk to personnel. These features should ideally be built into the early design of the installation, rather than being included as mitigation measures at a later date. Inherent safety practices must be maintained throughout the life of the installation continuing through the operational phase by adherence to effective inspection and maintenance regimes and by ensuring that management systems and related procedures are followed. The benefits of the inherently safer design approach are that hazards and risks are tackled at source. There is an opportunity for cost effective risk reduction (at an early project phase). The approach will normally result in easier and more reliable plant and often results in reduced through life costs.

2.6.4 Effective management of residual risk
The risk which cannot be eliminated or prevented by the application of inherent safety methods is referred to as residual risk. Inherent safety methods can also be applied to the management of the residual risk by consideration of the general principles indicated below: CONTROL is better than MITIGATION is better than EMERGENCY RESPONSE. As regards systems to reduce risk; PASSIVE systems are more reliable than ACTIVE systems are more reliable than OPERATIONAL systems are more dependable than EXTERNAL systems
152-RP-48 Rev 02, Feb 2006 Page 36 of 261

Survivability Risk No Is it good enough? Yes Proceed with Detailed Design Figure 2 . At the preliminary engineering phase layout should be designed with the intention of reducing the severity and consequences of major hazards.6.5 Constraints and limitations of inherent safety Ideally the inherently safer design approach should be applied throughout the project duration and continue throughout the life of the installation. Understand Hazards Cause & Likelihood Severity Escalation Exposure M inimise each at source Strategy ? Prevent Control M itigate Evacuate System Choice? Passive Active Operational External System Performance? Role.fireandblast. At the detailed engineering stage systems should be designed to reduce the likelihood and severity of the hazard. Criticality. Intervention may give rise to an additional hazard which must be assessed and should not compromise the gains to be achieved by the modifications. If the method is not applied from the start then it may not be possible. Functionality. 152-RP-48 Rev 02. cost effective or effective in risk reduction terms to modify the plant to conform to the ideals of inherently safer design.2 Risk Reduction Flowchart 2. Feb 2006 Page 37 of 261 . control or mitigate hazards if avoidable.2 below.com This indicates that the use of passive rather than active control and mitigation systems is preferred and that reliance should not be placed on personnel to prevent. This process is illustrated in Figure 2 . At the concept choice stage the selection of a safer concept should be paramount.

in some circumstances. Where quantitative values are not available a qualitative measure of risk can be estimated to a degree of accuracy sufficient to make a decision on the assessment approach to be adopted. increased compartmentalisation will generally reduce the size of a potential ignitable gas cloud and the number of potential ignition sources. The balance between such features needs to be considered.7 Risk screening 2. Feb 2006 Page 38 of 261 . The effort expended should be proportional to the risk. the terms probability and frequency imply that numerical values are available. This risk can be calculated as a numerical value expressed as individual risk (IR) or in terms of a value for the installation such as Potential Loss of Life (PLL). It is important therefore to have a means of early estimation of the risk level of an installation to determine the appropriate approach to be used in installation fire assessment. increase confinement and give rise to obstructed or ventilation limited fires.com It may not be reasonably practicable to apply retrospectively to existing plant. what may be demanded by reducing risks to ALARP for a new plant and what may have become good practice for every new plant. any inaccuracies in determining that risk will also be low in absolute terms. 152-RP-48 Rev 02. irrespective of cost. Where the risk associated with an outcome is low. hence insulation may be inappropriate as an ignition source reduction measure and as a process protection measure. There may be some conflict between the various approaches employed to improve inherent safety. Economic requirements may make such duplication necessary and may actually reduce the required intervention.fireandblast. Insulation may actually increase the temperature of enclosed inventory or the surfaces being protected. If risks are in this intolerable region then risk reduction measures must be implemented. unless the maintenance requirements and instrumentation failure consequences increase the risk. 2. however this may decrease the potential for natural ventilation. increase the overall risk. instrumentation associated with autonomous systems such as deluge and leak detection systems should not contribute to the likelihood of a release and hence this instrumentation is bound to be beneficial. There will also be a balance to be struck between reduced complexity and redundancy/duplication of systems. Corrosion under insulation is a major cause of line failure and high operational cost.1 General The higher the life safety risk (or risk to life) on an installation or within a compartment/module the greater should be the rigor that is employed to understand and reduce that risk. At a later stage in a design project a 5 x 5 risk matrix may be appropriate for risk acceptance. Whilst it is generally beneficial to reduce in-line instrumentation. Likelihood is a more appropriate term in this context where a qualitative assessment is being performed.7. The approach to fire assessment needs to be decided early in the design process when absolute values for release frequency and detailed consequence analysis are not available. Risk is the product of consequence and frequency of occurrence. For example. However at an early project phase the increased number of boundaries between consequence and likelihood classes may be difficult to identify and assign. A strict adherence to the principles of inherently safer design may. The overall individual risk and the TR impairment frequency (TRIF) from all hazards must still be less than 10-3 per year.

such as: • Fires resulting from loss of inventory from damaged equipment. pipework and vessels. Segregation should separate release sites. a medium consequence installation may be a processing platform necessitating permanent manning but with low escalation potential to quarters.com A simple approach which is frequently adopted for qualitative risk assessment uses a 3 x 3 matrix of potential consequence versus likelihood of a fire event is described in this section. This should be achieved by assessing parameters such as: • The vulnerability of Safety Critical Elements to thermal loads. A medium consequence installation would be typically a platform or compartment which is well segregated with a low manning level consistent with a normally unattended installation. For a long duration fire there is a risk to those who attempt to tackle the fire. people and ignition sources with low confinement and good access.e. both isolatable and non-isolatable. such visiting intervals by maintenance or intervention crews. Low consequence outcomes would be predicted where the radiation levels are predicted to be relatively low and immediate and delayed consequences are also low. Feb 2006 Page 39 of 261 . Alternatively.2 Consequence severity The consequence side of the matrix comprises an assessment of the effects of credible fire scenarios including escalation. for example. supports. • Occupancy of the area immediately affected. Manning would be consistent with a normally unattended installation with a low attendance frequency. • Hazardous inventories. • Inaccessibility of means of escape and/or evacuation. utilities and control areas which are located on a separate structure. • The relative location of the TR. For the installation under consideration the direct and indirect effects of fires should be identified. The fire extent and duration may also be predicted to be small. • The operating and control philosophy influences the extent of operator intervention and the potential for human error and inventory loss. Congestion. more frequent than 6-weekly. Manning would be consistent with a normally unattended installation with a moderate attendance frequency. • Vulnerability of people in adjacent areas. will be greater than for the low consequence case. • The suitability of the layout. typified by the amount of equipment installed. 152-RP-48 Rev 02. visiting less frequently than 6-week intervals. 2. results in an occupancy rate of about 1 %. The equipment count would probably be low. It is more likely that the major consequences will involve escalation. A major risk lies in effects such as oxygen depletion and radiation from flames and the emission of hot gases. no associated process pipework) resulting in low inventory and congestion.fireandblast. • Structural failure.7. being limited to wellheads and manifold with no vessels (i.

Where there is doubt regarding the category into which an installation should fall. semi-sub. • The type of flanges. compressors and other potential leak sources. The likelihood considerations tend to align closely with the consequence factors in that the low consequence installations will tend to be small and therefore less complex.7. Feb 2006 Page 40 of 261 . a large number of potential leak sources and high ignition potential. 2. high congestion and therefore potentially a fire event of high likelihood. the number of flanges. gas or vapour cloud. The frequency intervention period of 6 weeks or more is also recommended as a criterion as this will be a surrogate for equipment count and reliability as well as a measure of maintenance risk with respect to an ignited release.3 Likelihood The likelihood of a significant fire will depend upon the likelihood of occurrence of a large release and ignition. valves or pipework. Similarly. Low event-likelihood installations and compartments will have a low equipment count.g. 2. where the planned frequency of maintenance/intervention is greater than a 6weekly basis then this suggests a higher or less reliable class of equipment with medium level of potential for an ignited release. i.fireandblast. Medium and High basis. Where there is doubt regarding the category into which an installation should fall. e. The following parameters will influence the potential likelihood of a fire: • Hazardous inventory complexity. it is recommended that the category with next higher consequence is used. jack-up or F(P)SO) with quarters on the same structure as the process. it is recommended the category with next higher likelihood is used.e.4 The risk matrix Continuing with the Low. valves. Where the complexity of the process in a compartment requires a permanently manned installation this suggests a high equipment level. • The ventilation regime. hub type flanges.7. Some generic types of flange tend to have lower leak frequencies associated with them.com A high consequence installation would encompass remaining installations and compartments where there is significant processing on board leading to significant congestion (high equipment count) and potential confinement with populated areas within the consequence range of escalation scenarios. • The equipment reliability and the maintenance philosophy. This may typically be characterised by a PDUQ/PUQ installation (jacket. the risk categories can be assigned for the installation is assigned using a 3 x 3 risk matrix. as shown below: 152-RP-48 Rev 02. Large installations will have more potential leak and ignition sources and therefore a greater requirement for intervention and maintenance. • The number of ignition sources within the flammable region of a potential spray release. Medium event-likelihood is suggested by an NUI with equipment count greater than for the ‘low’ case.

fireandblast.com
Consequence Low High Frequency/ Likelihood Medium Low Medium risk Low risk Low risk Medium High risk Medium risk Low risk High High risk High risk Medium risk

Figure 2-3 Risk matrix – determination of risk category The risk category determines the level of sophistication required for the assessment (low, medium or high). Levels of structural analysis are discussed in Section 3.7. The level of risk screening discussed above is scenario independent. The risk level for each scenario may be made using the risk matrix if representative ranges of frequency and severity can be attached to the likelihood and consequence categories.

2.8 Risk reduction
Risk management and reduction is an integral part of the Health, Safety and Environmental Management System (HSEMS) of any organisation or project. The HSEMS provides the overall framework within which all risks (not just fire related) should be managed. To assess and manage the risks arising from a specific operation especially with respect to a specific hazard category it is necessary to recognise the requirements of the HSEMS on the risk management process (e.g. in determining acceptable levels of risk) and to implement the processes that contribute to the risk management. As part of the processes contributing to risk management, an assessment and implementation programme for dealing with risk reduction measures should be in place. The risk reduction measures include preventative measures (i.e. likelihood reducing) and mitigation measures (i.e. consequence reducing). The detailed definition and specification of these measures form significant components of design codes and standards. Where appropriate, risks can also be significantly reduced by the adoption of inherently safe designs as discussed in Section 2.6. In identifying candidate risk reduction measures, consideration should be given to the full range of measures involving inherently safer design, prevention, detection, control and mitigation. The risk reduction measures considered may range from items of equipment and physical systems through to operational procedures, managerial structures and planning. It is worth emphasising that the UK regulator will expect to see the following demonstrations for risks lying below the maximum tolerable, but above the broadly acceptable level: • That the nature and level of the risks are properly assessed and the results used to determine control measures; • That residual risks are not unduly high and have been kept ALARP; • That the risks are periodically reviewed to ensure that they still meet the ALARP criteria. Duty holders should not assume that if risks are below the maximum tolerable level, they are also ALARP. This should be demonstrated through the application of relevant good practice and sound engineering judgement; and the consideration of further measures that can be adopted to reduce risks to ALARP. The degree of rigour of the ALARP demonstration should also be proportionate to the level of risk associated with that hazard category on that installation.
152-RP-48 Rev 02, Feb 2006 Page 41 of 261

fireandblast.com A number of example risk reduction measures that have been used in submitted safety cases (data collected up to 2001) has been tabulated in the HSE publication, “Fire, Explosion and Risk Assessment Topic Guidance”, Issue 1, February 2003. This table is reproduced below. For full document see http://www.hse.gov.uk/foi/internalops/hid/manuals/pmtech12.pdf Table 2-2 Examples of risk reduction measures implemented on existing installations
Type of measure Prevention (i.e. reduction of likelihood) Description of measure Leak prevention 1. Removal or strengthening of small bore pipework connections 2. Isolation of disused wells at production header as well as Xmas tree and venting of flow lines back to tree 3. Decommissioning of redundant equipment 4. Improvements to systems of work 5. Implementation of competence management and assurance system 6. Improvements to PTW system 7. Improvements in integrity assurance Ventilation 8. 9. Removal of wind walls Enhancement of HVAC in process modules

Ignition control 10. Monitoring of gas turbine exhaust system temperature Detection (i.e. transmission of information to control point) Gas detection 11. Installation of ultrasonic leak detectors 12. Installation of additional IR beam detectors Fire detection 13. Installation of additional fire detectors Emergency shutdown (ESD) systems 14. Installation of high integrity check valve on gas re-injection header Blowdown and flare systems 15. Installation of additional blowdown valves Explosion control 16. Initiation of water deluge on detection of gas 17. Removal of redundant equipment Mitigation (i.e. protection from effects) Active fire protection – Replacement of deluge system piping Passive fire protection – Uprating of fire walls Blast protection – Uprating of blast walls Temporary Refuge – Re-location of Main Control Room to TR – Re-definition of TR – Enhancement of mustering facilities – Protection of external staircase – Provision of airlock doors – Provision of dedicated HVAC system for TR Evacuation and escape – Installation of additional emergency lighting on escape route – Provision and maintenance of proper training in the use of evacuation and escape facilities – Provision of alternative escape routes

Control (i.e. limitation of scale, intensity and duration)

152-RP-48 Rev 02, Feb 2006

Page 42 of 261

fireandblast.com
Type of measure Mitigation (i.e. protection from effects) contd. Description of measure Fire-fighting equipment – Installation of new foam monitors Manning – Reduction of POB

2.9 Human factors
The influence of Human Factors in the control of and response to fire hazards and fire hazard management systems is significant and must be considered in the assessment of hazards and the design of control and mitigation systems. The Human Factors issues covered within this guidance document summarise two areas of application; reference should be made to Section 6.7 “Personnel”, covering the impact of fires on people and Section 7.4 for “Human Factors - Man/Machine Interface”. The response of personnel to fires covers the effects of heat, radiation, smoke and other toxic or debilitating products of combustion. These issues are discussed in detail in Section 6.7 along with a summary of the timeline of the harm criteria that develop along with the escalating hazard. The ability of the workforce to safely and effectively manage and maintain the detection and mitigation systems for fire hazards is described in more detail in Section 7.4. The considered design of the man machine interface for these safety critical systems is a major contributor to success in meeting a hazard. The issues of ergonomics, working environment and clarity of supplied information are discussed along with some indications of appropriate analysis techniques to assist the designers and operators.

152-RP-48 Rev 02, Feb 2006

Page 43 of 261

fireandblast.com

3. Fires on offshore installations
3.1 Introduction
In order to successfully implement the appropriate protective mechanisms for fire hazards, it is essential (and obvious) to understand what element or area is being protected and what event the designer is protecting against. Therefore, the protective measures can only ever be effective when an assessment is carried out of the potential fire hazards. This step is required by the fire and explosion risk analyses (FERA). Some preliminary guidance on describing the unfolding scenarios is given in the following sections.

3.2 Fire types and scenarios
3.2.1 Release events
To establish which fire scenarios should be considered as part of a QRA of an installation, it is first necessary to consider the range of incidents that may lead to an uncontrolled release of flammable material which, if ignited, would give rise to a fire. In this context, relevant questions concerning potential release scenarios are: • WHY did the release occur? • WHAT is released? • WHERE did it occur? The answers to these questions combine to determine the type of fire that may result, the likely size of the fire and its potential impact on people and the installation. Considering each in turn: WHY: The answer to this question will establish the size of the leak and influence the likelihood of ignition. For example, has the leak occurred due to a leaking flange joint or as a result of a preceding explosion event? A range of sizes should be considered from small leaks at flanges and fittings up to major failures of vessels and risers which result in very high release rates. The leak rate may also change with time and may have a limited duration. Failure frequencies for different sizes of event should be taken into account; generally small leaks will be the most common. Release failures should be based on platform specific information where possible, and Duty Holders are encouraged to collect, analyse and use failure rate data based on their own maintenance systems and practices. The reason why a failure is being considered may also influence the likelihood of ignition, for example, if a vessel failure is being considered as a result of a preceding explosion or fire attack then ignition is almost certain, whereas a small leak of high pressure gas generated as a result of a leaking flange may not interact with a potential ignition source. Ignition probabilities also depend on fuel type, for example, a spillage of diesel onto a cold surface is not readily ignited. WHAT: The nature of substance being released will also influence the type of fire that results. A non-volatile liquid spillage may result in a pool fire whereas a high pressure gas release may produce a jet fire. Apart from process fluids, other flammable substances are likely to be stored and used on an installation for use in service roles. Potential fluids to be considered are: • Natural Gas – dry or containing condensate and/or water; • Condensate – unstable or stabilized; • Live crude –possible including a significant amount of water;
152-RP-48 Rev 02, Feb 2006 Page 44 of 261

fireandblast.com • Transport fuels - Aviation fuel, Diesel; • Process fluids – Methanol, Ethylene Glycol; • Lubricants and hydraulic fluids. In addition, some of the gas and oil streams may include hydrogen sulphide, which may require special consideration because of its potential to produce toxic products or be toxic if unignited. WHERE: Where the leak occurs will also influence the type of fire that results. In particular, is the fire likely to be in an open or confined area and what is the potential for the fire to impact onto pipework or vessels that may also contain flammable material, or indeed other critical targets (e.g. other safety critical elements, control systems etc.)? The latter question is important with regard to the potential for incident escalation. Some fires may occur at a location away from the source of the leak, for example, liquid spills which may spread to other areas or even spill onto the sea. The location of the fire will also influence its likely consequences; hence fire scenarios at a range of key locations should be addressed in the QRA. In particular, fires that are close to where people work, which could affect escape routes, Safety Critical Equipment, the Temporary Refuge or key structural components. Having selected and defined a release event giving rise to a fire, this fire and its effects may well change and develop with time depending on the prevailing circumstances. The following factors may affect fire behaviour and/or the consequences: • ESD: Assuming the ESD operates the volume of the isolatable volumes will affect the duration of the larger leak scenarios and result in a transient fire size, reducing with time. • Blow-down: Similar to ESD operation, this could result in a transient release rate. Additionally, blow-down may reduce the consequences of the fire scenario by depressurising a vessel or pipework onto which a fire is impacting, thereby preventing escalation. • Confinement: Fires in confined areas with limited ventilation may change over time, for example, become progressively more severe as ‘external flaming’ occurs, when the fire moves through the ventilation openings. • PFP: The use of passive fire protection may not affect the nature of the fire but will affect the response of objects subjected to fire attack and delay or prevent incident escalation. • Deluge: Depending on the fire type, active water deluge systems (area and dedicated) may affect both the nature of fire and the thermal loading to engulfed objects and in most cases will be beneficial to escaping personnel.

3.2.2 Ignition
The likelihood of ignition is clearly an important factor to consider for any QRA and will also be dependent on the answers to the WHY, WHAT, WHERE questions above. Some fuels are more easily ignited than others and the manner of spillage may affect its flammability (for example oil spills onto the sea are often not readily ignitable and additionally are likely to be distant from common ignition sources on an offshore installation. Ignition sources such as electrical fault, electrical arcs (for example across switch contacts), sparks, high temperature surfaces, flames and electrostatic discharge should be considered and the proximity of such sources will vary at different locations on an installation (see also Section 2.2.4)

152-RP-48 Rev 02, Feb 2006

Page 45 of 261

or failure of a sub-sea liquid pipeline. WHAT. 3. 4. the following six fire types are proposed: 1. Typical answers to these questions include: WHY 1. 2. 152-RP-48 Rev 02.2. Further detail of this interrogation process can be found in Sections 2.3 Fire scenarios Given that ignition has occurred. Two-Phase Jet Fire – originating from a pressurised release of a flashing liquid or a gas/liquid mixture on the installation. Gas Jet Fire – originating from a pressurised gas release on the installation.5. Leaking flange. the answers to the WHY. such as those above.fireandblast.2. Three examples are as follows: WHY 1 Leaking flange joint Fire attack on pressurised vessel leading to failure Storage vessel failure WHAT High pressure natural gas Gas and volatile liquids Non-volatile liquid WHERE In an open sided module FIRE TYPE Jet fire with potential impact onto pipework and vessels BLEVE . non volatile liquid From subsea source By considering combinations of these answers the fire type can be determined. Feb 2006 Page 46 of 261 .2. structural collapse or fire event WHAT High pressure gas WHERE In open module in open area or congested region 2. Pressurised volatile liquid In confined area 3.com 3.3 and 2.fireball Potential pool fire on the sea 2 On the installation On the installation but liquid spills onto sea 3 Considering a range of generic cases. WHERE questions above also determine the nature of the initial fire and how the fire may subsequently develop. small fitting or valve Pipework failure from impact or corrosion or preceding event Equipment failure Vessel rupture or collapse following explosion. Pool Fire on the Installation – originating from a liquid spillage. May be static or running depending on the drainage paths or bunding around the source. Pool Fires on the Sea – originating from a spillage on the installation falling onto the sea. 4. Pressurised gas/liquid mixture Spillage onto sea Non pressurised.

6.5 give an outline of the methods available in each of these four categories. Sections 3.3 to 3. 3. In order of priority. The nature of these fires and their behaviour when interacting with confinement and/or deluge is considered in further detail in Section 5.2. when that hazard cannot be eliminated by inherent safety approaches (see Section 2.fireandblast.5 cover the various options for detection.5.com 5. the remaining steps of the strategy seek to: 5. for example.1 General The principals of Fire Hazard Management promote a four-part strategy for dealing with the fire hazard. a fire occurring in a confined space may lead to increasing fire severity with time and the movement of the flame through the vent may produce external flaming. 6. Gas Fires on the Sea – originating from failure of a sub-sea gas pipeline. control and mitigation of fire events once they have already occurred. There are opportunities throughout the design of any installation to minimise the fire hazard using the four strategies above. Prevent or minimise fires at source Detect fires early Control fires Mitigate against effect of fires Sections 3. It should be noted that the behaviour of these fires may change with time as noted in Section 3. confinement or deluge. 8. 7. a jet fire impacting onto a pressurised vessel may lead to vessel failure and a BLEVE fireball event. detection. issues concerning heat transfer and other details more detail of the fire types are discussed in Section 5. Every engineering discipline involved in the design process should be aware of the interaction between their specific discipline input and the fire hazard management for the installation. The QRA should be supported by a thorough HAZID with input from people with experience of the existing or similar plant or processes.3.4 and 5.2.4 Transition between fire scenarios As discussed above.2 “Fire characteristics and combustion effects”.3 Fire prevention methods 3. This section outlines the options available for preventing or minimising the fire event at source.4 and 3. some fire scenarios may change with time. Good design seeks out the best mix of prevention. 5. for example. Similarly. A liquid spillage may start as a pool fire on the installation but drainage of the spill may ultimately lead to a pool fire on the sea. it is important that a QRA considers the potential sequence of fire events and that a fully representative set of events is analysed. BLEVE – originating as a result of catastrophic failure of a pressurised vessel containing a volatile liquid. Therefore.3. The fire and smoke loadings. some fire scenarios may lead to incident escalation and result in a different fire event occurring as a direct consequence.6). Feb 2006 Page 47 of 261 . due to the effect of ESD. 152-RP-48 Rev 02. control and mitigation methodologies for the specific fire scenarios associated with an installation. for example. In reality almost every offshore installation employs a mixture of all four methods. 3. It is the responsibility of the safety engineer in conjunction with the project manager to engage all the engineers in discussion of fire hazards from an early stage so that no costeffective opportunities for improvement are missed.

Provide grated deck in process areas to reduce pool fire risks. the pipelines attached to the installations and the process vessels. Ensure that the hazardous drain arrangements are capable of handling releases from the single largest vessel or source based on the range of reasonably foreseeable events.3 Minimise inventories The biggest inventories are in the reservoir.3. Wherever possible hydrocarbon containing vessels should be bunded and connected to hazardous drains or vents or flare systems designed to remove flammable liquids from the vessel. complete removal of the fuel source not an option. They should aim to: • • Minimise inventories between the wellhead and downhole valves. However there are opportunities for the designers to minimise the potential for large releases of fuel. Any non-provision of subsea isolation must be thoroughly justified. These are described in the following sections. Locate risers and riser valves where other fires or fire escalation cannot affect them. Small platforms such as Southern North Sea gas platforms cannot provide separation by distance therefore immediate safe egress/escape provision plus sheltered evacuation points are crucial for safety of personnel.3. 3. Provide diverse egress routes from modules and access platforms/decks back to the TR or provide a suitable protected muster point (PMP). Locate risers as far as possible from the TR & evacuation point. Provide suitably located topsides and subsea isolation valves on all import and export pipelines. Where separation of people from hazardous areas is not possible.2 Methods of fire prevention or minimisation at source Given that the principal role of oil and gas installations is to produce large quantities of hydrocarbons.5 Minimise the potential for loss of containment events • Minimise the number of potential leak points in the design. vessels and other process equipment to minimise inventory loss in a leak situation as well as meet process requirements.com 3. • • • 3. backed up where necessary with accessible manual isolation valves. Engineers need to be briefed to consider minimisation of release potential in addition to consideration of production maximisation and cost. Minimise on-platform storage wherever feasible. Review the locations and orientations of flanged joints to minimise the location of targets (SCEs or other flammable inventories) within the range of small and escalating jet fires.3.4 Optimise layout Good layout is essential to the overall safety of the installation. • • • • • 3. provide protection by segregation behind firewalls and attention to escape/egress routes. particularly flanges and instrumentation connections. Justifications must consider all lifecycle phases (especially for NUIs). Key points are: • • • • Keep living quarters and evacuation facilities away from the process. Size pipelines.3. Feb 2006 . However enough valves need to be left to provide for Page 48 of 261 152-RP-48 Rev 02.fireandblast. Provide adequate automatic isolation throughout the process system.

this should be highlighted on drawings and in manuals. ensuring that the lower oxygen content media are suitable for occupied areas. Feb 2006 Page 49 of 261 .g. • • • • • 3. Determine the required supply of inerting medium. Where emergency manual isolation is provided.6 Providing an inert or non-flammable environment • Determine the degree of containment to confirm whether an inert atmosphere is achievable in the specific application. o Low oxygen content media (such as Inergen. Avoid all but the lower oxygen content media in areas where personnel without breathing apparatus may be. for example: o Completely contained within a pressurised vessel.7 Minimise the time to ESD and blowdown • ESD should be designed to occur immediately on detection of a release event.e. whether the media can be generated on the installation (e. o Completely contained but within an open vented atmospheric vessel/tank. • • Design for future sand erosion and corrosion by providing for ease of detection. Nitrogen Generator) or whether it is desirable to be brought on board. valves with integral block and bleed and inherently safer wellheads should be considered. • 3.fireandblast. considering the use of the areas and volumetric flow rate requirements. make sure it is documented in emergency response plans. o Carbon dioxide.3.3. Review the media for their own hazardous effects in the context of the potential applications. Use of newer design of equipment such as high integrity flanges. Identify any time limits on occupancy or minimum health and fitness criteria with the media supplier.g. the media may include: o Nitrogen.com safe isolation for intrusive maintenance. for example offloading requirements or inerting an area with opening/closing doors (such as filling a Temporary Refuge with lower oxygen content media. o Over-rich (i. a proprietary product with insufficient oxygen to support combustion but adequate oxygen content to maintain life). see next bullet point). above Upper Flammable Limit) fuel gas. Where facilities and access for routine test and maintenance are not provided on the understanding that such work will only be done during shutdowns. ESD should move the plant to a safer state. for example carbon dioxide being heavier than air will flow down hill. monitoring and replacement. especially where personnel could access as part of recovery work after the emergency. unambiguously labelled in the field and accessible in the relevant fire scenarios. recessed areas for valve or equipment access could capture the CO2. Consider the preferred delivery option. therefore. Confirm that the layout does not contribute to or exacerbate migration of the media to sensitive areas. the degree of inflow and outflow required for all operating conditions. Designers need to check whether the ESDV locations minimise ignited release consequences rather than just reducing leak size. e. 152-RP-48 Rev 02. Review the non-flammable media available for application. o Cleaned combustion gas.

com • Rapid blowdown or draining of topsides process inventories in order to prevent escalation of a fire situation should be provided .4. heating equipment etc in ‘safe’ open locations around the installation. Most installations have hundreds of sensitive detectors in place. Blowdown should be designed in the light of the specific escalation times for each fire scenario and generally be as fast as feasible once activated.4 and 6.3. The ignition-prevention philosophy for the platform should explain how the ignition risk is minimised. Feb 2006 Page 50 of 261 .5 for more details on blowdown systems).6. most installations have a two-tier alert system. from which the hazardous zones are calculated.unless there are specific good reasons for not doing so (e. historically reliance has been placed on detection of the associated gas. • • • Certified electro-mechanical equipment (e.1 Detection of loss of containment events 3. the design and operating philosophy must be clearly recorded for the intended user and all operational and maintenance details must be documented or referred to in the emergency response instructions for the installation. Detection should always trigger limitation of the leak by rapid automatic isolation it should simultaneously alert personnel to the danger.1 Overview of gas detection options Early detection of loss of containment events is crucial. In order to prevent spurious shutdowns and un-necessary platform alerts. A gas cloud from a medium or large leak can. • • • 3. and designed such that the heat radiation for maximum foreseeable flaring (or ignited venting) rate does not pose a hazard to escape and evacuation. drift outside hazardous area limits. Equipment which provides an ignition source and is unacceptably close to release sources should either be located inside an enclosure with ventilation ducts that close off automatically on detection of gas. Since it is difficult to automatically detect liquid oil leaks (although oil mist detectors can detect higher pressure liquid leaks). and will.g. The code-based design approach of providing blowdown to 7 barg or half design pressure in 15 minutes should no longer be automatically assumed adequate. very small topsides process).1.6. or be provided with some alternative form of protection.4. 152-RP-48 Rev 02. This is to cater for ‘fugitive’ leaks in accordance with hazardous area design codes. (see Sections 6. do not cater for major accident releases.fireandblast.4 Gas and fire detection and control methods 3. 3. Blowdown must be to a safe location with respect to personnel. Where only a manual blowdown capability has been used – the designer and Duty Holder must justify the choice of system with respect to the identified major accident hazards. diesel generators) requires careful maintenance in order to retain its certification and is a significant operating expense. Plant should be suitably earthed and all operators trained in awareness of offshore static spark risks (a recurring cause of fires). bearing in mind the likelihood of spurious blowdown events as well as real emergency events. Therefore caution must be exercised in locating unclassified equipment such as generator sets.g. temporary pump skids.8 Minimise ignition sources. • • • All electrical equipment in hazardous areas shall be certified. The dispersion distances for such leaks.

com Typically. All installations. Where one person is missing. If a second alarm in the same area then occurs or if a high-gas-level alarm goes off. Personnel should never be asked to enter a gas-cloud for the purposes of investigation or manual action – they may be rendered unconscious by the un-ignited gas or be engulfed in flame if the cloud suddenly ignites. The fire and gas system voting interprets 2 or more low-level or 1 or more high-level alarms as ‘confirmed’ gas releases.5 kg s-1) The detection of gas at the HVAC intakes to areas containing potential sources of ignition (TR. A system which requires operations personnel to walk into a gas-release scenario in order to investigate before initiating shut down of the process system is potentially dangerous and no longer acceptable. which is immediately investigated but no shutdown or general alarm is initiated. One single low level gas detection is more likely to be a false alarm than a real gas release.e. depending on the extent of the detected release. where applicable.e. use a combination of different methods in order to cover the range of duties necessary. All have their strengths and weaknesses which are explored in the table below. There are many different types of gas detector available. This automatically initiates platform alarms and shutdowns. The detection system should instead be designed to give remote indication of the development and/or migration of the release thus allowing personnel to stay well away from danger. Confirmed gas detection should always initiate immediate. etc) The basis for the specific cloud size and gas leak size are established by specialist analysis/modelling of the areas. 152-RP-48 Rev 02. appropriate executive action in the form of shutdowns and. blowdown.6). a single low-gas-level alarm alerts staff in the control room to a potential problem. Once the fire and gas panel shows the situation is sufficiently under control then cautious. 50% LEL cloud) The detection of gas leaks also of a specific size (i. The systems are generally not concerned with the detection of fugitive gas leaks. upwind approach from a position of safety can be attempted. The approach to the detection of flammable gas has moved away from trying to detect all leaks and now concentrates mostly on the following three distinct criteria:1. Most platforms have between 2 and 5 levels of shutdown. 0. Performance standards are used to set the initial design conditions to be met by the various detectors (see Section 3. then this is indicative of a real release rather than a false alarm. The detection of gas clouds of a specific size and LEL (i. more people are exposed through search and rescues attempts and the evacuation process becomes delayed. except in some special cases. Feb 2006 Page 51 of 261 . under this system. 2. 5 metres. modern and old. 3.1kg s-1 to 2.fireandblast. turbine enclosures.

as they drift through areas of plant. and not automatically assumed to be 20% LEL for low level and 60% for high level alarm. as these detectors do not automatically provide indication of a faulty pellistor. Strengths Well-understood item. The suitability of the set point each application should be documented.com Table 3-1 Summary of methods of gas detection Method of Gas Detection Single point Pellistors These detect the presence of gas when it reaches a detector head. Calibration settings for LNG (methane). Heavier or lighter than air gases require increased numbers of detectors and present difficulties positioning to avoid damage at low level and maintenance access at high level. Different set points will be necessary for different applications. Access for frequent maintenance and testing is essential. Note: On older installations where there is heavy reliance on pellistor type detectors. for this service. They generally require a high level of maintenance due to drift. Location in an air intake duct is an arduous duty for this type of detector Executive action occurs on 2oo3 voting. For natural gas releases. Good designs should allow gas clouds to be tracked. Not very effective for small leaks in open areas. suitably located are required. Have historically been used for detection of gas in air supply ducts to enclosed areas containing unclassified electrical equipment or other potential sources of ignition but not recommended now IR. condensate and hydrogen are all different. Always check proposed site and contamination issues with manufacturer. Must be calibrated and located appropriately for the vapours they are designed to detect. Feb 2006 Page 52 of 261 . Vapours heavier than air require detector location at floor level. 152-RP-48 Rev 02. They are good at detecting accumulations of gas.fireandblast. leading to unnecessary shut-downs. Very large numbers are required to adequately cover a typical fire zone Not preferred on new or upgraded installations. and recalibration due to poisoning. In this situation use in conjunction with acoustic detectors. beam detectors available. Unless the gas comes into direct contact with the detector head it will not operate so numerous detectors. I/R point detector with duct probe or I/R open path detector are now available. Weaknesses Susceptible to ‘poisoning’ of the catalyst by oil-spray and contact with other chemicals. Operators have found that alarm at 10 to 20% LEL and executive action at 25 to 40% is feasible for a well maintained system. from the safety of the control room. Susceptible to drifting if not regularly checked and maintained. This gives an added margin of safety while avoiding nuisance alarms. consideration should be given to setting the devices to give initial (low level) alarm at a levels just above the anticipated drift range of the device and high level alarm slightly above that. and better. LPG (propane). detectors need a high level location.

especially rain and fog and vibration Leak detectors (acoustic) These detect the noise made by any significant leakage from a high pressure gas (whether flammable. Care should be taken when subsequent work is being carried out on the installation. These detectors are least sensitive to methane.fireandblast. sheeting for weather protection or painting. toxic or inert) system. propane. but this can be achieved by one man with an interrogator tool. Weaknesses Not good as the prime detector type for open process areas as large numbers of detectors would be required. air. whether hydrocarbon. Detectors can be sited at the boundaries of modules of fire zones to provide economic coverage of large areas. ducts etc (with a duct probe unit).e. Feb 2006 Page 53 of 261 . Very little maintenance necessary. Will detect any significant leak in vicinity without contact with gas therefore large numbers of detectors not necessary. so when calibrated for methane will also detect other gases i. providing good information on gas migration. when there might be the potential for blocking beams by scaffolding.com Method of Gas Detection IR point detectors Strengths Very good at detecting flammable gases at potentially known locations. 152-RP-48 Rev 02. effectively taking the place of numerous point detectors. These detectors need to be located with easy access for routine testing. This type of detector is good for confined areas. Discussions with equipment vendors should be initiated to understand the frequency range over which the detectors will work. Not susceptible to poisoning. butane etc more readily. N2. These detect the presence of a cloud of hydrocarbon gas between a detector head and its reflector Some early versions could be activated by adverse weather. Area mapping of background noise is necessary to enable the correct alarm setting to be established. Very good at detecting gas clouds in open process areas. Hence caution is necessary when arranging the shutdown logic and when placing the detectors. Usually only two or three detectors are required in a typical process area. IR Beam (open path) detectors. These detectors will detect a high pressure leak of any gas. Very little maintenance or calibration required during the life of the detector (in excess of 5 years). CO2 etc. with respect to any regular discharges of air (such as near air compressors).

4. There is no such change in the compensating element and the output signal of the detector is based on the imbalance between the two resistances. Flammable gas contacting the catalytic surface of the detecting element is oxidised causing a rise in temperature of the active element.2.1 Infrared detectors An infrared gas detector consists of an infrared source and an infrared detector. a detector that is obscured or has failed registers zero infrared radiation and the alarm signal is activated. Specific gases are detected by measuring the amount of absorbed infrared radiation at specific wavelengths. Personnel should always be vigilant and report small leaks for Investigation.4. Infrared detectors will not “poison” and can operate in inert atmospheres. Pellistor sensors can give accurate readings under adverse environmental conditions as changes in ambient temperature. one of which is an active catalytic detector and the other an inactive compensating element.com Method of Gas Detection Note: There has been reluctance by the industry to embrace acoustic detection.1. Infrared detectors are fail-safe. chlorine.1. Weaknesses Manual CCTV (see under CCTV in Table 3-2 ) 3. sulphides. Strengths Concerns about spurious activations by background noise can be averted by designing in recognition of other noise signature in vicinity and possible use of pre-set time delays before alarm initiation. the difference is related to the concentration of gas present.2. the gas absorbs infrared radiation and lower radiation intensity is registered at the detector. Pellistors can be poisoned or inhibited by silicones. humidity or pressure will impact both elements. Feb 2006 Page 54 of 261 . this rising temperature increases the resistance of the active element. Small gas releases would not generally be picked up. 152-RP-48 Rev 02. When flammable gas passes between the source and detector.4. It is still regarded with suspicion as ‘new technology’ despite nearly ten years of successful use in the Southern North Sea. The detectors require regular cleaning and calibration. They can be used in confined spaces where oxygen depletion might have otherwise limited the effectiveness of a pellistor detector. release and atmospheric variables. Most small leaks are still detected manually especially on open design platforms Cheaper and readily fitted especially on large installations or on extensive process areas. lead and halogenated hydrocarbons. in which the gas diffuses into the detector or in an open-path format where the source and detector are separated (thus a line of sight detector). Visibility of large gas releases depends on numerous process. Allows operator judgement on how to deal with the situation.2 Additional notes on detector types 3. repair and monitoring. IR detectors are available in either a fixedpoint format.2 Pellistor detectors A pellistor detector consists of a matched pair of elements.fireandblast.1. Pellistor sensors also require the presence of oxygen in order to operate. Initial calibration of detectors in their designated location is essential. (with an impact on maintenance costs). 3.

These systems are relatively high unit cost and there are additional maintenance requirements for checking and keeping air-sampling tubes clear. or wired to the F&G control panel for executive actions and/or shutdowns. The uses. behind instrument panels. above cookers. both automatic and manual for containment and control. strengths and weaknesses of the most common types are outlined below Table 3-2 Summary of methods of fire detection Methods of Fire Detection Smoke Detection: Ionisation Smoke detectors detect the visible and invisible products of combustion as they come into contact with the detector. There are many types of fire detection device available on the market.fireandblast. They are available in a wide range of versions to suit different needs. These detectors are particularly suitable in areas with high air flow ventilation.4. as the smoke is usually dispersed before reaching detector. Strengths Weaknesses Optical Smoke detectors detect only visible smoke and rely on the ‘light scatter’ principle VESDA (Very Early Smoke Detection Alarm) or HSSD (High Sensitivity Smoke Detection) These pull air samples from areas susceptible to electrical fires to a small analyser and check for smoke or pre-combustion vapours. The detectors can be wired in series with up to 20 detectors on one loop. MCC or switchrooms. locations. Care is needed with disposal since they contain a minute radioactive source Not advised for use in areas where some smoke is expected in normal operation e.g. The very early warning allows personnel to enter the room to investigate and/or isolate power supplies without undue exposure to risk. 152-RP-48 Rev 02. No one device covers every fire situation.g. Widespread use in enclosed areas such as accommodation modules. Not advised for use in areas where some smoke is expected in normal operation e. The earlier a fire can be detected the earlier personnel can be warned and steps taken. Alert personnel to the incipient development of a fire situation e. Widespread use in enclosed areas such as accommodation ceiling voids. electrical equipment and control rooms. These detectors have a high resistance to contamination and corrosion. These are being widely used to replace Halon systems removed from control rooms. especially in unmanned control rooms or in cable routes.com 3.g. above cookers. These detectors have a high resistance to contamination and corrosion and are available in a wide range of versions to suit different needs.2 Detection of fire events Early detection of fire is crucial. Not effective in open modules. The detectors can be wired in series with up to 20 detectors on one loop. They can be alarm only. Feb 2006 Page 55 of 261 .

As above for fusible bulbs. Strengths Weaknesses UV flame detection Widely used and well understood. The lens of each detection unit needs regular checking for dirt build-up which prevents effective operations of the device. Typically installed under turbine/compressor hoods. Generally specialist mapping techniques are used to optimise detection and ensure adequate coverage is achieved. reducing the effectiveness of the detector. dependent upon their relative location with respect to the fire. Fusible links These melt at pre-defined temperatures to raise an alarm/ESD by breaking a circuit. Fusible bulbs A these devices require a heating effect that causes failure. Spurious alarms may occur from other.g. Detect the bluer flame types. Feb 2006 Page 56 of 261 . Video flame detector (makes use of specialist flame imaging technology) Very good at detecting flaming fires.com Methods of Fire Detection Flame Detection IR flame detection Widely used and well understood. Fusible plugs As above for fusible bulbs. Sophisticated versions can be set up to mask out known flame sources e. Some directly initiate release of hydraulic fluids to close safety valves on wells or risers. These can provide conventional alarm signals plus a video image if required. This system does not rely on electrical power for satisfactory operation and deluge release. The bulbs may also subject to physical damage and corrosion which could lead to false alarms. By the time the bulbs operate. An extensive pipe network is required (linking the bulbs to the detection system) to provide coverage of full module. Possibly the way forward for ‘Greenfield’ projects. Detect ‘yellow’ flames. These melt in fire situations to send an alarm signal and release hydraulic fluids thus closing well and riser safety valves. They also usually either release water directly or release air to activate deluge systems. but weak on bluer flames (e. platform flare. Used to detect the infra-red wavelengths of hydrocarbon flames.g. so not suitable in areas where ‘black body radiation’ occurs. significant damage may have been done. These bulbs break at a pre-defined temperature and raise an alarm/ESD. Often used in combination with UV detectors where several types of fire can occur in one module.fireandblast. methanol fires). 152-RP-48 Rev 02. Unit cost may be high but fewer units required to cover a typical process area. To avoid spurious alarms higher numbers of detectors are required to provide voted logic. they may take significant time to detect a fire (for example compared with optical (IR/UV) detectors). Used to detect the Ultra-violet wavelength of a flame spectrum. As for the infra red detectors. Vision of units can be obscured by smoke or equipment (especially forgotten ‘temporary’ items). Typically 4 to 16 detectors would be needed to cover a module depending on module congestion and dimension. solid objects or smoke will obscure the cone of vision. non-fire IR sources.

Highly reliable as a single detector. Highly reliable as a single detector. confirmed fire signal Detects a pre-set high temperature. but many of these control methods will be relevant to most installations. The following control methods are commonly in use offshore. Highly reliable as a single detector.1] or IEC 61511 [3. they can be controlled (once detected) to reduce the size. Weaknesses Rate of heat rise . confirmed fire signal. and escalation potential of the fire. duration. Systems with good coverage can be expensive to install and maintain. Allows escape routes from TR to evacuation points to be checked and state of fire development in process areas without exposing emergency response personnel to danger. • • • The required target reliability of the Fire and Gas detection system must be specified by the Project team to the manufacturer at the outset of the system design (if not already specified in the invitations to tender). the reliability and failure modes of instrumented safety systems must be considered along with hazard probabilities and demand rates. Fault alarms should not be cleared until the fault is investigated and removed. Detects temperature change. Gaining in popularity and reducing in price with time.2] (the latter being the requirements and assessments of safety instrumented systems in the process industries sector). Based on thermocouple design. All platforms are different. As part of the current application of IEC 61508 [3.fireandblast. Useful in areas with temperature fluctuations. confirmed fire signal. Significant redundancy in field devices.4. Best practice for new designs relies on good levels of redundancy in the electronic system architecture (usually dual or triple redundancy) and will include the following characteristics: • Electrical fault monitoring to detect any electrical discontinuity faults which have occurred in the system. Guidance on assessment techniques and avoidance of failure modes can be found in this document. It will be difficult (and extremely expensive) for anyone but the manufacturer to produce the reliability figures once the system is already built.Rate Compensated Fixed The reliability of the fire and gas detection system needs to be designed in at the outset of design and then maintained at a high level of reliability and availability throughout the platform’s operational phase. Conventional CCTV used to supplement traditional fire and gas detection devices Particularly good for checking alarms in remote areas such as column bases on semi-subs.com Methods of Fire Detection Rate of heat rise Strengths Detects rapid temperature change. 3. Fire and explosion survivability for detectors and cabling. Uninterruptible power supply. Feb 2006 Page 57 of 261 .3 Control methods Where fires cannot be prevented. Note that extinguishants and manual 152-RP-48 Rev 02. Not as fast reacting as the rate-of-rise detectors.

Topsides valves to fail close Locate away from supply vessel routes. Protect valve and exposed riser sections against foreseeable fire scenarios Always consider benefits of subsea pipeline isolation. Locate the valve such that uncontrolled events just the far side of the SSIV will not pose a radiation problem for the installation. Some typical fire related operational and design considerations are provided for each control method in Table 3-3 below.5. even a simple NRV may provide significant risk reduction. Automatic .fireandblast.Reduces inventory available to leak or fire by isolating process into separate. it becomes possible for hydrocarbon which is stored in one module to be released into another module and fuel escalation of further fires. Riser ESDVs – (Topsides and subsea) Automatic . The mitigation methods are addressed in Section 3.com firefighting are considered below as control methods. Deluge systems and passive fire protection methods are classed as mitigation methods because they generally protect against the impact of an existing fire rather than working to control the fire itself. ESDVs are frequently used at module boundaries to prevent inventories from one module feeding a fire in another.Isolates platform from pipeline inventories at the topsides. Feb 2006 Page 58 of 261 . smaller.Isolates platform from pipeline inventories at a defined distance.Removes people to place of relative safety 152-RP-48 Rev 02. segments. Regular test of process ESDVs often neglected. Note that riser ESDVs are a requirement in the UK Continental Shelf under the Pipeline Safety Regulations. Specify and justify test interval and acceptable leak rate as part of design. Justify and record basis of decision. Any prolonged fire necessitates evacuation as a precaution OIM and deputies must understand escalation mechanisms and timeframes for all emergency scenarios in order to be able to make competent decisions. distances are often of the order of about 250-350m. Topsides valves to fail close Locate away from process fire areas wherever possible.Isolates platform from reservoir inventories Automatic .. these divisions then match the designated fire areas and their associated firewater coverage. Surface and downhole valves to fail close on confirmed fire or gas release event. Record in performance standard documentation In fire situations several ESDVs plus adjacent pipework may be engulfed at one time. Sub-sea Isolation Valves (SSIVs) Well head and downhole isolation valves General Platform Alarm (GPA) Automatic . releasing several inventories to prolong fire. Where no such boundary isolations are in place. Fire Related Design Considerations Ease of testing and maintenance. Table 3-3 Summary of methods of fire detection Control Method Process Emergency Shut Down Valves (ESDVs) Control Mechanism Automatic . incoming jack-ups and other potential sources of dropped objects or dragging anchors.

5. Note that even with training. Appropriate blowdown time to be developed from escalation scenarios Process facility drain Usually manual facility Consider vulnerability of dump line route Consider time required for draining Appropriate for very small fires . Foam application Suitable for contained liquid fires. cellar deck surge tanks) Manual fire intervention with hydrants. foam monitors. removing heat. Automatic facility recommended. Creates film/foam to prevent oxygen reaching liquid fuel thus reducing. Effectiveness depends on understanding of installation-specific fire and escalation scenarios and plus realistic offshore exercises. Useful in enclosed.6. Extinguishants Stops fire burning by preventing oxygen reaching fuel. All personnel trained for small fire intervention. Any manual arrangements need clear and detailed instructions for operation to offshore staff. Useful in enclosed spaces such as machinery enclosures Deluge and fuel/water wash-off needs weight-control consideration. Automatic or Manual Removes main liquid inventories from vicinity of fire to a safer location (e.3. with or without foam. causing explosion – check potential with vendor.6 for a general review of Process Responses See also Sections 5. fire hoses. some types of deluge etc Reduces evaporation of vapours. Prevents fire from starting/taking holds by rendering the atmosphere inert – Inergen ©.Immediate intervention on discovery of small fire can prevent fire taking hold. CO2 etc. Fire fighting. remote spaces difficult to access in fire situations (e. Feb 2006 Page 59 of 261 . May be affected by strong winds. or extinguishing pool fire.g. particularly on floating installation. or otherwise interfering with combustion process – water-mists. Often used on helideck or open upper or weather decks.com Control Method Blowdown and blowdown valves (BDVs) Control Mechanism Automatic or manual Removes gases to flare or cold vent See also Section 6.g. not effective on jet fires 152-RP-48 Rev 02.fireandblast. extinguishers etc Fire Related Design Considerations BDVs to be fail-open. fire fighting teams that remain to fight a fire will be at greater risk.3/4/5 and 6. equipment cooling and helideck fire control only possible where trained fire teams available.2/3/4/5 for details on how the approach described in API 521 impacts blow down rates and subsequent consequences. unless this endangers helicopter operations and pre-warning not feasible. foams. Less effective on running pool fires. Inerted atmosphere may not be breathable so warnings and pre-discharge alarms required. pump rooms in semi sub or ship hulls) Static discharge may ignite atmosphere. Manual fighting fire Remote manual fire fighting Inerting agents Initiation of fixed or oscillating fire monitors. Comparative risk issues must be understood and precise criteria defined to limit fire fighting team’s exposure.

they can also concentrate a fire around the equipment in the bund and should be used in conjunction with foam. if either side is exposed to a standard fire test.com Control Method Dirivent systems Control Mechanism Disperses very small leaks to prevent flammable cloud buildup.1.5. after 60 minutes the average temperature on the unexposed face will not increase by more than 139°C above the initial temperature and also 152-RP-48 Rev 02. There are several grades of pre-defined firewalls and a fire risk analysis will generally choose an acceptable defined standard rather than develop a bespoke standard (unlike designing a blast wall for explosion hazards).fireandblast. not least how their integrity is maintained following an explosion event.1 Firewalls Dedicated firewalls are often used to physically separate fire areas. 3. systems or personnel in the area being protected. These issues are discussed further in Section 4. Sea-fire possibilities and consequences need checking In emergency scenarios environmental issues become secondary to preservation of life.2 Class A-60 division A division similarly constructed as A-0 and is additionally insulated with non-combustible materials so that. Provides air exchange within an enclosed area to prevent or slow flammable cloud build-up. 3. Feb 2006 Page 60 of 261 .5. System needs special attention to be able to provide adequate air flow rates and be safe. The basis of the separation and the specification of the firewall are dependent upon both the fire types and severities identified in the “fire hazard” area and the vulnerabilities of the equipment. to not introduce any ignition sources and also not move the fuel/air mixture to other areas hitherto safe within the context of the originating accident.5.5 Methods for mitigating the effects of fires 3. Other systems HVAC Bunds Control releases spread of liquid Drains Remove liquid and deluge releases to drain system.1. Fire Related Design Considerations Only effective for fugitive (very tiny) leak scenarios System shuts down on in major release scenarios as may spread leak and mix release to flammable concentrations. where interactions with explosion hazard management are discussed in more detail.e. Firewalls’ continued performance is highly dependent upon the preceding and succeeding events. Small releases are usually within drain system capacity. 3. i. While bunds can contain a liquid release/fire.1 Class A-0 division A division formed by a bulkhead or deck that is constructed of steel or an equivalent material and suitably stiffened. The drain capacity needs to be capable of removing maximum foreseeable liquid volume release although the effects of burning liquids in the drain system must be checked. It should prevent the passage of smoke and flame after 60 minutes of exposure to a standard fire test. Some of the general terms for firewall specifications are described below. Design must ensure deluge does not cause bund overflow by being sized for maximum foreseeable liquid volume release.

the “penetration” must be arranged so that fire resistance standard of the division is not impaired.5. after 120 minutes the average temperature on the unexposed face will not increase by more than 139°C above the initial temperature and also that the temperature at any point on the unexposed face. Temperature Point 1 2 3 4 5 6 7 Time interval (N minutes after start of test) 3 5 10 15 30 60 120 Exposed Test Temperature (increases in °Celsius) 880 945 1032 1071 1098 1100 1100 3.5 The “standard fire test” The "standard fire test" is a test conducted in accordance with Regulation 3.44 m.com that the temperature at any point on the unexposed face. 3. and is exposed in a test furnace to temperatures corresponding approximately to a time-temperature relationship defined by a smooth curve drawn through the exposed test temperatures (indicated below). Feb 2006 Page 61 of 261 . measured above the initial furnace temperature.65 m2 and a height or length not less than 2. Similarly.1.1.2 of Chapter II-2 of International Maritime Organization International Conference on Safety of Life at Sea [3. any openings such as doors or other access 152-RP-48 Rev 02.7 Penetrations and closures in firewalls Where a firewall of any class is pierced for the passage of electric cables.5.5. including any joint. will not increase by more than 180°C above the initial temperature.5. the average temperature on the unexposed face will not increase at any time during the first 15 minutes (of that test) by more than 139°C above that initial temperature.3]. It is insulated so that if either face is exposed to the first 30 minute period of a standard fire test. 3. ceiling or lining that is constructed and erected entirely from noncombustible materials and prevents the passage of flame after exposure to a standard fire test for 30 minutes. pipes.4 Class H-120 division A division similarly constructed as A-0 and is additionally constructed to prevent the passage of smoke and flame after exposure to a “hydrocarbon fire test” for 120 minutes.6 The “hydrocarbon fire test” The "hydrocarbon fire test" is a test in which a specimen division which resembles as closely as possible the intended construction and includes (where appropriate) at least one joint and has an exposed surface of not less than 4. will not increase by more than 180°C above the initial temperature.1.1.fireandblast. including any joint.1. trunks or structural elements or for other purposes. will not increase by more than 225°C above the initial temperature after exposure for 15 minutes.5. if either face is exposed to a hydrocarbon fire test. The temperature at any point on the unexposed face.3 Class B-15 division A division formed by a bulkhead. including any joint. 3. It is insulated with non-combustible material so that. 3.

3. For any of the systems outlined below it is up to the designer to demonstrate initial suitability of the PFP system to the IVB and HSE.2.2.fireandblast. distorting or producing noxious fumes. 3. Some considerations around standard fire tests are discussed in Sections 6.2 Passive fire protection methods Passive methods are preferred where specific protection of critical process or structural items is needed in order to prevent escalation. Now. best design is to design all PFP systems to be appropriate to the specific fire scenario for which the PFP is required.4 and 4. They have been used extensively offshore since the 1970s. inspection and maintenance/replacement issues. accommodation block were given A60 walls regardless of the fire risk to the accommodation. pipework. Passive fire protection (PFP) comes in many forms. However it has also been the cause of problems in the past so current best practice concerning the design and application of such systems. If properly applied/installed it is highly reliable in service. classification of the protection is relatively easy to 152-RP-48 Rev 02. PFP can be designed for use on vessels.1 Cementitious or vermiculite type These are heavy mineral-based based coatings which can be applied to walls. mechanical or instrument as appropriate for the item being protected) and the safety engineer.2 of this guidance.1 and 6.5.5. Since the properties of cementitious or vermiculite coatings are well researched and many applications have been extensively tested. The thickness of the coating principally determines the time it takes to transfer the heat through the coating and the mechanical strength of the compound or sometimes an extra outer shell. determines whether the coating will withstand the physical impact of the fire.5. structural. but the object is always to provide some sort of heat insulating barrier between the fire and the item to be protected. Previously the design emphasis was on application of codes and rules. or existing products in severe or novel applications such classification is not easy to obtain and the demonstration of suitability will have to be via specially devised fire tests or research. Widespread application to process and structural items is not generally feasible due to weight. and the duty holder to maintain the protection throughout the lifecycle. for example erosion from jet fire impingement or pressure waves from explosions. However for some of the newer products. Feb 2006 Page 62 of 261 . For some of the common systems initial suitability is easy to demonstrate since the manufacturer will have a standard fire test certificate (such as A60. For example. is discussed below. boundary walls or individual items of safety critical equipment. B15. PFP is preferred over deluge in such situations since it is immediately available and has no moving parts to fail and prevent operation.com hatches must match the integrity of the division when closed and in the case of doors be selfclosing. or H120) for the proposed system. The following types of PFP are in current use and their uses and drawbacks are discussed in the paragraphs below and further in Sections Sections 4. 3. losing function. structural members. Modern design philosophy is to identify specific areas or items of concern (usually structure or piping which on failure would escalate the initial event) and target these items for PFP application. PFP can be effective in protecting against high pressure jet fires whereas deluge is not The system is usually designed by the PFP supplier’s engineers to the scenario-based specification of the relevant discipline engineer (process. structure or pipework in a wide variety of ways from spraying or trowelling to bolting-on of pre-formed sections. There are many different types available. The objective is to prevent the protected item heating up and either losing strength.

3. A joint industry research project is underway by MMI to determine which types of damage to PFP are most critical and what are the most effective repair methods. Feb 2006 Page 63 of 261 . Further discussion of common types of PFP application. for calibration purposes. In the 1980s and early 1990s the biggest problem with use of these coatings was that the offshore installation process was carried out poorly. Therefore. Some coatings just disintegrated with time.2 Intumescent coatings: Intumescent paints and coatings work by expanding to many times their original thickness on exposure to high heat or flame to produce a fire resisting. removable systems are not practical in many places.2. coated and uncoated. It would be possible to plan for such NDT inspection if the designer specified at the outset that sample pieces of steel were taken and kept. Some systems have been tested and found capable of withstanding the impact of high pressure jet fires. 3. For new builds it is possible to plan for future inspection through the coating. For retrofitted systems. Removable PFP. being generally heavy. Although intumescent coatings can now be applied in fairly thin layers. The possibility of corrosion under PFP coatings is a major concern for designers. Research continues but no viable methods exist at present.3.2. proper preparation of surfaces to be coated with intumescent PFP is essential for long-term performance. Intumescent systems can be specified to provide fire protection for anything from minutes to hour. flexible wrap systems etc is provided in Section 7. HSE and HSL are continuing a programme started by Shell which will report on the effects of 10 years of weathering (and ageing) on the fire resistance of PFP. Retrofitted systems remain problematic. and many systems have been through fully documented testing.fireandblast.com obtain. use in underdeck or other exposed areas and particularly in the splash zone usually requires a thin neoprene layer under the coating and another on top to prevent external corrosion and protect the coating. thermally insulating coating or ‘char’. effective NDT through PFP coating systems is not practically achievable at present. However it is difficult to exercise control over application in the offshore environment. This would allow results to be interpreted with more confidence. Many poorly applied coatings fell off after a few years. Both cementitious and intumescent coating systems are continually changing and developing so details are best obtained directly from the manufacturer. 152-RP-48 Rev 02. Deluge water found its way beneath coatings and the fixing pins or protected items (particularly where they were warm) corroded rapidly.3 Weathered and cracked PFP Since much of the PFP in existence on offshore installations at the current time is suffering from ageing. such as PFP in firewalls. without these calibration aids. Products have improved significantly since the early 1990s and recent experience has demonstrated that provided these systems are installed in full compliance with the manufacturers’ instructions. wherever possible for new designs. Any such thick or composite coating makes subsequent NDT inspection results extremely difficult to interpret.2 on Fire Protection Design. 2 separate projects have been initiated. there are few problems. However. enclosures. and they usually give off toxic gases when they intumesce. especially in exposed areas and below main deck levels.5.5. As for the cementitious PFP. The effects on adherence to substrate plus the migration of toxic gases to affect personnel need taking into account during design. in the form of enclosures or blanket wraps can be removed to allow corrosion checks and inspection/maintenance of protected equipment. costly and requiring space. coatings should be installed onshore under controlled conditions before float out. out as explained below. Like the mineral-based coatings discussed above they are available in a variety of forms to suit a wide variety of applications from protection of deck undersides to sealing of piping or cable transits. Wet-applied intumescent coatings often shrink slightly as they dry out.

2 and 5. Feb 2006 . Larger droplets however require bigger pumps. Directed water deluge using high velocity nozzles may be used as trials have indicated an increased effectiveness against jet fires. weathering or plain damage to PFP can cause a loss of water-tightness and thus lead to water penetration and potential corrosion. the Page 64 of 261 • • 152-RP-48 Rev 02.1 Mitigation by deluge water application Deluge works mitigates the effects of fires principally by providing cooling both to the fire and to equipment exposed to radiant heat from the fire. This in turn creates difficulties for the maintenance teams to inspect and monitor potential corrosion points under PFP.3 Active fire protection methods 3. At the present time there is no method for calculating the protection provided by this mechanism.fireandblast. If the droplets are too large there is less evaporation from fewer droplets and the cooling is inefficient for the amount of water used. The deluge rate and droplet size must be suitable for the cooling mechanism appropriate to the type of fire. however. much of the film is likely to be displaced by the jet flame and the cooling effect lost. so the alternative is to deluge a whole module or section of structure with large quantities of water. 3.4. Objects subject to thermal radiation from fires (but not direct fire impact) receive benefit from attenuation of the water sprays active between the location of the fire and the object (see Section 5.4). but the general rules are: General deluge only protects equipment exposed to flame or/and radiant heat from pool fires or radiant heat from jet fires providing there is a sufficient deluge rate to provide a film of running water over the equipment. they evaporate rapidly in a severe fire or can be blown away if the area is exposed. Suppression of combustion and cooling of the high heat layer in the roof of a burning module (where the module is partially enclosed) is known to be achievable by spraying of very fine droplets at roof beam height. Protection of all the equipment in a module by application of PFP is rarely practical.5. Where a jet-flame actually engulfs equipment. Where there are several different scenarios. The deluge rate depends on both the fire scenario and the escalation potential. In addition it can wash away liquid fuel fires to drain systems or overboard. ageing. The droplets however are less affected by wind. In addition.1 discusses this design option in more detail. will reach the floor.5. more power.com Both projects were set to report in late 2005. and more AFFF so the cost of the system has to be balanced against its effectiveness. cool and wash liquid spills away and can provide a running film of water over equipment to keep it cool. Sections 5. For general area cooling the key factors are application rate and water droplet size.3.5.2 and Section 5.2 where the effects of deluge on different fire types are is described) Provide a running film of water onto equipment in the area in order to cool it Provide a screen of water droplets as a barrier to radiant heat. • Areas shielded from deluge but exposed to the fire will receive some limited protection from the heat attenuation of the deluge droplets falling between the location of the fire and the location of the equipment.2.3 discuss deluge protection options in the context of jet fires. The water acts to: • • • • • Cool the general area by evaporation of the smaller water droplets ( see also Section 5. If the water droplets are too small. thus reducing the heat load on structures and equipment Provide a screen of water droplets as a barrier to radiant heat exposure of people Retard the movement of the flame front through a module and consequently reduce explosion overpressures to some degree (see Part 1 of the Guidance).2.

Inergen ©).2.2 Mitigation by Sprinkler Systems These are usually potable water filled systems and provided in areas where the fire-risk is nonprocess related and therefore less severe. However. should be used as this should cover all lesser cases. which release water directly from the sprinkler piping as soon as the bulb is broken by the heat of the fire in the area. Enclosure type fires tend to be non installation-threatening (but always need due consideration within the fire and explosion review process for the installation) The protection is usually automatic and provides immediate control. Feb 2006 Page 65 of 261 . Therefore in the case of enclosed modules with potential for serious.3. which will be also be controlled by lack of air into the enclosure (provided there is no explosion on ignition).3 Watermist systems Water-mist systems are now commonly being used in turbine. They are activated by frangible bulbs.5. 3. 3.3. • Vessel deluge Further details on appropriate flow rates and other design issue for deluge systems are provided in Section 7. protection systems need to take account of manning regimes and hence should include warning systems to evacuate personnel as the mist systems are being armed. most notably CO2 which is a powerful asphyxiant which causes hyper-ventilation exacerbating the hazard.3. fire team action and/or evacuation needs to be covered in platform emergency response plans. pressurised oil.g.5. Whereas Halon systems actually disrupted the combustion process. in roughly 15 second bursts. The mist provides cooling and suppresses the combustion.fireandblast. with rapid activation and water coverage especially at roof-level where the high heat will concentrate. the CO2 option generates a low temperature upon release which has a cooling effect on the fire. generator or pump enclosures to replace Halon protection systems which are no longer permitted for use. for example inside accommodation modules.4. Replacement gaseous systems are: • • • Carbon Dioxide (CO2). gas or condensate fires deluge rates of 20 to 24 l min-1 m-2 would be needed. deluge of high pressure gas jet fires within enclosed spaces will very likely result in extinction of the fire and could lead to an explosion hazard. These alternatives function primarily by displacing the oxygen from the fire.com deluge rate for the worst-case scenario. Replacement Halon alternatives. however there are a limited number of mist-injection cycles available from the water reservoir and instruction/training for follow-up action by the platform personnel e.5. Replacement low oxygen alternatives (e. 152-RP-48 Rev 02. The fire extinguishing media can themselves present hazards. The fine mist is injected intermittently from pressurised water reservoirs/ cylinders. Design is straightforward by comparison with deluge systems and is usually in accordance with the applicable NFPA standards. 3.3. not all replacement media have the same effect. In enclosed spaces.g.4 Gaseous systems Gaseous systems have been a common replacement to Halon systems. although in addition.

Gas detection in open hazardous areas Functionality Detect low-level gas at 10 % (alarm) and high-level at 25 % (ESD 1. The principals of operation of the various sub-systems vary widely. Some examples of different functionalities within the same SCE Performance Standard are shown in Table 3-4 below: Table 3-4 Typical safety critical element functionality descriptions Typical derivation/ supporting documents Fire and Detection Philosophy Gas SCE Gas detection system Goal: Detect loss of containment events. It is important that the Performance Standard captures all the key information. not just part of it. Gas detection at inlets to enclosed areas containing non-certified electrical equipment 2. Executive action only on coincident gas detection (by beam detectors) in same area. availability.1 kg s-1 and above in process modules. parts or subsystems. In order to pass on the understanding of the design and operation of each system to those who operate and maintain the installation.com Inergen © has specifically been design to provide a “safer” fire-fighting medium within which personnel can survive. Confirmed beam-pair detection initiates ESD 2. Acoustic detection leak 152-RP-48 Rev 02. analyses and guidance documents which have a bearing on the performance.fireandblast.6. Detect gas leaks of 0. While the ‘goal’ of the overall system will be the same. Fire and Gas Cause and Effect Drawings Installation Safety Case In-house Vendor Design Code for Acoustic Detection 3. The ‘Fire and Gas Detection’ or the ‘Active Fire Protection’ SCEs for example will have many different aspects. 3. reliability and survivability of the system in question It is rare for platforms to have only one type of device within such systems. The Performance standards for SCEs should contain precise information relating to the functionality. 3 IR Point detectors in each duct on 2oo3 voting Detect 50 % LEL gas cloud of radius 5m or more using paired IR beam detection in process modules. the Performance Standards for each part of the SCE will probably be different and needs to be specified separately within the documentation.4. there are many different types of equipment available for the purposes of detecting fires and gas releases. In addition it should provide cross references to the various codes. standards. the key features of the systems are recorded for all to see and understand in the form of ‘Performance Standards’. providing only just oxygen to sustain breathing (with some difficulty) but not enough to sustain a fire. Sub-item 1. and for protecting against fire.1 Application of performance standards The fire and gas detection and protection systems on an installation are generally categorised as safety critical systems. close dampers. as do the availability and reliability requirements of the equipment involved. 3. S/D fan). Feb 2006 Page 66 of 261 . or ‘safety critical elements’ (SCEs) for the installation.2 Functionality issues As can be seen from Section 3.6.6 Performance standards 3.

Availability is not the same as reliability. A significant factor in generating a systems’ availability is obtaining an estimate of the level of unrevealed failure modes the system may be subject to. Passive Fire Protection 1. Similarly. Note that a jet fire rating has been proposed in the latest draft version of the ISO (22899-1) on the jet fire test.H120 firewalls 2.com Typical derivation/ supporting documents Firewater design philosophy Installation Fire and Explosion Analysis and Assessment In-house vendor design code for Water Mist Systems Safety Case Passive Fire Protection strategy Document. Feb 2006 . Activated on confirmed smoke or heat detection in generator room. Firewall at gridline 2. A passive coating for example is available 100 % of the time (assuming it has not been damaged or degraded in service).3 Availability issues These are often given limited consideration in Performance Standards. A passive fire protection enclosure or removable cladding on a vessel however may be removed for several weeks in the year to allow inspection of a valve or NDT of a significant part of a vessel. Water mist application in Generator Rooms A and B Functionality 12 l min-1 m-2 general area coverage in LP separator and oil metering modules with at least 3 % AFFF to cool equipment in vicinity of oil pool fires and prevent consequent leakage from other inventories. local manual surveillance for fire/gas events will be provided at all times. Installation Fire and Explosion Analysis and Assessment Vendor design Code for PFP suitable for Jet Fire impingement SCE Active Fire Protection Sub-item 1. • F&G detection system – During period of unavailability of fire and gas detection in an area due to essential maintenance. The availability is the fraction of time the equipment is available to perform its intended function. so that the design intent is correctly understood and upheld throughout the life cycle of the installation by the operations and maintenance personnel. Water mist injection to generator rooms to provide suppression and cooling. making them only partially available during maintenance or project related activities. J15 passive fire protection on First Stage Separator 3.Water deluge with AFFF in Process Modules including communicating mezzanine and deck levels 2. It is important that the person responsible for devising the Performance Standard also documents the assumptions made regarding availability. process area boundary. automatic Fire and Gas detection systems might be keyed out. Page 67 of 261 152-RP-48 Rev 02.fireandblast. Just as there are different functionalities there are differing availabilities associated with different methods or types of protection equipment. providing protection to TR and TEMPSC embarkation areas Fire protection of gas space of First Stage Separator to protect against jet fire impingement from gas export system and potential BLEVE.6. Activated on confirmed Flame detection (2ooN) voting. Some example maintenance arrangements for safety critical equipment are given below. It is important to understand the availability issues for any Performance Standard. This is specified as: Type of application / Critical temperature rise ( °C) / Type of fire / Period of resistance (minutes).

with reference back to the reliability studies carried out during the design of the equipment. 3.com • Evacuation Systems -. For example one or more of the communications Page 68 of 261 152-RP-48 Rev 02. The voting arrangements should always be stated in the Performance Standards. that the high reliability indicated in the Performance Standard is not being achieved. Where un-revealed faults in safety equipment could occur.Due to jet fire exposure potential. it is important to obtain an estimate of the level of unrevealed failure modes the system may be subject to. Voting arrangements for heat. the time to failure in actual service may be significantly shorter.6. theoretical calculations for a pellistor gas detection head. For example. If every time the gas detector is tested it fails to operate there must be immediate feedback to the responsible engineer. For example.4 Reliability issues Reliability and availability are two technical terms that are often confused. During maintenance this arrangement becomes a 2oo2 system. For this reason the maintenance or the inspection period used as key input to the frequency figure quoted must also be quoted in order for the reliability figure to be meaningful. Industry good practice has converged on 2 out of 3 voting systems (2oo3) which offer a “good” compromise of high reliability of having 3 items available and still leaving a working arrangement in the event of a single item failure plus the demand rate for spurious indications is lower as a confirmed signal is always required.5 Survivability The Performance component parts makes it clear to major emergency Standard must state the survivability requirements for each SCE and each of its where there are different requirements to those for the overall system. The “built-in” redundancy is unavailable during maintenance of any one item. Reliability is the probability that the system or item of equipment will perform its intended function when required to do so. using the manufacturer’s data may imply that an adequate reliability is achieved by a 6 monthly test and inspection frequency. It is strongly advised that platform specific information is used in evaluating equipment and plant reliability. temperature and pressure cycling and vibration.fireandblast. flame or gas detectors also have a direct bearing on the proposed frequency of maintenance interventions. 3. preferably from gathered “own experience”. Changing the frequency of inspection and maintenance will have a direct bearing on its stated reliability. Feb 2006 . The test frequency should then be adjusted (for example to a 3 monthly interval) until is can be demonstrated that an appropriate level of reliability is restored. In reality. test/ maintenance history must be monitored. has only one other item by way of redundancy plus a spurious indication from either item will cause unit or platform shutdown. This all concerned exactly how long the item will need to continue to function in a in order to fulfil its safety role.6. Manning will only be allowed within documented weather operating limits (2 m significant wave height) for Skyscape© evacuation system. The reliability details for each system or subsystem listed within a performance standard should be clearly stared. The manufacturer’s data may have been gained under laboratory conditions and produces times-tofailure information that may not be reproducible in the real offshore environment or otherwise represents an amalgam of accumulated data from a range of applications and maintenance regimes. Where reliance is placed on just one or two detectors to take executive action a review of the failure modes and the consequences of failure should always be undertaken and the consequences of maintenance changes need to be evaluated to ensure there are no knock-on effects to the platforms overall risk profile. It is also important to understand that reliability figures theoretically derived from calculations involving manufacturer’s data on ‘mean time to failure’ may be over optimistic. As noted above for availability. a detection voting system that requires 1 detection element to be activated out of a total 2 (known as 1 out of 2 and indicated as 1oo2). a standby vessel will be on close standby whenever the installation (normally unmanned) is manned. exposed to salt. It should be remembered that reliability requirements encompass unnecessary activation as well as failure to activate. Availability has been explained above. if the detector is then placed in an air inlet duct. smoke. spray.

fireandblast.com systems and the place of temporary refuge (TR) will be required to function as long as there are any personnel left on the installation. This may be anything from 10 minutes on a small NUI to 2 hours on a large installation. Individual fire or gas detectors however may only need to survive for long enough to detect the release or fire and initiate the necessary alarms, shut-downs and blowdowns. This may be only a few seconds. Valve actuation systems may need around a minute. Whatever the specified survivability, the information provided in the Performance Standard must be clear and unambiguous to the reader. Experience from major disasters both on and offshore indicates that failure to examine, understand and then communicate the survivability requirements of the provided safety systems to the right personnel has been a major contributor to the disaster.

3.6.6 Written schemes of examination (WSEs) or verification
The detailed schemes of examination or verification required under the PFEER and DCR regulations are intended to provide an independent check that: • • • • the initial design of the safety critical system/element is appropriate for the hazard; the SCEs have been procured; installed and commissioned to confirm that they achieve their required function; the maintenance being carried out is compatible with the reliability and availability specified in the Performance Standard; the maintenance activity takes into account the likely failure modes (especially un-revealed failures) of the components.

The written schemes must be thorough. Since they are derived from the Performance Standard documentation, any essential information omitted from these documents is in danger of being left out of either the maintenance scheme or the written schemes of the independent Competent Person, or both. This will lead to gaps in the platform safety management system. Such gaps may only come to light in the aftermath of a major incident. The written scheme is required to be “live” through the platform’s lifetime and may be re-affirmed at any time.

3.7 Methods and approaches to structural analysis
3.7.1 General
The risk level for the installation as defined by the risk matrix given in Section 2.7.4 determines the level of sophistication required for the fire assessment. If the conservatism of simplified methods of analysis can be guaranteed, then these could be used at an early project phase or as a first step in a sequence of analyses of increasing sophistication. For High or Medium risk installations, a ‘Structural Assessment’ should be performed for a representative range of fire scenarios. The process and Safety disciplines will generally define these Scenarios. A Structural Assessment may be performed at three levels of increasing complexity starting with a ‘Screening Analysis’. Should a structure fail the ‘Screening analysis’ then a ‘Strength level analysis’ will be required. If it fails the Strength level analysis then ‘Ductility level analyses must be performed. If the Ductility level analysis indicates failure then mitigation measures are required. These could involve measures for elimination or reduction of the frequency of exceedance of the initiating event, reduction of the severity of the consequences of the event or structural modification. ‘Failure’ in the context of fires means failure to satisfy the performance standards for the installation. High-level performance standards for the installation and safety critical components
152-RP-48 Rev 02, Feb 2006 Page 69 of 261

fireandblast.com are defined in terms of allowable peak temperature, strain or time to collapse depending on the method of analysis used. Screening Analysis, Strength level or Ductility level performance characteristics from an assessment of one installation may be used to infer the fitness for purpose of other similar installations, provided the framing, foundation support, service history, structural condition, blast and fire barriers and payload levels are not significantly different. In cases where one platform’s detailed performance characteristics are used to infer those of another similar platform, documentation should be developed to substantiate the use of such generic data. The required initial level of analysis depends on the Risk level assigned to the installation or the risk level associated with a representative set of fire scenarios. The risk category of the installation does not preclude the use of more sophisticated methods of assessment which may result in reductions in conservatism and hence cost, if they are considered more appropriate. Table 3-5 Appropriate method of analysis – fires
Risk level Low Analysis method Screening analysis Load calculation bases Allowable temperature (yield strength reduction to 60 % - see Table 3-6 and Table 3-7 Past experience. Medium High or Strength analysis Ductility analysis level Calculate peak temperature member by member, from nominal fire loads and fire extent. Calculate temperature - time history of primary members from fire loads time history and flame extent. Response calculation Design basis checks. Past experience for demonstrably similar platforms. Strength level analysis, Redundancy analysis Redundancy analysis, Ductility level analysis

level

A structural ‘Redundancy Analysis’ of a topside structure will indicate which members can be removed without collapse of the structure. In addition those members not supporting the TR, muster areas, escape routes or safety critical equipment must survive during and after the fire event for sufficient time to allow personnel on board to escape, allowing for the possible need to assist injured colleagues. The results of a fire response analysis will then indicate which structural members and SCEs must be protected to achieve the fire performance standards for the installation. Simple fire response analyses are usually performed based on the following assumptions [3.4]. • Unprotected structural members and panels have no variation of temperature through thickness or along their length. In practice the critical sections of the member are considered from the point of view of resistance. Fire protected structural members and panels have a constant steel temperature, the thermal insulation has a linear variation of temperature through thickness. Each member may be considered to have reached a steady-state, variations of temperature are due entirely to changes in boundary conditions and incident heat fluxes. Conduction between members need not be considered (except when considering coat-back requirements).

• •

152-RP-48 Rev 02, Feb 2006

Page 70 of 261

fireandblast.com • Thermal stresses due to restraint may generally be neglected as supports also soften during fire loading.

The methods of analysis identified above are discussed in the following sections.

3.7.2 Screening analysis
A screening analysis for an existing installation consists of a condition assessment which may involve a survey followed by design basis checks. Design basis checks consist of checking the basis of the existing design for the installation and determining if the methods used for the design are currently acceptable in the context of fire events. For a Screening Analysis, the Zone method may be used. The Zone method assigns a maximum allowable temperature that a steel member can sustain. This method does not take into account the stresses present in the member before the fire. The maximum allowable temperature may be read from Table 3-6. These temperature values correspond to a yield strength reduction to 0.6 of the ambient temperature values. The fact that a fire is an accidental load will mean that the allowable stress is the full yield stress value as opposed to about 60 % of the yield stress allowed for in the conventional design load cases. The yield stress corresponding to 0.6 of the ambient yield stress will then give an allowable stress the same as that for the structure before the fire. Higher strain levels than 0.2 % may give a proportionately higher decrease in Young’s Modulus giving an unmatched reduction in yield strength with the reduction in Young’s modulus exceeding the reduction in yield strength. The Zone method may then not be applicable [3.5]. Fire barriers must perform according to their required rating. A blanket critical temperature for all members may be postulated as in the Zone method. This critical temperature is chosen typically to be 400 °C as this requires no modification to the normal code checks if strains are limited to 0.2 % in an elastic Design Level analysis. This approach may result in unnecessary protection and may be unconservative locally to areas of high strain. It will not usually be necessary to protect every vulnerable member unless the scenario performance standards demand that the installation is required to re-start after a few days. The above method will indicate the protection of non-essential members from the point of view survival of the installation. The temperature calculation for each member is performed and measures are taken to restrict the temperatures to values below the critical temperature usually by the application of PFP (Passive Fire Protection). It will also be necessary to check that radiation levels on escape ways remain at acceptable levels (i.e. below 2.5 Kw m-2), to allow for personnel on board to escape.

3.7.3 Strength level analysis
Strength level analyses are conventional linear elastic analyses as used in design against environmental, operating and gravity loads. The loads used in such an analysis should be in a form which could be interpreted as a load case as used in the design process. In investigating the effect of a fire the ‘live’ loads such as contained liquids and storage may be taken as 75 % of their maximum values as is the case for the consideration of Earthquakes. Alternatively, live loads may be taken as the values used in the fatigue analysis performed for the installation if these have been properly derived.
152-RP-48 Rev 02, Feb 2006 Page 71 of 261

fireandblast.com The transfer of conclusions and load characteristics from the analysis of a geometrically similar platform with similar structural and process characteristics is acceptable for strength level analyses. In a strength level analysis a maximum allowable temperature in a steel member is assigned based on the stress level of the member prior to the fire such that the utilization ratio remains less that the corresponding value given in Table 3-6 below. The maximum allowable temperature in a steel member as a function of utilization ratio is given in Table 3-6 below. Table 3-6 Maximum allowable steel temperature as a function of Utilisation Ratio [3.6]
Member UR at 20 °C to give UR = 1 at Max. Temperature

Maximum Member Temperature °C 400 450 500 550 600 °F 752 842 932 1022 1112

Yield Strength Reduction Factor

0.60 0.53 0.47 0.37 0.27

1.00 0.88 0.78 0.62 0.45

If the primary structure on the installation have been designed for all credible fire scenarios to then the primary structure will be acceptable from a fire resistance point of view. Higher strain levels than 0.2% may give a proportionately higher decrease in Young’s Modulus giving an unmatched reduction in yield strength and Young’s modulus. Strength level checks may then give utilization ratios above unity. A Ductility level or ‘elastic-plastic’ method of analysis may be required. Table 3-7 gives the maximum allowable steel temperature as a function of strain. The peak temperature of each member needs to be determined for the fire event to check if the structural response remains elastic. Table 3-7 Maximum allowable temperature of steel
Maximum Allowable Temperature of Steel Strain % °Celsius 0.2 0.5 1.5 2.0 400 508 554 559 °Fahrenheit 752 946 1029 1038

Fire barriers must perform according to their required rating.

3.7.4 Scenario or performance based strength level analysis
In a performance or scenario based approach, the first task involves the definition of credible fire scenarios from the failure probabilities of vessels and piping, the inventory pressures local to the release point, the material released, the emergency shut down systems available and the
152-RP-48 Rev 02, Feb 2006 Page 72 of 261

fireandblast.com ventilation conditions. This information will normally be supplied by the Safety and Process disciplines. A scenario based Strength level analysis is performed in the following general stages: • • • Definition of a fire scenario. (See Section 3.2 “Fire types and scenarios”). The time history of the rate of release is calculated. If required, the probability of occurrence of the release can be estimated from published failure statistics and the numbers of past failures which are available for most types of vessels, flanges and process equipment generally [3.7, 3.8, 3.9, 3.10, 3.11, 3.12, 3.13]. Calculation of the burning rate for the fire geometry enables the extent and duration of the fire to be determined. The heat output from the fire in terms of radiation and the convection of hot air and gases may then be determined (see also Sections 5.3, 5.4 and 5.5). The heat incident on structural members and panels may then be used to calculate the temperature/time history of the member (see also Sections 5.4 and 5.5.3). For load bearing members, the temperature determines the appropriate values for the yield stress and Young’s modulus of the material of the member to be used in the structural analysis performed. For panels and firewalls, which are usually non load bearing, the important parameters are the temperature of the cold face and the time to reach certain limiting temperatures which determine the walls’ rating.

• • • •

It will also be necessary to check that radiation levels on escape ways remain at acceptable levels where immediate injury will not caused (i.e. below 2.5 kW m-2). A utilization ratio of up to 1.7 will be acceptable for members loaded in bending if a small amount of plastic deformation is acceptable. A different utilization ratio will be appropriate for detection of buckling. Shear stresses should be kept within the yield stress for the material at that temperature. Alternatively the yield stress may be enhanced by a factor of 1.5 to take account of the fact that fire is an accidental load. Modified code checks may be made on the structural members and if load re-distribution is neglected then the material effects and isolated plasticity may also be taken into account in the analysis. The occurrence of plastic hinging may be taken into account by factoring the acceptable utilization ratio by the ratio of the plastic ‘Zx’ to elastic section modulus ‘Sx’. This factor is generally greater than 1.12 and will be in the range 1.1 to 1.5. The member must be able to sustain the formation of a plastic hinge before buckling, i.e. be in tension or be a ‘plastic’ section. Use of the critical temperature approach may give an efficient scheme for the application of PFP in combination with a full non-linear elastic-plastic (progressive collapse) structural analysis. This type of analysis is referred to as a ductility level analysis for fire or explosion response calculations.

3.7.5 Redundancy analysis
An elastic linear analysis is performed to determine the minimal structure which will fulfil the requirement that escape ways will remain available for sufficient time to allow escape and that the TR integrity is maintained during and after a fire event.
152-RP-48 Rev 02, Feb 2006 Page 73 of 261

The determination of the critical structural members may be performed using an elastic structural frame model as follows: • • • Eliminate all non-critical structural elements by inspection. This method of analysis can take into account the load re-distribution which takes place when structural components fail and the time to failure of the structure considered. Remove these members from the geometry.7.com A structural redundancy analysis will determine which members are essential for the above. or allow a correspondingly higher utilization. Remove all members identified in step 1. Failure of a structural member is defined as collapse (where increasing displacement results in no net increase of capacity) under the imposed static gravity and operating loads.6 Ductility level analysis A ductility level analysis may be required for Medium or High Risk installations. If the software used for the ductility level analysis allows temperature dependent stress/strain curves to be input then the linearization will not be necessary. Methods of performing these calculations are discussed in the various parts of Section 6. Alternatively. A number of options for the linearization of stress/strain relationships at elevated temperatures exist.particularly relating to stability using the frame model. Identify those members with the highest utilization ratios . Conduction of heat from neighbouring structural components will also occur but may generally be ignored in the primary framing analysis. enhance the yield stress by a 1. with due regard to escalation potential. the reductions in yield stress and Young’s modulus may be calculated. Remove safety factors in the code check. Modify the static loading to represent the probable load at the time of the fire 75% of the loads associated with process contents and storage may be used as suggested for Earthquake analysis [3. • • • • 3. 152-RP-48 Rev 02. Once the steel temperature at a given time is known. Optimization of PFP (passive fire protection) thickness is rarely worthwhile as application of PFP to a given thickness is not sufficiently controllable.fireandblast. live loads may be taken as the values used in the fatigue analysis performed for the installation if these have been properly derived. Protection of these members with PFP will complete the assessment on the basis of a redundancy analysis.5 factor. Feb 2006 Page 74 of 261 . The thickness of PFP is controllable at best to within about 3 mm.14]. The levels of heat radiation and convection from the selected fire scenarios are calculated and the time history of the increase of temperature of the structural components is derived. Repeat step 6 and assess the remaining structure at each stage. In investigating the effect of a fire the ‘live’ loads such as contained liquids and storage may be taken as 75 % of their maximum values as is the case for the consideration of Earthquakes.

e. These limits are to prevent combustion of any material which may be close to the unexposed face. identifies Type of application / Critical temperature rise (°C) / Type of fire / Period of resistance (minutes) Here retaining ‘stability and integrity’ means that the passage of smoke and flame is prevented and that the load bearing components of the barrier do not reach a temperature in excess of 400 °C. A H J 152-RP-48 Rev 02. which are more severe. It will also be necessary to check that radiation levels on escape ways remain at acceptable levels (i. an unlikely event in the context of offshore topside structures.3] classification system for use on ships. Maintains stability and integrity for a period of 120 minutes when exposed to a hydrocarbon fire.5 kW m-2). whichever occurs first. This is. The type of fire is represented in a furnace test where the firewall is in contact with a furnace with a well-defined temperature/time relationship.e. A30 has a 30 minute time period during which temperature rise is below 140 °C.fireandblast.7. The three main ratings used offshore are: B Maintains stability and integrity for 30 minutes when exposed to a cellulosic fire. Currently proposed one in latest draft version of the ISO (22899-1). The temperature rise of the cold face is limited to 140 °C for the period specified in the rating. The temperature rise of the cold face is limited to 140 °C for the period specified in the rating. i.7 Assessment of fire barriers Fire barriers are given a ‘rating’ derived from the SOLAS (Safety of Life at Sea) [3. Their origins are unknown and. The hydrocarbon fire curve has a higher rate of temperature rise and attains a higher peak temperature. in many cases. Feb 2006 Page 75 of 261 . the limits may be excessively conservative. 3. Insulation failure is also deemed to occur when the average temperature rise on the unexposed face of a separating element exceeds 140 ºC or the maximum temperature rise exceeds 180 ºC. It will be necessary to use a ductility level analysis to take these effects into account. the spatial variation of thermal loading is not generally meaningful.com The scenario based strength level analysis method will not detect failures at intermediate or later times caused by thermal restraint from cold members. The temperature rise of the cold face is limited to 140 °C for the period in minutes specified in the rating. Originally they were developed for cellulosic fires as opposed to hydrocarbon fires. It is unlikely that this level of analysis will be necessary unless a single extreme event such as a riser failure or blow-out which puts the whole installation at risk is being considered. in any case. Maintains stability and integrity for a period of 60 minutes when exposed to a cellulosic fire. In view of the fact that a single scenario is only one among many. below 2. Imperfections or deflections for example due to a previous explosion will not be taken into account.

The higher the risk (likelihood x consequence) in an installation or compartment the greater should be the rigour that is employed to understand and reduce that risk.17]. from both the Duty Holder and the regulator’s point of view. Feb 2006 Page 76 of 261 . a ranking exercise for a number of competing feasibility options could easily make use of a 3 X 3 matrix.7. the notation differs between the three documents and has been adjusted for comparison purposes. this may entail choosing more comprehensive methods and analysis tools. The severity and duration of the fire will be functions of process flow rates.1 Overview of installation/compartment risk screening Installations are subject to different levels of risk. All three documents use risk matrices for risk screening. 3.16 and 3. making a decision on a protection option would benefit from the use of a 5 X 5 matrix. for example. the choice of preferred level of refinement should be dependent on the Duty Holder’s corporate background and their experience with the use of qualitative risk assessment. based on the severity of the fire. The solutions and protective measures for the installation with greater risk should be able to bear greater scrutiny. the documents are issued by UKOOA. manning levels. location and age etc.fireandblast. Table 3-8 Risk matrices from the three documents UKOOA Consequence H Likelihood / Probability H M L H H M M H M L L M L L API Consequence H H H M M H M L L M L L ISO Exposure level L1 H H M L2 H M L L3 M L L 152-RP-48 Rev 02. A 5 X 5 matrix will obviously offer a greater degree of refinement. its potential duration and the installation’s vulnerability to the event. and such a matrix is illustrated below (Table 3-8). pressures and inventory.com 3.8.7. The potential vulnerability of the installation will be a function of layout. whereas. A simple approach which is frequently adopted for qualitative risk analysis uses a 3 x 3 matrix of potential consequence versus frequency or likelihood of an accident or event. Other practitioners make use of a 5 X 5 matrix. the choice of refinement should be governed by the motive for the analysis. The overall categories of 3 published documents are shown.8 Approaches to analysis methods by risk level 3. API and ISO [3.15.

20] in the form of averaged and maximum heat fluxes. consequences. use them otherwise high sophistication analysis Low risk need not be considered further Risks require further study to define probability. mitigation M If nominal loads apply. Sections 5. (more than say 50.fireandblast. elastic analysis (nominal loads) If nominal loads apply. one TEMPSC load).18. Table 3-9 Notation and treatment of outcome of risk matrix by document Notation Likelihood/Probability H M L Outcome H UKOOA Likelihood High Medium Low UKOOA Requires high sophistication analysis API Probability of occurrence Higher Medium Low Risk API (Higher risk) Risk level must be reduced. This applies not only to the definition of the fire hazard but also to methodologies in handling the response of structures. the low risk methodology may be used. 3. Feb 2006 Page 77 of 261 .5 contain tables of revised nominal fire loads based on the results of recent research. piping. A suitable low sophistication means of defining the fire hazard is the use of valid nominal fire loads available in published codes and Guidance [3.4 and 5.8. cost Insignificant or minimal risk which can be eliminated from further consideration L It is also appropriate to note that uncertainties and/or sensitivities should be considered as part of the level of rigour of analysis chosen (based on the risk ranking). 3.7. 152-RP-48 Rev 02.com There is a large degree of similarity between the three documents. control. and other SCEs. the differences in notation and the differing treatment of the outcomes (risk) are summarised in Table 3-9 below. For example. Another acceptable means of fire severity determination for low risk installations is comparison with a specific past cases. The uncertainties and sensitivities should also dictate the approach to the ensuing analyses. Such comparisons should be supported by evidence that a structured assessment has been undertaken to identify areas of difference and that the original means of calculation were sound. a precautionary approach may be adopted where data are limited. the design is novel or manning levels are higher.2 Low fire risk installations Where the fire risk category for the installation is low. use them otherwise high sophistication analysis Use low sophistication analysis.19 and 3. Assess structure by considering scenario/event based approach ISO Probability of exceedance Risk level 1 (L1) Risk level 2 (L2) Risk level 3 (L3) ISO Significant risks which are likely to require prevention.

8.7. 3. “FPSO”. Feb 2006 Page 78 of 261 . storage and offtake vessel. The comparison process would incorporate consideration of the following factors: – The validity of the model used in the initial assessment. 3.7. this will warrant a commensurately high sophistication level of analysis. Escalation and interaction between fire and explosion scenarios shall be considered including the collapse of tall structures. storage and offtake have been used safely and reliably throughout the oil industry for many years. This level of analysis would normally involve: – A complete set of fire scenario investigations. Early installations were primarily floating storage and offtake vessels. storage and offloading systems 3. – The resolution and precision of the grids used in the calculation if a computational fluid dynamics or CFD method is used.8. it is recommended that for medium risk installations the choice of methodology for any particular task should be justified where it deviates from the high risk installation methodology. – The version of the fire modelling software used.3 Medium fire risk installations Where there are no suitable past cases for comparison. Therefore.8. the FPSO becomes an offshore producing installation.8 Particular considerations for floating structures.4 High fire risk installations Where the potential risk level on an installation or within a compartment is high. – Consideration of any substantial physical differences between this and previous cases. The ability of the installation and the safety critical systems on it to withstand the fire scenarios need to be accurately determined as any error could have a significant risk impact.fireandblast. then the level of analysis appropriate for high risk installations should be used for fire hazard assessment. – A combination of CFD and phenomenological fire simulation with knowledge of the frequencies of release and ignition. but today the modern floating production. and loading terminal all rolled into one unit. “FSO”. storage facility. – Time dependent and possibly non-linear modelling of the installation and systems response. – Determination and assessment of the structure and SCEs against the design fire loads including consideration of escalation potential. Consequently. The nomination of a typical installation to represent a fleet of platforms may be acceptable 3. 152-RP-48 Rev 02. The time before failure may also be an important consideration.1 Introduction Floating structures for production.com Extrapolation of data for the relevant parameters is not generally recommended but may be valid if a sound basis exists. includes processing equipment and a higher level of sophistication.

DP control rooms. This guidance document will adopt the OGP nomenclature and when considering an issue applicable to both types of floating installation will use the term F(P)SO. compartmentalisation. The effects of fire on these features are discussed further in the following sections. These differing methods of construction are governed by differing regulatory regimes. Feb 2006 . The F(P)SO solution is therefore less favoured for more volatile reservoirs.com The early “ship-shaped” vessels. the application of SOLAS and MODU codes without demonstration of validation by the additional risk assessments normally required by PFEER will be insufficient for the treatment of fire events. fire scenarios. purpose-built. both old and new.fireandblast. usually of one or two levels. The (potentially) long process and utilities decks and their orientation with respect to wind conditions will be affected by the weather-vaning of the F(P)SO. Conversions of tankers. The guidance in this section relies heavily on the published guidance of UKOOA.2 Marine life cycle considerations F(P)SOs usually consist of a marine structure supporting process and utilities decks of a conventional offshore construction. Some specific attributes to be considered on F(P)SOs are. took advantage of a severe downturn in the tanker market and were converted from relatively new tankers. although the added complexity of production facilities on the FPSO increases associated risk. [3. Segregation to avoid escalation of a fire can be achieved by separation of modules occasionally further separated by fire barriers. operations. (this may or may not help explosion overpressures but will impair the dispersion of released hydrocarbons). station keeping and stability. The layout should consider these additional hazards and the design should accommodate them to maintain levels of safety. More recently. particularly for FPSOs associated with long lived projects. engine rooms. continue to take place. The top decks should be designed to follow a hazard gradient from the most hazardous area with respect to fires (and explosions) to the least hazardous. • Fire-fighting in the enclosed compartments containing marine systems (e. fire fighting techniques will include inerting. developed in the 1980s. 3.22]. toxic products of combustion will be distributed downwind. the process and utilities deck areas will be large. weather-vaning with internal or external turrets or spread moored that maintain a fixed orientation. response characteristics of marine construction to fires and the vulnerability of marine systems associated with the motion. This will generally be from the turret outwards. The FPSO and the FSO present many of the same hazards to personnel and the environment. The fire risk analysis undertaken on F(P)SOs will consider the nature of the hydrocarbon fuel source as well. For the UKCS. F(P)SOs may be required to hold stored product in their cargo tanks for typically 3 to 7 days dependent upon their geographic location. (Some designs have used DP to adjust the F(P)SO orientation in the event of a release or a fire hazard Page 79 of 261 • • • 152-RP-48 Rev 02. There are many different types of design. the tendency has been to use new. the fields they are generally use for tend to be crude that can be stabilised fairly readily. for example.21] and the draft guidance being prepared by OGP [3. with the ramifications this entails for personnel access and the requisite alarms As the process and utilities modules are normally located above the vessels deck (and the cargo storage). the geometry of the layout.8. Due to the weather-vaning effects (either due to wind or current and their effects on the superstructure height and hull draft) the fires can escalate downwind and at the very least. ship-shaped hulls. generators). Due to the nature of the storage on F(P)SOs.g. A number of features impact fire related hazards on floating installations.

escape routes and piping runs may be very long and tortuous and personnel may need to pass the origin of the incident to reach the Temporary Refuge. (see bullet points below) a 5metre gap is not uncommon.) • On an F(P)SO. • Oil storage tanks – May present hazards in the form of either large scale storage of stabilised crude or with empty storage tanks containing potentially explosive mixtures. stability and station-keeping must be maintained at all times. The gaps provide other risk reducing and operational benefits but steps can be taken to reduce the likelihood of jet fires by careful layout and orientation of the higher pressure equipment. • • F(P)SOs also require specific consideration of major fire hazard and release scenarios unique to their design and operation. hoses and monitors. The space provided also allows jet fires from the underside of the process to reach other process or utility modules without any impingement to reduce the effect of the flame. both for normal operational and maintenance access as well as facilitating emergency response. Swivel connections. Buoyancy. Feb 2006 Page 80 of 261 . Consideration in the design of escape over long distances during incidents and incident escalation should be a key issue. A gap will allow “green water” to flow over the main deck without placing an excessive load on the process modules supports by creating restrictions and eddy current effects.fireandblast. these are often at the highest process pressure and pass the reservoir fluids prior to any cleaning or conditioning and are therefore subject to the F(P)SOs most onerous process duty. Jet fires on main deck – The process decks on F(P)SOs are often lifted clear of the cargo storage tank roof for several reasons. Correct fire-pump sizing and firewater-main hydraulic analyses will be required to ensure adequate pressure at deluge points. A gap allows a clear and uninterrupted space for long piping runs (both process piping and storage tank vent and balancing lines) A gap allows personnel access across the vessel. the shuttle tanker and F(P)SO are in relative proximity and the risks on either vessel are compounded by increased potential for escalation to another vessel. a source of releases – The turret contains a large number of swivel joints in order to function. The vessels are often located in difficult or remote places and will generally be designed to be “self-sufficient” for extended periods in the event that supply vessels cannot reach them. and the systems associated with these duties must be protected from fire hazards. Offloading and pool fires on the sea – Offloading to shuttle tankers is a regular event and poses a significant risk both on the F(P)SO and the shuttle tanker. Non-process hydrocarbon inventories – The F(P)SO is a power-hungry installation and requires substantial stores of diesel to maintain station. process and utilities power demands plus other life-support systems.com although the DP then becomes a Safety Critical Element and subject to the development of Performance Standards and integrity assessments required in the UKCS. The risks comprise the breakage or leakage of the transfer hoses and the potentially flammable mixing of hydrocarbon and air in the storage holds of F(P)SO and shuttle tanker. Fire water mains will also be extensive and distant from the fire pumps in the process area. During the offloading operation. • • • • • • • 152-RP-48 Rev 02.

8. It is recommended that the inert gas system comply in all respects with the requirements of SOLAS and the relevant IMO guidance notes. Design allowances should not be based on ideal crude conditions but should consider a realistic appreciation of operational practices. The normal method is to supply low oxygen content combustion products to the tanks from boiler uptakes or from an independent oil or dual fuel generator. escape of hydrocarbons. it is important that the venting system be designed to accommodate the maximum volume of volatile organic compounds (VOCs) vented from storage. local regulations or guidelines limit the amount of VOCs that may be released to the atmosphere. It is always good practice to adopt loading procedures that will minimise VOC emissions. The issue of VOC return lines and their use during offloading represents a key safety issue. 2. Anchor mooring patterns of drilling rigs during locating and moving. such as fishing. After purging. Due to the longer term storage (compared with most other offshore installations).3. 152-RP-48 Rev 02. F(P)SOs need special consideration due to the potential venting of hydrocarbons either near the process plant or near the flare stack.2 Vessel and marine considerations The layout of surface and sub-sea facilities must be carefully considered early in the design to account for the following shipping related hazards (that may give rise to loss of integrity and fire): 1.3 Application of fire hazard management to floating structures 3.8. the tank must be gas freed in order to remove the residual inert gas from the tank and replace it with a normal atmosphere containing 21 % Oxygen. Prudent operators may also consider maintaining 100 % redundancy for this critical component.1 Topsides considerations The storage and transfer of hydrocarbons on F(P)SOs present particular hazards to personnel and the environment and some of these have been listed above. potentially. Passing ships and local community activities.com 3. Allowance must be made the higher temperatures the vents will experience when venting during maximum production rates and as well as providing design allowances for possible process upsets. The atmosphere in the F(P)SO tanks is to be maintained in a ‘non explosive’ condition. There is a need to continuously vent hydrocarbon vapours during loading. The guidelines given in Chapter 10. Supply and maintenance vessels in relation to anchoring or dropped objects. 3.3.fireandblast. 3. Cargo tank purging must be carried out before introducing air to the tank to ensure that the atmosphere will at no time enter the flammability region. the offloading and reclamation point may be located close to the accommodation and TEMPSC. An added complication is that the offloading and reclamation systems may often be combined as a dual hose system and for F(P)SOs with stern accommodation. Calculations will have to be made at the design stage to ensure that carry over of hydrocarbons from the inert gas stack will not interfere with day to day operations. The operation of VOC reclamation represents a highly hazardous situation where flammable mixtures of hydrocarbons are returned to the F(P)SO.0 of ISGOTT [3. Feb 2006 Page 81 of 261 . In some areas. water and other contaminants in the crude can accelerate corrosion of the F(P)SO storage structure and systems resulting in premature failure and. This sections describes further measures that can be applied to the management of fire hazards in the F(P)SO topsides.23] should be strictly adhered to during this operation.8.

Additional reference material for Offshore Loading may be found in UKOOA’s guidelines for tandem off-loading from FPSOs/ FSUs to shuttle tankers. It should also be noted that thrusters may well be Safety Critical Elements.fireandblast.24] – With Special Reference to Harsh Weather Zones. This specialist subset is termed Mobile Offshore Drilling Units. MODUs are subject to Classification Society rules for design. as their motion characteristics are often not suitable for drilling in harsh weather. Thrusters may also be useful in fire or platform abandonment scenarios where the vessel can be rotated to clear fire or smoke from around production areas and living quarters and to provide a lee side for survival craft launch. the risk of a fire or explosion on one vessel affecting the other is greatest during offloading. load their cargo. Fire extinguishing systems. always in safety.25]. 152-RP-48 Rev 02. Though they are fundamentally different from each other. 3. construction. Semisubmersibles have more in common with floating structures while jack-ups have more in common with fixed structures. which will include manoeuvring areas and weather limits on operations for the tankers. moor.9. The parameters for achieving this. General areas of interest with respect to fire hazards include such items as: • • • • Structural fire protection layout plan for decks and bulkheads. Recommended sequence of emergency shutdowns. may be derived by means of a risk assessment study as described in OCIMF Offshore Loading Safety Guidelines [3. However. Generally. certificates are subject to renewal every five years with intermediate surveys of a less intrusive nature ranging from every year to every two and one-half years. avoiding interference with other moorings.9. and operation. [3. or IMO. They are vessels subject to the Conventions and Codes of the International Maritime Organisation. A small number of construction and well intervention vessels work in the calmer weather months. flowlines and risers as well as other field operations. Due to the vessels being in very close proximity. The field layout must also consider the need for offtake tankers to approach the F(P)SO. Safe access by offtake tankers. Most MOUs in the North Sea are of two types. unmoor and proceed to open waters. Hazardous areas.2 MODU classification The UK Safety Case Regulations do not stipulate design safety cases for MODUs. Semi-submersibles and Jack-ups. Ship-shape units are not often used for drilling.9 Particular considerations for mobile offshore units 3. Feb 2006 Page 82 of 261 .com 4. and thus emanate from a long-standing marine tradition. or MODUs. they do have one thing in common.1 Introduction Units that work in the North Sea will generally conform to three types of which two are more common. It is important that the F(P)SO is equipped with emergency shutdown and release equipment that will allow the vessels to part in the event of an emergency on one vessel. 3.

Helifuel.1 General MODUs are also subject to flag-state rules for operation under the conventions (roughly equivalent to regulations) and codes (roughly equivalent to guidance) of the IMO.27]. This is appropriate as hydrocarbons are seldom present on MODUs as much of their time is spent in transit between locations. Paint lockers. including: • • • • • • • • • • • • • • Fire control plans.3. Prevention of Pollution from Ships (MARPOL) [3. Conventions and Codes of the IMO are meant to apply to vessels on international voyages. Gas detection/alarms.9. Fire detection/alarms. Area or specific alarms. not when the vessel is undertaking its industrial function. Otherwise. codes and regulations 3. Certification and Watch-keeping (STCW) [3. Though these rules are prescriptive. Fire pumps.fireandblast. and nozzles.com The ABS published Classification Guidance contains a whole chapter on Fire Safety Features. Fire main. water spray. The flag-states are responsible for enforcing the conventions and codes of the IMO through their national legislation. Extinguishing systems (CO2. Hydrants. Fixed fire fighting systems. 3. portable extinguishers. Load Lines (LL) [3. Fireman’s outfits. foam. Minimising losses is important for underwriters so MODUs are able to benefit from loss reduction strategies of the world’s fleet of ships. In the main. and the considerable reservoir of experiences thus represented. it would not be able to obtain hull insurance.9. This tradition has within it the experience of thousands of ships but scant experience of live hydrocarbons. The most significant IMO instruments are the international conventions for: • • • • Safety of Life at Sea (SOLAS) [3. Marine tradition refers to conventional ships on long distance voyages who must cope with mishaps such as shipboard fires and explosions with faint prospects for immediate rescue. thus the threat of types of fires that occur on ships is given attention.3]. hoses. Standards of Training.28]. General alarm.3 Conventions. Page 83 of 261 152-RP-48 Rev 02. Any reader will quickly note there is a distinctly marine “feel” to the rules.). Obtaining and remaining in class is very important for a MODU.26]. Perhaps it is best characterised as highly worthy knowledge in its own right but not directly coincident with the newer oilfield traditions. etc. Feb 2006 . Other PPE. the great number of ships in the world’s fleet lends of validity through experience.

foam systems. Coverage includes: • • • • • • • • • • fire pumps. The 1989 Code addresses fire/explosion safety in the following chapters: Chapter 4 – Machinery installations for all types of units 4. and fire extinction The whole of Chapter II is relevant.2 SOLAS SOLAS Chapter II Construction – Subdivision and stability. and other hazards of electrical origin 152-RP-48 Rev 02. water systems.3. For the purpose of this guidance. covered later in this section. fixed gas fire-extinguishing systems. The 1979 Code [3. fire. and tankers are given and will be of interest for informational purposes.com • • Preventing Collisions at Sea (COLREG) [3.9. hydrants/hoses.9.33]. cargo ships.32].21. ventilation.29]. and other flammable oils Chapter 5 – Electrical installations for all types of units 5. boiler. etc. Feb 2006 Page 84 of 261 . Two versions of IMO MODU Code are also important. safety system. fire.3.fireandblast.7 – Arrangements for oil fuel.34] is meant to be applied to units constructed after 1 May 1991. the 1979 and 1989 versions of the Code for the Construction and Equipment of Mobile Offshore Drilling Units [3. The 1989 Code [3. fire mains. Details for passenger ships. 3. lubricating oil. and electrical installations The parts of interest (within SOLAS) are: Part D – Electrical Installations: Precautions against shock. and other hazards of electrical origin Part E – Additional Requirements for periodically unattended machinery spaces: Fire precautions.30]. fire detection. arrangements for fuel/lubricating oil/other flammable oils. and special requirements for machinery. and electrical installations SOLAS Chapter II – Fire protection. 3.3 MODU code There are two versions of the MODU Code.35] applies to earlier units. fire control plans. SOLAS is the most relevant and receives expanded treatment.5 Precautions against shock. fire-extinguishing arrangements for machinery spaces. Tonnage Measurement (Tonnage 69) [3. machinery. 3. or MODU Code [3. alarm system.

oil companies hire MODUs to pursue drilling campaigns. Loss of stability. Fire. 3.9. Towing incident. • 4. 3. Mooring failure. not vessels undertaking industrial processes.1 to 6. Structural failure. Though there are fire risks from flammable materials on MODUs.7 – Zoning of hazardous areas and the types of machinery in these areas Chapter 8 – Periodically unattended machinery spaces for all types of unit 8. there are two main differences. Blowout. systems in machinery spaces. Toxic release. portable extinguishers.9. it will be necessary to for the MODU to have an accepted safety case before drilling can begin. helicopter facilities. accommodation. fire detection & alarms. and miscellaneous items. means of escape. Ship collision. firemen’s outfits. Feb 2006 Page 85 of 261 . The risk reduction model is the marine industry acting on the experiences of the world’s shipping fleet. The main hazards a MODU faces are listed below: • • • • • • • • • • • • Helicopter crash. about half the risks with the greatest consequences are presented by the hydrocarbon accumulation the MODU has been hired to exploit. Explosion.com Chapter 6 – Machinery and electrical installations in hazardous areas for all types of units 6. The Formal Risk Assessment required in a UK or North Sea safety case overlays all the provisions from fire and explosion protection that Classification. The campaigns can be short (one well of less than 30 days duration) or as long (3 years or longer on rare occasions).5 The UK safety case Generally. fire pumps/mains/hydrants & hoses.fireandblast. The rules emanating from the IMO are prescriptive. storage of gas cylinders. In the UK. the flag-State rules. However. and MODU Code. 152-RP-48 Rev 02. gas detection & alarms.4 Overview of MODU operations on the UKCS MODUs operating in the North Sea area are generally prepared to drill a range of wells of different types in order to meet the needs of the client oil companies. Major mechanical failure.3 – Fire safety Chapter 9 – Fire safety 1 to 13 – Structural fire protection. Dropped object. The model of model of application is for ships on international voyages.

MODU Owner depends on the client’s drilling programme. Feb 2006 Page 86 of 261 . Consequences are more severe for oil-based mud. apply. Occurs during flow testing of wells only.com The most serious of these incidents requires a PFEER Assessment [3. the qualitative method is preferred. augmented by such instruments as CAP 437 [3. flag-state rules. Such QRA as takes place is generally done to meet statutory requirements for integrity of the Temporary Refuge. 2 Shallow blowout in cellar deck gas the Yes 3 Reservoir blowout at drill floor Yes 4 Toxic gas release No 5 Gas release/ignition in mud processing areas Yes 6 7 8 9 10 Well test area fire/explosion Accommodation fire Machinery space fire/explosion Helicopter crash into the sea Helicopter crash on the installation Yes Yes Yes No Yes 152-RP-48 Rev 02.fireandblast. The client oil company’s drilling programme is required to analyse and predict reservoir content (gas or oil). and MODU Code Covered by class. above. 1 Type of event Shallow gas blowout. Caused by gas entrained in the drilling mud.35] in order to be sure the personnel can escape to a place of safety. per ICAO rules for design. subsea. and MODU Code Client’s standby vessel covers this scenario MODU helideck requirements are the same as for fixed producing installations. MODU Owner “works as directed” by the oil company and thus depends on oil company’s drilling programme and consultation with his site personnel to predict the likelihood of and to control this event. flag-state rules. The crew are generally not in the habit of assimilating such information. subsea Comments and description MODU Owner depends on the client oil company site selection and shallow gas detection by seismic plus experience in the area (if available) Usually occurs when the riser is attached (semi) or drilling out the first (structural) string of pipe (jack-up). Table 3-10 Typical hazard list showing preliminary PFEER assessments Fire & explosion consequences Yes Item no.36] in the UK. This scenario is meant to cover precautions against the toxic effect of H2S on personnel. This utilises the greatest asset – the rig crew who are exposed to the risk. any other relevant characteristics. pressure. The QRA calculations are most often done by consultants outside the MODU Owner’s organisation. Covered by class. It is worthwhile pointing out that the MODU Owner will generally engage the crew in a compartment-by -compartment analysis for fire and explosion risk. The assessments MODUs generally undertake are as below. Following from this approach. and temperature. Same comments as shallow gas blowout.

11 Type of event Collision Comments and description MODUs have provisions for survival in damaged conditions. and: • Helicopter crash on the installation. Typical items for pre-hire surveys: • • • • Well testing equipment. Thus. loss of towline Client’s standby vessel covers this scenario. The inspection of helidecks is covered by BHAB inspection of the installation. flag-State and MODU Code. 8 consider fire (and explosion) events.com Fire & explosion consequences No Item no. it can be seen that of 16 event categories. • • Accommodation fire Machinery space fire/explosion Which are covered by classification.e. The information given below is meant to stimulate further consideration. and MODU Code Covered by Class. 5 and 6 are caused by well upsets and three of the remaining hazard categories consider non-well events such as. 3. Covered by Class. flag-state rules. Which is common to all installations and is considered by the design guidance in CAP 437. Feb 2006 . flag-state rules. 3. This is a very significant proportion. Fixed fire extinguishing systems (water & foam). The items listed below cover many equipment categories that the surveyors generally cover which will have an impact on fire and explosion hazards. 12 Structural failure due to extreme weather Mooring failure Loss of stability Loss of control in transit Man overboard No 13 14 15 16 No No No No Half of the events above that cause most serious concerns on a MODU involve fire and explosion.6 Pre-hire surveys Many oil companies use 3rd party inspectors to perform pre-hire checks on the rigs they intend to contract. flag-state rules. Event categories in item numbers 1. and MODU Code i.9.fireandblast. They rely on the client oil company to provide information such as proximity so shipping lanes and on the clientcontracted standby vessel to warn errant vessels away. and MODU Code Covered by Class. Particular circumstances and personnel roles will have large roles to play. Automatic fire detection system. Page 87 of 261 152-RP-48 Rev 02. Electrical safety. 2. the question occurs as to how the fire and explosion expert(s) might apply themselves to reducing the risks MODUs face. From the hazard events itemised above in Table 3-10.

If well testing is foreseen. competent person known as a Well-Examiner. along with the types of fluid in the formations (oil. including predictions for formations to be encountered. must agree the change does not pose an increase in risk. Another is the Verification of Safety-critical Elements – those elements or systems vital to the safety of the personnel on the MODU.com • • • • • • • • • Breathing apparatus.9. Blow out prevention equipment (BOPs). For the MODU Owner. water. 3. This regulation requires that operators file their well programmes with the HSE a minimum of 21 days before operations are due to begin. 3. or gas).9 The MODU safety case safety management system The UK Safety Case and supporting regulations entail a robust Safety Management System (SMS). covering the prospects for encountering shallow gas. The type mud system to be used will be detailed for each hole section. these will be carried out against the rules issued by the class societies referred to throughout this section. Part of the programme will deal with site assessment. The well programme covers 5 of the 8 contingencies involving fire and explosion. The SMS audits and verification scheme can be a source of information readily available to the interested fire and explosion specialist. Well control equipment. an independent.7 Classification society surveys Classification societies will carry out surveys of vessels to ensure that they continue to comply with class requirements. work can begin. The programme should offer information regarding whether H2S is likely to be encountered. Well testing is given separate treatment below. the Safety Case Regulations require operators to apply a process termed Well Examination.9. However. The details to be submitted are spelled out in some detail. There is no equivalent of a design safety case for wells. It also ensures there is a process for ensuring changes are subject to analysis for risk. CO2 system for fire control. if there are material changes in the well programme. Portable extinguishers and fire fighting equipment. One component of the system is an active system of audit.9. 3. The survey reports generally stay on the unit and at the field office. Safety. If there is no objection from the HSE. the details of the flow rates likely to ensue will be given along with the duration of the test and the sampling foreseen. Electric safety.fireandblast. Gas detection system. However.8 The well programme The well programme lays out the plan for drilling the well. Feb 2006 Page 88 of 261 . the effect of Well Examination is that the programme is fixed in good time for them to interpret it and make ready for it. Fire control system. 152-RP-48 Rev 02.

In this situation. maintenance of such equipment is not generally with the core skill and experience of the drill crew. the oil company will likely have staff or have access to 3rd party specialists specialising in fire and explosion. Though the rules are prescriptive. What is recommended is a cooperative. Therefore the constructive overview of a fire and explosion specialist should be welcome in these circumstances. and constructive overview into all aspects of fire and explosion aspects. balanced. it may not provide copious detail on the well testing equipment. Feb 2006 Page 89 of 261 . The safety case can only generally cover the well testing equipment and cannot be very specific as there are many different manufacturers.11 Recommended approach The following is written from the aspect of an oil company contracting for the services of a MODU. Rig crew use the “hands on” approach.10 Well testing Though the Well Programme covers the objectives of well testing.com 3.fireandblast. Finally. 152-RP-48 Rev 02. It is brought to the rig when well testing is foreseen. MODU Owners generally do not. the nature of their derivation makes them statistically valid as most have been derived from experiences of the world’s shipping fleet. Any enquires should respect the culture and strength of the MODU Owner. Some of their number will have participated in or have knowledge of the rig’s treatment of fire and explosion. it is probably sub-optimal to make numerous in-depth enquiries of the MODU Owner when many aspects are covered by Classification or flag-State rules. It is probably sub-optimal to ask the MODU Owner to do everything. Given the diverse character of information for fire and explosion on MODUs. well testing equipment is not permanently installed. and different crews generally man the well test equipment. Chief amongst these is that the MODU Owner’s greatest asset is the crew. it seems natural for the oil company specialist to at least have an overview. different layouts for this equipment. the approach given below could function as a starting point(s). on the other hand. their expertise can best be accessed by qualitative data. Thus. remember the marine approach should be seen as counting for something.9.9. Few drilling specialists have extensive experience testing wells. 3. as it is the type of data they are most used to dealing with. On rigs where the installation is permanent. Generally. On many rigs.

com Item MODU Classification Flag-State MODU Code Safety Case Pre-hire survey Well Programme Overview Be aware of the Classification Society. Be aware of the analyses in the safety case for fire and explosion. There are slightly different considerations to be borne in mind at different stages of the field life. Be aware of who the flag-State is.10. of course. it would be a service to both oil company and MODU Owner to point out where better information would be beneficial. Be aware if the unit has a certificate and whether it is 1989 or 1979.1. Feb 2006 Page 90 of 261 .10. Unless the existing fire risk is found to be unacceptably high.fireandblast. mid and the late stages of field life are provided below to illustrate this point. provided. They represent the risks with the most severe consequences. and risk analyses may well prove beneficial in terms of risk reduction. Look up and become familiar with their rules.10. Further delving could be undertaken if an overview gave cause for concern. Have a look at the fire and explosion aspects of the pre-hire survey. For existing installations.1 Application of fire hazard management to existing structures 3. Such changes need review for any implications for fire hazard creation or management. procedures. Some typical examples of issues for the early. especially those with PFEER Assessments. SMS Audits Verification Safety-critical Elements Well testing Probably the area where the fire and explosion expert might make best input. structural. the fire management is reviewed and changed where necessary to suit the changed fire hazard. Judge whether you would be happy with the information in the programme in terms of preventing fire and explosions? If not. mechanical or instrument design intent. the elements of the overall platform fire protection design will have already been fixed. of The same comments apply here as above for SMS audits. Look up and become familiar with their rules.2 Early operating phase Vigilance is required in the early stages of field life for deviations from the original process. It should take place after a year or two of operation. It would be a good thing to be aware of the audit findings. The challenge for existing installations is in • • Continuing to ensure all the design arrangements for fire hazard management operate as intended throughout the long life of the installation. Be familiar with what it contains. such a survey was performed. Well testing can be infrequent and thus less familiar. The MODU Owner’s own audits can provide information on the standard of maintenance.1 General Much of the preceding guidance has been written with design of new installations in mind. 3. major changes are unlikely to be justified.10 Particular considerations for existing installations 3. 3. An overview of the equipment. Have a look at the well programme from the point of view of the MODU Owner. Ensuring that if the design or the operation changes. Such a review needs to be scheduled and chaired by the project safety engineer and attended by a mixture of design and operations personnel. The MODU Owner will have records of the ongoing surveys. The MODU Owner will have records of the ongoing surveys.1. Since key project design personnel are likely to have 152-RP-48 Rev 02.

• • • • If minor deviations go un-noticed.com moved to another project by that stage. leading to changed fire scenarios or release frequencies. vibration or corrosion problems. whether held personally. plant modifications are closely scrutinised by a range of discipline engineers and onshore support staff for any detrimental effect on safety. 3. Change in production composition or phases. more frequent alarms. Many of these minor changes would be identified by the independent competent person during the course of his examinations of safety critical equipment and systems. increasing the likelihood of releases in certain areas. unless vigilance is maintained. Very slow process changes which come to be regarded as normal by operations personnel (e. and supply input to operations and design issues. Feb 2006 Page 91 of 261 . Instrumentation problems – e. In addition..10. Over a period of 10 years or so however. an alternative would be for operations to log all variations to original design. very low or high operating temperatures etc. Examples of the types of change that would not be obvious without a specific attempt to capture them are: • • • • Environmental data (sea level or weather pattern changes). over time it becomes custom and practice to operate outside the original design scope. Accumulated minor operating and maintenance changes (known as ‘creeping change’) however can go unremarked. Nowadays.3 Midlife operating phase Some typical considerations for fire hazard management of existing installations at the mid-life stage are: • Creeping change in original design assumptions – examples are development of sand. in hard-copy or in electronic format is likely to be lost if no active steps are taken to refresh the ‘corporate memory’ at regular intervals. Areas of the platform always ‘keyed out’ of the automatic fire and gas system. leading to changed operator response to alarms. New fire research findings. Fire-related protective equipment proves unsatisfactory in operation – detection devices give frequent alarms or are found to be failed at every inspection. PFP left off vessels or other equipment for longer and longer periods to allow access for NDT/inspection.fireandblast. but some changes can still be missed. Problems then become apparent only during an emergency situation.1. over time. and/or without all protection functioning. personnel change and key information. Most oil companies include operations personnel in their project teams. changes in process conditions resulting in change to fire consequence modelling assumptions. Often one or both intended OIMs plus key offshore supervisors are part of the project team specifically to become fully conversant with.).. Alarms that are too frequent are eventually ignored. operating or maintenance assumptions/intent for formal follow-up by the installation safety engineer in order that the implications for fire hazard management can be explored and corrective action taken if found necessary. 152-RP-48 Rev 02.g.g. The implications of this knowledge need taking into account and where necessary the emergency response procedures updated. new research improves the understanding of the fire threat and the ability of the designed fire control measures to effectively counter the threat.

vigilance over the fire hazard management must be maintained.2 Life cycle considerations During the operational phase. process pressures also drop. Any such modifications have to be formally justified and recorded through the Operator’s Plant Modification Request procedures.10. Obsolescence of parts for Fire and Gas detection/protection systems. the performance standards laid down for of all the safety critical systems. Tightened commercial constraints and reductions in manning. subsystems and individual items must either: • or • Revised (with appropriate justification) to reflect the changing fire risk. corrosion (especially under lagging) and fatigue. by then. and documented in the Safety Case and associated PFEER/DCR documentation. where parts of the process have been simplified or decommissioned or where drilling activity is finished. surplus to requirement.1. Corrosion of firewater systems and leaks in air-trigger systems. water cut increases and fire risks tend to reduce. 3. It is possible on some installations. Wear and tear on firewater pumps and deluge valve sets. This can reduce the maintenance burden. Increased leak likelihood due to sand erosion.4 Late operating phases As platforms age the safety systems tend to require more repair and maintenance in order to keep them in full working condition.fireandblast. Despite the associated cost of maintenance and inspection.com It is thus recommended that a formal review (taking into account new research knowledge) or audit of the fire hazard management arrangements and records be carried out every 3 to 5 years. 3. Fortunately. The late operating phase is also a time when the platform production tail off and there is a big drive to reduce OPEX costs. The associated written schemes would be updated to reflect the changed performance standard in discussion with the appropriate Independent Competent Person(s). Typical Problems for the Late Operating Phase are: • • • • • • Degradation of Passive Fire Protection. to review a platform’s fire hazard management arrangements and remove fire protection equipment that is. Feb 2006 Page 92 of 261 . as platform age and production rates drop. Continue to be met as per the original design. Some of the changes that will need to be reviewed and assessed in other phases of the lifecycle are covered in the table below: 152-RP-48 Rev 02.10.

3. Regular maintenance and testing to ensure performance standards met for continued operation as design Continue to be vigilant for creeping change for example. The existing systems may be adequate to cover the new equipment or may need extending.10. to platform process conditions. taking oils from other subsea wells in the area and processing it.fireandblast. HOWEVER: Where fire hazard is proven to be reduced some protection system removal may be justified and maintenance burden reduced.3 below Fire risk profile for installation changes.10. commissioning procedures and test schedules are required to ensure that design is properly installed and performs as intended. The effect of the new plant on the ESD and blowdown systems must be evaluated in the light of the additional fire scenarios. even though original demands on the system may have reduced. continue to ensure performance standards are met. while production continues. hydrocarbon-freed and removed.g.com Table 3-11 Life cycle considerations for fire hazard identification and protection measures Life Cycle Phase Installation and commissioning Early Operational Phase Mid Operational Phase All design modifications subject to appropriate ‘Plant Modification Request’ procedures Late Operational Phase Repair or replace parts of system subject to unacceptable wear and tear. Any changes to original design concept to be formally justified and recorded in platform Safety Case and PFEER/DCR documentation. The existing system may be virtually obsolete and not feasible to extend so replacement of the whole system may be required.2 Design Issues: New process plant needs to be provided with adequate fire and gas detection systems. these are discussed in the following sections. Asset life extension Decommissioning See Section 3. 3. It should not be assumed that tie-in to the existing platform blowdown system will be adequate. regardless of OPEX constraints. Asset life extension raises several issues in relation to fire hazard management. Other installations. Feb 2006 Page 93 of 261 . If the 152-RP-48 Rev 02.10. Proper isolation from pipelines and reservoir must be ensured Fire Hazard and Fire Protection Issues Checklists.1 Overview Many installations in the North Sea have reached the end of their originally stated life span but are still producing sufficient quantities of oil to make continued operation worthwhile. Production fire risk reduces as plant is isolated. Other fire risks introduced e.3 Aging installations and life extension 3. gases for flame-cutting or fuel for temporary plant Fire protection needs to be based on fire risk assessment of each stage of decommissioning plan. for export to pipeline or tanker. often with new or modified topsides plant.3. although no longer producing oil from their own wells are being modified to act as production hubs.3.10. but the same considerations as for a new design will still apply.

fireandblast.3. All new fire scenarios must be reviewed for effect on existing deluge systems. Routes to sea are important in severe fire scenarios and must be kept up to standard as long as the fire hazard remains. The impact of the new facilities on the existing fire and gas detection and protection systems needs to be documented and recommendations tracked to implementation. but integrity assurance for aging piping/structure/equipment must be provided for Existing deluge systems are often difficult to extend. (See Sections 3. especially on an open installation. project specific reports. 3.5 General Considerations Fire hazards would be identified in the HAZID at FEED stage of the process modification design. The project may have to supply new fire pumps to cover the new plant as the existing pumps are unlikely to have spare capacity.4 Emergency Response Issues: As platforms age. spider deck walkways. All escalation potential should be considered.3 Operations Issues: There is a tendency for this type of work to be carried out in isolation by small project teams within narrow boundaries in order to keep costs down.3. other items such as sea ladders. and the decisions relating to selection of protection recorded. It is essential that operations personnel are involved in the project and offshore personnel are specifically trained on the implications of the change for fire hazard management. Incorporation of new safety critical items into existing Safety Case.g. the TR or TEMPSC areas or their supports) which are currently unprotected.2 for further discussions on the limits to PFP application. A fire in the new plant may set off several other systems. the original blowdown system may have been under-designed by comparison with existing best practice especially where severe fire scenarios are involved.10. Although some items can be easily replaced once they fall below an acceptable standard. and may require protection.2 and 7. There may now be a new fire scenario with implications for important parts of the structure (e. emergency equipment and facilities degrade. as well as refurbishment of existing routes (where the original fire hazard still exists) may be needed.2. SCE and PS related documentation is a legal requirement.10. New support structure provided for the new plant may be vulnerable to fire impingement from existing fire scenarios.3. 3.10. The mechanical condition of the system needs to be assured for extended service.3. 152-RP-48 Rev 02. escape and rescue. New fire scenarios must be evaluated for impact on evacuation. Feb 2006 Page 94 of 261 . 3. gratings on rarely-used escape routes to sea can fall into disrepair and are expensive to replace. The project teams try to keep documentation updates to the bare minimum in standalone. and subsequently assessed as for any new design project. Where new business is introduced over an old installation. More use of passive protection may be possible. including some issues affecting retrofitting PFP to structures in situ).com installation is old. new escape routes.5. The condition of existing pumps for extended future service must be assured.

The temperature in compartment will increase and a hot layer of gas will build up below the ceiling.11. The main difference between a building fire and a pool or jet fire is the nature of the fuel. to refer to building fires as cellulosic. 4. Although buildings contain hydrocarbons in the form of plastics they also generally contain a large amount of cellulosic material in the form of paper. Within a short space of time the entire contents of the compartment will be burning in a process called flashover. A point is reached when re-radiation from this gas layer causes the unburnt furniture etc to ignite. Fires may be fuel controlled or ventilation controlled.1 General Much fire measurement data. Accommodation and other areas of the installation such as control rooms. 2. ventilation controlled fires are more severe. The severity and duration of a building fire depend on the amount of fuel and the ventilation conditions.11 Particular considerations for accommodation and other areas for personnel 3. more complex. The key difference with these areas is how they relate to process and other operating areas and extreme care should be taken to make sure that even the most apparently benign systems do not interface with a hydrocarbon system in an unforeseen manner. Generally. 3.1 Compartment fires . Feb 2006 Page 95 of 261 . HVAC. and wooden furniture. Key aspects where interfaces can occur are listed below and these should be assessed when considering the process fire hazards: 1. It is common.general In a compartment or building fire. although not strictly correct. computer models for building fires 3.11. When assessing elements of construction for buildings the Standard Fire resistance Test fire is normally used.1. For some “fire engineered” designs a natural fire is modelled. The simplest natural fire model is the parametric fire although there are many.com 3. They provide a simple means to take into account the most important physical phenomena which may 152-RP-48 Rev 02. Drainage.37] is an idealised form of a “natural fire” in a building compartment. those without specific storage requirements for hazardous materials).fireandblast.2 Compartment fires – parametric A parametric fire [3.e. 3. the source of ignition will normally be at a discrete location and the initial fire growth will be slow. Access (both for personnel using the facilities and working there and goods coming into or out of the area).11. The following sections deal with some standard aspects of conventional onshore fires but practitioners should refer to standards produced for onshore and civil use for these “non-hydrocarbon” areas. definitions and internationally accepted standard tests have been developed from building fires and the damage caused. The internal materials are the same as onshore facilities and the design practices tend also to be the same with minor variation. leisure areas and galleys are all based on normal architectural practices. Storage areas/enclosures. some workshops (i. Many of these have been adapted for use on the appropriate sections of petrochemical plants and their shortcomings in wider applications should be understood.

Interaction with explosion hazard management 4. a low initial rate of temperature increase. The temperature reached depends on the conditions in the compartment and in a typical office fire. operability and risk reduction considerations. 152-RP-48 Rev 02. For the “standard fire” the heating rate continues (albeit at a slower rate) and does not reach a “cooling period”. It reaches 945 ºC in 60 minutes and 1153 ºC in 240 minutes. They take into account the fire load. without any preceding phase. cellulosic (Standard fire) Building regulations throughout the world almost invariably require elements of construction to have fire resistance based on the standard fire [3. Hazard management will always be a series of compromises between economics. in compliance with any statutory obligations placed on the operator of the installation.11.38]. This is an idealised fire defined by a timetemperature relationship and is the basis for fire resistance tests. following flashover.1 General The methods and systems for the management of explosion and fire hazards will have a degree of commonality. The parametric fire was developed to model mainly cellulosic building fires. when compared with most other “design” fires. The fire temperature will normally peak at about 45 to 60 minutes and decline steadily afterwards. 4. There is then a post-flashover period where cooling takes place.11. whereas others will serve a single function only. 3. i.com influence the development of a fire. the temperature rises logarithmically with no limit. Some of these will be complementary. Successful hazard management involves identifying the best compromise between all these considerations. engineering. 3. Thus.4 Temperatures The Standard cellulosic fire has. the heat build-up is rapid and proceeds for some period dependent on the available fuel. The modelling of the temperature curve of the parametric fire also follows a similar logic of heating starting directly from a notional equivalent of the flashover point. Compartment temperatures will reduce to 200 ºC after 120 minutes. The “standard fire” curve starts from an equivalent point at flashover and begins the heating phase directly. the ventilation conditions and the thermal properties of the compartment linings. In addition. a holistic approach must be taken in the management of both types of hazard. It gives reasonable correlations against tests for modern office fires.fireandblast. Feb 2006 Page 96 of 261 .3 ISO. It may often be more severe than the Standard cellulosic fire. However. conflicts may exist between the successful management of explosion hazards and the successful management of fire hazards. the combustion products temperature will reach about 1300 ºC.e. The natural fire is assumed to have a slow build-up with a pre-flashover period of ignition and smouldering. The heating rate is then faster than for the standard fire but reaches a point where cooling commences. The cooling rate assumed for parametric fires is linear compared to the accelerating cooling of the natural fire.

Under these conditions a severe explosion event may result. some installations have a ‘no hot work’ policy and insist on bolting etc. Alternatively. • • Note that ignition probability per se. The probability of such ignition may be minimised by: • Adequate control of ‘hot work’ on live installations by the use of air-purged habitats. Feb 2006 Page 97 of 261 .fireandblast. These are a function of the rate of ignition rather than of the ignition probability. However. does not represent a true measure of risk.2. What are most significant are the time-delay between a leak occurring and the ignition of the leak.) The correct hazardous area zoning for electrical equipment and the correct selection and maintenance of such equipment. 4. only carry out ‘hot work’ during an installation shutdown. The maintenance of the design fitness for purpose throughout the life of the installation. This requires that an adequate inspection and maintenance regime be in place throughout the life of the installation. procedures and systems should be provided to reduce the frequency of such events to as low as is reasonably practicable. as far as is reasonably practicable by: • • Fitness for purpose of all flammable material containment equipment and associated pipework. replacement or repair of equipment becomes necessary. Typical of these would be instrument tappings and pipework flange connections. 152-RP-48 Rev 02. in doing so it must also be recognised that the potential for a ‘long-delayed’ ignition increases.com 4.1 General It has to be accepted that the complete prevention of fires and explosions can never be attained.3 Minimisation of ignition probability Given that the leakage of flammable materials cannot be totally prevented throughout the life of the installation.2. then an explosion or fire will only occur if the leak is ignited. However. and also the time delay (if any) between the detection of the leak and the ignition of the leak. • 4.2 Minimisation of leakage frequency The loss of containment of a flammable material is a necessary precursor to the occurrence of an explosion or fire. the number of potential leakage sources should be minimised. The minimisation of ignition probability illustrates one of the many compromises that have to be arrived at in the management of explosion and fire hazards. whilst accepting that ignition probability must be minimised.2 Fire and explosion prevention methods 4. (Noting that hot work should be avoided wherever possible. Such procedures and systems are detailed below.2. This can be avoided. care must be taken to ensure that the original design intent is not debased by subsequent modification that may take place within the life of the installation or lost via poor record keeping or industry take-overs and/or mergers. care must be taken in applying this philosophy as this may lead to an increased need for ‘hot work’ if modifications. Wherever possible. The early detection of any leakage together with the necessary control actions to isolate all non-essential items of equipment which could potentially be sources of ignition.. In addition. and carry out hot work only during a shutdown.

even upon personnel. A range of figures for the probability of survival of detection systems following an initial blast load would be between 0. or beam detectors. there is a requirement to assess the minimum flammable cloud size that should be detected. Fire-detection is of no value in this context. This assessment should be conservative due to the diversity of potential escalation paths and the analysts’ inability to assess them all. As stated above. is of at least an order greater than that for explosions. Type 1) detectors may be point detectors e. there are definite benefits to detect leaks at as low rates as possible. One approach may be to consider both the thermal effects and the blast effects on a flammable cloud. It may also provide an argument under the same circumstances for the automatic actuation of any active fire control and mitigation systems upon the detection of a leak. should have received clear instruction as to the correct action to be taken on the receipt of such an alarm. Thus. such as those that utilise flamedetection. are the only means of providing adequate warning to personnel.2 Automatic release-detection systems and alarms. pellistors. This may provide an argument for the use of rapid-response fire-detection systems.fireandblast. 152-RP-48 Rev 02.com 4. fire-detection is still of importance when fire hazards are considered.5 and 0. the advantage of leak detection is its sensitivity. there is no clear evidence as to whether or not such acoustic detector will operate adequately when two-phase leaks occur.1 General The positive pressure phase of an explosion is in the order of a few hundred milliseconds. rapid response fire detection may also be of benefit with respect to the initiation of explosion mitigation systems (such as deluge on gas detection). Thus the early detection of a leak is of greater significance when explosion hazards are considered than when fire hazards are considered. It follows that leak-detection and associated alarms. However. The minimum cloud size to be detected should also consider the potential escalation. In each case. Thus it is suggested that the ideal leak detection system should employ both types of detectors. All installation personnel.g. intended to be detected. The detection of a leak should be annunciated on an installation-wide basis. the time for the effects of a fire to be realised. this would be of no significance when explosion hazards are considered.9 if other protective steps have been considered. In addition. The minimum cloud size. this can be used to alert the operator even if a shut-down is not initiated at this stage of the incident. The lower end of the range has been used often in QRAs submitted to the Health & Safety Executive but a survival probability of 0.9. Conversely. It may be that very rapid response fire-detection systems. may then be based on an acceptable probability of persons in the area surviving these thermal and blast effects. could detect an explosion before they are damaged by the explosion blast or drag effects. In addition. Feb 2006 Page 98 of 261 . or The direct detection of a release based on its acoustic signature. including visitors. However. These operate on: Type 1) Type 2) The detection of an accumulation of flammable gas from the release. The thermal effects may be assessed by treating the combustion of the flammable cloud as a fireball. it is important that the sensitivity of such detectors is adequate.3 Fire and explosion detection and control methods 4. it may be important for the management of fire-hazards to detect any fire that may follow an explosion.3. where the frequency of occurrence of explosions is deemed to be significant.3. Two generic types of release detectors are available. 4. Type 2) detectors appear to have an advantage over type 1) detectors in as much as they detect a leak directly. There is little guidance available to assist in this. However. the effects of an explosion are realised immediately.

com 4. especially in congested areas. This emphasises the importance of early detection of leaks and the automatic initiation of the ESD and blow-down systems upon the detection of a leak.1]. triggering deluge on gas detection may impair subsequent fire detection. where the beneficial effects will continue to operate after an ignition takes place. The comments concerning alarms made for leak detection are equally pertinent for fire detection. The fire-detection system should include a mix of each type of detectors and be appropriate to the mix of release/fire/explosion hazards considered in the escalation path. It is advisable that total reliance is not placed on flame-detectors alone. to such an extent as to prevent their correct operation. where explosion hazards are concerned. fail to a “safe” condition. a significant fire could still be ongoing which could cause failures. However. However. Conditions arise where fires are obscured by smoke and indeed. ESD and blow-down systems do provide benefit in the management of fire and explosion hazards. smoke generation is the major hazard to personnel. for example. but it must be accepted that there will be practical limitations on the extent to which this can be achieved. computer systems have a long history of being protected by VESDA systems. Isolation and blow-down valves should. generally. Whereas. or the IR detectors may fail to register fire escalation to adjoining process systems. they include: • • • • UV and IR flame-detectors Rate of temperature rise detectors Smoke detectors CCTV with or without embedded flame imaging software The flame-detectors will have the most rapid response of the above if they are in the vicinity of the fire. any beneficial effects will arise if the fuel inventory is partially or completely depleted before an ignition takes place. Fire detection is of very limited value in the event of an explosion already having occurred. the actuators can be significantly large pieces of equipment. 4. this has often been used in sensitive enclosed areas. and their destruction in an accident can compromise the “fail safe” mode. Several fire detection device-types are commonly available. However. within fifteen minutes. this means that isolation valves “fail closed” and blowdown valves “fail open” although there can be extenuating circumstances for this rule. 152-RP-48 Rev 02. whichever is the lower. it is important to realise that these systems alone cannot be relied upon to prevent subsequent failures of equipment or structural elements due to the effects of a fire. Especially for large high pressure valves. IR detectors may also be obscured by water.3. these beneficial effects on the fire-hazard will only ensue if the automatic isolation and blow-down and flare systems are not damaged by any prior explosion. very early smoke detector (VESDA) systems can respond rapidly based on an arrangement where the detection system samples smoke at very low concentrations. Only leak detection can provide adequate warning to personnel of a potential explosion hazard. even if this is achieved.4 Reducing the available inventory of fuel. such valve actuators should be protected against blast and drag-effect damage as much as reasonably practicable.fireandblast. This requires that the internal pressure be reduced by 50 % or to 100 psig (22 barg). wherever possible.3 Automatic fire-detection systems and alarms. Obviously. This is of equal importance to the management of both fire and explosion hazards. This contrasts with the situation where fire hazards are concerned. Blowdown systems are almost universally designed to API RP520 [4.3. Feb 2006 Page 99 of 261 .

1 On explosions The equilibrium size of a flammable cloud.3.com 4. It is possible to shut down ventilation systems to provide ventilation control of a fire. 4. the internal wind-speeds are unlikely to be sufficient to distort water-spray patterns. The severity of an explosion following the ignition of such a flammable cloud. This means that the open sides of these areas will be at a right angle to the prevailing wind direction limiting natural ventilation. there are constraints to the options for increasing the existing ventilation rates. the ventilation rate may be increased by the removal of any louvered wind walls.5 The significance of area ventilation 4. It is conventional wisdom that wherever possible.5. The research report [4.e. inter-alia.5. Research [4.4.2] indicates that the suppression of pool fires by water/foam deluge systems is aided by increased wind-speed i.5. enclosed areas are concerned. For existing installations. Feb 2006 Page 100 of 261 . a function of the mass of flammable gas in the cloud. a function of the area-ventilation rate. 152-RP-48 Rev 02. an increased ventilation rate. but it should be noted that in order to prevent smoke and combustion products migrating along ducts if the HVAC is not shutdown and isolated. There will normally be bulkheads between the temporary refuge and drilling and process areas. the possible distortion of the water spray pattern by the wind could mitigate against this.4 Other factors influencing ventilation rate 4. For ‘new builds’ cognisance should be taken of the recommendations given in the FLACS explosion handbook. The most efficient layout to maximise the ventilation rate will be the same as that to minimise the explosion hazard. Note that for enclosed areas. Layout guidance can be found in Part 1 of this guidance. in most cases the balance of risk will come down in favour of maximising the rate of area ventilation. Nevertheless. For naturally ventilated areas a conflict may arise between protecting the temporary refuge against smoke ingress and the maximisation of area ventilation. major refits are required for fans and ducting sizes.3. For ‘new builds’ the influence of the rate of ventilation on both fire and explosion hazards should be addressed in the design. it must be accepted that little can be done to change the existing layout of equipment. will be. However.fireandblast. The possible disbenefit of this is that it could make early detection of a leak more difficult to achieve. produced by the accumulation of flammable gas from a leak will be inter-alia. 4.2 On fires The influence of area ventilation rate on fires is less apparent than its influence on explosions.1 Equipment layout The equipment layout within an area will have an influence on the area ventilation rate.3. (which could lead to fire or fire effects spreading to other areas) that common practice is to shut down and isolate HVAC systems in all but the most critical areas (such Temporary Refuges) on confirmed detection of fire. Thus it follows that an increased rate of area ventilation will have a beneficial effect upon the explosion hazard. 4. the temporary refuge should be up-wind of the prevailing wind direction.5. Where mechanically ventilated. the rate of mechanical ventilation will usually be of the order of 12 air changes per hour.3.5.3.3] has indicated that for naturally ventilated areas ventilation rates in the order of a few hundred air changes per hour are achievable.3 Maximisation of ventilation rates For existing installations.3. For mechanically ventilated areas. for naturally ventilated areas.

. Equation 4-2 where V V' x is the increased ventilation rate (m3/s) is the original ventilation rate (m3/s) is the gas release rate (m3/s) 4.fireandblast......5... The research report [4.. Water deluge systems should be provided with as much protection against the explosion effects as is practicable... V ′ = V (1 + 12....45 x ) ... It is suggested that a conservative estimate of this effect would be to reduce the area ventilation rate by 30 % when the area deluge system is operating..3..........2 Influence of release rate The release rate of gas can itself have a significant influence on the rate of natural ventilation..4] provides some..3...4... consideration of the interaction with the explosion events is whether or not the fixed fire-fighting systems would still be functional after an explosion... the ventilation rate will be reduced..4.. Analysis of these data indicates that: • • • If the leak is counter-flowing to the ventilation flow direction...... data on this effect.... V ′ = V (1 − 22..... the ventilation rate will be increased..... Feb 2006 Page 101 of 261 ....... If the leak is co-flowing with the ventilation flow direction.. For 152-RP-48 Rev 02..4] indicates that the presence of water deluge reduces the ventilation rate in naturally ventilated areas...4 Fire and explosion mitigation methods 4..4 x ) ... the ventilation rate is effectively unchanged. The date on this is very limited and applies only to deluge rates in the order of 24 l min-1 m-2...... and most obvious........1 Active fire-fighting systems The first.. albeit limited..... The following correlations are suggested as representing a conservative estimate of these effects.3 Influence of water deluge The research report [4...4........ Equation 4-1 where V V' x is the reduced ventilation rate (m3/s) is the original ventilation rate (m3/s) is the gas release rate (m3/s) For leak direction co-flowing with the ventilation flow direction...... If the leak is crosswind to the ventilation flow direction......com 4....................5............ 4..... For leak direction counter to ventilation flow direction..

........ In practice. congested well-vented areas... This means that such a system will be most effective in large......... Feb 2006 Page 102 of 261 .... PE 2 = PE 1 e where PE1 PE2 ( −18. Research report [4. PE 2 = PE 1 e ( −17...215((E −1. For ‘new builds’.. it must be accepted that little can be done in this regard. Equation 4-4 2 2 2 1 is the overpressure at equivalence ratio E1 is the overpressure at equivalence ratio E2 E1 = C1 CS C2 CS E2 = and C1 C2 CS is gas concentration 1 is gas concentration 2 is the gas stoichiometric concentration It is not possible to provide a generic correlation for the absolute reduction in explosion severity....007) −(E −1.. However...... as the domains in which the explosion takes place will vary from one another.... The correlations also demonstrate the variation in explosion severity with the gas concentration in the flammable atmosphere.. This would appear to be an argument for the initiation of water deluge.. It is now well established that in well-vented areas.0563) −(E −1.... before the ignition of a flammable atmosphere takes place. this means large...... the presence of an area water deluge can reduce the severity of explosions....... The could have the benefits of reducing the explosion severity to an extent that the water deluge system in operation to control or mitigate the effects of any subsequent fire. such a system will be distributed throughout the whole of the area.. Thus area deluge mitigation of explosions is most effective where very severe explosions can occur..fireandblast. However.... The mitigation of explosions by area water deluge will only occur when the explosion is accompanied by significant flame acceleration. it can be stated that the ratio of the unmitigated explosion severity to the mitigated explosion severity increases as the unmitigated explosion severity increases...com existing installations.693((E −1.5] provides correlations to estimate the reduction in explosion severity by area deluge..... it is likely that only a limited degree of protection could be provided.. Equation 4-3 2 2 2 1 In the presence of water-spray.... and also prevent damage to automatic isolation and blow-down systems..0563) )) ... this may be achieved by the judicious location of water deluge pipe-work..... The correlations are: In the absence of water-spray. well-vented domains.... 152-RP-48 Rev 02.... because of its very nature...007) )) ..

in any particular situation.. and in some cases......com Where this does not occur... However.. a high viscosity (or sticky) finished foam is appropriate... can be effective in suppressing and extinguishing pool fires.......................7] indicates that the water droplet diameter can have a significant effect upon the time to extinguish a pool fire.... for threedimensional running fires.... large droplets are more effective than small droplets.... Where water miscible fuels may be encountered. then alcohol resistant foam is necessary... Water-deluge systems.... The addition of a foaming agent to the water spray system can reduce significantly the time extinguish a pool fire compared to those predicted from Equation 4-5 and Equation 4-6...... such as may be encountered on a helideck...fireandblast... inasmuch as they are less easily displaced by ventilation crosswinds and can penetrate the fire plume more effectively...6].. One additional factor in foam compound selection is the viscosity of the finished foam. T50 = 494 − 376 Y + TE = 859 − 448 Y + where T50 TE 29 .......’ 152-RP-48 Rev 02........ Equation 4-6 Y is the time to reduce the fire size by 50 % (s) is the time to extinguish the fire(s) Y = C ×U and C U is the water spray area cover rate (l min-1 m-2) is the internal wind speed (m s-1) These correlations are specific to water sprays with droplet Sauter mean diameters of 400 to 500 microns. size of the flammable cloud and also increasing the time required to disperse this flammable cloud.. the decision as to whether or not the activation of an area waterdeluge is appropriate can only be informed by an assessment of all the above factors... Equation 4-5 Y 80 ..... This will have the effect of increasing the equilibrium..... Thus. could increase the explosion severity. Feb 2006 Page 103 of 261 ...... In summary... The following correlations for the time to extinguish pool fires have been developed from a research programme of fire trials [4... In locations where the ambient temperature can be below 0 °C for a significant time the foam compound should be ‘freeze-protected. the presence of water-deluge will result in the reduction of the natural ventilation rate.... As has been stated above............ The research report [4..... These trials used diesel as the fuel but the correlations would give a reasonable approximation for the time to extinguish stabilised crude oil fires. there has been a concern that the presence of water-deluge may increase the probability of ignition due to water ingress into electrical equipment..... such as in enclosed domains area water deluge will not provide any benefit.. For two dimensional pool fires a low viscosity of the finished foam is appropriate..... In ageing platforms..... with or without foam.

well-ventilated areas....... Historically......55 x ) ..8]) against either pool or jet fires.. dual agents can reduce the fire duration to less than that where water deluge and foam is used.... Area deluge systems or water curtains cannot be relied upon to protect personnel from the thermal effects of an explosion.. The recommendation for the maximum value of this time delay. The same applies to the use of water curtains if these are of adequate thickness. R = 100 tanh (1. The application of water systems should then be appropriate to the fire hazard identified and also to the type of protection required. These thermal effects are of too short a duration to prevent any serious risk of failure of equipment or structural elements..... e.. given in NFPA......... such equipment has been protected against fire by the installation of Halon flooding systems. Where high voltage electrical equipment.... Any area deluge or local cooling system should be fully operational as soon as possible after the receipt of an initiating signal. This is because waterspray heads constructed of brass or gunmetal will.. However this option would be accompanied by a severe cost penalty...g. thus mitigation measures should be able to protect from fire effects from outside (via an adjacent module for example). Where effective... Obviously.com A number of characteristics affect the effectiveness of water spray systems (designed for example to NFPA15 [4. This could be avoided by the use of waterspray heads constructed of a high melting point material. does the outside area include key escape routes form the primary affected area to the Temporary Refuge... suffer major damage if water flow has not been established. Consideration should be made as to whether the fire hazard may extend beyond the notional fire area. or equipment susceptible to damage by exposure to water are present then conventional water deluge or foam systems will not be appropriate fire fighting systems...fireandblast.. Such risks would be associated with the blast and drag effects of an explosion. The effects of water systems with respect to different fire types are discussed in more detail in Section 5...2. The research report [4. should be adhered to.. Feb 2006 Page 104 of 261 ....... Equation 4-7 where R is the percentage reduction in incident thermal radiation x = f ×L and f L is the water volume fraction in the atmosphere is the distance through the water spray or curtain (m) This indicates that the presence of area deluge could provide significant protection for personnel escaping from the location of a fire.. water spray systems can provide no protection against such effects... when exposed to flame impingement. This level of damage is likely to occur within 60 seconds and seriously degrade the effectiveness of the waterspray system. However. Their effectiveness is probably limited to enclosed areas due to the problem of delivering the dry powder to the base of the fire in open.. this option is no longer available. 152-RP-48 Rev 02. such as super-duplex stainless steel.9] suggests the following correlation for the reduction in incident thermal radiation. Since the adoption of Montreal protocol. area water deluge can provide significant protection against incident thermal radiation from both jet and pool fires....... Dual agent (foam and dry powder) can be effective in the suppression and extinguishment of pool fires...

The intumescent materials can also provide excellent fire protection.2 Fire-proofing systems Two types of fireproofing materials are in general use on offshore installations. together with possible unrevealed corrosion of the substrate.10] does provide some evidence on the likely rainout of liquid from an ignited two-phase release. then a spray fire (equivalent to a jet fire) will result. Where these materials are to be used. If the rainout is significant then a pool fire will result.fireandblast. This in turn can lead to water ingress and deterioration of the fireproofing material. Whilst it is feasible that the temporary refuge could provide such protection against the thermal and smoke effects of fires and against the thermal effects of explosions.4. However. Thus the need for the test data referred to above is reinforced. the fire-proof coating of any item should be capable of withstanding an explosion blast loading. This is probably best achieved by maximising the separation distance between the temporary refuge the likely locations of explosions as much as it is reasonably practicable to do. 4. Water mist systems do appear to be very effective against electrical fires in enclosed areas. These are: • • Inert materials. The effectiveness of both types of fireproofing materials can degrade over time. The design of fire-proofing systems is universally carried out on the basis of the fire loading only. They do suffer from the disadvantage of increased load on the structure. This would retain the protection provided by the fire-proofing against any fire subsequent to the explosion. Ideally. then at drive pressures above 10 bar absolute a spray fire will result. In this context it is of course necessary to know whether diffusion flames or jet flames will be encountered. It is for this reason that the intumescent materials are generally preferred. However. The research report [4. up to the failure loading of the equipment item or structural element concerned. The design standard performance specifications for fireproofing materials are generally based on diffusion flame engulfment rather than jet flame impact. especially the sealing topcoat. than at drive pressures above 5 bar absolute a spray fire will result. the temporary refuge should provide for the protection of personnel against the effects of both fires and explosions. If the GOR is high. If not. there is no general agreement as to whether or not unacceptable levels of damage to such equipment would ensue. 4. The inert materials provide excellent protection against fire exposure and a resistant to the erosive effects of jet flame impact. 152-RP-48 Rev 02. there is a concern that the erosive effect of jet flame impact could dislodge the ‘char’ formed and thus reduce the effectiveness of the fireproofing. Thus the objective should be to reduce the explosion blast effects on the temporary refuge to as low as is reasonably practicable. there must exist a practical limitation on the protection that could be provided against the blast effects of explosions. Intumescent materials. • • If the GOR is low.com A number of drop-in Halon replacement systems have come on to the market but these are not yet in general use and thus little data are available on their effectiveness in ‘real’ fire situations. This can be avoided by regular inspection of the fireproofing coatings and repair as necessary. without suffering any significant degradation of the fire-proof rating. Feb 2006 Page 105 of 261 . This can be due to mechanical damage of the coating. the material manufacturer should provide jet fire test data to demonstrate that this is not a problem.3 The temporary refuge Ideally. It is suggested that for ignited two-phase releases.4. More evidence is required to determine whether this objection to the use of water mist systems is or is not valid.

which has responded to an explosion with plastic deformation but without connection failures. A Category 1 structure can be considered to have been unaffected by explosion when considering its response to fire.5.1 General There are four categories of explosion damage to structures. c) Deformation of supported equipment and pipes. 3 and 4 damage relate to structures designed to resist explosion in DLB range.g. with much reduced fire endurance. A Category 2 structure will be unaffected in its response to fire except in respect of: a) Possible damage to PFP (e. Categories 2. 4.2.5. due to substrate strains). if required. three of which may affect subsequent fire endurance.fireandblast. A structure. not only is it impossible to fully isolate the two phenomena. For the purposes of this section. 4.5. which has responded to explosion while remaining in the elastic deflection range everywhere and without connection failures. explosion shall be assumed to include the effects of projectiles.5. Category 3 structures will be weakened and behave differently in fire scenarios. 4. 2.2. d) Loss of pipe/equipment support.2 Analytical treatment of explosion damaged structure For category 1 damage in an explosion (SLB) it is assumed that there is no weakening of structure with respect to fire endurance hence fire and explosion can be considered independently by different techniques. This is the case for structures subject to explosion within the SLB range. The effects of interaction are discussed in the following sections.1 Introduction Parts 1 and 2 of the Guidance have considered the subjects of explosion and fire in isolation. In practice.2 Fire response of explosion damaged structures 4. A structure.com 4. This applies particularly where a fire analysis ignores potential damage caused by a preceding explosion or where an explosion occurs during a fire. Feb 2006 Page 106 of 261 .5 Combined fire and explosion analysis 4. but also to do so risks missing potential high-risk events. A structure. where the explosion damage may have reduced the reserve structural capacity for dead loads. but noting that there are extremely limited data available on PFP damage following an explosion. In practice it is very difficult to perform fire response analysis of explosion-damaged structure. 1. A structure that has responded to explosion loading with or without connection failures (local or global). b) Loss of straightness of members subject to buckling loads. severely damaged by explosion with loss of entire segments of the structure. 152-RP-48 Rev 02. The nature of the interaction between explosion and fire will depend upon whether an explosion precedes a fire (the usual base case) or whether it occurs during a fire. 3. compared to undamaged structures.

Coping with the explosion after fire scenarios is principally achieved with a suitable barrier philosophy and distancing (sensitive equipment and structure from hazard). Other damage can occur due to projectiles caused by vessel BLEVEs and to a lesser extent from pipe failures. this aspect needs to be linked to dropped-object hazard evaluation. For vessel BLEVEs distancing will not usually be sufficient due to long projectile trajectories. On F(P)SOs and converted jack-up type substructures the damage consequence due to impact with the deck might be large and the protection requirements difficult to meet without heavy protection such as thick steel plates or Bi-steel. already in flames. In practice this will involve optimising the overall layout of the topsides facilities to minimise explosion pressures.2. the yield stress and Young’s modulus of metals decrease. 4. which may be 152-RP-48 Rev 02. it is recommended that the fire hazard strategy assumes a “burn down philosophy” and that the fire risk analysis should confirm that the TR is not destroyed with an unacceptable frequency. Another source of damage may be equipment and structure falling from areas above that has become weakened by fires. though the advanced non-linear techniques briefly mentioned in Section 4. It is therefore recommended to design the main parts of the structure to survive design (10-4 years return period) events with category 1 or modest category 2 damage. For category 2.3.fireandblast. in which case. Where appropriate. This is a particularly advanced type of analysis but could be practical where the non-linear software can determine both fire and explosion response. and it takes some time before the leaks in the second area ignite and cause the second explosion. a revised layout or separate accommodation jacket). 3 or 4 damage it would be necessary to apply a structure model that has been fully modified to take account of the explosion damage that has occurred prior to fire.2 might be applicable here.3. analyses of escalation identify clear limits to potential damage. Feb 2006 Page 107 of 261 .5. This applies particularly where a component is designed to resist explosion through plastic deformation.3 Explosion response of structures at elevated temperatures 4.1 General As temperature increases. 4. Unless.g. This is part of a complex domino situation where a first area is in flames and the explosion in that first area has caused leaks in a second (adjacent) area. For this reason it may not be suitable to use different software for the fire and explosion response and merely use the output geometry from the non-linear explosion software as input to the fire-response software. This can result in comparatively small temperature rises resulting in a considerable increase in explosion related deflection. The higher the module stack.5. the more damage a dropped could cause. It is probably necessary to account both for geometry changes and the straining that has occurred in strained members. Delayed effect of explosions in one area on an adjacent area.2 Analytical treatment of fire-damaged structure Rigorous numerical analysis for explosion effects on fire-damaged structure is currently not practical in most cases. and this will affect the material model for those members. Explosions during fire can sometimes result from: • • Equipment or vessel BLEVEs due to heating in fire. Covering a suitable range of explosion damage scenarios. causing explosion overpressures in the first area.5.com The two practical difficulties are: • • Calculating the reserve structural capacity for distorted and/or weakened structures. a different solution will be required (e.5. Barriers.

2 Conflicts arising from preventative safety measures Additional safety measures that might be considered here are open module areas to disperse any hydrocarbon release (in gaseous or vapour form) or providing comprehensive hazardous drainage systems to remove liquid spills as quickly and safely as practicable. In general. This section will discuss specifically the potential conflicts arising from the use of the protective measures considered for fire hazard management. This is to improve resistance to resist the secondary explosions. the temperature of structural steelwork may need to be kept significantly lower than for fire-only loaded steelwork. the hazard identification exercise for the installation should be rigorous and comprehensive. The over-riding principle concerns the risk assessment of the identified hazards and whether the protective steps for one hazard will exacerbate the likelihood or consequences of another.fireandblast. the reduction or elimination of ignition sources is again desirable for all hydrocarbon related hazards although care should be taken that dispersion of gas or vapour to a “non-hazardous” area where ignition sources have been allowed is considered in the HAZID and that suitable other steps have been taken. An additional consideration is that where there is a significant risk of an explosion during a fire it is necessary to ensure adequate strength and bonding or fixing of passive fire protection materials at high temperatures. All protective measures should be considered in the context of the hazards identified for the specific installation as is reiterated elsewhere in this guidance. Feb 2006 Page 108 of 261 . These steps would then prevent the concentration of flammable fluids reaching or exceeding the Lower Flammable Limit (LFL). This “conflict” is particularly meaningful when dealing fire and explosion hazards as they are the result of only slightly diverging escalation paths. 4.6. The detail of each measure discussed can be found elsewhere in this guidance. Reduction or elimination of inventory is desirable for all hydrocarbon related hazards and presents no obvious conflicts with other hazard categories. The reduction or elimination of ignition sources will (theoretically) prevent ignition of any release prior to dispersion or dilution having occurred.6 Safety conflicts The application of safety measures always requires a balance regardless of whether the hazards are fire or explosion related. 4. From the practical standpoint. The conflicts will be reviewed in the context of their role in the protective hierarchy and the issues “in conflict” will be described. This can be accommodated by more extensive application of PFP and this factor should be borne in mind when contemplating reducing the extent of PFP coverage to meet only specific fire scenarios. A conflict arises with the open module concept.1 Conflicts arising from inherent safety measures The major inherent safety steps are to reduce or eliminate inventories.com walls or other equipment installed between the location of the BLEVE incident and vulnerable targets. It can be seen that the larger area (the practical result of opening modules) increases the 152-RP-48 Rev 02. where an explosion during a fire is a significant risk. can reduce projectile trajectories and thereby render distancing philosophy effective.6. The normal practice for fire protection engineers is to consider the firewater demand of the largest area plus adjacent areas to which the fire may spread. 4.

for example. equipment and structures to retain strength and stop escalation.com firewater demand and may make the demand impractical for normal firewater pump sizing.5 Conflicts arising from mitigation safety measures The are 3 main mitigation measures for fire hazards.fireandblast. This “open module” measure does however improve the situation for explosions (as was discussed in Part 1 of this guidance). The design process moves into a vicious circle whereby the safety items can increase the severity of the event they are controlling. these will limit the released inventory for any release event and present no conflict in the execution of that function. However. Extinguishing systems. merely that the detection devices/systems should certainly be directed towards specific hazard categories and if possible. flame detection effectiveness after firewater systems (deluge or mist) have been activated.3 Conflicts arising from detection safety measures Detection measures tend to be relatively passive and provide a step towards a more precise hazard management system (focussed control. 4. Concerning isolation valves and blowdown systems. these pose no obvious safety conflicts with other hazard categories but may create an undesirable environmental event. the issue is more of omission (of particular applications) rather than conflict and can be clarified by clear application to the defined hazards. 4.6. to extinguish the fire directly or to cool surrounding piping. to function well in the event of an incident. The detection devices should be defined by their Performance Standards to achieve a certain degree of detection in the context of particular hazards and also with other protective measures having been activated.6. The designers should be aware of one area of conflict in that the actuators of large valves are themselves quite large and that they and/or blowdown piping will constitute significant obstructions to explosion generated flame-fronts and thus increase overpressure loads which may in turn require blast protection as both ESD valves and blowdown lines are safety critical. The firewater systems will be discussed under conflicts arising from mitigation measures. 4. • 152-RP-48 Rev 02. These issues are not insuperable and like many safety issues are dealt with by adopting good layout principles. thus requiring the designer to consider other steps. Feb 2006 Page 109 of 261 . for detection. a further control system would be the firewater system. Therefore. Concerning designing drainage systems to remove liquid hydrocarbon spills. Dependent upon the way that the incident was defined. the design and operational constraints of this safety measure should be considered further and the consequences of both events understood. to stop the fire either escalating to adjoining sensitive areas (where personnel may be). either acting to control escalation or acting as a mitigation measure. mitigation or response). these measures may require additional ESD valves and blowdown lines. specific hazards. The open area also decreases the likelihood that the fire will ever be ventilation controlled.6. or reaching new inventories or to otherwise limit the fire by ventilation control. There are no obvious conflicts identified here. • Physical containment.4 Conflicts arising from control safety measures Safety measures that might be considered to control the event would comprise isolation valves and blowdown systems to control the inventory available to feed the fire. Although regulators often acknowledge environmental impacts in extreme events.

deluge used for explosion suppression is required to be activated early. PFP is generally tested using flat surfaces. These are all measures required to assist personnel and there are no obvious conflicts where their provision impairs the hazard management efforts for other hazard categories. Gas or vapour releases are also contained. whilst delineating fire areas. Also. 4. With respect to the mitigation measures identified under item 1.7 Fire and explosion walls There are two main types of fire and explosion resistant walls: Proprietary corrugated walls (in carbon or stainless steel) and bulkhead walls. less expensive and can be manufactured complete. they may be ineffective. They fit more easily into the construction programme. There is also the effect of timing. the addition of passive fire proofing does increase the likelihood of accelerated corrosion due to trapped moisture which may arise from leaking insulation or from temperature cycling generating condensation. the effects of a jet fire on a corrugated wall either in terms of heat load or surface PFP are less well understood. off-site and installed after grit-blasting and painting of topsides structure and installation of main equipment. as indeed they will be for some fire scenarios.6 Conflicts arising from emergency response safety measures The safety measures considered here will form escape and evacuation equipment. providing greater effectiveness for the applied fire water systems and a degree of ventilation control (in circumstances where the area/module is well sealed) have adverse effects on other hazards. in advance of any ignition and this has led to the practice of some operators of The critical consideration for the structural and safety demands required by mitigating measures under item 3 is to maintain structural integrity. At worst. In addition. Physical containment of areas. Corrugated walls are the most popular. there is a range of demands for the extinguishing systems dependent upon which fire type they are designed for. to provide fire resistance (via intrinsic structural strength or passive fire proofing) in order to maintain structural integrity to support process systems (and avoid escalation) and to support areas of greater safety for personnel (TR and muster areas) and to support evacuation systems (TEMPSC launch stations. the increased strength and/or added passive fire proofing do not impact other hazard management measures. Feb 2006 Page 110 of 261 . mostly because they are lighter.fireandblast. these measures provide the greatest conflicts with other hazard categories. There are no obvious conflicts arising from measures meeting these demands. they are not dispersed beyond the area/module and the opportunity for dilution to below the Lower Flammable Limit does not exist. see Part 1 of this Guidance). The avoidance of gas/vapour clouds in the flammable or explosive region should always be the first priority.6. The mixture of nozzle types and their location should be considered carefully when designing the firewater system. both personal and for teams and will also comprise portable and hand-held fire-fighting equipment. 4.e. there remains the possibility that delayed ignition initiates an explosion rather than a fire in which case the resultant explosion overpressure will more than likely be higher than in an open module (though this may not always be the case and a considered analysis should be undertaken.com • Designing for retention of structural integrity. 152-RP-48 Rev 02. helidecks). However. i. Dependent upon the hazards identified for an area. a decision can be taken on the basis of the risk (considering both likelihood and consequence) of the “reasonably foreseeable” events. there are different nozzle types and spray behaviour required for explosion suppression. The risk ranking of the types of events will provide an indication as to the types and locations of firewater nozzles to be used. Concerning mitigation measures identified under item 2.

As a general rule it is preferable to specify the secondary deck beams and plating to have a higher strength than the primary structure so that it’s loss in explosion and / or fire does not lead to the primary structures being dragged down or losing their secondary stabilising support members. particularly where such PFP is within the coat-back distance for the structure that supports the wall. In some cases relatively thin coatings of PFP have been applied to (carbon steel) corrugated walls and this has the advantage of ensuring limited temperature rise during the important early blowdown phase of platform equipment when BLEVE and projectile risk is highest (a compromise solution).fireandblast. due to preceding explosion or differential temperature through the depth of the wall or both. particularly as the insulation to the girder below the deck plate will inhibit heat loss and allow higher top flange temperatures to occur. Corrugated walls are designed not to participate in the loads bearing capacities of the structures they are integrated into and only have to have residual strength in fire to support their own weight. Coat-back requirements are often relaxed to 50 mm or so hence the overall percentage of cover to deck steel work will be relatively small. The welding of secondary steel and girder connections needs particular attention and it is recommended to make welded connections capable of transmitting the 152-RP-48 Rev 02. 4. Resistance to penetration by projectiles will be affected by temperature rise and this will depend upon whether PFP is used or not.com Another issue for manned areas can be toxicity of smoke from intumescent PFP. It also depends on whether or not the insulation is on the fire attack side or the cold side of the wall. In pool fires decks would not be expected to be heated if the fire is from above but this may not be the case with jet fire. This type of PFP is rarely used on corrugated walls but is common on bulkhead structures.8 Decks Decks normally comprise a series of girders and a stiffened deck plate. Of course it is not normal to coat the top surface of decks. The top flanges of girders can be weakened in such circumstances. If in doubt. the residual strength of the wall will not be affected by the distortion but care needs to be taken with the PFP in these areas. shaped stainless steel flashings can be used in such locations with fibrous insulation behind. Most fire / Blast walls do not otherwise require to be insulated. Bulkhead walls on the other hand do participate in the dead load carrying capacity of the structures into which they are constructed and therefore require to be insulated to prevent strength loss in fire. Stainless steel corrugated walls have more residual strength at elevated temperatures and are therefore more resistant to projectiles. Support interface design is important as this must allow for thermal expansion of the wall in fire and out-of-plane bending. whereas large differential temperatures occur in bulkhead walls and stressed skin construction (with the plate on the fire side) because the cold side flange of the stiffeners is not heated directly: the temperature gradient is greatest with uninsulated walls. Feb 2006 Page 111 of 261 . and insulation of them is only normally required where they are used as boundaries to enclosed occupied rooms. Provided the supports are configured to deform without strength-loss. On the other hand they tend to be thinner than equivalent carbon steel walls and this diminishes the strength advantage in regard to projectile penetration. but they are very ductile. Usually the PFP will be applied to limit the temperature rise of main girders and those secondary beams that support the higher categories of Safety Critical Equipment. for example for lateral torsion buckling. The out of plane deflection due to fire is lower with corrugated walls because the geometry of the wall profile ensures that the inner flange and outer flange are heated equally. These are potential considerations.

It should be understood that there may be a problem of running pool fires on decks due to distortion of plates arising from the fire. There is an added level of acceptance for Duty Holders that the combined explosion/fire testing can be witnessed by a 3rd Party such as the Verification Body. Spadeadam has developed a large scale explosion test of PFP material which subjects PFP covered samples to an explosion loading (including drag forces in the case of pipes or beams) and following the explosion test. who have certified the results of the tests for a number of PFP manufacturers. Feb 2006 Page 112 of 261 .com forces imposed during gross deformation of the secondary members they connect without fracture (as in earthquake-resistant design). Potential deficiencies in fire resistance of decks which support SCE’s or which act as fireboundaries can sometimes be overcome by the addition of deck to deck hangers. 152-RP-48 Rev 02. In the context of testing of PFP. All analyses are based on a circular or bunded fire and do not take into account potential running.9 Feedback from explosion testing at Spadeadam Large scale fire testing has been carried out at the Spadeadam test establishment. The HSE are currently planning a test programme to investigate this effect. 4. the samples are subjected to a standard jet fire test. This is a solution that can be applied for retrofit situations. Where the critical fire is below the deck these hangers would not be weakened as they would be located in a different fire area.fireandblast.

1 Nature of the gas jet fire An ignited pressurised release of a gaseous material (most typically natural gas) will give rise to a jet fire. the steps to prepare an initial scoping or indicative QRA of the fire hazards are also outlined. Feb 2006 Page 113 of 261 .2. In the case of high pressure releases of natural gas. Based on large scale experimental work (including unpublished studies by Advantica to which access has been granted for this guidance) and on the predictions of validated models developed and used by Shell and Advantica. each of these fire types is described in detail in terms of the likely nature of the flame and the thermal loading it may present to the surroundings. Except in the case of extreme confinement which might give rise to extinguishment. the potential heat loads from fires and the effect on the temperature rise of an engulfed object.2. Typical values can be used to assess the hazard to personnel and the likely effect on fire impacted obstacles using a simple calculation method. 5. plus the manner in which PFP may limit the rate of temperature rise of an engulfed object and how blow-down may reduce the heat load and hence the likelihood of failure.fireandblast.2. In the absence of impact onto an object. potential fires on offshore installations were categorised into six fire types. The high velocities within the released gas mean that they are relatively unaffected by the prevailing wind conditions except towards the tail of the fire.com 5. 5.2 Fire characteristics and combustion effects 5.2. Hence little or no smoke is produced by natural gas jet fires (typically <0. these fires are characteristically long and thin and highly directional. A jet fire is a turbulent diffusion flame produced by the combustion of a continuous release of fuel. Derivation of fire loadings and heat transfer 5.2. The fire types are considered further in terms of their characteristic flame and how their behaviour might be affected by confinement and/or deluge. In the offshore context. typical fire loading data are summarised for the fire types. The fire size is predominantly related to the mass release rate which in turn is related to the size of the leak (hole diameter) and the pressure (which may vary with time as a result of blowdown). the mixing and combustion is relatively efficient resulting in little soot (carbon) formation except for extremely large release rates.1 General In Section 3. the effect of active water deluge on the fire is discussed as is the effect of confinement. the combustion rate will be directly related to the mass release rate of the fuel. Using these typical fire loadings and calculations of heat transfer to objects. Following an expansion region downstream of the exit the flame itself commences in a region of sub-sonic velocities as a blue relatively non-luminous flame. Further air entrainment and expansion of the jet then occurs producing the main body of the jet fire as turbulent and yellow.01 g m-3). the high pressures mean that the flow of an accidental release into the atmosphere will be choked having a velocity on release equal to the local speed of sound in the fluid. In this section. Where appropriate.35. The parameters used to define the fire and the hazards presented by the fire in terms of thermal and smoke loading are defined. and the fires tend to be 152-RP-48 Rev 02. Also considered are the effects of deluge on fire behaviour.2 Gas jet fire 5.1 Introduction In the following sections generic fire types are identified for the types of fire that might occur on or near an offshore installation.

Neglecting such spatial variations. in the highly congested environment offshore. whereas the highest radiative heat load will be experienced where the more radiative part of the flame (usually nearer the end of the flame) is viewed by the object. whereas the radiative component increases with release rate as the flame becomes optically thick and more smoky. The net result is that the radiative heat transfer to the surroundings is lower than for higher hydrocarbon flames and this is reflected in the fraction of heat radiated. the combustion process within a natural gas jet fire is relatively efficient and produces little soot (carbon). there is a lower bound pressure which high pressure releases must exceed to produce stable flames. broadly speaking.1 “Fire loading to the surroundings”).1) will be inherently unstable and will not support a flame without some form of flame stabilisation.com less luminous than jet fires involving higher hydrocarbons. in most practical cases. this can result in the highest overall heat fluxes being experienced on the rear surface of an engulfed object which may seem counter-intuitive. However.4. such as the presence of another fire in the vicinity to provide a permanent pilot or stabilisation as a result of impact onto an object such as pipework. A factor which is often overlooked is the noise produced by sonic gaseous releases.3. impact onto a large vessel may significantly shorten the jet fire. and small leaks will most likely stabilise on the nearest point of impact. Clearly the total heat flux which is imparted to an engulfed object will vary over the surface of the object. for a given location of an object within a flame (as a proportion of flame length). 5. with the highest convective component likely to be experienced close to the point of impact of a flame where the highest velocities occur. deluge has little effect on the size. For hole sizes under 30 mm diameter. This is usually high pitched and so loud that it may prevent effective radio communication between personnel. vessels or the surrounding structure. As the more radiative part of the flame is closer to the tail. In practice this means that most small leaks (see Section 5. F. Hence the relative proportion of convective to radiative flux varies with fire size (see Section 5. Indeed.2 Effect of deluge on gas jet fires The activation of general area deluge can adversely affect the stability of high pressure gas jet fires. Simplistically. Similarly.2. However. however. this undesirable effect is very unlikely to occur due to impact onto obstacles providing adequate flame stabilisation. this extends approximately linearly from 2 barg at 30 mm diameter to about 75 barg at 8 mm diameter. impact onto an obstacle may also significantly modify the shape of a jet fire. CO concentrations in the region of 5 to 7 % v/v have been measured within a jet fire itself but this is expected to drop to less than 0. Therefore. the heat loading to engulfed obstacles is not diminished. particularly if the fire is not impacting onto an obstacle. for such fires (see Section 5. and impact onto a wall or roof could transform the jet into a radial wall jet where the location and direction of the fire is determined by the surface onto which it impacts. The same 152-RP-48 Rev 02. Feb 2006 Page 114 of 261 . the relative proportions of convective and radiative heat flux will vary over the surface. In addition. A further point to note is that some combinations of leak size and pressure will not give rise to an inherently stable flame. This implies that unstable flames may selfextinguish revert to leaks thus contributing to potentially explosive environments. except for very large releases where soot production starts to enhance the process. This aspect of flame behaviour should be considered in determining major hazard scenarios and their escalation paths. As noted above.2). impact within a short distance is very likely. the radiative heat transfer to objects engulfed by the flame is generally lower than for higher hydrocarbon flames. Apart from providing flame stabilisation. shape and thermal characteristics of a high pressure gas jet fire.fireandblast. The long thin shape may also result in a flame path which is not optically thick.2.4.1 % v/v by the end of the flame. Objects which are smaller than the flame half-width at the point of impact are unlikely to modify the shape or length of the flame significantly. but the high velocities within gas jet fires can result in high convective heat transfer to objects. As a result emergency actions could be hampered. Consequently these flames are not as luminous as higher hydrocarbon flames. the convective component is more or less constant with increasing size of release. Radiation emissions from natural gas flames arise mostly from water vapour and carbon dioxide.

The likelihood of flame extinguishment is significantly increased if the surroundings are already hot at the time the deluge is activated as the main mechanism which results in extinguishment of the jet fire is ‘inerting’. This is likely to result in increased levels of incomplete combustion products such as CO. 152-RP-48 Rev 02. if the deluge is activated at an early stage. then the fire may not be extinguished and some benefit in terms of reduced flame temperatures and wall temperatures may accrue. 30-40 % for 2 rows and 40-60 % for more than 2 rows (general area deluge). and so dry patches form where the temperature rise is undiminished by the action of deluge. However. The location where combustion occurs and the hottest parts of the flame may also shift due to the confinement. and this may lead to ‘external flaming’ after a period of time when the body of flame moves through the vent in order to find the oxygen required for combustion. Soot production is related to the equivalence ratio and hence the degree of ventilation and may range from about 0. CO levels of up to 5 % v/v at the vent may occur but after the onset of external combustion the CO levels drop to typically less than 0.com is true for dedicated vessel deluge systems.2. where the jet was directed away from the vent.4 Confinement and deluge of gas jet fires Deluge of a confined jet fire may lead to flame extinguishment and hence a serious explosion hazard from the continuing release. 5.2. increased levels of smoke (soot) and increased flame temperatures. which protect adjacent plant and in particular. the behaviour of under-ventilated confined fires changes with time as the air initially available within the compartment is consumed. that is evaporation of the water droplets leading to a mixture of gas/air/steam within the compartment which is outside the flammable limits. Increased deluge rates can further reduce incident radiation levels: 60-70 % at 18 l min-1 m-2. This leads to increased heat flux to objects and surfaces compared to an unconfined fire. Unlike unconfined fires.2. However. aid escape by personnel. MV57) nozzle operating at 12 l min-1 m-2. particularly in regions close to the ceiling of a compartment where hot combustion products may be trapped and recirculate.fireandblast.5 g m-3 at = 2. incident radiation levels can be reduced by about 20 % for a single row of nozzles. the water being unable to form a film over the vessel in the presence of the high velocity jet. The water vapour may also contribute to flame instability by reducing the burning velocity.3 to up to 2.1 g m-3 at = 1. The major benefit of area deluge with jet fires arises from the suppression of incident thermal radiation to the surroundings. 80-90 % at 24 l min-1 m-2 for general area deluge. If ventilation is plentiful or the jet is directed through a vent then there may be little difference in jet fire characteristics compared to an unconfined fire. Nozzles producing smaller droplet sizes can have an enhanced mitigation effect.5 % v/v by the end of the flame. prior to the compartment walls becoming hot. There is some evidence that the deluge increases combustion efficiency resulting in lower CO and increased CO2 levels within the flame.3 Effect of confinement on gas jet fires The behaviour of a jet fire within a confined or partially confined area will depend upon the degree of confinement and the direction of the jet relative to the ventilation opening. if the release rate of gas is large relative to the size of the confinement or the ventilation openings are small then the fire may not be able to entrain enough air for complete combustion inside the compartment. Certain ventilation patterns could lead to flame instability and extinguishment. 5.2. The worst case condition is likely to occur if the jet fire is slightly under-ventilated as this leads to high heat release rates and enhanced soot production. increased temperatures were seen at the interface between the smoke layer leaving the compartment and the air layer entering the compartment. In tests involving horizontal jet fires in a compartment incorporating a single wall vent. but there is an increased risk that the droplets will be blown away by the wind. Feb 2006 Page 115 of 261 .g. most particularly in the area furthest from the vent. For a medium velocity type (e.

estimating the release rate is difficult. two-phase releases involving gas dissolved in.2. These lower velocities also make the fires more wind affected whilst the higher hydrocarbon content of these fuels increases the flame luminosity.3. As for the gas jet fire described above. that is. or stabilised crude) are unlikely to be able to sustain a two-phase jet fire. In the case of a pressurised gas-liquid mixture (such as ‘live’ crude). Feb 2006 Page 116 of 261 . producing a fire which is long and thin (although generally wider than a gas only jet fire) and highly directional. or mixed with.1 Nature of the two-phase jet fire An ignited release of a pressurised liquid/gas mixture (such as ‘live crude’ or gas dissolved in a liquid) will give rise to a two-phase jet fire. As for gas jet fires. the generally lower velocities arising from flashing liquid releases (such as propane or butane) results in a lower convective flux to engulfed objects. the high velocities may still occur and result in a high convective contribution. making these type of jet fires a ‘worst case’ in terms of total heat flux to engulfed obstacles.2.3 Two-phase jet fire 5. impact onto an obstacle larger than the flame half. Measurements in the smoke downstream of a ‘live crude’ jet fire determined an optical obscuration factor of typically 10 % over a 200 mm path length. when the release is two-phase (such as may arise from a relatively long pipe connected to a liquid storage vessel). However. The output from Codes used to characterise 2-phase releases should be viewed with caution as these types of mixed fluid flows are very difficult to model accurately. Experimental work suggests that the maximum combined fluxes occur for gas-liquid mixtures which are about 70 % by mass liquid. high velocities and high flame luminosity. 152-RP-48 Rev 02. a pressurised release of a liquid can also give rise to a jet fire in which two-phase behaviour is observed if the liquid is able to vaporise quickly. The soot produced then contributes significantly to the radiant emissions from the flame. This corresponds to a visibility distance of about 5 m. The higher hydrocarbon content also results in more soot being formed than in a natural gas jet fire. Impaction to an obstacle close to the leak can also result in a local cold spot and hence high temperature gradients to the surrounding hot areas. kerosene. inducing thermal stress. The gas stream atomises the liquid into droplets which are then evaporated by radiation from the flame. Two-phase jet fires (particularly those generated by flashing liquid releases) are significantly less noisy than gas jet fires. The liquid content results in relatively higher release rates for a given aperture and pressure compared to gaseous releases and. although there is no available experimental data quantifying the difference. (for example propane. The exception is when liquid drop-out occurs. Pressurised releases of non-volatile liquids (for example. leading to a potentially increasing accumulation of fuel as a pool.fireandblast. a liquid can result in a jet fire which combines the worst aspects of both the gas jet fire and the flashing liquid jet fire. The generally lower exit velocities from flashing liquid releases lead to shorter flame lift-offs and proportionately shorter and more buoyant flames overall. a spray of liquid droplets may be formed which can drift in ambient winds and become dispersed over a wide area. butane). At high pressures. diesel. resulting in a proportionately higher contribution of radiative flux to engulfed objects. However. some liquid drop-out is likely and hence the formation of a pool.com 5. This is most likely to occur when a liquid is released from containment at a temperature above its boiling point at ambient conditions whereupon flash evaporation occurs. even so. whilst the higher hydrocarbon content maintains a high radiative contribution. the two-phase jet fire is a turbulent diffusion flame produced by the continuous combustion of a fuel at a rate directly related to the mass release rate. unless permanently piloted by an adjacent fire.width at the point of impact may shorten or modify the shape of a fire significantly. However.

over 50 % the flames are significantly less radiative. at typical application rates (10 to 15 l min-1 m-2) it cannot be relied upon to maintain a water film over the vessel and hence to prevent vessel temperature rise in areas where dry patches form.4 Confinement and deluge of two-phase jet fires The effect of area deluge on two-phase jet fires in compartments is expected to be similar to that noted in Section 5. propane. 5. Experiments have shown that mixtures with a ‘water cut’ (defined as mass of water/mass of fuel x 100 %) of up to 125 % remain flammable. area deluge was found to be beneficial in reducing heat fluxes to the ceiling surface. Similar behaviour has been noted for ‘live’ crude jet fires with dedicated deluge although. Even dedicated vessel deluge alone can result in some reduction (~1520 %) in the incident thermal radiation to the surroundings as a result of modifying the flame characteristics.3. the use of dedicated vessel deluge to protect a vessel against a flashing liquid two-phase jet fire (e. For ‘live crude’ jet fires. during which ‘dead spaces’ occurred close to ceiling. In tests involving only partial confinement around the upper area of a module.2. 5. As for gas jet fires. Extinguishment could give rise to a mist-air explosion hazard and/or the formation of a liquid pool. Since dedicated vessel deluge is more effective at reducing the radiative heat fluxes in the region to the rear of the vessel. butane) can be more effective. and the amount of smoke produced reduces significantly.2. a 2 tonne LPG tank was effectively protected when subjected to a 2 kg s-1 flashing propane jet fire. no reduction in the rate of temperature rise was observed in the area where the fire impacted the obstacle.2. Feb 2006 Page 117 of 261 . 152-RP-48 Rev 02.4 for gas jet fires. However.2 Effect of deluge on two-phase jet fires Compared to the situation with a gas jet fire. the combination of area deluge and dedicated vessel deluge can be effective in reducing overall heat fluxes to a vessel such that the temperature rise is halted or at least the rate of temperature rise is reduced. However.3). although the rate of rise may be expected to reduce to 20-70 % of the rate without deluge for a propane jet fire. corresponding to a visibility distance of about 2 m. which protect adjacent plant and in particular can aid escape by personnel. in this case. resulting in a shorter flame and some reduction in heat fluxes to certain areas of an engulfed object. notably the front (where flame impact occurs) and top areas.com A special case of interest at some installations is ‘live’ crude which includes a significant quantity of water. At 24 l min-1 m-2 the smoke changed from black to grey due to the increased water vapour and this had the effect of increasing the obscuration factor to about 20 %.2.fireandblast. although not necessarily capable of supporting a stable flame in the absence of some other supporting mechanism.3. 5. For water cuts under 50 % no significant reduction in heat fluxes to engulfed objects can be expected (<10 %).3. This may prevent vessel failure. using area deluge at the ‘standard’ rate of 12 l min-1 m-2 is unlikely to modify the flame behaviour although there is some evidence that a higher deluge rate (24 l min-1 m-2) can result in water interaction with the flame.3 Effect of confinement on two-phase jet fires Confined two-phase jet fires are expected to behave in a similar manner to confined gas jet fires (see Section 5. in tests with an increased water application of 30 l min-1 m-2.2. Measurements in the combustion products downstream of ‘live crude’ jet fires determined an obscuration factor due to smoke of typically 10 % over a 200 mm path length without deluge and no significant change was noted in the presence of area deluge at 12 l min-1 m-2. and the overall heat flux to an obstacle can be reduced by 40 % or more. reducing the flame extent and the amount of smoke produced.2. a major benefit of area deluge of two-phase jet fires arises from the attenuation of incident thermal radiation to the surroundings. Nevertheless. especially if combined with a blowdown strategy.g. The water interacts with the flame to some extent.2. reducing the flame luminosity and the amount of smoke produced. The inclusion of water also slightly increases flame length and flame buoyancy.

In tests involving condensate [5. Combustion of these relative high hydrocarbons inevitably leads to the production of large quantities of soot. Consequently. F (see Section 5. This occurs for fires only a few metres in diameter for heavy hydrocarbons due to the radiative emissions from soot.com 5.5 % v/v is recommended. the obscuration factor over a 200 mm path length. sufficient control achieved that manual fire fighting could be safely undertaken.05 kg m-2 s-1 for some crude oils). Feb 2006 Page 118 of 261 . Hence. The ability of the water to enter the pool of fuel is higher on the upwind side of the fire where the thickness of the flame is least. particularly in large pool fires where the size of the pool reduces the ability of air to mix with the fuel evolving in the centre of the pool. In measurements in the smoke downstream of 16 m2 diesel pool fires. the fraction of heat radiated. the fire itself radiates heat to the pool surface causing more fuel to evaporate. although the smoke hazard may increase). if not. (Hence. 5. However. Measurements of the obscuration factor over a 200 mm path 152-RP-48 Rev 02. However. the fire coverage of the pool was reduced by over 90 % in 10 minutes. an upper limit is reached when the radiation to the pool surface is independent of the flame thickness above it (optically thick). once ignited.5 g m-3 to 2. as a result of the soot. little vapour evolution occurs unless the fuel is heated and hence initial ignition of a spillage may be dependent on the presence of other fires in the vicinity providing sufficient energy to initiate vapour evolution. the flame size was commensurate with a pool of less than 10 % of the original area.5 g m-3 can be expected. Except in very large fires where buoyancy driven turbulence may become significant. the low velocities within the fire result in the flame being affected by the wind and this factor determines the trajectory of the flame. Similarly a spillage from non-pressurised liquid storage will result in a liquid pool being formed. to the extent that the smoke can result in reduced thermal radiation to the surroundings by screening of the radiant flame.1 Nature of hydrocarbon pool fires A pressurised release of a hydrocarbon liquid which is not sufficiently atomised or volatile to vaporise and form a jet fire will form a pool. with time.4.fireandblast. the predominate mode of heat transfer being radiation.2 Effect of deluge with hydrocarbon pool fires General area deluge can be very effective in controlling hydrocarbon pool fires and mitigating their consequences. The soot emissions result in the characteristic yellow flame and large quantities of smoke can be produced. CO levels measured at the same location were in the range 100-200 ppm v/v.2.3.1 kg m-2 s-1 for light hydrocarbons to 0. after 10 minutes.1]. Consequently. If the water is capable of reaching the liquid pool.2. Soot levels in the range 0. Larger fires from larger pools will tend to result in higher mass burning rates. the flame retreats from the upwind side of the spillage. the cooling of the fuel reduces vapour evolution and hence reduces the size of the flame. For hydrocarbons such as condensate the vapours will evolve readily from a spillage and be easily ignited. leads to reduced radiative heat transfer from the flame to the fuel surface which also contributes to reducing the vapour evolution. However. The introduction of a small percentage (1 %) aqueous film forming foam (AFFF) into the deluge system can significantly increase the rapidity of achieving fire control and extinguishment. such as diesel or crude oil. For heavier hydrocarbons. The heat transfer from the flame to the pool controls the vapour evolution rate (and hence mass burning rate) and within minutes the fire will reach a steady state condition of flame size and mass burning rate. as the deluge starts to take effect on the fire. was found to be typically 30 % corresponding to a visibility distance of about 1 to 2 m.1 for definition). The mass burning rate is also dependent on the fuel type and for liquid hydrocarbons decreases with increasing carbon number (typically ranging from 0. the fire size is reduced and complete extinguishment may result or.4.2]. Ignition of the vapours evolving from the liquid can lead to a pool fire which is a turbulent diffusion flame. These low velocities also result in low convective heat fluxes to objects engulfed by the fire.2. in turn. This. the amount of smoke is also significantly reduced [5. Due to the much reduced fire size when a pool fire is subject to water deluge.4 Pool fires on an installation 5. a worst case level at the end of the flame of about 0. tends to decrease with increasing fire size.

simultaneously.fireandblast. However. Soot levels up to 3 g m-3 might be expected.2. This then reduces the radiation back to the pool surface and results in a lower mass burning rate. It burns with a nonluminous invisible flame. unless the walls become hot due to insulation in which case the flame temperatures may rise significantly (by about 200-400 ºC) and hence the heat fluxes to objects within and near the flame will rise. Nevertheless. In the case of adequate ventilation for combustion. A point of note is that the cooling effect of deluge may reduce the smoke buoyancy and possibly result in smoke being present at lower heights where it may hinder the visibility for personnel trying to escape. if the water does not directly interact with the fire itself and only interacts with the stream of smoke evolving then there is no evidence that the water deluge ‘washes’ soot out of the smoke. reduce the degree of fire attack.5 Methanol pool fires Methanol differs significantly from the hydrocarbon fuels discussed above. Feb 2006 Page 119 of 261 .3 Confined hydrocarbon pool fires The behaviour of confined pool fires will depend on the degree of ventilation and whether the confining structure becomes hot and re-radiates heat to the fire.4. 5. An initially ventilation controlled pool fire may then become fuel controlled at this lower burning rate and any external flaming that had formed is likely to be reduced or to cease entirely.4. As for jet fires.4. the mass burning rate and fire behaviour will be similar to a pool fire in an unconfined area. the residence time of the water droplets in the flame and hot walls leads to water evaporation within the flame and a significant reduction in flame temperatures.2.2. especially in combination with general area deluge which will. CO up to 5 % v/v may be measured at a vent prior to the onset of external flaming although at the end of an external flame the levels are likely to fall to less than 0. This is associated with soot combustion and can lead to less smoke being evolved.com length in the combustion products from a diesel pool fire dropped from typically 20-30 % to negligible levels when the fire was deluged and CO levels at the same location dropped from over 100 ppm v/v to typically 10 ppm v/v. The restricted air flow may result in an external fire at the vent openings and so areas not previously exposed to fire outside the compartment may now be exposed to flame engulfment and thermal radiation. the water deluge will also provide benefit to objects not engulfed by the fire by attenuating the thermal radiation (see Section 5.2.5 % v/v. the flame size and heat fluxes to objects from ventilation controlled confined pool fires may be lower than from unconfined fires unless re-radiation from hot compartment walls increases flame temperatures. 5. The vulnerable areas will be the underside where the water cannot provide coverage. The heat loading to objects engulfed in a pool fire may also be reduced by the activation of deluge. The mass burning rate 152-RP-48 Rev 02. In under-ventilated conditions both the CO and soot levels increase. and the downwind side where the flame is likely to be thickest. However if the ventilation is less than that required for combustion the fire becomes ventilation controlled and the mass burning rate (and hence the vapour evolution rate) decreases to match available air flow. The use of dedicated vessel deluge would be expected to protect an object engulfed in a pool fire.2.4 Confined hydrocarbon pool fires with deluge When deluge is activated within a confined space. in these areas the rate of temperature rise is likely to be reduced and additional benefit accrues from the action of the deluge in reducing the fire size.3]. most particularly on the surfaces where a water film can be maintained. No soot is produced and the thermal emissions are dominated by the molecular emissions associated with the production of CO2 and water vapour. nor that the toxicity (such as CO level) is reduced [5.2) 5. Due to the reduced burning rate. The flame height is about one third that expected from an equivalent sized hydrocarbon pool.

such as a pre-existing fire on the platform. For oil spills. Therefore. and low heat fluxes to engulfed objects. The low radiative emissions of the flame results in a low fraction of heat radiated. Flame temperatures of typically 900 to 1200 ºC can be expected and heat fluxes to engulfed objects up to 250 kW m-2. The likelihood of ignition also decreases with time following a spill. On an offshore platform an important hazard may be to personnel entering the flame unwittingly due to its invisibility. The flames tend to spread from the ignition source downwind across the spill without significant crosswind spread and flame spread upwind is slow.5 mm for condensate. Following initial ignition. Overall. This is because the temperatures at the pool/water interface are never above 100 ºC and are generally close to ambient temperatures. all of which are time dependent. However.2. The significant difference between liquid spills on an installation and liquid spills on the sea is that on the sea it is unlikely that ignition will occur at all. sometimes rapidly. Assuming an ignition source is present. The cut-off point for condensate is unknown. and the wind speed and direction. the rate of flame spread downwind increases with increasing wind speed. These are: pool thickness. engulfment of the installation legs and the underside of the platform are possibilities. the fuel flashpoint is also a factor in determining the likelihood of ignition. It is not known if the flame has reached ‘optical thickness’ at this scale and hence whether this would increase further for larger fires. When the pool is thick.fireandblast.03 kg m-2 s-1 has been measured for a 10 m diameter pool. F. 5.4.05-0.5 mm for heavy crude oils. The presence of sea currents or regular waves (swell) does not appear to influence flame spread but it may be curtailed by choppy conditions or steep waves. about 0. the likelihood of ignition of a liquid spill reduces with time as the lighter fractions evaporate. fuel flashpoint. 1 mm for light crude. Firstly. emulsions with over 25 % water are considered to be not ignitable. the likelihood of ignition is low (especially for less volatile hydrocarbons such as crude oil) due to a number of factors which are discussed below. especially if a high energy ignition source is present such as another fire which will enhance evaporation rates. even for a large spillage. Emulsification of the fuel and water arises primarily as a result of the initial spill conditions and the subsequent weather/sea conditions. This equilibrium thickness depends upon fuel type with typical values of less than 0. Breaking waves and wind speeds over 15 m s-1 will promote emulsification and result in a low 152-RP-48 Rev 02.2.com increases with increasing pool size and a value of 0. the flame spread across the surface of a spill on the sea will depend upon the volatility of the fuel. and perhaps most importantly. Following an initial spillage. and emulsification. so spills where immediate ignition could occur (or ignition has already occurred) are likely to be the main focus of attention.5 Hydrocarbon pool fires on the sea Once established. Consequently. Emulsification of a hydrocarbon fuel with sea water will reduce significantly its flammability.1 mm for light crude oils and 0. there is a minimum pool thickness which is capable of supporting a stable flame. the pool will spread out quickly reaching an equilibrium thickness within a few hours. Fuels with a flashpoint lower than the ambient temperature will ignite readily but those with a flashpoint over 100 ºC (such as stabilised crude oil) will require the presence of a major heat source to achieve ignition. but is likely to be higher. the likelihood of an ignition source being present near the sea surface would generally be low.1). there are three main factors that influence the ignitability of liquid spills onto the sea. When the thickness falls below these levels. Feb 2006 Page 120 of 261 . a steep temperature gradient through the pool allows evaporation at the pool surface and potential ignition. depending on the size of the fire. Their significance in inhibiting ignition increases with time resulting in lower ignition probabilities. the cooling effect of the sea prevents evaporation of the fuel from the pool surface which is required for combustion. For crude oils. and 1-3 mm for heavier oils. Therefore. a hydrocarbon pool fire on the sea will behave in a similar manner to an unconfined pool fire on an installation (See Section 5.

is related to the water depth.fireandblast. leaving the oil droplets to rise purely as a result of their buoyancy. In summary. Again. This process provides significant opportunity for emulsification and reduces the ignitability of any resulting pool. unless the water is very shallow (<10 m). (which. A full bore rupture of a sub-sea pipeline will result in a highly transient outflow. In deep water (>300 m) some formation of gas hydrates is likely and over 500 m some researchers report complete conversion to hydrates.6 Gas fires from sub sea releases In shallow water. the streamlines diverge horizontally and tidal currents interact with the plume and this may result in the area where the gas bubbles break the surface being twice that expected by conical plume development only. failure of a sub-sea gas pipeline (or a pipeline containing a gas-oil or gas-condensate mixture with a high GOR) could give rise to a flammable gas release at the sea surface. ignited. In deep water. When close to the water surface. may be extinguished in the process) are likely to break up and begin to emulsify. In shallow water the plume of bubbles will increase in radius approximately linearly as it rises through the water producing a conical plume. 5. (The wave action will also cause fluctuations in the pool thickness and may result in breaking up of the pool and thereby prevent sustained burning). Experiments carried out by Sintef (Sintef has carried out two experiment series at Spitzbergen in 1994. the likelihood depends primarily on the depth of sea water. However. so the resulting fire hazard will also vary with time. Some researchers suggest that water turbulence may keep the hydrates in suspension and the gas may never reach the surface. Even within a short timeframe. strongly affected by the wind. In case of stabilised crude. However. The least emulsification is likely to result if spills run down an installation leg or occur close to the sea surface. large volume spillage of a volatile liquid hydrocarbon close to the sea surface near to the installation in calm or moderate conditions represents the worst case scenario in terms of a pool fire on the sea. Most other scenarios have a low likelihood of producing a pool fire. this may lead to 152-RP-48 Rev 02. Feb 2006 Page 121 of 261 . However. Any significant gas component in the oil provides additional initial upward momentum and the oil droplets are likely to break the surface in a location above the original failure and then spread radially.7 BLEVE Fire impingement on a vessel containing a pressure liquefied gas causes the pressure to rise within the vessel and the vessel wall to weaken. the lower initial buoyancy will result in the rising plume being more affected by tidal currents and the oil may reach the surface at a location displaced laterally from the original leak site. although this also depends on gas composition and water temperature. It could be considered as a ‘pool fire’ with an effective mass burning rate given by the release rate divided by the area over which the gas surfaces. a low velocity. The operation of a sub-sea ESDV valve may limit the duration of the release and also give rise to a rapidly changing release rate with time. burning large oil slicks on the sea surface) can be referred to for further information. some or all of the gas component may form gas hydrate solids and this results in a reduced initial upward velocity for the leak.2. 5. Spills which plunge into the sea from the platform. Whether the resulting gas breaking the surface is flammable will depend on the rate of gas released and the area over which it breaks the surface which.2.com probability of ignition. as already noted. the oil plume widens as it rises through the water and breaks up into small droplets. the resulting gas release at the sea surface is likely to be a dispersed low velocity source and burn as a weakly turbulent diffusion flame. the hydrates will rise solely as a result of buoyancy and are likely to reach the sea surface some distance laterally from the original leak site. if burning. the pool may then be carried along by tidal currents and wind. significant emulsification will have occurred resulting in very low ignition probabilities. In the case of sub-sea oil pipeline failures in shallow water (<200 m). In such cases. In these circumstances the lateral movement of the rising plume may be significant and the oil eventually reaches the surface some distance from the original leak location.

This highly transient event generates a pressure wave and fragments of the vessel may produce a missile hazard leading to failure of other items in the vicinity and hence the potential for escalation. the deluge is unlikely to provide any significant benefit in terms of mitigation of the event. incorporating the normal pressure relief valve. especially within the region of potential flame engulfment. a large approximately spherical fireball is produced which is highly radiative with little smoke obscuration due to the fuel atomisation and vaporisation leading to good mixing with the air. in relation to a pressurised separator vessel containing unstabilised condensate and gas. a BLEVE is unlikely to develop in the same way as described above for an onshore facility as the vessel will probably be located within a module amongst other vessels and pipework. In addition. the event presents a severe hazard to exposed personnel. These events are known as Boiling Liquid Expanding Vapour Cloud Explosions. is higher than for a large pool fire involving the same fuel.fireandblast. the presence of this other equipment may lead to increased overpressures being developed as the burning gas cloud expands through the congested region. Onshore. apart from the risk of the BLEVE causing escalation. for example. Consequently. The potential for escalation is thus much increased due to the proximity of other vessels and pipework which may be struck by missiles. Whilst pre-activation of deluge (area and dedicated vessel deluge) may prevent or delay the occurrence of a BLEVE. Even a small inventory of fuel being involved in a BLEVE event (<100 kg) would be expected to produce a fireball extending throughout the entire volume a typical module. The liquefied gas which is released flashes producing a vapour cloud which is usually ignited. However. BLEVEs are generally associated with the storage of pressure liquefied fuels such as LPG. Additionally. Feb 2006 Page 122 of 261 . Experimental work has shown that a standard LPG storage vessel. Following failure. a BLEVE hazard might be considered. The presence of roof confinement will significantly modify the shape of the developing fireball and lead to increased lateral development. Consequently. F. there is a flame engulfment and thermal radiation hazard produced by the fireball. BLEVEs. can fail catastrophically within 5 minutes of being subjected to a medium sized (<2 kg s-1 or ~100 MW) jet fire. despite operation of the relief valve.com catastrophic failure and the total loss of inventory. 152-RP-48 Rev 02. In the offshore context. How much of the initially liquid fuel vaporises and takes part in the fireball depends upon the degree of superheat of the fuel at the time of failure and also whether liquid becomes entrained into the flashing vapour. The initial upward momentum and vorticity of the fireball causes it to rise into the air as it develops and eventually it burns out when all the fuel is consumed. the fraction of heat radiated.

... Equation 5-1 τ The view factor is a function of the flame shape.................... d (m)..... a revised ‘effective’ fraction of heat radiated is defined as F ′ ....com 5............. most integral or empirical mathematical models will assume some kind of simplified flame shape which is then used to calculate the view factor............. (typically more than 2 flame lengths away) the flame shape is not critical......... Equation 5-2 Q Where: A Q is the surface area of the flame (m2) is the net rate of energy release by combustion of the fuel (kW) and Q = m H is the rate of fuel combustion (kg s-1) is the net calorific value (kJ kg-1) m H The incident radiation received in the far field at a distance.. Therefore.....3 Fire and smoke loading 5.................. The flame average surface emissive power is also a function of the flame shape............... to a person or object from a fire can be described as: q=VEt Where: V E is the view factor of the flame by the receiver... in particular to personnel during escape and evacuation... the fraction of the heat of combustion of the fuel radiated to the surroundings is defined as: F= EA ..... average surface emissive powers used by the model will not necessarily be the same as those measured during an actual fire.... so a simplified approach can be taken using the ‘point source’ model.. However.........8 on a dry day......... is the average surface emissive power of the flame (kWm-2) (Note the surface emissive power varies over the surface of the flame and hence an area-based average is required to represent the whole surface) is the atmospheric transmissivity (kW m-2) .......fireandblast..... for the purposes of this document...... Equation 5-3 4 π d2 The atmospheric transmissivity will depend upon the prevailing atmospheric conditions (absolute humidity) and the path length....... The incident thermal radiation............ fog would significantly reduce this value. q....... However.... Feb 2006 Page 123 of 261 ..........3......... producing water droplets in the air.. In this approach.. from the fire is then expressed as: qd = τ FmH .. Consequently....... In the far field....... accounting for the 152-RP-48 Rev 02........... but might typically be 0...... The activation of water deluge on an offshore installation.. whereby the difficulties of defining a flame shape and associated average surface emissive power can be avoided.... effectively reduces the transmissivity by absorbing radiation.....1 Fire loading to the surroundings An obvious hazard presented by a fire is the thermal radiation to the surroundings..........

S d . This ‘point source’ model can be useful for estimating the distance to a given radiation level....... this reduction in size (area of the surface actually burning) would result in a reduced value of m and hence would be reflected in calculations made using the above equation....................... Equation 5-5 As a guide.... given by: S d = ∫ qd ( 4 3) dt ...... Ts and Ta h is the convective heat transfer coefficient (kWm-2K-1) However..............5).... (but not including the transmissivity of the atmosphere between the fire and the receiver which is outside the deluged area). Equation 5-6 where ( ) ε f . object surface and ambient temperatures respectively (K) T f ... would usually be possible for an average employee wearing typical protective clothing........... the point source model is not suitable for estimating incident radiation to locations close to (certainly within one flame length) of the flame....2 for a range of fire types.... jet fires are little affected by deluge..... it is important to consider both the level of radiation and the duration of exposure and the consequences for personnel (in terms of burn injuries or fatality) are often related quantitatively to the dosage level....... σ is the Stefan-Boltzmann constant (5........... a radiation level of about 5 kWm-2 can be tolerated for about one minute and consequently represents a level from which it is reasonable to assume that escape.... Equation 5-4 4 π d2 Note that the above equation does not necessarily take account of any effect of the deluge on the flame behaviour itself – such as lowering the flame temperature or size... a mathematical model which defines a realistic flame shape (and ideally a variation of surface emissive power over the flame to allow for smoke obscuration) should be used................... Feb 2006 Page 124 of 261 .... Typical values of F and F ′ are provided in Section 5.com reduced transmissivity in the area being deluged. As will be noted later............ In the case of pool fires...... some may be reflected back and the surface will also lose heat by radiation........ The incident radiation at a distance.4.. In the case of personnel......... from the fire can be estimated using: qd = τ F′ m H .. However....fireandblast.... d(m)..3. without significant injury.............2 Thermal loading to engulfed objects The thermal load per unit area to an object engulfed by fire will be a combination of radiation from the flame (qrl) and convection from the hot combustion products (qcl) passing over the object surface...... 5... Hence the total absorbed load per unit area ( qt ) is given by: 152-RP-48 Rev 02.. (see also Section 5.. In the near field..3........ where it may be significantly in error.. not all the thermal loading is necessarily absorbed by the surface.6697 x 10-11 kWm-2K-4) are the flame. τ f are the flame emissivity and transmissivity respectively.... Hence the thermal load can be written as: q1 = qrl + qcl q1 = ε f σ T f4 + τ f σ Ta4 + h T f − Ts ... but pool fires can reduce significantly in size...........5..

.. for an accurate transient calculation of the temperature rise of an object.. α f = ε f and τ f = 1 − ε f .3.. if ε s is taken as 1... giving: qt = qr + qc qt = ε s σ ε f T f4 − Ts4 + h T f − Ts .. typical values of these parameters are provided in Section 5...4. In this way.5.. the absorbed load will reduce.. If combustion is efficient and complete then the products from burning a hydrocarbon mixture comprise carbon dioxide and water vapour.. providing the ambient oxygen levels are not significantly affected..com qt = ε f α s σ T f4 − ε s α f σ Ts4 + α s τ f σ Ta4 − ε s τ f σ Ts4 + h T f − Ts ( ) Equation 5-7 where α s . Radiometers are designed and calibrated to measure ε f σ T f4 . Consequently. Equation 5-8 should be summed over the area of the object. whilst Ts is low...... ε f and h are required. This is particularly the case with the convective load which reduces linearly with increasing object temperature.. to determine the total load absorbed by an object.... Hence. Equation 5-8 ( ) ( ) When considering an actual object engulfed by a fire. 5..2 for the range of fire types...... Feb 2006 Page 125 of 261 .. Hence the fluxes measured and reported for calorimeters are given by Equation 5-8 with ε s = 1 and Ts ≈ 333 K and can be regarded as a conservative estimate of the total heat flux absorbed by an engulfed object. Subtracting the measured radiative flux from the measured total heat flux enables the initial convective flux absorbed by the object to be determined...fireandblast. However. the flame temperature exposed to different parts of the object surface may vary. experimentally measured flux levels can be used to derive input data for transient heat-up calculations (see also Section 5. α f are the absorptivities of the surface and flame respectively. the term involving Ta is small and can be neglected. Using an estimated or measured value for T f enables h to be determined at the measurement location. the combustion process of non-premixed hydrocarbon fuels is rarely so efficient (especially for higher hydrocarbons) and intermediate combustion products such as carbon monoxide (CO) and soot (carbon particles) are usually formed within the flame and may persist beyond the flame envelope within the stream of combustion products.. similarly the flame velocities (and hence convective heat transfer coefficient) may vary. radiative and convective fluxes (as defined in Equation 5-8 above with ε s = 1 and Ts ≈ 333 K ) are also provided in Section 5. These are not toxic or harmful. it provides a conservative estimate of the radiative flux absorbed by an object... Furthermore.3). Assuming that both the flame and surface can be considered as diffuse grey bodies. Also. typical values of the total.. These instruments are designed to have a surface emissivity close to 1 and are maintained at a low temperature throughout the experiments...2. At an early stage... as the object engulfed in the flame heats up. (The foregoing excludes fuels containing sulphur or sulphur compounds which can present a toxic hazard).3 Smoke loading The combustion of hydrocarbons produces large volumes of initially high temperature combustion products which disperse and cool down.... the flux measured by a radiometer is approximately ( qr ε s ) and so. then α s = ε s .. the parameters T f . researchers often quote heat fluxes measured during experiments using calorimeters (for total heat flux) and radiometers (for radiative flux). Incomplete combustion may 152-RP-48 Rev 02.. However.. together with the emissivity of the surface (which itself may change as the surface heats up). Where possible..4. Therefore.

....... φ .. Equation 5-10 ⎝ I 0 ⎠ 2. φ = 1 and the rate of formation of products will be (r + 1) times the mass burning rate of fuel........fireandblast................ the excess air in the products dilutes the smoke... The visibility of exit signs can be significantly improved if they are 152-RP-48 Rev 02. For well ventilated fires where plentiful air mixes with the fuel............ Feb 2006 Page 126 of 261 ......303 Where..... the mass concentration of particles in the combustion products is difficult to measure and an alternative approach is to determine the optical density by measuring the attenuation of a beam of light passing through the smoke. Equation 5-9 a m a r is the mass burning rate of fuel is the mass rate of air entrained is the mass ratio of air to fuel required for stoichiometric burning (that is ~15) Hence..... CO is toxic and soot particles are an irritant to the lungs...... The equivalence ratio............. I I0 is light intensity through the smoke is the intensity without smoke is the extinction coefficient is the mass concentration of soot (g m-3) is the path length of the optical beam through the smoke κ C L The optical density... For soot.. φ > 1 and the concentrations of intermediate combustion products (for example CO and soot) will increase and are more likely to persist beyond the flame envelope..... is given by: ⎛ I ⎞ 10 D10 = −10 log10 ⎜ ⎟ = κ C L .. φ < 1 and more products may be produced compared to the case of stoichiometric combustion..... The optical density.....com also lead to unburnt fuel being carried over in the products as well....... However. expressed in terms of unit path length (D10 / L in db m-1) correlates reasonably well with visibility with 1 db m-1 corresponding to a visibility of about 10 m and 10 db m-1 corresponding to about 1 m......... A rough estimate of the mass flow rate of combustion products evolving from a fire can be made by multiplying the fuel mass burning rate by the ratio of air needed for complete combustion. The amount of CO within the combustion products is usually quantified in terms of its volume concentration as a volume percentage (or ppm).......... For methane this figure is about 17... reducing both the concentration of toxic products and soot and also lowering the temperature.... The soot also reduces visibility and may affect the ability to escape.. D10 .. The amount and nature of the combustion products produced by a fire is determined by the fuel combustion rate and the amount of air involved in the combustion reaction or entrained within it..2 and for higher hydrocarbons it is about 15.. for stoichiometric burning.. For fires where the ventilation is restricted to an extent that insufficient air is available for complete combustion.... defined as: φ =r Where... m ......

For pool fires on the sea. Similarly. the duration of large gas leaks may be relatively short. For leak sizes 10 kg s-1 and above.3 need to be considered. refer to Section 6.7 even a small inventory would be expected to give rise to a fireball extending throughout a module resulting in serious consequences for personnel within the immediate area.5 times the distance of a surface illuminated sign.com back-illuminated and may be seen at 2. 5. would be expected to burn in the fuel controlled regime.3. For BLEVEs. A large pool fire would be expected to produce a flame reaching to the roof of a module and be affected by the confinement.4 Estimating fire and smoke loadings 5.2. as discussed in Section 5. these leak sizes are considered for the gas jet fires and two-phase jet fires.fireandblast. 10.2.3. For more information on smoke and its effects on people.1kg s-1 Medium leaks – typically 1kg s-1 Large leaks – typically 10 kg s-1 Major failures – typically >30 kg s-1 For high pressure gas releases. A leak classification often used is: • • • • Small leaks – typically 0. Consequently.4. A similar effect might arise for a small pool fire within a compartment within a module and these fires should be considered as behaving like a large pool fire. For pool fires. Feb 2006 Page 127 of 261 .6. the fire is large compared with the average module and it may be necessary to consider the fire to be ‘confined’ with the consequent effects on fire characteristics as discussed in Sections 5.7. an effective drainage system may limit the inventory involved in a fire. It may also suffer from restricted ventilation.3 and 5. 152-RP-48 Rev 02. within a typical open module.1 Inventories and release rates The inventories of isolatable sections between ESDVs may vary considerably but typically would be less than 10 tonnes for gas and 25 tonnes for liquids. two sizes are considered: • • Small pool (typically less than 5 m diameter) Large pool (typically >10 m in diameter) A small pool fire might typically result for a leak rate in the region of 1 to 2 kg s-1 and.4.5 and 6. with the smallest leaks being more common. For liquid spills. Hence. For gas inventories. Historical data also shows that the likelihood of a release is also related to its size. For a QRA a range of representative scenarios should be considered (see also Section 2. In the following section. excluding those associated with the well and risers and utility fuels such as diesel and methanol.2. this duration may be further reduced by a successful blowdown of the isolated section. these correspond to failure sizes of the order of 1. The inventory of an isolatable section and the size of a leak will determine the maximum duration of resulting fire.7. which will be determined by the hole size and pressure. that is. as small spills are unlikely to affect the installation.2. the effects of confinement on fire characteristics as discussed in Section 5. only a gas fed fire at the sea surface due to major failure of a 24” diameter sub-sea pipeline is considered.2.11). 30 and 100 mm diameter respectively. sufficient air for combustion should be available and the fire behaviour would not be affected by confinement or restricted ventilation.2. only large spills are considered. The resulting fire size following an accidental release will be strongly dependent on the mass release rate of the fuel.

(See Section 5. the following information is provided for the four release rates of Section 5.2. whereby correlations for flame dimensions were suggested for jet and pool fires together with guidance on typical heat loadings to engulfed objects. the fire size and thermal loading from fires should be assessed using mathematical models which have been extensively validated against large scale data. and predictions made by Shell and Advantica.com 5.fireandblast. tabulated values are provided giving guidance on typical fire sizes and heat loadings for the release rates identified in Section 5. The values presented were derived from information in the literature. – The total heat flux to an engulfed object together with the radiative and convective components. emissivity and convective heat transfer coefficients are also provided.4.1. the values shown in Table 5-2 correspond to this worst case condition. Values of typical flame temperature.1. – The effect of confinement on fire characteristics and the combined effect of confinement and deluge. more detailed and comprehensive version of the guidance values provided in the Energy Institute document ‘Guidelines for the design and protection of pressure systems to withstand severe fires’ Information on smoke loading is also based on experimental data gathered by Advantica and Shell.1 General Ideally. In this section a similar approach to the Interim Guidance Notes is taken and updated to reflect recent knowledge and experimental work. so that calculations of the object heat-up can be performed (see Section 5. Note that these fluxes represent the initial values when the engulfed object is cold. This information is presented in Table 5-1 for gas jet fires and Table 5-2 for two-phase jet fires. – The effect of deluge (where appropriate) in terms of the reduction in the heat flux to engulfed objects and the enhanced attenuation of incident radiation to the surroundings using the Effective Fraction of Heat Radiated.2. However.4.2. As discussed in Section 5.4.3. much of which is unpublished.2 High pressure jet fires – gas and two-phase Wherever possible. In essence the fire loading data presented here is an updated. for two-phase jet fires.3.4. so that items or personnel within that range can be identified and the consequences of flame engulfment considered. the results of an extensive body of large scale experimental data (some of which is unpublished but to which Advantica has kindly provided access). F’ (see Equation 5-4). – The CO level and soot concentration in the smoke produced. Consequently. so that estimates of the far field incident radiation hazard can be made using Equation 5-3 in Section 5. A range of such models are available on a licence or consultancy basis. 5. For the six fire types identified and discussed in Section 5. F. – The Fraction of Heat Radiated.4.1: – The expected flame extent.5 “Heat transfer”).4. 152-RP-48 Rev 02. a simplified approach was proposed in the Interim Guidance Notes.2 Typical values 5.3 and Annex D). Feb 2006 Page 128 of 261 .2. the maximum heat fluxes to engulfed objects have been found to occur when the mixture is about 30 % gas and 70 % liquid by mass.

Feb 2006 Page 129 of 261 . take F’=0. h = 0.40 0.13 CO < 0. but after external flaming <0.01 1.01 Increased CO up to about 5% v/v at a vent prior to external flaming.2.fireandblast.75. Soot levels depend on equivalence ratio from about 0. Tf = 1600K.3 to 2.08 CO < 0.5 % v/v at the end of the flame. It should be noted in Table 5-1 and Table 5-2 that for the largest leaks (i.05 CO < 0.08 0. for use in Equation 5-4 (See Section 5.1 Soot ~0.5F for >2 rows at 12 l min-1 m-2. 80 100 1560 130 120 1560 180 120 1560 230 120 1560 εf 0.1 g m-3 at φ = 1.8F for 1 row of water sprays.0 15 0.01 10 40 0.2. the heat flux figures should be used with caution.5 g m-3 at φ = 2. Where heat flux calculations are required for larger leak rates.1 Soot ~0.e. a flow rate >30 kg s-1 a single number is given for the total heat flux which could be interpreted as implying a constant value for all of these larger release rates. 152-RP-48 Rev 02.2).0 Increased heat loadings up to 400 kWm-2. In far field. h (kWm-2K-1) Effect of deluge No effect on heat loadings to engulfed objects.13 CO < 0.09) Effect of confinement Affected by enclosure shape and openings Total heat flux (kWm-2) 180 250 300 350 Radiative flux (kWm-2) Convective flux (kWm-2) Flame temperature.25 0. Tf (K) Flame emissivity.095 0. (280 kWm-2 radiative. F’=0.1 Soot ~0. May improve combustion efficiency and reduce CO levels within flame.095 0.55 0.095 Convective heat transfer coefficient. CFD simulations can be used to obtain data on the effects of larger fires.com Table 5-1 High pressure gas jet fires Size (kg s-1) Flame length (m) Fraction of heat radiated. F CO level (% v/v) and smoke concentration (g m-3) 0.1 Soot ~0.01 >30 65 0.1 5 0. εf = 0.7F for 2 rows and F’=0. 120 kWm-2 convective.70 0. Risk of extinguishment and explosion hazard if deluge activated when enclosure is already hot and fire is well established.

Take FL = 0.3 to 2.3. h (kWm-2K-1) Effect of deluge 200 100 100 1560 300 180 120 1560 350 230 120 1560 400 280 120 1560 0. Fraction of Heat Radiated.2.095 0.0 Effect of Confinement Affected by enclosure shape and openings See equation below table CO < 0. Fuel mix of 30 % gas.70 0.1 Soot ~0.5 % v/v at the end of the flame.1 5 1. take values as per 30 kg s-1 two-phase jet fire. Feb 2006 Page 130 of 261 . 70 % liquid by mass Size (kg s-1) Flame length (m) Fraction of heat radiated.2. 0.0 13 10 35 30 60 1.5 for crude oil.32 for C4.070 Some benefit to engulfed objects but temperature may still rise although at a slower rate.01 CO < 0.45 for C6-C25 (including condensate and diesel).080 0.85 0. Total heat flux (kWm-2) Radiative flux (kWm-2) Convective flux (kWm-2) Flame temperature (K) Flame emissivity.01 CO < 0.095 1. Risk of extinguishment and potential formation of pool.24 for C3. but after external flaming < 0.5 g m-3 at φ = 2. 152-RP-48 Rev 02. Combined area and dedicated deluge may prevent temperature rise if effectively applied.55 0.01 CO < 0. In far field take F’ as per Table 5-1.00 0. of mixture involving x% liquid by mass: ⎛ x ⎞ Use Fm = ⎜ ⎟ ⋅ ( FL − FG ) + FG where FG is the fraction of heat radiated for natural gas as given ⎝ 100 ⎠ in Table 5-1 and FL is the fraction of heat radiated for the liquid fuel involved. and 0.1 g m-3 at φ = 1. see Section 5.095 0. Convective heat transfer coefficient.fireandblast.2. F CO level (% v/v) and smoke concentration (g m-3) 0. Fm . 0.30 0.01 Increased CO up to about 5 % v/v at a vent prior to external flaming.com Table 5-2 High pressure two-phase jet fires Flashing liquid fires (such as propane or butane).4.1 Soot ~0.0 230 160 70 1300 Increased heat fluxes. See Section 5. Soot levels depend on equivalence ratio from about 0.1 Soot ~0.1 Soot ~0.

so that items or personnel within that range can be identified and the consequences of flame engulfment considered. The mass burning. where the rate of fuel combustion.com 5. • • • • This information is presented in Table 5-3. F. The effect of deluge in terms of the reduction in the heat flux to engulfed objects and the enhanced attenuation of incident radiation to the surroundings using the Effective Fraction of Heat Radiated.3 Pool fires on the installation The following information is provided for pool fires on an installation: • • • The expected flame extent. so that the duration of a fire following a spillage might be assessed and to provide input to calculations of the incident radiation field.5). 152-RP-48 Rev 02. emissivity and convective heat transfer coefficients are also provided. Note that these fluxes represent the initial values when the engulfed object is cold. is taken as the mass burning rate times the area of the pool. The effect of confinement on fire characteristics and the combined effect of confinement and deluge.3. Values of typical flame temperature. Feb 2006 Page 131 of 261 .4.1. The total heat flux to an engulfed object together with the radiative and convective components. The Fraction of Heat Radiated. The CO level and soot concentration in the smoke produced. m . F’ (see Equation 5-4).2.fireandblast. so that calculations of the object heat-up can be performed (see Section 5. so that estimates of the far field incident radiation hazard can be made using Equation 5-3 in Section 5.

0.5 CO < 0. Take values as per large hydrocarbon pool fire. Take values as per large hydrocarbon pool fire for worst case.2 Considerable fire control and potential extinguishment can be achieved.06 Diesel – 0.7F for 2 rows and F’=0.fireandblast.4 for other rates) See Section 5.5 % v/v at the end of the flame.055 Kerosene – 0. Water soluble but effect of water deluge unknown.045-0.12 0.5 – 2.90 - 0.25 Large hydrocarbon pool >5 Up to twice pool diameter Crude – 0.8F for 1 row of water sprays. See Section 5. F CO level (% v/v) and Smoke Concentration (g m-3) 0.90 0.15 Negligible CO < 0.06 Diesel – 0.4. 152-RP-48 Rev 02.4.0.2.4.4.com Table 5-3 Pool fires on the installation Pool fire parameter Typical Pool Diameter (m) Flame Length (m) Mass Burning Rate (kg m-2 s-1) Methanol pool 5 Equal to pool diameter 0.5 Soot 0.10 C3/C4s – 0. Convective Heat Transfer.03 Small hydrocarbon pool <5 Twice pool diameter Crude – 0. Mass burning rate reduces to match available air flow.2. Expect reduced flame temperatures and reduced or no external flaming.06 Condensate . Expect a reduction in flame coverage (and hence flame size) of up to 90 % within 10minutes.045-0. but after external flaming about 0.5 Soot 0.09 0. In far field take F’ = 0. F’=0. Feb 2006 Page 132 of 261 . Rapid extinguishment with AFFF.02 Extinguishable using AFFF. Up to 50 % reduction in radiative heat flux to engulfed objects. Soot levels up to 3 g m-3 .4F for >2 rows at 12 l min-1 m-2 (See Section 5.2.06 Condensate .15 Effect of confinement Any See Section 5.5 – 2.3.5 Total Heat Flux (kWm-2) Radiative Flux (kWm-2) Convective Flux (kWm-2) Flame Temperature (K) Flame Emissivity. Increased CO up to about 5 % v/v at a vent prior to external flaming. If confinement is severe then mass burning rate will decrease to match available air flow and large external fire at vent expected.055 Kerosene – 0. Fraction of Heat Radiated. h Coefficient (kWm-2K-1) Effect of Deluge 35 35 0 1250 125 125 0 1250 250 230 20 1460 0.2.25 - 0.3.2. See Section 5.4.09 C3/C4s – 0.

Values of typical flame temperature. This topic is an area of some uncertainty and model predictions vary considerably. Similarly. Feb 2006 Page 133 of 261 . where the rate of fuel combustion. the area at the sea surface over which the gas emerges will depend on the depth and the gas release rate.5 “Heat transfer”). For these reasons. 152-RP-48 Rev 02. depending on the gas outflow and the depth. so that calculations of the far field incident radiation hazard can be made using Equation 5-3 in Section 5. predictions of the fire hazard following the rupture of a long 24” diameter natural gas pipeline operating at 100 barg at a depth of 50 m suggest that the fire diameter might be of the order of 100 m with a flame length of 150-200 m. The Fraction of Heat Radiated. the gas plume at the sea surface may not be within flammable limits.1. so that items within that range can be identified and the consequences of flame engulfment considered. it can be regarded as a large pool fire and the values presented in Table 5-4 for fraction of heat radiated and heat fluxes are recommended. On the basis that the fire is a low velocity laminar flame. simplified guidance cannot be readily provided and the use of a model is recommended.fireandblast. is taken as the mass burning rate times the area of the pool.4 Fires on the sea The following information is provided in Table 5-4 for hydrocarbon pool fires on the sea: • • • The expected flame extent. The release will also vary with time. emissivity and convective heat transfer coefficients are also provided. • • The gas outflow from a sub-sea pipeline will depend on the pressure and the pipeline size. For illustrative purposes. Furthermore. so that calculations of the object heat-up can be performed (see Section 5. The CO level and soot concentration in the smoke produced. so that the duration of a fire following a spillage might be assessed and to provide input to calculations of the incident radiation field. m . The total heat flux to an engulfed object together with the radiative and convective components.4. The mass burning. F. this variation depending upon the length of pipeline which is depressurising.com 5.3.2.

. Table 5-5 presents the following data in relation to BLEVEs: • Typical maximum fireball diameter (assuming unconfined) based on the mass of fuel involved in the BLEVE.5 250 230 20 1460 0.. The expected duration as a function of the mass of fuel involved in the BLEVE.060 Diesel – 0.12 CO < 0..02 Fraction of Heat Radiated.045-0.. h (kWm-2K-1) 5.. which can be used to calculate the maximum incident radiation received at a location d.2.200 0..5 – 2.. Consequently.....fireandblast......... Feb 2006 Page 134 of 261 ...... and the maximum flame volume calculated assuming a spherical geometry.. Equation 5-11 where: t is the duration of the BLEVE event (s) is the atmospheric transmissivity τ 152-RP-48 Rev 02. F CO level (% v/v) and Smoke Concentration (g m-3) Total Heat Flux (kWm-2) Radiative Flux (kWm-2) Convective Flux (kWm-2) Flame Temperature (K) Flame Emissivity..055 Kerosene – 0.... In relation to incident radiation levels outside the fireball.. Convective Heat Transfer Coefficient. the key parameters of interest in terms of a consequence assessment are the extent of the flame and the incident radiation hazard to personnel outside the flame... These parameters are also highly transient. Consequently.... remote from the fireball (more than one fireball diameter distant from edge of fireball) using the equation: qd .060 Condensate – 0...5 Soot 0.....com Table 5-4 Hydrocarbon pool fire on the sea Pool fire on sea parameters Typical Pool Diameter (m) Flame Length (m) Mass Burning Rate (kg m 2 s 1) Value >10 Up to twice diameter Crude – 0..5 BLEVEs BLEVEs are highly transient events in which a fixed inventory is instantaneously released....100 C3/C4s – 0.. The Modified Fraction of Heat Radiated F*. The subsequent combustion gives rise to a fireball which grows in size to a maximum before burning out as all the fuel is consumed. Hence the area of a module which would be expected to be engulfed in flame can be assessed by dividing the volume of the fireball by the height of the module...max = • • τ F*M H 4 π d2 t kWm-2 .. both the maximum level experienced and the ‘dosage’ over the duration of the event are of interest in order to determine the effect on people.....90 0.4.

these being: • • • Empirical models. t = 0. within reason.48 x M0.825 x M0. These equations have been used to derive the values presented in Table 5-5 for maximum diameter and duration.4.47 x M0. because of the physical basis of the equations. but their applicability is limited to the range of experimental data used to derive them. Such models will also often contain some parameters which have been empirically derived from experimental data.975 t = 0.3 Predictive models for fire loading There are basically three types of predictive models which can be used to predict fire characteristics and the thermal loading from fires.fireandblast. combustion and thermal emissions. integral models provide an effective method for predicting fire characteristics and are generally easy to use. to situations outside this range.26 0.325 V = 142. for example CCPS Guidelines for Chemical Process Quantitative Risk Analysis suggests that: D = 6. to varying degrees. However. Integral models use equations relating the fire characteristics to the physical processes involved.35 (ONLY for use in Equation 5-11 to derive maximum incident radiation at a locations remote from the fireball) Maximum Diameter (m) Maximum Flame Volume (m3) Duration (s) Modified Fraction of Heat Radiated. However. F* 5.325 . Table 5-5 BLEVEs Parameter Characteristic expressed as function of BLEVE fuel mass (kg of fuel) D = 6. Comparisons with large scale data showed reasonable agreement.48 x M0. Strictly speaking. Nevertheless.75 x D. h = 0. They are generally easy to use.com M H is the mass of fuel involved in the BLEVE (kg) is the calorific value (kJ kg-1) d is the distance from the centre of the fireball where the dosage is experienced (m) Various correlations have been developed relating the maximum diameter (D). Empirical models contain.825 x M0. the models can be applied. maximum height (h) and duration (t) of the fireball following an unconfined BLEVE to the mass of fuel released. Numerical (CFD) models. such as mixing. the relationships are simplified and are generally one-dimensional. they should only be applied to the range of circumstances for which they have been validated by experimental data. 152-RP-48 Rev 02. Integral (or phenomenological) models. a physical basis combined with correlations which have been derived from experimental data.26. Feb 2006 Page 135 of 261 .

.g... and the dynamic behaviour of the fire.. they can be useful to study in detail a particular fire scenario of interest due to its severity..g.......5.....5 Heat transfer 5... leak location.. The CFD predictions use more realistic geometry and dynamic models and may require the risk assessment to take into account new parameters such as the leak jet direction. However.. in a large pool fire.. 152-RP-48 Rev 02.. 2002 [5. For these reasons. radiative heat transfer still represents 50 % to 60 % of the heat load. 2003) [5...1 Mechanisms for heat transfer 5....5]. it is not routinely used... 5. However..5... qrad = VF Eτ ..... 1953 [5. a uniform SEP is taken over the whole flame shape but this a gross simplification of what may happen in practice. 5. pool fires. only those parts of the respective surfaces that can see one another contribute to the value of the view factor... the CFD method is well established following the NORSOK Z13 standard...fireandblast..com Numerical models (CFD) attempt to model in 3-dimensions the time varying processes within a fire such as the fluid flow and combustion processes.. For explosion risk....5. CFD codes are not routinely used for general risk assessments.. previously...5] and SFPE... for fire risk calculations.2 Radiation Radiation from the hot gases and incandescent soot particles is the main mechanism for transferring heat. If an object is definitely not directly impinged by flame..4]).. The radiative heat emission process is modelled by assuming that the radiation comes from the flame surface... It is noted that resulting predictions may be sensitive to small changes in input parameters if not used properly. The impact of potential design changes (such as increased ventilation) can then compared and provide at least qualitative guidance on how to reduce the hazard. e. McGuire J H. radiative transfer to an impinged object represents at least 80 % of the heat transferred..g.... may have the relatively low SEP of 60 kW m-2. This section concentrates on determination of heat transfer using the values identified in Table 5-1 through to Table 5-5 for key parameters measured in intermediate and large scale trials as.. which may comprise two thirds of the flame shape.. convection and conduction is well covered in the standard text books (e.. Even with impinging high velocity jet fires. Annex D discusses the above model types in more detail and provides an in-depth review of different fire modes currently available. Incropera and De Witt... the radiative heat transfer is given by Equation 5-12 below.. The surface emissive power (SEP) of a flame is the heat radiated outwards per unit surface area of the flame.. In principle.... E (kW m-2) is the surface emissive power of the flames and τ is the atmospheric transmissivity. As radiation travels in straight lines..1 General Basic heat transfer by radiation.. The view factor is purely a geometrical parameter determining the proportion of radiation leaving one surface which reaches a second surface. Generally.... Equation 5-12 where VF is the geometric view factor. Feb 2006 Page 136 of 261 . Analytical expressions for the view factor are available (e. the base of the flame may have the relatively high SEP of 180 kW m-2 whereas the smoke obscured flames... these have not been readily available.... For flames with relatively little momentum.1.. this physical basis enables these models to study complex geometries and conditions far removed from experimental data used to validate them... This follows on from the approach recommended by the Energy Institute (formerly the Institute of Petroleum) in assessing the effect of severe fires on pressure vessels (Energy Institute... Therefore these models generally require ‘expert’ users.1. For example. This makes the risk analysis larger.

...... triangles or squares) and the view factors for each of these summed...02368 ⎡log10 X ( H 2O ) ⎤ ⎣ ⎦ ⎣ ⎦ −0.. Figure 5-1 Variation of atmospheric transmissivity with distance at 15 °C The 0.... d is the path length (m).....7] gives the following empirical expression. which takes both water vapour and carbon dioxide concentrations into account: t = 1..8 transmissivity suggested in Section 5. This expression assumes that the flame is 1500 K....com 2002 [5.006 − 0..3..001164 ⎡log10 X ( CO2 ) ⎤ ⎣ ⎦ ⎣ ⎦ Where 2 2 Equation 5-13 X ( H 2O ) = Rh d S mm 288..... For example.03188 ⎡log10 X ( CO2 ) ⎤ + 0. The atmospheric transmissivity over a specified path length.01171 ⎡log10 X ( H 2O ) ⎤ − 0... Usually it is assumed that there is emission at every wave length (black or grey body)......g.. The transmissivity given by this expression at 15 °C is illustrated by Figure 5-1.... which was chosen as an average between that of a propane fire and a LNG fire..6]) for standard geometries. Smm is the saturated vapour pressure of water (mmHg) at atmospheric temperature T (K)....651 . For path lengths of 10 m or less it is usual to take the atmospheric transmissivity as 1. Wayne (1991) [5. jet fires by a conical frustum and fireballs by circular discs through the centre of the fireball.. Numerical integration may be used for more complex geometries where the flame surface is divided into a series of regular shapes (e.1 corresponds to that at a distance of 25 m at a relative humidity of 60 %. can be calculated from the temperature and relative humidity of the atmosphere provided that the emission spectrum is known....... Atmospheric attenuation is primarily caused by absorption of radiation by carbon dioxide and by water vapour and scattering by dust particles. Expressions of differing complexity are available ranging from those that just take distance into account to those that also consider water and carbon dioxide concentration. pool fires may be represented by tilted cylinders... Feb 2006 Page 137 of 261 . Equation 5-14 T Rh is the fractional relative humidity...fireandblast. due to the presence of water vapour and carbon dioxide. 152-RP-48 Rev 02..

. these are generally assumed to be 0... the heat of combustion (H........ kJ kg-1) will be known from the literature (e.. 2000 [5. for QRA. Feb 2006 Page 138 of 261 .. For jet fires..4. In the case of fireballs.2... Equation 5-15 4π d2 Generally.. the radiation received (qd.fireandblast... 10 or > 30 kg s-1... Weast....825... the radiation to the surroundings may be represented by a point source model. The relevant data are summarised in Table 5-6 below... 1..... This situation can be modelled by treating the fireball as a disc through the centre of the fireball just touching the surface and the target as a vertical receiver (normally it is necessary to determine both the vertical and the horizontal component of the view factor) on the surface (see Figure 5-2).... Application of the two techniques is illustrated using data from the BLEVE of a 2 tonne LPG tank (Roberts et al. The mass burning rates ( m ) for hydrocarbon pool fires are given in Table 5-3...... 1981) and typical values for the fraction (F) of the heat of combustion radiated for six main fire scenarios considered are given in Section 5. the mass burning rate is based on the total amount of fuel released divided by a fireball duration calculated using an expression (0.......com As indicated in Section 5. Slightly higher values are given for C3/C4 and condensate pool fires if the pool diameter is greater than 5 m........8]). Table 5-6 Example LPG BLEVE fireball data Parameter Heat of combustion Amount of fuel released Duration Mass burning rate Fraction of heat of combustion radiated Surface emissive power Fireball diameter Value 46000 kJ kg-1 1708 kg 7s 244 kg s-1 0..1..... kWm-2) at a distance d (m) is given by: qd = τ FmH ........g.26) based on the mass released.. 152-RP-48 Rev 02..38 312 kW m-2 71 m The full data set indicated that the maximum output from the fireball was at the lift off point...... the mass burning rate is based on the leakage rate and....1..3. For a point source model.... mass0.

5 ⎜1 − ⎟ ..5 ⎜ 1 − 2 ⎜ R4 + 2 ( y2 − z 2 ) R2 + ( y2 − z2 ) ⎝ Hence... Equation 5-16 ⎟ ⎠ ⎛ n ⎞ VF = 0.............. Equation 5-17 4 + n2 ⎠ ⎝ Table 5-1 provides the data for applying both a solid flame and point source model. the results from application of each model are plotted in Figure 5-3. Feb 2006 Page 139 of 261 ............... 152-RP-48 Rev 02............ if z = R and y = n...........com Figure 5-2 View factor for circular disc with receiver off axis but parallel The view factor is given by............ Assuming an atmospheric transmissivity of 1.........R ⎞ ⎟ ⎟ ... [5...........fireandblast.........9]: ⎛ y2 + z 2 − R2 ⎜ VF = 0.

the receiver cannot “see” all of the flame..6697 x 10-8 Wm-2K-4).. Section 5. Convective heat transfer will always occur to some extent if there is direct flame impingement and..... The above models are only applicable if there is no direct flame impingement.5.com Figure 5-3 Comparison of solid flame and point source model for a fireball Figure 5-3 suggests that a solid flame model should be used if the object of interest is closer than two flame widths/lengths from the flame as........ in these circumstances..... see Section 5..... If the flames are impinging on an object then the radiation received may be approximated (ignoring reflection and re-radiation.2 gives typical values for these coefficients for a range of fire types and sizes. at these distances.... 5... Heat transfer by convection from impinging flames is represented by Equation 5-19.....fireandblast. Ts are the flame and object surface temperatures (K).1.. εs are the flame and surface emissivities.. at least as much radiative heat transfer will accompany it... Feb 2006 Page 140 of 261 ....4... qrad = ε s σ ( ε f Tf4 − Ts4 ) ....3 Convection Heat transfer by convection occurs when there are hot gases flowing over the surface of the object..... σ is the Stefan-Boltzmann constant (5.2 “Thermal loading to engulfed objects” for the derivation) by Equation 5-18.... Convective heat transfer can occur without significant radiative heat transfer if a plume of hot gases is channelled to an object not in direct (or reflected) line of site with the flames.... 152-RP-48 Rev 02... Equation 5-18 where εf.3........ and Tf...

.... validated empirical and phenomenological models are now available for most of the standard situations but the user needs to be aware of the limitations and simplifications made in the model used if the results are to be relied upon.... the plume temperature can be used in Equation 5-17 instead of the flame temperature if it can be reasonably estimated..... Some of these models have been incorporated in commercially available suites of programmes e.13] has developed a model for predicting the probability of impingement of jet fires. The convective heat transfer coefficient varies with geometry...... amount of back radiation etc. One-dimensional heat conduction under steady state conditions is represented by Equation 5-20 below... Hence............. even with a fairly large temperature differential.. a co-flowing wind will elongate the flames and a variable crosswind will move the flames from side to side. However... SFPE Handbook (2002) [5.....5. Tl is the temperature (K) at a thickness L (m) and k is the thermal conductivity (Wm-1K-1).... 5. The other conditions where conduction is normally taken into account are where heat is transferred through passive fire protection or through the walls of a vessel or pipe to a fluid inside. In cases where there is convective heat transfer from a hot plume............ They will move around in the wind and will vary with the fuel release rate....... Summaries and comparisons of these models are available in the standard reference books e.11].... Lees (2005) [5. Chamberlain (1995) [5.. Equation 5-19 where Tf and Ts are the flame and object surface temperatures respectively (K) and h is the convective heat transfer coefficient (W m-2 K-1)..12]...5....... away from or sideways to the receiver.. An understanding of the geometry of the flame is essential in order to apply the heat transfer mechanisms identified in the previous section... qcond = k (Ts − Tl ) L ..... the heat transmitted by conduction can be ignored.4... The thermal conductivity of carbon steel is about 45 Wm-1K-1 and hence.. gas velocity and temperature... A feature of most of these models is that the surface emissive power used for a particular situation will depend on how the flame geometry is modelled for that situation.1.... 5.. there can be problems through differential heating at the joints between thick and thin thick-walled structures.. (1995) [5.. PHAST.... flames are not static..... Hence a model using a high surface emissive power and relatively low flame area may/should give the same answer as a model using a relatively low surface emissive power but larger flame area.. enabling more realistic modelling in situations where the fire scenario can be fully described (this is discussed 152-RP-48 Rev 02.......2..10]..fireandblast. boundary layer conditions.... For a pool fire...g...com qconv = h (T f − Ts ) .2 Flame position relative to the receiver Generally.g....... “Yellow book” (1997) [5. The following are given as examples: • • • Carsley (1995) [5........... FRED.. Equation 5-20 where Ts is the temperature (K) of the surface exposed to flame.. the wind may tilt the flame towards.... Combustion models used in computational fluid dynamics (CFD) have advanced... Cracknell et al. Modern.4 Conduction Heat transfer by conduction is very small compared to the other methods of heat transfer but needs to be taken into account in some circumstances. Feb 2006 Page 141 of 261 .15] considered the hazards from confined pool fires in offshore modules......14] have developed one for the heat flux on a cylindrical target due to the impingement of a large-scale natural gas jet fire. With jet fires. the heat transmitted is low. Typical values for the heat transfer coefficient for a range of types and sizes of fire are given in Section 5... A fireball will present a smaller flame area up and down wind compared to the crosswind area. in most circumstances....

g.... 152-RP-48 Rev 02....... CFD would only be used to look at a particular case in detail when the extent of the safety issues or costs at risk justify it.. each representing a fraction of the total radiation emitted and each zone represented by a point source emitting this fraction of the radiation) may be used as an alternative to the solid flame model.g...2.... the situation is still complicated as the: • • Relative proportions of radiative and convective load from a flame will vary depending on the fuel type and location of the object within the flame........ In these circumstances.. For the general case.g. In assessing the heat transferred.. the main simplifying assumptions are that: • • • • There are no heat losses... calculations for an initial analysis can be readily performed if some of the above factors are simplified. heat conduction can be ignored. Equation 5-21 If the object is not impinged by flame (e. a platform support leg.. how much re-radiation there is from walls.. the heat transferred to a receiver will depend on whether it is fully.... Whilst detailed analysis may now be made using CFD and finite element analysis..... the heat transferred to the object surface from an impinging flame may be represented by Equation 5-8.. one approach used by industry is to estimate (using a solid flame model) the distance for 50 kW m-2 received radiation and assume that everything within this distance is impinged by flame and that everything outside this distance only receives radiation... beyond the 50 kWm-2 distance) then. partially or not enveloped in flame and.... In practice. the size and shape of the object and the location of the object within the fire: Particularly with jet fires... only general assumptions are normally made and in practice..... e... Even when there is full engulfment. it may be sufficient to apply a safety margin...com further in Annex D).. qrad = V f E τ .... in preparing a safety case......4.... the flames can be channelled along and around an object where heat loads will vary over the surface of the object and the heat absorbed by the object will vary with time... the heat transfer is by radiation and the solid flame model (Equation 5-1) should be applied. ceilings and process plant.. However.. the key decision is on whether or not the object is impinged by flame... If a key structural item is of particular concern.... to the flame length given by a model or the relevant table in Section 5........ and In most circumstances. It may be used at closer distances but the results will be very conservative.3... This may be acceptable in some situations.... As indicated in Section 5.. Equation 5-22 If the object is more than two flame widths/lengths away then the point source (Equation 5-3) or a multipoint source model (where the source is split into a number of zones. qtotal = qrad + qconv = ε s σ ( ε f T f4 − Ts4 ) + h (T f − Ts ) ... The ambient temperature can be neglected. Total heat loads will vary depending on the fuel type.... in partially or totally enclosed modules. ignoring the hot plume case......fireandblast. 50 %... Feb 2006 Page 142 of 261 .. The flame and receiver surface are considered grey bodies. e...

Tf and h as determined by the particular model used or as provided in the tables in Section 5...... m-1) defined as the heated perimeter (Hp.. Equation 5-24 dt Asteel Where Csteel is the steel heat capacity (Jkg-1 K-1) and ρsteel is the steel density (kg m-3).. Fire protected steel..beam... Pressure vessels (unprotected and protected).16] are still valid... The main situations considered are: • • • • Unprotected steel.. the heat up of the steel member is described by Equation 5-24 below.... particularly finite difference methods..5.. conservative calculations of heat up can be undertaken on the basis that.. those equations used a section factor (Hp/A... i.. ε s σ (σ f T f4 − Ts4 ) + h (T f − Ts ) = Vsteel dT Csteel ρ steel ......3 Temperature rise All the equations given above provide the heat flux to the surface of the receiver.19] and BSEN 1994-1-2 [5. m-1) is defined as Asteel/Vsteel (note: the steel subscripts are provided here to avoid confusion with other parameters) where Asteel is the surface area of steel exposed to fire per unit length and Vsteel is the volume of the section per unit length.beam will heat up.... 5. For an I . m2). Mathematical models..... BSEN 1993-1-2 2005 [5. ASFP (2002) [5.. Such models may also simultaneously calculate the heat up of a structure... Feb 2006 Page 143 of 261 . The key requirement is to determine the temperature rise in the item being considered and the time taken to reach the critical temperature for that particular component..fireandblast. m) divided by the steel crosssectional area (A.1 Unprotected steel The equations given in FABIG Technical Note 1 [5. e.... As the heat absorbed is a time dependent process.com qrad = τ FmH . ENV 13381-4 2002 [5....17] comment that in new European fire testing and design standards (e.....4.. People...18].. Using the Asteel and Vsteel notation.... εφ...e.. However.g.... Hence the lower the section factor the slower an I . steady state conditions exist...5. the heated perimeter (ASFP still use this in their examples and data sheets) is calculated as: 152-RP-48 Rev 02.3.. A steel section with a large surface area will receive more heat than one with a smaller surface area and the greater the volume the greater the heat sink........ Equation 5-23 4π d2 5......g..) the section factor (the unit remains the same... However. at any particular time...... a vessel or pipe work contents.....20].2.. an I-beam. are available which can undertake these calculations from first principles or with the input parameters εs... for a fully engulfed steel member....

.. API (2005) [5.3. for accurate calculations. 152-RP-48 Rev 02.22] advocate a heated perimeter approach when the steel is insulated..21]..4....com Figure 5-4 “I” beam heated perimeter Where B and D are the overall breadth and depth of the section and W is the web thickness. the heat up of the steel member is described by Equation 5-25.....fireandblast....... The problem is that it is very difficult to obtain a realistic value for both the thermal conductivity and heat capacity as most forms of passive fire protection react in a complex way................ Feb 2006 Page 144 of 261 .. light weight cementitious 0...... 5.51 W m-1 K-1.. dT = Asteel K PFP (Ts − T ) dt ..... Equation 5-25 dt Asteel In this case...... For a steel section that is not engulfed in flame. It is assumed that the insulation surface temperature (Ts) rapidly reaches the flame temperature..... Equation 5-24 and Equation 5-25 can be solved numerically (e. by using a spreadsheet with fixed cell addresses for the constants) by using incremental time steps.... It should be noted that the thermal conductivity and heat capacity of both the steel and the insulation material will vary with temperature and. columns etc are given by ASFP in the “Yellow” book (ASFP........ The equation assuming that the fire protection material has negligible heat capacity is shown below (Equation 5-26)... these would have to be expressed as parametric equations........ Equation 5-26 Vsteel Csteel ρ steel L where KPFP is the thermal conductivity of the protection material and L the thickness of the insulation material.. An example is given in Section 5. 2002) [5.......g... but the values given are approximate and should be treated with caution... e.2 Fire protected steel The Interim Guidance Notes [5....3 on pressure vessels....... the heated perimeter is the projected area of the member that sees the radiation. A comprehensive list of heated perimeter equations for different types of beams.g.. qrad = V f E τ = Vsteel dT Csteel ρ steel .....5..23] give approximate thermal conductivity values for typical insulations.3.

... applicable to each material are determined by multiple linear regressions... once it has all been used.... ceramic boards.... Summaries of their properties are reiterated below and should be read in conjunction with further detail in Section 3. The temperature will then rise with the material again acting as passive insulator but with a different thermal conductivity. which may take the form of a cladding or a coating (cementitious.... the manufacturers will have data from furnace tests with cellulosic and hydrocarbon heat up curves and will have resistance to jet fire test data. jet fire preceding a pool fire.. The temperature will be kept at this until all the chemically and physically bound water has been driven off....g.... steel may be protected from fire by passive fire protection. a thin steel panel backed by mineral wool. the thermal conductivity needs to take account of the unreacted material and the char and the fact that there are continual boundary and phase changes.25] give illustrations of how this works with product data sheets based on cellulosic fire curve furnace tests..fireandblast.. which then reacts to form more char..5. a1 and a2...... 152-RP-48 Rev 02... interpolation of fire test data is allowed but extrapolation is not. The insulation backed steel panels act as passive insulator until the insulating materials melts leaving voids..g. The manufacturers will have performed a series of furnace tests conducted on structural elements with varying section factors..... In general. Equation 5-27 Asteel where tresist is the fire resistance time (minutes). the manufacturers will use the ASFP (2002) [5....... at least 1 hour for a mean temperature rise of 140 °C.com Generally. the thermal conductivity needs to take account of different materials and of internal voids giving rise to internal convection effects and heat capacity will vary with each material used....... Cementitious coatings. to various fire durations and limiting temperatures.... These react to flames by melting and then swelling to form a hard char five to ten times thicker than the unreacted material thickness.. Hence the unreacted material is gradually being used and..2 “Passive fire protection methods”.... These will act as passive insulator with a thermal conductivity dependent on the amount of water present until the temperature reaches about 100 °C...... Feb 2006 Page 145 of 261 .. In most of these cases..... an overall thermal conductivity value must account for movement and evaporation of water in a situation where the total amount of physically bound water is not likely to be known......... vermiculite or intumescent)....... Equation 5-28 V a1 steel + a2 Asteel Generally.. the protection thicknesses for a given section factor and required fire resistance time can be derived using the rearranged equation: L= tresist − a0 .. thicknesses and duration required..... is derived by means of the empirical relationship: tresist = a0 + a1 L Vsteel + a2 L ..... In this case.... The furnace tests are chosen to cover the range of section factors.. The thickness of material (L) required to provide specific standards of fire resistance e... bare steel will be exposed...... a0.. Once a satisfactory correlation has been obtained...24] method to derive the thickness of material required to protect against a particular fire scenario or combination of fire scenarios e........ usually between 50 and 350 m-1.... Composite panels may comprise a series of panels of different materials with either air gaps between them or some or all of the gaps filled with insulating material... • • Not withstanding all the problems identified. Insulation materials such as rock wool contain resins that will melt and migrate....... The char is gradually eroded away exposing unreacted material. a removal jacket or a composite panel...... The constants.g... ASFP (2002) [5. • Inert cladding e...1. An intumescent coating. “Firewalls” and 3.5. Hence...

5.com A method of combining the results from furnace and jet fire tests is to compare results from tests on substrates with similar section factors (usually about 100 m-1) and use this to derive an “erosion” factor which is added to the value obtained from the expression derived from the furnace tests.2 to 6. Mass transfer within the liquid phase by flow of heated fluid into a stratified 'hot' layer lying above the bulk liquid. API has considered the requirements for pressure relief valves (API 520.3. Mass transfer from the bulk liquid or vapour to the outside environment through any holes in the vessel. Heat transfer into the vessel fluids by predominantly radiation in the vapour space. This data can also allow approximate thermal conductivities and heat capacities to be determined but they will be product specific and the manufacturers of the products being considered should be consulted. relative fractions of mixed hydrocarbons in a separator) in the fluids during each of the above processes. Feb 2006 Page 146 of 261 . (2000) [5. The heat transfer processes described above are shown schematically in Figure 5-5.6. However.27] and these are considered in Sections 6. and by natural convection or nucleate boiling in the liquid phase. The hot layer may or may not be stable.30] have considered this in regard to emergency depressurisation.3 Pressure vessels There are many different processes occurring when a flame interacts with a pressure vessel due to the complex behaviour of the flame. 2005) [5.29] have published guidance on the effects of severe fires on pressure vessels and Scandpower (2004) [5.fireandblast.g. Pressure.5.28] and the Institute of Petroleum (2003) [5. The key processes occurring during jet-fire impingement on pressure vessels include: • • • • • • • • • Heat transfer between the fire and outer surface of the vessel. 152-RP-48 Rev 02. by radiation and convection. Mass transfer out of the vessel through any open or partially open pressure safety valves (PSVs). Heat transfer through the vessel walls by conduction. Catastrophic vessel failure resulting in a possible BLEVE. if it is a realistic fire scenario. The wall may comprise of an outer passive fire protection (PFP) coating plus the underlying steel wall. This was reviewed by Roberts et al. in the vapour and liquid 'zones'.26] and emergency depressurisation systems (API 521. the vessel and the vessel contents. API only considers relatively small hydrocarbon pool fires and. Mass transfer between the liquid and vapour phases by evaporation. enthalpy and composition changes (e.6.5 discussing relieving and other process responses. a pressure vessel is much more likely to fail in a jet fire. 1997) [5.

(2001) [5...31] has applied the Shell HEATUP [5..34] also suggest that time to metal plate rupture is used in depressurisation system design.com Figure 5-5 Heat and mass transfer Various models have been proposed that take these factors into account although few have been fully validated. the iterative process for solving the time dependent heat transfer equations is illustrated for the vessel vapour wall case. As indicated above. at least for relatively thin walled vessels.... Persaud et al. In a time step ∆t. In practice.. a conservative estimate can be made of the time to failure by ignoring the heat transfer to the contents... 5... when a fire impinges on a vessel containing liquid....... On this basis. the wall in contact with vapour will heat up very quickly and the wall in contact with liquid will stay at a relatively low temperature unless film boiling occurs....33] the vapour wall reached up to 870 °C on failure whilst the wall in contact with liquid did not exceed 230 °C.1 Vessel walls LPG trials indicate that the prime cause of failure.. They give equations for all the physics describing heat and mass transfer processes and predict vessel failure by comparing the hoop stress with the ultimate tensile strength of steel....3... In flashing liquid propane jet fire trials on unprotected 2 tonne LPG tanks (Roberts et al............. 2000) [5.32] model to the heat up and failure of LPG tanks....... was heating the wall in contact with vapour to a temperature where the steel weakened rather than due to over pressurisation although over pressurisation will be an important factor if a vessel becomes hydraulically full.... the object will heat up by ∆T given by: ∆T = Csteel ρ steel L ∆t q0 ..... Feb 2006 Page 147 of 261 ........ Gayton and Murphy (1995) [5......fireandblast..... 152-RP-48 Rev 02...5....3. Equation 5-29 where the initial heat absorbed by the wall (ignoring heat losses to the contents) is given by Equation 5-30 below...

.............. the same failure points also shown in Figure 5-6....... ρ (kg m-3) Heat capacity of steel........ in general......8 1300 70 5.67 x 10-8 0.. C (J kg-1 K-1) -2 -1 Flashing liquid fires 1 kg s-1 (From Table 5-1) 230 160 70 1....... the surface temperature will be T1 = T0 + ∆T.................... Feb 2006 Page 148 of 261 .4....... h (Wm K ) Stefan-Boltzman constant.. Using the new T1 and substituting into Equation 5-30.. σ (Wm-2K-4) Wall thickness...8 1320 60 5.................. L (m) Density of steel............. for an initial temperature of 20 °C...........0071 7850 520 The predicted rise in wall temperature. 152-RP-48 Rev 02....fireandblast... Table 5-7 Data for calculation of LPG tank failure Parameter Total incident flux (kWm-2) Radiative flux (kWm-2) Convective flux (kWm-2) Emissivity of flame εf Emissivity of steel εs Temperature of flame... q1 = ε sσ ( ε f Tf4 − T14 ) + h (Tf − T1 ) ...... Equation 5-30 At time t1 = t0 + ∆t. Equation 5-32 and the temperature of the object will increase to Ti+1 = Ti + ∆Ti where ∆Ti = Csteel ρsteel L ∆t qi ..........8 0...com q0 = ε sσ ( ε f Tf4 − T04 ) + h (Tf − T0 ) . The measured times to failure and maximum wall temperatures (all at positions in contact with vapour) for each degree of fill are summarised in Table 5-8......0 0.................... at time ti.0071 7850 520 Trials data 170 110 60 0.... Equation 5-31 So.................... then the heat absorbed at time t1 is. Tf (K) Heat transfer coefficient..67 x 10-8 0......... the thermal flux absorbed by the object is given by: qi = ε sσ ( ε f Tf4 − Ti 4 ) + h (Tf − Ti ) ................2... Equation 5-33 In order to illustrate the conservatism of the data in Section 5.. both trials data and data derived from Table 5-1 are given below in Table 5-7......... where T0 is the initial surface temperature...... is illustrated in Figure 5-6......

For vessels containing liquid. 5.3. Two expressions are given.6.com Table 5-8 LPG tank failure data Degree of fill of 2 tonne tank (%) 20 41 60 85 Time to failure (s) 250 286 217 254 Maximum wall temperature at failure (Celsius) 870 704 821 848 Pressure at failure (barg) 16. vapour or super-critical fluid the vessel wall is considered to be unwetted and the heat transfer to the contents is not directly calculated. as only relatively small hydrocarbon pool fires are considered. the actual heat transfer processes are very complex.6 24.2 Vessel contents The overall response of pressure vessels is considered further in Section 6.6 m. 152-RP-48 Rev 02.36] approach has been used to calculate the heat transfer to a vessel contents. gives about 11 minutes as the time. the approach is based on the heat transfer to the wetted surface of vessels up to a height of 7. Use of the small hydrocarbon pool fire data in Table 5-3.3. Feb 2006 Page 149 of 261 .fireandblast. Traditionally.5 21. the API (2005) [5.125” plate). API 521 [5. For vessels containing only gas.35] gives 12 minutes to reach 593 °C.4 Heat up times 1200 1000 Wall temperature (oC) 800 600 Flashing liquid jet fire data Trials data 200 Failure data 400 0 0 60 120 Time (s) 180 240 300 Figure 5-6 Comparison of heat up time with LPG failure times and temperatures A comparison can also be made with API (2005) [5. one (Equation 5-34) where adequate drainage and fire fighting equipment exists and one (Equation 5-35) where it does not.5.35] data for an unwetted 25. (the API data are based on calculations from a gasoline trial with a 0.3 18.4 mm plate. As indicated above.

.......... Table 5-9 API 521 environment factors Type of equipment Bare vessel Water deluge protected vessel Depressurising and emptying facilities Insulated (conductance 22.. The environment factors are given in Table 5-9....000 1.. F is an environment factor and A is the total wetted surface area (m2).... Equation 5-34 Qabsorb = 70900 F A0..075 0.84 kWm-2 K-1) vessel Insulated (conductance 2.68 kWm-2 K-1) vessel Insulated (conductance 3.82 . Two figures are given for the incident heat fluxes from fuel-controlled fires.....030 0............026 Note that credit is only given for insulated vessels.300 0.82.. Various rules are given for the application of these values and the original publication should be consulted before use of the values given......37] consider slightly higher heat fluxes than API....87 kWm-2 K-1) vessel Environment factor (F) 1.. Their incident heat fluxes for jet and pool fires are summarised in Table 5-10...g..... their approach is not suitable if the fire scenario identified is more severe than a about 110 kW m-2 hydrocarbon pool fire e... Hekkelstrand and Skulstad (2004) [5....71 kWm-2 K-1) vessel Insulated (conductance 11. Table 5-10 Global and local peak loads Jet fire Heat load Leak rate > 2 kgs-1 Local peak (kWm-2) Global average (kWm-2) 350 100 Leak rate* > 0...038 0.000 1.........com Qabsorb = 43200 F A0.27 kWm-2 K-1) vessel Insulated (conductance 1. They consider small to medium size fires on the basis that the aim is to prevent escalation to a large fire...050 0........ The local peak heat load is used to calculate the rise in steel temperature and global average heat load is used to calculate the pressure profile..150 0... Feb 2006 Page 150 of 261 .fireandblast.............. 152-RP-48 Rev 02..36 kWm-2 K-1) vessel Insulated (conductance 5............... Equation 5-35 where Qabsorb is the total heat absorbed (W)....1 kgs-1 250 0 150 100 Pool fire * This calculation is for an object close to the fire.. The expression A0.. In the likely confinement offshore... As is recognised by API... a jet fire or a confined hydrocarbon pool fire.000 0.....80 kWm-2 K-1) vessel Insulated (conductance 2..... it would be more appropriate to use A rather than A0.82 is an area exposure factor which recognises that large vessels are less likely than small ones to be completely exposed to the flame of an open fire.. API now makes it clear that the insulation must be passive fire protection but the requirement is that the insulation material should function effectively up to 904 °C........82 .

46] have looked at the effectiveness of area and directed deluge in protecting against “live” jet fires. i. clogged systems.47] have empirically modelled the parameters for predicting the surface water coverage and have developed a practical method for characterising the water coverage. Shirvill (2003) [5.4..... it is the amount of water flowing over the surface of the vessel. This is consistent with results (Roberts. Feb 2006 Page 151 of 261 ....fireandblast. The NFPA [X] requirements for nozzle spacing and spray angle are very general.. PFP materials that have successfully. it is suggested that systems designed to NFPA 15 [5. Equation 5-36 66570 L where kPFP is the thermal conductivity (Wm-1K-1) of the PFP. NFPA specifies an application rate of 12 l m-2min-1. API (2005) [5. At present.4.. F= kPFP ( 904 − Trelief ) .. Shirvill [X] suggests that the overall rate of heat transfer is reduced by 50 %.3.... However. apply more water to the surface of the vessel as there is a more detailed specification of the nozzle spacing (longitudinal and stand-off from the surface)..... 2003) [5... numbers of rows of nozzles and spray angle relative to the size of vessel..43] has suggested that it may be possible with systems using high velocity nozzles and White and Shirvill (1992) [5. Although the application requirement of 10 l m-2min-1 in the FOC tentative rules (1979) [5.5.52] provides thermal conductivities for a range of materials but these may only be strictly applicable to hydrocarbon pool fires..4 Effect of fire protection on heat transfer to vessels 5....54] have shown that this is at least true for LPG vessels. meeting the required time to critical temperature.... passed a resistance to jet fire test (Jet Fire Working Group..53] will be suitable for protecting pressure vessels against jet fires..40] is lower than the NFPA [5. As indicated previously...3.45] has shown that a system delivering about 17 l m-2min-1 is not effective in fully protecting (keeping the wall temperature to 100 ºC or less) vessels against 2 to 10 kg s-1 flashing liquid propane and butane jet fires.... have shown that about 30 l m-2min-1 will protect 2 tonne vessels against 2 kg s-1 flashing liquid propane jet fires..41] requirement.. 1995) [5... Roberts et al. which has the greatest influence on fire resistance...5. These environment factors are calculated using Equation 5-36.42] have shown that deluge systems with the usual medium velocity nozzles are not effective in protecting against natural gas jet fires...51] takes reduced heat input into account by the use of environment factors.. in general. There has been considerable interest in the use of directed deluge in protecting against jet fires. Hankinson and Lowesmith (2003) [5... (1995) [5. Davies and Nolan [5. there appear to be no standardised criteria for 152-RP-48 Rev 02. As only between 35 % and 45 % of the water exiting the nozzles actually forms a film on the vessel surface.2 Passive fire protection Roberts and Moodie (1989) [5.... systems designed to these will.... a poorly designed system delivering the minimum requirement of 12 l m-2min-1 may not even fully protect against a pool fire... Trelief the temperature (°C) of the vessel contents at relieving conditions and L is the thickness (m) of the insulation..com 5. White and Shirvill (1992) [5. Lev (1995) [5.44] suggest it may be possible with high velocity water monitors..48]. In practice. API [5.5. Roberts et al.. This is derived from small-scale pool fire trials where the application rate is taken as the amount of water leaving the nozzles divided by the vessel surface area. unreliable water supply and vessel surface conditions that can prevent uniform water coverage. high winds..1 Directed water deluge No credit is given for directed deluge systems in API 521 [5.49] from 20 % filled LPG tanks. 5.. In general. 2003) [5....50] have shown that a range of fire protection materials are suitable for protecting LPG tanks against hydrocarbon pool fires..3.38] as the reliability of water application is uncertain because of freezing weather. Even though a directed deluge system may not be fully effective (primarily in protecting the unwetted wall) in protecting against flashing liquid propane and butane jet fires...e..39] can be effective. All these recent results are summarised in a special edition of the Journal of Loss Prevention in the Process industries (March.

152-RP-48 Rev 02.. Appropriate clothing consists of hard hat.. The radiation received should be calculated from either the solid flame model if close to the fire or the point source model if more than two flame widths/lengths away from the source... qrad the radiation (Wm-2) received and 10-4 a convenient scaling factor. From a major hazard perspective.7... Appropriate clothing minimises direct skin exposure to thermal radiation. (1996) [5..31 kW m-2.... API (2005) [5...5 People The response of people to fires is considered in Section 6... there are two issues: • • How long can a worker continue to operate in an emergency system whilst exposed to a given level of radiation? What fraction of the population will die or sustain injury given exposure to a certain dose of radiation? 4 In regard to the former.3.. Hymes et al..58] should be consulted to consider these in the context ..31 kW m-2 for more than a few seconds... Feb 2006 Page 152 of 261 . When personnel enter or work in an area with the potential for radiant heat intensity greater than 6.. long-sleeved shirts with cuffs buttoned..46 Conditions Maximum radiant heat intensity at any location where urgent emergency action by personnel is required.......g... which maintain their strength to higher temperatures..... LPGA (2001) [5.......5. a fire approach suit) should be considered a Maximum radiant heat intensity in areas where emergency actions lasting up to 30 s may be required by personnel without shielding but with appropriate clothing b Maximum radiant heat intensity in areas where emergency actions lasting 2 to 3 minutes may be required by personnel without shielding but with appropriate clothing b Maximum radiant heat intensity at any location where personnel with appropriate clothing b may be continuously exposed.56] have considered the physiological and pathological effects of thermal radiation and relate these to a thermal dose (note: dosage is usually taken as irradiation x time).58 Superscript notes: • • It is important to recognise that personnel with appropriate clothing b cannot tolerate thermal radiation at 6... 6..... then radiation shielding and/or special protective apparel (e...com the protection of pressure vessels....55] suggests that 90 minutes to reach 300 °C (the temperature at which carbon steel starts to lose its strength) is suitable for LPG vessels.disposal by flaring .... Equation 5-37 where t is the exposure time (s).. work gloves. Table 5-11 API 521 permissible radiation design levels Permissible design level (kWm-2) 9.. Higher temperature criteria may be suitable for thicker walled (> 12 mm) vessels or for vessels made from steel alloys.. The thermal dose (s (W m-2)4/310-4) is given by: TL = t ( qrad ) 3 10−4 ....31 4.....73 1.. longlegged pants and work shoes.. 5..57] provides permissible design thermal radiation levels for personnel.in which they are given)..... These are given in Table 5-11 below (Note: API 521 [5.fireandblast...

56 ln ( X ) 43 Where X = t qrad Equation 5-38 Lees (valid up to 70% mortality) . More details on using these and other methods are given by Lees et al....... [5..9 + 2.......6 kW m-2 for 5 minutes for 1 % lethality and 15.60]... Y = −14. (1996) [5...com The lethality to the population is usually addressed by probit or logit analysis.7 + 1...4 kW m-2 for 5 minutes for 50 % lethality......7... Equation 5-39 Hymes et al. 152-RP-48 Rev 02...59] gives doses for probability of 1 % and 50 % lethality as 1050 s(W m-2)4/310-4 and 2300 s (W m-2)4/310-4 respectively.. These correspond to a radiation dose of 8. The two commonly used probit relations for fatality are: Eisenberg (based on nuclear bomb data) . Feb 2006 Page 153 of 261 ..fireandblast... The response of personnel is considered further in Section 6..6 kW m-2 for 1 minute or 2.99 ln ( Z X ) where ZX is a function of X depending on whether clothing ignites. Y = −10...

at a temperature of about 400 ºC the yield stress reduces to about 60% of its value at normal temperatures. At 400 ºC their relative strength is about 10 % lower. For normal design conditions (i. The most comprehensive source of material properties for the common structural carbon steels is EC3-1-2.2 Mechanical For simple beams or ties.com 6. the yield stress and the modulus of elasticity both reduce. 152-RP-48 Rev 02. grades 355M. 1. S275.1 Overview At normal temperatures steels used in offshore structures are designed to behave elastically. S355.1.4301(304). 420M (based on Helsinki University research). For a compression member the yield and the elevated temperature value for Young’s modulus is required. Concrete is not commonly used offshore but there are about 24 platforms in the North Sea with concrete substructures. one of the best sources of information is FABIG Technical Note 6 [6. excluding extreme weather for structural steel.1 Properties of common materials in use offshore 6. Concrete can withstand a pool fire for a significant time. Many steel grades will be compatible with the European grades. 1.fireandblast. Feb 2006 Page 154 of 261 . The top of the concrete is usually several metres below the underside of the main deck. 460M BS7191 grades 355EMZ. 450EMZ Stainless Steels • BS EN 10088 grades 1. For any carbon structural steel. For a complex FE analysis. for the same load level. 1.4462(2205). In a jet fire the concrete cover can rapidly be eroded. the stress strain behaviour is linear in both compression and tension and beyond yield the slope of the stress-strain flattens markedly. but in a pool fire protects the steel and the bulk of the concrete from the effects of fire. fires and explosions) the stress in the steel should be below 60 % of the yield stress.e. As the temperature rises. and consequently this temperature is often taken as a critical temperature at which the behaviour of the steel changes and failures can start occurring. For other grades of steel. the complete stress-strain curves at elevated temperature are required. buckling will occur at a lower temperature than a failure depending on strength.1. exposing the steel reinforcement to the effects of the flame 6.4404(316).4362(SAF2304) The properties of the RQT and TMRC steels tend to be lower than the normal carbon steels. BS5950-8 gives similar information but tends to be less detailed. the yield strength at elevated temperature is all that is required. at least for some time. S420 and S460 of EN 10025. the outer layer of the concrete normally serves to protect the underlying steel from corrosion.1]. Consequently. Response to fires 6. (S235. Stainless steels tend to maintain their strength and stiffness at elevated temperatures compared with carbon steels. This contains mechanical properties for: Carbon Steels • • BS EN 10113-3:1993. but it can be subjected to pool fires on the sea surface or the jet fires from risers. the rate of loss of stiffness is greater than the rate of loss of strength (see Table 6-1). EN 10210-1 and EN 10219-1).

230 0. In a hydrocarbon fire.060 0. As the steel loses strength and thickness the rate of elongation increases until a run-away occurs.800 0.000 1.130 0. Concrete loses strength at a broadly similar rate to structural steel but loses stiffness at a faster rate.000 1.com Table 6-1 Reduction factors for strength and stiffness (EC3-1-2) Steel temperature 20 ºC 100 ºC 200 ºC 300 ºC 400 ºC 500 ºC 600 ºC 700 ºC 800 ºC 900 ºC 1000 ºC 1100 ºC 1200 ºC Reduction factor for effective yield strength 1. stress strain curves can be derived for a range of temperatures. if the heating rate is faster the data will be conservative and for slower heating rates it will be unconservative.fireandblast. In any hydrocarbon fire flame temperatures can be in excess of 1500 ºC and temperatures of close to 1800 ºC have been recorded.600 0.090 0. The EC3 data is based on steel being heated at about 10 ºC per minute. The best reference is EC4-1-2 [6.068 0. At about 500 ºC a 10 % difference in temperature can lead to a 16 % loss of strength.000 1.045 0.040 0.700 0. unprotected steel will heat very quickly and will reach temperatures associated with structural collapse in 5 minutes or so.000 1. From a series of such tests at different stress levels. the steel is first loaded and then heated.110 0.310 0.2] (composite construction).023 0. This corresponds to a 60 minute fire resistance in a building where failure will occur at about 600 ºC.000 0. For heating rates between 2 ºC and 50 ºC per minute the EC3 data is reasonable and the effects of creep may be ignored.000 0. This is because the enhancement of properties caused by the heat treatment may be lost if the steel is heated beyond the heat treatment temperature.020 0. This makes an assessment of the steel temperature very important. Feb 2006 Page 155 of 261 . The rate of heating is important. In these tests.470 0. 152-RP-48 Rev 02. The mechanical properties given in EC3-1-2 are based on anisothermal tests. Because of the effects of creep.900 0. The maximum temperature will depend on the size of the fire and the degree of ventilation. It should however be emphasised that potential heating rates are much faster in fire incidents offshore. For some heat treated and special steels it may be necessary to carry out tests to establish the necessary properties.000 It can be seen in the table that the strength of steel falls very quickly. The steel responds by expanding due to thermal expansion and elongating due to the stress.780 0.000 1.000 Reduction factor for the slope of the linear elastic range 1.

00 1.00 0.00 0.2).06 It can be seen that both bolts and welds lose strength at a faster rate than structural steel.38 0.4].07 0.com Both BS5950-8 and EC3-1-2 give the same information on the strength of bolts and welds at elevated temperatures. The temperature time curve of the ISO and BS hydrocarbon test fires are compared with the standard cellulosic fire in Figure 6-1.00 1. Fire resistance tests are generally only useful for comparing the performance of different products under constant conditions.1 Standard hydrocarbon fire test In a hydrocarbon fire resistance test [6.1. 6. 6.23 0.10 0. The results of a hydrocarbon fire test are often expressed as H60 or H90 etc. the information is shown here in Table 6-2. Feb 2006 Page 156 of 261 . 152-RP-48 Rev 02.4.3.00 1.3 Thermal The thermal properties of the common structural steels are given in EC3-1-2.2.00 1.22 0. The thermal properties of concrete are given in EC4-1-2. Extrapolation to real fire behaviour can sometimes be misleading.12 0.fireandblast.78 0.2.97 0. Regulations and specifications will often refer to a performance standard measured in a fire resistance test. Table 6-2 Strength retention factors for bolts and welds Temperature 20 ºC 100 ºC 150 ºC 200 ºC 300 ºC 400 ºC 500 ºC 600 ºC 700 ºC 800 ºC 900 ºC Strength reduction factor for bolts (tension and shear) 1.63 0.97 0.90 0.94 0.03 Strength reduction factor for welds 1.00 1.88 0.2 Effects of fire and nature of failures 6.13 0. The yield strength is also shown for comparison. 6. because of the partial factors used for normal and fire design this effect is not as significant as it might appear (see Section 6.00 1. the gas temperature is increased to 1100 ºC in about 20 minutes and then held constant.00 1.55 0. However.00 1.02 Yield strength 1.47 0.78 0. 6. As these are not well known.07 0.00 0.95 0.

fireandblast.2. The method provides an indication of how passive fire protection materials perform in a jet fire that may occur. For example. Propane is used as the fuel. more clarification on classification and a combination of furnace and jet fire test results etc.2 Jet fire test A draft ISO standard.3 Types of failure 6. a minor structural failure could lead to the fracture of a pipe or breakdown in an electrical system.3 kg s-1) is aimed into a shallow chamber. ISO/CD 22899-1 [6.com 1200 1000 Hydrocarbon Temperature (°C) 800 Cellulosic 600 400 200 0 0 30 60 90 120 Time (mins) Figure 6-1 Time temperature curves for hydrocarbon and cellulosic fires in fire resistance tests 6. 6. The test standard gives guidance on the use of the test result and its application to the assessment of passive fire protection material. Another consideration is repair. It is also important that the consequences of minor failures on system are analysed with respect to their effects on other systems.2.2. 152-RP-48 Rev 02. High erosive forces are generated by release of the sonic velocity at about 1000 mm from specimen surface. for some elements be more severe. The results from the small scale test have been compared with full scale jet fire test results from four testing establishment laboratories. In the test. producing a fireball with an extended tail. The thermally induced loads are caused by restrained thermal expansion. a sonic release of a gas (0.1 General Structural failure is any unwanted occurrence and may take any form from excessive deformation to total collapse. Feb 2006 Page 157 of 261 . In a fire. the structure has to carry the applied loads at the time but it also is subject to thermally induced loading which may. Jet fires give rise to high convective and radiative heat fluxes as well as high erosive forces.3. It has recently been agreed that there will be a Part 2 giving the background to the test.5] is being developed to advise on requirements for small scale jet fire tests. Has something failed if it does not have to be repaired? Minor residual deformations following a fire may not impair the function of the component or any other component and can probably not be described as failure.

– Residual strength requirement defined – Resistance to defined fire loads for a given duration – Residual strength requirement defined – Resistance to defined fire loads for a given duration – Limits to movement are defined Failure is direct cause of major (catastrophic) structural collapse Secondary structure Supporting steelwork for vessels/piping Failure allows shifting of load paths and generation of contributory increased loads (ultimately) to primary structure Failure allows distortion/movement/collapse of hydrocarbon containing vessels and piping with subsequent loss of containment integrity Failure allows distortion/movement/ collapse of rotating equipment/ lifting equipment/ utilities leading to potential loss of containment integrity/ equipment failure/generation of dropped objects/ missiles/ potential loss of power for some safety systems (control. active protection etc.com A summary table of the failures of the more obvious (safety critical) elements which may give rise to escalation and to which the above issues should be applied may be found below. Table 6-3 Safety critical element failure or loss of function with respect to fire hazards System or equipment category Primary structure Safety critical element failure or loss of function Performance Standard Requirement (with respect to fire escalation normally part of survivability characteristics See other parts of Sections 6 & 7 of this Guidance) – Resistance to defined fire loads for a given duration (for example. The failure would be when the structure could no longer maintain its load within defined deformation limits whose exceedance would cause further breaches of process integrity or collapse of safety areas or evacuation systems. Feb 2006 Page 158 of 261 .say until process pressure is adequately reduced (to limit the reach of the jet flame).) Failure allows distortion/movement/collapse of areas of key hazard control and places of safety/embarkation for POB Supporting steelwork for equipment – Resistance to defined fire loads for a given duration – Limits to movement are defined Supporting steelwork for accommodation/ control/ muster areas/TR Supporting steelwork for flooring/ access ways Vessels/ main piping – Resistance to defined fire loads for a given duration – Limits to movement are defined – Limits to loss of airtight integrity defined – Residual strength requirement defined – Resistance to defined fire loads for a given duration – Limits to movement are defined – Resistance to defined fire loads for a given duration – Resistance to impact and explosion loads also defined Failure allows distortion/movement/collapse of access for POB to places of hazard control/safety/embarkation Failure leads directly to loss of containment integrity in hydrocarbon containing vessels and piping 152-RP-48 Rev 02. detection. ESD. a jet fire direct impingement for a duration 15 minutes .fireandblast.

continuing function achieved by redundancy – Resistance to impact and explosion loads defined (where possible) – Generally resistance to direct impingement of fire and other hazard loads impractical. continuing function achieved by redundancy – Event size and time delay before triggering defined – Generally resistance to direct impingement of fire and other hazard loads impractical. Feb 2006 Page 159 of 261 . continuing function achieved by diversity within suite of safety systems – Resistance to impact and explosion loads defined (where possible) – Resistance to direct impingement of fire and other hazard loads may be impractical. continuing function achieved by redundancy – Resistance to impact and explosion loads defined (where possible) – Resistance to direct impingement of fire and other hazard loads may be impractical.fireandblast. continuing function achieved by redundancy – Resistance to impact and explosion loads defined – Resistance to defined fire loads for a given duration following initial events also defined – Resistance to impact and explosion loads defined (where possible) – Generally resistance to direct impingement of fire and other hazard loads impractical. loss of fire resistance integrity following an initial blast will potentially allow spread of fire hazard to other areas Failure leads to loss of control and hence allows unimpeded escalation of the initial event Fire walls Active fire protection systems Failure leads to loss of control and hence allows unimpeded escalation of the initial event Passive fire protection systems Failure leads to loss of mitigation and fire resistance on adjacent systems/steelwork and hence eliminates or impairs any slowing of the escalation from an initial event Failure of closure or redirect aspects of HVAC leads to loss of a control system for unignited gas and products of combustion. continuing function achieved by diversity within suite of safety systems System or equipment category Vessel appurtenances/ small bore piping Gas detection Safety critical element failure or loss of function Failure leads to small leaks (loss of containment integrity in hydrocarbon containing vessels and piping) with potential for further fires and explosions Fire from small event may disable systems to detect further escalating events Fire detection As above Blast walls Blast walls usually have protective requirement with respect to fires as well as explosions.com Performance Standard Requirement (with respect to fire escalation normally part of survivability characteristics See other parts of Sections 6 & 7 of this Guidance) – Resistance to defined fire loads for a given duration – Resistance to impact and explosion loads also defined – Event size and time delay before triggering defined – Generally resistance to fire and other hazard loads impractical. allowing unimpeded escalation of the initial event HVAC 152-RP-48 Rev 02.

The onset of this type of buckling may be exacerbated by axial restraint. 6.1. damage to bracing members has been observed 40 metres away from the fire. when the buckling resistance falls to the level of the applied or design load. Buckling can also occur in any member in compression. if restrained. In building fires. Fully restrained steel will yield at a temperature below 200 ºC. A linear gradient will cause no stress in a steel member. with a temperature difference of 300 ºC will bow by about 125 mm. 6. may have an affect structure at some distance from any source of heat.4. whilst intumescent coatings will normally be sufficiently flexible. Boards and thickly sprayed material will be more affected. bending resistance at supports may be lost. Maintenance of compartmentation will normally depend on the performance of a proprietary penetration seal for which there should be suitable test evidence and careful installation and regular inspection. For simply supported members this may not cause a problem but.4.fireandblast. designed to resist bending. when a component. Feb 2006 Page 160 of 261 . Failures have been observed in both bolted and welded connections and also in the section itself. 6. Testing a component in isolation in a fire resistance test may result in acceptance criteria that may be simple to achieve.2. Frequently compartment boundaries will be penetrated by pipe work or some form of duct. the interaction between the bulkhead and its boundaries must be considered.1.4 Loss of compartmentation Fire spread by loss of compartmentation will increase the likelihood of most types of failure so loss of compartmentation is an important type of failure and within the UK. often. such as bulkhead is built into an offshore structure. Connections may be pulled apart. Awareness and good detailing are probably the best ways to prevent this type of fire spread. The biggest problem is in preventing gaps opening up through which the fire might spread. Restrained thermal expansion can lead to buckling which may dislodge fire protection material. This is a complex mechanism which depends on the extent of a fire as well as the structural form.2 Buckling Restrained members may buckle to relieve induced compression. then it is also capable of taking up load when a member starts to buckle. if supporting structure is capable of exerting compressive restraint.2. However. a combination of good detailing and a suitable thickness of insulation will normally suffice. has a relatively large axial resistance and.1 Linear expansion Expansion is difficult to resist and a heated member can exert extremely large forces at its supports.1. for continuous members.4.com 6.4.2. Potentially the tensile force generated is equal to the yield resistance of the member. the exact temperature depends on the grade of steel. A 500 mm deep section.2. In some circumstances the use of intumescent mastic may be of use.3 Thermal bowing Any section which is non-uniformly heated will tend to bow. Their activation temperature is generally greater than the limit on temperature rise (140 °C). regulations refer to loss of insulation and loss of integrity. A beam. However.2. Buckled steel can cause problems on cooling as the buckling may not be reversed and the steel becomes shorter than its initial length.1 Thermally induced deformation 6. A non-linear gradient will cause longitudinal shear 152-RP-48 Rev 02. Intumescent coatings will not protect against a loss of insulation. Designers should be aware of the likely magnitude of any gaps. 12 metres long. In the test. For most sections the free bowing is a simple function of the temperature difference across the section.

tensile membrane action may become increasingly dominant. In a continuous member. a tension member carrying 50 % of its normal resistance will elongate by about 1. In plated construction. 6. 6.75 %. thermal bowing will lead to very large induced restraining moments which are added to any existing moments (Figure 6-2). In fire tests and actual fires deformations in excess of span/20 are common. 6. compression flanges can. This may make laterally torsional buckling of some cross sections more likely.4. this will supplement the bending resistance and can sometimes carry all imposed loads.2. loads redistribution tend to occur.4. 152-RP-48 Rev 02. Elongation can be significant. Feb 2006 Page 161 of 261 .2.fireandblast. In some types of partially protected steel beam.2 Load induced phenomena 6. Increase due to thermal bowing Figure 6-2 The effect of thermal bowing on the bending moment in a continuous beam. Deformation caused by thermal bowing can cause disruption of services and effect equipment performance.4.4. as deformations increase.2.2.2. This can lead to failure of connections and buckling of compression flanges and webs. the beam and plate can act together in fire.3 Compression A member in compression will fail at a lower temperature (about 80 ºC lower than a bending member at the same load level).2 Tension Tension members will lose strength in direct proportion to the loss of yield strength.com stresses to be induced. as a tension member loses strength and lengthens under load. This can enhance strength and stiffness.25 %. Often. This Assumes a stress induced component of 0. Continuous beams may be more vulnerable because of the addition of thermally induced moments at their ends. Large deformations due to loss of bending stiffness will affect connections.2. Isolated tension members are rare in any structure so. in the early stages of a fire.1 Bending Beams will generally withstand large deformations before they are unable to support their design load. although not designed to do so. For a 6 metre length this is 75 mm. In many forms of construction. as described above. if a beam supports a plated floor.2.5 % and a thermal expansion component of about 0. This is because the stiffness of carbon steel reduces at a faster rate than the strength. At 550 ºC. go into tension.

com For most compression members. riser rupture type scenarios. see above. Localised failure due to yielding under fire however will in most cases redistribute the gravity loads elsewhere to unaffected areas. The consequences of the failure of large elements in redundant structures need careful consideration. 6.6.2. 6.2. are prone to progressive local collapse. For example.g. in highly redundant structures. which support the TR at the extremity. the applied stress in fire may be increased due to restrained thermal expansion.3 Brittle and ductile failure Generally.4.4.7]) 152-RP-48 Rev 02. failures such as those caused by induced thermal stresses on welds and bolts will be brittle but may be followed by an immediate redistribution of load to other parts. Topsides with significant cantilevered decks. as damage and local failures accumulate.4 Examples of structures following fire Figure 6-3 Tensile membrane action in the web of a beam (photo by permission of Corus plc. Feb 2006 Page 162 of 261 . However. thus. [6. except under extreme e. 6. the final failure may be sudden as redistribution of load becomes impossible. any mode of failure will be ductile as there will be redistribution of load. especially where critical MSF deck braces are required to support the cantilever.fireandblast.

fireandblast. Identification of the mechanisms by which that initial event could escalate to impinge on key safety systems or facilities (such that the available safety systems can no longer function to slow or stop the escalation). these effects would comprise heat. how and when an event can escalate to endanger personnel. Re-evaluation of the design to minimise damage to or failure of SCEs and produce an ALARP solution • • Appropriate consideration should also be given to the actions of key personnel in responding to an incident. [6. Evaluation of the probability of each escalation path and the time duration from the initial event.g. The failure of a component or part of a system may give rise to a cascading series of events leading to catastrophic failure or loss of life. The escalation analysis should comprise: • • The assessment of potential escalation paths from an initiating event towards a major accident hazard as defined in the Safety Case or towards a “safe” shutdown.8]) 6. taking into account the effects of the hazard under review. e. speed of running. The growing scale of the incident should be understood and the dynamic of the incident growth such that there were not unrealistic expectations of personnel performance. A systematic. In the case of fire. smoke other products of combustion.5 Escalation issues The discussion of failure leads onto a major issue for the robust design of installations against major accident hazards.2. structured approach to escalation analysis should be adopted to determine if. the impacts to be considered would be injury. Feb 2006 Page 163 of 261 . This assessment should include how operators have contributed to the detection of the fires (especially in the case of a Normally Unattended Installation) as well as how they respond.com Shear capacity maintained by unsplit side of plate Tensile force induced on cooling Fractured end plate Typical split in connection occurring on cooling Figure 6-4 Failure of a welded connection on cooling (Photo by permission of BRE. The 152-RP-48 Rev 02. burns. ability to carry or assist injured colleagues etc. obscuration of vision and impaired breathing and judgement.

such as a bulkhead have to satisfy all three criteria. a major accident. the fire containment (integrity) and thermal transmittance (insulation) functions can be evaluated.3 Acceptance criteria 6.” [6.2 Criteria used in standard fire tests Fire resistance test standards such as BS476. either to escape or to sit it out in the Temporary Refuge until the danger has passed.3. or limit the effect of. 913 “The Offshore Installations and Wells (Design and Construction. but when considering effects on safety critical elements and disruption to production. 152-RP-48 Rev 02. etc. Structurally. acceptance criteria are set for any components tested in a standard fire resistance test. In fire.7.10] or EN1363 [6. 6.4) and mitigation (Section 3. If a major fire occurs then safety of the occupants is the major priority.com speed and accuracy of detection will impact the potential escalation paths of the initiating incident and if additional detection information from operating personnel contributes to an accurate diagnosis of the event underway. or a purpose of which is to prevent. In addition. The most straightforward criteria are the failure criteria specified in fire resistance test standards. Deformation is controlled by design (computer simulation etc) and by the application of passive protection. deformation may not be considered. The discussions of acceptance criteria and failure should be linked to the review of methods of prevention (Section 3. deformation leading to disruption of another system. Linear structural elements such as beam only have to satisfy the load bearing criterion as they are do not form a barrier to the spread of a fire. It can be seen that equipment or devices that prevent.9] where Safety Critical Elements means “such parts of an installation and such of its plant (including computer programmes). Separating elements. or any part thereof • • the failure of which could cause or contribute substantially to. Feb 2006 Page 164 of 261 . by setting criteria by which the load bearing capacity.3).6) in the context of fire hazards and their management mechanisms. 6. the requirement for defining Safety Critical Elements is included in Statutory Instrument 1996 No. any escape route must be adequately insulated to be tenable.3. which directly prevent the spread of fire. It is important to give occupants sufficient time. deformation is clearly important. Depending on the location of a fire.) Regulations 1996.fireandblast. see Section 6. or leading to an escape route or refuge becoming untenable must be considered to be failure. The consolidation if these issues will contribute to the definition of the Performance Standards (see Section 3. this should be included in the emergency response assessment.1 General Structures are designed for several limit states and what is acceptable for one limit state may not be acceptable for another. ISO834 [6. slow or stop the escalation are by definition safety critical elements.11] use three failure criteria for structural elements They provide a means of quantifying the ability of an element to withstand exposure to high temperatures.5). in critical areas more stringent requirements may be set by the safety authorities or specified by the client. detection and control (Section 3. For further details on impacts to human beings and therefore understanding the limits to escalation. When considering collapse. In the UKCS.

is the ability to maintain the integrity of the element against the penetration of flames and hot gases (this applies to fire-separating elements). D is the distance from the top of the element to the bottom of the design tension zone. Fire containment or the resistance to fire penetration (E). which in any case are rarely tested. failure is deemed to occur when the deflection reaches span / 20 or. Feb 2006 Page 165 of 261 .I 6.E. Structurally. the rate of deflection exceeds span2 / (9000D). whichever occurs first. walls and partitions Requirement R R.2 m high. as a consequence of European Harmonization. Wall panels are tested at 3 m x 3 m. in many cases. Integrity failures should be rare in fire resistance tests for essentially steel elements. the limits may be excessively conservative. Their origins are unknown and. For steel beams. All dimensions are in millimetres. Results from such tests must be interpreted with care and the systems tested must be carefully installed. are 3. it may occur because the insulation becomes detached. Often tests on vertical separating elements are carried out on unloaded. at the limited evidence available from some large scale tests or rely on their 152-RP-48 Rev 02.fireandblast. the application of any of the deformation criteria will have a small effect as the difference between the time to collapse and the time when any of the criteria might apply is small. Problems are more likely to occur in actual fires at junctions between elements.beam in a fire test. or. fire tests are carried out on small elements. This terminology may be adopted for offshore structures in due course. when the deflection is greater than span / 20. Beams generally have a span of 4. An insulation failure is deemed to occur when the average temperature rise on the unexposed face of a separating element exceeds 140 ºC or the maximum temperature rise exceeds 180 ºC. These limits are to prevent combustion of any material which may be close to the unexposed face. Tests and calculation have shown that strains in excess of 3 % are common in the bottom of an I . ”resistance to fire penetration (E) and “resistance to the transfer of excessive heat” (I).3 Relationship between criteria used in standard fire tests and actual performance in real fires In the UK. there will often be little to learn from a Standard Fire Test and designers must look elsewhere. In a fire test an insulation failure will occur because the insulation is not adequate. Thermal transmittance refers to the resistance to the transfer of excessive heat (I) and is the ability to provide insulation from high temperatures (this applies to fire separating elements). unrestrained elements. Resistance to collapse (R) is the ability to maintain load bearing capacity (which applies to load bearing elements only) or the ability not to collapse (non-load bearing elements only).I E. Elements in real structures are often many times the size tested or have no associated test evidence. As well as experiencing large deformations beams experience large strains. all of which are describe in more detail below.5 m and columns. For loaded beams and floors. walls and partitions non load bearing separating floors. The use of the term “resistance to collapse” can be applied to load bearing and non-load bearing elements and as such is preferred. Table 6-4 Performance requirements for elements of construction Component Load bearing beams and columns Load bearing floors. fire resistance is increasingly being expressed in terms of “resistance to collapse” (R).3. often called a “stickability” failure.com For buildings.

Even if the test is considered to be reasonable.fireandblast.4 Methods of assessment 6. However. However. BS5950 specifies different strain limits for different types of element and mode of behaviour.16] and the Eurocodes allow reductions in some applied loads in fire reflecting the accidental limit state. for the 152-RP-48 Rev 02. as they react differently in different situations. These reductions. the partial factors should be agreed between all parties. Designers must decide whether the heating regime in the test adequately represents the design scenario. the applied loads on the structure at the time of fire must be calculated. When carrying out any analysis. any time measured in the test should not be thought as actual time in any real fire. 6. the elements referred to comprise composite structures not seen in the offshore industry (steel and concrete arrangements.14] and EC3-1-2 [6. The local thickness of steel and the heating rate are important. For more complex elements and whole structures. BS5950 is slightly more conservative than the Eurocodes.4. Alternatively there are various types of finite element analysis available which are capable of analysing large substructures or even the whole structure. all that is required is the temperature distribution across the section at the mid point. the reductions are expressed as factors. the “stickability” of the material and its ability to deform is less important than it would be for a case in which large deformations or strains are permitted. (based on the jet fire test criteria proposed in ISO 13702 [6. BS5950-8 and EC3-1-2 effectively specify identical material properties for use in fire. the modelling of proprietary fire protection is not straightforward. it should be possible to obtain a reasonable estimate of the thermal properties. It is also possible to simply modify the existing “normal” or cold analysis by adopting elevated temperature material properties.16] and EC3-1-2 [6.12]. In carrying out a thermal analysis. are summarised in Table 6-5.4. Feb 2006 Page 166 of 261 . This may be computed using a 2-D thermal analysis. If it is important to limit deformation then. for a passive fire protection material.3. Both BS 5950-8 [6. Intumescent materials behave in a very complex manner. it is necessary to establish the applied loads on the structure.com FE models.4. see Sections 6. Fire resistance test results on passive fire protection tests in the cellulosic fire should be used with extreme care when considering performance in any hydrocarbon fire.2 Partial factors for fire In determining the structural resistance required.17] allow loads to be reduced below the normal design values in fire as it is considered that the probability of fire and full design load occurring at the same time is rare. the complete temperature history of all parts of the structure is required although some simplification may be possible.3. which are for buildings. For fairly simple insulating materials.15] offer simple ways of checking elements. A jet fire rating equivalent to an A or H rating has been proposed in the latest draft version of the ISO (22899-1) [6. the codes were written for building structures and will not always be suitable for highly redundant offshore structures. Design codes such as BS5950-8 [6.4 for more details). For an offshore structure. In order to analyse any structure in fire a thermal model is required. BS5950-8 [6. For BS5950-8. It is also important to use appropriate mechanical material properties.3 and 6.1 General There are two possible approaches to carrying out structural analysis for the fire condition. ideally. For simple linear elements.4. In many cases.13]) specified as: Type of application / Critical temperature rise (°C ) / Type of fire / Period of resistance (minutes) 6. interestingly. the results of fire resistance tests are all the information that is available.

will be used for ψfi Table 6-5 Applied load reductions in fire BS 5950-8 Type of load Imposed Office Escape stairs and lobbies Other (including residential) Storage Snow Wind Permanent All Location/type Eurocode γf 0.70 0. the more conservative frequent value. 152-RP-48 Rev 02. As an illustration of what might happen consider wind loading. An important consideration when assessing structures or structural elements in fire is that.1 fi Qk .1. The use of Ψ1. Feb 2006 Page 167 of 261 .50 0.1(2) of EN 1991-1-2 [6.1.90 0.4.20 1. and deformation limits in fire resistance tests are about 20 times greater than might be allowed in cold design.1 Introduction Many countries have structural design codes for fire and shortly the Eurocodes will be finalised. For the same level of reliability.3. It should be possible to derive similar information for offshore structures and subsequently eliminate possible costly over design. In fire.50 1. compared with cold.fireandblast.18]. large deformations and strains are allowed. ψ fi It is expected that. The strength of steel is normally expressed as the stress corresponding to 2 % strain.50 0.00 0.com Eurocodes the reductions are expressed as Ψ1.4.20 0. in the UK. rather than Ψ2.1 factors. During a fire. a structure might be vulnerable for a few hours. is expected to be recommended in the UK National Annex to EC1-1-2 [6.1 0. given either by (frequent value) or (quasipermanent value) according to paragraph 4. design.1 is the characteristic value of a permanent action is the characteristic value of the leading variable action 1 is the combination factor for fire situation.00 The values in the above table have been derived for buildings and may not be applicable to offshore structures.00 0. the applied force or moment is given by: Gk + Ψ where Gk Qk.00 ψ1. the wind load might be only 20 % of the 50 year level. They are based on statistical evidence and are almost certainly conservative.33 1. 6. ψ1.3 Methods in structural design codes 6.19]. The design case for wind might be for a once in 50 year’s gust.3.1.80 1. these codes are for building structures and may only be of limited use for offshore structures as building structures are generally much simpler than offshore structures with less interaction between different elements. Almost without exception.00 0.

3. it can reasonably be expected that the temperature at the ends will not be as high as at the mid-height position. In a useful annex.4. the applied loads are calculated using the appropriate partial load factors. 6. Where a comparison can be directly made. in a building a column will be constructed as a continuous member and secondly. columns and tension members.4 EC3-1-2 EC3-1-2 is for non-composite construction only. although. For non-composite all the guidance relates to beams. The code assumes that the strength of a beam can be characterised by the temperature of the bottom flange and that. there is a built in assumption that the column will have an effective length in fire of about 85 % of the assumed cold effective length. based on standard fire resistance test data.com The assessment methods can be used for beams and compression members. The effects of thermal restraint and any second order or P-delta effects are ignored. cold.3.fireandblast. However. The load ratio – limiting temperature method is largely based on fire resistance test results and is principally for I .2 Member analysis In a member analysis. EC4-1-2 deals with composite construction. No guidance is given for beams supporting steel plated floors. A method for checking concrete filled structural hollow sections is given. Feb 2006 Page 168 of 261 . 6. The method is useful for beams or columns which are not heavily restrained and for simple ties. BS5950-8 gives guidance on re-use of steel following a fire and what one should look for when inspecting a building. The reduction is based on two factors. the plastic bending resistance may be computed. in some circumstances. For compression members it is normal to consider the possibility that the degree of end fixity may increase in fire leading to a reduction in effective length. allow the effective length in fire to be 50 % of the system length. It is normal to assume that members are unrestrained. Firstly. The second method is based on moment resistance. However. the only method given is the load ratio – limiting temperature method and the information is. 6. The end reactions are generally calculated making the same assumptions that were made for the initial design. a colder top flange will be beneficial. this method is slightly more conservative than the load ratio – limiting temperature method. again.3. For compression members with comparatively low slenderness.4. Codes such as EC3-1-2.3 BS5950-8 BS5950-8 covers both non-composite construction and composite construction (steel acting with concrete). in the UK this may be conservatively limited to 70 %. This method is useful for unusual sections but cannot be used without the temperature distribution. BS5950-8 gives simple interaction formulae to allow the load ratio to be calculated for both beams and columns. From knowledge of the temperature distribution across the section and the material properties at elevated temperatures. Only load carrying ability is considered so deformations are ignored. 152-RP-48 Rev 02. Problems relating to expansion and restraint were discussed earlier in Section 6. It gives some guidance on unprotected steel but this is limited to 30 minutes fire resistance in the standard cellulosic fire and would not normally be applicable offshore. a colder top flange is assumed to be supporting a concrete floor.4. For members in compression. The load ratio is the ratio between the member resistance in fire and the normal.section beams. For beams it gives two methods of assessment. Little information is given for plated structures. member resistance. the method given EC4-1-2 is more robust and is recommended.

however.Rd = Fv. EC3 states: Fv . It concludes with some guidance on advanced methods. for beams not supporting concrete floors it is very similar to BS5950 8. This is followed by simple design methods and finally there is some guidance on advanced methods. In this context. These thin sections rapidly heat up and quickly lose strength. colder support conditions. is the design shear resistance of the bolt per shear plane calculated assuming that the shear plane passes through the threads of the bolt is the partial safety factor at normal temperature is the partial safety factor for fire conditions γM2 γM. fi Where. For any country. EC3-1-2. Geometrical non-linear effects.0. is 1. EC3 gives a simple method in which a non-dimensional slenderness is calculated which leads to a reduction in the squash resistances. γM2. Feb 2006 . EC3-1-2 gives some guidance on checking connections in fire.θ kb.fi The important point to make is that although the reduction factor from Table 6-2 is lower than for structural steel. The strength of bolts and welds at elevated temperatures was given earlier in Table 6-2. is 1.com For use in the UK (for buildings) both codes will have a national annex.Rd γM2 γ M . However. EC3 starts from the assumption that beams are uniformly heated. Page 169 of 261 152-RP-48 Rev 02.fireandblast. All Eurocodes contain some nationally determined parameters. For example. this refers to finite element modelling.fi. It then allows an “adaptation” factor to be applied that may take into account of a temperature gradient and.t . The method is a modified form of all other Eurocode strut formula. for a bolt. Thus the effect of the reduction factors is somewhat ameliorated. geometrical imperfections and thermal actions. The temperature dependent mechanical properties of the material. For beams in buildings. has no tabular data as the only useful data would be on the protection of steels using proprietary fire protection materials. EC3 is generally less conservative than BS5950-8. for a continuous beam. The term “simple” is sometimes a misnomer. EC3-1-2 gives some guidance on members made from sheet steel with class 4 cross-sections. γM. It states that the model for mechanical response shall take account of: • • • The combined effects of mechanical actions. θ Fv. They also contain some informative annexes. The design methods start with tabular data.Rd kb. as a small program or spreadsheet is required. the partial factor at normal temperature. Guidance is also given on advanced calculation methods. The structural Eurocodes are all written in the same format.25 and the factor for fire. Their bending resistance is reduced by the reduction in yield strength. is the reduction factor determined for the appropriate bolt temperature from Table 6-2. For compression members. The guidance is for completeness and academic interest. The bulk of the design information is in the form of simple calculation methods. the National Annex will give values for the nationally determined parameters and guidance on the use of informative annexes.

In due course. Finite element models can range from frame models with simple linear elements to complex models utilising a number of element types.4. It is important that any analysis includes all non-linear effects and that it can model membrane action.4. Applied loads are appropriately factored and elevated temperature values for yield stress and Young’s modulus are used. There is little point carrying out an expensive FE analyses unless the thermal history is known with a degree of confidence and the design scenarios assumed are reasonable. At the time of writing.4. Consideration should be given to the need to include initial imperfections and whether a dynamic option should be included in the analysis. EC3-1-2 and EC4-1-2 have their roots in the ECCS Model code on fire engineering [6.3 Modified “cold” model It is sometimes reasonable to use the same structural model as was used for the normal. incorporating Computational Fluid Dynamics (CFD). which will allow the growth and spread of fire to be modelled. It also contains a commentary on many of the clauses. EC3-1-2 and EC4-1-2 are undergoing final editing and should be available during 2005. EC1-1-2 was published at a full European standard in 2002. For all three codes. 6.4.1.4. the UK National Annexes are expected in 2007. The sensitivity of any analysis to the mesh density should be investigated 152-RP-48 Rev 02. For a structure.4. Feb 2006 Page 170 of 261 . or parts of the structure. 6. the FE package being used should have been validated against test data and the engineers using the package should be trained and preferably experienced in the types of analysis being undertaken. 6. Ideally the models should be 3D as 2D will not pick up some buckling modes. some of these applications are discussed in the following sections.com • The effects of non-linear material properties. Packages exist which can carry out both thermal and structural modelling. However. covered by EC1-1-2.4. design in fire.1. 6.1 General The use of Finite Element (FE) modelling is now becoming the norm.fireandblast. For more information on FE modelling see Section 6. cold. including the unfavourable effects of loading and unloading on the structural stiffness. which are not highly restrained or which are not highly redundant the method may give reasonable answers but it is impossible to say whether the results from such an analysis are conservative or unconservative.4.2 Complex models Complex finite element models should give the best prediction of structural performance.4 Finite element modelling 6. In all examples and applications.4. 6.4. however the analysis should be non-linear and capable of dealing with large displacements.20].4. the situation is: • The loading code.8. This code also includes information on fires. conflicting national standards will be withdrawn. any model is only as good as its input data.1 Frame models Trusses comprising slender members or portal-like structures can be analysed as simple frames.4.1.4.2 Structural modelling Before any FE analysis is carried out the conceptual model of the structure should be carefully checked and possibly agreed with any potential certification authority.

The main problems in any FE modelling start with the fire. In any real fire scenario.fireandblast. The validity of any advanced calculation model shall be verified. A verification of the calculation results shall be made on basis of relevant test results. including the effects of unloading on the structural stiffness and the effects of cooling. This may meet any regulatory requirements but it can never model reality. the heat flux impinging the structure will be different from place to place and will vary in time. It may be correct or it may be due to an error in the conceptual model. The relevant parts are summarised below: The analysis should include: • • • • • The effects of non-linear material properties. and flame. any FE approach based on the same temperature distribution should give more reliable results. Feb 2006 . carried out by more than one group. This should be less of a concern for any form of hydrocarbon fire as the preflashover phase will be less significant. The critical parameters shall be checked. Compared with an elemental approach.4. At present. Experience has shown that FE analyses of the same fire and structural scenario using the same software. by means of a sensitivity analysis. unless the analyst is aware of the possibility of such failure and has made an allowance for it in the model. applies even more to CFD modelling. designers will impose the Standard Fire (hydrocarbon. Imposing the Standard Fire will not allow effects due to temperature differences to be modelled. Knowledge of fire and an understanding of what a particular package is doing are paramount. the boundary condition assumptions regarding restraint thermal expansion can greatly affect results. However. Following any analysis. the above cautionary advice for structural modelling. 6.4. Validation of advanced calculation models. CFD is probably more complex than structural mechanics and although. If a substructure is being analysed.4. Often. The differences are often due to differences in the conceptual model.com (although not necessarily for each job). the results should be carefully examined and anything that looks unusual should be investigated. Page 171 of 261 152-RP-48 Rev 02.4 Eurocode requirements for advanced models The structural Eurocodes all contain similar advice on using advanced models.3 CFD Computational fluid dynamics (CFD) can potentially predict the growth and movement of air. researchers have been working on CFD for many years it is still in its infancy. In building design.4. In order to get a reliable estimate of structural behaviour a reliable fire model is required. can produce widely different results. to ensure that the model complies with sound engineering principles. In some areas it may be possible to carry out some preliminary “scoping” analyses to get some idea what answers might be expected from the FE. Also. it is used to predict smoke movement but many think it is not particularly good at predicting preflashover fires. many FE models will not properly predict localised behaviour such as connection failure due to the need to refine the mesh density. cellulosic etc) on the structure. smoke. 6. The assumptions regarding boundary conditions must be justified. at junction between two elements is there a load path and should adjacent nodes be connected and in what way? Is the mesh sufficiently fine? Is the analysis being carried out by an experienced engineer? These are all very important considerations which must be addressed if the results are to be trusted.

All secondary members require assessment but may not require protection. Only a full non-linear FE analysis will provide this information. experience has shown that at the reduced applied loads in fire. As the coat-back temperature increases this temperature reduces.com Some of these requirements may appear to be very severe. The ratio of the cross sectional area of the attachment to that of the primary member was found to have a significant influence on the temperature. Hence. In this way. For practical reasons it might be better to protect the entire secondary beam rather than simple coating the ends. which when cold. The ratio of the section factors (Hp/A) has secondary significance. the potential of premature failure can be avoided. any further reduction is small.5 Attachments and coat-back An unprotected secondary member attached to a protected primary member will allow heat to be conducted into the primary member and may reduce its fire resistance. The function of all members should be looked at. restrain a primary member may require fire protection to continue fulfilling this function when hot. Simple design methods are not able to provide information on whether secondary members require special consideration. The attachment acts as a heat conductor into the primary steelwork. All primary elements of structure will need to be assessed and will probably require some form of fire protection. Secondary members. 6. deformation of the floor may be unimportant. For the fire scenario under consideration. A joint industry study [6. for the particular fire limit being considered. It is recommended that they need not be followed for every structure analysed but they do emphasise the need to use validated software. Most operators’ specifications require a length of any attachment to primary steelwork protected with passive fire protection to be similarly protected. The purpose of the coatback is to reduce heat conducted through the attachment into the primary member and hence limit the extent and severity of the local hot spot.fireandblast. Only members which may fail or deform in fire leading to a performance requirement not being met should be considered for protection. The beam may not be critical for giving restraint to the primary beam. beyond 150 mm. For example. in a severe fire heat may be conducted along an unprotected beam into the primary beam and thus reduce the fire resistance of the primary beam. However. A secondary member is one which. Feb 2006 Page 172 of 261 . 6. The coat-back length needs to be adequate to achieve this objective. The extent of the hot spot depends on the relative geometries of the primary member and the attachment. However. A steel plated floor system will often be able to act as a membrane and not require additional support. it can introduce a localised hot spot at its connection with the primary member. It is important to consider that it does not follow that a member which carries load will always be required in fire.5 Definition and assessment of secondary steelwork In deciding which structural members need to have their performance checked in fire the required performance for the structure for each particular limit state must be considered. will not cause failure of a primary member or loss of compartmentation by its removal. spanning between larger primary beams and supporting a plated floor may be sacrificial in fire.4. For example. • 152-RP-48 Rev 02. However.21] of the effects of coat-back on the primary member temperature demonstrated the following: • The required coat back length should be determined based on the local average temperature which can be tolerated in the primary member at the attachment location. loads may be resisted by membrane action and the restraint may not be required. the restraint may not be necessary. a secondary beam.

API 2000 [6.6. In a fire. Thus. examples are Parry (1992) [6.25] and Energy Institute (2001) [6.38] and recommendations are made.g. Blowdown systems are mechanisms for release of the vapour content from the system as a result of operator action or as part of automatic control sequences. to maintain the same temperature in the primary member a longer coat-back length would be required for a 2 hour duration than for 1 hour.35] and NFPA 58 [6. they consider the advantages and disadvantages of using: • • • Conventional spring-loaded relief valves. These systems usually consist of relief valves or bursting discs and they are designed to initiate at the set pressure without the intervention of the operator. These heat inputs have not been changed in the fifth edition of API 521 (2005) [6.30]. offshore systems are fitted with pressure relief systems to prevent over-pressurisation and blowdown systems to prevent loss of containment.28] and the remaining gaps in knowledge.34].2 Relief Traditionally.1 General A key requirement for any design is knowledge of the quantity. It should be recognised that pressure relief will not protect a vessel or pipeline from failure if there is a high heat load to wall in contact with gas or vapour is this will rapidly heat up to a temperature where the steel weakens. vessel.33].29] has been used to size pressure relief valves for non-reactive systems using heat inputs derived from the fourth edition of API 521 (1997) [6.31] although it is now recognised (e. Relief systems automatically release the contained fluid if the fluid pressure within the system exceeds the system’s lowest design pressure. There are a considerable number of standards for relief valve sizing e. Balanced relief valves. flow rate etc. The section is primarily concerned with the response of pressurised systems to fire. Air assisted relief valves. • • 6.g.g.6.37].26].com • The effect of the attachment on the temperature increased with increasing fire resistance period. The properties of fire protection material have a small effect on coat-back length. CCPS (1998) [6. Page 173 of 261 152-RP-48 Rev 02.22].). API 520 [6. There are numerous references that discuss relief devices and relief sizing. A system is normally blown down as part of a planned shutdown or an emergency such as a fire that may weaken a plant component so that it fails below the relief system set pressure. it is necessary to dispose of the fluid safely.27] have reviewed the literature available (up to 2000) on the response of pressurised process vessels and equipment to fire attack in regard to the new data available since publication of the IGNs [6. if the vessel/pipeline can be prevented from failure due to weakening. Roberts et al. pressure. Feb 2006 . then the pressure relief valve can be effective under fire loading providing that the possibility of two-phase flow is adequately considered.24]. In both relief and blowdown systems. However. (2000) [6. for the safe and optimum design of relief systems.23]. based on experimental data. NFPA 30 [6. API 520 (2000) [6. Generally.g. Within the limits of the study. 2003) [6. by PFP (or deluge although it is not currently taken into account). HSE (1998) [6. 6. a pressurised system (e. it was found that the section shape (of both the primary member and attachment) had negligible effect. pipeline or heat exchanger) will fail through weakening of the containment material with temperature and time and/or over-pressurisation caused by heating up the fluid contents. usually by burning it in a flare stack or venting to atmosphere. Energy Institute.fireandblast. Diers (1992) [6. In particular. Their publication also goes into detail on which is the most appropriate relief device for the different situations.36] (for LPG) and ISO 4126 [6. These are reviewed by the Energy Institute (2001) [6.6 Process responses 6.32] that more severe fires can occur than those assumed by API. composition and properties of the fluids to be processed and of the associated operating conditions (temperature. e.

and High integrity pressure protection systems. The Energy Institute gives details of application of the HEM method. the temperature of the vessel may drop dramatically as the contents are released. These cases may not be calculated accurately with the API method. This criterion is based on the vessel wall temperature versus stress to rupture and 152-RP-48 Rev 02. even within a single company. 6. the Energy Institute (2001) suggest that the homogeneous equilibrium model (HEM) gives the best predictions for two-phase relief flows and is preferred to the API method. They provide advice on relief system design. gases or vapours and for non-flashing liquids. The Energy Institute (2003) performed a survey of methods used by industry for protection against severe fires and. For sizing. API 520 (Part 1) and API 521 give equations to calculate the discharge areas for pressure relief devices on vessels containing super-critical fluids. the behaviour of the vessel will be very different and the pressures and temperatures experienced will significantly differ from those normally considered. The design of depressurisation systems must therefore address both the depressurisation and also the characteristics of any impinging flame.40] and hence any of these standards may be used. they consider that there is little benefit from the simplification represented by the API method. there is still no recognised procedure for certifying the capacity of pressure relief valves in two-phase service. Since both the API method and the pure HEM method involve flash calculations. The new version of API RP 521(2005) recommends that a vapour depressurising system should have adequate capacity to permit reduction of the vessel stress to a level at which stress rupture is not of immediate concern.com • • • Buckling pin valves. sizing of relief system systems and design of flare and vent systems. however.6. from the responses and information received. On the basis of comparisons with experimental data. The Energy Institute (2001) have reviewed these equations and suggest that they give similar results to BS 6759 [6. At the same time.38]) involving the two-phase discharge of mixtures of natural gas. This conclusion is based on experiments (described in an appendix [6. this generally involves reducing the equipment pressure from initial conditions to a level equivalent to 50 % of the vessel design pressure within approximately 15 minutes. in the specific case of two-phase discharge. propane and condensate through orifices and relief valves. 6. In general. Bursting discs. particularly in the case of high-pressure discharge.6. concluded that: • • • There is little consistency in the design methodology used.3 Relief sizing The method of relief sizing depends on the nature of the fluid being relieved.4 Blowdown The emergency depressurisation of process vessels is complex and the behaviour of the process vessel during depressurisation varies depending on the vessel contents and the conditions of the vessel. the risk was adequately addressed.fireandblast. if the vessel is exposed to an engulfing fire. Whilst the HEM method for two-phase relief has been validated by tests. and Some applied API RP 521 (1997) and assumed that by designing to that code. They suggest that the HEM method deals naturally with cases where the flow upstream is gaseous and where condensate is formed. Some said they had limited in-house expertise and engaged a specialist design contractor. leading to the need to consider the minimum design temperature requirements of the vessel. they suggest that the API method may not be adequate. which may be the cause of the emergency depressurisation.39] and ISO 4126 [6. Feb 2006 Page 174 of 261 . the recommendations complement those of API 520 and API 521 but. During depressurisation at ambient temperature.

For each item of equipment. leading to premature buckling and an increased probability of failure. Roberts et al. e. Gayton and Murphy (1995) [6. rupture can occur well within the 15 minute criterion used by API. From this temperature-time profile prepare a yield – stress-time profile and a corresponding rupture pressure-time profile.fireandblast. there is an increased likelihood of two-phase flow occurring with consequences to the method of sizing calculation used and the need for the knockout pot in the flare header to be sized for this two-phase flow.com applies generally to carbon steel vessels with a wall thickness of 25 mm or more. These may be a reduction in blowdown time. 1996) [6. impinging jet fires or confined fires.g. The required depressurising rate depends on the metallurgy of the vessel. 4. the thickness and initial temperature of the vessel wall. More complex methods can allow for heat transfer to the contents. Compare this to the actual pressure vessel versus time for the required blowdown time. Vessels with thinner walls generally require a somewhat greater depressurising rate. e.46]) and jet fire data (Roberts and Beckett.47] has been used to partially validate models. BLOWFIRE. jet. Haque et al. and the rate of heat input. the latent heat of vaporisation.41] suggest that in more severe fires. which might affect only a small area of the vessel. If the time to rupture does not meet the established safety criteria (such as time to evacuate). However. the pressure could then increase and the ANSYS programme suggested that failure could occur at 6 minutes. 3. Calculate the rate of heat input appropriate to that type of fire.44] “fire risk analysis” approach is adopted to at least confirm the expected thermal loads and that the HEM method is used if two-phase flow is anticipated.g.g. 5. or changes to the plant layout to reduce the fire exposure. there appears to be no experimental data on blowdown under fire loading and hence there are no validated models. The Energy Institute (2001) summarised the Gayton and Murphy approach. 1. It was suggested that the worst case might be partial fire engulfment where local heating of the shell causes local material expansion and the expanding material pushes against colder. 2.5 Blowdown system design As indicated above. partial or total engulfment) likely to affect it. if heat transfer to the contents is taken into account.g. The recommendations in API 521 are typical for conditions in a refinery or chemical plant. that are designed to cover a range of discharge 152-RP-48 Rev 02.. (2000) [6. unheated sections. It should be noted the blowdown systems are designed for vapour only flow. 1998 [6. For multi-component fluids. they are not intended to cover all fire scenarios. LPG tank pool fire (Moodie et al. foreseeable for offshore installations. 6. the API 521 approach to the design of blowdown systems covers most of the key aspects but may underestimate the heat load in some credible offshore fire scenarios and may not be accurate if there is two-phase flow. e. If the rate of depressurising is increased. 1992 [6. However. The information given in this (UKOOA/HSE) guidance allows the simplified vessel wall approach to heat transfer to be followed but. Feb 2006 Page 175 of 261 .42] discuss application of the Shell BLOWFIRE program to give vessel wall temperature-time relationships as input to the ANSYS finite element program predicting thermal mechanical response of a second stage separator with a wall thickness from 16 to 20 mm. Estimate the time to vessel rupture.6. This simplification is appropriate for jet or other fires. Calculate the rate of temperature rise of the vessel wall neglecting heat transfer to the contents.. define the type of fire (pool. The Energy Institute (2001) [6. The general implication is that process plant fitted with protective systems designed to API RP 521 or a similar standard may be insufficient to prevent failure of the pressure system before the inventory has been safely removed in a severe fire. BLOWDOWN.45]). sophisticated modelling is required. or application of fire protection insulation. The BLOWFIRE predictions were that after an initial pressure drop on opening. However. these need to be calculated over a series of time intervals that adequately take into account changes in the nature of the fluid. then design changes may be necessary to improve the vessel protection.43] recommend that the Gayton and Murphy [6. whilst there are validated models for blowdown under ambient conditions (e.

6 Failure criteria In order to know what measures to take. the models have been used to predict the pressure relief results. Temperature downstream of the orifice.e. the heat transfer to the vessel is split in terms of radiative and convective fractions and the heat transfer to the vessel contents is discussed in a similar way (see Section 5. it is necessary to know the maximum acceptable temperature of the object and the minimum allowable time to reach this temperature. Liquid levels. Some of those in most common use are summarised in Table 6-6. The Energy Institute approach is based on that of Hekkelstrand and Skulstad (2004) [6. Different references suggest different critical temperatures. 9. Flow rate through the orifice. and Time delay for initiation of depressurisation. 3.5). 6. These are related to the: • • • • Acceptance criteria for failure. Temperature in the metal. API (2005) and the Energy Institute (2001) give the equations for calculating the blow down orifice. Heat transfer at all interfaces. In 2003.6. 5. and Stresses to which the pipes and equipment are exposed.48]. 7.fireandblast. Feb 2006 Page 176 of 261 .com devices i. Temperature in all fluid phases. for each process segment (isolatable section) and each time step: 1. They give an iterative procedure based on calculating. Fluid composition in each phase. In this. 4. if any. Pressure. Method for initiating depressurisation (manual or automatic). the Energy Institute published interim guidelines for the design and protection of pressure systems to withstand severe fires. They have refined their approach with the emphasis on using fast depressurisation making the maximum use of the flare stack capacity and on minimising the use of passive fire protection. 6. 152-RP-48 Rev 02. 8. Given total capacity of the flare system. in protecting an object against fire. 2.

Knowledge of the time to failure is critical in deciding on the remedial methods to be applied to delay failure. In severe fires. 1997 ISO 13702 Criterion Temperature at which fully stressed carbon steel loses its design margin of safety Based on the pressure relief valve setting Temperature at which the yield stress is reduced to the minimum allowable strength under operating loading conditions Integrity of LPG vessel is not compromised at temperatures up to 300 ºC for 90 minutes.. where the flow stress is defined as the average of the yield and tensile stresses. However. 2002 (BS 5950) API 521 (1997) ISO 13702. BS 7910 (1999) [6..49]).620 427 400 Use Structural steel onshore LPG tanks (France and Italy) Structural steel offshore LPG tanks (UK and Germany) Structural aluminium offshore Unexposed face of a division Unexposed face of a division Human skin Surface of safety related control panel Source ASFP.com Table 6-6 Commonly used critical temperatures Temperature (Celsius) 550 . Flow stress (combining UTS and elongation stress). for example. tensile failure criteria are often used.g. with a system protected by PFP. Benham et al. the use of UTS may be acceptable if used with an appropriate safety factor. However. In theory. where the time involved is very short. Feb 2006 Page 177 of 261 . 1999 ISO 834 BS 476 ISO 834 BS 476 Hymes et al.fireandblast. 1998 ISO 13702. the most appropriate failure criterion is the creep rupture strength.50] suggests that the proximity to plastic collapse should be assessed by determining the ratio of the applied stress to the flow stress. However. and the pressure response and can vary between a few minutes and a few hours. Temperature at which the yield stress is reduced to the minimum allowable strength under operating loading conditions Maximum allowable temperature at only one point of the unexposed face in a furnace test Maximum allowable average temperature of the unexposed face in a furnace test Pain threshold Maximum temperature at which control system will continue to function 300 200 180 140 45 40 Failure of a steel component will occur at the time at which the superimposed stress exceeds the material strength and/or deformation limit. rather than the tensile strength since. The time to failure of a vessel or pipe work depends on the severity of the fire. in view of the complexity of creep rupture calculations (see. if the rate of temperature rise is much slower. In these circumstances. 1996 [6. the extent and type of fire protection. The Energy Institute (2003) considered three calculation methods: • • • Ultimate Tensile Strength (UTS) with a safety factor. e. it is more appropriate to use the creep rupture stress.2 % elongation stress and the UTS would be a more conservative measure. the rate of temperature rise in the wall above the liquid level or in a gas/vapour only system is very high (of the order of 100 to 200 K min-1 depending on the steel thickness) and the material strength falls rapidly once the temperature exceeds 500 °C. No consensus was reached within the Energy Institute working group on which method of assessing stress is the most appropriate for response to severe fires. It was 152-RP-48 Rev 02. the 0. as the time to rupture goes to zero. 1999 LPGA CoP 1. Use of a flow stress of the average of. the creep rupture strength becomes equal to the tensile strength. or Creep rupture stress (where both temperature and time are taken into account). say.

e.51] presented data from jet fire trials (170 – 190 kW m-2 incident heat flux) on pipes pressurised with nitrogen to 85 to 90 % of their design pressure.7 Performance standards 6.6. In 2004. A range of assessment criteria and methods for the design of piping systems and supports against fires and explosions has been developed by SCI and published by the HSE. In addition to a range of simplified assessment methods. Inlet and outlet connections with constraining piping.fireandblast. current failure criteria are conservative. (2003) [6. Feb 2006 Page 178 of 261 . throughout the lifecycle of the installation”. it is difficult to see how time to failure or realistic blowdown rates can be properly set. of the performance required of a system. They use Equation 5-7 to model the heat transfer to the pipe and found good agreement with the measured values for small pipes but found that the model overestimated the temperatures above 600 ºC for 250 mm pipes. The use and interrelationship of these are considered in this section. Salater and Overa [6. person or procedure.57] in 1995. Reaction forces during emergency depressurisation. It was found that pipe failure was adequately predicted by comparing the equivalent stress (von Mises) with the UTS. Vapour-liquid interface. According to the PFEER regulations [6. However.56]) and UKOOA Fire and Explosion Hazard Management Guidelines [6.53] and Billingham et al.6. the document advises that non-linear finite element analysis permits the rupture calculations of a piping system to be based on more accurate methods which accounts for the reserve strength inherent in many design codes. planning. [6.55]. Data is also available by Burgan (2001) [6. Offshore vessels tend to be of a more complex design than storage vessels and will have stress raisers such as: o o o o o Different thicknesses of material. and Design Accidental Loads (DALs). They also provide some data on the high temperature properties of steels. Experiments are required to assist in the validation of models intended to assess such features. Rule sets used in Quantitative Risks Assessments (QRA). item of equipment. Unless the failure criteria are properly set. Hekkelstrand and Skulstad (2004) [6. They imply that the method may be applicable to pressure vessels containing vapour and liquid but the complexities identified above are not explicitly considered. they emphasise that the pipe corrosion allowance should not be used when making the calculations and that good high temperature UTS data is needed.7. measuring. 6.58]. and which is used as the basis for managing the hazard. The Energy Institute states that it is not clear which of these features are critical in assessing failure or to what degree. Performance standards are closely related to: • • • Engineering Acceptance Criteria.1 General Use of performance standards came to prominence following issue of the Prevention of Fire and Explosion and Emergency Response Regulations (PFEER. “a performance standard is a statement. The experiments were aimed at taking the pipes to failure and determining the failure criteria that most closely represented the results. There are two levels of performance standards: 152-RP-48 Rev 02. which can be expressed in qualitative or quantitative terms. It also overcomes the approximations that have been identified with the use of simplified methods.g. if any. [6.52] have incorporated these results in the latest edition of their guidelines. manways etc.54].com stated that the ambiguity remains because of the lack of validation data. control or audit. Different types of weld materials and configurations.

7. 2. • • Requirements and guidelines for the control and mitigation of fires and explosions on offshore production installations are given. the engineering acceptance criteria for a pressurised system to resist fire attack would be that stresses. A broadly acceptable risk is one where the individual risk of a fatality is 10-6 per year or less. Escape and Rescue Strategy. For this record. control and mitigate the major hazards. the DAL are those loads with the initiating event frequency of 10-4 and higher.com • High level performance standards are applied to the installation as a whole or to the major systems that comprise the installation. However. The selected systems should make a significant contribution to the overall acceptability of the hazard management arrangements. For example. deformations and/or temperatures remain below values that would compromise the integrity of the system.61]. All tolerable risks must be demonstrated to be as low as is reasonably practicable (ALARP).59.2 Engineering acceptance criteria Typically. reliability. availability.3 Design accidental loads Design Accidental Loads (DAL) are loads for those accidental events where the associated risks exceed the risk tolerability criteria. 6. 3. The strategies should describe the role and any functional requirements for each of the systems required to manage possible hazardous events on offshore installations. fit for purpose and available on demand. Two strategies are introduced. and the associated specifications. any risk reduction measures should be recorded so that they are available for those who operate the installation and for those involved in any subsequent change to the installation. which may contribute to the high level performance standards. Feb 2006 Page 179 of 261 .fireandblast. • Low level performance standards are used to describe the required performance of lesser systems. The criterion given in the API RP 521 aims to achieve this by depressurising the system at a recommended rate. Therefore.7. 6. An unacceptable risk is one where the individual risk of a fatality is 10-3 per year or more for a worker or 10-4 per year or more for a member of the public. These are the goals for safety of the installation and relate to overall risk to persons on the installation. this may be inappropriate and inadequate for offshore installations.60] the following: 1. Performance standards at this level relate to the principal safety critical systems used to detect. This would require a lengthy iterative approach whereby a QRA is carried out first to identify those events and loads that cause the exceedance of risk tolerability criteria. Therefore. are equivalent to the performance standards approach in the UK safety legislation. depressurising and fire protection systems are functional. 152-RP-48 Rev 02. and an approach used that is similar to the UK performance standards approach [6. The performance standards should be directly relevant to the achievement of the system goal and the performance standards should be expressed in terms that are verifiable. in the process of fire and explosion evaluation and risk management. Typically. A tolerable risk is deemed to exist in the range between 10-3 and 10-6 per year for a worker. The functional parameters (integrity. An important principle in setting performance standards is that the number and level of detail should be commensurate with the magnitude of the risk being managed. These standards are verified from the results of assessments of low level performance standards. 6. HSE use [6. an approximate approach has been used which defines DAL as being associated with those events that have the order of magnitude of initiating frequency greater or equal to the tolerable outcome frequency. the lower level performance standard for the resistance of pressurised systems to fire attack would be that isolation.6. High level performance standards are normally risk-based. namely a Fire and Explosion Strategy and an Evacuation. for which it was not originally intended. the designed facility should successfully resist the DAL.6. This reference states that. when the tolerable outcome frequency is 5 x 10-4. survivability and dependency). the reference uses the term “strategy”. For example.

6.6. no escalation of the initial fire event in an area. The systems are designed to meet the normal engineering acceptance criteria for stress. reduction of the received insult or separation of personnel and fire hazard. the determination of DALs and appropriate engineering acceptance criteria.5 Overview Performance standards related to the resistance of pressurised systems to fire attack depend on having robust engineering acceptance criteria and a robust method to determine if these are met. the determination of DALs and appropriate engineering acceptance criteria and on how these linked together. the link between engineering acceptance criteria related to pressure systems and QRA may be made using the following approach: o o Rule sets in a QRA are set to reflect the standards to which safety critical systems are to perform.g. Quantitative Risk Assessment is used to confirm that high level performance standards are achieved. e. This section outlines the main issues to be considered in defining and quantifying the fire hazard effects on personnel offshore and what preventive measures may be available to a designer to minimize this hazard.7. in the terms of engineering acceptance criteria this means that applied stress in the vessel is not to exceed a defined allowable stress throughout the duration of a fire and thereafter. 6. The objective of any system to mitigate the effects of fire on personnel must be to remove the fire hazard either through fire extinguishment. Guidance is needed on the rule sets for use in QRA. o o o Before formal industry guidance could be given on such links. the performance standard would state that a pressure vessel should survive and remain functional during a postulated fire scenario. At present. these do not exist. temperature etc. Again. Design Accidental Loads are determined for the risks calculated by the QRA that exceeded the risk based performance standards and the facility is designed to resist these DALs. deformation. The pressure systems are redesigned to resist the DALs.6. and a dedicated deluge cooling system are functional.7 Personnel 6.com The requirements for successful resistance of a facility to DAL are expressed in the form of performance standards. This potential is present both in the immediate vicinity of the fire but also through transport of hot products at remote locations through the action of buoyancy and wind. This rule set assumes that isolation and depressurising systems.7. Feb 2006 Page 180 of 261 . and the QRA rule sets also depend on having robust engineering acceptance criteria.1 General Fires have the potential to cause severe harm and death to personnel offshore as a result of the evolution of both heat and toxic combustion products.4 Link between engineering acceptance criteria and QRA As implied by the above. guidance is needed on the rule sets to use in QRA. DALs are determined for the systems whose risk. 6. available on demand and survive the initial fire (performance standards). Inhalation of toxic and irritant smoke is the largest single cause of fatalities in both onshore and offshore fires. calculated by QRA.fireandblast.7. exceeds the risk based performance standards. Typically. 152-RP-48 Rev 02.

2 Specification of fire hazards The heat hazards from a fire are expressed in terms of heat flux and temperature. cabling. Finally the lack of oxygen in the fire plume may induce a condition known as hypoxia. Movement beneath or within a smoke layer may result in exposure both to radiant and convective heat fluxes. can also again act as an irritant to the eyes and respiratory system. Feb 2006 Page 181 of 261 . Smoke is also produced. These particulates may be either nonirritant or irritant. General fires. This product is then mixed with air entrained into the fire 152-RP-48 Rev 02. particularly when the identification and design of escape routes and muster points is undertaken. while the latter. Particulates sometimes referred to as soot.the amount generated per unit mass of fuel burned. paints. involving the structure and contents in the accommodation.7. In the former case vision is obscured making way finding difficult. etc. The temperature and emissivity of the combustion gases allows specification the thermal environment to which personnel might be exposed if they must enter the fire plume. However. These materials attack the eyes and respiratory tract: c.7. while at high exposures may lead to delayed death. not specific to the chemical process industry or offshore. The combustion product plume will also be at elevated temperature.fireandblast. Such exposure may give rise to hyperthermia and skin burns while inhalation of hot products may result in burns to the respiratory system. This can cause dizziness and ultimately loss of consciousness. These may become involved in the later stages of a process fluid fire or be the main fuel consumed. This is a difficult area which can only be approached using models based on computational fluid dynamics or physical modelling. In general the production of toxic and irritant species in a fire is expressed as a yield .1 Hazards of fire to personnel The fires which can occur offshore are many and varied. Here smoke is taken to comprise the airborne solid and liquid particulates and gases evolved when a material undergoes pyrolysis or combustion together with the quantity of air entrained or otherwise mixed into the mass. Smoke contains a complex mixture of: a.2 Characteristics of fires relevant to human response 6. 6. The potential for smoke movement must always be considered. Irritant products (gases and aerosol) which at low and medium exposures cause partial incapacitation thus hindering evacuation. seals. as well as impairing vision. In particular exposure to high radiant heat fluxes can produce severe burns to the skin and even ignite clothing.com 6. The major concern lies with the process fluids themselves.2.2. Both make evacuation from the scene of the fire more difficult. All these fires produce heat in the form of radiant and convective fluxes. Experience with the applications of both these techniques to smoke movement remains however very sparse and the conclusions should be treated with caution.7. jet. hydraulic fluids. or pool fires. These can give rise to fireballs. Thus the dimensions. shape and surface emissive power of the flame can be used to compute a received radiant heat fIux generally in kW m-2 to personnel in the vicinity. Movement of a smoke plume around the installation under the combined influence of the wind and inherent buoyancy must also be considered since its influence may extend beyond the immediate vicinity of the fire. control rooms and other occupied buildings on the installation must also be considered. The main irritants are acid gases for example hydrogen chloride and low molecular weight aldehydes such as acrolein and formaldehyde. other fuels are present on the plant such as plastics. vapour cloud. Asphyxiant gases such as carbon monoxide and hydrogen cyanide which cause partial/full incapacitation and death: b.

..the lack of oxygen 152-RP-48 Rev 02.. K is a property of the type of smoke and depends on its size distribution and optical properties..62] has tabulated existing data on Dm from various materials... It has been shown that the optical density expressed as a unit path length (D10/L (dB m-1)) correlates reasonably well with general visibility through smoke with an optical density of 1 dB m-1 corresponding to a visibility of ~10 m... or an optical density. In these circumstances – vitiated fires .... which may produce copious quantities of dense smoke and the situation of significant confinement which restricts ventilation... C K L is the mass concentration of particles..................a loss of visual capability............ This is more easily measured in experimental tests and is related to the optical density measured in a volume flow of combustion products V....... These will be characterized by an absence of growth and decay phases so that they will reach their full potential output soon after ignition but most will occur in well-ventilated open conditions..... resulting from a mass loss of smoke producing material ∆M: Dm = D10 V / 10 L ∆M ..... 6.7.......... and is the path length through the smoke.. There is limited data available though some measurements for flaming and non-flaming fires involving plastics suggest figures of 7.. There does not appear to be a standard form for specifying the smoke hazard........ The majority will result from releases of process fluids and involve flammable liquids and gases.... Equation 6-1 D10 = -10log10(I/I0) = (10/2......... is the specific extinction coefficient... The exceptions to such a rule are large pool fires involving the heavy hydrocarbons such as crude oil... Some parameters used include visibility – the distance in metres at which unilluminated objects can be seen through smoke........... Smoke production is often specified in terms of the volume in m3 s-1 of unit optical density smoke issuing from a fire.3 Typical hazard levels offshore Two distinct types of fire are likely to occur offshore.. Equation 6-3 Mullholland [6...... 2002) [6...62]....... an obscuration (%) – the amount of attenuation of light over a given path.... for example methanol and natural gas will produce little if any smoke.com plume and the hazard of asphyxiant and irritant gases and liquid irritants is expressed as a concentration in air...... A further smoke measure often quoted is the mass optical density............ Hence the general levels of toxic species and smoke production will be low.....6 and 4..... The major hazards from these fires will result from the high heat fluxes generated..... Equation 6-2 Where I and I0are the light intensities with and without smoke..fireandblast.. The product of K and C is known as the extinction coefficient and has dimensions of m-1...... either in volume or mass terms as ppm or mg l-1 respectively........303) KCL. Several may be encountered.. Feb 2006 Page 182 of 261 .2.......... It can again be quantified as a mass concentration of product in the fire plume or alternatively in terms more closely related to the hazard presented by smoke ............ Dm.4 m2 g-1 (Mulholland.. Indeed some fires. The latter is alternatively defined in terms of either natural (De) or common (D10) logarithms: De = -loge(I/I0) = KCL ..

2 % and 2. defined as the fuel air ratio relative to stoichiometric conditions and has presented data which suggest that for solid phase fires the rates of production of incomplete products may increase by factors of ~5-10 over the well-ventilated situation. particularly the mix of irritants and the level of smoke but can be taken as a general guide. seals. particularly for well-ventilated fires.0 g m-3 respectively for confined jet fires where for such fires without containment carbon monoxide concentrations <0. Tewerson (2002) [6.64] measured concentrations of oxygen. building materials and building contents including accommodation modules and control buildings. carbon monoxide and smoke of 12 %.4 and 5. for example aromatic polymers such as polystyrene and polyurethane foams. Feb 2006 Page 183 of 261 . From the toxic hazard viewpoint there are a number of specific fire types which may occur in isolation or as stages during the course of a developing compartment fire which are of particular concern and which specific toxic threats. Tewerson also noted that the levels of species production for under-ventilated confined fires can be parameterized in terms of the equivalence ratio. Such fires are likely to conform to the general character of compartment fires observed onshore with distinct initiation and growth phases leading to flashover and a fully developed fire.1 % might be expected. 152-RP-48 Rev 02.fireandblast. • • • Flaming fires which are characterized by rapid growth. Fires offshore may also involve solid phase fuels. A classification of the toxic hazards represented by these fire types is summarized in Table 6-7. Small flaming vitiated fires which may occur if a fire does not grow to flashover as a result of lack of ventilation.63] has summarized current knowledge on the rates of species production from the combustion of a wide range of materials including some simpler hydrocarbons and solid building materials. Thus Chamberlain [6. Both experimental and theoretical studies have focused on the heat hazards from such fires and there is considerable data on such issues (see for example Sections 5. Some of these materials have the potential to produce heavy yields of smoke.com in the combustion zone results in an increase of incomplete products of combustion including carbon monoxide and smoke. They may include cabling. These are present in a wide range of locations. This provides a useful compendium of information. toxic and irritant products. These are non-flaming fires which occur during the initiation phase of a fire.2.5). There are little data on the typical species output levels for fires involving offshore process fluids. These will vary with the fuel involved.2. Fully-developed or post flashover fires.

The next phase is the period of exposure to heat and smoke. The times at which these stages are reached are critical to an individual’s survival. The individual is then entirely dependent on outside assistance.3. 152-RP-48 Rev 02. b) The time at which onset of full incapacitation occurs is important since it removes any chance of self-rescue. a) Time to and level of partial incapacitation. c) The time for occurrence of serious injury. At some stage a stage of full incapacitation will be reached. heat. During this phase the victim has the full capacity and opportunity to escape and the main factors determining survival are concerned with detection and response to alarms. The third phase will result from prolonged exposure to heat and combustion products and will result in serious injury or death.com Table 6-7 Summary of toxic hazards presented by solid phase fires Fire Non-flaming/ smouldering Rate of growth Slow CO2/CO ratio ~1 Toxic hazard CO 0-1500 ppm O2 15-21% Irritants Little smoke Small flaming Rapid 1000 down to 50 CO 0 –1% CO2 0-10% O2 10-21% Irritants. smoke Fully-developed/post flashover Rapid <10 CO 0-3% HCN 0-500 ppm Irritants High temperatures Dense smoke 800 °C Temperature 400 °C 6. The effects of increasing exposure to heat and toxic products increasingly hinder a victim’s escape capability and induce growing incapacitation. heat.7. • • Hydrocarbon fires involving process fluids may not exhibit the first of these phases.2-4% CO2 1-10% O2<12% Irritants. Feb 2006 Page 184 of 261 .7.fireandblast. reducing an individual’s evacuation speed increasing exposure to fire and the chance of more serious consequences. Escape will become increasingly problematic. From this analysis four major stages can be identified.heat and smoke. The onset of partial incapacitation hinders escape.3 Harm criteria 6. smoke Small vitiated flaming Rapid then slow <10 CO 0.1 The developing hazard from the fire The influence of any developing fire on potential victims can be considered in three phases: • The first comprises a period when the fire is growing but before the victim is affected by the stimuli from the fire .

.......7.65] and Beyler (2002) [6.....3 Outcome of an evacuation The outcome of any evacuation depends on the manner in which the hazards develop (as outlined in Section 6. tu < te ...7....... a premovement time before escape action begins and a time to reach a place of safety determined by the length of the evacuation route and the evacuation speed.7.1 Effects of heat 6..4..4............ is the pre-movement time and is the time required to attain a place of safety or removal of the fire hazard..... knowledge of the environment and physiological response to exposure to heat and smoke......... length and design of escape routes.. response to alarms..7..... Equation 6-5 where td tpm ts is the time to detect the fire..1)........ Others have concentrated on the effects of radiation on humans..7.... provision of alarms.... The latter can be computed using a suitable model (Beyler.. Significant casualties resulted from exposure to radiation during the Los Alfraques Campsite and Lowell Gas Company incidents 6....2 Radiative transfer This depends on the source and the intensity of radiation falling on the target.1......fireandblast..2 The process by which occupants escape The is dependent on factors such as detection.. Again these factors can be expressed in terms of characteristic times.. The former can be specified in terms of the flame shape and dimensions and the total radiated energy or its surface emissive power.. Feb 2006 Page 185 of 261 ...... Equation 6-4 Here tu is the time from the start of the fire at which conditions become untenable..67] has produced a comprehensive study.. The simplest of these is the point source model which approximates the flame by a point source located 152-RP-48 Rev 02... 2002 [6. 6...68] have examined Human vulnerability to radiation for hazard analysis used in onshore situations and O’Sullivan and Jagger (2004) [6..... A successful evacuation requires that...... level of training..... This may be the time for full incapacitation should external rescue not be possible or the time to serious injury or death if external intervention is available....2...7.. For example: te = td + tpm + ts .. Thus there is a time to detection of the fire. 6...4...69] have looked specifically at the offshore situation to identify suitable injury criteria. age profile of the population............3.1 General A number of reviews have been produced adequately summarizing the basis of radiative transfer relevant to hazard analysis and the hydrocarbon processing industries..........com d) The time at which death occurs...... for example Lees (1996) [6...66]...... te is made up of a sum of various component times..70])... These provide suitable methodologies for computation of the radiation received from flames and assessment of its effect on man.. 6......... Thus Hymes et al (1996) [6.. Hockey and Rew (1996) [6.1...3...7..4 Human response to fire effects 6.....

and relative humidities up to 50 %.................1... 152-RP-48 Rev 02........ is the distance from the point source to the target and is the atmospheric transmissivity and accounts for attenuation of radiation by the atmosphere.. In this model the received flux is given by: q = ϕ E τ ........... θ R τ Alternatively the widely used method of view factors can be used.. He has shown that it depends principally on water vapour concentration in the atmosphere (in general. For lower humidities and for targets closer to the source...... More complex computationally-based models used within computational fluid dynamics suites are also available for the computation of radiation fields......... The severity of burns has been previously classified in terms of degree as indicated in Table 6-8 below.com at the actual centre of the real flame. With second degree burns any exposed skin will be uncomfortable and simple escape tasks such as donning survival gear or turning handles may become difficult.... Those with first degree burns are expected to escape quickly since movement should not be impaired....... at distances < 100m...3 Burn injuries Burn injury correlates closely with skin temperature and the severity of burning increases with failure of the blood supply to remove heat incident on the skin.. τ = 1 would be a reasonably conservative assumption............... is the angle between the normal to the target and the line of sight from the target to the point source location... Feb 2006 Page 186 of 261 .............. Beyler has provided a methodology for calculation of the transmissivity τ....... Equation 6-7 Here E is the flame surface emissive power and ϕ the view or configuration factor. Lees (1996) has parameterised several view factors relevant to process safety in terms of the geometry of the situation...7. The target is then regarded as located on a sphere with a radius given its distance from the flame centre.. This is a geometrical factor depending on the target location and orientation relative to the flame and the flame dimensions and shape.................. Equation 6-6 Where Qr is the total radiative energy from the fire....fireandblast... τ > 0. Third degree burns destroy both the surface and underlying layers........4............... ϕ takes values between 0 and 1. Table 6-8 Burn severity classification Burn type First degree Second degree moderate Second degree deep Third degree Characteristic Persistent redness Some blistering Full blistering Charring The terms second and third degree have largely given way to characterization in terms of depth For example moderate second degree burns affect only the surface layers whereas deep second degree burns penetrate into the dermis.. 6....7).... The received flux is then given by: q = τ Qr cosθ / 4 π R2 ....

...5 was included while the factor rose to 1.......com Escape becomes increasingly problematic as the depth of second degree burns increases.. In Table 6-10.... in the form: D = I4/3 t ...... it has been found that this underestimates the effects of high intensities and that a better correlation is obtained if injury is with a dose. takes the form: Y = a + b loge V .... this gives D in thermal dose in units of (kW m2)4/3 s.. Equation 6-9 V is the thermal dose in (kW m2)4/3 and a and b are constants derived by a fit to data.. The probit function can be converted to a mortality rate using a table such as that presented in Lees (1996)......... Injury due to exposure to short but strong pulses of thermal radiation may be correlated in several ways.... 152-RP-48 Rev 02...... The response of third degree burn casualties is difficult to predict... Feb 2006 Page 187 of 261 ..... Thus for a normally clothed population a factor of 0................... Equation 6-8 Where t is the time in seconds....... Individuals with third degree burns should be considered casualties who cannot escape unaided. An alternative approach to deriving the level of fatality is the use of probit functions.... The degree of variability is high........ Y.. However unassisted escape is still possible.... They are based on the statistical normal distribution........ the thermal dose used in the Lees probit included a multiplier to account for the variation of exposed skin area................. Table 6-9 shows the spread of selected experimental burn data for infra-red radiation correlated with the severity of injury.. A number of probits have been developed as shown in Table 6-10. Table 6-9 Summarised burn data for level of injury with threshold dose Infra red Radiation Thermal Dose TDU Harm caused Mean Pain Threshold first degree burn Threshold second degree burn Threshold third degree burn 92 105 290 1000 (kWm2)4/3 s Range 86-103 80-130 240-350 870-2600 Fatality criteria similarly based on the thermal dose can be derived for hazard analysis purposes... The probit function.. the most appropriate factor is the thermal dose – the product of radiation intensity and time...... and I is the radiant intensity in kW m-2. Fine control of injured extremities may be impossible and the act of escape will probably incur further injury........ Prolonged exposure to high radiant intensities and extensive third degree burning results in death... D...0 to account for ignited clothing... This demonstrates the importance of protective clothing.... Unlike linear harm functions they account better for extremes of injury and the variable response of a population............fireandblast...... However......... The problem with the probit approach is that there is never likely to be a sufficiently large sample of injuries from a well-defined event to validate a particular probit or that the normal distribution is appropriate to this situation.........

com Table 6-10 Probit equations for the fatality effects of thermal radiation.7. This means temperatures below 120 °C and 80 °C in dry and saturated air respectively. 152-RP-48 Rev 02. 6.56 2. Indeed there is some data to suggest that the highest temperature of breathable 100 % saturated air is as low as 60 °C. Feb 2006 Page 188 of 261 .6 Conducted heat The handling of hot objects can produce pain and severe burns. for example man made fibres may melt and as a result may increase exposure by melting on to the skin.5 Convective heating Above about 120 °C skin burns become increasingly likely. For example Hymes (1996) [6.7 b 2. Even without a hat and gloves an individual wearing a one piece long sleeved overall and shoes will have an exposed body area of <20 %. 6. temperatures above 42. Thus reducing the burned area as a result heavy duty. partial thickness and full thickness burns respectively. Clearly in a fire there will be significant water produced this is an important area for further study. All useful clothing. With only the hands.7. significantly reduce the level of fatality. 60 °C to 70 °C and ~80 °C can produce discomfort. well designed and specified clothing can provide significant mitigation. air movement. Clothing may provide some protection but at temperatures around 200 °C pain levels become intolerable after a few minutes due to burns.5 °C cause death in minutes.1. face and neck exposed this is further reduced to about 15 %. If temperature and humidity are sufficiently high to produce facial skin burns they will also cause internal burns to the respiratory tract.4.1.4 Hyperthermia Simple hyperthermia involves prolonged exposure (>15 minutes) to heated environments at temperatures too low to cause burn injury. The latter may reduce tolerance since it restricts mitigating evaporative cooling.71] has examined the ignition properties of various grades of clothing and counter intuitively he has predicted that fire retardant cotton will ignite more easily than other clothing types. Humid air.7. Probit equation constants Source a Eisenberg et al Tsao and Perry Lees -14. This suggests that at temperatures above about 100 °C exposures in excess of a few minutes should give concern particularly in conditions of high humidity and if the subject is working hard as might be expected if evacuating from a fire.56 1. The main effect is a gradual increase in core temperature.8 -10.99 The extent of exposed skin has an important effect on survivability in high radiation environments.1. When this is raised to 40 °C consciousness becomes blurred. 6. steam or high heat capacity smoke may be dangerous at temperatures around 100 ºC causing severe burns throughout the respiratory tract. Dry air at 300 °C will cause burns to the larynx in a few minutes and breathing air at temperatures down to 120 °C will be painful and potentially cause incapacitating burns. level of activity. The time taken to reach such a state depends on a number of factors including the heat flux exposure.4. The issue is then to avoid ignition of clothing. even with full depth burns. This issue is not well understood and further work is required. In practice heat flux and temperature tenability limits intended to protect victims from incapacitation from skin burns should be adequate to protect from burns to the respiratory tract.9 -12. humidity and amount of clothing. For metals for a few seconds exposure at temperatures or 50 °C to 60 °C. Such exposures.fireandblast.4.

Feb 2006 Page 189 of 261 ...... Low oxygen hypoxia Again the effects of lack of oxygen are both concentration and does related. The effects of irritants are considered additive.com 6.. W = Ct ....g.. produces a three fold increase in breathing rate at concentrations of about 5 %.. Equation 6-10 Where W is a constant dose and t is an exposure time... The effects are dose dependent but take up is dependent on breathing rate......... notably carbon dioxide produced in all fires... The effect thus builds over time..... The human response to some smoke constituents (e.... The units of W are generally ppm min....... For a normal adult at rest or partaking in light activity full incapacitation occurs after about 21 or 5 minutes respectively at 5000 ppm. Full incapacitation is predicted for a FID or FIC ~ 3-5............. Hydrogen cyanide: The effects of hydrogen cyanide depend partly on uptake and dose..... the asphyxiant effect of CO2 acts independently of other gases.. The response to other materials such as carbon dioxide and low oxygen concentrations is a combination of dose and concentration... This is dependent on activity.. The effect of other constituents including most irritants is concentration dependent and the effects are felt immediately........ This can be done for a number of components... CO) can be described in terms of an accumulated toxic dose given by the product of concentration and time.2 Effects of smoke Purser (2002) [6. Similarly the effects of oxygen hypoxia are considered directly additive to the combined effects of CO and HCN. Death will occur at a concentration of 12-16000 ppm for a 5 minute exposure. Similarly some plume constituents. For FED the Ct product for small periods of time during exposure are divided by the Ct product dose causing the toxic effect.. The effects of some of the different plume constituents are known to be additive. The main effects are felt at concentrations below about 14%. Thus: FED = Dose received at time t (Ct)/Ct dose to cause incapacitation or death Similar calculations for a fractional incapacitating dose (FID) and fractional irritant concentration (FIC) can be carried out....7... The effects of many fire plume constituents are felt in the lung so the rate of breathing is important. The effects increase from zero at about 80 ppm to loss of consciousness and full incapacitation in a few minutes at 180 ppm. The effects of some of the main smoke constituents are: Carbon monoxide: CO causes suffocation by blocking oxygen transport in the blood haemoglobin..72] has summarized current knowledge on the varied human reaction to the various constituents of smoke and should be consulted for a comprehensive treatment of the subject....... The fractional doses are then summed until the fraction reaches unity when the toxic effect is predicted to occur. However.. A FID or FIC =1 generally indicates a state of partial incapacitation... The concept of a fractional effective dose (FED) has been introduced to allow the combined effects of combustion product mixtures to be examined..... Thus those of CO and HCN are and CO2 increases up take of these products in proportion to its effect on the breathing rate.4. Thus for an average man running or walking uphill as might be expected in an escape situation the rate of breathing increases almost 6 fold....fireandblast...Thus: >14 % No significant effects 152-RP-48 Rev 02.

state of dress etc and recommended that the criteria given in Table 6-11 are the most appropriate.8-9.1 Radiation A recent study (O’Sullivan and Jagger.1.6 % Severe incapacitation.2 m-1 reduced walking speeds to 0.73] has taken account of the special features of the offshore environment including its isolation.4-11. This may lead to death 6-24 hours after exposure. Particulate smoke: Smoke can be either irritant or non-irritant. An acute pulmonary response including edema and inflammation in the respiratory system. Acute pulmonary response may be induced by exposures in excess of 12000 and 500 ppm for five minutes respectively. Loss of consciousness occurs at concentrations between 7 and 10 % Irritants: Irritants produce two levels of harm: • • Sensory irritation pain to the eyes. The main irritants are acid gases including HCl. 6. respiratory tract and lungs to some extent.3 m s-1 for non irritating smoke. 152-RP-48 Rev 02.fireandblast.33 m-1. Studies have shown that walking speed is reduced from 1. death Carbon dioxide: The asphyxiant effects of carbon dioxide are only felt at high concentrations above about 5 % and then follow a dose response relationship. reduced exercise tolerance 11.3 m s-1.5. lethargy <9.7.6 % Loss of consciousness.5 Vulnerability/harm criteria 6. The former is concentration dependent while acute damage only occurs above a threshold concentration and then is dose dependent. Some data for HCl and acrolein indicate disturbing irritation to the eyes and upper respiratory tract occurs at concentrations of 75 . At concentrations of 6-7 % individuals suffer severe respiratory distress and dizziness. Below this figure the main effect is of hyperventilation which acts to increase the uptake of other gases.2 to 0.7. Such smokes with densities of only ~0. There is little data on irritants for humans. 2004) [6. Feb 2006 Page 190 of 261 . Smoke causes disorientation and thus acts physically to reduce escape speed.com 14. the age profile and fitness of the population. SO2 and NOx and simple aldehydes such as acrolein and formaldehyde.1 Effects of heat 6.300 and < 5 ppm respectively. There is also a psychological effect in that some individuals will not try to evacuate through smoke at a density in excess of 0. They make way finding difficult and reduce the visibility of escape signage.7.8 Slight effects on memory. The effects of irritating smokes are even more pronounced.5.

5......107 T-3.... Feb 2006 Page 191 of 261 .....2...5. This is particularly important for fires offshore where there is likely to be significant quantities of water both produced in the fire and used for fire fighting........1 Asphyxiant gases Existing knowledge suggest that the tenability limits given in Table 6-12 for asphyxiant gases are appropriate for design purposes. Temperatures above 120 °C will produce both skin and internal burn injuries... a dose of 290 (kWm-2)4/3s is reached in 14...2 Effects of smoke• 6.7.com Table 6-11 Thermal dose harm criteria from radiation Harm caused Escape impeded Thermal dose..... (kW/m2)4/3s 290 (See also Table 6-9) At permissible radiation design levels of 9. Table 6-12 Tenability limits for incapacitation and death from exposure to common asphyxiant gases 5 minute exposure Gas Incapacitation CO HCN Low oxygen CO2 30 minute exposure Incapacitation 14-1700 ppm 90-120 ppm <12 % 6-7 % Death 2500-4000 ppm 170-230 ppm 6-7 % >9 % Death 12-16000 ppm 250-400 ppm <5 % >10 % 6-8000 ppm 150-200 ppm 10-13 % 7-8 % Some currently accepted 30 minute LC50 values for CO and HCN are 5700 and 165 ppm respectively.5 and 25 seconds respectively) 1-5 % fatality 50 % fatality (to front and back only) 50 % fatality 100 % fatality 1000 1000 2000 3500 6.31 kW m-2 .fireandblast..... the existing work suggests a relation for time to incapacitation in a hot environment of tI = 5.. Equation 6-11 Thus temperatures of 100 and 60 °C would cause incapacitation in a matter of some 8 and 45 minutes respectively....5...... 152-RP-48 Rev 02............7... 6. It will be significantly less that those obtained from Equation 6-11 but no data exist to allow its determination with certainty.....2 Convected heat The toleration of a hot environment depends on the level of activity.46 kW m-2 and 6....4 ... For air with a humidity <10 %.....7....1... extent of clothing and level of humidity....... The time to incapacitation in air with higher water vapour contents is not well defined.

acrolein and HCl. Passive systems may also present hazards. 6.5. These fumes or their decomposition products may present a hazard.2 and 0.7. Concentrations are in ppm. Many materials when treated with fire retardants are capable of resisting small ignition sources but when faced with a large igniting fire can burn readily. Level b) represents severe eye and upper respiratory tract irritation with severe pain. Sensory irritation Gas a Acrolein HCL 1-5 75-300 b 5-95 300-11000 5 500-1000 12-16000 10 150-690 10000 30 50-135 2-4000 Death. protected evacuation routes to a safe haven or temporary safe refuge. 152-RP-48 Rev 02. Feb 2006 Page 192 of 261 .08 m-1 for small and large spaces respectively.2. levels of illumination (particularly of signage) and irritancy of smoke.2.7. Table 6-13 Tenability limits for sensory irritation or death from irritant substances. • • Level a) is for unpleasant and severely disturbing eye and upper respiratory tract irritation. For example water mist and deluge systems will produce copious amounts of steam which will add to the obscuration provided by smoke and hinder escape. minutes 6.7. Intumescent materials rely on chemical reaction for their action and generate fumes.7. The treatments themselves then add significantly to the rate at which smoke is produced and the composition can be particularly irritant and toxic. Also humid air enhances the effects of hyperthermia and when inhaled can significantly increase the severity of internal burns to the respiratory tract. Suggested tenability limits based on ability to evacuate can be set in terms of optical density and set at 0.3 Smoke The ability to evacuate through smoke is dependent on a number of factors including knowledge of the environment. Existing knowledge suggests that the tenability limits given in Table 6-13 for these gases are appropriate for design purposes. Similar considerations apply also to binders used in other passive systems. For death the levels represent concentrations at which there is a danger of death occurring during or immediately after exposure. 6. This will generally be through evacuation of occupants by means of safe.6 Hazards from fire protection systems Possible interactions of fire with active and passive protection systems must be considered.7 Evacuation and mitigation If the hazard cannot be removed then some means of separating the hazard and personnel must be provided.2 Irritants Two irritant gases have been taken as examples. Platform layout can make a major contribution to this. Two levels of sensory irritancy are given.com 6.fireandblast.5.

More complex models are now available which take account of the response to alarms. Their length must be kept to a minimum and they must be routed away from high hazard areas. Feb 2006 Page 193 of 261 . fire resistant coveralls as a minimum requirement and should also consider whether breathing apparatus is required. A key issue to consider in developing evacuation and mitigation strategies to protect personnel is the provision of Personal Protection Equipment that can supplement the fire protection and other mitigating measures discussed in Sections 3.3 kW m-2. as to provide this resistance. Traditionally evacuation has relied on simple hydraulic formulations of people movement to derive travel speeds. other premovement aspects and the varied response of a population to the threat of fire. There are no particular guidelines for the design of such structures offshore. Thus there is a need to design fire resistance into the structure.75]. However. 152-RP-48 Rev 02. The provision of equipment will consider suitable clothing. Various models covering types and durations are available on the market and the requirement should be determined by the hazard and the function of the team to which they are being supplied. Under UK legislation and as a matter of good practice. There are no particular guidelines for evacuation routes off shore. for normal operating teams who are making their way to safer muster areas prior to disembarking will need lightweight equipment of short duration.74] and Gobeau et al (2004) [6. Should they be likely to be subject to fire attack they must be protected with fire walls suitable for offshore duty or water protection systems? The evacuation routes should maintain their integrity for a time sufficient to allow even injured personnel to reach a location of safety. Similarly a means must be provided to seal doors and other openings such as cable routes and other services. there is a need to provide temporary refuges to serve as muster points prior to evacuation of the facility.3. For example. This equipment should have been specified to be suitable for the range of hazards that the team are expected to respond to.com Careful consideration must be given to the design and routeing of evacuation paths. suggests that evacuation routes should not suffer incident radiant heat fluxes in excess of 6. There is currently much activity in the development of evacuation models. e. Emergency Response teams who may be required to recover colleagues in the early stages of an incident will require longer duration sets. There are also general requirements relating to evacuation routes in public buildings and industrial premises. However CIA guidance for onshore situations. the use of stairs etc. rescue teams for helicopter crashes. These models have recently been reviewed Nelson and Mowrer (2002) [6. assess the emergency and allow execution of the emergency plan. The requirement is that the chance of loss of a TR. and the difficulty of route finding and an evacuation time obtained from simple combination with the length of the route.5 and 7. for example. they are required to allow staff to muster. either by insulation or water deluge. will not exceed 1 in 1000 per year. These have been corrected for travel through smoke. The prevention of smoke ingress must be considered and any ventilation system should include a means to close off relevant air intakes.g. They have been applied to a variety of situations and potentially they may be applied offshore particularly to the design process to calculate a time for all personnel to reach a place of safety for different plant layouts and fire scenarios. within the stated endurance time. Those walls likely to be exposed to fire must be protected in such a way. Dedicated fire-fighting teams will require specialist fire-fighting suits and will be trained to use the full range of portable fire-fighting equipment on the installation.fireandblast. If likely to suffer from smoke logging consideration should be given to other methods of way-finding.

Thus early decisions on concept and layout may be based on ‘quick estimate’ assessments. Can this installation be built and operated to make a reasonable profit with an acceptable level of safety? Does the project documentation fully record the basis on which the decision to sanction the project was made? The cost of continuing to operate the installation safely once the revenue from the installation has dropped to a fraction of its peak rate must not be forgotten. offshore fire risks can be kept to acceptable levels.10. Failure to provide time and resource for this could result in the need for very expensive fire-protection systems or failure to meet risk targets without extensive QRA input and/or remedial design. Section 7. but should be appropriate to the problem being assessed. Designing effective fire protection systems to detect. 2. Senior Management is responsible for approving new projects or major modifications and may ultimately be called to account for their decision. This is achieved by designing with fire-related issues in mind throughout every stage of a design project. or time consuming. experience shows that. This section on design guidance for fire resistance seeks to pull together in one place guidance on existing best practice for a two-pronged approach to fire protection i. with care. 152-RP-48 Rev 02. There is a legal obligation to base decision-making for health and safety on risk assessment. Some issues for older platforms nearing the end of their life cycle are discussed in Section 3. If this process is followed. This assumes that sufficient time for creative thought and corrective action is allowed in the project schedule.fireandblast.2 guides engineers towards designing out problems and reducing risks early in design. but the desired information for QRA (where justified) is generally not be available until later in the design. Feb 2006 Page 194 of 261 . best done at regular intervals throughout the design process. Two key safety issues to be addressed are: 1. quantitative. • • Designing the process systems to minimise both the occurrence and the magnitude of fires. Targets for risk are set at the beginning of a project. There will always be a trade-off between cost and safety.com 7. Project managers need to understand that risk assessment is not a one-off activity but a continuous process. where significant changes can be made relatively cheaply.e. Detailed design guidance for fire resistance 7.1 General Despite the complexity of the fire phenomenon and the many areas of uncertainty still acknowledged by the industry. These risk assessments do not always have to be complicated. the Risk Reduction in order that the justification can be recorded for the ALARP demonstration. Failure to do this courts a risk of missing safety or financial targets and having difficulty demonstrating ALARP. it is far less likely that problems requiring expensive solutions will be identified at the eleventh hour when the final QRA results for the installation are produced. control and mitigate the remaining fire risk once all reasonable efforts to minimise through good process design. It is important that design decisions are taken in the light of an understanding and assessment of the Cost vs.

Feb 2006 Page 195 of 261 . who will in turn look to their discipline engineers for the detailed back-up to support the sanction decision. unmanned NUI is just as important as evacuation from a manned installation.g. – The balance between designing for fire hazards and explosion hazards (also see the discussions in Section 4) is logically thought through. This section is written for discipline engineers and project managers. and include the effects of prevailing wind in terms of spread of impact (dispersion of gas or smoke). At concept stage there will be only very basic well information. A simple evaluation of which concept offers the smallest fire risk should be made. enclosed or partially enclosed modules containing process equipment present serious fire risks but are more readily managed through a mixture of ventilation control and fire protection. 7. for example. Each of the following stages of the design process should schedule safety reviews appropriate to that particular stage into the project schedule. • • 152-RP-48 Rev 02.2 Project appraisal & concept selection At the first stage of design. with respect to areas of greater safety (e. vessel inventories. safety is appropriate and in line with Company Safety Policy. Their associated hazards conform to a “hazard gradient”. open module design facilitates better dispersion and dilution of released gas or vapour inventories and provides less containment for explosion overpressure generation. but may not have adequately considered in the original design. In addition. guidance on designing to reduce fire risk at each step of the design process. – Evacuation from a small. utility requirements and layout data. Greater complexity often implies a higher leak frequency (and higher overall fire risk) and also requires a larger or more regular workforce to meet the maintenance demands. it must be recognised that there is always a balance to be struck between safety.1 Introduction The recommended Fire and Explosion Hazard Management processes are laid out in Part 0 of this guidance. If the cost of the safety facilities necessary to maintain the Safety of any proposed concept within acceptable bounds makes the installation unprofitable. One of the aims of this section is to highlight to both project and discipline engineers the extent to which they can influence the type of fires and well as the effectiveness of the fire management measures as part and parcel of their discipline design effort. and certainly concerning the TR and evacuation facilities? Future risers should be considered where at possible. qualitative. The discipline of recording the basis for the concept selection decision forces project teams to ensure the balance of cost vs.2 The design sequence – minimising fire hazards throughout the design 7.2.fireandblast.2. 7.com Senior managers will look to their project managers. gas lift risers can provide a considerable hazard in later years of operation as the reservoir pressure declines. The objective of this section is to provide some additional. Part 0 is aimed at safety specialists. so only basic comparisons can be made. a number of different concepts will be put forward for consideration. risers and process equipment are located such that. for example. pragmatic. Efforts should be undertaken to reduce the relative complexity of the topsides processes. TR and evacuation areas). cost and practicality. Key items to consider at concept selection stage are: • • To ensure that the wells. then that concept should be rejected. Potential escalation paths are minimised where possible within the confines of the layout. Whereas. – The flammable and toxic inventories should be minimised to reduce the duration of release and fire scenarios. production flow rates.

Consider the effect of weather on plumes/cloud behaviour and EER. At concept stage however. external flaming effects and associated fire sources (e. As a general rule. for example. – Inventory removal and containment concepts/philosophies have been carefully considered within the context of other ER planning (for example. In open modules. A key finding of recent research work is that fires from even relatively small hydrocarbon releases (around 1 to 3 kg s-1) in enclosed or partially enclosed modules can generate a layer of very hot gases (temperatures in excess of 1000 °C) in the top few metres of the module within a few minutes of ignition.com – The full range of fire hazards have been designed for. damage to high level process and safety equipment and smoke and flames reaching well beyond the module boundaries are all realistic consequences to be considered. analysing where the heat. provide for the rapid removal of inventory and high levels of protection against the high heat loads at ceiling level (see Section 7. Ensuring that all structure potentially exposed to high heat loads is examined and either the structural concept changed or the structure adequately protected by PFP. In this way. for example identifying where cranes. very rapid activation systems and extensive protection to high level support structure and blowdown facilities to control escalation so the cost will be higher. and designing in the light of this knowledge. – Where cranes. Structural failure. Gas cloud and smoke plumes from unignited releases and fires affect EER. the higher the likely cost of the fire protection systems found necessary at a later stage in design. shuttle tanker fires during offloading from F(P)SOs). The less effort put into control of fire at source at concept stage. large installations with complex process plant can expect higher leak frequencies so understanding of all the fire escalation issues should be a focus point right from concept selection. To control the consequences of sustained pressure-release fires requires higher deluge rates and more passive protection than have been traditionally used in the North Sea in such modules. wells etc. although this has traditionally been difficult to achieve and certainly difficult to maintain on ageing installations. boats and drilling rigs will approach or operate in relation to pipelines and risers? The outcome of the review should be presented in a discussion meeting so that engineers and managers can understand how the options were compared. open module design may also require high deluge supply rates if several areas could be initiated at once. • • • • 152-RP-48 Rev 02. Feb 2006 Page 196 of 261 .g. However. many of the causes and consequences can be designed-out thus reducing costs. – The range of supporting equipment that will be active over the installation lifetime. are located away from areas of high activity. inventory containment allows helicopter access at all times whereas rapid venting effectively excludes helicopter approaches). considering fires on the sea surface. smoke and flame will go. This is done by: • Not placing process equipment that can sustain severe fires into partially enclosed modules. Enclosed design requires high application rates.fireandblast. boats and drilling rigs will be required to operate and ensuring that pipelines.3 “Best practice for fire protection systems”). It is now known that heat build up from fires in confined modules is both more severe and more rapid than was appreciated in the 1990s if a sufficient supply of air continues to be available. A further option is to investigate a greater degree of hermetic sealing to reduce air ingress. Where enclosure of process plant is unavoidable. These installations also tend to have a higher POB. risers. the benefits of each concept can be adopted to improve on the chosen selected concept.

Once the design concept is selected. decommissioning etc). Optimising the layout with regard to fire potential can minimise the likelihood of release and ignition. However the cumulative individual risk for satellite team members becomes high. installation. gas lift risers or other proposed tie-ins 152-RP-48 Rev 02. The table is intended to highlight key considerations to be addressed. a layout review should be undertaken. There is limited shelter for personnel before or during evacuation. very simple process or small inventories. single jacket installations with complex process plant however need extremely close attention. Location. Such installations need to have lower risk targets to take account of satellite team personnel who may spend their time visiting a succession of similar facilities. risers. well-informed design is needed to make them safe. gas installations can sometimes be acceptable because of low production rates.. accessibility and vulnerability of automatic and manual isolation valves in fire situations Location of artificial lift arrangements. This would ensure that key layout considerations for other lifecycle phases are not missed. Evacuation risks on small. although not excessive if viewed in isolation. Small. e. commissioning. with appropriate discipline attendance for other stages of the installation lifecycle (e.g. an innovative.com On large installations personnel can rapidly distance themselves from a major fire incident. Topsides issues . process and blowdown facilities are all in close proximity to each other. Given that no two installations are alike. The TR and evacuation points can be far enough away to allow safe evacuation. and ignited gas jet fires are large in comparison to the installation footprint. and to the TR and evacuation points. inventories (including down hole gas lift inventories) and isolation Risers / pipelines Riser and riser isolation valve locations – vulnerability to fire attack Risers and Pipelines as source of release and potential for escalation. open. addressing at least the topics and associated considerations listed in the table below. The high risk stems from the fact that these are small open installations with minimum safety features. The objective is to explore whether the locations of key items which contribute to fire safety can be improved without incurring disproportional cost. major drilling / workover programmes. and the subsequent impact on exposed equipment. based on the philosophy that the installation would only be manned for an absolute minimum time. Separate. provided the decision to evacuate is made very rapidly. The layout fire review should be a multidiscipline activity. improvements are far more costly to implement. Innovative. and a basic layout proposed. there will be many variations on the list of issues to be covered. well-informed design is needed to make them safe. If such layout issues are not addressed until late in design. critical systems or personnel. Feb 2006 Page 197 of 261 . Riser vulnerability to passing and attendant vessel collision especially during cranes operations Future risers. Where wells. The table below covers the review of the platforms normal operational phase.g. The platformspecific risk becomes high. shorter layout reviews should be considered.fireandblast. Some normally unmanned very small gas satellite platforms in the Southern North Sea have ended up with relatively high risk levels and ‘minimum facilities’. In such cases a separate accommodation jacket or unit may prove the only feasible option.Concept Item Wells Fire considerations Location and segregation for all anticipated types of well operation (including drilling and workover) and maintenance during field life.

instrumentation and safety critical elements) in closed or open module designs needs due consideration Structures and supports Points of ignition Location of tall structures or structural supports vulnerable to fire attack with severe consequences Consider ignition potential for all release scenarios (see factors listed in Section 2. Egress. checking for trap points or need for protected muster point alternative to TR. Location of back-up supply lines.Concept Item Process & piping Location of major inventories Location of relief. Consider location of escape routes to sea. Discharge location for oil and firewater drained to sea in fire incident. escape and evacuation routes For potential fire scenarios: Fire considerations • • • Consider egress routes.fireandblast. Consider time to escalation Vs time to muster.4) Especially consider the location of all non-certified equipment with respect to releases and associated gas plumes (e. TR and alternate protected muster points • Consider impairment of TEMPSC loading area and helideck access routes. appraise and evacuate. Location of air supply ducts Vulnerability to heat/smoke Vulnerability of TR supports to fire scenarios Communications UPS Fire Protection Location and vulnerability of any critical communications hardware Check for vulnerability to fire Location of firewalls and PFP Vulnerability of fire pumps and ring-main to damage in fire scenarios Vulnerability of deluge piping inside module and supply lines. Feb 2006 Page 198 of 261 . blowdown and flare and/or vent lines Number and rough location of process ESDVs and BDVs Location of overboard discharge lines or atmospheric vents (in worst case process upset condition) with respect to ignition points Location of fuel-gas piping and potential for fires/explosions outside main process locations (especially turbine enclosures) Exposure of personnel and equipment (including piping.com Topsides issues . cranes and generator or motor enclosures.g. 152-RP-48 Rev 02.2.

2. fire management input can still have a major impact on the overall risk levels for the personnel and the TR impairment. Feb 2006 .com Specific subsea or marine issues Subsea layout Understanding of leak durations and isolation provision Position of pipeline routes to minimise damage potential Position of subsea isolation to minimise inventory loss Subsea tiebacks and control F(P)SOs Location of control interface and vulnerability to fire attack See Section 3. Examine the design for potential escalation points. Optimise design of multiple escape routes and muster areas to ensure POB reach a place of greater safety with minimised risk for the hazardous scenarios identified. The process and the safety engineers need to work together to: • • • Develop a draft ESD and blowdown philosophy document. vulnerability of legs to fire scenarios in both standalone drilling operations and drilling operations over production installations- 7.e. how is each release or fire scenario prevented. identifying the goals of the key SCE’s for fire control i. Evaluation may be delayed. ESD and blowdown/dump systems are developed. detected. Page 199 of 261 • 152-RP-48 Rev 02. This may impact on TEMPSC numbers and locations. shut down and isolate plant rapidly on fire or gas detection Provide the facility to remove all significant hazardous inventories from the fire zone quickly without local manual intervention.fireandblast.3 FEED stage At this stage. especially survivability of ballast control arrangements Floating Production Units (converted MODUs) – consider vulnerability of hull to internal and external process fire scenarios Vulnerability of emergency pull-off arrangements in fire scenarios (drilling and production units) For Jack-ups. These systems must not be designed in isolation.8 Time for escalation of process events to vessel threatening events Diversity of escape routes for all fire scenarios (especially process/storage scenarios) Location of evacuation facilities for sea-fire scenarios MODUs Drilling units – vulnerability to drilling fire scenarios. stopped or controlled Clarify the fire areas and location of fire walls with respect to plant & the TR. Partial evacuation may be initiated. particularly on large installations. This is the stage where the process control. Ensure full emergency evacuation can be achieved under all weather conditions and wind directions before the incident escalates to a platform-threatening event. due to the need to carry out search and rescue operations for personnel not appearing at muster. The fire and gas detection and protection system philosophies will be set. At the start of FEED stage the basic process design parameters are set down and the key plant items and protection systems identified and sized. Whichever particular philosophy is followed the aim should always be to:- • • • • Raise alarms. Develop draft fire and gas detection and protection philosophy documents.

where impact on Safety Critical Systems may occur. 152-RP-48 Rev 02. • The focus is primarily on the risk within the first 15 minutes whilst personnel are likely to be present and trying to escape. Carry out FEED stage HAZID and HAZOP studies. ladders etc.5. The impact of operation or failure of the water deluge system. a more detailed analysis is warranted.fireandblast. High risk areas .2. testing and maintenance issues for the various systems. Compare escalation times with evacuation. Feb 2006 Page 200 of 261 . These may identify new fire related issues to be considered as well as other safety issues. This may mean using mathematical models. Additional preventative and mitigation measures may need to be considered and a detailed QRA undertaken. Transition to other events – escalation to a larger fire or potential for an explosion. protection and mitigation systems. However. TR and Review the isolation and blowdown systems to minimise the fire impact and escalation potential ( a number of reiterations of the design may be needed). to predict spatial and time varying fire behaviour and thermal loading. 7. Such an assessment should consider: • • • • A range of fire scenarios and sizes – particularly from high pressure areas. near escape routes. NORSOK Standard S001. structural and process design safety. to the sea.2] entitled ‘Technical Safety’ and its annexes. then it is likely that the installation is falling into the Type “A” category of UKOOA Framework for Risk Related Decision Support.com • • • • • • Decide what types of passive and active fire protection best suit the fire scenarios. More sophisticated calculation techniques could also be used to predict the response of vessels and structures impacted by these fires. also give the requirements for layout. this can be extended to later times when the impact on the asset may be considered. where structural integrity might be affected. Carry our coarse fire risk assessment. The impact of operation or non-operation of ESD valves.2. control systems.5 Detailed design The effectiveness of the detailed design stage is dependent on the success of the preceding design stages. European Standard EN ISO 13702:1999 [7. If a design concept with high fire risks or poor protection philosophies has been selected. fire and explosion protection arrangements and communication systems. Otherwise.4 A methodology for an initial fire QRA An initial conservative QRA associated with the fire hazards on an installation can be undertaken using the typical thermal loading values presented in Section 5. Rev 3 2000 [7. if required.where escalation might result in a short time. stairways. then detailed design is unlikely to be able to rectify the situation without major cost and time penalties. Design egress routes including muster/embarkation areas.4 and the relevant response methodology of Section 5. EER arrangements and inspection. 7. search and rescues times.1] entitled ‘Petroleum and natural gas industries – Control and Mitigation of fires and explosions on offshore production installations – Requirements and Guidelines’ provides more guidance on layout. (which should be validated against a wide range of large scale experimental data). If this assessment suggests that the risks are well understood and broadly acceptable.

operating pressures and temperatures and simplify their designs as much as possible.g. 152-RP-48 Rev 02. Environmental legislation however forbids marine pollution by oil. has other longer term benefits e. for collision protection.2. Space allowance for a diversity of escape routes is essential. as well as internal flaming in confined but ventilation controlled modules must be assessed. The escalated fire effects can be serious enough to lead to progressive collapse of the topsides.5.5. and this has to be done on a project timescale. since designs vary enormously. or surge/storage vessels should be considered. Where large inventories still remain in sections of the process train following ESD. and an understanding of the lack of protective effect should be considered during scenario and escalation developments.5. Structural redundancy. early failure of structural items in the roof of the module is predicted unless passive protection and/or a very high rate of deluge application is provided.1 Introduction This stage of design presents many conflicting issues to be resolved. Locating process pipework inside structural supports should always be considered carefully as overpressure from releases or explosions. This is only possible where the risks are honestly and openly brought up for discussion between the various disciplines affected and the project management.3]. so alternative measures to prevent operational spillage must still be provided. while costly in the short term. These systems themselves are not risk free and the risks need to be balanced for every design. cold vent. Key structural supports (or vessel hulls in the case of floating installations) either need protecting against the remaining fire effects or redundancy provided in the design. residence times needed for separation and the product specification. They should already have been minimised as far as possible at concept and FEED stages. The routes must take into account all the different fire scenarios. The structural design must provide for rapid egress and escape of personnel from the process areas to sea or to the TR. reducing inspection or protection against long-term structural degradation. Process items exposed to severe fires (defined as confined pool fires or fully engulfing jet fires) should be designed and provided with protection in accordance with the Energy Institute’s “Guidelines for the design and protection of pressure systems to withstand severe fires” [7. Feb 2006 Page 201 of 261 . An open design of platform with appropriately designed fire and blast walls to segregate process and drilling areas from safer areas with higher occupancy is preferred.com 7. blowdown and/or dump systems to remove hydrocarbon inventories to flare.3 Process systems Process engineers should seek to minimise inventories. Grated floors do not provide a barrier against jet fires or radiant heat. The times to structural failure and the consequences in the absence of protection should be investigated between the structural engineer and the safety engineer.2. or heating by fire could cause rapid structural failure.2. Wherever fire scenarios within enclosed modules are identified. Realistically.2 Structural design The fire scenarios for the installation will have been identified in the FEED study. Escape routes should be based on stairways not ladders. Some of the common fire-related issues for each discipline area are outlined below. The options considered and the basis for the provision (or lack of) of safety facilities should be documented as proof that ALARP principles have been maintained. Grated floors greatly reduce the pool fire risks and reduce explosion overpressures.fireandblast. 7. design decisions affecting safety have to be made by balancing the risks. 7. The effects on the structure of external. However they are limited by reservoir and export system characteristics.

Chemical data sheets should always be reviewed for potential contribution to platform fire risk. Any areas with a concentration of potential release points in close proximity to high inventory process plant require close scrutiny to see how the risks can be reduced through re-arrangement. The consequences of failure where rapid and severe heating is a significant risk should dictate the protection requirements. in the light of the fire scenarios. 10 m² x 20 m² x 40 m²). Pipe / valve support arrangements at high level also need to be considered for fire protection. Reservoir engineers as well as process engineers should consider how they have prepared for eventual sand production in their designs. pressure relief to a vent system or combined vent and blowdown system or an active containment system such as a High Integrity Pressure Protection System (HIPPS) may be used. 7. grating floors.com Research shows that fires fuelled by 2-phase releases are far harder to control than simple pool fires. bearing mind that relief systems are moderately passive and that HIPPS have to achieve suitably high integrity and reliability. An ignited release through a 17 mm hole in an oil system at 20 barg in a mainly enclosed module (but with some openings) of 8000 m3 (for example. A balance has always to be struck between minimising sources of release and allowing safe isolation and access for intrusive maintenance.4] would produce a major fire with external flaming and smoke sufficient to overwhelm the installation.5. Indeed. Areas susceptible to vibration or sand erosion should be similarly considered. There is some evidence that in the presence of general area coverage (of at least 12 l min-1 m2 with medium velocity nozzles) the transition point pressure could be raised to around 15 barg for oil and 10 barg for condensate.4 Process pipework Piping engineers can reduce risks on an installation by: • • Locating key isolation. etc. use of high integrity flanges. pressure relief and blowdown valves away from fire effects or else adequately protecting them. is key. Production chemicals can cause leaks and fires as well as adverse health effects during handling. [7. this transition point occurs at around 7 barg for oil and 4 barg for condensate. Sand production frequently increases as reservoirs become more depleted. modelling 2-phase releases is not a precise science and the output from proprietary codes should be managed with great care. shielding. but the designer needs to examine the fail-safe mechanism (with input from the instrument engineers) to ensure they are truly fail-safe under all fire scenarios. This information should be documented within performance standards for the equipment. Where valves are quick acting and fail-safe. use of integral block and bleed valves. Typically. The designers of blowdown systems must recognise that the biggest hazards are the liquid inventories which sustain high release pressures for more than 5 or 10 minutes. The choice of system should be based on the hazards and excursion types expected and the vulnerability of the systems at risk. Feb 2006 . but the research is currently inadequate to develop proper design methodologies. protection may not be necessary. Wherever possible. Duplication of solenoids or steel enclosures for control cabinets may be necessary to achieve the required reliability within the heat-up timeframe. Many large releases have been caused by sand erosion. Identifying the transition point at which spray releases change to liquid releases (resulting in simple pool fires as opposed to pressurised oilspray fires) and designing the blow-down system accordingly.fireandblast. Protection options should be based on a clear understanding of the fire effects. systems should be designed to contain overpressure caused by process excursions.2. Where this cannot be done. This has little to do with existing codes which require pressure reduction to half design pressure or 7 barg within 15 minutes. Page 202 of 261 • • • 152-RP-48 Rev 02.

serious mechanical failures of rotating equipment.2. The layout should take into account the possibility of sudden mechanical failure and smoke generation and locate enclosures where such events are less likely to escalate to process fires. Design should minimise inventory in the system and minimise routes through process areas or areas of high mechanical damage risk. for example.6] as appropriate. 7.5] or 61511 [7. or managing the heat build-up by altering the module openings.6 Fuel gas and lubrication lines Power generation systems fuelled by conditioned process gas or diesel can be a source of both fuel releases and ignition. Setting realistic performance standards for safety critical instruments or systems is usually a re-iterative process. chaired by a practical engineer with experience of such assessments. The SIL assessment should be a multidiscipline activity.5. Early intervention allows the situation to be brought back under control. the consequences of failure are considered and maintenance/testing frequencies established. do not present jet or pool fire hazards to less-obvious targets. leading to projectiles and serious fires are rare. ignite releases or could occur as a result of fires. small bore tappings etc. • • • 7. The system design should make system shut down as soon as it deviates from its safe operating envelope. requiring input from process mechanical. given some air ingress. Early automatic electrical isolation on overload is usually sufficient to prevent development of serious cable fires and subsequent escalation. Provided proper maintenance and condition monitoring takes place. piping and vessel connections. The consequences of rapid heating causing simultaneous failure of all mid to high level instrumentation in modules which could suffer from prolonged engulfment should be considered.7 Power generation and electrical systems Existing standards of protection against the occurrence of electrical fires on offshore installations have proved adequate over time. can be severe. The safety integrity level (SIL) requirement of safety critical instrument or systems must be determined.com • Ensuring that failures emanating from piping runs. This fatigue damage and subsequent failure can occur very rapidly.2. Feb 2006 Page 203 of 261 . Provision for rapid isolation and/or disposal of fuel inventory is required. better redundancy. 152-RP-48 Rev 02.2. Good SIL assessments often help to reduce un-necessary instrumentation and should be carried out in accordance with the BS EN 61508 [7. Where this will lead to catastrophic or extreme events the design needs scrutiny to ensure risks are ALARP either through more rapid. safety and instrument disciplines. As part of this process. failsafe design. nonprocess flammable inventories etc. Lube-oil or diesel fire produce smoke which migrates to other areas.5. Sufficient time for discussion must be included in project schedules.5 Instrumentation and control • • • Instrumentation is a common leak source and should be minimised where possible Design of safety critical control systems needs to be checked for common mode failure problems which cause releases. pipe flange joints in line with safety critical control panels or utility systems.5. Escalated fires inside any enclosures. Instrument tappings can be prone to fatigue failure in the presence of pipework vibration and unsupported instrument loads. 7.fireandblast. Fuel gas lines should be designed to tolerate failures at the HP/LP interfaces in the system. higher rate water.

for example by gas dispersion modelling. Feb 2006 Page 204 of 261 . by virtue of their voting arrangements. UPS batteries power communications and essential shutdown/process/F&G data. Detailed design should minimise the risk of hydrocarbon releases coming into contact with uncertified electrical equipment. During a fire event.com Electrical equipment can provide a source of ignition in the event of a process hydrocarbon release. To provide the response teams and operating teams with adequate information to plan responses and ultimately to investigate safely the pre-cursors to the accident are extremely valuable. The location of personnel access routes and especially escape routes (to identify potential impairment). emergency response and evacuation timescales. ventilation air intakes of equipment enclosures. shedding nonessential loads at each stage. the operating teams should be able to start to piece together what the fire or gas event is doing. The gas or vapour composition.2. They provide information on the location of the gas cloud or fire and then raise an appropriate level of emergency alarm to the operating teams and executive action where required. flammable gas detectors should be located throughout the process areas and locations such as: • • • Open process areas. and that they detect the events postulated for the installation and act as a coherent component of an overall fire hazard 152-RP-48 Rev 02.5. It is important that the value of gas detection remaining functional following an incident is realised in the design and the ER arrangements. Batteries can only supply power for a limited time. Open design of process modules allows migration of large gas releases. In a major fire event. Location of non-certified electrical equipment in open deck areas should be either avoided or adequately justified. Design must be compatible with the fire. Access for maintenance and calibration of the detectors (so that they retain their performance standard). The aim of the detection systems should be considered carefully.8 Fire and gas detection Fire & Gas detection systems monitor and provide early warning of fires and flammable or toxic gas releases on the installation. Best practice is to locate uncertified electrical equipment inside enclosed areas which contain no process plant and to which the air supply can be shut off if gas is detected at the inlets. The location and redundancy arrangements need to be designed in full cognisance of the fire scenarios and how they are influenced by interaction with the weather. Generally. Potential gas or vapour cloud size. main power generation usually switches over to emergency arrangements. and Any enclosed/semi-enclosed space where gas may accumulate. Often initial emergency power is from diesel and then ultimately by battery power. The effect of power loss on the operation of all safety critical items should be reviewed early in detailed design.fireandblast. Plus the location of the gas detectors should take into account: • • • • • Leakage sources within the area and areas for potential gas accumulation. Non-hazardous area HVAC air intakes. plus life support and evacuation systems. The alarms should also indicate whether the event is confirmed by other detectors. combined with detector location identification. 7. temperature (on release) and density. The detectors are required to detect the presence of fire or gas as rapidly as possible. Power for each fire pump is usually independently supplied.

2. Feb 2006 Page 205 of 261 . Specifically: • • • • Never mix separated process water and drains in one caisson. insulation or fire retardant coatings and will be used to protect walls. 7. will also have monitors and hydrants to provide adequate coverage. Never allow process hydrocarbons into open drain systems. decks and structural members. there are also fibre optic laser devises available that are calibration free and non-energetic. total flood gaseous or water mist extinguishing systems can be be used. duration. Nevertheless. There have been many fatalities and near misses due to hydrocarbon ingress to safe areas via drains. Refer to Section 7. Some areas. • • a) HAZOP of drain systems is essential on large. the network can be supplemented by foam-concentrate systems (tanks and pumps feeding a foam-concentrate distribution network). The traditional protection method for accommodation units was to supply sprinkler systems. In addition. where appropriate.5. 152-RP-48 Rev 02.3.2. 7.2. however investigations have shown that there can be significant smoke generation without much heat in small smouldering fires of nominally domestic material. in line with onshore hotel practice. that the maintenance load of the safety equipment added to the risk to which the crew were exposed. notably helidecks. hydrants. such as control rooms. They should be used to protect against defined credible fire hazards that are capable of causing failure. where evacuation in the event escalation can be implemented very rapidly or as has been found in the UK Southern North Sea on NUIs.9 Fire protection (active and passive) In most major fire accident hazards. Water seals in drain systems are unreliable protection devices. and should take into account the fire size.10 Drains The drain system design should be carefully checked. Deluge operation must be taken into account in drain system design. Current acoustic detection equipment can be shielded against turbine. Newer technology applications such as acoustic gas detectors are available and these will detect leaks regardless of whether ventilation systems or open modules disperse the leaked material. the active fire protection system primarily relies on automatic and remotely activated fire protection systems.2 for further details. integrated platforms. An alternative strategy has been to improve the sensitivity of smoke detectors and enforce a “no smoking” policy within the accommodation. Manual fire fighting facilities are only relied upon in circumstances where the fire hazard is readily controllable. manual fire fighting facilities (e.com management strategy. hose reels and fire extinguishers) are often provided in all areas to permit rapid intervention on small fires or to support the rescue of injured or trapped personnel. Use of process pressure by operators to ‘blow down’ liquids to the closed drains system should be forbidden unless the system is specifically designed for this practice. Passive protection measures will often be used in critical areas where the assumed 100 % reliability of PFP is required. An illustration of how this approach supports safety is in the increasing use of improved smoke detection in accommodation areas. The passive fire protection arrangements (PFP) will take the form of structural barriers.g.fireandblast. compressor and air tool sourced ultra-sonic noise. Accommodation and sewage drains should be independent from any other drains.5. location and intensity. Fixed active fire protection systems are based on firewater pumps feeding a firewater distribution network. In addition. thus implementing a preventative strategy. The potential for injuries arising from smoke inhalation is significant.

punch lists etc are used to ensure all items are finished. ventilation and air conditioning (HVAC) penetrations. access to and maintenance of dampers should be considered very carefully.2. ducts. cables. For heating. 7. It should be noted that with such functions that the HVAC systems will be designated as Safety Critical Elements: • • Locate HVAC intakes optimally with respect to gas releases and fire scenarios. Offshore supervisors are under considerable time pressures offshore. valve installation etc) are competent and properly supervised. It is thus important during commissioning to: • • • • Monitor construction for on-site changes to design.fireandblast. Use checklists. The continued operation of the HVAC system may be required to be safety critical (for example. If used. etc. Ensure installation personnel have easy access to the design engineers so they can check out any reservations/problems they have during installation/commission.7 Operational phase Despite all the money that is spent during the design and construction of offshore facilities. Some may have potential for negating designed-in safety features. The duties of extraction systems from enclosed hazardous modules should be carefully considered. experience has shown that HVAC dampers are often difficult to access and may suffer from reduced reliability as they age. Deciding on the optimal ways to protect against gas ingress. It Page 206 of 261 152-RP-48 Rev 02. or ductwork should be of the same fire integrity as the boundary through which any ductwork passes. supervisors. the transfer of key fire-safety information from the design team to frontline offshore staff (OIM. • • • 7.11 HVAC HVAC has a key function in dispersing and controlling gas and vapour releases. Feb 2006 .6 Construction/commissioning phases During construction many minor alterations take place. they may be required to effect extraction of gases or hydrocarbon vapours and their eventual exit point should not contribute further to any escalation.com b) Drains capacities must take account of the vessel inventories in their specific areas and effects of bund systems. for example..2. for a control room within a process module following a gas release).2. Ensure that personnel installing safety systems (PFP application. Penetrations between such areas should be kept to a minimum and any penetrations for piping. This should be separately and adequately budgeted for at the outset of the project: • Operational and maintenance staff and contractors based offshore will take over the operation and maintenance of the safety systems. dampers where provided. emergency response personnel) is often neglected. preventing gas clouds from coming into contact with ignition sources or diluting toxic releases such that they pose a lesser hazard to personnel. There are key design features that enable the HVAC systems to achieve these roles. However. by generating positive pressurisation in “safe” areas or sealing the areas via the use of HVAC dampers. Supervisors need to be given an overview of the fire scenarios and told about the design intent of the safety systems they inherit. Suitable safety measures to protect the system and ensure its continued function and survivability will be required.5. 7. some of these are listed below. should be adequately sealed. tested and properly handed over to operations.

or loss or records are the most difficult to control and track. The fire and explosion scenarios and the escalation timeframes must be captured and incorporated into the platform-specific emergency response plans.1 Introduction Although every effort may be made to minimise topsides inventories and likelihood of leaks. the period for which it may persist.3 Best practice for fire protection systems 7. by providing new personnel with the same (or better) level of training as the original personnel.com is not reasonable to expect them to absorb this information from the risk assessment documents and the Safety Case is unlikely to provide the level of detail required. Maintenance and testing of SCEs must be adequate to prevent degradation of the installed systems. Some changes can be properly planned as they are regular and predictable. The “soft” changes such as personnel changes with subsequent loss of experience. The quality will depend directly on the quality of the engineering input to these exercises. the use of passive protection is preferred over active protection. change-outs of OIMs and supervisors are frequent and it easy to track and enforce the maintenance of skill levels (if not knowledge levels). Thus fire protection systems need to be provided for the benefit of personnel. • 7. the most appropriate combination of active and passive fire systems to achieve the necessary degree of protection can be considered. The impact of degradation may not be obvious without the above training. These measures are discussed further in Section 7. 7.8 Plant modifications Equipment. Scenariobased. 152-RP-48 Rev 02. and its interaction with the safety of personnel and the preservation of the asset is understood. platform-specific emergency response exercises should be carried out periodically throughout field life. This is a very different approach from the code-driven approach where water deluge requirements were set for different parts of the installation. The changes may be significant such as a substantial change of inventory. Feb 2006 Page 207 of 261 . The design philosophy for fire protection systems has changed over the last decade and a half from being code-based to scenario-based. The design of a fire protection system for any area of the installation must now be shown to be appropriate for the potential fire loads and resultant consequences. On a typical platform there may be several different active protection systems (including manual fire fighting equipment) plus different types of passive protection. Design must start with understanding the type of fire. Generally. plus protection of the asset and the reputation of the company.fireandblast. Management practices may impact a system in ways that will only become evident after some considerable time unless they are specifically reviewed with respect to influence on fire hazards. This ‘one size fits all’ codebased approach is no longer acceptable. there is always some level of hydrocarbon fire risk left. times to structural failure and effects on escape and evacuation of personnel. or they may be a revision to maintenance schedules that potentially reduces the reliability of detection or protection systems. Once the fire.2.3. • • Without the above knowledge there is potential for work permit approvals or on-site risk assessments to miss important issues. due to its inherent reliability. the time-line for all the potential fire escalation events.3.2. plant and personnel changes should be monitored and their impacts on fire hazard management assessed.

Cooling and control of pool fires through suppression of fuel vaporisation 3. Control/extinguish fire by cooling oil pool and putting layer of AFFF on pool surface. Table 7-1 Fire types and common methods of protection Type of fire Jet fire impinging on process vessel Pressurised liquid spray fire in partially enclosed module Pool fire in open process module with solid floor Spray fire across escape route Gas jet fire in vicinity of stairwell High pressure jet fire in export module Type of Protection PFP cladding on vessel PFP cladding on roof support beams plus high rate deluge (24 l min-1 m-2) application to module.3.2. Cooling of the high hot zone through interaction with the combustion process These approaches require totally different design philosophies and one “catch-all’ design for deluge systems cannot achieve them all.2. due consideration needs also to be made for any deflection of flame by the firewall. plus the movement of the smoke and hot gases that accompany the flame. Reduce smoke plus wash spill to deluge drains Protect people escaping to TR from spray-fire and radiant heat effects Reduce radiant heat on stairs Delay escalation to riser fire until after platform evacuation completed Firewall (or escape tunnel on F(P)SO) Mesh screens on stairwell PFP on export ESDV plus all sections of downstream export pipework in module The table demonstrates how the protection has to be specific to the requirements of a number of differing fire scenarios.3. Feb 2006 Page 208 of 261 .2 Passive systems 7. They should be designed to a specific fire rating compatible with the fire scenario for which they offer protection. Penetrations and doors must be designed to the same rating as the firewall itself. Products of combustion do not disappear when they encounter a firewall but build up or migrate. Recent research on deluge systems has emphasised the importance of this approach. 152-RP-48 Rev 02.3. Wherever a firewall is placed.2. Cooling of exposed process and safety equipment 2. 7.1 General This section discusses some design issues associated with particular applications of passive and active fire protection. should be indicated on the appropriate drawings The design basis must be clearly recorded for future reference– other wise justification of worthwhile future changes becomes difficult.1 Firewalls Design of firewalls is well understood.com Examples of the types of protection system in common use are given in the table below. 7. Low rate deluge (10 l min-1 m-2) with AFFF Aim of Protection Protect vessel against BLEVE until blowdown complete Delay structural failure of roof beams until platform evacuated. All firewall ratings and the extent of the firewall whether jet fire rated or only A0 rated.2. Potentially there are 3 main roles for deluge: 1.2 Fire protection design 7. Suppress fire and cool process and safety equipment.fireandblast. Cool process equipment to prevent further leaks.3.

Likewise retrofitting of PFP offshore e. type-testing of the selected PFP system should always be specified. Attachment systems for the PFP must be given detailed consideration in view of the cycles of expansion.5. and could be sustained for more than a one or two minutes.2. contraction and flexure experienced by steelwork in offshore applications. TR/ accommodation and control room wall are usually fire-rated. particularly of the early intumescent epoxy type has been found to cause rapid degradation of the material. On NUI platforms where TRs are often very small. especially in meeting the requirements of the manufacturers specification for installing the PFP. This strategy is simple and effective when designed in at concept stage. Modern methods of attachment are much improved however. Whatever the design basis.fireandblast. 7.g. Derivation of fire loadings and response of steelwork to fire attack is covered in Sections 5 and 6 respectively. Modern trends for smaller topsides that can be fabricated onshore and installed in one heavy lift make this a much more viable option. provided the flame is not actually impinging on the route. 152-RP-48 Rev 02. the safety engineer and the designer of the passive fire protection system. the TR may be located behind a firewall segregating the open process areas from the enclosed units such as the control/electrical room and TR/day room. Wherever possible. Smoke and radiant heat effects around the edges of the wall and the effect on people leaving the TR to evacuate the installation must be considered in the design.3. (based on the jet fire test criteria proposed in ISO 13702) specified as: Type of application / Critical temperature rise (ºC) / Type of fire / Period of resistance (minutes). but have their place for gas jet scenarios provided good diversity of escape routes is available. A jet fire rating equivalent to an A or H rating has been proposed in the latest draft version of the ISO.2. 7. PFP should be installed onshore.2 Mesh screens These reduce heat radiation on escape routes by approximately 50 %. Where jet fire impingement is likely.2. The rating must be defined by the potential fire exposure. both parts need to retain their integrity for the life of the installation.3 PFP on structures and structural supports Before design starts it is important to understand the temperatures at which structural failure will start and the consequences as the fire continues and heat increases.2. PFP systems are now available which are resistant to jet fire attack.com Firewalls are often provided for area segregation.2. the redundancy in the structure and the consequences of failure during a fire should be explored in discussions between the structural or marine engineers. Discussions of firewalls and other PFP can be found in Sections 3. externally to the underside of TRs on small gas platforms has proved both costly and temporary. Blast walls with superimposed PFP must be assessed for the integrity of the PFP following deflections of the wall during an explosion. Feb 2006 Page 209 of 261 .5. On many installations combined fire and blast rated walls divide the process areas from the wellbay and the wellbay from the utilities and accommodation areas giving multi-barrier protection across the platform from the high hazard process end to the low hazard accommodation end. Disintegration and separation of heavy PFP cladding materials from walls or other structural supports is still causing problems on existing older installations. Firewalls are usually composite items consisting of a structural part and an insulating part. under controlled conditions. They are cheaper than firewalls and offer less protection.1 and 3. They are frequently used to protect open stairways. Best practice requires close attention to detail. A Jet fire test standard has been developed in the last few years based on industry research and at time of writing is becoming available as a draft ISO standard (22899-1).3. High pressure gas jet fire impingement on PFP. It needs to be large enough to provide real protection.

This can be catered for by providing inspection hatches. condensation may accumulate under the insulation. Consideration of protection for riser barrier valves and other emergency isolation valves is covered below in the sections on PFP Enclosures and PFP Wrappings.4 PFP on process vessels PFP is the preferred method of protecting vessels from heating up and failing when exposed to fire.2. Leaks from vessels caused by heat distortion are often capable of adding large inventories to existing fires and if the fire exposure is severe. The main concern with PFP on vessels is that it makes NDT of the vessel difficult. Water tightness of risers is a key issue when the PFP goes down to the “splash zone”. 152-RP-48 Rev 02. As noted above.2. the existing API codes 520 [7. it must be emphasised that PFP integrity must be sufficient to prevent the ingress of water and subsequent corrosion under the insulation and that the application of inspection or access points must not degrade the “water-tightness” of the PFP. the integrity of “water-tightness” of PFP is a key issue and loss of water-tight integrity has been found to generate problems of accelerated corrosion on ageing installations. Given that ongoing corrosion monitoring is an essential feature of most asset integrity programmes this has been seen as a major drawback. 7. thus reducing the availability of the protection. Research in the last few years has shown that for vessels subject to severe fire impingement. 7.2. Vessels protected in accordance with these codes have burst resulting in a BLEVE within 5 minutes following attack by jet flame or engulfment by confined pool fire. Where the primary concern is BLEVE protection. recent ideas are that cladding may not need to be provided to the base of the vessel. unprotected vessels could BLEVE with devastating consequences.9] which was published in March 2003.3. and given that it is the gas space of the vessel that needs protection rather than the liquid space. However.5 of this document.7] and 521 [7. This is because the liquid inside the vessel provides protection against rapid heat-up of the vessel walls.3. to obtain the BLEVE protection. Where fire or explosion in these areas is catastrophic the possibility of occurrence should be designed out. Inspection points will be required to monitor such systems. Removable PFP is sometimes used. Also it can become custom and practice to leave large parts of the vessel bare of cladding for long periods for ease of inspection (especially where the vessel is already known to suffer corrosion problems). Water cooling is possible but not as reliable and requires large amounts of water.5 PFP coating of risers Additional considerations for the application of PFP are discussed in Section 3.fireandblast.com Floating structures have a different structural design basis (widespread use of integrated. issues of water ingress are added to potential damage by wave action. All PFP applications must take account of the need for periodic inspection of key parts of the underlying structure. Feb 2006 Page 210 of 261 . but this is susceptible to water ingress under the cladding and can lead to external corrosion. For this reason pipework containing process hydrocarbons should be avoided inside support columns or pontoons unless they can withstand the predicted fires/explosion overpressures. New guidance has been produced setting out the design considerations for process vessels and their pressure relief systems for BLEVE protection. There is an added issue with piping and vessels where there is the possibility of temperature cycling.2. For design against BLEVE events engineers should design in accordance with the Energy Institute Guidance Document “Guidelines for the design and protection of pressure systems to withstand severe fires” [7. stressed skin designs) to that for a fixed steel jacket with modular topsides construction. This is subject to careful analysis and understanding of liquid levels under all process conditions. rather than reliance placed on protection systems.8] are inadequate for specification of the pressure relief arrangements to prevent BLEVE.

fireandblast. The design also has to take into account that after repair/maintenance the unit will have to be restored to its original design specification. The paint or coating system under the lagging should nonetheless be to a high specification. and can be removed to allow inspection. The potential for such systems to promote external corrosion of the protected item remains but the extent of the corrosion can be visually monitored when the wrapping is removed for maintenance etc. In designing any PFP system. Designers must also ensure that bunds provided primarily for environmental purposes do not potentially concentrate a pool fire around an area of plant. they must be re-instated after every disturbance for maintenance/repair/inspection by personnel who have been suitably trained for the task.g. exposing it to a higher level of risk. Bunding is used to contain oil pool fires which would otherwise spread to other areas and/or prevent any AFFF in the deluge system from working effectively.2.3.2.2. by comparison with box-type enclosures. Thus. Where drains are critical for fire hazard management. They have to be designed to resist explosion overpressures for the particular area (and on some platforms potential for wave-slam has also to be considered). 7. It should be noted that offshore inspections indicate that they are easily damaged and repeated removal and re-wrapping tends to damage their fastenings but that their use is successful if trouble is taken to ensure proper fixing and re-fixing. or rapidly blown-down. Design considerations for enclosures are: • • • • Because they usually have to be have to be custom designed to suit the duty. The key issue is to ensure that the wrap is securely and properly fastened. Drain design must take into account the interaction and disposal of both the fuel and the deluge release. Most importantly. With respect to enclosures. In-situ installation may be complicated by access problems. before access problems are created.7 PFP wrapping / blankets In recent years soft wrapping jackets for protection of valves or critical piping sections have become popular as. Offshore drains are susceptible to blockage and the design should aim to minimise this. maintenance and testing so that their performance standard is always met.2. 7.3 Bunding and draining for liquid fires Bunding and draining is also considered a form of passive fire protection. the size and the location. 5 or 10 minutes. 152-RP-48 Rev 02. Such systems tend to be rated for short-term protection e. they must be designed for easy inspection. They have to be removable or otherwise designed to allow entry for essential repair and maintenance.3. it is no use protecting a specific item of safety-related equipment if escalation will then take place through failure of the pipework on either side of the fire protection. The costs of proper reinstatement offshore throughout field life need to be considered from the outset of design.com 7. Feb 2006 Page 211 of 261 . they are relatively cheap. must be taken. otherwise it may come off or be damaged in an explosion and hence not be able to provide the required fire protection during any subsequent escalation.6 PFP enclosures for safety critical items An alternative method of protection for safety critical items such as ESD valves and their actuators is installation of a PFP enclosure around the item.2. Design of protection for just ‘safety critical’ items in isolation can lead to inefficient safety spends. they can give useful protection where inventories are small. an holistic view of the whole module. although for new build projects this can be done early.3. costs can be high. easy to design and install.

structural supports and process equipment (especially the tops of process vessel which could suffer a BLEVE) located at high levels in most process modules. Feb 2006 Page 212 of 261 . not just the area designation. 152-RP-48 Rev 02. Firewater tests carried out at Spadeadam in Cumbria in the late-1990s identified that deluge rates required for fire control depend on the type of fire.5 barg and should have cone angles between 60° and 125°. isolation and blowdown coupled with PFP of key valves. but does not contribute to cooling of heatexposed plant The objective is to prevent fires on one wellhead. Horizontal cylindrical storage vessels should be protected by means of open medium velocity sprayers.3.com 7. not less than 6 mm bore.4. open.10] laid out water application rates for different area of an installation. 100 l min-1 m-2 Well head fires Gas-only jet fires Directed deluge on tanks impacted by flashing liquid propane jet fires Reference should also be made to Section 5. are summarised in the following table. very high rate deluge) AFFF can help control residual hydrocarbon pool fires. vessels with BLEVE potential) should be protected by other means (PFP or targeted. deluge may be of limited benefit.2.4 and 3. Addition of AFFF is beneficial Key items (e.4 Active systems 7. The deluge application rates recommended in view of the findings of both the above research and earlier Norwegian research into the characteristics of confined hydrocarbon fires. For fires giving free flame volumes in the order of 25 % to 35 % of module volume. Best practice is now to design for the specific fire scenarios in the area to be protected. Fire Office’s Committee’s “Tentative rules for medium and high velocity water spray systems” [7.11] Hydrocarbon jet or spray fires (impingement) Jet or spray fires (radiant heat exposure) General area deluge not suitable for protection of specific items against impinging jet fires 20 l min-1 m-2 general area cooling for plant exposed to radiant heat from jet fire in vicinity 400 l min-1 m-2 per wellhead Where gas jet is large in comparison with size of module or installation. riser sections. Money here may be better spent on rapid detection. operating at pressures between 1. This has implications for safety systems. there will be widespread and simultaneous heat input to the top half of the module.2 for further discussion on the issues of deluge rates with respect to different fire types. normally unmanned gas platforms. Table 7-2 Deluge application rates Hydrocarbon Fire Type Oil Pool Fires Deluge Application Rate 10 l min-1 m-2 Additional Comments Suitable provided the cause of the pool fire is not a two-phase (spray) release.3.2.fireandblast.1 Firewater system design In the 1980’s and early 1990’s firewater system design was code-based and the now-repealed SI 611 [7. affecting adjacent wellheads This is often the case for small.g. riser ESDVs.

to mitigate against the remaining scenarios. • • • Safety control components and systems should not be vulnerable to damage from heat build-up effects while they are in operation. the heat imparted to process vessels/pipework by an impinging sonic gas jet flame was found to be little reduced by general area coverage of 24 l min-1 m-2. it has been found that a deluge rate of 12 l min-1 m-2 for a pressurised jet fire had little impact on hydrocarbon gas jet or spray fires. however. The design of deluge systems should recognise and mitigate the consequences of these scenarios. with heat fluxes in excess of 350 kW m-2. o o o Provide systems that deliver the necessary deluge rates as fast as possible. suppressed the flaming considerably and changed the smoke from dense black to a grey mixture of steam and entrained carbon particles.fireandblast. thus potentially reducing the fire protection to the source module. The design of the deluge system and the structural protection needs to consider these escalation scenarios. designers should consider some of the following issues in their design requirements. It is not clear whether these benefits arose because the water droplets at the higher deluge rate were smaller. The layer of hot gases can reach 1000 ºC within a few minutes if the fire is sustained for that period. it is the liquid inventories that are capable of producing and sustaining these high flame volumes after ESD and blowdown. Temperatures close to the flame can be around 1350 °C. Provide mechanical support systems that will not fail before the deluge brings the fire under control. In the same reports. with the exception of riser inventories. Once the flame volume in the module exceeds around 25 % of the module volume. sustained. Consider installing fine spray deluge specifically to cool the top few metres of ceiling space. that is. or because the water rate doubled. in conjunction with 24 l min-1 m-22 general area coverage appeared to halt the rate of rise of the vessel surface. Specific deluge at 10 l min-1 m-2 directed to the vessel using a conventional array of nozzles. of partially burnt gases a few metres deep at ceiling level from releases of a relatively small size (with a burn rate from around 1 to 3 kg s-1) in enclosed modules. This occurs for any hydrocarbon fire whether all gas or all liquid. However non-pressurised liquid releases burning as pool fires are much easier to control by deluge than fires fuelled by 2-phase pressurised releases. • Where enclosed modules are desirable for other reasons or otherwise unavoidable. the process should be designed for isolation and blowdown to prevent or minimise ongoing severe fires. The overall platform process design should remove the potential for large.com Hydrocarbon fires generate a very hot layer. but did reduce the heat fluxes at ceiling levels from around 300 kW m-2 to 200 kW m-2. The risk of structural failure at ceiling levels should be taken into account. In general. pressurised hydrocarbon fires. may be expensive in view of the need to control the consequences of such fires. It was not possible to confirm whether this reduction was sufficient to prevent eventual failure. 152-RP-48 Rev 02. Tests have shown that dry deluge systems can be destroyed by the heat prior to their operation. This effect exposes other areas to the fire risk and can also set off the other areas’ deluge systems. When the flame volume reaches 100 % most of the combustion will be taking place beyond the confines of the module as the partially combusted hot gases reach a source of oxygen. This rate did however reduce the rate of heat input from an impinging simulated live crude pressurised spray release. whether partially or fully ventilated. it is very likely that flame and smoke will occur beyond the confines of the module such as at the locations of any openings in the module walls. In unpublished reports of tests. Feb 2006 Page 213 of 261 . the combined design of deluge and PFP systems. Increasing the deluge rate to 24 l min-1 m-2 reduced peak ceiling fluxes from 350 to 60 kW m-2.

Several isolation valves are provided on the ring main.3.3.5. Feb 2006 Page 214 of 261 . regardless of the fact they spend only a fraction of their life in actual operation. Ring main isolation valves may be locally or remotely operated. This enables the platform to continue operating when one pump is out for maintenance. operating characteristics.12] (10 l min-1 m-2) provided effective heat exposure protection.3. Some operators also provide secondary ring main riser pipework either to critical areas or where the primary riser supply to an area is vulnerable to fire/explosion damage. The advantage of this fairly standard ring main type of design is that if one area becomes damaged.2. cost. ‘Cross-over’ valves allowing service water to be diverted for fire-fighting use can be useful. terminating below wave action depth. especially where deluge is activated on gas detection. specific deluge coverage as per NFPA 15 [7.2 Firewater ring mains On most platforms the fire pumps all discharge (at different places) into a firewater ring main. Older pumps tend to be traditional diesel fire-pumps. maintainability. taking suction from pipes run inside firewater caissons. but with some reservations concerning the actual water volume reaching the flaming surface. hose reels and sprinkler or water curtain systems.com A general area deluge of 12 l min-1 m-2 should be able to control the burning of pool fires. They are started-up and discharged to hydrants or overboard dump lines at regular intervals to prove their continued readiness for service.e. based on analysis of vulnerability to fire scenarios. they exhibit a gradual drop-off in peak delivery capability) over the years. 152-RP-48 Rev 02.fireandblast. unpublished reports of tests have indicated that for vessels exposed to pool fires. Parts that may fail early should be identified in advance and spares held or ensured readily available. Again. the affected section of the ring main can be quickly isolated and supply continued through the undamaged sections. are possible.3. Start-up reliability is crucial and can be a deciding factor in determining the number of pumps in the systems.5. flexibility and system start-up reliability. easily maintained and accessible for operation in an emergency.pressure. Pipework then rises off the top of the ring main to distribute water to the deluge sets (which supply specific modules). refer back to Section 5. A variety of alternative fire pump configurations (e. each capable of supplying the entire system needs. Materials of construction must be suitable for the marine operating environment and the life of the installation. 4 x 50 % pumps). (For more detailed discussion. On open.g. with appropriate safeguards against reverse flow and over. in safe locations. in order to reduce the possibility of a major accident event rendering the entire system inoperable.5 Component – specific design issues A brief discussion of design issues associated with key components of typical North Sea deluge systems is presented in the paragraphs below: 7. 7. Although design is always for automatic start-up. Fire pumps and their power units should be located diversely.1 Fire pumps Modern designs are based on an absolute minimum of 2 x 100 % fire-pumps.2. Experience shows that fire pumps slowly deteriorate (i. located in firewater caissons and powered by topsides dieselgenerator sets.2. The pumps need to be independently powered as the platform main power generation system is generally designed to shut down in serious fire and gas release situations.5. which runs around the perimeter of the installation at a low level.4.design installations. 7. back-up manual starting arrangements are generally required and should be tested regularly. but they must be clearly identified. hydrants. this must take into account the fact that more than one or two areas may be set off simultaneously. Modern pumps are usually electric submersible pumps. In this position advantage can be taken of the protection from fire and blast damage offered by main structural support beams.1).

thereby supplying water to the deluge pipework) initiates automatic start-up of the fire-pumps. Deluge valves need careful design and maintenance since their operation is complicated especially for valves which have AFFF proportioning as part of their function.5. This allows for override of the deluge valve should it fail to operate. and the reliability requirements for the system.3. but consideration must be given to treating the deadlegs in the systems. In smaller systems.2. flexibility and price advantages. Because firewater ring mains are usually large-bore and contain salt water they are not lagged or heat traced. Composite materials such as GRP or specially developed fireproof elastomers have also been used for firewater piping. Any leaks or pressure accumulator failures in later life will trigger off the deluge system in the affected section. 152-RP-48 Rev 02. As an added precaution. The smaller pipework rising off the ring main is usually lagged and heat traced. dry ring mains are often used as long as the time taken for fire water to reach deluge or monitor nozzles is acceptable. vulnerability to fire damage. fire detection activates a deluge valve. such as the wet riser pipe sections between the ring main and the deluge valves. To keep delays to a minimum. Designers choosing steel over Cunifer in the past for cost saving have passed the cost of replacing or maintaining such systems onto operational staff working on a diminishing budget ten or so years later. by a small pump supplied from the service water system. Feb 2006 Page 215 of 261 . some operators arrange their fire-pumps to directly supply different parts of the installation directly. many systems provide for a continuous slight circulation within the system by dumping a small flow back to sea.5. Design needs to focus on maintaining the air pressure for very long periods (i. Valve sets should not be located immediately outside the area they are designed to protect. To prevent pressure fluctuations in the system frequently starting and stopping the main firewater pumps. Corrosion inhibition can be used. the pressure is held at around 8 to 12 barg.3). the whole of field life). Linings or surface treatments for carbon steel ring-main pipework have been used with mixed success. very clearly labelled in large writing.fireandblast. Ring-main and riser pipework corrosion is a major issue. However in extreme winter conditions freezing is not unknown. These valves are usually air-activated either by loss of air when fusible links or bulbs are breached by fire.3. A manual operation lever. Choice of system has to be justified with respect to effectiveness for the specific fire-scenarios. Older platforms with carbon steel ring mains run the two-fold risk of wall thickness loss and build-up of corrosion products throughout the system.e. The use of dry ring mains does eliminate corrosion and freezing issues (see the next Section 7. The valve opens to feed water into the dry pipework that leads to the firewater nozzles. or if water is needed as a priority elsewhere on the installation. thus Cunifer is the usual material of choice for the wet parts of the system. • • Can they be properly installed.3 Deluge valves and dry pipework The deluge valves separate the wet part of the system from the dry pipe network that supplies the firewater nozzles. or when solenoids are activated by the fire and gas detection system to dump air. Deluge valves may be at the junction of the Cunifer and steel parts of the system. ring mains are filled with seawater and held at pressure ready for immediate use. Any significant drop in pressure. Key concerns for such alternative materials remain.2. so dissimilar metal corrosion protection must be designed in. maintained and repaired in-situ (some need specialist installation)? Will they melt in the event of serious fire attack. weight. These can possess significant corrosion.g. either before of after deluge water reaches the distribution pipework and nozzles? As an alternative to traditional ring-main design. caused by a demand on the firewater system (e. should be provided.com One of the most important considerations for an offshore firewater system is speed of initiation. Repair downtime on safety critical systems is likely to be expensive. 7.

The shock can cause damage to the small-bore end-piping in the system and its supports. the system can clog up but sometimes the regular flushing accelerates the rate of corrosion.5. Once water flow is established the pipework is provided with internal cooling. This is expensive and time consuming. generally speaking.2. powder deposits (in some drilling storage areas). hazardous areas of the platform bounded by firewalls. Platforms are now divided into ‘fire zones’. Some systems in current operation have to rely on regular flushing either with firewater or potable water in order to control build-up of corrosion products. The alternative is to attempt to manage the supply so 152-RP-48 Rev 02. each defined both by area and fire characteristic and not necessarily bounded by walls. open platform designs. Feb 2006 Page 216 of 261 . Where firewater in a number of different zones could be activated almost simultaneously the pumps need to able to meet that demand. a fundamental issue to address is how many different zones could be triggered by each different release or fire scenario.3. These bring benefits in terms of higher water application rates but also imply larger pumps and bigger supplies of expensive AFFF.fireandblast. A large module may require a few hundred such nozzles for adequate coverage.4 Reference areas The design of firewater systems in the 1980s and early 1990s was based on reference areas. Small bore dry Cunifer or GRP pipe (depending on the exact specification) may melt rapidly in a jet fire thus stainless steel or titanium alloys would be preferred. This is of concern for droplets under 0. Research has shown that for large fires severe heat build-up can occur within one or two minutes of ignition.com Hydraulic shock within the system can result either when main firewater pumps kick in. Many new designs are capable of getting water to the fire within 30 or 40 seconds of detection. Minimising the delay time is critical for 2 reasons: 1. Fire pumps were designed to supply only one or two reference areas plus the helideck in a fire situation. With open platform design. especially where the requirement was never envisaged or provided for. The time between detection and getting water to the region of the fire should be minimised. or when deluge valves suddenly open. Pneumatic dampers may need to be used. less susceptible to blockage. It is important to consider and quantify this problem as part of the design. A full hydraulic analysis of the system is necessary to ensure the necessary water distribution throughout the module will be achieved. NFPA 15 sets a target of 40 seconds for response time. both to ensure initial suitability (new systems) and continued compliance with the stated performance standards (existing systems) is mandatory under the UK North Sea legislation (PFEER). thus they require careful design attention. The grid of firewater nozzles covering a module or an area is designed to produce a specific range of water droplet sizes The nozzles generally used for deluge are high or medium velocity nozzles. Firewater pipework supports are also vulnerable to heat and may be unprotected by deluge application. The fire protection (or combination of protection systems) in each zone must be suitable for the fire characteristics. 7. and an important factor in more modern. scales etc. Periodic testing of active fire protection systems. without flushing. The smaller the droplet the more likely it is to be evaporated or blown away between emerging from the nozzle and reaching the fire. salts. The dry pipework and its pipe supports are mostly located high in the module and are vulnerable to high temperatures. With the move to more open platform design this approach is usually not appropriate. The pipe sizes may range from around 10” at pump discharge to 1” and 2” at the nozzles. 2. which were. Modern designs now tend to use larger ‘self-cleaning’ nozzles. The faster a fire is cooled the easier it is to bring under control and the chance of rapid heat (and smoke) build-up is reduced. The larger the droplet the less affected by wind and the more water provided to the fire for cooling.5 mm diameter. but the bigger the pump required. High velocity nozzles produce droplets over 1 mm diameter. Typically most reference areas were enclosed modules. Slowing down the opening of the valves is not a good idea if it means a delay in getting water through to the dry pipework.

3. The vendors of such equipment should be asked to provide evidence of reliability and maintainability for their systems and show they have a good track record in operation. A continuous screen of water is required.6 Area cooling and extinguishing systems 7. In open locations they are affected by wind. and. Foams. and may extinguish the fire altogether in some situations (e. and other types of foam.6. neither may be available. Their advantage is that they do not exacerbate explosion overpressure problems. especially in the quantities needed offshore. work by creating a layer on the surface of the burning hydrocarbon pool. The attenuation of heat radiation by general area deluge is noted from research work to be considerable.com that it targets the right place by remote manual operation of valves or inhibition of a second fire zone on activation of the first. but they have several disadvantages: • • • The delay in activation means they are of limited use for immediate ignition situations – but could be useful in delayed escape situations. Further reference should be made to Sections 5. AFFF. Proportioning equipment of various designs. There is limited research. for injecting foam at the right concentrations into the firewater supply.5. It is less effective for running pool fires. but water application rates for effective operation were found in tests to be high – in the region of 25 to 40 l min-1 m-2. Design of foam systems should take into account affect of high winds during application. Stored foam should be sampled and tested regularly. 7.2 and 5. Huge firewater demands can be more easily avoided with proper attention to: • • • process isolation and blowdown. On some platforms. layout of plant and escape routes. Feb 2006 Page 217 of 261 .4 for discussions on the use of water curtains.2.g. Foams are expensive. have proved unreliable in the past. This reduces the fire and smoke generation significantly.3.fireandblast. Reliance on local manual intervention to supplement the automatic fire system response has to be realistically evaluated and only used where it does not expose the person(s) operating the valve to danger from the fire/smoke.5 AFFF design considerations Addition of AFFF to firewater systems can bring great benefits where used for liquid pool fires. cutting off contact with the air. sometimes in combination with dry power application are important for fighting aviation fuel fires. passive protection of potential escalation points. Good design of storage facilities will avoid costly early degradation. 152-RP-48 Rev 02. Foam are injected either just downstream of fire pumps or at deluge valve locations or into the fire hoses directly at the hydrant.2. bunded fires).1 Water curtains Water curtains have been used as a solution to reducing heat exposure of people on escape routes. achieved by flat plates or a combination of flat plates and nozzles.2. However at the time of publication there are no design methods for calculating the personnel protection effect. or critical plant items. 7. Remote manual operation of valves in a fire situation is problematic since it requires accurate feedback on the fire development to allow for decision making plus the availability of a suitably trained emergency response and/or fire team. Application must be possible from at least opposite quadrants.3.

com 7. and they do not suffer from the same corrosion problems as steel-based systems. The prime example of this is provision of helideck firefighting equipment and personnel. The main change in provision of such equipment in recent years is that: • • Platforms are now occupied by much smaller workforces. A variety of water mist systems have been developed over the 3 to 5 years and are available on the market. These systems are based on heat-resistant rubber-type tubing that can be easily site. Manual hose facilities can also be useful in securing large un-ignited spills with an application of aspirated foam 7.3. 7..6. fire hose-reels and fire trolleys are still provided offshore for use by personnel in the event that someone discovers a small fire which can be safely bought under control by manual means.2. which could still be the case on some existing installations. Feb 2006 . with appropriate safeguards against asphyxiation. protection against explosions relies on a combination of forced ventilation. on drilling rigs to target water onto escape routes and well fires from a safe distance.2 Ceiling cooling Where there remains a possibility of heat build-up at the roof level within an enclosed or partially enclosed module. Platforms no long support large fire teams. Manual systems on newer installations should be provided only where a legitimate specific need has been identified (for example to cover temporary well test equipment on a top deck). This is in addition to the more traditional smoke detection systems in such areas. The mist evaporates. and rapid isolation of the gas supply 7. limited inventory conditions.6.4 Inerting and extinguishing systems Halon is no longer used for offshore inerting / extinguishing systems.3. and a team of trained and competent fire or emergency response personnel are available to operate the equipment.3. Hydrants and hoses or fixed monitors (often fitted with an automatic oscillating mechanism as well as manual control) are still provided where overhead deluge systems are not practical e.g.4).fireandblast. (see Section 3.6 Manual fire fighting equipment – hose reels.3. They work by injecting bursts of very fine water mist into the enclosure once fire has been detected. as a replacement. Many operators have removed the Halon previously provided in switch-rooms and control rooms and replaced it with a VESDA (very early smoke detection and alarm) system instead for better protection of personnel against electrical fires. A few installations have provided CO2 flood systems for extinguishing electrical fires. They generate fine water sprays which provide cooling through evaporation of the water droplets.2.3 Water mist design These systems are now widely used as the replacement for Halon protection of power generation or fire pump enclosure. trolleys and hand extinguishers Manual firefighting equipment such as fire extinguishers. reducing heat and rate of burning. the protection will be suitable for the specific scenario. or for protection of equipment on exposed upped decks where strong winds could prevent proper deluge coverage. new systems are becoming available specifically to reduce heat at high levels within the module.3.2. The steam generated also retards the combustion process. More recent practice is to keep personnel in a safe place away from the fire and leave the automatic systems to provide the all the necessary protection. They work in enclosed. Being flexible they will withstand considerable deflection without loss of function during an explosion event. 7.2. Page 218 of 261 152-RP-48 Rev 02. early detection of gas build-up. Teams were trained to run hoses from nearby hydrants to supplement the fixed automatic systems if necessary.6.laid and fixed to the structural beams.2.6.6.5 Manual fire fighting equipment – hydrants and monitors Previous legislation required hose stations to be provided in modules for use by fire teams. They do not offer protection against fuel gas explosions in gas turbine enclosures.

7. Information availability. Layout of man/machine interface. Clarity and consistency of instrumentation. reaching etc. Working environment. However.4 Human factors – man / machine interface 7. for example: • • • • • • • • The potential consequences of human failure. Organizational culture. Account needs to be taken of all the above in deciding the appropriate level of manual equipment to be provided. The presentation of information and the issuing of instructions or advice must be obviously prioritised and unambiguous. The long-term well-being of the human. Interest levels and boredom thresholds (leading to enthusiastic engagement to the task or potentially dangerous disengagement). The following areas will be reviewed: • • • • • • • Ergonomics. The designers of fire hazard management systems should optimise the allocation of system tasks and functions between humans and technology. Physical stress levels must be set at acceptable levels. Design to minimise fatigue. lifting. Information presentation. and Clarity of emergency procedures. Working conditions. The application of Human Factors techniques applied to planning for fire conditions will have a direct potential to save lives and reduce the probability of injury.1 Introduction This section describes the ways in which operators and maintenance personnel are able to implement and maintain the systems and practices put in place to manage fire hazards. for example for turning. The response of personnel to emergency conditions (following Emergency Preparedness and Emergency Response procedures) must be planned for in the context of the hazard. In all areas but especially where the performance of safety critical elements (managing a major hazard such as fire) is at stake. the feeling of “being of value and needed”. taking tasks away from personnel is not always the best solution as a number of considerations are involved. Oversupply of extinguishers etc places a significant burden on small offshore crews.4. Hot-work and intrusive maintenance work on some platforms is very infrequent. Feb 2006 Page 219 of 261 . it is essential to set operational tasks within the limits of human operators. 152-RP-48 Rev 02. especially at night.fireandblast. Organizational factors. The flexibility that the human can bring to the situation. Small fires are less likely to be found and dealt with by a passing member of the workforce.com • • • • Few installations run 24 hour operations.

3. 4. allocating them logically and then defining potential errors that may result from erroneous actions.) are discussed in more detail below. Tabular Task Analysis identifies the context in which important task steps take place and the aspects which may be improved.2. Hierarchical Task Analysis describes the relevant task or operation from its overall objective down to individual operations. Hierarchical Task Analysis (HTA) and Tabular Task Analysis (TTA) are the two variants of task analysis techniques that may be applied.com 7. Human error analysis. The first two describe means of identifying tasks. Traces.1 Overview Several different types of analyses may be used in order to identify and analyse scenarios leading to or arising from fires. Task analysis.4. and 2. which indicate to the operator that the task step has actually been performed and finalized successfully. The two specific Human Factors analysis techniques (items 1. criticality and potential improvements by: • • • Adding details to the scenario description.2 Task analyses Task analyses support the identification of error modes. Commonly applied techniques include. 7. Task analyses would be the premier technique to use to confirm that operational and maintenance tasks on fire hazard management tools and systems were achievable. Feb 2006 Page 220 of 261 . which indicates the effects of carrying out a task step. Fault tree analysis.2 Assessment techniques 7. which indicate to the operator that a task step can/should be initiated. Identifying aspects in relation to information. The TTA format concentrates on: • • • Cues.2. Specifying the context in which important actions (task steps) take place.4.4. The application of task analysis would confirm that the implementation of the emergency response plans could happen within the time frame of an escalating incident and it would identify preferred steps to be taken to intervene to assist the control of any escalation. 152-RP-48 Rev 02.fireandblast. The latter two assessment techniques are from normal risk analysis approaches and may be expanded to include human error and response. 2. Feedback. Event tree analysis. 1. control and co-ordination which contribute to performance shortfalls.

The application of the human error models would provide an understanding of the pressures on the maintenance team to “get the job done” and would assist the operating and emergency response teams to understand their role during a fire hazard emergency. 152-RP-48 Rev 02. The importance of documenting the decision process for ALARP demonstration. escalation times and the role of protective systems (including their failure to work). their causes and consequences. That Emergency response drills/exercises should be based on the platform specific fire scenarios.4. escalation mechanisms. Feb 2006 Page 221 of 261 .3 Awareness and competence For fire hazard management to be successful. specific hardware failures).com 7.4. Possible abnormal system states are identified. the following key personnel have some essential requirements with respect to fire hazard management: Project managers need to understand: • • • The iterative nature of the fire-safety design process. Senior management need to know: • • Their legal obligations and how to discharge these duties. mistakes and violations model. ‘too late’. fire issues. ‘too early’.fireandblast. The consequences of erroneous actions. The Action Error Mode Analysis technique resembles the Human HAZOP and identifies human errors for each task to be analysed. Human error analysis is often referred to as the slips. combinations of erroneous actions. For each task step. Although many people will have many roles in design and operation. The wisdom of early consideration of.g. key personnel at different levels of the organisation must understand and fulfil their respective contributions to the fire safety of the installation. abnormal system states and possibilities for recovery are identified and described in order to support criticality ratings. The need to build contingency into time and cost estimates for reiterations. OIMs need to understand: • • • The fire scenarios. 7. The “inherent safety / prevent / detect / control / mitigate /respond protection hierarchy. All discipline engineers need to be aware of: • • Basic fire / smoke & explosion science. Team response to fire of both trained and untrained (visitors) personnel. etc.2. in order to consider the consequences of carrying out the task step (correctly or incorrectly) during abnormal system states (e. both in terms of initial design and continued operation throughout installation lifecycle. possible erroneous actions are identified using guide words such as ‘omitted’.3 Human error analyses Human Error Analysis provides a framework for understanding human errors. The importance of passing their knowledge of the key safety issues to offshore personnel. and investment in. Safety engineers need to understand: • • That their role is to keep the discipline engineers fully involved in the fire hazard management process. lapses.

5 Industry & regulatory authority initiatives 7. As would be expected.com • What to budget for platform specific fire response training of OIMs and supervisors transferring from one platform to another. however the section on the Fire and Explosion topic is expected to be largely a reproduction of that given under the preceding bullet point. which may have a lower level of fire-safety provision than new ones). 7. It serves as a useful checklist for all persons involved in analysis. A number of other types of initiative relating to fire issues have been undertaken and brief details of these and where to go for further information are presented below.1 Fire and explosion guidance The knowledge gained from the fire and explosion studies sponsored by the industry and HSE in the aftermath of the Piper Alpha disaster was pulled together in the FABIG document “Interim Guidance Notes for the Design and Protection of Topsides Structures against Explosion and Fire” [7. These documents also assist offshore oil and gas industry engineers. analysis and protection for fire and explosions hazards that the HSE expect to see demonstrated within the Safety Case. It gives guidance to HSE specialist inspectors assessing those sections of the safety case addressing fire and explosion issues. to ensure fire and explosion issues are covered in line with HSE’s expectations.uk/offshore/information.The aim of the guidance is to promote greater consistency and effectiveness in the assessment of safety cases and greater transparency for duty holders.gov. These documents lay out the principles and methodologies which HSE expect to be followed by Duty Holders in their design process in compliance legislation and demonstrated in the Safety Case. Guidance for the Topic Assessment of the Major Accident Hazard Aspect of Safety Cases (GASCET) – This document is intended primarily to assist topic assessors in undertaking Safety Case assessment activities.2 HSE internal guidance on fire and explosion HSE has published a number of documents offering explanation or guidance in fire and explosion areas for their own inspectors. Fire.5.fireandblast. The objective of the four-part Fire and Explosion Guidance (of which this document is part 2) is to update the 1993 Guidance notes in the light of the research work carried out since 1993. The document is available from HSE bookshops as booklet HSG181 [7. • • • 152-RP-48 Rev 02. this is especially important for older installations. design or assessment of fires or explosions and associated protection methods. This 4 .uk/offshore/information. • Fire and Explosion Strategy – This document presents an overview of the current state of knowledge with respect to fires and explosions. 7. This document can be accessed at www. (Very few platforms are alike. it is focussed around the hazard rather giving any specific guidance on designing against it.hse. who can use these documents to ensure that their designs meet the expectations of the regulatory authority. Assessment Principles for Offshore Safety Cases (APOSC) – Paragraphs 26 to 34 of this document set out the various aspects of the identification. Explosion and Risk Assessment Topic guidance . The document is still at internal consultation stage. It highlights that there is still much uncertainty in certain topic areas and suggests further work in a number of areas.gov.13] issued in 1993.hse.part Guidance is sponsored by UKOOA and HSE.14]. It addresses the fire and explosion hazard as well as other hazard topics and contains useful references to codes and standard that HSE expect to see Operators using in their design processes. This document can be accessed at www. Feb 2006 Page 222 of 261 .5.

org. erosion and fatigue in steel pipework.6 Research on effects of PFP degradation Work is being carried out to better understand the impact of degradation of PFP on its performance. In the similar vein of working to reduce the frequency of occurrence of leaks.15] was produced by UKOOA’s Hydrocarbon Release Reduction Workgroup and through the Step Change website. Feb 2006 Page 223 of 261 . McKenzie and P. the Energy Institute has published guidance on design and protection of pressure systems to withstand severe fires. Improper make-up of flanges or other types of joints. Flexible Hose Management Guidelines. These are: • • • • Corrosion. 152-RP-48 Rev 02. In an additional effort to disseminate the learning throughout the industry. in a paper entitled ‘Improving the Fundamental Safety of Xmas Trees and Wellheads for Platforms’ by M. Copland. or other severe fire events. The IP Guidance addresses the most common causes of loss of containment in process related systems. Webb [7.uk/publicationsdatabase. Use of flexible hoses.” Further details are available at www.5. The research showed that for certain fire scenarios the guidance provided by API RP 520 and API RP 521 is insufficient to protect against BLEVE.3 Guidance on design and protection of pressure systems to withstand severe fires Following research work on the development of BLEVEs.4 Guidance on preventing hydrocarbon releases Following analysis of the statistics collected by the HSE on offshore hydrocarbon releases since 1994. J.energyinst. the document entitled “Hydrocarbon Release Reduction Toolkit” [7. 7. Installation and Maintenance of Small Bore Tubing Systems.5. 7. Vibration or mechanical failure in instrumentation. Design. The guidance is entitled “Guidelines for the design and protection of pressure systems to withstand severe fires. HSE have worked with BP and a leading wellhead manufacturer on development of an inherently safer wellhead design.com 7. The paper can be accessed via the SPE (Paper no.5 Improved ignition modelling An updated ignition probability model is in the final stages of development. A fourth guidance document was produced by the Marine Technology Directorate: • Guidelines for the Avoidance of Vibration Induced Fatigue in Process Pipework.5. It is based on input from OIR12 data. 7. 83997). This work was presented at the Offshore Europe Conference in Aberdeen in 2003. As a result of investigating and understanding the most common failure modes in these areas the following IP guidelines were issued to assist in avoiding releases: • • • Management of Integrity of Bolted Pipe Joints. Guidelines for the Management. three guidance documents were produced through the Institute of Petroleum. sponsored by UKOOA and the Offshore Safety Division of HSE.5.16].fireandblast.

Feb 2006 Page 224 of 261 . A catalogue has now been compiled through the Energy Institute.7 Collation of existing technical guidance relating to offshore major accident hazards The industry has recognised that while there is a wide range of informative technical guidance. a concise catalogue of this key information has hitherto not been available to the industry and the HSE.org.fireandblast.energyinst. codes and standards available to the industry.uk/offshorecatelogue.com 7. 152-RP-48 Rev 02. and is available from www.5.

Feb 2006 Page 225 of 261 . References Reference titles to be inserted 152-RP-48 Rev 02.fireandblast.com 8.

fireandblast. Feb 2006 Page 226 of 261 . abbreviations etc. To be added 152-RP-48 Rev 02.com Annex A Acronyms.

a concept that forms the primary basis for determining the tolerability of risks and the adequacy of arrangements for managing risks to health and safety. The requirement to establish a cost effective solution implies that risk reduction is implemented until the cost of further risk reduction is grossly disproportional to the risk reducing effect. difficulty and cost of achieving it. planned operational exposure that may be hazardous to health or to the environment. or system is performing in the desired manner. trouble. Availability The probability of the system being available to perform the function when required. thresholds or boundaries of performance and/or behaviour within which performance is deemed to be acceptable to the various stakeholders. This level represents the point. injection or expulsion – in order to combat smoke. Active fire protection A fire protection method that requires activation – switching on. Duty holders (The owner or operator of an existing installation or the designer of a new one) have a responsibility to reduce risk to ALARP. 152-RP-48 Rev 02.The events that are considered in a risk analysis are acute. or damage to health. trouble. directing. For instance.fireandblast. difficulty and cost of further reduction measures become unreasonably disproportionate to the additional risk reduction obtained. Auto-ignition temperature The minimum temperature of a vapour and air mixture at which it is marginally self igniting.com Annex B Glossary Acceptance criteria Stated limits. are usually not included in a risk analysis. equipment. objectively assessed. ALARP To reduce a risk to a level which is 'as low as reasonably practicable' involves balancing reduction in risk against the time. unwanted and unplanned. flames or thermal loadings. Accident See 'incident' Accidental event (AE) Event or chain of events that may cause loss of life. Active mitigation Mitigation technique in which the release of suppressant is triggered as a result of flame or gas overpressure detection. Artificial ventilation That ventilation which is not supplied from the action of the environmental wind alone As low as reasonably practicable (ALARP) ALARP expresses that the risk level is reduced (through a documented and systematic process) so far that no further cost effective measure is identified. at which the time. ALARP As Low As Reasonably Practicable. Availability The proportion of the total time that a component. the environment or assets NOTE 1 . Feb 2006 Page 227 of 261 .

Coatback The extension of PFP from protected primary members along secondary .g. Blockage factor The fraction of an area which does not provide open venting or free passage for a flame. The pressure burst and the flashing of the liquid to vapour creates . (Sometimes called Individual Risk – IR) Blast relief panel Parts of a module wall. Blowdown The rapid controlled or accidental depressurization of a vessel or network. BLEVE Boiling Liquid Expanding Vapor Explosion. whether material. paper. Feb 2006 Page 228 of 261 Boiling liquid expanding vapour explosion (BLEVE) The sudden rupture due to fire impingement of a vessel system containing liquefied flammable gas under pressure. and immediate ignition of the expanding fuel-air mixture leads to intense combustion creating a fireball Burning velocity The rate at which the flame consumes the unburnt gas/vapour. Simultaneous ignition of the vaporizing fluid gives a short duration. Blast wall A structural division which has been designed expressly for the purpose of resisting blast loads. Also the velocity of the flame relative to the unburnt gas/vapour.a blast wave and potential missile damage.fireandblast. Can Verbal form used for statements of possibility and capability. forming a service line for seawater suction or sewage/drilling disposal. the result of a catastrophic rupture of a pressurized vessel containing a liquid at a temperature above its normal boiling point. Blast wave A pressure pulse formed by an explosion. Blow-out (ignited) A form of jet resulting from ignition of a high pressure flow of oil and/or gas issuing from an uncontrolled well. The proportion by weight of constituent elements in a particular batch of steel as determined by ladle analysis. running from the module deck to a sub sea level. although its intensity may ultimately reach or exceed that of a hydrocarbon fire. possibly with a substantial fallout of heavy fractions which may also ignite on or around the platform as pool fires. timber. intense fireball. Common mode failure The failure of components from the same cause 152-RP-48 Rev 02. A fire involving these materials is relatively slow growing.com Average individual risk (AIR) The average chance of any individual in a defined population sustaining a given level of harm from incidents which are considered to be limited to that population. physical or causal Cellulosic fire A fire with a fuel source predominantly of cellulose (e. Caisson A vertically aligned pipe. teriary or plate to prevent heat conduction from a flame impingement reaching welded joints and causing a weakening of those joints. Chemical composition . cotton). ceiling or roof which are designed to increase the area of venting in an explosion by being opened or removed by the force of the explosion.

com Company An organisation engaged. directly or indirectly. Page 229 of 261 . For the purposes of the model the context is represented as a gradual transition from a technical basis to a values basis. emergency power supplies) safety hardware (eg. Contractor Person. Computational fluid dynamics (CFD) A mathematical model in which the region of the flow is subdivided by a grid into a large number of control volumes. Convection Transfer of material (fluid or gas) from one place to another. Confined Explosion An explosion of a fuel-oxidant mixture inside a closed system (eg vessel or module). in the context of this report. pressure relief valves. coolant sprays). Decision context The background or environment in which the decision needs to be made. Confinement A measure of the proportion of the boundary of the explosion region which prevents the fuel/air mixture from venting or being released to the external atmosphere. For bodies or establishments with more than one site. control room).g. such as a contained process area. at a fixed temperature. It is measured under a constantly applied load and. equipment enclosure or designated room (e. warmer. Decision basis/bases The basis/bases for assessing the performance of decision options. These range from technical codes and standards based ways of assessing options to values based assessments based on company or wider societal values and stakeholder expectations and perceptions. Creep The time dependent straining of a material. Criticality (of SCEs) Defined by the criticality classes 1 (highest) to 3 (lowest) with respect to the explosion hazard and the consequences of failure. Feb 2006 Convection (Heat) Heat transfer associated with fluid movement around a heated body. Convective heat flux The measured or calculated heat flux crossing a boundary or surface due to convection heat transfer only. Compartment fires A fire that starts and continues within a confined volume on the installation. Congestion A measure of the restriction of flow within the explosion region caused by the obstacles within that region. more dense fluid. less dense fluid rises and is replaced by cooler. company or other association that performs work for an Operator or in other ways is a supplier of products or services to the Operator. as principal or contractor. Cost benefit analysis (CBA) A quantitative technique to assess the overall value of a proposal taking into account its likely benefits and detriments. 152-RP-48 Rev 02. in the exploration for and production of oj I and/or gas. The decision context affects the importance of the various decision bases. a single site may be defined as a company. Control Means of intervention permitted by the design (eg. or the presence of manually or automatically initiated ESD procedures which are intended to contain a developing situation so that escalation and a major accident may be avoided. dump tanks. In particular the impact on the TR. EER systems and associated supporting structure.fireandblast.

fireandblast.com Decision factors Aspects of performance or influencing factors that can have a bearing on the decision, either because they directly affect option performance or because they determine the context in which the decision needs to be made. Decision framework The decision framework consists of the model and accompanying guidance on the decision context and means of calibration. It provides the practical tool to aid decision making. Decision option(s) The different options or solutions which are to be considered as means to resolve the problem. Deflagration Mechanism for propagation of an explosion reaction through a flammable gas mixture which is thermal in nature. It is a relatively slow process and the velocity is always less than the speed of sound in the mixture (see Detonation). Deflagration The chemical reaction of a substance in which the reaction front advances into the unreacted substance at less than sonic velocity. Where a blast wave is produced which has the potential to cause damage, the term explosive deflagration may be used. Design accidental event An accidental event for which SCEs on the installation should perform their function as designed. Design basis checks Design basis checks consist of checking the basis of the existing design for the installation and determining if the methods used for the design are acceptable in the context of the explosion hazard. Detonation limits The range of fuel-air ratios through which detonations can propagate. Diffracted wave That component of the blast wave which propagates into the sheltered region behind the structure. Diffusivity An expression relating to the range of mass transmitted through a given medium to that absorbed by the medium. It has units m2 s-1. Dilution Addition of inert gas to flammable mixture. Dimensioning accidental event (DAE) AEs that serve as the basis for layout, dimensioning and use of installations and the activity at large, in order Ito meet the defined RAC. Dimensioning accidental load (DAL) Load (action) that is sufficient in order to meet the risk acceptance criteria. Design explosion loads Explosion loads used for design. SCEs must be designed to resist these load levels within the constraints of the associated element specific performance standards. Detonation Mechanism for propagation of an explosion reaction through a flammable gas mixture which is more mechanical in nature and acts through shock pressure forces. It is a very rapid process and velocity is always greater than the speed of sound in the mixture (see Deflagration). Detonation An explosion caused by the extremely rapid chemical reaction of a substance in which the reaction front advances into the unreacted substance at greater than sonic velocity.

152-RP-48 Rev 02, Feb 2006

Page 230 of 261

fireandblast.com Dimensioning explosion loads Explosion loads which are of such a magnitude that when applied to a simple elastic analysis model, the code check results in members dimensioned to resist the ductility level explosion. Dirivent An HVAC system whereby increased mixing is achieved by way of directed jet nozzles. Dose The accumulated exposure of an individual to harmful conditions, Drag coefficient An empirical multiplying constant used to relate the drag load on a structure to the stagnation overpressure. Drag force The drag load on a small obstacle due to the movement of gas past a small obstacle less than 0.3 m in the direction of flow, form drag – Presented Area x Pdrag. Ductility level blast (DLB) Representative peak overpressure used in design (10-4 to 10-5 p.a. frequency level) – Pduct. Ductility level design event See DLB. Ductility ratio The ratio of the peak deflection to the deflection at first effective yield. Ductility ratio µ The ratio of the maximum displacement of the element to the deflection required to cause first yield at the extreme fibres. Duty holder The organisation, or company responsible for the safety of the installation or its design under UK legislation. Effectiveness analysis Analysis which documents the fulfilment of performance standards for safety and emergency preparedness.
NOTE - Effectiveness analyses in relation to technical performance standards for essential safety systems are carried out in relation to risk analyses. It is therefore a prerequisite that quantitative risk analyses in relation to design include quantitative analyses of escape, evacuation and rescue. Similarly, effectiveness analyses of emergency preparedness measures are done in connection with emergency.

Dynamic pressure Representative peak out of balance loads over target area, includes drag, pressure difference and gas acceleration effects. Used for calculation of loads on equipment and piping – Pdyn, sometimes referred to as dynamic overpressure.

Element specific performance standard Measurable performance standard for specific key items or systems relating to systems’ functionality, availability and survivability. (sometimes referred to as low level performance standard). Emergency preparedness Technical, operational and organisational measures that are planned to be implemented under the management of the emergency organisation in case hazardous or accidental situations occur, in order to protect human and environmental resources and assets. Emergency preparedness analysis (EPA) Analysis which includes establishment of OSHA, including major AEs, establishment of performance standards for emergency preparedness and their fulfilment and identification of emergency preparedness measures .

152-RP-48 Rev 02, Feb 2006

Page 231 of 261

fireandblast.com Emergency shutdown system A safety shutdown system comprising detection, signalling and logical control, valves and actuators, which can, in tandem with alarm and direct control mechanisms, enable the safe and effective shutdown of plant and machinery in a controlled manner. Emergency shutdown valve (ESDV) A valve mounted in a pipeline, pipe or marine riser specifically for the purpose of cutting of the supply of its normal contents in an emergency. Emissivity A constant used to quantify the radiation emission characteristics of a flame. Emissivity of a perfect black body is 1. Entrainment The process by which surrounding fluid is drawn into a jet to cause its dilution. Environment The surroundings and conditions in which a company operates or which it may affect, including living systems (human and other) therein. Environmental effect A direct or indirect impingement of the activities, products and services of the company upon the environment, whether adverse or beneficial. Environmental effects evaluation A documented evaluation of the environmental significance of the effects of the company's activities, products and services (existing and planned). Equivalent static overpressure Extreme (residual) events An overpressure derived from an overpressure trace with respect to a target which gives the same peak deflection when applied as a static load as the original trace. Events for which design is not reasonably practicable may result in loss of functionality of SCE’s Escalation Consequences subsequent to an explosion or other major hazard. Essential safety system System which has a major role in the control and mitigation of accidents and in any subsequent EER activities Establishment preparedness of emergency

Systematic process which involves planning and implementation of suitable emergency preparedness measures on the basis of risk and EPA Exceedance curve A plot of the value of a variable against the plot of the probability or frequency of exceedance of that variable. Expansion ratio The ratio of burnt to unburnt gas volumes of a given mass of gas. Explosion A release of energy which causes a pressure discontinuity or blast wave. (see gas explosion) Explosion risk risk from the initiating event and possible subsequent escalation. External explosion External or secondary explosions which may result as an unburnt fuel/air mixture comes into contact with the external (oxygen rich) atmosphere as it is vented from a compartment.

152-RP-48 Rev 02, Feb 2006

Page 232 of 261

fireandblast.com F Factor The fraction of the net combustion energy of a flame transmitted as radiation. Fail-safe valve An actuated valve which automatically assumes a safe position (open or closed depending on the needs of the system) in the event of loss of power to the actuator. Finite element (analysis) FEA consists of a computer model of a material or design that is stressed and analyzed for specific results. Fire A process of combustion characterized by heat or smoke or flame or a combination of these. Fire A process of combustion characterized by heat or smoke or flame or any combination of these. Fire and explosion risk analysis The analytical study of the likelihood and severity of both defined fire hazard and explosion hazard scenarios. Fire ball This phenomenon, which may occur as the result of a deflagration of a vapor cloud that does not result in a blast wave. Alternatively, a fire, burning sufficiently rapidly for the burning mass to rise into the air as a cloud or ball. Fire curve A temperature/time curve devised for a fire tests that is intended to represent (but not necessarily reproduce) the temperature development of a ‘real’ fire, either cellulosic or hydrocarbon. Fire endurance The length of time that an element can resist fire either up to the point of collapse or alternatively to the point when the deflection reaches a limiting value. Fire point The temperature at which a liquid fuel flashes and then marginally sustains a flame. Fire prevention Measures taken to prevent the outbreak of fire at a given location. Fire protection Measures taken to minimize effects of damage from fire should it occur. Fire protection system An integrated detection, signalling automated fire control system. Fire risk analysis The analytical study of the likelihood and severity of defined fire hazard scenarios. Fire test A test designed to quantify the resistance to fire of elements of construction and/or materials applied thereto. Conventionally, such tests are carried out in purpose-built furnaces operating to a defined temperature/time curve. Fire wall A designated partition, which by nature of its construction and certification status, is warranted to resist a standard or hydrocarbon fire test for a particular time period. The term can apply to a floor or roof panel. Fire Water pump A submersible electric or diesel pump, mounted in or capable of being lowered into a fire water pump caisson, which feeds into the firewater ring main. and

152-RP-48 Rev 02, Feb 2006

Page 233 of 261

fireandblast.com Flammability limits The range of fuel-air ratios which can support non-detonative combustion such as laminar and turbulent flames. It therefore, includes both lower and higher flammability limits. Flash fire The combustion of a flammable vapour and air mixture in which the flame passes through the mixture at less than sonic velocity, such that negligible damaging overpressure is generated. Fire hazard analysis The application of hazard analysis techniques solely to fire hazards. Flash fire The combustion of a flammable vapour and air mixture in which flame passes through that mixture and negligible damaging overpressure is generated. Flash point The flash point of a liquid is the temperature at which the vapour and air mixture lying just above its vaporizing surface is capable of just supporting a momentary flashing propagation of a flame prompted by a quick sweep of a small gas pilot flame near the surface. Flashing The rapid evaporation of a volatile liquid when suddenly released from pressurized storage. Flow stress Flow stress (a combination of UTS and elongation stress) Forced ventilation Ventilation by mechanical means, e.g. a fan. Free flame release The flame resulting from a gas or liquid release but that subsequently has no impingement on any other bodies (such as equipment or structure). Gauge points Points defined in a CFD analysis where information on overpressure/dynamic pressure time histories are derived. General platform alarm A platform wide alarm indicating the onset of an emergency.
Page 234 of 261

Frequency The number of occurrences per unit of time. Fuel controlled fire A fire in which the rate of fuel consumption is controlled by the rate of supply of fuel to the fire, rather than the availability of oxygen for combustion. Functionality The capacity of a system to perform the function required of it during and after a major accidental event. Fundamental burning velocity The burning velocity of a laminar (nonturbulent) flame under stated conditions of composition, temperature and pressure of the unburnt gas. Fusible The basis of protective devices with a component of valves or detectors causes the protective device to function when the component melts in the early stages of a fire hazard in that locale. Includes fusible links, plugs and loops. Gas explosion Gas explosions can be defined as the combustion of a premixed gas cloud containing fuel and an oxidiser that can result in a rapid rise in pressure Gas oil ratio The ratio of gas to oil within the hydrocarbon fluid, a high GOR indicates a high gas content which has implications for the potential for gas fires from a depressurisation and release.

152-RP-48 Rev 02, Feb 2006

Health. degradation of air quality or introduced toxic substances which will start to cause harm (both short and long term) to the average individual.com Harm criteria Statements of adverse (environmental) conditions such as heat. processes and management system (HSEMS) resources for implementing health. damage to property. safety and environmental issues. damage to the environment or some combination of these.fireandblast. arising from the HSE policy. the analysis of the mechanisms by which these undesired events could occur and usually the estimation of the extent. usually a brainstorm review of the potential hazards that may impact an installation. Methodology of assessment appropriate for High risk installations or compartments as defined in this Guidance. Hazard A physical situation with a potential for human injury. including ill health or injury. safety and environmental management system and its implementation. Often linked with vulnerability. and which should be quantified wherever practicable. products or the environment. A convenient unit is kW/ /m2/s (1 kW m-2 /s = 317 Btu ft-2 h-1). safety and environmental management system (HSMES) The company structure. safety and environmental objectives. production losses or increased liabilities. safety and environmental (HSE) management plan A description of the means of achieving health. damage to the environment or some combination of these. conduction and convection. measured in degrees C per minute. Health. regulations and new objectives resulting from changing circumstances. safety and environmental (HSE) management review The formal review by senior management of the status and adequacy of the health. Hazardous substance A substance which by virtue of its chemical properties constitutes a hazard. Hazard analysis The identification of undesired events that lead to the realisation of a hazard. safety and environmental (HSE) strategic objectives The broad goals. High (Higher) risk methodology Hazard A physical situation with a potential for human injury. safety and environmental effects. magnitude and likelihood of any harmful effects. safety and environmental (HSE) policy A public statement of the intentions and principles of action of the company regarding its health. policy. Health. safety and environmental management. damage to property. HAZID Hazard identification exercise. procedures. Hazard The potential to cause harm. Heating rate The rate. that a company sets itself to achieve. that a sample is heated. damage to plant/equipment. Health. 152-RP-48 Rev 02. Feb 2006 Page 235 of 261 . giving rise to its strategic and detailed objectives. in relation to health. Health. plant. responsibilities. It is a total of heat transmitted by radiation. practices. Heat Flux (heat density) The rate of heat transfer per unit area normal to the direction of heat flow.

See also Man Machine Interface only the term 'incident' has been used-in the above sense which embraces the concept of 'accident'. human reliability and human error assessment. whilst maintaining adequate oxygen to sustain life. Infrared The non-visible red end of the visible spectrum of light. (The word 'accident' is used by some writers and organisations to denote an incident which has caused injury. Incident An event or chain of events which has caused or could have caused injury. equipment. Individual risk The frequency at which an individual may be expected to sustain a given level of harm from the realization of specified hazards.) Incident heat flux The total heat flux from within the flame on an exposed pipe. Includes. illness and/or damage (loss) to assets. these constitute mainly a combination of heat transferred by radiation and convection. ergonomic issues. burn fiercely and produce a high heat flux. vessel or structure to heat transferred by all heat transfer mechanisms. Hydrocarbon fire test A furnace fire test using a time/ temperature curve which supposedly represents a hydrocarbon fire and which results in an ‘H’ rating for successful specimens. For analyses within this guidance. the environment or third parties. A hydrocarbon fire will spread rapidly.fireandblast. Page 236 of 261 . illness and/or damage. and is therefore avoided by others. Feb 2006 The blast wave as it approaches a structure just before it impacts on its surface.com Homogeneous In two-phase flow the vapor and liquid phases are assumed to be traveling at the same speeds and to be mixed uniformly throughout. Human factors The study and assessment of the impact of systems. Impulse The integral of a force or load over an interval of time. but the term also has connotations of 'bad luck' in common speech. Incident wave Hydrocarbon A hydrocarbon is a molecule comprised of carbon and hydrocarbon atoms. Inergen © A proprietary medium used to prevent continue escalation of fires by restricting the oxygen available. equipment and hazards on human beings. Initiating events The events which initiates an explosion event. Hyperthermia Prolonged exposure to heated environments. In this guidance. Inhibitor Substance which reduces explosion overpressures by chemically interfering with combustion. having a high flame temperature achieved almost instantaneously after ignition. 152-RP-48 Rev 02. Individual risk (IR) The frequency at which an individual may be expected to sustain a given level of harm from the realization of specified hazards. Hydrocarbon fire A fire fuelled by hydrocarbon compounds.

a popular term for an installation that has on its premises a more than a prescribed quantity of a dangerous substance. Jetting length The length of a jet flow over which the effects of its initial momentum are dominant. Lift off distance The distance from the discharge point (hole) to where flaming starts. The general term used to describe a range of activities carried out to minimize any form of accidental loss. sealing compound or paint that swells up under thermal loading to produce a fire resisting covering. IR flame detectors Loss prevention Flame detectors functioning in the infrared region of emitted light from a flame. property or the environment or purely financial loss due to plant outage. Or. The activities may be associated with financial loss or safety/environmental issues. Low level performance standard See element specific performance standard. Logit equation or model See Probit equation or model 152-RP-48 Rev 02. Large deflection analysis A type of non-linear structural analysis based on the final deflected shape of the structure rather than the initial. Life safety risk Risk to life. Lower flammability limit (LFL) The lower level of gas concentration which will result in combustion of the gas. A platform inventory lists the fuel types and total volumes stored on board an installation. Major hazard An imprecise term for a large-scale chemical hazard. Low risk installation/compartment An installation or compartment identified as being low risk by the risk matrix and screening method described in this Guidance. This is the same as Lower explosive limit (LEL). such as damage to people. Inventory The quantity and type of fuel stored. especially one that may be released through an acute event. The term inventory is also used to describe the quantity and type of fuel stored in vessels and pipe assemblies. Feb 2006 Page 237 of 261 . Loss prevention A systematic approach to preventing accidents or minimizing their effects. Liquid spray release High pressure release of a liquid hydrocarbon which gives rise to a suspension of the fuel in the air similar to a gas cloud which is capable of deflagration on ignition. Laminar flame A smooth surfaced flame with low burning velocity. Jet fire (flame) The combustion of material emerging with significant momentum from an orifice.com Intumescent An epoxy coating. undisplaced shape.fireandblast. Jet flame The combustion of material emerging with significant momentum from an orifice. Lift-off That region of a jet flame where the jet discharge has not adequately mixed with air to combust.

Feb 2006 installation (i. Offtake The process by which tankers or other mechanisms unload the stored hydrocarbon from a floating production installation. test and monitoring work related to health. Natural period The time required for a freely vibrating structure to complete one cycle of motion.fireandblast. covering issues of ergonomics but also information and alarm management. Medium risk installation/compartment An installation or compartment identified as being low risk by the risk matrix and screening method described in this Guidance. Nominal explosion frequency The frequency of occurrence of a release which is ignited and results in detectable overpressure (>50 mb). per unit area of the pool. Units are typically kg/m2/sec. May Verbal form used to indicate a course of action permissible within the limits of a standard Means of calibration Means of checking or benchmarking the performance of a decision option with respect to a given decision basis. when safe) or whether to effect an evacuation. stakeholder consultation can be used to assess the values of the company or society at large.Prexp Nominal explosion loads Representative nominal overpressures and nominal dynamic pressures on equipment. Monitoring activities All inspection. The ventilation of an enclosure by natural means. Mass burning rate Natural ventilation The mass burning rate of a pool fire is the mass of fuel supplied to the flame per unit time. Page 238 of 261 . Nominal value Value assigned to a basic variable determined on a non-statistical basis. This is used as the top point in the simplified generation of an exceedance curve . safety and environmental management. Nominal overpressures Nominal overpressures are defined as peak representative overpressures by installation/module type determined on a nonstatistical basis from acquired experience or simulation for a demonstrably similar situation. Muster area The area (notionally safe) where the crew congregate whilst awaiting instructions whether to return to the main areas of the 152-RP-48 Rev 02. ranges. typically from acquired experience or physical conditions. Similarly. For example what is thought to be 'good practice' or sound ‘engineering judgment’ can be checked by peer review and benchmarking of practices in other parts of the industry.com Man machine interface The interaction of human beings with equipment and control systems.e. Non-linear analysis A type of structural analysis that allows the geometry and/or the material properties to be non-linear. Mitigation Means taken to minimise the consequences of a major accident to personnel and the installation after the accident has occurred. either through the action of an external wind or gravitational forces. outliers and sensitivity measures.

Page 239 of 261 . mobilisation time. (Some companies may refer to performance criteria as 'goals' or 'targets'. but the term over-pressurisation is preferred. mechanical or other means of initiation. May be pon solid flooring or on the sea surface. RAG. Plastic hinge A plastic hinge is a zone of yielding due to flexure in a structural member. It is associated with plastic strain and large plastic deformations. expressed as far as possible in a verifiable manner. the pressure developed above .The term 'performance' is to be interpreted in a wide sense and Include availability. Phenomenological models Simplified physical models. item of equipment. personnel competence. Peak overpressure The maximum overpressure generated at a given location. Performance criteria Performance criteria describe the measurable standards set by company management to which an activity or system element is to perform. reliability.fireandblast. Passive fire protection (PFP) A coating. Overpressure is also sometimes used to describe exposure of equipment to internal pressure in excess of its design pressure.com Overpressure The excess conditions. Plastic regime That region of structural behaviour dominated by plastic response rather than elastic response. atmospheric pressure at any stage or location is called the overpressure. functionality. Passive mitigation Mitigation technique that is ‘non-triggered’ and generally utilized the kinetic energy of an explosion to disperse an extinguishing agent or suppressant. person or procedure and which is used as the basis for managing the hazard. replenishment or sustenance. Penetration seal Purpose-made seals.objectives. Performance standards for safety and emergency preparedness Requirements to the performance of safety and emergency preparedness measures which ensure that safety .) 152-RP-48 Rev 02. Pool fire The combustion of material evaporating from a layer of liquid at the base of the fire. Overpressure loading Loading imparted to a body as a result of overpressure acting normal to the surface of the structure. cladding or free-standing system that provides thermal protection in the event of fire and which requires no manual. Overpressure In a pressure pulse (blast wave). Feb 2006 Performance standard pressure above ambient A statement which can be expressed in qualitative or quantitative terms of the performance required of a system. capacity. which seek to represent only the essential physics of explosions. Plastic strain Strain beyond the elastic limit. authority minimum requirements and established norms are satisfied during design and operation NOTE . Plastic deformation That deformation which occurs following yield. or seals formed in situ to ensure that penetrations to firewalls do not impair fire resistance. vulnerability.

whose failure would seriously endanger the safety of a significant part of the installation.Pdiff Prevention Means intended to prevent the initiation of a sequence of events which could lead to a hazardous outcome of significance (ie major accident). and perhaps a blast wave. resulting in the formation of missiles which may have the potential to cause damage. Proof stress The stress at which the plastic strain of a material reaches a particular value. ascertains whether a product. service or activity is in accordance with specified requirements. engineering and construction standards. Proof stress. Page 240 of 261 . Primary structure The structural components. Primary means of escape The means of escape which was assumed during design. . is a valuable concept in materials which do not exhibit a sharp yield point.be quantitative. May also be referred to as quantitative risk analysis or with assessment used interchangeably with analysis. means of Procedure A documented series of steps to be carried out in a logical order for a defined operation or in a given situation. Where b is a parameter to be estimated and F is the normal cumulative distribution function.com Potential loss of life (PLL) The (fractional) no of individuals predicted to become fatalities over a specified period of time – usually one year. The logit model is the same but with a different cumulative distribution function for F. obtained and maintained. Pressure difference The pressure difference across an obstacle greater than 0. Quality control That part of the Quality Assurance which. the operation of the installation. 152-RP-48 Rev 02. Quality assurance All systematic actions that are necessary to ensure that quality is planned. through measurements. Probability A number in a scale from 0 to 1 which expresses the likelihood that one event will succeed another. its inspection and maintenance. Practice Accepted methods or accomplishing stated tasks. tests or inspections. Pressure burst The rupture of a system under internal pressure.fireandblast. Quantified risk analysis The quantitative evaluation of the likelihood of undesired events and the likelihood of harm or damage being caused. and the continuous independent variable xi are estimated in Pr(yi=1)=F(xi'b). calculated from the pressure time histories at the front and back of the obstacle. for example 0. Feb 2006 Probit equation or model A probit model is a model in which the dependent variable yi can be only one or zero.though not necessarily . Such means include management systems applied to the design. Procedure Established and documented step by step activity which allows a specific task to be completed.2%. Preparedness analyses The analysis has to be traceable and will normally . together with the value judgements made concerning the significance of the results.3m in the direction of flow.

It may be either a frequency (the number of specified events occurring in unit time) or a probability (the probability of a specified event following a prior event).fireandblast. dimensionless) or as a frequency.com Quality A product. 152-RP-48 Rev 02. Redundancy analysis The structural analysis indicating which members can be removed without the collapse of the structure. Reliability The probability that an item is able to perform a required function under stated conditions for a stated period of time. with the inverse of time as dimension. Rise time The time taken for the overpressure to increase from zero to the peak overpressure. – Prep Required endurance time The estimated time for people to travel from their work stations to the TR. Residual events Initiating events which cannot be eliminated by design or operating procedures. an evaluation of risk which places more importance on certain accidental consequences than on others. Probability may be expressed as a probability value (0-1.but independent means. The implication of the definition is further that perceived risk (i. Release The type and quantity of fuel which can possibly be ignited. The product of the chance that a specified undesired event will occur and the severity of the consequences of the event. Radiation Thermal radiation involves the transfer of heat by electromagnetic waves confined to a relatively narrow region of the electromagnetic spectrum.e. then to the primary or secondary means of escape.e. The likelihood of a specified undesired event occurring within a specified period or in specified circumstances. subjectively evaluated risk performed by individuals) should not be included in the expression of risk- .5ms and space averaged over explosion affected area. It may be relevant to consider on a qualitative basis certain aspects of risk aversion in relation to assessment of risk and its tolerability. depending on the circumstances. where risk acceptance is concerned) should not be included in the quantitative expression of risk. The definition implies that risk aversion (i.Risk may be expressed qualitatively as well as quantitatively. Redundancy Risk The performance of the same function by a number of identical . service or activity's ability to fulfil specified requirements. Risk Combination of the probability of occurrence of harm and the severity of that harm NOTE . Representative peak overpressure Time averaged over 1. Radiative heat flux Risk The measured or calculated heat flux crossing a boundary or surface due to radiation heat transfer only. Reliability The probability that an item is able to perform a required function under stated conditions for a stated period of time or for a stated demand. Feb 2006 Page 241 of 261 allowing for the possibility of helping injured colleagues.

or provided by the regulators. including issues of risk perception where appropriate. They should be based on sound scientific and technical information and may be developed by the company and industry bodies. etc. in a manner which allows comparison with quantitative RAC. NOTE 2 . Risk Issues Issues that impact on the nature and perception of safety related risks and the role of risk based analysis techniques Robustness Insensitivity of response to variations of load. equipment. together with the value judgements made concerning the 152-RP-48 Rev 02. system (including computer software) or component part whose failure could cause or contribute substantially to a major accident is safetycritical.Quantitative analysis may be the most relevant in many cases.RAC are used in relation to risk analysis and express the level of risk which will be tolerable for the 9 activity. standards and practices which the Operator shall initiate to ensure the activity is planned. Risk analysis Use of available information to identify hazards and to estimate the risk NOTE The risk analysis term covers several types of analyses that will all assess causes for and consequences of AEs. Safety objective Objective for the safety of personnel. plant. as is any which is intended to prevent or limit the effect of a major accident. organized. Page 242 of 261 . executed and maintained to achieve safety and protect the environment in accordance with the acts or regulations Safety-critical elements (SCEs) Risk analysis The quantified calculation of probabilities and risks without making any judgements about their relevance. Secondary means of escape The evaluation of the likelihood of undesired events and the likelihood of harm or damage being caused. environment and assets. Risk assessment Overall process of risk analysis and risk evaluation Risk evaluation Those elements of the installation which are critical to safety.fireandblast. Feb 2006 Means of escape which should be available if the primary means of escape is not available. HAZOP. with respect to risk to personnel. preliminary hazard analysis.com Risk acceptance criteria (RAC) Criteria that are used to express a risk level that is considered tolerable for the activity in question NOTE . FMEA. Risk assessment The quantitative evaluation of the likelihood of undesired events and the likelihood of harm or damage being caused together with the value judgments made concerning the significance of the results. Risk acceptance criteria may be qualitative or quantitative. significance of the results and their tolerability. and is the starting point for further risk reduction according to the ALARP-principle. Safety critical element (SCE) Any structure. Examples of the simpler analyses are SJA. environment and assets towards which the management of the activity will be aimed Safety plan All documented policies. involving a quantification of the probability and the consequences of AEs. Screening criteria The values or standards against which the significance of the identified hazard or effect can be judged.

unless accepted by all involved parties Shock load The load imparted to a structure by a passing shock wave. Single-phase flow A flow consisting of either a liquid or gas. Smoothed overpressure Overpressure trace which has been smoothed by using a moving average over a period of 1. Should Verbal form used to indicate that among several possibilities one is recommended as particularly suitable. This is the pressure at which pressure relief panels should operate. pressure.e. It is assumed in the case for measured overpressures that they have been smoothed. the composition. required to raise one kilogram of a substance by one degree C. or that a certain course of action is preferred but not necessarily required Shuttle tankers The tankers undertaking the offloading of the stored oil from a floating installation. for example.5 milliseconds (1 millisecond or ms equals one thousandth of a second) Source terms The characteristics (prior to ignition) of a fluid which affect its combustion. Shall Verbal form used to indicate requirements strictly to be followed in order to conform to the standard and from which no deviation is permitted. Shock wave A pressure pulse formed by an explosion in which a sharp discontinuity in pressure travels as a wave through a gas at a supersonic velocity. J without mentioning or excluding others. temperature. not permanently deployed but unfolded when required. Serviceability limit A design limit beyond which the structure may become unserviceable. Feb 2006 Page 243 of 261 . a specified maximum deflection. Skin friction The frictional force caused by the passing fluid flow which acts tangentially to the surface of the body. i. Units are Joules/kg/ºC. Specific heat The amount of heat. Skyscape© A proprietary evacuation mechanism based on folding Kevlar screens. Space averaged overpressure A peak overpressure for a compartment/area or installation which is the average of all measured or simulated peak overpressures within a compartment.fireandblast. Significant overpressure An overpressure > 50m bar. 152-RP-48 Rev 02. measured in Joules. Stagnation overpressure The excess pressure above that in the approach flow which occurs on the front face of a surface where the gas velocity is brought to rest. Societal risk The relationship between frequency and the number of people suffering from a specified level of ham1 in a given population from the realization of specified hazards.com Section factor The ratio of heated perimeter (Hp) to crosssectional area (A).

Stoichiometric mixture A mixture of air and fuel such that complete combustion may just occur.fireandblast. 2) the transport of the products. Suppressant Substance which reduces explosion overpressures by removing heat from the flame. Thermal conduction Heat transfer through a medium via random molecular motion. Tenability (limits and/or analysis) 152-RP-48 Rev 02. Survivability The ability of a system to function in the conditions of an accidental event for the time required. Strain hardening (work hardening) The tendency of an elastic-plastic material to exhibit increased resistance to high strains. System audit Planned and systematic examination of systems to ensure that these have been established. Thermal analysis A calculation in which the results are temperature distributions for a given heat input. followed and maintained as specified.com Standard fire test A furnace fire test using a time temperature curve which simulates a standard fire and which results in an ‘A’ or ‘H’ rating for successful specimens. An elastic method is used for structural response with code/utilization checks as the performance standard. Time domain A solution technique for structural dynamics in which results are obtained at regular time intervals when a time variable force or other load is applied. Temporary refuge The place of “greater safety” on an offshore installation. required in UK law as a place for crew members to congregate prior to evacuation or to withstand the major accident. The heating may be described in terms of either temperatures or radiation levels. Strength level blast (SLB) Representative peak overpressure used to test robustness of equipment and structure. Elastic structural analysis is appropriate. Thermal capacity The ability of a material to store heat. Surface emissive power The heat flux emitted from the surface of the flame by thermal radiation. Threshold overpressure Peak overpressure below which explosion assessment need not be performed. Steady state Conditions which do not change with time. Strength level analysis An explosion response assessment where the SCEs including structure and supports are required to remain elastic. 1) the source of the combustion products. Stoichiometric mix Air/fuel mixture is such that it contains exactly the required amount of oxygen to completely consume the fuel. chemically interfering with combustion or diluting the flammable mixture. and 3) the effect of the exposure. Feb 2006 Page 244 of 261 . An analysis of 3 components of fire and smoke exposure.

– Pult. Unconfined vapour cloud explosion Defined as for VCE and is an imprecise term (see below). The preferred term for an explosion in the open air of a cloud made up of a mixture of a flammable vapour or gas with air. product or service is in accordance with specified requirements. Feb 2006 response. A summation greater than unity indicates failure of the member.com Transmissivity The fraction of the radiated heat that transmits through a medium (usually the atmosphere). Unity checks A summation of non-dimensional terms in an equation in structural design. Ultimate tensile strength The highest load applied in breaking a tensile test piece divided by the original crosssectional area of the test piece Ultra-violet The non-visible violet end of the visible spectrum of light. Vent An opening through which gas escapes from a confining enclosure as a result of the expansion caused by combustion. Turbulent burning velocity Vapor cloud explosion (VCE) The burning velocity of the flame when turbulence is present in the flammable mixture. Venting The escape of gas through openings (vents) in the confining enclosure. Verification Examination to confirm that an activity. that arise due to the presence of eddies within the flow.fireandblast. Ultimate overpressure Peak representative overpressure resulting from a CFD simulation where it is assumed that the area is engulfed in a stoichiometric gas cloud and ignited at the worst position and time. The preferred term for an explosion of a cloud made up of a mixture of a flammable vapour or gas with air in open or semiconfined conditions. such as velocity or concentration. each of which relate to a component of loading or structural 152-RP-48 Rev 02. Upper flammability limit (UFL) The fuel concentration above which combustion will not occur. Turbulence Rapid irregular local fluctuations in physical variables. Two-phase flow A flow in which both the liquid and vapour phases co-exist within close proximity. Ventilation The process by which an enclosure is supplied with fresh air. Same as upper explosive limit (UEL). UV flame detectors Flame detectors functioning in the ultra-violet region of emitted light from a flame. Ventilation controlled fire A fire in which the combustion rate is controlled by the availability of oxygen rather than the supply of fuel. Page 245 of 261 . Ventilation rates are often given for an enclosure in units of air volume changes per hour. Turbulent flame Vapour cloud explosion (VCE) A flame burning in a turbulent flammable mixture.

the stress corresponding to a particular plastic strain. Wake region The region on the downstream side of the structure. Wellbay The area of the topsides structure which accommodates the wellheads. Yield point The stress at which a steel sample departs from linear elastic behaviour to plastic deformation in a standard tensile test. formally submitted and monitored scheme of verification required in the UK. Yield. Dynamic The apparent yield stress exhibited by metals such as steel when they are strained at a rate which is significantly faster than the normal testing rate.2% (see also Proof Stress). Water deluge system A network of small bore pipe work nozzles connected to the firewater main which is capable of delivering the design water spray to the protected area. Feb 2006 Page 246 of 261 . Worst case (explosion) scenario CFD or phenomenological simulation where it is assumed that the explosion area or compartment is filled with a stoichiometric gas cloud ignited at the worst position and time. The detailed. often 0.fireandblast. Volume production The overall rate of increase in volume caused by the combustion process. Written scheme verification) of examination (or Yield. 152-RP-48 Rev 02. Volume blockage ratio The ratio of the volume occupied by the obstacles to the total volume. effective For materials which exhibit no clear yield point – such as mild steels at elevated temperatures. Water screen A series of wide angle and/or mist spray nozzles connected to the firewater main that protect a specific area in the module from the passage of heat.com View factor The proportion of the field of view of a receiving surface that is filled by a flame. smoke and billowing flames.

fireandblast. More specifically related to fire and explosion risk are the Prevention of Fire and Explosion and Emergency Response on offshore installations (PFEER) [C. details of appropriate measures taken to reduce these risks to as low a level as is reasonably practicable. safety and welfare of their employees. escape recovery and rescue will occur in the case of an explosion event (see Regulations 14 to 17 of PFEER).2] which place an obligation on the employer to actively carry out a risk assessment of the workplace and act accordingly. • • • evaluation of risks associated with the identified hazards.4] require that all installations in UK waters have an acceptable Safety Case. control and mitigate explosion hazards. Act 1974 (HASWA)’. MHSW [C.com fireandblast. The primary legislation governing safety in the workplace is the ‘Health and Safety at Work Etc.1 UK legislation This section details major legislation covering explosion risk.fireandblast.com ltd 8-10 High Street Laurencekirk Scotland AB30 1AE . Employers have to take reasonable steps to ensure the health. +44 (0)1561-378383 admin@fireandblast.1] This imposes a responsibility on the employer to ensure the safety at work for all employees. communication and control of emergencies. The regulations also require mitigating measures to be specified and put in place and for performance standards to be set for safety critical measures to prevent. details of the Duty Holder’s (Safety) Management Systems. It is not exhaustive as any legislation covering general safety or requiring a safety risk assessment to be performed. detection. The Duty Holder must ensure that effective evacuation. Risks assessed will include those from fire and explosion. Information regarding the following issues is required to be addressed in the Safety Case:Identification of major hazards.3] Regulations which place on the Duty Holder the requirement to take appropriate measures to protect persons from major hazards including fires and explosions.com http://www. Various regulations are enacted under the HASWA.[C. Regulations 9 to 12 of PFEER specify the types of measures which are required for prevention. Legislation may be added during the lifetime of this guidance.com Annex C Details on legislation. standards and guidance C. will be relevant where the potential for a fire event exists. The Safety Case Regulations SCR [C. These include the ‘Management of Health and Safety at Work Regulations 1999’.

namely: For general fire and explosion hazard management. August 2002.fireandblast. Performance standards are used to define the functionality and integrity of these safety critical elements. describes how any quantified risk assessment (QRA) has been used and how uncertainties have been taken into account (APOSC paragraphs 75-82). standards and guidance C. Management and Administration Regulations MAR-1995 [C. describes the evacuation. identifies and describes the implementation of the risk reduction measures (APSOC paragraphs 83-89).7] and the DCR 1996. so that there are no specific requirements for how an assessment of fire hazards should be carried out.SCEs). evaluates the risks from the identified major accident hazards (APOSC paragraphs 49-74). There are additional codes.3 Codes. describes how major accident risks are managed (APOSC paragraphs 90-112). Feb 2006 .5] amend the SCR by placing a responsibility on duty holders to prepare a suitable verification scheme for their installations to ensure independent and competent evaluation of those elements of the installation which are critical to safety (known as safety-critical elements . The ATEX (Atmospheric Explosion) Directives 94/9/EC [C.10] and 1999/92/EC [C.11] cover electrical and mechanical equipment and protective systems. • • UKOO FEHMG (now re-issued as Part 0 of this Guidance) ISO 13702:1999 Petroleum and natural gas industries -.8]. PFEER. C.3.6] provides guidance for duty holders on how the regulator intends to enforce the SCR and its supporting regulations.2 Assessment principles for offshore safety cases The ‘Assessment principles for offshore safety cases’ document (APOSC) [C. which may be used in potentially explosive (and ignitable) atmospheres. • • Institute of Petroleum. The structured approach listed above is generic.com The Design and Construction Regulations DCR [C. The most relevant North Sea oriented guidance published by the industry are the Interim Guidance Notes (IGN’s) [C. (IP15) [C. escape and rescue arrangements (APOSC paragraphs 113-144).Requirements and guidelines For ignition prevention and Hazardous Area Classification.9]. Page 248 of 261 152-RP-48 Rev 02. C.1 Introduction Guidance documents are available from the Health and Safety Executive for the legislation mentioned above. ‘Area Classification Code for installations handling flammable fluids’. The APOSC document requires the following be demonstrated for Major Accident Hazard assessments: Acceptable safety cases will demonstrate that a structured approach has been taken which: • • • • • • identifies all major accident hazards (APOSC paragraphs 38-48). SI 1995/743. They define how these SCEs are expected to function during and after explosion events. standards and guidance are available covering elements related to the hazard.Control and mitigation of fires and explosions on offshore production installations -.

but it should be noted that they are not specifically oriented towards the offshore sector.14] These documents only cover operational leaks rather than accidental releases.gov.htm HSE Books have published a guide which sets out an overall framework for decision taking by the HSE (R2P2) [C.3. The three-phase project sponsored by UKOOA and the HSE to develop updated guidance for the treatment of fire and explosion hazards of which this document is Part 2. [C.13] is available. scope and applicability of these documents varies.fireandblast.20] for the Design of Offshore Facilities against Fire and Blast Loading.hse. It has been an aim that all three documents should adopt compatible approaches as they reflect the same underlying hazards and confront common issues. nominal fire loads and modified code check methods have been in widespread use for some years. For equipment in hazardous areas ‘BS EN 1127-1: 1998 Explosive atmospheres. C. Whilst the status.16] http://www. ISO development of a standard dealing with accidental actions as part of ISO CD/19901-3 [C. In the case of fire hazard analysis. three documents which are currently under development are discussed. Explosion prevention and protection’ [C. involving structural.2 Recent developments (to 2005) In this section. process. http://www.12]. Policy and Guidance on reducing risks to ALARP in Design [C. 152-RP-48 Rev 02. Classification of hazardous areas’.hse. There is now widespread recognition that a multidisciplinary approach to design and assessment is required. C. EN ISO 13702 [C. API Recommended Practice (API RPFB) [C.uk/hid/spc/perm12.gov.18].htm Principles and Guidelines to Assist HSE in its Judgement that Duty Holders Have Reduced Risk as Low as Reasonably Practicable [C. These are:A. Feb 2006 Page 249 of 261 .uk/dst/alarp1. Alongside UK legislation. ‘Electrical apparatus for explosive gas atmospheres Part 10. Recent developments have given rise to the consideration of similar techniques for application in the explosion case. They do not define the extent of hazardous areas from the point of view of explosion and fire risk. probabilistic methods appear to be of lesser importance than for explosions.19]. mechanical. BS 5958 : 1991 ‘Code of practice for control of undesirable static electricity’. as the extreme events are not so disproportionately severe and can largely be prevented or designed against. In Fire assessment. B. essential elements and performance standards for each of the systems required to manage possible hazardous events on the installation. control and instrumentation and other engineering disciplines.com • • • BS EN 60079-10. Guidance on the demonstration of ALARP is available throughout this Guidance and from the following sources.17].15] also addresses the need to develop a fire and explosion strategy (FES) which describes the role. it is still possible to compare the technical content and approaches in a meaningful way. compared and contrasted. [C.

There is agreement that the ISO codes for offshore structures should apply across the European Union and other countries in place of any specific European (CEN) standards. 19900 and 19903 ISO 19901-3 Informative and 13702 ISO 19901-3 ISO 19901-3 ISO 19901-3 152-RP-48 Rev 02. It makes full use of (and reference to) recently validated research so as to set out the minimum requirements and to indicate current good practice for design.. whilst the remainder is Informative to provide additional information about other considerations and to indicate sources of guidance.fireandblast. Although the code will have a very wide audience.1 The new API RPFB In 2001 it was agreed that the existing guidance on fire and blast engineering which formed part of the 21st edition of API Recommended Practice (RP-2A-WSD) [C. including mitigation. Simplified assessment methods are described.. with philosophy and hazard management. Table C-1 . Like the API code.2 ISO 19900 update The new suite of ISO codes for offshore structures is currently being prepared by a large number of national and international experts.. C.22]..3..21] should be augmented by a new separate RP on fire and explosion engineering.... Part of the code is Normative (mandatory). ISO 19901-3 is written with practising project engineers in mind. The required scope of assessment for both conceptual and detailed design may be limited for installations that can be considered less safety-critical... which is proceeding in parallel.com C.2. Resistance to fire and explosion is covered particularly in ISO 19901-3 for Topside Structures [C... Scope and range for the new guidance documents Subject area Explosion and Fire Philosophy Explosion and Fire Hazard Management Interaction of Explosion and Fire Hazard Management Explosion and Fire Loads Design Explosion Loads Response of structures to Fires and Explosions UKOOA Guidance Parts 1 and 2 Parts 1 and 2 Parts 1 and 2 Part 3 (preliminary treatment Parts 1 and 2) Part 1 Part 3 (preliminary treatment in Parts 1 and 2) API RP API 75 Refers to the API 14 Series Refers to the API 14 Series API RP ‘Fire and Blast’ To be addressed API RP ‘Fire and Blast’ ISO ISO 13702 and 19900 ISO 13702. (Natural hazards such as extreme weather and earthquake are dealt with in other codes.. the ISO code recognises that the significance to life from fire and explosion events depends to a large extent on mitigation by the structural barriers that are fitted to protect the people and safety critical equipment on board an installation. Table C-1 illustrates the coverage of the subject areas in each document. This document is limited largely to a discussion of consequence assessment. The section on Accidental Actions includes requirements and useful guidance on fire and explosion hazard management as well as vessel collision.3. dealt with by reference to API and other reference documents.)... dropped objects and helicopter crash scenarios. Feb 2006 Page 250 of 261 ..2.

2] [C.18] [C.20] [C. Feb 2006 Page 251 of 261 .4 [C.13] [C.12] [C.7] [C.fireandblast.com C.4] [C.15] [C.11] [C.14] [C.19] [C.17] [C.8] [C.3] [C.22] References 152-RP-48 Rev 02.5] [C.9] [C.16] [C.10] [C.6] [C.1] [C.21] [C.

2. part of a CEC sponsored project on fire modelling D. The very rapid development of faster computer processors and more memory at reasonable prices enables the user to use finer meshes that will yield to solutions that are more accurate. mathematical modelling of fires is now becoming the preferred tool. due to the high cost associated with largescale experiments. thus taking into account uncertainties in the underlying processes. It is rare to find that the models are not verified. However. The pool fire models did not undergo the same level of scrutiny. There is little or 152-RP-48 Rev 02.1 General: There are a number of mathematical models of varying level of complexity that can be used for modelling hydrocarbon fires on offshore installations: • • • • • • Probabilistic models Empirical models Zone models CFD models Evacuation models Video analysis D.com Annex D Review of models D. These models work on defining an event tree and assigning different levels of probability of an event occurring. Feb 2006 Page 252 of 261 . some interesting models coming on-stream – some of which are only now becoming feasible to use due to the improved performance of the computers.1]. but there are. The lack of validation of the fire models was recognised by the Model Evaluation Group.fireandblast. There are two important steps to complete before any model can be used in anger and its results to be trusted: verification – ensuring that the correct equations with correct source terms are solved. The outcome of the Modelling Evaluation Group was a number of documents outlining minimum requirements for validation of jet fire models. though most of the points made on jet fire model validation also apply to pool fire models.2 Types of model D. nevertheless. The development of physical sub-models is not as rapid.2.2 Probabilistic models Probabilistic models have as yet found limited use for modelling fires on offshore installations.1 Introduction Traditionally large-scale experiments were carried out to study fires. Modelling and experiments are mutually exclusive. Computational Fluid Dynamics (CFD) modelling done properly is not cheap and there are outstanding uncertainties associated with the physical sub-models implemented in the code. The validation process is time-consuming. expensive and laborious – validation is often incomplete. but should be viewed as complementary tools. D. and validation – showing the model’s accuracy.

to identify scenarios that require the use of more sophisticated tools. momentum and heat.e. pressure and velocities. The models should not be used for fuels or conditions that were not covered in the experiments. Another application of probabilistic models is to provide a realistic heat release rate.e. jet fires on an offshore installation. A set of ordinary differential equations for mass. Empirical correlations are easy to use and yield results instantaneously. fluid and wall temperatures.2. and the simulations will not always converge. The estimates could be conservative. these models do rely on the identification of all credible events and their associated probabilities. the more realistic representation of the physics comes at a cost. The output from a CFD simulation includes velocities. up to the order of weeks. energy and species mass fractions is solved for each zone. etc. Only very simple configurations can be modelled. The flow is divided into different zones that can exchange information. especially for combusting flows. but the CFD models are by far the most generally applicable and flexible tools. e. The models cannot take account of buildings and other structures. Feb 2006 Page 253 of 261 . etc. A probabilistic approach to estimating the heat release rate could be used to ensure that the heat release rates used in make CFD simulations are more realistic. and numerical mathematics. but these models also incorporate some flow physics. It can be timeconsuming to define a CFD model. An extrapolation of the probabilistic heat release rate model to other scenarios. temperatures. species concentrations (mean and fluctuating component). wall temperatures as functions of distance through a material. density. CFD models. D. A number of strongly coupled non-linear partial differential equations provide a more realistic representation of the flow physics.5 Computational fluid dynamics models CFD models are the most complex of the fluid flow modelling tools. CFD is a knowledge-based activity and the user of CFD must have a thorough understanding and experience of a range of topics. However. D. i. chemical kinetics. may not be straightforward.2. This type of model is only valid for the fuels and conditions that were studied in the experiments. The output from zone models would include heat fluxes. but tend to have short computer run times. There are uncertainties associated with modelling turbulent flow and combustion. mass.2. This type of model is very useful as a scoping tool. but it cannot be guaranteed to be the case for all situations. the run-times can be very long. Zone models are also limited to modelling relatively simple geometries. wall temperatures. One should therefore be wary of extrapolating the results to situations not covered in the experiments. 152-RP-48 Rev 02. i. There are limitations with empirical correlations. or the topography of the site.com no reliance on fluid flow models with inaccurate or incomplete representation of the fire. Furthermore.3 Empirical correlations Empirical correlations are based on experiments. heat fluxes. usually (much) less than an hour.4 Zone models Zone models are also based on empirical information.g. Zone D. Empirical correlations are very useful for a quick assessment of the problem. These models require more input from the user. as well as in the definition of the fire source and ambient conditions.fireandblast. including fluid mechanics. pressure. The correlations provide information such as heat fluxes. species concentrations. momentum. There is still a reliance on empirical data.

The emphasis is on the CFD models as these incorporate the most realistic representations of the physical processes. like Spalart-Allmaras. phase change in the vessels subjected to impact of a jet fire with a CFD model. including parts of the surroundings. Nevertheless. 152-RP-48 Rev 02. k-ζ model or Menter’s SST model. DES is not as computer intensive as LES.2. is used in the near-wall region and LES is used in the free shear flow. LES requires fine meshes in order to resolve all relevant length scales.7 Video analysis Statistical analysis of video footage of jet fires has been used to provide information on the likelihood that the fire engulfs a vessel. It might be sensible to reduce the problem size.2] – both in terms of current industry standard and of state of the art. though this is not always the case. DES is a hybrid approach where a simple turbulence model. since it is usually assumed that the movement of people does not affect the flow significantly.2. i.1 Industry standard Routine calculations are usually carried out using either the k. The weaknesses of these models are well documented. as it is very difficult to recreate in a controlled experiment the urgency. The LES simulations must also be carried out for a long time.5. The models are sometimes applied in situations where it would be advisable to use some other turbulence model. D. The run times would be prohibitively long. but are now finding widespread use for other applications. as well combustion. etc. multi-phase or single-phase flow.6 Evacuation models Evacuation models have been used in conjunction with CFD models. It is not feasible to model the whole offshore installation.fireandblast. There are also problems with the treatment of walls in wall-bounded flows. While the models might not be able to provide very accurate results at all times they nevertheless provide the opportunity to study trends. D.e. There are also large uncertainties in some of the physical sub-models in the CFD codes that make the use of CFD less attractive. This information would not normally be used on its own.com D. Some of the models are becoming sophisticated in that relationships between individuals can be prescribed. It is also necessary to provide a sensible initial guess for fluctuating velocities.2. This information has been used with empirical correlations. D. but can also be run on their own. There is a definite need to revise the assessments of applicability of the modelling techniques as the models and the available computer resources develop further.2 State of the art State of the art in turbulence modelling is Large-Eddy Simulation (LES) or Detached-Eddy Simulation (DES). The evacuation models can be run as a post-processor. while still providing the same amount of flow information. by only considering a subset of the installation. how geometrical changes might affect the solution.2. Feb 2006 Page 254 of 261 . These techniques were originally aimed at (external) aerodynamic flows.model. these models do quite well in many applications. Validation of evacuation models is difficult. since there are no large-eddy structures in the near-wall region. indecision and stress brought on in an individual when being subjected to a real fire.5. to build up reliable flow statistics. A more in-depth description of the various modelling techniques is presented in the report prepared by the Health and Safety Laboratory [D. in real-time. individuals can make their decisions on which exit to use.

1 Industry standard Routine calculations are usually carried out using either the k-ε model. Nevertheless. Fluid-Structure Interaction (FSI). There are a number of different packages in which the fluid flow solver and the structures solver are fully integrated. concentration of toxics. The use of simpler models as scoping tools could highlight scenarios that warrant an in-depth investigation with CFD. While the models might not be able to provide very accurate results at all times they nevertheless provide the opportunity to study trends. DES is a hybrid approach where a simple turbulence model. release directions.2 State of the art State of the art in turbulence modelling is Large-Eddy Simulation (LES) or Detached-Eddy Simulation (DES). wind speeds.3. It is now more feasible to integrate the two types of modelling due to the availability of faster computers with large memory. is used in the near-wall region and LES is used in the free shear flow.2.1. The LES simulations must also be carried out for a long time. The models are sometimes applied in situations where it would be advisable to use some other turbulence model. different wind directions.8 Miscellaneous In light of uncertainties with the various types of models. and FSI is therefore finding increasingly widespread use. Ideally a great number of scenarios. D.e. Filters for converting the fluid flow results into something that can be read by the structural analysis code enabling the coupling of separate a fluid flow and structural solver are also available. need to be investigated. in real-time. D. transport of toxic products and provision of output from a fluid flow simulation using CFD in the correct format to be used in structural analysis using a Finite Element code. to build up reliable flow statistics. i. This is not feasible to do with CFD due to the long computer runtimes.fireandblast. LES requires fine meshes in order to resolve all relevant length scales. Traditionally fluid flow modelling and structural analysis have been carried out separately. Nevertheless. It is also necessary to provide a sensible initial guess for fluctuating velocities. It is vitally important that the simple model includes all the important physical processes.1 Turbulence models D.3.3 Status of the sub-models in CFD models D. The required outputs from the CFD code are heat fluxes. these models do quite well in many applications. There are also problems with the treatment of walls in wall-bounded flows. 152-RP-48 Rev 02. it would be desirable to model. etc. Some of the integrated fluid flow solvers are limited to inviscid flows and are thus not suitable to fire modelling. Therefore the suitability of a simple model as a scoping tool will have to be assessed on a case-by-case basis. Feb 2006 Page 255 of 261 .1. These techniques were originally aimed at (external) aerodynamic flows. i. since there are no large-eddy structures in the near-wall region. say. while still providing the same amount of flow information.3. how geometrical changes might affect the solution. However. The weaknesses of these models are well documented. it might be prudent to carry out simulations where a zone model and a CFD model can provide input to and output to each other.e. the computer runtimes are roughly an order of magnitude greater than for a comparable fluid flow simulation. escalation due to the collapse of parts of the structure. like Spalart-Allmaras.com D. DES is not as computer intensive as LES. but are now finding widespread use for other applications. k-ζ model or Menter’s SST model. release locations.

e. distribution of different sizes. and the Eddy Break-Up (EBU) model for premixed combustion and the Zimont model for partially premixed or premixed combustion. with a large number of intermediate species and reactions describing the combustion of even the simplest hydrocarbons. This is then coupled to a detailed or reduced chemical kinetics scheme. these calculations place great demands on the available computer resources.2 Multi-phase flow D. i.1 General There are uncertainties associated with the modelling of combustion processes. D. as a part of the bulk fluid.2 Gaseous combustion Industry standard: Routine simulations of combusting flows usually involve the use of the Eddy Dissipation Model or. D.3. and water mitigation. there are great uncertainties associated with the modelling of the interfacial information transfer between the phases.3. The simpler combustion models introduce constants that are not universally applicable and need to be adjusted for each fuel.2.e. Heavier hydrocarbons are well characterised and will of course change with time and location of the wellhead within each reservoir. This will provide a means of heat release (location and magnitude) but will not provide any information of the amount of toxic products that are produced. The 152-RP-48 Rev 02.e.3.3. For larger problems the dispersed phase is treated as continuous. where the phases have different momentum. However. When dealing solids and droplets that have are not mono-disperse. and the lack of understanding of the processes involved.3. and the interphase exchange of these quantities represent state of the art. Feb 2006 Page 256 of 261 . gas-solid. one would not normally attempt to follow each individual particle or droplet but rather consider groups of particles. State of the art techniques in gaseous combustion modelling are the Probability Density Function (PDF) approach and the Conditional Moment Closure (CMC) model. such as mixed-isburnt or Eddy Break-Up-type models.1 State of the art A two-flow model. a laminar flamelet model with a prescribed PDF.3.1 Industry standard The choice of multi-phase model depends on the flow.3 Combustion models D.3. Two situations that are of particular importance on an offshore installation are when a jet release is made up of gas and condensate. The fraction of dispersed phase is also of importance when choosing which model to use. less likely. i. A transported-PDF method where a velocity-scalar PDF is combined with either LES or Reynolds Averaged Navier-Stokes could be used to model dispersed multi-phase flows. i. However. The need for detailed treatment of chemical kinetics in fires in offshore installations is not likely to great. D.3. The CMC model can also be used to represent detailed chemical kinetics and does not place the same demand on the computer resources as the PDF transport approaches D.2. as it is not possible to accurately resolve the flame front for flows considered in the present report. The PDF method involves solving a transport equation for the PDF.3.3. liquid-solid or a gas-liquid-solid system.fireandblast. are being used. with all particles in each group having same size and properties. whether it is a gas-liquid. Fires are also sometimes represented by a volumetric heat source. Further uncertainty is introduced. Some of these are related to the complexity of the chemical kinetics. for non-premixed combustion.3 Liquid combustion Industry standard: It would appear that relatively simple combustion models. where both phases are combustible.com D. energy and heat.

4.com complexity of the combustion of heavier hydrocarbons makes it intractable to attempt to use more sophisticated combustion models. where particles in each group have the same size and properties might be feasible.3. heat conduction (possibly with deteriorating PFP) and phase transition makes this problem intractable for CFD models in many cases. Though there is a trade-off between accuracy and speed. The subsequent heating up of the content of the vessel could lead to pressure build-up due vaporisation of hydrocarbons. as more rays used will up to a point result in more accurate 152-RP-48 Rev 02. is used to protect the equipment from the fire. It might be possible to use a transported PDF method with either detailed or reduced chemical kinetics or the Conditional Moment Closure (CMC) model. These wall functions have usually been derived for natural convection.e.3. D.e. It might be feasible to combine the CFD model with a zone model that can provide the conditions in the vessel. The momentum imposed on the plume greatly affects where and how fast the hot exhaust gases travel.fireandblast.e. PFP ages and is affected by the weather. i. The use of wall functions is the industry standard for modelling convective heat transfer at walls.3.4.3. no references to combustion modelling of mixtures of heavy hydrocarbons using either of these two methods have been found in the open literature.3] is frequently used and offers accurate predictions at a relatively reasonable cost. wall functions should be modified to account for forced convection if the heat transfer is a combination of forced and natural convection.3. i. D.4 Heat transfer models D. coating of process equipment and vessels. Feb 2006 Page 257 of 261 . no references to combustion modelling of mixtures of heavy hydrocarbons using either of these two methods have been found in the open literature. a Eulerian-Lagrangian approach where one tracks groups of droplets. State of the art: The computational cost of CFD calculations for non-reacting multi-phase flows is already high. There is also a risk that the coating is removed due to the erosive effect exerted by a high momentum jet. D. However. However. i. State of the art: It might be possible to use a transported PDF method with either detailed or reduced chemical kinetics or the Conditional Moment Closure model. D. The added complexity of the combustion processes makes modelling of multi-phase combustion very expensive computationally for the flows considered in the present report. Eddy Dissipation or the Zimont model. The actual combustion would be modelled using a simple combustion model.3. mixed-is-burnt.2 Convection Convection plays a very important part in the heat transfer processes from a fire.1 Conduction Conduction of heat is of great importance.4. The state of the art wall functions are the scaleable wall functions that are more accurate than the old equilibrium wall functions. However. However. The complexity of the problem that involves fluid flow. One possible scenario is when a jet fire impacts on a vessel. combustion. Passive Fire Protection (PFP).3 Radiation Industry standard: The Discrete Transfer Model (DTM) by Lockwood and Shah (1981) [D. This has implications for the evacuation of personnel. CFD modelling of smoke transport carried out at Cambridge University and HSL showed that the choice of convective heat boundary condition greatly affects the flow.4 Multi-phase combustion Industry standard: One cannot afford model the combustion of each individual droplet in a spray.

It is important to be able to model the movement of these toxic substances. D. Validation is a very difficult. the smoke concentration becomes too high.6]. The accuracy is dependent on the number of rays used.4 Dispersion of toxics The term “toxics” encompasses many products of combustion including carbon monoxide. soot and smoke. A more sophisticated approach is to use a laminar flamelet method. as it can be used to determine how long time the occupants have before. that all the important terms have been included in the equations.4]. State of the art in radiation modelling is stochastic modelling using Monte Carlo simulations with either a narrow band or a wide band model. i. It is also possible to model the production of CO and smoke via a combustion model. and two transport equations for the soot volume fraction and soot number density. This is an expensive technique.e. respectively.3 Validation Definition: Validation is the process of demonstrating that the model provides a sufficiently accurate representation of the real world. The jet fire models on the other hand were scrutinised a much detail.4 Miscellaneous issues D. Another commonly used simple model is the P1 radiation model that was developed for coal combustion. Dispersion of toxic products can be modelled in a number of ways. One of main difficulties lies in that there are an infinite number of different scenarios that ideally should be investigated. This Model Evaluation Group (MEG) held a number of open meetings where mode developers and academics discussed the state of fire modelling at great length.4. the pool fire models were never properly assessed. D.3. see Fiveland (1988) [D.e. i. but the high computational cost of LES and DES will probably preclude the use of these approaches for modelling of an entire offshore installation.fireandblast. Also frequently used are radiation models based on the Discrete Ordinate Model.2 Verification The purpose of the verification process is to show that the correct transport equations are solved. D. Eddy Dissipation model.e.4. LES and DES techniques are likely to be used for modelling of smoke transport. It is then necessary to solve two transport equations for mixture fraction and mixture fraction variance. There are correlations that would provide an estimate for the amount of CO and smoke produced by a particular fuel. Unfortunately. D. CO and smoke are frequently treated as a single passive scalar. Feb 2006 Page 258 of 261 . A number of recommendations for how the models should be validated and the results of the validation studies be reported were presented.4.1 General Committee of the European Community (CEC) sponsored a project in the area of Major Industrial Hazards with the aim to establish suitable criteria and procedures for model verification and validation.5] or Chui and Raithby (1993) [D. Raithby and Chui (1990) [D. costly and time-consuming exercise. which solve the radiative energy transfer equation for a number of solid angles. This is clearly not feasible. It is therefore important to select a set of representative scenarios that are run each 152-RP-48 Rev 02. and propose further development and validation of the physical sub-models. Soot can also be modelled with a version of the Eddy Dissipation model that has been adapted to soot modelling.com radiative flux predictions. Most CFD codes and the models implemented therein will have been verified. surveying the state of the fire models for jet fires and pool fires. say. and thus provide information upon which to draw up an emergency evacuation plan. i.4. but it is suitable for complex geometries and is potentially a very accurate method.

However. Time step dependency. A sensitivity study comparing the results of simulations on three meshes of different fineness will show whether the solution is grid independent. The results should be investigated if there are any differences between two solutions. Sensitivity to choice of boundary conditions. It is therefore not sensible to make hard and fast rules about mesh sizes. Grid dependency. D. it is not certain that the extra information about the combustion provided by the CMC and the transported PDF methods is required. Effects of choice of spatial and temporal discretisation methods on the solution.fireandblast. as a great deal of effort is going into further refinement of the models. Ray dependency (radiation model). to show that the these factors have been investigated. and Inclusion of buoyancy in the transport equations for momentum and turbulence quantities. i. (2002) [D. NAFEMS has also produced guidance document on the general use of CFD. DES-like techniques are also better suited to wall-bounded flows than LES on its own. Casey and Wintergeste (2000) [D. Settings of turbulence and combustion model constants. There should be no differences in the results obtained with the old and news releases unless bug fixing to a particular. It is therefore likely that the simpler models.8] and HSL has produced a Best Practice guidance on modelling of smoke transport. Combustion modelling using the CMC model holds great promise for the future. Feb 2006 Page 259 of 261 . These are listed below in no particular order: • • • • • • • • • • Mesh quality. It is also not sensible to specify the number of rays to use when modelling radiative heat transfer.9]. These factors should always be taken into consideration in CFD simulations. Gobeau et al. though there are concerns over the coarseness of the meshes that are used in the calculations. D.4 Issues affecting accuracy of predictions There are a number of factor that influence the accuracy of the CFD model predictions. There are a number of guidance documents on the use of CFD for various types of flows. if transient simulation.4.4. A sensitivity study of the effect of changing the number of rays on heat fluxes should be carried out.com time a new release of the code is due to be distributed. if applicable. especially given the level of uncertainty in the modelling and the increased computational cost. It is important that reports describing CFD modelling should also include this information. Many simulations using an LES technique are also not run for a sufficiently long time (in real-time) to provide reliable flow statistics. Computational cell size in the near-wall region. The use LES to model combusting flows has increased greatly. relevant model has been carried out. ERCOFTAC has produced a document providing Best Practice guidelines on the general use of CFD. The DES or similar hybrid technique combining LES and a simple turbulence model will find increased use and be applied to combusting flows.7]. The computational overhead with CMC model is considerably lower compared to that of the transported PDF methods.5 Future developments The rapid development and availability of cheap and powerful computers with large memory will yield more accurate results without making any improvements to the numerical algorithms and the physical sub-models. Convergence. if applicable. 152-RP-48 Rev 02.e. NAFEMS (1996) [D.

ERCOFTAC. which would significantly increase the computational overhead. Special Interest Group on Quality and Trust in Industrial CFD – Best Practice Guidelines. 1995b. H. 2002. J. D. [D. Cadarache. 1995c.Assessment of Computational Fluid Dynamics. EU Report No. DES. 64. 2000.5] Merci.8] Model Evaluation Group. FL... and Wintergerste. 25-28. USA. S. EUR 15990 EN. M. Commission of the European Communities. [D. Forkel.com Eddy Dissipation model.. [D. the Zimont model and laminar flamelet models with prescribed PDF. Ledin. Guidance for HSE Inspectors: Smoke movement in complex enclosed spaces . Improved LES-. [D.. EROFTAC Bulletin No. Commission of the European Communities. Brussels. Boca Raton. [D. 1995a. Bender.4] Gobeau. Guidelines for Model Developers. NAFEMS Document Ref. D. it may be necessary to be to resolve the interface between the different phases. France. DG-XII. F. Model Evaluation Group – Report of the Second Open Meeting. Turbulence-Chemistry Interaction in Turbulent Flame Simulations – Transported Scalar PDF Approach. heat and mass between different phases. Protocol for Model Evaluation. pp. 2005... C.7] Model Evaluation Group. [D. heat and mass between different phases in experiments. R.3] CRC. N. 1996. and Roekaerts. 1998. CRC Press/Springer Verlag. [D. 2005. However. R. CFD Analysis: Guidance for good practice. 5760.. 19 May. No. R. The Handbook of Fluid Dynamics. 64. J. R0063. Feb 2006 Page 260 of 261 . Ed: Johnson. Brussels. B. It is also very difficult to measure interfacial transfer of momentum.2] Casey. and Lea. will continue to be used for the foreseeable future There is great uncertainty in the modelling of interfacial transfer of momentum.1] Carregal Ferreira. DG-XII.. [D. HSL/2002/29. W. 1994.9] NAFEMS. This is an area that should see improvements as more sophisticated measurement techniques are employed.. 152-RP-48 Rev 02.fireandblast.. H.6] Model Evaluation Group.5 References [D.and SASModels for the CFD-Simulation of Chemically Reacting Flows. in terms of computer runtimes and memory requirement. pp. T. HSL Report No. Menter. ERCOFTAC Bulletin No.

fireandblast. Feb 2006 Page 261 of 261 .com Annex E Checklists To be added 152-RP-48 Rev 02.

Sign up to vote on this title
UsefulNot useful