76 terms

Terms Definitions
Why are accident investigations carried out Accident investigations are carried out to.

To identify the immediate root causes of the

incident - incidents are usually caused by unsafe
acts and unsafe conditions in the workplace, but
these often arise from underlying root causes.

To identify corrective actions that will prevent a

recurrence - The main reason for investigating.

What are the four steps in the investigation The four steps in the investigation process are.
process
Step 1:

Gather factual information about the event.

Step 2:

Analyse that information and draw conclusions

about the immediate and root causes.

Step 3:

Identify suitable corrective measures.

Step 4:

Plan the remedial actions.

Identify the categories of staff who might A simple investigation might be carried out by the
be considered useful members of an line manager of the area; a more detailed
internal accident investigation team investigation often involves a team of investigators
that might include

• A safety specialist
• Senior managers
• A technical specialist
• A worker representative

Offshore investigating teams may also include

installation specialists from services such as
drilling, well services, maintenance, process, and

List the types of documentation which
might be consulted during an accident
investigation
What are the two categories of immediate
cause of accidents/incidents
A worker has been hit by a reversing
vehicle in a loading bay.
List possible immediate causes and root
causes
deck crews.
Various documents may be examined during an
accident investigation, such as:
Company policy
Risk assessments
Training records
Safe systems of work
Permits-to-work
Maintenance records
Disciplinary records
Internal incident report forms
Log book entries
Computer printouts relevant to the situation
Immediate causes are the unsafe acts and unsafe
conditions that gave rise to the event itself.
These will be the things that occurred at the time
and place of the accident.
For example a worker slips on a patch of oil spilt
on the floor
Immediate causes:
The slip hazard = unsafe condition
The worker walking through it = unsafe act
Immediate causes for such an accident might be:
• Failure to secure the load on the pallet
• Poor road positioning of the truck close to a
pedestrian exit
• Aggressive breaking by the truck driver
• An inattentive pedestrian stepping out in front of
the truck

Give the meaning of the terms:
Lower Flammable Limit - LFL
Upper Flammable Limit - UFL
Give the meaning of the classification
"Carcinogenic"
What are the main dangers associated with
LPG
On investigation each of these immediate causes
might have their own separate root causes such as:
• No training for the driver, who is new to the
workplace, has not worked with this type of load
before and is unaware of the load securing
techniques required
• Lack of segregation of pedestrian and traffic
routes; no barriers and no markings to separate
the two
• Lack of proper driver induction into the new
workplace so they are unaware of the layout and
position of pedestrian exits, etc.
• Poor maintenance of the truck
• No refresher training for existing staff, meaning
that experienced staff become complacent
The Lower Flammable Limit - LFL or Lower
Explosion Limit LEL:
The minimum concentration of fuel in air that is
sufficient to allow combustion to occur.
Bellow the LFL, the mixture is too lean to burn.
The Upper Flammable Limit - UFL or Upper
Explosion Limit UEL:
The maximum concentration of fuel in air that is
sufficient to allow combustion to occur.
Above the UFL the mixture is too rich to burn.
Carcinogenic
Can induce the growth of malignant tumours.
The dangers of LPG lie with its flammability and
explosive properties, and the fact that it is stored
under great pressure.
And hence very low temperature, to retain its
liquid state.
 On release, LPG reverts to its gaseous state, with
rapid and considerable increase of volume.

What is the purpose of Anti Foaming An anti-foaming agent or "defoamer" is a chemical

Agents additive that reduces and hinders the formation of
foam in industrial process liquids

What term is applied to drilling wastes that Low Specific Activity sludge's - LSA Sludge's
contain naturally occurring radioactive
materials - NORMs

Which four elements are common to health The common elements are:
and safety, as well as general, management
systems Plan - implies having a considered policy

Do - concerns the arrangements for putting the

plan into practice.

Check - means it is necessary to assess or monitor

performance.

Act - means performance should be reviewed

leading to continuous improvement in the
management system.

What are the four main areas of risk to be The four main areas of risk are:
dealt with in the oil and gas processing risk
control system. Production workplace:

The field or rig and its associated facilities and

support systems; safe access and egress; work
environment; welfare facilities and
accommodation; pipelines and structures; and
electrical and communications
installations.

Plant and substances:

The drilling and pumping and transportation

systems of the oil and gas; how the oil and gas are
stored and handled; and all materials in use at the
process area.

Procedures:

Organisational procedures such as work and shift


In risk control barrier models e.g. bow-tie
Between what criteria are barriers placed,
and what are the barriers called
What main areas does a safety case/safety
report cover
Explain the meaning of the term
"Flashpoint"
Identify the three classifications within
flammability
patterns, job designs and the way work is done -
and managed.
People:
Management and leadership; competence and
placement of workers; training and health
surveillance necessary.
In a bow-tie diagram barriers are normally placed
between the initiating event and the release, and
the release and its consequences.
The barriers are placed to prevent, control or
mitigate the outcome of the event and are known
as
Lines of Defence (LOD) or Layers of Protection
(LOP).
Identification of major accident hazards.
Evaluation of major accident risks and measures
taken (or to be taken) to control those risks.
Arrangements for audit and audit reports.
Confirmation that an adequate safety management
system is in place.
Major accident prevention policies.
Identification of the safety critical elements in
place to manage major accident hazards.
Details of the emergency plan.
Flashpoint is the lowest temperature at which
sufficient vapour is given off to "Flash" - that is,
ignite momentarily (and not carry on burning)
when a source of ignition is applied to the vapour.
Flammability falls into three distinct
classifications:
Extremely Flammable - Flash point below 0
Celsius.

Explain where the flammable range exists
in a fuel/air mixture
What four factors must we consider to
ensure that the work that contractors do is
covered by our own usual methods of safe
working, to prevent accidents.
Identify the simple five steps used to
manage contractors
Highly Flammable - Flash point between 0 and 21
Celsius.
Flammable - Flash point between 22 and 55
Celsius.
The lower flammable limit is the minimum
concentration of fuel in air that will allow
combustion to occur - below this the mixture is
too lean.
The upper flammable limit is the maximum
concentration of fuel in air that will allow
combustion to occur - above this the mixture is
too rich.
The flammable range lies between these two limits
To make sure that the work contractors do is
covered by the usual methods of safe working:
Ensure that hazards of the contractors job have
been identified and steps taken to reduce the
risks.
Ensure that a representative of the owner or
operator is available to make sure contractors
follow the rules of the installation.
Ensure that all contractor workers know who the
site or installation contact person is, and how they
can be contacted.
Have procedures in place that ensure close and
safe working with contractors at all times.
Step 1 = Planning.
Step 2 = Choosing a contractor
Step 3 = Contractors working on site
Step 4 = Keeping a check
Step 5 = Reviewing the work
What is the Dow Fire and Explosion Index The Dow Fire & Explosion Index is a rapid hazard
assessment method for use on chemical plant
during process and plant development, and in the
design of plant layout

What are the four main areas detailed and Permits to work detail and explain:
explained in a Permit to Work
• The work involved

• The isolations required

• Hazards in the work to be carried out

• Precautions to avoid injury

Identify six types of work where a Permit to Six areas where a permit might be required are:
Work might be required
• Hot work - welding, burning, grinding, etc.

• Live or high voltage work

• Working at height

• Working over water

• Work in confined spaces

• Special permits for work carried out under

special conditions (usually maintenance work of a
none-routine nature)

Identify four areas other than electricity Safe isolation systems are concerned with the safe
where a safe isolation procedure might be isolation of (only four required)
used.
• Hydraulic (oil) power

• Pneumatic power and stored energy

• Residual energy

• Combustion engines

• Natural gravitational forces/weight

• Steam or high-pressure water systems

. Any combinations of or additions to the above

Explain the meaning of the term safe Safe Isolation
isolation
The interruption, disconnection and separation of
all the equipment's motive power sources in such a
way that this disconnection and separation is
secure by lockable means.

What five key principles should be Shift hand-over should be:

employed to ensure a safe shift handover.
High priority, conducted face-to-face

Two-way with both participants taking joint

responsibility

Carried out using verbal and written commands

Based on the analysis of the information needs of

the oncoming shift staff

Given as much time as necessary

Identify four causes of ineffective Ineffective communications come about from a

communications variety of causes (only four required)

Some information is missed or missing

Unnecessary information is included, causing

confusion

Information is inaccurate or misleading

The quality of information is poor

Information is not understood (either by

transmitter or receiver)

Information is not carried forward over successive

shifts

When are problems in communications The most problems in communications occur:

most likely to occur
During plant maintenance, when it runs across
more than one shift.

In areas where safety systems may be over-ridden

(e.g. Fire deluge system switched to manual).
 During deviations from normal work working, such
as breakdowns, or lack of spares.

When members of the team have been absent from

work for long periods.

If handover takes place between experienced and

inexperienced staff.

Identify four corrosion control practices Corrosion control practices and procedures include
and procedures (only four required).

Selection of materials: steels, corrosion resident

alloys, plastics.

Chemical treatments: biocides and corrosion

inhibitors.

Surface coatings: metallic, none metallic and

paints/organic coatings.

Cathodic protection: galvanising and impressed

current.

Process and environmental controls: control of

through-put, dehumidification.

Initial design: safe concept, engineering and detail

reviews, life cycle implications and corrosion risks.

Risk based inspection schemes allow a plan The four critical areas that risk based inspection
for carrying out critical inspections. schemes are based on are:

What four critical areas is this based on Ensure the risks are reduced to ALARP

Optimise the inspection schedules

Inspect the most critical items of plant, equipment

and components.

Use the most appropriate inspection methods.

Identify four ignition sources that could Ignition sources are (select four)
arise from maintenance or operations on an
installation • Electrical equipment

Routinely inspect and test to prevent faults

 developing that could cause sparks and
overheating.

• Hot work

Welding, burning, etc. - control with a permit-to-

work when done in sensitive areas.

• Smoking

Control and limit to restricted areas on site

(welfare areas).

• Cooking and heating appliances

Locate safely, confine to a galley offshore and use

carefully.

• Mechanical heat (overheating)

Control by good maintenance programmes.

• Deliberate ignition

Prevent by good security, perimeter fences

(onshore), CCTV and security lighting.

How is safe isolation, stoppage, draining It is vital for the safety of maintenance personnel
down and blanking of systems assured that services are stopped, isolated, drained down,
during a shut-down blanked etc. and remain in a safe condition for the
duration of the work.

This is ensured by the work being carried out

under the controls of a permit-to work.

The permit will have a completion section to

ensure that all systems are put back into operable
condition before start-up, to protect maintenance
and operations personnel

Identify the factors to be considered when There are many factors that have to be considered
assessing the health and safety competence when assessing the health and safety competence
of a contractor of a contractor.

One important factor is the contractor's experience

and training, both in the type of oil and gas
 process that they will be working on and offshore
safety requirements.

Whether the contractor has a health and safety

policy in place, supported by the necessary
organisation and arrangements, and the quality
and extent of risk assessments carried out are also
significant points to look for.

The contractor's recent health and safety

performance (including any accident history)
should be reviewed, as well as establishing
whether any enforcement action has been taken
against the contractor.

Evidence should be requested of the availability of

suitable, up-to-date method statements;
arrangements to monitor health and safety and
carry out site inspections; qualifications; training
records and skills cards carried by workers; and
membership of professional bodies or trade
associations.

Proof of the contractor having employer's liability

and public liability insurance is an important
factor, and references should be available from
previous clients.

Finally, it is important to take into consideration

arrangements for the selection and appraisal of
any subcontractors and how liaison with the
contractor is going to take place.

Describe three forces that may be imposed Three forces from:

on a surface object
Pulling (stretching) a material - tensile force

Pushing into a material - compressive force

A force not applied in line - shear force

External forces can be bending forces

Twisting forces - axial forces

Explain the term "Creep" Creep

 The gradual extension of material under a steady
tensile stress, over a prolonged period of time

What are the conditions necessary for The criteria necessary for stress corrosion cracking
stress corrosion cracking to occur to occur are:

A susceptible material

A corrosive environment

Enough tensile stress to induce the condition

Describe TWO of the factors that promote Factors that promote Brittle Fracture include (only
"Brittle Fracture" two required)

Low Temperature

Can affect failure in a brittle ductile mode. The

effect is particularly important for materials that
are subject to cold weather and LPG cylinders and
systems.

Impact or "Snatch" Loading

Can produce very high levels of stress very quickly,

particularly in such items as lifting equipment.

When subject to such loading, the material does

not have time to spread the load evenly
throughout the crystalline boundaries thus
producing high areas of stress.

On failure in these locations the failure propagates

throughout the material and total failure occurs.

Residual Tensile Stresses

Stresses "built into" the structure of the material by

the fabrication or assembly processes, such as
beams being pulled together or in the vicinity of
welds.

These tensile stresses act within the loading,

leading to brittle fracture, effectively "pre-loading"
the material.
 Inherent Brittle Material

Some materials have an atomic structure that has

difficulty giving way under stress and will fail by
brittle fracture.

Such materials include cast iron, glass and

ceramics.

Outline the advantages and disadvantages JH - to be Completed

of the different none-destructive testing
techniques

Why should all ESD systems be separate All ESD systems should be separate and
and independent of normal production independent to normal production controls so that
controls common cause failures can be avoided.

Control valves should be independent with ESD

systems, and not used for duel control or shut-
down as they are not designed for tight shut-off.

What precautions are required when Where bypass systems are provided around
maintenance by-pass valves are installed shutdown valves for maintenance purposes, they
around shut-down valves should be locked closed with the shutdown hand-
wheels removed.

Valves on hydraulic system return lines themselves

can cause failure, so should be locked open

What does the term "Blowdown" refer to Blowdown

The removal of liquid content from process vessels

and equipment to reduce the likelihood of fires or
explosions occurring.

It is similar to depressurisation carried out in the

gas process system

What are the purposes of a gas flare or A "Gas Flare" or "Flare-stack" is a tall discharge
"flare-stack" facility used to eliminate waste gas which is not
required in other processes or for transportation.

They can also act as safety systems for the non-

waste gases, venting process gases through
pressure relief systems.

In emergency situations, the flare can burn-out

 total reserve gas

Identify three different flare types Flare Types (three required)

Steam assisted flares

Have single burner tips and are elevated above

ground to burn vented gas in a diffusion flame.

Most refineries and chemical plants use this type

of flare.
Steam is injected into the combustion zone to
promote turbulence for mixing and to induce air
into the flame.

This ensures an adequate air supply and good

mixing.

Air-assisted flares

Use forced air for combustion and mixing, and

give a relatively smoke-free flame.

The burner has many small gas orifices in a

spider-shaped pattern inside at the top of a steel
cylinder, and the air for combustion is provided by
a fan in the bottom of the cylinder.

The fan speed can vary altering the amount of air

for combustion.

These are handy for use when there is no steam

available.

They are not normally used with large flares.

None-assisted flares

A simple flare tip without any steam or air mixing

facility, and limited to gas streams with low heat
content and low ration of hydrogen/carbon that
will burn well without producing lots of smoke.

They manage with less air to give complete

combustion and have lower combustion
temperatures.
 Pressure-assisted flares

Enclosed ground flares

What was thought to be the main cause of The main cause of the Buncefield incident is
the tank fire at Buncefield thought to be the overfilling of a floating roof
gasoline tank - tank 912

What is the main purpose of having a The main purpose of having a floating roof in a
floating roof in a fuel storage tank fuel storage tank is that the roof "floats" in that it
can move up and down within the outer shell of
the tank.

Always remaining immediately above the surface

of the liquid contained, minimising the air gap and
potential build-up of flammable hydrocarbon
vapours

What types of fluids should be stored in a Fixed roof tanks are intended for use with liquids
fixed roof tank having very high flash points i.e. of low volatility,
such as water, bitumen, etc.

What is the purpose of a bund around a Tanks should be surrounded by a bund to limit the
fuel storage tanks, and how is it generally spread of spillage or leakage, and should be
sized designed to hold at least 110% of the capacity of
the largest tank within the bund.

Making allowance for the space occupied by other

tanks.

In exceptional cases where there is no risk of

pollution or hazard to public, this figure may be
reduced to 75%.

What contradictory questions arose from In the Buncefield incident the bund was around
the Buncefield incident regarding bunding three tanks; the capacity of the bund was thought
of tanks to be sufficient, 110% of the largest tank.

But spillage into the bund from any one tank would
affect all tanks in the bund in the case of fire.

This questioned the value of common bunding

rather than individual bunds for each tank

Describe the two methods of filling tanks, "Top Filling" is achieved through a filling valve
and identify the circumstances where they arrangement - Usually gravity-fed - through the
would each be used top of the tank.
 More often used with smaller tanks and containers.

"Bottom Filling" where substance is delivered into

the tank under pressure through a closed pipeline.

This is the common method for larger tanks and

road tankers

What are the three stages of plant The three stages of decommissioning are:
decommissioning
Decontamination

Dismantling

Disposal

What are the three elements that make up Oxygen

the fire triangle
Heat - (Ignition)

Fuel

What are the five stages of combustion The five stages of combustion are:

Induction

Heat is initially supplied by an external source

which results in production of flammable vapour.

These vapours mix with air above the fuel and, if

sufficient energy is provided, the combustion
reaction begins between the vapour and the
oxygen.

Ignition

The point of ignition is reached when the reaction

becomes self-sustaining (and no longer requires
an external heat source).

At this stage combustion develops very quickly and

there is a dramatic increase in temperature as the
fire grows.

Growth
 Once ignited, the fire may spread through direct
burning or through the typical mechanisms of heat
transmission (convection, conduction or radiation).

The rate, scale and pattern growth depend on a

number of factors such as:

The nature, form and amount of oxygen (open,

ventilated versus sealed containment); the amount
of heat produced by the reaction.

Steady State

After the growth period the temperature stabilises

and the combustion process reaches a steady state
where the reaction between fuel and oxygen is
balanced until all the fuel is consumed.

Decay

Decay will begin when either the fuel or oxygen

has been consumed.

The fire will extinguish and gradually cool down.

In the early stages of decay, there is still a
considerable amount of heat; there is certainly
enough to cause re-ignition if more fuel or oxygen
is supplied.

In the latter case, admission of oxygen (e.g.

opening a window) into an oxygen-depleted room
can result in a sudden explosive re-ignition of
vapours.

List the three hazard zones and the Zone 0 or Zone 20 = Category 1 equipment
categories of electrical equipment to be
used in each zone Zone 1 or zone 21 = Category 1 0r 2 equipment

Zone 2 or Zone 22 = Category 1, 2 or 3 equipment

What are the two common types of boilers Steam Boilers - The two common types of steam
and the two forms of each boilers are:

Closed Systems

In which the unused condensed steam goes back

 through the system to be reheated.

Open Systems

Where the boiler vents unused steam from the

system, usually requiring a continuous flow of
water.

Closed and Open Boilers - are also in two forms

Firetube Boilers

(The most common type) having an outer shell (the

Firetube) with tubes of water inside it.

Heated gasses pass through the core of the

Firetube and heat water in the internal water tubes,
which creates the steam.

Watertube Boilers

The simplest boiler, having a vertical tube above

the heating source.

Water enters the vertical tube and is heated until it

becomes steam, which then passes out through
the top of the tube.

What is "Flame Impingement" and what Flame Impingement

problems are commonly caused by it
Is where a flame that is used to heat the water of a
boiler touches boiler surfaces, such as directly on
heated coils or pipework.

This can cause erosion and corrosion, cracking and

failure of the materials

Identify TWO none-destructive test (NDT) Two non-destructive testing (NDT) methods that
methods for identifying internal defects in will detect internal defects are ultrasonics, using
materials sound waves to penetrate into material,

and radiography using gamma or x-rays to

penetrate through the material, leaving a pictorial
image on film.

For the two methods identified, outline the The advantages of ultrasonics are that it can detect
advantages and disadvantages of each the precise location of internal defects and can
method
In relation to fire protection, outline the
principle of operation of a voting system
and when it might be used
Outline the main components of a fixed
water deluge system
Describe the difference between active and
passive fire protection measures
size many defects too.
Its disadvantages are that it is expensive, requires
a skilled operator and a power supply.
The advantages of radiography are that it can
locate the majority of internal defects and it gives
a permanent pictorial record of the defect.
Disadvantages are the radiation risk to the
operators and others in the testing area, and there
are limits to the thickness it can accurately
penetrate.
It needs a power supply and access to both sides
of the material tested.
Voting systems are used in order to minimise false
alarms, in cases where activation has
consequences such as shutting down production
(you don't want that unless it is absolutely
necessary as it will cost significant time and
money).
The principle of operation is that more than one
detector in a set must be triggered and it is in this
sense that it is called a "voting" system.
They can be set to different sensitivities depending
on the risk (typically two out of three).
Fire-water source, e.g. sea water.
Fire-water pump, sized to deliver the necessary
pressure and flow rate and designed to be
activated quickly.
Fire-water mains - the pipework transporting the
water from the pump to where it is needed; these
may be normally dry or for speedier response, wet.
Discharge nozzles (controlled by a single valve for
a given array of nozzles)
Passive Fire Protection
Is predominantly thermally insulating design
 elements that are put and left in place, like fire
barriers, fire resistant coatings and cladding.

They help stop escalation of the fire and protect

routes.

Active Fire Protection

Means measures that are brought into play when a

fire is detected, in order to actively
tackle/extinguish the fire, e.g. fixed sprinkler
installations, hoses and monitors

Outline the fire protection that would be For floating roof tanks the main means of fire
used on a floating roof tank protection is to use fixed foam installations which
spread foam around the rim seal.

Monitors and water deluge cooling sprays may also

be used

Outline what is meant by a "Fire and Basically it is a record of specific fire and explosion
Explosion Strategy" risk assessment.

It would typically involve considering:

• The forgeable fires/explosions (cellulosic,

hydrocarbon pool, hydrocarbon jet).

• Their likelihood of occurrence and likely severity

which may depend on:

 Location (accommodation, process module,

helideck, etc.).

 Nature of gas/liquid/, the way in which they are

being handled (temperature/pressure) and the
amounts in use.

 Complexity of the installation.

• Other related issues, such as:

 Human factors (i.e. how people behave in a

fire/explosion).

 Remoteness of the installation (proximity of

 external help).

This aids selection of the most appropriate

fire/explosion prevention and mitigation
measures.

Outline the tiered, three-level approach to The tiered three-level approach to emergency
emergency medical treatment medical treatment is:

Level 1 - Basic first-aid:

Intended as first line treatment to preserve life and

stabilise the injured:

Requiring the provision of an adequate number of

trained first-aiders (depending on the level of risk,
number of workers, installation remoteness, etc.)
and first-aid equipment (first-aid kits etc.).

Level 2 - Advanced first-aid

Requiring first-aiders with more advanced skills

(such as the use of specialised equipment or
methods).

Level 3 - Utilising medics or paramedics

With remote support from other medical

professionals, who will have specific medical
training and be capable of administering drugs,
advanced wound treatment, etc.

Distinguish between primary, secondary Offshore evacuation methods are:

and tertiary offshore evacuation methods
Primary Method

The usual none-emergency method, e.g. ship.

Secondary method

Used when the primary method is unavailable, e.g.

lifeboat launched from the rig.

Tertiary Method

Heavily reliant on the individuals own effort and


What is the difference between "recovery"
and "rescue"
Give a brief summary of the emergency
command structure for offshore
installations
A floating roof tank used for storing
petroleum products has no fire protection
in place. CCTV cameras are the only form of
leak detection currently used on the site.
You have been tasked with selecting
additional leak detectors and fire protection
equipment.
Outline the issues/factors to take into
account in selecting this additional leak
detection equipment
used as a last resort when all other methods are
unavailable, e.g. putting on lifejackets and survival
suits and jumping into the sea.
Recovery
Means that a person who has had to abandon an
installation using a secondary or tertiary method is
extracted from the sea or vessel by a rescue craft
(such as a standby vessel or search and rescue
helicopter).
Rescue
Is one step beyond recovery - it is recovery but to
a place where they can receive medical attention
In such circumstances the Offshore Installations
Manager (OIM) is in overall charge.
They will be assisted by two on-scene
commanders (one from drilling and one from
process), a permit controller, a radio operator and
an Offshore Installation Supervisor (OIS).
The location of the detectors
Taking into account the properties of the gas, such
as its density and tendency to collect in low-lying
areas.
Because of this, placing them at high level may not
be advisable; putting them in the bund at low level
might be better.
What are local air flows like
What dispersal or dilution properties will they
have?
How many detectors will be required, based on the
number of likely leak locations, such as valves,
joints, seams, ect?
We must provide adequate maintenance and
testing of the detectors and put in place
maintenance and testing plans and records.

Give the meaning of the term "Active Fire
Protection"
Identify TWO suitable forms of active fire
protection that could be used for this type
of tank
Outline what is meant by the term
"Flagging" when applied to vessels
Outline the options for personnel transfer
and boarding methods
Detectors will need an uninterruptable electrical
power supply in case of power failure on the
installation, and they must be robust enough to
endure the rigors of the environment and
intrinsically safe.
The detectors must be reliable.
Active fire protection means the provision of
equipment, systems and methods which, following
initiation, may be used to control, mitigate and
extinguish fires
A fixed foam deluge system at high level,
supplemented with foam monitors on the ground.
A water deluge system for cooling the outer shell
of the tank
International vessels must be registered to a
country and abide by its maritime regulations -
this is called "flagging".
For example, UK registered vessels ("UK Flagged")
must comply with the requirements of the UK's
Maritime and Coastguard Agency (MCA).
These requirements cover (very briefly):
Certification/approval of vessels, certain
equipment on board and crew members;
inspection of the vessel (to maintain
certification/approval).
Personnel transfer and boarding methods
Helicopter:
Depending on weather, location and whether the
vessel is fitted with a helideck.
Transfer Basket:
Transferred from ship-to-ship using the ship's
crane.
Gangways, bridges and accommodation ladders:
 The usual means of transfer between ship and
shore where a ship is moored at port.

Rope Ladder (for pilot transfer):

Usually transferred out at sea from a small pilot

boat to ship via a rope ladder hung over the side
of a ship.

Outline the four steps of the diving The four steps of the diving operation
operation management process management process are:

Compliance:

All parties should comply with all applicable

national, international, industry and
company/contractor requirements for the diving
operation.

Planning:

Covers a whole range of activities including such

things as: communications, job scope, initial
stages of risk assessment, competence,
system/equipment checks, emergency planning,
change management.

Execution:

Includes site rules, later stages of risk assessment

(on-site), briefings, permit-to-dive.

Measuring and Improving:

Review of the operation and any incidents and

what lessons can be learned.

Outline the general requirements for The course must cover both theory and practice
dangerous goods tanker driver training and the driver must sit an externally assessed
examination - for the classes of goods being
carried.

This gives him a certificate of competency, which

has to be updated at specific intervals.
 The course would cover some general aspects of
dangerous goods transportation but, for tanker
drivers, will also cover tanker specific issues, such
as:

Vehicle behaviour (e.g. load movement/surge)

Specific vehicle requirements

Filling and discharging

Outline why it might be important to plan There are two basic reasons why it might be
the route of a road tanker carrying important to plan the route of a road tanker
dangerous goods carrying dangerous goods.

1. Not all roads are suitable for tankers (narrow

roads, weak bridges).

2. The security threat (terrorism, theft) to the

valuable load being carried and its possible use as
a terrorist weapon.

Identify three risks associated with offshore The three risks associated with diving operations
diving are (note more than three mentioned here).

Divers and others involved could drown.

Divers could become trapped, e.g. by their own

airlines or by moorings, or become stuck in a soft
seabed.

Divers could encounter problems with their

breathing apparatus, such as faulty demand valves,
incorrect gas mixture, loss of gas.

Divers could develop illness during the dive, such

as blackouts, decompression sickness, nitrogen
narcosis or oxygen poisoning.

There could be communication errors leading to

mistakes being made.

Collisions could occur, e.g. a vessel escaping from

its moorings or from an ROV in use.
 The effects of extreme environment, such as rough
seas, changeable weather, cold, poor visibility in
the water.

Seismic operations or simultaneous operations in

the area of the dive.

Identify suitable controls to minimise Suitable controls to minimise the risks in offshore
offshore diving operation risks diving operations include.

Set up and agree a common communication

system practiced and understood by all involved -
including between surface and underwater crews.

Agree roles and responsibilities of all parties -

surface and underwater.

Carry out a suitable and sufficient assessment of

the risks associated with the hazards identified.

Put in place a comprehensive diving plan.

Identify and validate the qualifications, experience

and competence of all divers and other
participants, including boat crews.

Carry out safety checks on the diving and

breathing equipment.

Take account of possible emergencies and

formulate a plan.

Ensure adequate rescue and recovery equipment

available for emergencies.

Carry out safety briefings.

Use Permit-to-Work to identify and control the

risks.

Monitor weather - meteorological and

oceanographic reports.

99 terms
Terms Definitions
Identify the key Identify the hazards
stages of a
workplace risk Decide who might be harmed and how
assessment
Evaluate the risks and decide on precaution

Record your findings and implement them

Review your assessment and update if necessary

Outline the "ALARP" is short for "as low as reasonably practicable".

meaning of `as
low as ALARP involves weighing risk against the trouble, time and money needed to
reasonably control it. Thus, ALARP describes the level to which we expect to see
practicable' - workplace risks controlled.
ALARP
ALARP allows us to set goals for duty-holders

It is a key part of the general duties of the Health and Safety at Work Act 1974

ALARP is about weighing the risk against the sacrifice needed to further
reduce it

To spend £1m to prevent five staff suffering bruised knees is obviously

grossly disproportionate

But

To spend £1m to prevent a major explosion capable of killing 150 people is

obviously proportionate

Many major oil / Establish the Chain of Events

gas incidents
have occurred in Establish Causes of incident
recent years, eg
Piper Alpha, Establish Route Cause
Texas City,
Mumbai High. Establish process failures

Outline reasons Establish Lessons learnt to prevent similar occurrences

why such
incidents should
be investigated
by employers.
Identify four Authorities
parties, other
than the Insurance Companies
employer, who
may want to Manufactures
investigate
these types of Suppliers
incident

List the Hazards Hazards associated with LNG;

associated with
LNG Fire and explosion

Pool Fires

Bleve's & Vapour Cloud Explosions

Explosion in confined space

Cold Burns

Asphyxiation in a confined space

Terrorism

List the Hazards Hazards associated with LPG - Liquid Petroleum Gas (Propane/Butane)
associated with
LPG - Liquid Highly Flammable
Petroleum Gas
(Propane/Butane Fire & explosion
)
Cold Burns, Frostbite - In its Liquid form

Bleve's

Pool Fires

What are the The dangers of LPG lie with its flammability and explosive properties, and the
main dangers fact that it is stored under great pressure, and hence very low temperature, to
associated with retain its liquid state.
LPG
On release, LPG reverts to its gaseous state, with rapid and considerable
increase in volume.

An employee Documented information that might be used by the investigating team to

was seriously determine the causes of an accident;
injured in an
accident at work PTW
within an oil and
gas installation. Photographs

Identify the CCTV Footage

documented
information that Witness Statements
might be used
by the Previous Health and Safety Meeting Minutes
investigating
team to Risk Assessments / JSA's
determine the
causes of this Method Statements
acciden
Control Room Data

Internal incident report forms

Maintenance records

Disciplinary records

Safe systems of work

Audit / inspection reports

SOP's

D & A Test results

Outline the term Flashpoint is the lowest temperature at which sufficient vapour is given off to
Flash Point "Flash" - that is, ignite momentarily, and not carry on burning, when a source
of ignition is applied to the vapour.

At the flash point the application of a naked flame gives a momentary flash
rather than sustained combustion, for which the temperature is too low

Give the UFL - The maximum concentration of fuel in air that is sufficient to allow
meaning of the combustion to occur.
following term
Above the UFL the mixture is too rich to burn
Upper
flammable limit
- UFL

Give the LFL - The minimum concentration of fuel in air that is sufficient to allow
meaning of the combustion to occur.
following term
Bellow the LFL, the mixture is too lean to burn.
Lower
flammable limit
LFL

Give the Flashpoint is the lowest temperature at which sufficient vapour is given off to
meaning of the "Flash" - that is, ignite momentarily, and not carry on burning, when a source
following term of ignition is applied to the vapour.

Flashpoint

Give the Highly flammable liquids

meaning of the
following term Liquids with a flash point below 32°C.

Highly Substances which, when hot, catch fire in contact with air at ambient
flammable temperature without any energy input
liquids

Identify the 1. Obtain basic facts:

information that
might be Names of injured
included on a Witnesses
checklist for an Place
investigation Date and time
following an Persons in area
accident Ascertain substances / chemicals involved
Injuries
Damage to equipment

2. Establish circumstances:

What happened?
Causes
Events leading to incident
Competence
Supervision
Behavior

3. Preventive Measures - Review the risk assessment for the activity:

What precautions should have been in force?

What training should those carrying out the activity have received?

What precautions were actually taken? Compare them with those which should
have been taken.
 What training was actually given? Compare it with training which should have
been given.

4. Was the initial response adequate?:

Firefighting
First aid
Containment and spillage

5. Identify underlying causes:

Management or supervision failure?

Lack of competence?
Inadequate training?
Shortcomings in original design of
Equipment
Facilities
Absence of a system for maintenance.

6. Determine action needed to prevent a recurrence

Improve physical safeguards

Introduce better test and maintenance arrangements
Improve work methods,
Provide and use personal protective equipment
Make changes to supervision and training arrangements,
Review procedures involving outside contractors
Improve inspection systems

Following Hazards associated with LSA, radioactive sludge;

preparation of a
vessel for Risk of fire, explosion.
maintenance
within an oil and Toxicity to Divers
gas installation
a low specific
activity - LSA -
radioactive
sludge was
encountered

Identify hazards
associated with
the sludge
Outline FOUR FOUR control measures to reduce the risk to workers exposed to LSA sludge;
control
measures to Wearing of correct PPE - Respirator
reduce the risk
to workers Monitoring devices and personal sensors
exposed to the
sludge. Explosion proof certified equipment

Safety procedures

Training

Identify TWO TWO other pieces of workplace equipment where the sludge may be found;
other pieces of
workplace Shale Shakers
equipment
where the Mud Pits
sludge may be
found.

An oil and gas Factors that should be considered when assessing the health and safety
industry competence of a contractor:
employer is
reviewing HSE Policy's
tendering
contracts for an Certifications - Accreditations
offshore
platform Commitment to HSE from senior management and how this is demonstrated -
modification. Safety Management system and implementation - Safety tools used

Identify the Project records - track record of similar projects

factors that
should be Safety Statistics - KPI's records and achieved
considered
when assessing Risk Management system and procedure
the health and
safety Previous incident investigations reports
competence of a
contractor. Competency of employees and project staff

Safety Initiatives used with in the business and project

Outline the term A Major Accident Is:

Major Accident
An unplanned event with potential for multiple fatalities and or serious
damage, possibly beyond the asset itself.
 Typically these are hazardous releases, but also include major structural
failure or loss of stability that could put the whole asset at risk.
------------------------------------------------------------------
-----------
1. A fire, explosion or other release of a dangerous substance involving death
or serious personal injury to persons on the installation or engaged in an
activity on or in connection with it

2. Any event involving major damage to the structure of the installation or

plant affixed thereto or any loss in the stability of the installation;

3. The failure of life support systems for diving operations in connection with
the installation, the detachment of a diving bell used for such operations or
the trapping of a diver in a diving bell or other subsea chamber used for such
operations

4. Any event arising from a work activity involving death or serious personal
injury to five or more persons on the installation or engaged in an activity in
connection with it

Describe the The Key Principles of Safe Shift Handover are:

Key Principles of
Safe Shift A formal procedure
Handover
High priority conducted Face to Face

Two way communication, with both parties taking joint responsibility

Both verbal & written communication

Based on the analysis of the needs of incoming staff

Given as much time as necessary

Provide as much, information as necessary

In relation to "BLEVE" is an acronym for "Boiling Liquid Evaporating Vapour Explosion"

Hydrocarbon
Vapour Clouds It is an explosion caused by the rupture of a vessel containing a pressurized
Define what is liquid above its boiling point.
meant by:

BLEVE's

In relation to CVCE - Confined Vapour Cloud Explosion

Hydrocarbon
Vapour Clouds Explosion of a liquefied hydrocarbon or other flammable gas cloud in a
Define what is confined Space, such as vessels, pipelines, buildings
meant by:

CVCE's

In relation to Unconfined Vapour Cloud Explosion

Hydrocarbon
Vapour Clouds Explosion of a liquefied hydrocarbon in a unconfined space. Such as a fuel
Define what is leaking from a Storage facility, e.g. Buncefield incident
meant by:

UVCE's

Many serious Main operational issues communicated at shift handover include:

accidents or
incidents, Operational status of the installation or process
including the
Piper Alpha Maintenance completed
disaster in
1988, involve Maintenance still ongoing
root causes
associated with Maintenance planned during on-coming shift
shift handover.
Routine operation for next shift
An outgoing
operator is Updating PTW's - Closed out or still open
handing over to
an incoming Any events that happened during the out-going shift, Emergencies, incidents,
operator at the accidents, breakdowns, plant overrides.
end of a shift.
Situations where safety systems have been overridden e.g. fire deluge system
Outline the main switched to manual operation
operational
issues Planned events during oncoming shift, shutdowns, drills exercises
communicated
at shift Operational issues that will occur during the on-coming shift
handover
Changes in plant parameters

Outline FOUR Hot Work

types of work
activity Hot Work Permits are generally applied to any type of work, which involves
associated with actual or potential sources of ignition, and work for which there may be a risk
an oil platform of a fire and/or explosion, or which involves the emission of toxic fumes from
that might the application of heat.
require permit
to-work AND Cold work
give a reason in
EACH case for Cold work shall include but not be limited to the following: scaffolding,
the requirement. cleaning, over side working, painting

Confined space entry

A confined space is any vessel, enclosure or compartment large enough to

take a person where the atmosphere may be dangerous or incompatible to a
person entering because of flammable/toxic gases and other substances or
oxygen deficiency.

Isolation

An Isolation Certificate is required before any work can be started on process,

mechanical or electrical plant or equipment. An Isolation Certificate is also
required where access to the site of work is restricted or its safety is
jeopardized by any adjacent plant or equipment. An activity cannot commence
until all the necessary isolation requirements are in place

Diving

Diving certificate can be used to control the diving activity itself and to ensure
that there are no other activities taking place nearby which create unnecessary
additional risks e.g. over-side work, live firewater intake pumps.

Identify TWO Sudden depressurization

ways in which
vapour clouds Rupture of vessel
can be
generated Loss of containment

Uncontrolled buildup of pressure

Outline how a Vapour cloud explosion can be generated by;

vapour cloud
explosion can Confined / unconfined generation
be generated
Vapour cloud explosions may arise from vaporization of a release of liquefied
gas from a ruptured vessel or pipeline

Identify the Physical consequences of vapour cloud explosions;

physical
consequences of Overpressure
vapour cloud
explosions Fire & explosion
 Resulting debris as airborne missiles

A pump Asphyxiation due to displacement of 02

containing
flammable Fire
corrosive slurry
has been Explosion
stopped for
maintenance. Irritant/Corrosive substance

An operator will Incorrect isolation of valves

prepare the
pump for Incorrect Lock Out/Tag Out system
maintenance
using a nitrogen Lack of gas monitoring
supply, drain
header and Burst pressure lines causing injury
collection
vessel. Using
this information;

Outline EIGHT
risks to the
operator when
preparing the
pump for
maintenance.

Oil and gas When stored under pressure as in Fire lines and steam water lines
installations use
water for May contain bacteria if not circulated e.g. dead end pipe legs
cooling and
heating May cause an unstable reaction when mixed with some hydrocarbons
although it can
be a hazard in
some situations.

Identify risks
with water AND
give a practical
example in
EACH case

Outline Shutdown:
operational
control Ensure work carried out under the controls of a PTW
measures that
could minimize All services are;
the risk of plant
damage or Stopped
injury during Isolated
start-up or Drained down
shutdown of a Blanked
process
Empty & drain hydrocarbon facilities, with all liquids, gases and residues
removed leaving the plant safe to work on

Eliminate or control ignition sources

Suitable supervision of the operation

Certification of items that have been maintained or replaced

Start-up:

Establish all isolations reconnected, all blanks removed

Ensure all safety systems are operational

Ensure all systems are tested before start-up

Complete PTW

Emergency plan - in place

A distillation A fixed water deluge system could provide protection for a distillation column
column requires by extinguishing the fire, controlling the fire or by providing protection for the
protection from adjacent distillation columns with the cooling effect the fixed water deluge
fire through system provides.
passive and
active fire
protection. Water mist systems and a Firewater monitor and hose-reels

(a) Outline how

a fixed water
deluge system
could provide
fire protection
(2)

(b) Identify two

additional
examples of
active fire
protection. (2)

Outline the Types of failure mode of storage tanks that may lead to loss of containment
types of failure from hydrocarbon：
mode of storage
tanks that may Overfilling
lead to loss of
containment Corrosion
from
hydrocarbon Construction fault

Design Fault

Bund Failure

Operator / Instrument Error

Tank not tested

Foundations Overload

Vacuum effect during emptying of tank

Identify the Controls available to maintain Safety Critical Equipment

controls
available to Process Control Systems
maintain Safety
Critical Process and Emergency Shutdown systems
Equipment
Fire and Gas Systems

Drilling Control systems

During an TWO reasons for providing a tank bund:

inspection an
external fuel Prevent a potential leak causing environmental damage
storage tank is
found without a Control any leak within a known area
bund.
Ensure the maximum quantity of product can be contained within the bund
Identify TWO
reasons for
providing a tank
bund.

During an Features which should be included in the design of a tank bund:

inspection an
external fuel Ensure the maximum quantity of product can be contained within the bund at
storage tank is least 110%
found without a
bund. Make allowance for the space occupied by other tanks

Outline the Located away from traffic routes

features which
should be Impermeable base
included in the
design of a tank No drain valve- rain water should be pumped out
bund
Lightening protection

Large quantities THREE types of fire or explosion that could occur;

of hydrocarbons
are contained in "BLEVE" Boiling Liquid Evaporating Vapor Explosion"
a process plant,
with the risk of CVCE's Explosion of a liquefied hydrocarbon in a confined space
gas release and
explosions UVCE's Unconfined Vapour Cloud Explosion

Identify THREE
types of fire or
explosion that
could occur

Large quantities Process safety control measures that would minimise the risk of an explosion:
of hydrocarbons
are contained in Gas detectors
a process plant,
with the risk of Zoning
gas release and
explosions. Passive Fire Protection systems

Identify process Structural Fire Protection systems

safety control
measures that Fire Detection Systems — Heat detectors; Flame detectors; Smoke detectors;
would minimise Duct Sampling; Acoustic detectors
the risk of an
explosion Process safety systems and controls; flares and vents

Large quantities Zone 0 - Area where an explosive gas atmosphere is present continuously or
of hydrocarbons for long periods
are contained in
a process plant, Zone 1 - Area where an explosive atmosphere is likely to occur in normal
with the risk of operations
gas release and
explosions. Zone 2 - Area where an explosive atmosphere is not likely to occur in normal
operations — if it occurs will only exist for a short time
Identify the
zone
classifications
relating to
flammable
atmospheres

Outline the Actions that should be taken by a person upon discovering a fire:
actions that
should be taken Call Alarm
by a person
upon Call emergency services
discovering a
fire Isolate any gas/ hydrocarbon supplies if possible

Evacuate area

Identify Ways in which an alarm may be raised in the event of a fire in a building:
different ways in
which an alarm Manually
may be raised in
the event of a Automatically
fire in a building
Visually

Verbally

Identify suitable Suitable working hours - rest periods

control
measures to Suitable maintenance of vehicles
minimise the
risk to Basic vehicle checks such as lights, tyre pressures
employees
using Maintain speed limits
mechanical land
transport Wear Seat belts

Correct loads and security of loads

Chemical and Hazardous material controls

Training of drivers

Traffic routes and plans

 GPS tracking systems

Outline how a "BLEVE" is an acronym for "Boiling Liquid Evaporating Vapor Explosion" and
Boiling Liquid involves a situation where. a liquid in a container - often a compressed liquid
Expanding such are propane suddenly fails, resulting in a rapid expansion of the liquid
Vapour into a vapor, releasing energy that is capable of hurtling parts of the tank or
Explosion other nearby objects for considerable distances.
(BLEVE) occurs
If an ignition source is present and the vapor is flammable, a sudden
deflagration (fire) or explosion may occur, further increasing the energy of the
sudden vapor release, and causing the creation of a fireball that releases a
sudden burst of radiant (heat) energy.

The largest documented BLEVE explosions (usually involving propane or

similar substances) have resulted in numerous deaths, some at great
distances from the initial explosion (hundreds of feet or more) from either
propulsion of debris, exposure to radiant heat, or a combination of both.

Identify the hazardous properties of Liquid Petroleum Gas - LPG

hazardous
properties of Heavier than air
Liquid
Petroleum Gas Vaporisation - Cold
(LPG).
Storage - Leaks

Fire / Explosion

Outline the risks Risks associated with Liquid Petroleum gas LPG.
associated with
Liquid Asphyxiation
Petroleum gas
LPG. Burns (Hot and Cold)

Fire / Explosion

Outline the Creep:

following failure
modes that may Is slow movement under stress, made more severe with heat for long periods,
lead to loss of especially with increases in temperature approaching melting points.
hydrocarbon
containment
from storage
tanks/vessels or
pipelines
Creep

Stress corrosion Stress corrosion:

cracking;
Occurs under tensile stress and is worse in a corrosive environment at
elevated temperatures.

Thermal shock; Thermal shock:

Cracking associated with rapid temperature change with different parts of an

object expanding by different amounts where the stress overcomes the
strength of the materials.

Brittle fracture. Brittle fracture:

Rapid run of cracks through a stressed material with plastic deformation

before failure caused by such things as repetition of inappropriate heating or
pressurising rates

A large oil Physical design features of an offshore platform that would minimise risk to
company is operating personnel in the event of a major incident:
proposing to
build a new oil Plant separation
and gas
installation in Compartmentalisation
the North Sea.
The Process Protection of personnel / equipment
Safety
Management Means of escape
Team is
analysing past Blow out panels
incidents and
database Temporary refuges with communications & control
records from
the Oil and Gas
Industry.

Excluding active
and passive fire
protection
systems, outline
physical design
features of the
platform that
would minimise
risk to operating
personnel in the
event of a major
incident

An operator is Factors that influences the generation of the electrostatic charge:

draining a
flammable Hot Dry Weather
liquid from
process Flow rate,
pipework to a
metal container. Overfilling
The supervisor
is concerned Lack of earthing / bonding
about the
possibility of an Liquid instability
electrostatic
charge forming Splash Filling
and stops this
operation until a None Conductivity of materials
risk assessment
is undertaken. Agitation

During this work Filters

activity:
Pressure Velocity
Identify factors
that influences
the generation
of the
electrostatic
charge;

An operator is Practical ways of minimising the formation of an electrostatic charge:

draining a
flammable Humidification of the atmosphere
liquid from
process Antistatic additives
pipework to a
metal container. Reduce flow velocity
The supervisor
is concerned Intrinsically safe equipment
about the
possibility of an Bonding & Grounding of equipment & containers
electrostatic
charge forming Avoid splash filling by submerging the fill pipe bellow the liquid level in the
and stops this container
operation until a
risk assessment Increasing the conductance of floors, footwear
is undertaken.
During this work
activity:

Outline practical
ways of
minimising the
formation of an
electrostatic
charge.

Outline physical Physical design features of an oil and gas installation that would minimize risk
design features to operating personnel in the event of a major incident:
of an oil and gas
installation that Temporary Refuge
would minimize
risk to operating Routes to and from the TR
personnel in the
event of a major Means of evacuation from these points
incident
Facilities within the TR for monitoring and control of the incident and
organizing evacuation

Petroleum The following fire risk may exist with floating tanks:
storage tank
fires have been Lightning strikes
reduced
substantially by Leaks due to corrosion, damaged pipe work
using floating
roofs, but a fire Product overfill or high internal pressures
risk may still
exist. Rainwater or snow load sinks the roof and exposes fuel vapours

Outline how a
fire risk may
exist with
floating tanks

Identify TWO TWO examples of fire protection systems used on floating roof tanks:
examples of fire
protection Fixed foam systems
systems used on
floating roof Portable foam firefighting systems
tanks
Hose lines
Process TWO examples of fire extinguishing media that could be used in a computer
modules in an room:
oil and gas
installation Carbon Dioxide (C02)
often contain
computer rooms Dry Chemica
that require fire
protection

Identify TWO
examples of fire
extinguishing
media that
could be used in
a computer
room.

During an The environmental effects if a fuel storage tank failure are:

inspection an
external fuel
storage tank is Oil contamination of ground would be highly toxic to plant and animal life and
found without a could enter rivers and waterways depriving life of oxygen
bund wall:

Identify the
environmental
effects if a tank
failure occurred;

Outline the Date & Time

contents of a
typical permit- Description of the task to be carried out
to-work
Work location

Duration of permit

Potential Hazards

Isolations that have been made

Precautions that are needed (ppe rpe etc)

Details of the person authorising the work

Signature of the worker carrying out the work

 Risk Assessment / JSA number

Details of when the permit is revoked or finished

Outline how the Hot Work permits would vary as hot works may ignite flammable materials.
contents of a
hot work permit These would need to be eliminated or removed (preferable) or protected
are different to
a typical permit- Control of ignition sources through damping down or fire blankets
to-work
Firefighting equipment has been checked and placed on location together with
trained personnel.

Gas test details must be included.

Additional PPE appropriate to task to be used in addition to the daily

mandatory PPE as part of the special precautions to be indicated on the hot
work permit.

A distillation A fixed water deluge system could provide protection for a distillation column
column requires by extinguishing the fire, controlling the fire or by providing protection for the
protection from adjacent distillation columns with the cooling effect the fixed water deluge
fire exposure system provides
through active
or passive fire
protection.

Outline how a
fixed water
deluge system
could provide
fire

Other than a Foam Systems

fixed water
deluge system Water Mist Systems
Identify TWO
additional
examples of
active fire
protection

A distillation Fire Walls

column requires
protection from Fire doors
fire exposure
through active Fire resistant coatings
or passive fire
protection. Thermal insulation

Identify TWO
examples of
passive fire
protection.

A distillation Fires can cause thermal weakening of steelwork and result in the collapse of
column requires structures, failure of equipment, and subsequent escalation of the initial
protection from event.
fire exposure
through active
or passive fire
protection.

Outline why the

metal legs of
the column
should be
protected.

Identify THREE Foam

suitable types of
portable Dry Powder
extinguisher
C02 Carbon Dioxide

Following an Control system - process controls intelligent alarms

annual
shutdown of a Suitable procedures and methods
process plant
Trained and competent employees
Outline the
operational Suitable supervision of the operation
control
measures that Detection systems- flow/ no flow/ overflow
could minimise
the risk of an Zone controls
incident before
filling Use of flares / over flow / over pressure devices
equipment in
preparation for Maintenance and integrity of systems
start-up
Management of overrides
Identify THREE THREE properties of Hydrogen Sulphide - H2S
properties of
Hydrogen Highly toxic
Sulphide - H2S
Flammable gas

Heavier than air and hence tends to accumulate in low-lying areas

Pungent, smells like rotten eggs but rapidly destroys the sense of smell

On an oil H2s is a flammable gas, detectors can be used to trigger alarms, control room
processing plant operators can implement process control measures, emergency procedures,
outline how shutdowns or evacuations, activate fire protection systems, and shut down
activation of an any sources of ignition remotely.
H2S detection
system, linked This can provide an early warning of a problem and help to ensure people's
to a control safety
room, could
prevent a fire.

A worker has Working at height

requested a
permit-to-work SIMOPS
in order to
replace
damaged
thermal
insulation in an
overhead pipe
rack that runs
between two
plants.

Identify THREE
hazards
associated with
this activity

A worker has Risk assessment/JSA for job

requested a
permit-to-work PTW communicated to and posted in adjacent plant
in order to
replace Close communication between adjacent plants
damaged
thermal Individual Fall Protection
insulation in an
overhead pipe
rack that runs
between two
plants

Outline control
measures that
should be
implemented to
reduce the risks
to the worker

Why are To identify the immediate root causes of the incident - incidents are usually
accident caused by unsafe acts and unsafe conditions in the workplace, but these often
investigations arise from underlying root causes.
carried out
To identify corrective actions that will prevent a recurrence - The main reason
for investigating

What are the Step 1: Gather factual information about the event.
four steps in the
investigation Step 2: Analyse that information and draw conclusions about the immediate
process and root causes.

Step 3: Identify suitable corrective measures.

Step 4: Plan the remedial actions.

Identify the A simple investigation might be carried out by the line manager of the area; a
categories of more detailed investigation often involves a team of investigators that might
staff who might include.
be considered
useful members A safety specialist
of an internal Senior managers
accident A technical specialist
investigation A worker representative
team
Offshore investigating teams may also include installation specialists from
services such as drilling, well services, maintenance, process, and deck crews.

What are the Immediate causes are the unsafe acts and unsafe conditions that gave rise to
two categories the event itself.
of immediate
cause of These will be the things that occurred at the time and place of the accident.
accidents/incide
nts For example a worker slips on a patch of oil spilt on the floor
Immediate causes:
 The slip hazard = unsafe condition
The worker walking through it = unsafe act

Give the Carcinogenic - Can induce the growth of malignant tumours

meaning of the
classification
"Carcinogenic"

What main areas The main areas a safety case/safety report cover
does a safety
case/safety Identification of major accident hazards.
report cover
Evaluation of major accident risks and measures taken (or to be taken) to
control those risks.

Arrangements for audit and audit reports.

Confirmation that an adequate safety management system is in place.

Major accident prevention policies.

Identification of the safety critical elements in place to manage major accident

hazards.

Details of the emergency plan.

Identify the Flammability falls into three distinct classifications:

three
classifications Extremely Flammable - Flash point below 0 Celsius.
within
flammability Highly Flammable - Flash point between 0 and 21 Celsius.

Flammable - Flash point between 22 and 55 Celsius.

What is the Dow The Dow Fire & Explosion Index is a rapid hazard assessment method for use
Fire and on chemical plant during process and plant development, and in the design of
Explosion Index plant layout

What are the Permits to work detail and explain:

four main areas
detailed and The work involved
explained in a
Permit to Work The isolations required

Hazards in the work to be carried out

Precautions to avoid injury

Identify four Safe isolation systems are concerned with the safe isolation of (only four
areas other than required)
electricity where
a safe isolation Hydraulic (oil) power
procedure might
be used Pneumatic power and stored energy

Residual energy

Combustion engines

Natural gravitational forces/weight

Steam or high-pressure water systems

Any combinations of or additions to the above

Explain the Safe Isolation

meaning of the
term safe The interruption, disconnection and separation of all the equipment's motive
isolation power sources in such a way that this disconnection and separation is secure
by lockable means.

Identify four Ignition sources are (select four)

ignition sources
that could arise Electrical equipment:
from
maintenance or Routinely inspect and test to prevent faults developing that could cause
operations on sparks and overheating.
an installation.
Hot work:

Welding, burning, etc. - control with a permit-to-work when done in sensitive

areas.

Smoking:

Control and limit to restricted areas on site (welfare areas).

Cooking and heating appliances:

Locate safely, confine to a galley offshore and use carefully.

Mechanical heat (overheating):

Control by good maintenance programmes.

 Deliberate ignition:

Prevent by good security, perimeter fences (onshore), CCTV and security

lighting.

How is safe Safe isolation, stoppage, draining down and blanking of systems during a
isolation, shut-down is assured by:
stoppage,
draining down It is vital for the safety of maintenance personnel that services are stopped,
and blanking of isolated, drained down, blanked etc. and remain in a safe condition for the
systems assured duration of the work.
during a shut-
down This is ensured by the work being carried out under the controls of a permit-
to work.

The permit will have a completion section to ensure that all systems are put
back into operable condition before start-up, to protect maintenance and
operations personnel

Identify the There are many factors that have to be considered when assessing the health
factors to be and safety competence of a contractor.
considered
when assessing One important factor is the contractor's experience and training, both in the
the health and type of oil and gas process that they will be working on and offshore safety
safety requirements.
competence of a
contractor. Whether the contractor has a health and safety policy in place, supported by
the necessary organisation and arrangements, and the quality and extent of
risk assessments carried out are also significant points to look for.

The contractor's recent health and safety performance (including any accident
history) should be reviewed, as well as establishing whether any enforcement
action has been taken against the contractor.

Evidence should be requested of the availability of suitable, up-to-date

method statements; arrangements to monitor health and safety and carry out
site inspections; qualifications; training records and skills cards carried by
workers; and membership of professional bodies or trade associations.

Proof of the contractor having employer's liability and public liability insurance
is an important factor, and references should be available from previous
clients.

Finally, it is important to take into consideration arrangements for the

selection and appraisal of any subcontractors and how liaison with the
 contractor is going to take place.

What are the The criteria necessary for stress corrosion cracking to occur are:
conditions
necessary for A susceptible material
stress corrosion
cracking to A corrosive environment
occur
Enough tensile stress to induce the condition

List the three Zone 0 or Zone 20 = Category 1 equipment

hazard zones
and the Zone 1 or zone 21 = Category 1 0r 2 equipment
categories of
electrical Zone 2 or Zone 22 = Category 1, 2 or 3 equipment
equipment to be
used in each
zone

In relation to Voting systems are used in order to minimise false alarms, in cases where
fire protection, activation has consequences such as shutting down production (you don't
outline the want that unless it is absolutely necessary as it will cost significant time and
principle of money).
operation of a
voting system The principle of operation is that more than one detector in a set must be
and when it triggered and it is in this sense that it is called a "voting" system.
might be used.
They can be set to different sensitivities depending on the risk - typically two
out of three

Describe the Passive Fire Protection:

difference
between active Is predominantly thermally insulating design elements that are put and left in
and passive fire place, like fire barriers, fire resistant coatings and cladding.
protection
measures They help stop escalation of the fire and protect routes.

Active Fire Protection:

Means measures that are brought into play when a fire is detected, in order to
actively tackle/extinguish the fire, e.g. fixed sprinkler installations, hoses and
monitors

Outline the fire For floating roof tanks the main means of fire protection is to use fixed foam
protection that installations which spread foam around the rim seal.
would be used
on a floating Monitors and water deluge cooling sprays may also be used
roof tank
Outline the The tiered three-level approach to emergency medical treatment is:
tiered, three-
level approach Level 1 - Basic first-aid
to emergency
medical Intended as first line treatment to preserve life and stabilise the injured:
treatment
Requiring the provision of an adequate number of trained first-aiders
(depending on the level of risk, number of workers, installation remoteness,
etc.) and first-aid equipment (first-aid kits etc.).

Level 2 - Advanced first-aid

Requiring first-aiders with more advanced skills (such as the use of

specialised equipment or methods).

Level 3 - Utilising medics or paramedics

With remote support from other medical professionals, who will have specific
medical training and be capable of administering drugs, advanced wound
treatment, etc

Distinguish Offshore evacuation methods are:

between
primary, Primary Method:
secondary and
tertiary offshore The usual none-emergency method, e.g. ship.
evacuation
methods Secondary method:

Used when the primary method is unavailable, e.g. lifeboat launched from the
rig.

Tertiary Method:

Heavily reliant on the individuals own effort and used as a last resort when all
other methods are unavailable, e.g. putting on lifejackets and survival suits
and jumping into the sea.

Give a brief The emergency command structure for offshore installations.

summary of the
emergency In such circumstances the Offshore Installations Manager OIM is in overall
command charge.
structure for
offshore They will be assisted by two on-scene commanders, one from drilling and one
installations from process, a permit controller, a radio operator and an Offshore
Installation Supervisor OIS.
Outline why it There are two basic reasons why it might be important to plan the route of a
might be road tanker carrying dangerous goods.
important to
plan the route Not all roads are suitable for tankers - narrow roads, weak bridges.
of a road tanker
carrying The security threat (terrorism, theft) to the valuable load being carried and its
dangerous possible use as a terrorist weapon.
goods.

HAZOPS HAZOPS = Hazardous Operations Study

HAZAN's HAZAN's = Hazard Analysis

HAZID HAZID = Hazard Identification

Identify three Marine hazards associated with all types of Floating Platform Storage
marine hazards Offloading Units -FPSO's
associated with
all types of Flaring near production area
Floating
Platform Storage Crew transfer
Offloading Units
-FPSO's Weather

Environmental impact

Transferring oil to tanker vessels

Risk of collision from sea going vessels

Supply/logistics difficulty

Pirates

Terrorists

Spillage damage to marine life

Identify suitable Security & surveillance

controls that
minimize risk
when operating
Floating
Platform Storage
Offloading Units
- FPSO's
Piper Alpha Piper Alpha Facts:
accident;
Fire Explosion knocked out fire proof - not Blast proof - walls
How it
happened and Control room damaged in 1st blast
what course of
actions were Initial fire could have been extinguished
taken to prevent
recurrence, Fire pumps were set to manual
Lessons learned.
Lifeboats all in one location and could not be reached from accommodation
block

Other platforms did not shutdown instead continued pumping hydrocarbons

to Piper Alpha, increasing the fire

Piper Alpha Piper Alpha Failures:

Failures
Permit to Work System -two permits issued for same task

Platform layout

Delayed decision making

Lack of training

Active fire system set from Auto to Manual

Passive fire protection

Lifeboats

Communications/Shift Handover

Buncefield Buncefield Incident Causes:

Incident:
A fill level gauge and high fill level alarm failed
Causes:
Fuel storage tank overfilled

Fuel leaked out of the vents at the top of the storage tank into the bund

This resulted in a Vapour Cloud

The vapour cloud flowed offsite

 Ignition leading to the vapour cloud explosion took place at a pump house

Buncefield Buncefield Lessons learned:

Lessons learned
Need for back-up systems/processes for safety critical devices

Bunds/containment walls to be designed to withstand heat/explosion

Importance of coordinated response & emergency planning

Business/Disaster interruption and or recovery plan

Dealing with media after the incident.

44 terms

Terms Definitions
Why are accident investigations Accident investigations are carried out to.
carried out
To identify the immediate root causes of the incident -
incidents are usually caused by unsafe acts and unsafe
conditions in the workplace, but these often arise from
underlying root causes.

To identify corrective actions that will prevent a recurrence -

The main reason for investigating.

What are the four steps in the The four steps in the investigation process are.
investigation process
Step 1:

Gather factual information about the event.

Step 2:

Analyse that information and draw conclusions about the

immediate and root causes.

Step 3:

Identify suitable corrective measures.

Step 4:

Identify the categories of staff
who might be considered useful
members of an internal accident
investigation team
List the types of documentation
which might be consulted during
an accident investigation
Plan the remedial actions.
A simple investigation might be carried out by the line
manager of the area; a more detailed investigation often
involves a team of investigators that might include
• A safety specialist
• Senior managers
• A technical specialist
• A worker representative
Offshore investigating teams may also include installation
specialists from services such as drilling, well services,
maintenance, process, and deck crews.
Various documents may be examined during an accident
investigation, such as:
PTW
Photographs
CCTV Footage
Previous Health & Safety Meeting Minutes
Risk Assesments/JSA's
Method Statements
Control Room Data
Company policy
Training records
Safe systems of work
Maintenance records
Disciplinary records
Internal incident report forms
Log book entries

What are the two categories of
immediate cause of
accidents/incidents
Give the meaning of the terms:
Lower Flammable Limit - LFL
Upper Flammable Limit - UFL
Give the meaning of the
classification "Carcinogenic"
What are the main dangers
associated with LPG
What main areas does a safety
case/safety report cover
Computer printouts relevant to the situation
Immediate causes are the unsafe acts and unsafe conditions
that gave rise to the event itself.
These will be the things that occurred at the time and place
of the accident.
For example a worker slips on a patch of oil spilt on the
floor
Immediate causes:
The slip hazard = unsafe condition
The worker walking through it = unsafe act
The Lower Flammable Limit - LFL or Lower Explosion Limit
LEL:
The minimum concentration of fuel in air that is sufficient to
allow combustion to occur.
Bellow the LFL, the mixture is too lean to burn.
The Upper Flammable Limit - UFL or Upper Explosion Limit
UEL:
The maximum concentration of fuel in air that is sufficient
to allow combustion to occur.
Above the UFL the mixture is too rich to burn.
Carcinogenic
Can induce the growth of malignant tumours.
The dangers of LPG lie with its flammability and explosive
properties, and the fact that it is stored under great
pressure.
And hence very low temperature, to retain its liquid state.
On release, LPG reverts to its gaseous state, with rapid and
considerable increase of volume.
Identification of major accident hazards.
 Evaluation of major accident risks and measures taken (or to
be taken) to control those risks.

Arrangements for audit and audit reports.

Confirmation that an adequate safety management system

is in place.

Major accident prevention policies.

Identification of the safety critical elements in place to

manage major accident hazards.

Details of the emergency plan.

Explain the meaning of the term Flashpoint is the lowest temperature at which sufficient
"Flashpoint" vapour is given off to "Flash" - that is, ignite momentarily
(and not carry on burning) when a source of ignition is
applied to the vapour.

Identify the three classifications Flammability falls into three distinct classifications:
within flammability
Extremely Flammable - Flash point below 0 Celsius.

Highly Flammable - Flash point between 0 and 21 Celsius.

Flammable - Flash point between 22 and 55 Celsius.

Explain where the flammable The lower flammable limit is the minimum concentration of
range exists in a fuel/air mixture fuel in air that will allow combustion to occur - below this
the mixture is too lean.

The upper flammable limit is the maximum concentration of

fuel in air that will allow combustion to occur - above this
the mixture is too rich.

The flammable range lies between these two limits

What are the four main areas Permits to work detail and explain:
detailed and explained in a Permit
to Work • The work involved

• The isolations required

• Hazards in the work to be carried out

• Precautions to avoid injury

Identify six types of work where a Six areas where a permit might be required are:
Permit to Work might be required
• Hot work - welding, burning, grinding, etc.

• Live or high voltage work

• Working at height

• Working over water

• Work in confined spaces

• Special permits for work carried out under special

conditions (usually maintenance work of a none-routine
nature)

Identify four areas other than Safe isolation systems are concerned with the safe isolation
electricity where a safe isolation of (only four required)
procedure might be used.
• Hydraulic (oil) power

• Pneumatic power and stored energy

• Residual energy

• Combustion engines

• Natural gravitational forces/weight

• Steam or high-pressure water systems

. Any combinations of or additions to the above

Explain the meaning of the term Safe Isolation

safe isolation
The interruption, disconnection and separation of all the
equipment's motive power sources in such a way that this
disconnection and separation is secure by lockable means.

What five key principles should be Shift hand-over should be:

employed to ensure a safe shift
handover. High priority, conducted face-to-face

Two-way with both participants taking joint responsibility

Carried out using verbal and written commands


Identify four ignition sources that
could arise from maintenance or
operations on an installation
How is safe isolation, stoppage,
draining down and blanking of
systems assured during a shut-
down
Identify the factors to be
considered when assessing the
Based on the analysis of the information needs of the
oncoming shift staff
Given as much time as necessary
Ignition sources are (select four)
• Electrical equipment
Routinely inspect and test to prevent faults developing that
could cause sparks and overheating.
• Hot work
Welding, burning, etc. - control with a permit-to-work when
done in sensitive areas.
• Smoking
Control and limit to restricted areas on site (welfare areas).
• Cooking and heating appliances
Locate safely, confine to a galley offshore and use carefully.
• Mechanical heat (overheating)
Control by good maintenance programmes.
• Deliberate ignition
Prevent by good security, perimeter fences (onshore), CCTV
and security lighting.
It is vital for the safety of maintenance personnel that
services are stopped, isolated, drained down, blanked etc.
and remain in a safe condition for the duration of the work.
This is ensured by the work being carried out under the
controls of a permit-to work.
The permit will have a completion section to ensure that all
systems are put back into operable condition before start-
up, to protect maintenance and operations personnel
There are many factors that have to be considered when
assessing the health and safety competence of a contractor.
health and safety competence of a
contractor
Why should all ESD systems be
separate and independent of
normal production controls
What precautions are required
when maintenance by-pass valves
are installed around shut-down
valves
One important factor is the contractor's experience and
training, both in the type of oil and gas process that they
will be working on and offshore safety requirements.
Whether the contractor has a health and safety policy in
place, supported by the necessary organisation and
arrangements, and the quality and extent of risk
assessments carried out are also significant points to look
for.
The contractor's recent health and safety performance
(including any accident history) should be reviewed, as well
as establishing whether any enforcement action has been
taken against the contractor.
Evidence should be requested of the availability of suitable,
up-to-date method statements; arrangements to monitor
health and safety and carry out site inspections;
qualifications; training records and skills cards carried by
workers; and membership of professional bodies or trade
associations.
Proof of the contractor having employer's liability and public
liability insurance is an important factor, and references
should be available from previous clients.
Finally, it is important to take into consideration
arrangements for the selection and appraisal of any
subcontractors and how liaison with the contractor is going
to take place.
All ESD systems should be separate and independent to
normal production controls so that common cause failures
can be avoided.
Control valves should be independent with ESD systems,
and not used for duel control or shut-down as they are not
designed for tight shut-off.
Where bypass systems are provided around shutdown valves
for maintenance purposes, they should be locked closed
with the shutdown hand-wheels removed.
Valves on hydraulic system return lines themselves can
cause failure, so should be locked open
What does the term "Blowdown" Blowdown
refer to
The removal of liquid content from process vessels and
equipment to reduce the likelihood of fires or explosions
occurring.

It is similar to depressurisation carried out in the gas

process system

What was thought to be the main The main cause of the Buncefield incident is thought to be
cause of the tank fire at the overfilling of a floating roof gasoline tank - tank 912
Buncefield
Which produced a vapour cloud, this led to a UVCE

What is the main purpose of The main purpose of having a floating roof in a fuel storage
having a floating roof in a fuel tank is that the roof "floats" in that it can move up and down
storage tank within the outer shell of the tank.

Always remaining immediately above the surface of the

liquid contained, minimising the air gap and potential build-
up of flammable hydrocarbon vapours

What types of fluids should be Fixed roof tanks are intended for use with liquids having
stored in a fixed roof tank very high flash points i.e. of low volatility, such as water,
bitumen, etc.

What is the purpose of a bund Tanks should be surrounded by a bund to limit the spread
around a fuel storage tanks, and of spillage or leakage, and should be designed to hold at
how is it generally sized least 110% of the capacity of the largest tank within the
bund.

Making allowance for the space occupied by other tanks.

In exceptional cases where there is no risk of pollution or

hazard to public, this figure may be reduced to 75%.

What contradictory questions In the Buncefield incident the bund was around three tanks;
arose from the Buncefield incident the capacity of the bund was thought to be sufficient, 110%
regarding bunding of tanks of the largest tank.

But spillage into the bund from any one tank would affect all
tanks in the bund in the case of fire.

This questioned the value of common bunding rather than

individual bunds for each tank

Describe the two methods of "Top Filling" is achieved through a filling valve arrangement
filling tanks, and identify the - Usually gravity-fed - through the top of the tank.
circumstances where they would
each be used
What are the three elements that
make up the fire triangle
List the three hazard zones and
the categories of electrical
equipment to be used in each
zone
In relation to fire protection,
outline the principle of operation
of a voting system and when it
might be used
Describe the difference between
active and passive fire protection
measures
Outline the fire protection that
More often used with smaller tanks and containers.
"Bottom Filling" where substance is delivered into the tank
under pressure through a closed pipeline.
This is the common method for larger tanks and road
tankers
Oxygen
Heat - (Ignition)
Fuel
Zone 0 or Zone 20 = Category 1 equipment
Zone 1 or zone 21 = Category 1 or 2 equipment
Zone 2 or Zone 22 = Category 1, 2 or 3 equipment
Voting systems are used in order to minimise false alarms,
in cases where activation has consequences such as shutting
down production (you don't want that unless it is absolutely
necessary as it will cost significant time and money).
The principle of operation is that more than one detector in
a set must be triggered and it is in this sense that it is called
a "voting" system.
They can be set to different sensitivities depending on the
risk (typically two out of three).
Passive Fire Protection
Is predominantly thermally insulating design elements that
are put and left in place, like fire barriers, fire resistant
coatings and cladding.
They help stop escalation of the fire and protect routes.
Active Fire Protection
Means measures that are brought into play when a fire is
detected, in order to actively tackle/extinguish the fire, e.g.
fixed sprinkler installations, hoses and monitors
For floating roof tanks the main means of fire protection is
would be used on a floating roof to use fixed foam installations which spread foam around
tank the rim seal.

Monitors and water deluge cooling sprays may also be used

Outline the tiered, three-level The tiered three-level approach to emergency medical
approach to emergency medical treatment is:
treatment
Level 1 - Basic first-aid:

Intended as first line treatment to preserve life and stabilise

the injured:

Requiring the provision of an adequate number of trained

first-aiders (depending on the level of risk, number of
workers, installation remoteness, etc.) and first-aid
equipment (first-aid kits etc.).

Level 2 - Advanced first-aid

Requiring first-aiders with more advanced skills (such as the

use of specialised equipment or methods).

Level 3 - Utilising medics or paramedics

With remote support from other medical professionals, who

will have specific medical training and be capable of
administering drugs, advanced wound treatment, etc.

Distinguish between primary, Offshore evacuation methods are:

secondary and tertiary offshore
evacuation methods Primary Method

The usual none-emergency method, e.g. ship.

Secondary method

Used when the primary method is unavailable, e.g. lifeboat

launched from the rig.

Tertiary Method

Heavily reliant on the individuals own effort and used as a

last resort when all other methods are unavailable, e.g.
putting on lifejackets and survival suits and jumping into
the sea.
What is the difference between
"recovery" and "rescue"
Give a brief summary of the
emergency command structure for
offshore installations
Give the meaning of the term
"Active Fire Protection"
Identify TWO suitable forms of
active fire protection that could be
used for this type of tank
Outline the options for personnel
transfer and boarding methods
Recovery
Means that a person who has had to abandon an installation
using a secondary or tertiary method is extracted from the
sea or vessel by a rescue craft (such as a standby vessel or
search and rescue helicopter).
Rescue
Is one step beyond recovery - it is recovery but to a place
where they can receive medical attention
In such circumstances the Offshore Installations Manager
(OIM) is in overall charge.
They will be assisted by two on-scene commanders (one
from drilling and one from process), a permit controller, a
radio operator and an Offshore Installation Supervisor (OIS).
Active fire protection means the provision of equipment,
systems and methods which, following initiation, may be
used to control, mitigate and extinguish fires
A fixed foam deluge system at high level, supplemented
with foam monitors on the ground.
A water deluge system for cooling the outer shell of the tank
Personnel transfer and boarding methods
Helicopter:
Depending on weather, location and whether the vessel is
fitted with a helideck.
Transfer Basket:
Transferred from ship-to-ship using the ship's crane.
Gangways, bridges and accommodation ladders:
The usual means of transfer between ship and shore where
a ship is moored at port.
Rope Ladder (for pilot transfer):
Usually transferred out at sea from a small pilot boat to ship

Outline the general requirements
for dangerous goods tanker driver
training
Outline why it might be important
to plan the route of a road tanker
carrying dangerous goods
Identify three risks associated
with offshore diving
via a rope ladder hung over the side of a ship.
The course must cover both theory and practice and the
driver must sit an externally assessed examination - for the
classes of goods being carried.
This gives him a certificate of competency, which has to be
updated at specific intervals.
The course would cover some general aspects of dangerous
goods transportation but, for tanker drivers, will also cover
tanker specific issues, such as:
Vehicle behaviour (e.g. load movement/surge)
Specific vehicle requirements
Filling and discharging
There are two basic reasons why it might be important to
plan the route of a road tanker carrying dangerous goods.
1. Not all roads are suitable for tankers (narrow roads, weak
bridges).
2. The security threat (terrorism, theft) to the valuable load
being carried and its possible use as a terrorist weapon.
The three risks associated with diving operations are (note
more than three mentioned here).
Divers and others involved could drown.
Divers could become trapped, e.g. by their own airlines or
by moorings, or become stuck in a soft seabed.
Divers could encounter problems with their breathing
apparatus, such as faulty demand valves, incorrect gas
mixture, loss of gas.
Divers could develop illness during the dive, such as
blackouts, decompression sickness, nitrogen narcosis or
oxygen poisoning.
There could be communication errors leading to mistakes
being made.
 Collisions could occur, e.g. a vessel escaping from its
moorings or from an ROV in use.

The effects of extreme environment, such as rough seas,

changeable weather, cold, poor visibility in the water.

Seismic operations or simultaneous operations in the area of

the dive.

73 terms

Terms Definitions
Identify the 5 key The 5 key stages of a workplace risk assessment are:
stages of a
workplace risk Identify the hazards
assessment
Decide who might be harmed and how

Evaluate the risks and decide on precaution

Record your findings and implement them

Review your assessment and update if necessary

Outline the "ALARP" is short for "as low as reasonably practicable".

meaning of `as
low as reasonably ALARP involves weighing risk against the trouble, time and money needed to
practicable' control it.
ALARP.
Thus, ALARP describes the level to which we expect to see workplace risks
controlled.

To spend £1m to prevent five staff suffering bruised knees is obviously

grossly disproportionate

But

To spend £1m to prevent a major explosion capable of killing 150 people is

obviously proportionate

Describe the Key The Key Principles of Safe Shift Handover:

Principles of Safe
Shift Handover A formal procedure
 High priority conducted Face to Face

Two way communication, with both parties taking joint responsibility

Both verbal & written communication

Based on the analysis of the needs of incoming staff

Given as much time as necessary

Provide as much, information as necessary

Outline the main Main operational issues communicated at shift handover include:
operational issues
communicated at Operational status of the installation or process.
shift handover
Maintenance:
Completed
Still ongoing
Planned during on-coming shift

Routine operation for next shift.

Updating PTW's - Closed out or still open

Any events that happened during the out-going shift:

Emergencies,
Incidents,
Accidents,
Breakdowns
Plant overrides

Situations where safety systems have been overridden

e.g. fire deluge system switched to manual operation.

Planned events during oncoming shift, shutdowns, drills exercises

Operational issues that will occur during the on-coming shift

Changes in plant parameters

Outline the term A Major Accident Is:

Major Accident
An unplanned event with potential for multiple fatalities and or serious
damage, possibly beyond the asset itself.
 Typically these are hazardous releases, but also include major structural
failure or loss of stability that could put the whole asset at risk.

Outline reasons Reasons why such incidents should be investigated by employers Include:
why such
incidents should Establish the Chain of Events
be investigated
by employers Establish Causes of incident

Establish Route Cause

Establish process failures

Establish Lessons learnt to prevent similar occurrences

Why are accident Accident investigations are carried out to:

investigations
carried out To identify the immediate root causes of the incident.

Incidents are usually caused by unsafe acts and unsafe conditions in the
workplace, but these often arise from underlying root causes.

To identify corrective actions that will prevent a recurrence - The main

reason for investigating

An Investigation An Investigation Report Must Include:

Report Must
Include Date of Incident

Date investigation began

Description of the incident

Factors that contributed to the incident

Recommendations

Identify four Four parties, other than the employer, who may want to investigate
parties, other incidents:
than the
employer, who Authorities
may want to
investigate these Insurance Companies
types of incident
Manufactures
 Suppliers

What are the four The four steps in the investigation process are:
steps in the
investigation Step 1: Gather factual information about the event.
process?
Step 2: Identify the immediate and root causes.

Step 3: Identify suitable corrective measures.

Step 4: Plan the remedial actions

What are the two The two categories of immediate cause of accidents/incidents are:
categories of
immediate cause Unsafe acts and unsafe conditions
of
accidents/inciden Immediate causes are the unsafe acts and unsafe conditions that gave rise to
ts? the event itself.

These will be the things that occurred at the time and place of the accident.

For example a worker slips on a patch of oil spilt on the floor

Immediate causes:

The slip hazard = unsafe condition

The worker walking through it = unsafe act

Identify the Documented information that might be used by the investigating team to
documented determine the causes of this accident are:
information that
might be used by PTW
the investigating
team to Photographs
determine the
causes of this CCTV Footage
accident
Witness Statements

Previous Health and Safety Meeting Minutes

Risk Assessments / JSA's

Method Statements

Control Room Data

 Internal incident report forms
Disciplinary records
Safe systems of work

Audit / inspection reports

SOP's

D & A Test results

Company Policies

Safety cases and Safety cases and safety reports

safety reports
provide The content of these documents usually include; (Offshore Safety Case)
document
evidence that an Details of the Operator
oil and gas Installation Design Details
installation is
safe. Major accident hazards Identification

Outline the Major accident hazard management

typical content of
these types of Major accident risks and control measures
documents.
Major accident prevention policies.

Audit and audit reports arrangements

Safety management system is in place.

Emergency plan.

Identify three Marine hazards associated with FPSO's

marine hazards
associated with Flaring near production area
all types of
Floating Platform Crew transfer
Storage
Offloading Units Weather
- FPSO's
Environmental impact

Transferring oil to tanker vessels

 Risk of collision from sea going vessels

Supply/logistics difficulty

Pirates

Terrorists

Spillage damage to marine life

Identify suitable Suitable controls that minimize risk when operating Floating Platform
controls that Storage Offloading Units - FPSO's
minimize risk
when operating Security & surveillance
Floating Platform
Storage Competent and certified captain and crew
Offloading Units
- FPSO's Safety Management systems including Inspection

Permits-to-Work, Risk Assessments

Procedures for the control of spillages

Suitable fire and gas detection systems

Have an adverse weather policy

A pump EIGHT risks to the operator when preparing the pump for maintenance are:
containing
flammable 1. Asphyxiation due to displacement of 02
corrosive slurry
has been stopped 2. Fire
for maintenance.
3. Explosion
An operator will
prepare the pump 4. Irritant/Corrosive substance
for maintenance
using a nitrogen 5. Incorrect isolation of valves
supply, drain
header and 6. Incorrect Lock Out/Tag Out system
collection vessel.
Using this 7. Lack of gas monitoring
information;
8. Burst pressure lines causing injury
Outline EIGHT
risks to the
operator when
preparing the
pump for
maintenance

Identify the Controls available to maintain Safety Critical Equipment:

controls available
to maintain Safety Process Control Systems
Critical
Equipment Process and Emergency Shutdown systems

Fire and Gas Systems

Drilling Control systems

What does the Blowdown

term "Blowdown"
refer to The removal of liquid content from process vessels and equipment to reduce
the likelihood of fires or explosions occurring.

It is similar to depressurisation carried out in the gas process system

Following an Operational control measures that could minimise the risk of an incident
annual shutdown before filling equipment in preparation for start-up:
of a process plant
outline the Ensure work carried out under the controls of a PTW
operational
control measures Emergency plan - in place
that could
minimise the risk Suitable supervision of the operation
of an incident
before filling Trained and competent employees
equipment in
preparation for Eliminate or control ignition sources
start-up
Certification of items that have been maintained or replaced

Establish all isolations reconnected, all blanks removed

Ensure all safety systems are operational

Ensure all systems are tested before start-up

Management of overrides

Complete PTW
Outline Operational control measures that could minimize the risk of plant damage
operational or injury during start-up or shutdown of a process:
control measures
that could Shutdown
minimize the risk
of plant damage Ensure work carried out under the controls of a PTW
or injury during
start-up or Emergency plan - in place
shutdown of a
process Suitable supervision of the operation

Trained and competent employees

All services are;

Stopped
Isolated
Drained down
Blanked

Empty & drain hydrocarbon facilities, with all liquids, gases and residues
removed leaving the plant safe to work on

Eliminate or control ignition sources

Start-up

Certification of items that have been maintained or replaced

Establish all isolations reconnected, all blanks removed

Ensure all safety systems are operational

Ensure all systems are tested before start-up

Management of overrides

Complete PTW

Large quantities Process safety control measures that would minimize the risk of an
of hydrocarbons explosion at a process plant:
are contained in a
process plant, Gas detectors
with the risk of
gas release and Zoning
explosions.
Passive Fire Protection systems
Identify process
safety control Structural Fire Protection systems
measures that
would minimize Fire Detection Systems
the risk of an
explosion. Process safety systems and controls

Flares and vents

Excluding active Physical design features of an offshore platform that would minimize risk to
and passive fire operating personnel in the event of a major incident:
protection
systems. Plant separation

Outline physical Compartmentalization

design features of
an offshore Protection of personnel / equipment
platform that
would minimize Means of escape - More than one
risk to operating
personnel in the Blow out panels - Explosion proof
event of a major
incident Temporary refuges with communications & control and means of escape

Outline physical Physical design features of an oil and gas installation that would minimize
design features of risk to operating personnel in the event of a major incident.
an oil and gas
installation that Temporary Refuge
would minimize
risk to operating Routes to and from the TR
personnel in the
event of a major Means of evacuation from these points
incident.
Facilities within the TR for monitoring and control of the incident and
organizing evacuation

Explain the Safe Isolation

meaning of the
term safe The interruption, disconnection and separation of all the equipment's motive
isolation power sources in such a way that this disconnection and separation is secure
by lockable means

What does the Blowdown

term "Blowdown"
refer to. The removal of liquid content from process vessels and equipment to reduce
the likelihood of fires or explosions occurring.
 It is similar to depressurisation carried out in the gas process system

Outline the The contents of a typical permit-to-work include:

contents of a
typical permit- Permit Title
to-work
Date & Time

Permit reference number & reference to Isolation

certificates

Description of the task to be carried out

Work location

Duration of permit

Potential Hazards

Precautions that are needed (ppe rpe etc)

Details of the person authorising the work

Signature of the worker carrying out the work

Risk Assessment / JSA number

Extension / Shift Handover Procedures

Details of when the permit is revoked or finished

Outline how the Hot Work permits would vary as hot works may ignite flammable materials.
contents of a hot
work permit are These would need to be eliminated or removed (preferable) or protected
different to a
typical permit- Control of ignition sources through damping down or fire blankets
to-work
Firefighting equipment has been checked and placed on location together
with trained personnel.

Gas test details must be included.

Additional PPE appropriate to task to be used in addition to the daily

mandatory PPE as part of the special precautions to be indicated on the hot
work permit

Outline FOUR FOUR types of work activity associated with an oil platform that might
types of work require permit to-work:
activity
associated with Hot Work
an oil platform
that might Welding, burning or grinding.
require permit
to-work AND give Cold work
a reason in EACH
case for the Scaffolding, over side working
requirement
Confined space entry

Storage tanks, vessels or drains

Isolation

mechanical or electrical

This can be mechanical or electrical, where systems or processes need to be

isolated in order for certain jobs to take place.

Should a valve on an engine need to be changed, the engine needs to be

isolated to prevent accidental activation while someone is working on the
engine to prevent injury

Ensure all systems are Locked Out/Tagged Out

Outline the Creep;

following failure
modes that may A constant load at high temperature causing a slow process of plastic
lead to loss of deformation over a period of time.
hydrocarbon
containment from
storage
tanks/vessels or
pipelines

Stress corrosion Stress corrosion cracking;

cracking
Occurs under tensile stress and is worse in a corrosive environment at
elevated temperatures

Thermal shock; Thermal shock;

Cracking that results from rapid and extreme temperature changes e.g. from
hot to cold and vice versa
Brittle fracture Brittle fracture:

Occurs suddenly without warning, normally due to an excessive load, small

cracks spread through the material so quickly that a massive failure is
produced

Give the meaning Flammable range

of the following
terms: Flammable Range gives the proportion or fraction of combustible gases in a
mixture of air, between which the mixture is still flammable
Flammable range

Upper flammable Upper flammable limit - UFL

limit - UFL
The maximum concentration of fuel in air that is sufficient to allow
combustion to occur.

Above the UFL the mixture is too rich to burn

Lower flammable Lower flammable limit - LFL

limit - LFL
The minimum concentration of fuel in air that is sufficient to allow
combustion to occur.

Bellow the LFL, the mixture is too lean to burn

Flashpoint Flashpoint

Flashpoint is the lowest temperature at which sufficient vapour is given off

to "Flash" - that is, ignite momentarily (and not carry on burning) when a
source of ignition is applied to the vapour

Identify the three Flammability falls into three distinct classifications:

classifications
within Extremely Flammable - Flash point below 0 Celsius.
flammability
Highly Flammable - Flash point between 0 and 21 Celsius

Flammable - Flash point between 22 and 55 Celsius

Explain where the Flammable Range :

flammable range
exists in a The lower flammable limit is the minimum concentration of fuel in air that
fuel/air mixture will allow combustion to occur - below this the mixture is too lean.

The upper flammable limit is the maximum concentration of fuel in air that
will allow combustion to occur - above this the mixture is too rich.
 The flammable Range lies between these two limits

Identify the zone Zone classifications relating to flammable atmospheres:

classifications
relating to Zone 0
flammable
atmospheres Area where an explosive gas atmosphere is present continuously or for long
periods

Zone 1

Area where an explosive gas atmosphere is likely to occur in normal

operations

Zone 2

Area where an explosive gas atmosphere is not likely to occur in normal

operations — if it occurs will only exist for a short time

List the three Hazard zones and the categories of electrical equipment to be used in each
hazard zones and zone:
the categories of
electrical Zone 0 = Category 1 equipment
equipment to be
used in each zone Zone 1 = Category 1 0r 2 equipment

Zone 2 = Category 1, 2 or 3 equipment

List the Hazards Hazards associated with LNG:

associated with
LNG Fire and explosion

Pool Fires

Cold Burns

Bleve's & Vapour Cloud Explosions

Cold Burns

Asphyxiation in a confined space

Terrorism

List the Hazards Hazards associated with LPG - Liquid Petroleum Gas
associated with
LPG - Liquid Extremely Flammable
Petroleum Gas
(Propane/Butane) Heavier than air and collects at low levels

An Asphyxiant at high concentrations

LPG in liquid form can cause severe cold burns to the skin owing to its rapid
vaporization

Stored under pressure - Leaks can lead to fire & explosion

What are the The dangers of LPG lie with its flammability and explosive properties, and
main dangers the fact that it is stored under great pressure, and hence very low
associated with temperature, to retain its liquid state.
LPG
On release, LPG reverts to its gaseous state, with rapid and considerable
increase in volume.

Identify THREE THREE types of fire or explosion that could occur:

types of fire or
explosion that BLEVE Boiling Liquid Expanding Vapour Explosion
could occur
CVCE's Confined Vapour Cloud Explosion

UVCE's Unconfined Vapour Cloud Explosion

In relation to "BLEVE" is an acronym for "Boiling Liquid Expanding Vapour Explosion"

Hydrocarbon
Vapour Clouds It is an explosion caused by the rupture of a vessel containing a pressurized
Define what is liquid above its boiling point.
meant by "BLEVE's

Outline how a "BLEVE" is an acronym for "Boiling Liquid Expanding Vapour Explosion"
Boiling Liquid
Expanding It is an explosion caused by the rupture of a vessel containing a pressurized
Vapour Explosion liquid above its boiling point
(BLEVE) occurs
If an ignition source is present and the vapour is flammable, a sudden
deflagration (fire) or explosion may occur, further increasing the energy of
the sudden vapour release, and causing the creation of a fireball that
releases a sudden burst of radiant (heat) energy.

As a result of the explosion the containment vessel could fragmentise into

airborne missiles

Identify TWO TWO ways in which vapour clouds can be generated:

ways in which
vapour clouds Confined / unconfined generation
can be generated
 Vaporization of a release of liquefied gas from a ruptured vessel or pipeline

Loss of containment, such as Buncefield incident

Outline how a A vapour cloud explosion can be generated by:

vapour cloud
explosion can be Confined / unconfined generation
generated
Vapour cloud explosions may arise from vaporization of a release of
liquefied gas from a ruptured vessel or pipeline contacting an ignition source

Identify the The physical consequences of vapour cloud explosions:

physical
consequences of Overpressure
vapour cloud
explosions Fire & explosion

Airborne missiles from resulting debris

In relation to CVCE - Confined Vapour Cloud Explosion

Hydrocarbon
Vapour Clouds Explosion of a liquefied hydrocarbon or other flammable gas cloud in a
Define what is confined Space, such as vessels, pipelines, buildings
meant by:

CVCE's

In relation to UVCE - Unconfined Vapour Cloud Explosion

Hydrocarbon
Vapour Clouds Explosion of a liquefied hydrocarbon or other flammable gas cloud in an
Define what is unconfined space. Such as a fuel leaking from a Storage facility, e.g.
meant by: Buncefield incident

UVCE's

Describe the Passive Fire Protection:

difference
between active Is predominantly thermally insulating design elements that are put and left
and passive fire in place, like fire barriers, fire resistant coatings and cladding.
protection
measures They help stop escalation of the fire and protect routes.

Active Fire Protection:

Means measures that are brought into play when a fire is detected, in order
to actively tackle/extinguish the fire,

e.g. fixed sprinkler installations, hoses and monitors.

Following Hazards associated with LSA radioactive sludge:
preparation of a
vessel for Risk of fire, explosion.
maintenance
within an oil and Toxicity to Divers
gas installation a
low specific
activity (LSA)
radioactive
sludge was
encountered.

Identify hazards
associated with
the sludge.

FOUR control FOUR control measures to reduce the risk to workers exposed to the sludge:
measures to
reduce the risk to Wearing of correct PPE - Respirator
workers exposed
to the sludge. Monitoring devices and personal sensors

Explosion proof certified equipment

Safety procedures

Training etc

Identify TWO TWO other pieces of workplace equipment where the sludge may be found:
other pieces of
workplace Shale Shakers
equipment where
the sludge may Mud Pits
be found.

Identify the There are many factors that have to be considered when assessing the health
factors that and safety competence of a contractor:
should be
considered when HSE Policy's
assessing the
health and safety Certifications - Accreditations
competence of a
contractor Commitment to HSE from senior management and how this is demonstrated

Safety Management system and implementation

Safety tools used
 Project records - track record of similar projects

Past Performance - Safety Statistics - KPI's records achieved

Risk Management system and procedure

Previous incident investigations reports

References from previous clients

Training Records

Proof of applicable insurance policies

Competency of employees and project staff

Details of Sub-contractors

Safety Initiatives used with in the business and projects

Oil and gas Risks at Oil and gas installations when working with water include:
installations use
water for cooling When stored under pressure as in Fire lines and steam water lines
and heating
although it can be May contain bacteria if not circulated (dead end pipe legs)
a hazard in some
situations May cause an unstable reaction when mixed with some hydrocarbons

Identify risks with Water can flash to steam in processes operating above its boiling point
water AND give a
practical example Can react violently when mixed with other chemical
in EACH case
Cause long term corrosion

Boiler operations

A distillation A fixed water deluge system could provide protection for a distillation
column requires column by extinguishing the fire, controlling the fire.
protection from
fire through Or by providing protection for the adjacent distillation columns with the
passive and active cooling effect the fixed water deluge system provides
fire protection ----------------------------------------------------------------
---------
(a) Outline how a Water mist systems and a Firewater monitor and hose-reels
fixed water
deluge system
could provide fire
protection (2)

(b) Identify two

additional
examples of
active fire
protection. (2)

A distillation Metal legs of a distillation column should be protected because:

column requires
protection from Fires can cause thermal weakening of steelwork and result in the collapse of
fire exposure structures, failure of equipment, and subsequent escalation of the initial
through active or event
passive fire
protection

Outline why the

metal legs of the
column should be
protected

Identify TWO Examples of passive fire protection:

examples of
passive fire Fire resistant coatings
protection
Thermal insulation

Cladding

Fire doors

Fire walls

Identify TWO Elements of the fire triangle:

elements of the
fire triangle Fuel

Heat

Oxygen

Identify THREE THREE properties of Hydrogen Sulphide - H2S:

properties of
Hydrogen Highly toxic
Sulphide - H2S
Flammable gas
 Heavier than air and hence tends to accumulate in low-lying areas

Pungent, smells like rotten eggs but rapidly destroys the sense of smell

Outline the types Failure mode of storage tanks that may lead to loss of containment from
of failure mode of hydrocarbon:
storage tanks
that may lead to Overfilling
loss of
containment from Corrosion
hydrocarbon
Construction fault

Design Fault

Bund Failure

Operator / Instrument Error

Tank not tested

Foundations Overload

Vacuum effect during emptying of tank

During an TWO reasons for providing a tank bund:

inspection an
external fuel Prevent a potential leak causing environmental damage
storage tank is
found without a Control any leak within a known area
bund.
Ensure the maximum quantity of product can be contained within the bund
Identify TWO
reasons for
providing a tank
bund

Outline the Features which should be included in the design of a tank bund:
features which
should be Ensure the maximum quantity of product can be contained within the bund
included in the at least 110%
design of a tank
bund Make allowance for the space occupied by other tanks

Located away from traffic routes

 Impermeable base

No drain valve- rain water should be pumped out

Lightening protection

Petroleum How a fire risk may exist with floating tanks:

storage tank fires
have been Lightning strikes
reduced
substantially by Leaks due to corrosion, damaged pipe work
using floating
roofs, but a fire Product overfill or high internal pressures
risk may still
exist. Rainwater or snow load sinks the roof and exposes fuel vapours

Outline how a fire

risk may exist
with floating
tanks

Identify TWO TWO examples of fire protection systems used on floating roof tanks:
examples of fire
protection Fixed foam systems
systems used on
floating roof Fire Monitors
tanks
Portable foam fire fighting systems

Hose lines

Outline the fire For floating roof tanks the main means of fire protection is to use fixed foam
protection that installations which spread foam around the rim seal.
would be used on
a floating roof Monitors and water deluge cooling sprays may also be used
tank

Identify the The environmental effects if a tank failure occurred:

environmental
effects if a tank Oil contamination of ground would be highly toxic to plant and animal life
failure occurred and could enter rivers and waterways depriving life of oxygen

Outline the The tiered three-level approach to emergency medical treatment is:
tiered, three-level
approach to Level 1 - Basic first-aid:
emergency
medical Intended as first line treatment to preserve life and stabilise the injured:
treatment
Requiring the provision of an adequate number of trained first-aiders
 (depending on the level of risk, number of workers, installation remoteness,
etc.) and first-aid equipment (first-aid kits etc.).

Level 2 - Advanced first-aid

Requiring first-aiders with more advanced skills (such as the use of

specialised equipment or methods).

Level 3 - Utilising medics or paramedics

With remote support from other medical professionals, who will have specific
medical training and be capable of administering drugs, advanced wound
treatment, etc.

Distinguish Offshore evacuation methods are:

between primary,
secondary and Primary Method
tertiary offshore
evacuation The usual none-emergency method, e.g. ship.
methods
Secondary method

Used when the primary method is unavailable, e.g. lifeboat launched from
the rig.

Tertiary Method

Heavily reliant on the individuals own effort and used as a last resort when
all other methods are unavailable, e.g. putting on lifejackets and survival
suits and jumping into the sea

An operator is Factors that influence the generation of the electrostatic charge:

draining a
flammable liquid Hot Dry Weather
from process pipe
work to a metal Flow rate,
container.
Overfilling
The supervisor is
concerned about Lack of earthing / bonding
the possibility of
an electrostatic Liquid instability
charge forming
and stops this Splash Filling
operation until a
risk assessment Agitation
is undertaken.
Filters
During this work
activity:

Identify factors
that influence the
generation of the
electrostatic
charge;

Outline practical Practical ways of minimising the formation of an electrostatic charge:

ways of
minimising the Humidification of the atmosphere
formation of an
electrostatic Antistatic additives
charge
Reduce flow velocity

Intrinsically safe equipment

Bonding & Grounding of equipment & containers

Avoid splash filling by submerging the fill pipe bellow the liquid level in the
container

Increasing the conductance of floors, footwear

9 terms

Terms
The flammability of gas is a factor
to consider with maintenance tasks
and particularly hot work permits.
The diagram below highlights the
flammable range of a gas.
Definitions
When carrying out Gas Monitoring during Hot Work the
gas monitor activates at a low percentage of the LFL well
in advance of any flammable atmosphere in order to alert
personnel to take action

Explain the significance of the

atmospheric range between 0% and
the LFL, indicated as (a) on the
diagram, in relation to hot work
permits.
Following an annual shutdown of a
process plant outline the
operational control measures that
could minimise the risk of an
incident before filling equipment in
preparation for start-up.
Outline FOUR types of work activity
associated with an oil platform that
might require permit to-work AND
give a reason in EACH case for the
requirement.
Control measures that could minimise the risk of an
incident before filling equipment in preparation for start-
up are:
Control system - process controls intelligent alarms
Suitable procedures and methods
Trained and competent employees
Suitable supervision of the operation
Detection systems- flow/ no flow/ overflow
Zone controls
Use of flares / over flow / over pressure devices
Maintenance and integrity of systems
Control of Open ends?
Management of Overrides
Hot Work
Hot Work Permits are generally applied to any type of
work, which involves actual or potential sources of
ignition, and work for which there may be a risk of a fire
and/or explosion, or which involves the emission of toxic
fumes from the application of heat.
Cold work
Cold Work Permits are frequently used to cover a variety of
potentially hazardous activities which are not of a type
covered by a hot work permit, such as scaffolding, over
side working, painting
Confined Space Entry
A confined space is any vessel, enclosure or compartment
large enough to take a person where the atmosphere may
be dangerous or incompatible to a person entering

A pump containing flammable
corrosive slurry has been stopped
for maintenance.
An operator will prepare the pump
for maintenance using a nitrogen
supply, drain header and collection
vessel.
Using this information;
Outline EIGHT risks to the operator
when preparing the pump for
maintenance
Oil and gas installations use water
for cooling and heating although it
can be a hazard in some situations.
Identify risks with water AND give a
practical example in EACH case
Outline operational control
measures that could minimize the
because of flammable/toxic gases and other substances
or oxygen deficiency.
Diving
Diving certificate can be used to control the diving activity
itself and to ensure that there are no other activities
taking place nearby which create unnecessary additional
risks eg over-side work, live firewater intake pumps
Isolation
An Isolation Certificate is required before any work can be
started on process, mechanical or electrical plant or
equipment. An Isolation Certificate is also required where
access to the site of work is restricted or its safety is
jeopardized by any adjacent plant or equipment. An
activity cannot commence until all the necessary isolation
requirements are in place
Asphyxiation due to displacement of 02
Fire
Explosion
Irritant / Corrosive substance
Incorrect isolation of valves
Incorrect Lock Out/Tag Out system
Lack of gas monitoring
Burst pressure lines causing injury
When stored under pressure as in Fire lines and steam
water lines
May contain bacteria if not circulated as in dead end pipe
legs
May cause an unstable reaction when mixed with some
hydrocarbons
Start-up or shutdown Operational Control Measures are:
risk of plant damage or injury Alarm Systems
during start-up or shutdown of a
process. Relief Valves for reducing pressure

Flares for burning off excess gas

Fire and Gas protection systems

Emergency shutdown systems

Passive fire protected control rooms and temporary refuge

Competently trained operators

Detection systems Flow/No Flow/overflow

Suitable supervision of the operation

Zone Controls

Outline the contents of a typical Date & Time

permit-to-work
Description of the task to be carried out

Work location

Duration of permit

Potential Hazards

Isolations that have been made

Precautions that are needed (ppe rpe etc)

Details of the person authorising the work

Signature of the worker carrying out the work

Risk Assessment / JSA number

Details of when the permit is revoked or finished

Outline how the contents of a hot Hot Work permits would vary as hot works may ignite
work permit are different to a flammable materials.
typical permit-to-work
These would need to be eliminated or removed
 (preferable) or protected

Control of ignition sources through damping down or fire

blankets

Firefighting equipment has been checked and placed on

location together with trained personnel.

Gas test details must be included.

Additional PPE appropriate to task to be used in addition

to the daily mandatory PPE as part of the special
precautions to be indicated on the hot work permit.

Large quantities of hydrocarbons Process safety control measures that would minimise the
are contained in a process plant, risk of an explosion are:
with the risk of gas release and
explosions. Passive Fire Protection systems

Identify process safety control Structural Fire Protection systems•

measures that would minimise the
risk of an explosion. Fire Detection Systems — Heat detectors; Flame detectors;
Smoke detectors; Duct Sampling; Acoustic detectors

Gas detectors

Zoning

Process safety systems and controls; flares and vents

5 terms

Terms Definitions
Outline the term Flashpoint is the lowest temperature at which sufficient vapour is given
Flash Point off to "Flash" - that is, ignite momentarily, and not carry on burning,
when a source of ignition is applied to the vapour

Give the meaning of UFL The maximum concentration of fuel in air that is sufficient to allow
the following term. combustion to occur.

Upper flammable Above the UFL the mixture is too rich to burn.
limit (UFL)

Give the meaning of LFL - The minimum concentration of fuel in air that is sufficient to allow
the following term. combustion to occur.
Lower flammable Bellow the LFL, the mixture is too lean to burn.
limit (LFL)

Give the meaning of Flashpoint is the lowest temperature at which the vapour of a
the following term. combustible liquid can ignite in air

Flashpoint.

Give the meaning of Highly flammable liquids are substances which, when hot, catch fire in
the following term. contact with air at ambient temperature without any energy input.

Highly flammable Liquids with a flash point below 32°C

liquids.

7 terms

Terms Definitions
Piper Alpha accident; Piper Alpha Facts:

How it happened and what course of Fire Explosion knocked out fire proof (not Blast proof)
actions were taken to prevent walls
recurrence, Lessons learned
Control room damaged in 1st blast

Initial fire could have been extinguished

Fire pumps were set to manual

Lifeboats all in one location and could not be reached

from accommodation block

Other platforms did not shutdown instead continued

pumping hydrocarbons to Piper Alpha, increasing the
 fire

Piper Alpha Failures Piper Alpha Failures:

Permit to Work System - two permits issued for same

task

Platform layout

Delayed decision making

Lack of training

Active fire system set from Auto to Manual

Passive fire protection

Lifeboats

Communications/Shift Handover

Buncefield Incident: Buncefield Incident Causes:

Causes: A fill level gauge and high fill level alarm failed.

Fuel storage tank overfilled.

Fuel leaked out of the vents at the top of the storage

tank into the bund

This resulted in a Vapour Cloud

The vapour cloud flowed offsite

Ignition leading to the vapour cloud explosion took

place at a pump house

Buncefield Lessons learned: Buncefield Lessons learned:

Need for back-up systems/processes for safety critical

devices.

Bunds/containment walls to be designed to withstand

heat/explosion.

Importance of coordinated response & emergency

planning.
 Business/Disaster interruption and or recovery plan.

Dealing with media after the incident.

Flixboro Disaster 1974 Flixboro Disaster 1974

UK Chemical Plant, Unconfined vapour UK Chemical Plant, Unconfined vapour cloud

cloud explosion explosion:

28 Dead
36 Injured

Texas City refinery Disaster 2005 Texas City refinery Disaster 2005

What Happened Overfilling of a distillation column led to loss of

containment leading to

Unconfined Vapour Cloud Explosion

15 Killed - 180 Injured.

Texas City refinery Disaster 2005 Texas City refinery Disaster 2005 Lessons leaned:

Lessons leaned Poor management/Leadership

Balanced approach to cost "V" health & safety

No Management of Change from AMACO to BP

SOP not enforced and outdated

Preventative maintenance programme ineffective

Missing control room staff resulting in

overwork/fatigue

Audit recommended plant upgrades; they were not

done as part of cost cutting

99 terms
Terms Definitions
Identify the key Identify the hazards
stages of a
workplace risk Decide who might be harmed and how
assessment
Evaluate the risks and decide on precaution

Record your findings and implement them

Review your assessment and update if necessary

Outline the "ALARP" is short for "as low as reasonably practicable".

meaning of `as
low as ALARP involves weighing risk against the trouble, time and money needed to
reasonably control it. Thus, ALARP describes the level to which we expect to see
practicable' - workplace risks controlled.
ALARP
ALARP allows us to set goals for duty-holders

It is a key part of the general duties of the Health and Safety at Work Act 1974

ALARP is about weighing the risk against the sacrifice needed to further
reduce it

To spend £1m to prevent five staff suffering bruised knees is obviously

grossly disproportionate

But

To spend £1m to prevent a major explosion capable of killing 150 people is

obviously proportionate

Many major oil / Establish the Chain of Events

gas incidents
have occurred in Establish Causes of incident
recent years, eg
Piper Alpha, Establish Route Cause
Texas City,
Mumbai High. Establish process failures

Outline reasons Establish Lessons learnt to prevent similar occurrences

why such
incidents should
be investigated
by employers.
Identify four Authorities
parties, other
than the Insurance Companies
employer, who
may want to Manufactures
investigate
these types of Suppliers
incident

List the Hazards Hazards associated with LNG;

associated with
LNG Fire and explosion

Pool Fires

Bleve's & Vapour Cloud Explosions

Explosion in confined space

Cold Burns

Asphyxiation in a confined space

Terrorism

List the Hazards Hazards associated with LPG - Liquid Petroleum Gas (Propane/Butane)
associated with
LPG - Liquid Highly Flammable
Petroleum Gas
(Propane/Butane Fire & explosion
)
Cold Burns, Frostbite - In its Liquid form

Bleve's

Pool Fires

What are the The dangers of LPG lie with its flammability and explosive properties, and the
main dangers fact that it is stored under great pressure, and hence very low temperature, to
associated with retain its liquid state.
LPG
On release, LPG reverts to its gaseous state, with rapid and considerable
increase in volume.

An employee Documented information that might be used by the investigating team to

was seriously determine the causes of an accident;
injured in an
accident at work PTW
within an oil and
gas installation. Photographs

Identify the CCTV Footage

documented
information that Witness Statements
might be used
by the Previous Health and Safety Meeting Minutes
investigating
team to Risk Assessments / JSA's
determine the
causes of this Method Statements
acciden
Control Room Data

Internal incident report forms

Maintenance records

Disciplinary records

Safe systems of work

Audit / inspection reports

SOP's

D & A Test results

Outline the term Flashpoint is the lowest temperature at which sufficient vapour is given off to
Flash Point "Flash" - that is, ignite momentarily, and not carry on burning, when a source
of ignition is applied to the vapour.

At the flash point the application of a naked flame gives a momentary flash
rather than sustained combustion, for which the temperature is too low

Give the UFL - The maximum concentration of fuel in air that is sufficient to allow
meaning of the combustion to occur.
following term
Above the UFL the mixture is too rich to burn
Upper
flammable limit
- UFL

Give the LFL - The minimum concentration of fuel in air that is sufficient to allow
meaning of the combustion to occur.
following term
Bellow the LFL, the mixture is too lean to burn.
Lower
flammable limit
LFL

Give the Flashpoint is the lowest temperature at which sufficient vapour is given off to
meaning of the "Flash" - that is, ignite momentarily, and not carry on burning, when a source
following term of ignition is applied to the vapour.

Flashpoint

Give the Highly flammable liquids

meaning of the
following term Liquids with a flash point below 32°C.

Highly Substances which, when hot, catch fire in contact with air at ambient
flammable temperature without any energy input
liquids

Identify the 1. Obtain basic facts:

information that
might be Names of injured
included on a Witnesses
checklist for an Place
investigation Date and time
following an Persons in area
accident Ascertain substances / chemicals involved
Injuries
Damage to equipment

2. Establish circumstances:

What happened?
Causes
Events leading to incident
Competence
Supervision
Behavior

3. Preventive Measures - Review the risk assessment for the activity:

What precautions should have been in force?

What training should those carrying out the activity have received?

What precautions were actually taken? Compare them with those which should
have been taken.
 What training was actually given? Compare it with training which should have
been given.

4. Was the initial response adequate?:

Firefighting
First aid
Containment and spillage

5. Identify underlying causes:

Management or supervision failure?

Lack of competence?
Inadequate training?
Shortcomings in original design of
Equipment
Facilities
Absence of a system for maintenance.

6. Determine action needed to prevent a recurrence

Improve physical safeguards

Introduce better test and maintenance arrangements
Improve work methods,
Provide and use personal protective equipment
Make changes to supervision and training arrangements,
Review procedures involving outside contractors
Improve inspection systems

Following Hazards associated with LSA, radioactive sludge;

preparation of a
vessel for Risk of fire, explosion.
maintenance
within an oil and Toxicity to Divers
gas installation
a low specific
activity - LSA -
radioactive
sludge was
encountered

Identify hazards
associated with
the sludge
Outline FOUR FOUR control measures to reduce the risk to workers exposed to LSA sludge;
control
measures to Wearing of correct PPE - Respirator
reduce the risk
to workers Monitoring devices and personal sensors
exposed to the
sludge. Explosion proof certified equipment

Safety procedures

Training

Identify TWO TWO other pieces of workplace equipment where the sludge may be found;
other pieces of
workplace Shale Shakers
equipment
where the Mud Pits
sludge may be
found.

An oil and gas Factors that should be considered when assessing the health and safety
industry competence of a contractor:
employer is
reviewing HSE Policy's
tendering
contracts for an Certifications - Accreditations
offshore
platform Commitment to HSE from senior management and how this is demonstrated -
modification. Safety Management system and implementation - Safety tools used

Identify the Project records - track record of similar projects

factors that
should be Safety Statistics - KPI's records and achieved
considered
when assessing Risk Management system and procedure
the health and
safety Previous incident investigations reports
competence of a
contractor. Competency of employees and project staff

Safety Initiatives used with in the business and project

Outline the term A Major Accident Is:

Major Accident
An unplanned event with potential for multiple fatalities and or serious
damage, possibly beyond the asset itself.
 Typically these are hazardous releases, but also include major structural
failure or loss of stability that could put the whole asset at risk.
------------------------------------------------------------------
-----------
1. A fire, explosion or other release of a dangerous substance involving death
or serious personal injury to persons on the installation or engaged in an
activity on or in connection with it

2. Any event involving major damage to the structure of the installation or

plant affixed thereto or any loss in the stability of the installation;

3. The failure of life support systems for diving operations in connection with
the installation, the detachment of a diving bell used for such operations or
the trapping of a diver in a diving bell or other subsea chamber used for such
operations

4. Any event arising from a work activity involving death or serious personal
injury to five or more persons on the installation or engaged in an activity in
connection with it

Describe the The Key Principles of Safe Shift Handover are:

Key Principles of
Safe Shift A formal procedure
Handover
High priority conducted Face to Face

Two way communication, with both parties taking joint responsibility

Both verbal & written communication

Based on the analysis of the needs of incoming staff

Given as much time as necessary

Provide as much, information as necessary

In relation to "BLEVE" is an acronym for "Boiling Liquid Evaporating Vapour Explosion"

Hydrocarbon
Vapour Clouds It is an explosion caused by the rupture of a vessel containing a pressurized
Define what is liquid above its boiling point.
meant by:

BLEVE's

In relation to CVCE - Confined Vapour Cloud Explosion

Hydrocarbon
Vapour Clouds Explosion of a liquefied hydrocarbon or other flammable gas cloud in a
Define what is confined Space, such as vessels, pipelines, buildings
meant by:

CVCE's

In relation to Unconfined Vapour Cloud Explosion

Hydrocarbon
Vapour Clouds Explosion of a liquefied hydrocarbon in a unconfined space. Such as a fuel
Define what is leaking from a Storage facility, e.g. Buncefield incident
meant by:

UVCE's

Many serious Main operational issues communicated at shift handover include:

accidents or
incidents, Operational status of the installation or process
including the
Piper Alpha Maintenance completed
disaster in
1988, involve Maintenance still ongoing
root causes
associated with Maintenance planned during on-coming shift
shift handover.
Routine operation for next shift
An outgoing
operator is Updating PTW's - Closed out or still open
handing over to
an incoming Any events that happened during the out-going shift, Emergencies, incidents,
operator at the accidents, breakdowns, plant overrides.
end of a shift.
Situations where safety systems have been overridden e.g. fire deluge system
Outline the main switched to manual operation
operational
issues Planned events during oncoming shift, shutdowns, drills exercises
communicated
at shift Operational issues that will occur during the on-coming shift
handover
Changes in plant parameters

Outline FOUR Hot Work

types of work
activity Hot Work Permits are generally applied to any type of work, which involves
associated with actual or potential sources of ignition, and work for which there may be a risk
an oil platform of a fire and/or explosion, or which involves the emission of toxic fumes from
that might the application of heat.
require permit
to-work AND Cold work
give a reason in
EACH case for Cold work shall include but not be limited to the following: scaffolding,
the requirement. cleaning, over side working, painting

Confined space entry

A confined space is any vessel, enclosure or compartment large enough to

take a person where the atmosphere may be dangerous or incompatible to a
person entering because of flammable/toxic gases and other substances or
oxygen deficiency.

Isolation

An Isolation Certificate is required before any work can be started on process,

mechanical or electrical plant or equipment. An Isolation Certificate is also
required where access to the site of work is restricted or its safety is
jeopardized by any adjacent plant or equipment. An activity cannot commence
until all the necessary isolation requirements are in place

Diving

Diving certificate can be used to control the diving activity itself and to ensure
that there are no other activities taking place nearby which create unnecessary
additional risks e.g. over-side work, live firewater intake pumps.

Identify TWO Sudden depressurization

ways in which
vapour clouds Rupture of vessel
can be
generated Loss of containment

Uncontrolled buildup of pressure

Outline how a Vapour cloud explosion can be generated by;

vapour cloud
explosion can Confined / unconfined generation
be generated
Vapour cloud explosions may arise from vaporization of a release of liquefied
gas from a ruptured vessel or pipeline

Identify the Physical consequences of vapour cloud explosions;

physical
consequences of Overpressure
vapour cloud
explosions Fire & explosion
 Resulting debris as airborne missiles

A pump Asphyxiation due to displacement of 02

containing
flammable Fire
corrosive slurry
has been Explosion
stopped for
maintenance. Irritant/Corrosive substance

An operator will Incorrect isolation of valves

prepare the
pump for Incorrect Lock Out/Tag Out system
maintenance
using a nitrogen Lack of gas monitoring
supply, drain
header and Burst pressure lines causing injury
collection
vessel. Using
this information;

Outline EIGHT
risks to the
operator when
preparing the
pump for
maintenance.

Oil and gas When stored under pressure as in Fire lines and steam water lines
installations use
water for May contain bacteria if not circulated e.g. dead end pipe legs
cooling and
heating May cause an unstable reaction when mixed with some hydrocarbons
although it can
be a hazard in
some situations.

Identify risks
with water AND
give a practical
example in
EACH case

Outline Shutdown:
operational
control Ensure work carried out under the controls of a PTW
measures that
could minimize All services are;
the risk of plant
damage or Stopped
injury during Isolated
start-up or Drained down
shutdown of a Blanked
process
Empty & drain hydrocarbon facilities, with all liquids, gases and residues
removed leaving the plant safe to work on

Eliminate or control ignition sources

Suitable supervision of the operation

Certification of items that have been maintained or replaced

Start-up:

Establish all isolations reconnected, all blanks removed

Ensure all safety systems are operational

Ensure all systems are tested before start-up

Complete PTW

Emergency plan - in place

A distillation A fixed water deluge system could provide protection for a distillation column
column requires by extinguishing the fire, controlling the fire or by providing protection for the
protection from adjacent distillation columns with the cooling effect the fixed water deluge
fire through system provides.
passive and
active fire
protection. Water mist systems and a Firewater monitor and hose-reels

(a) Outline how

a fixed water
deluge system
could provide
fire protection
(2)

(b) Identify two

additional
examples of
active fire
protection. (2)

Outline the Types of failure mode of storage tanks that may lead to loss of containment
types of failure from hydrocarbon：
mode of storage
tanks that may Overfilling
lead to loss of
containment Corrosion
from
hydrocarbon Construction fault

Design Fault

Bund Failure

Operator / Instrument Error

Tank not tested

Foundations Overload

Vacuum effect during emptying of tank

Identify the Controls available to maintain Safety Critical Equipment

controls
available to Process Control Systems
maintain Safety
Critical Process and Emergency Shutdown systems
Equipment
Fire and Gas Systems

Drilling Control systems

During an TWO reasons for providing a tank bund:

inspection an
external fuel Prevent a potential leak causing environmental damage
storage tank is
found without a Control any leak within a known area
bund.
Ensure the maximum quantity of product can be contained within the bund
Identify TWO
reasons for
providing a tank
bund.

During an Features which should be included in the design of a tank bund:

inspection an
external fuel Ensure the maximum quantity of product can be contained within the bund at
storage tank is least 110%
found without a
bund. Make allowance for the space occupied by other tanks

Outline the Located away from traffic routes

features which
should be Impermeable base
included in the
design of a tank No drain valve- rain water should be pumped out
bund
Lightening protection

Large quantities THREE types of fire or explosion that could occur;

of hydrocarbons
are contained in "BLEVE" Boiling Liquid Evaporating Vapor Explosion"
a process plant,
with the risk of CVCE's Explosion of a liquefied hydrocarbon in a confined space
gas release and
explosions UVCE's Unconfined Vapour Cloud Explosion

Identify THREE
types of fire or
explosion that
could occur

Large quantities Process safety control measures that would minimise the risk of an explosion:
of hydrocarbons
are contained in Gas detectors
a process plant,
with the risk of Zoning
gas release and
explosions. Passive Fire Protection systems

Identify process Structural Fire Protection systems

safety control
measures that Fire Detection Systems — Heat detectors; Flame detectors; Smoke detectors;
would minimise Duct Sampling; Acoustic detectors
the risk of an
explosion Process safety systems and controls; flares and vents

Large quantities Zone 0 - Area where an explosive gas atmosphere is present continuously or
of hydrocarbons for long periods
are contained in
a process plant, Zone 1 - Area where an explosive atmosphere is likely to occur in normal
with the risk of operations
gas release and
explosions. Zone 2 - Area where an explosive atmosphere is not likely to occur in normal
operations — if it occurs will only exist for a short time
Identify the
zone
classifications
relating to
flammable
atmospheres

Outline the Actions that should be taken by a person upon discovering a fire:
actions that
should be taken Call Alarm
by a person
upon Call emergency services
discovering a
fire Isolate any gas/ hydrocarbon supplies if possible

Evacuate area

Identify Ways in which an alarm may be raised in the event of a fire in a building:
different ways in
which an alarm Manually
may be raised in
the event of a Automatically
fire in a building
Visually

Verbally

Identify suitable Suitable working hours - rest periods

control
measures to Suitable maintenance of vehicles
minimise the
risk to Basic vehicle checks such as lights, tyre pressures
employees
using Maintain speed limits
mechanical land
transport Wear Seat belts

Correct loads and security of loads

Chemical and Hazardous material controls

Training of drivers

Traffic routes and plans

 GPS tracking systems

Outline how a "BLEVE" is an acronym for "Boiling Liquid Evaporating Vapor Explosion" and
Boiling Liquid involves a situation where. a liquid in a container - often a compressed liquid
Expanding such are propane suddenly fails, resulting in a rapid expansion of the liquid
Vapour into a vapor, releasing energy that is capable of hurtling parts of the tank or
Explosion other nearby objects for considerable distances.
(BLEVE) occurs
If an ignition source is present and the vapor is flammable, a sudden
deflagration (fire) or explosion may occur, further increasing the energy of the
sudden vapor release, and causing the creation of a fireball that releases a
sudden burst of radiant (heat) energy.

The largest documented BLEVE explosions (usually involving propane or

similar substances) have resulted in numerous deaths, some at great
distances from the initial explosion (hundreds of feet or more) from either
propulsion of debris, exposure to radiant heat, or a combination of both.

Identify the hazardous properties of Liquid Petroleum Gas - LPG

hazardous
properties of Heavier than air
Liquid
Petroleum Gas Vaporisation - Cold
(LPG).
Storage - Leaks

Fire / Explosion

Outline the risks Risks associated with Liquid Petroleum gas LPG.
associated with
Liquid Asphyxiation
Petroleum gas
LPG. Burns (Hot and Cold)

Fire / Explosion

Outline the Creep:

following failure
modes that may Is slow movement under stress, made more severe with heat for long periods,
lead to loss of especially with increases in temperature approaching melting points.
hydrocarbon
containment
from storage
tanks/vessels or
pipelines
Creep

Stress corrosion Stress corrosion:

cracking;
Occurs under tensile stress and is worse in a corrosive environment at
elevated temperatures.

Thermal shock; Thermal shock:

Cracking associated with rapid temperature change with different parts of an

object expanding by different amounts where the stress overcomes the
strength of the materials.

Brittle fracture. Brittle fracture:

Rapid run of cracks through a stressed material with plastic deformation

before failure caused by such things as repetition of inappropriate heating or
pressurising rates

A large oil Physical design features of an offshore platform that would minimise risk to
company is operating personnel in the event of a major incident:
proposing to
build a new oil Plant separation
and gas
installation in Compartmentalisation
the North Sea.
The Process Protection of personnel / equipment
Safety
Management Means of escape
Team is
analysing past Blow out panels
incidents and
database Temporary refuges with communications & control
records from
the Oil and Gas
Industry.

Excluding active
and passive fire
protection
systems, outline
physical design
features of the
platform that
would minimise
risk to operating
personnel in the
event of a major
incident

An operator is Factors that influences the generation of the electrostatic charge:

draining a
flammable Hot Dry Weather
liquid from
process Flow rate,
pipework to a
metal container. Overfilling
The supervisor
is concerned Lack of earthing / bonding
about the
possibility of an Liquid instability
electrostatic
charge forming Splash Filling
and stops this
operation until a None Conductivity of materials
risk assessment
is undertaken. Agitation

During this work Filters

activity:
Pressure Velocity
Identify factors
that influences
the generation
of the
electrostatic
charge;

An operator is Practical ways of minimising the formation of an electrostatic charge:

draining a
flammable Humidification of the atmosphere
liquid from
process Antistatic additives
pipework to a
metal container. Reduce flow velocity
The supervisor
is concerned Intrinsically safe equipment
about the
possibility of an Bonding & Grounding of equipment & containers
electrostatic
charge forming Avoid splash filling by submerging the fill pipe bellow the liquid level in the
and stops this container
operation until a
risk assessment Increasing the conductance of floors, footwear
is undertaken.
During this work
activity:

Outline practical
ways of
minimising the
formation of an
electrostatic
charge.

Outline physical Physical design features of an oil and gas installation that would minimize risk
design features to operating personnel in the event of a major incident:
of an oil and gas
installation that Temporary Refuge
would minimize
risk to operating Routes to and from the TR
personnel in the
event of a major Means of evacuation from these points
incident
Facilities within the TR for monitoring and control of the incident and
organizing evacuation

Petroleum The following fire risk may exist with floating tanks:
storage tank
fires have been Lightning strikes
reduced
substantially by Leaks due to corrosion, damaged pipe work
using floating
roofs, but a fire Product overfill or high internal pressures
risk may still
exist. Rainwater or snow load sinks the roof and exposes fuel vapours

Outline how a
fire risk may
exist with
floating tanks

Identify TWO TWO examples of fire protection systems used on floating roof tanks:
examples of fire
protection Fixed foam systems
systems used on
floating roof Portable foam firefighting systems
tanks
Hose lines
Process TWO examples of fire extinguishing media that could be used in a computer
modules in an room:
oil and gas
installation Carbon Dioxide (C02)
often contain
computer rooms Dry Chemica
that require fire
protection

Identify TWO
examples of fire
extinguishing
media that
could be used in
a computer
room.

During an The environmental effects if a fuel storage tank failure are:

inspection an
external fuel
storage tank is Oil contamination of ground would be highly toxic to plant and animal life and
found without a could enter rivers and waterways depriving life of oxygen
bund wall:

Identify the
environmental
effects if a tank
failure occurred;

Outline the Date & Time

contents of a
typical permit- Description of the task to be carried out
to-work
Work location

Duration of permit

Potential Hazards

Isolations that have been made

Precautions that are needed (ppe rpe etc)

Details of the person authorising the work

Signature of the worker carrying out the work

 Risk Assessment / JSA number

Details of when the permit is revoked or finished

Outline how the Hot Work permits would vary as hot works may ignite flammable materials.
contents of a
hot work permit These would need to be eliminated or removed (preferable) or protected
are different to
a typical permit- Control of ignition sources through damping down or fire blankets
to-work
Firefighting equipment has been checked and placed on location together with
trained personnel.

Gas test details must be included.

Additional PPE appropriate to task to be used in addition to the daily

mandatory PPE as part of the special precautions to be indicated on the hot
work permit.

A distillation A fixed water deluge system could provide protection for a distillation column
column requires by extinguishing the fire, controlling the fire or by providing protection for the
protection from adjacent distillation columns with the cooling effect the fixed water deluge
fire exposure system provides
through active
or passive fire
protection.

Outline how a
fixed water
deluge system
could provide
fire

Other than a Foam Systems

fixed water
deluge system Water Mist Systems
Identify TWO
additional
examples of
active fire
protection

A distillation Fire Walls

column requires
protection from Fire doors
fire exposure
through active Fire resistant coatings
or passive fire
protection. Thermal insulation

Identify TWO
examples of
passive fire
protection.

A distillation Fires can cause thermal weakening of steelwork and result in the collapse of
column requires structures, failure of equipment, and subsequent escalation of the initial
protection from event.
fire exposure
through active
or passive fire
protection.

Outline why the

metal legs of
the column
should be
protected.

Identify THREE Foam

suitable types of
portable Dry Powder
extinguisher
C02 Carbon Dioxide

Following an Control system - process controls intelligent alarms

annual
shutdown of a Suitable procedures and methods
process plant
Trained and competent employees
Outline the
operational Suitable supervision of the operation
control
measures that Detection systems- flow/ no flow/ overflow
could minimise
the risk of an Zone controls
incident before
filling Use of flares / over flow / over pressure devices
equipment in
preparation for Maintenance and integrity of systems
start-up
Management of overrides
Identify THREE THREE properties of Hydrogen Sulphide - H2S
properties of
Hydrogen Highly toxic
Sulphide - H2S
Flammable gas

Heavier than air and hence tends to accumulate in low-lying areas

Pungent, smells like rotten eggs but rapidly destroys the sense of smell

On an oil H2s is a flammable gas, detectors can be used to trigger alarms, control room
processing plant operators can implement process control measures, emergency procedures,
outline how shutdowns or evacuations, activate fire protection systems, and shut down
activation of an any sources of ignition remotely.
H2S detection
system, linked This can provide an early warning of a problem and help to ensure people's
to a control safety
room, could
prevent a fire.

A worker has Working at height

requested a
permit-to-work SIMOPS
in order to
replace
damaged
thermal
insulation in an
overhead pipe
rack that runs
between two
plants.

Identify THREE
hazards
associated with
this activity

A worker has Risk assessment/JSA for job

requested a
permit-to-work PTW communicated to and posted in adjacent plant
in order to
replace Close communication between adjacent plants
damaged
thermal Individual Fall Protection
insulation in an
overhead pipe
rack that runs
between two
plants

Outline control
measures that
should be
implemented to
reduce the risks
to the worker

Why are To identify the immediate root causes of the incident - incidents are usually
accident caused by unsafe acts and unsafe conditions in the workplace, but these often
investigations arise from underlying root causes.
carried out
To identify corrective actions that will prevent a recurrence - The main reason
for investigating

What are the Step 1: Gather factual information about the event.
four steps in the
investigation Step 2: Analyse that information and draw conclusions about the immediate
process and root causes.

Step 3: Identify suitable corrective measures.

Step 4: Plan the remedial actions.

Identify the A simple investigation might be carried out by the line manager of the area; a
categories of more detailed investigation often involves a team of investigators that might
staff who might include.
be considered
useful members A safety specialist
of an internal Senior managers
accident A technical specialist
investigation A worker representative
team
Offshore investigating teams may also include installation specialists from
services such as drilling, well services, maintenance, process, and deck crews.

What are the Immediate causes are the unsafe acts and unsafe conditions that gave rise to
two categories the event itself.
of immediate
cause of These will be the things that occurred at the time and place of the accident.
accidents/incide
nts For example a worker slips on a patch of oil spilt on the floor
Immediate causes:
 The slip hazard = unsafe condition
The worker walking through it = unsafe act

Give the Carcinogenic - Can induce the growth of malignant tumours

meaning of the
classification
"Carcinogenic"

What main areas The main areas a safety case/safety report cover
does a safety
case/safety Identification of major accident hazards.
report cover
Evaluation of major accident risks and measures taken (or to be taken) to
control those risks.

Arrangements for audit and audit reports.

Confirmation that an adequate safety management system is in place.

Major accident prevention policies.

Identification of the safety critical elements in place to manage major accident

hazards.

Details of the emergency plan.

Identify the Flammability falls into three distinct classifications:

three
classifications Extremely Flammable - Flash point below 0 Celsius.
within
flammability Highly Flammable - Flash point between 0 and 21 Celsius.

Flammable - Flash point between 22 and 55 Celsius.

What is the Dow The Dow Fire & Explosion Index is a rapid hazard assessment method for use
Fire and on chemical plant during process and plant development, and in the design of
Explosion Index plant layout

What are the Permits to work detail and explain:

four main areas
detailed and The work involved
explained in a
Permit to Work The isolations required

Hazards in the work to be carried out

Precautions to avoid injury

Identify four Safe isolation systems are concerned with the safe isolation of (only four
areas other than required)
electricity where
a safe isolation Hydraulic (oil) power
procedure might
be used Pneumatic power and stored energy

Residual energy

Combustion engines

Natural gravitational forces/weight

Steam or high-pressure water systems

Any combinations of or additions to the above

Explain the Safe Isolation

meaning of the
term safe The interruption, disconnection and separation of all the equipment's motive
isolation power sources in such a way that this disconnection and separation is secure
by lockable means.

Identify four Ignition sources are (select four)

ignition sources
that could arise Electrical equipment:
from
maintenance or Routinely inspect and test to prevent faults developing that could cause
operations on sparks and overheating.
an installation.
Hot work:

Welding, burning, etc. - control with a permit-to-work when done in sensitive

areas.

Smoking:

Control and limit to restricted areas on site (welfare areas).

Cooking and heating appliances:

Locate safely, confine to a galley offshore and use carefully.

Mechanical heat (overheating):

Control by good maintenance programmes.

 Deliberate ignition:

Prevent by good security, perimeter fences (onshore), CCTV and security

lighting.

How is safe Safe isolation, stoppage, draining down and blanking of systems during a
isolation, shut-down is assured by:
stoppage,
draining down It is vital for the safety of maintenance personnel that services are stopped,
and blanking of isolated, drained down, blanked etc. and remain in a safe condition for the
systems assured duration of the work.
during a shut-
down This is ensured by the work being carried out under the controls of a permit-
to work.

The permit will have a completion section to ensure that all systems are put
back into operable condition before start-up, to protect maintenance and
operations personnel

Identify the There are many factors that have to be considered when assessing the health
factors to be and safety competence of a contractor.
considered
when assessing One important factor is the contractor's experience and training, both in the
the health and type of oil and gas process that they will be working on and offshore safety
safety requirements.
competence of a
contractor. Whether the contractor has a health and safety policy in place, supported by
the necessary organisation and arrangements, and the quality and extent of
risk assessments carried out are also significant points to look for.

The contractor's recent health and safety performance (including any accident
history) should be reviewed, as well as establishing whether any enforcement
action has been taken against the contractor.

Evidence should be requested of the availability of suitable, up-to-date

method statements; arrangements to monitor health and safety and carry out
site inspections; qualifications; training records and skills cards carried by
workers; and membership of professional bodies or trade associations.

Proof of the contractor having employer's liability and public liability insurance
is an important factor, and references should be available from previous
clients.

Finally, it is important to take into consideration arrangements for the

selection and appraisal of any subcontractors and how liaison with the
 contractor is going to take place.

What are the The criteria necessary for stress corrosion cracking to occur are:
conditions
necessary for A susceptible material
stress corrosion
cracking to A corrosive environment
occur
Enough tensile stress to induce the condition

List the three Zone 0 or Zone 20 = Category 1 equipment

hazard zones
and the Zone 1 or zone 21 = Category 1 0r 2 equipment
categories of
electrical Zone 2 or Zone 22 = Category 1, 2 or 3 equipment
equipment to be
used in each
zone

In relation to Voting systems are used in order to minimise false alarms, in cases where
fire protection, activation has consequences such as shutting down production (you don't
outline the want that unless it is absolutely necessary as it will cost significant time and
principle of money).
operation of a
voting system The principle of operation is that more than one detector in a set must be
and when it triggered and it is in this sense that it is called a "voting" system.
might be used.
They can be set to different sensitivities depending on the risk - typically two
out of three

Describe the Passive Fire Protection:

difference
between active Is predominantly thermally insulating design elements that are put and left in
and passive fire place, like fire barriers, fire resistant coatings and cladding.
protection
measures They help stop escalation of the fire and protect routes.

Active Fire Protection:

Means measures that are brought into play when a fire is detected, in order to
actively tackle/extinguish the fire, e.g. fixed sprinkler installations, hoses and
monitors

Outline the fire For floating roof tanks the main means of fire protection is to use fixed foam
protection that installations which spread foam around the rim seal.
would be used
on a floating Monitors and water deluge cooling sprays may also be used
roof tank
Outline the The tiered three-level approach to emergency medical treatment is:
tiered, three-
level approach Level 1 - Basic first-aid
to emergency
medical Intended as first line treatment to preserve life and stabilise the injured:
treatment
Requiring the provision of an adequate number of trained first-aiders
(depending on the level of risk, number of workers, installation remoteness,
etc.) and first-aid equipment (first-aid kits etc.).

Level 2 - Advanced first-aid

Requiring first-aiders with more advanced skills (such as the use of

specialised equipment or methods).

Level 3 - Utilising medics or paramedics

With remote support from other medical professionals, who will have specific
medical training and be capable of administering drugs, advanced wound
treatment, etc

Distinguish Offshore evacuation methods are:

between
primary, Primary Method:
secondary and
tertiary offshore The usual none-emergency method, e.g. ship.
evacuation
methods Secondary method:

Used when the primary method is unavailable, e.g. lifeboat launched from the
rig.

Tertiary Method:

Heavily reliant on the individuals own effort and used as a last resort when all
other methods are unavailable, e.g. putting on lifejackets and survival suits
and jumping into the sea.

Give a brief The emergency command structure for offshore installations.

summary of the
emergency In such circumstances the Offshore Installations Manager OIM is in overall
command charge.
structure for
offshore They will be assisted by two on-scene commanders, one from drilling and one
installations from process, a permit controller, a radio operator and an Offshore
Installation Supervisor OIS.
Outline why it There are two basic reasons why it might be important to plan the route of a
might be road tanker carrying dangerous goods.
important to
plan the route Not all roads are suitable for tankers - narrow roads, weak bridges.
of a road tanker
carrying The security threat (terrorism, theft) to the valuable load being carried and its
dangerous possible use as a terrorist weapon.
goods.

HAZOPS HAZOPS = Hazardous Operations Study

HAZAN's HAZAN's = Hazard Analysis

HAZID HAZID = Hazard Identification

Identify three Marine hazards associated with all types of Floating Platform Storage
marine hazards Offloading Units -FPSO's
associated with
all types of Flaring near production area
Floating
Platform Storage Crew transfer
Offloading Units
-FPSO's Weather

Environmental impact

Transferring oil to tanker vessels

Risk of collision from sea going vessels

Supply/logistics difficulty

Pirates

Terrorists

Spillage damage to marine life

Identify suitable Security & surveillance

controls that
minimize risk
when operating
Floating
Platform Storage
Offloading Units
- FPSO's
Piper Alpha Piper Alpha Facts:
accident;
Fire Explosion knocked out fire proof - not Blast proof - walls
How it
happened and Control room damaged in 1st blast
what course of
actions were Initial fire could have been extinguished
taken to prevent
recurrence, Fire pumps were set to manual
Lessons learned.
Lifeboats all in one location and could not be reached from accommodation
block

Other platforms did not shutdown instead continued pumping hydrocarbons

to Piper Alpha, increasing the fire

Piper Alpha Piper Alpha Failures:

Failures
Permit to Work System -two permits issued for same task

Platform layout

Delayed decision making

Lack of training

Active fire system set from Auto to Manual

Passive fire protection

Lifeboats

Communications/Shift Handover

Buncefield Buncefield Incident Causes:

Incident:
A fill level gauge and high fill level alarm failed
Causes:
Fuel storage tank overfilled

Fuel leaked out of the vents at the top of the storage tank into the bund

This resulted in a Vapour Cloud

The vapour cloud flowed offsite

 Ignition leading to the vapour cloud explosion took place at a pump house

Buncefield Buncefield Lessons learned:

Lessons learned
Need for back-up systems/processes for safety critical devices

Bunds/containment walls to be designed to withstand heat/explosion

Importance of coordinated response & emergency planning

Business/Disaster interruption and or recovery plan

Dealing with media after the incident.

73 terms

Terms Definitions
Identify the 5 key The 5 key stages of a workplace risk assessment are:
stages of a
workplace risk Identify the hazards
assessment
Decide who might be harmed and how

Evaluate the risks and decide on precaution

Record your findings and implement them

Review your assessment and update if necessary

Outline the "ALARP" is short for "as low as reasonably practicable".

meaning of `as
low as reasonably ALARP involves weighing risk against the trouble, time and money needed to
practicable' control it.
ALARP.
Thus, ALARP describes the level to which we expect to see workplace risks
controlled.

To spend £1m to prevent five staff suffering bruised knees is obviously

grossly disproportionate

But
 To spend £1m to prevent a major explosion capable of killing 150 people is
obviously proportionate

Describe the Key The Key Principles of Safe Shift Handover:

Principles of Safe
Shift Handover A formal procedure

High priority conducted Face to Face

Two way communication, with both parties taking joint responsibility

Both verbal & written communication

Based on the analysis of the needs of incoming staff

Given as much time as necessary

Provide as much, information as necessary

Outline the main Main operational issues communicated at shift handover include:
operational issues
communicated at Operational status of the installation or process.
shift handover
Maintenance:
Completed
Still ongoing
Planned during on-coming shift

Routine operation for next shift.

Updating PTW's - Closed out or still open

Any events that happened during the out-going shift:

Emergencies,
Incidents,
Accidents,
Breakdowns
Plant overrides

Situations where safety systems have been overridden

e.g. fire deluge system switched to manual operation.

Planned events during oncoming shift, shutdowns, drills exercises

Operational issues that will occur during the on-coming shift

 Changes in plant parameters

Outline the term A Major Accident Is:

Major Accident
An unplanned event with potential for multiple fatalities and or serious
damage, possibly beyond the asset itself.

Typically these are hazardous releases, but also include major structural
failure or loss of stability that could put the whole asset at risk.

Outline reasons Reasons why such incidents should be investigated by employers Include:
why such
incidents should Establish the Chain of Events
be investigated
by employers Establish Causes of incident

Establish Route Cause

Establish process failures

Establish Lessons learnt to prevent similar occurrences

Why are accident Accident investigations are carried out to:

investigations
carried out To identify the immediate root causes of the incident.

Incidents are usually caused by unsafe acts and unsafe conditions in the
workplace, but these often arise from underlying root causes.

To identify corrective actions that will prevent a recurrence - The main

reason for investigating

An Investigation An Investigation Report Must Include:

Report Must
Include Date of Incident

Date investigation began

Description of the incident

Factors that contributed to the incident

Recommendations

Identify four Four parties, other than the employer, who may want to investigate
parties, other incidents:
than the
employer, who Authorities
may want to
investigate these Insurance Companies
types of incident
Manufactures

Suppliers

What are the four The four steps in the investigation process are:
steps in the
investigation Step 1: Gather factual information about the event.
process?
Step 2: Identify the immediate and root causes.

Step 3: Identify suitable corrective measures.

Step 4: Plan the remedial actions

What are the two The two categories of immediate cause of accidents/incidents are:
categories of
immediate cause Unsafe acts and unsafe conditions
of
accidents/inciden Immediate causes are the unsafe acts and unsafe conditions that gave rise to
ts? the event itself.

These will be the things that occurred at the time and place of the accident.

For example a worker slips on a patch of oil spilt on the floor

Immediate causes:

The slip hazard = unsafe condition

The worker walking through it = unsafe act

Identify the Documented information that might be used by the investigating team to
documented determine the causes of this accident are:
information that
might be used by PTW
the investigating
team to Photographs
determine the
causes of this CCTV Footage
accident
Witness Statements

Previous Health and Safety Meeting Minutes

 Risk Assessments / JSA's

Method Statements

Control Room Data

Internal incident report forms

Disciplinary records
Safe systems of work

Audit / inspection reports

SOP's

D & A Test results

Company Policies

Safety cases and Safety cases and safety reports

safety reports
provide The content of these documents usually include; (Offshore Safety Case)
document
evidence that an Details of the Operator
oil and gas Installation Design Details
installation is
safe. Major accident hazards Identification

Outline the Major accident hazard management

typical content of
these types of Major accident risks and control measures
documents.
Major accident prevention policies.

Audit and audit reports arrangements

Safety management system is in place.

Emergency plan.

Identify three Marine hazards associated with FPSO's

marine hazards
associated with Flaring near production area
all types of
Floating Platform Crew transfer
Storage
Offloading Units Weather
- FPSO's
Environmental impact

Transferring oil to tanker vessels

Risk of collision from sea going vessels

Supply/logistics difficulty

Pirates

Terrorists

Spillage damage to marine life

Identify suitable Suitable controls that minimize risk when operating Floating Platform
controls that Storage Offloading Units - FPSO's
minimize risk
when operating Security & surveillance
Floating Platform
Storage Competent and certified captain and crew
Offloading Units
- FPSO's Safety Management systems including Inspection

Permits-to-Work, Risk Assessments

Procedures for the control of spillages

Suitable fire and gas detection systems

Have an adverse weather policy

A pump EIGHT risks to the operator when preparing the pump for maintenance are:
containing
flammable 1. Asphyxiation due to displacement of 02
corrosive slurry
has been stopped 2. Fire
for maintenance.
3. Explosion
An operator will
prepare the pump 4. Irritant/Corrosive substance
for maintenance
using a nitrogen 5. Incorrect isolation of valves
supply, drain
header and 6. Incorrect Lock Out/Tag Out system
collection vessel.
Using this 7. Lack of gas monitoring
information;
8. Burst pressure lines causing injury
Outline EIGHT
risks to the
operator when
preparing the
pump for
maintenance

Identify the Controls available to maintain Safety Critical Equipment:

controls available
to maintain Safety Process Control Systems
Critical
Equipment Process and Emergency Shutdown systems

Fire and Gas Systems

Drilling Control systems

What does the Blowdown

term "Blowdown"
refer to The removal of liquid content from process vessels and equipment to reduce
the likelihood of fires or explosions occurring.

It is similar to depressurisation carried out in the gas process system

Following an Operational control measures that could minimise the risk of an incident
annual shutdown before filling equipment in preparation for start-up:
of a process plant
outline the Ensure work carried out under the controls of a PTW
operational
control measures Emergency plan - in place
that could
minimise the risk Suitable supervision of the operation
of an incident
before filling Trained and competent employees
equipment in
preparation for Eliminate or control ignition sources
start-up
Certification of items that have been maintained or replaced

Establish all isolations reconnected, all blanks removed

Ensure all safety systems are operational

Ensure all systems are tested before start-up

 Management of overrides

Complete PTW

Outline Operational control measures that could minimize the risk of plant damage
operational or injury during start-up or shutdown of a process:
control measures
that could Shutdown
minimize the risk
of plant damage Ensure work carried out under the controls of a PTW
or injury during
start-up or Emergency plan - in place
shutdown of a
process Suitable supervision of the operation

Trained and competent employees

All services are;

Stopped
Isolated
Drained down
Blanked

Empty & drain hydrocarbon facilities, with all liquids, gases and residues
removed leaving the plant safe to work on

Eliminate or control ignition sources

Start-up

Certification of items that have been maintained or replaced

Establish all isolations reconnected, all blanks removed

Ensure all safety systems are operational

Ensure all systems are tested before start-up

Management of overrides

Complete PTW

Large quantities Process safety control measures that would minimize the risk of an
of hydrocarbons explosion at a process plant:
are contained in a
process plant, Gas detectors
with the risk of
gas release and Zoning
explosions.
Passive Fire Protection systems
Identify process
safety control Structural Fire Protection systems
measures that
would minimize Fire Detection Systems
the risk of an
explosion. Process safety systems and controls

Flares and vents

Excluding active Physical design features of an offshore platform that would minimize risk to
and passive fire operating personnel in the event of a major incident:
protection
systems. Plant separation

Outline physical Compartmentalization

design features of
an offshore Protection of personnel / equipment
platform that
would minimize Means of escape - More than one
risk to operating
personnel in the Blow out panels - Explosion proof
event of a major
incident Temporary refuges with communications & control and means of escape

Outline physical Physical design features of an oil and gas installation that would minimize
design features of risk to operating personnel in the event of a major incident.
an oil and gas
installation that Temporary Refuge
would minimize
risk to operating Routes to and from the TR
personnel in the
event of a major Means of evacuation from these points
incident.
Facilities within the TR for monitoring and control of the incident and
organizing evacuation

Explain the Safe Isolation

meaning of the
term safe The interruption, disconnection and separation of all the equipment's motive
isolation power sources in such a way that this disconnection and separation is secure
by lockable means
What does the Blowdown
term "Blowdown"
refer to. The removal of liquid content from process vessels and equipment to reduce
the likelihood of fires or explosions occurring.

It is similar to depressurisation carried out in the gas process system

Outline the The contents of a typical permit-to-work include:

contents of a
typical permit- Permit Title
to-work
Date & Time

Permit reference number & reference to Isolation

certificates

Description of the task to be carried out

Work location

Duration of permit

Potential Hazards

Precautions that are needed (ppe rpe etc)

Details of the person authorising the work

Signature of the worker carrying out the work

Risk Assessment / JSA number

Extension / Shift Handover Procedures

Details of when the permit is revoked or finished

Outline how the Hot Work permits would vary as hot works may ignite flammable materials.
contents of a hot
work permit are These would need to be eliminated or removed (preferable) or protected
different to a
typical permit- Control of ignition sources through damping down or fire blankets
to-work
Firefighting equipment has been checked and placed on location together
with trained personnel.

Gas test details must be included.

 Additional PPE appropriate to task to be used in addition to the daily
mandatory PPE as part of the special precautions to be indicated on the hot
work permit

Outline FOUR FOUR types of work activity associated with an oil platform that might
types of work require permit to-work:
activity
associated with Hot Work
an oil platform
that might Welding, burning or grinding.
require permit
to-work AND give Cold work
a reason in EACH
case for the Scaffolding, over side working
requirement
Confined space entry

Storage tanks, vessels or drains

Isolation

mechanical or electrical

This can be mechanical or electrical, where systems or processes need to be

isolated in order for certain jobs to take place.

Should a valve on an engine need to be changed, the engine needs to be

isolated to prevent accidental activation while someone is working on the
engine to prevent injury

Ensure all systems are Locked Out/Tagged Out

Outline the Creep;

following failure
modes that may A constant load at high temperature causing a slow process of plastic
lead to loss of deformation over a period of time.
hydrocarbon
containment from
storage
tanks/vessels or
pipelines

Stress corrosion Stress corrosion cracking;

cracking
Occurs under tensile stress and is worse in a corrosive environment at
elevated temperatures
Thermal shock; Thermal shock;

Cracking that results from rapid and extreme temperature changes e.g. from
hot to cold and vice versa

Brittle fracture Brittle fracture:

Occurs suddenly without warning, normally due to an excessive load, small

cracks spread through the material so quickly that a massive failure is
produced

Give the meaning Flammable range

of the following
terms: Flammable Range gives the proportion or fraction of combustible gases in a
mixture of air, between which the mixture is still flammable
Flammable range

Upper flammable Upper flammable limit - UFL

limit - UFL
The maximum concentration of fuel in air that is sufficient to allow
combustion to occur.

Above the UFL the mixture is too rich to burn

Lower flammable Lower flammable limit - LFL

limit - LFL
The minimum concentration of fuel in air that is sufficient to allow
combustion to occur.

Bellow the LFL, the mixture is too lean to burn

Flashpoint Flashpoint

Flashpoint is the lowest temperature at which sufficient vapour is given off

to "Flash" - that is, ignite momentarily (and not carry on burning) when a
source of ignition is applied to the vapour

Identify the three Flammability falls into three distinct classifications:

classifications
within Extremely Flammable - Flash point below 0 Celsius.
flammability
Highly Flammable - Flash point between 0 and 21 Celsius

Flammable - Flash point between 22 and 55 Celsius

Explain where the Flammable Range :

flammable range
exists in a The lower flammable limit is the minimum concentration of fuel in air that
fuel/air mixture will allow combustion to occur - below this the mixture is too lean.
 The upper flammable limit is the maximum concentration of fuel in air that
will allow combustion to occur - above this the mixture is too rich.

The flammable Range lies between these two limits

Identify the zone Zone classifications relating to flammable atmospheres:

classifications
relating to Zone 0
flammable
atmospheres Area where an explosive gas atmosphere is present continuously or for long
periods

Zone 1

Area where an explosive gas atmosphere is likely to occur in normal

operations

Zone 2

Area where an explosive gas atmosphere is not likely to occur in normal

operations — if it occurs will only exist for a short time

List the three Hazard zones and the categories of electrical equipment to be used in each
hazard zones and zone:
the categories of
electrical Zone 0 = Category 1 equipment
equipment to be
used in each zone Zone 1 = Category 1 0r 2 equipment

Zone 2 = Category 1, 2 or 3 equipment

List the Hazards Hazards associated with LNG:

associated with
LNG Fire and explosion

Pool Fires

Cold Burns

Bleve's & Vapour Cloud Explosions

Cold Burns

Asphyxiation in a confined space

Terrorism
List the Hazards Hazards associated with LPG - Liquid Petroleum Gas
associated with
LPG - Liquid Extremely Flammable
Petroleum Gas
(Propane/Butane) Heavier than air and collects at low levels

An Asphyxiant at high concentrations

LPG in liquid form can cause severe cold burns to the skin owing to its rapid
vaporization

Stored under pressure - Leaks can lead to fire & explosion

What are the The dangers of LPG lie with its flammability and explosive properties, and
main dangers the fact that it is stored under great pressure, and hence very low
associated with temperature, to retain its liquid state.
LPG
On release, LPG reverts to its gaseous state, with rapid and considerable
increase in volume.

Identify THREE THREE types of fire or explosion that could occur:

types of fire or
explosion that BLEVE Boiling Liquid Expanding Vapour Explosion
could occur
CVCE's Confined Vapour Cloud Explosion

UVCE's Unconfined Vapour Cloud Explosion

In relation to "BLEVE" is an acronym for "Boiling Liquid Expanding Vapour Explosion"

Hydrocarbon
Vapour Clouds It is an explosion caused by the rupture of a vessel containing a pressurized
Define what is liquid above its boiling point.
meant by "BLEVE's

Outline how a "BLEVE" is an acronym for "Boiling Liquid Expanding Vapour Explosion"
Boiling Liquid
Expanding It is an explosion caused by the rupture of a vessel containing a pressurized
Vapour Explosion liquid above its boiling point
(BLEVE) occurs
If an ignition source is present and the vapour is flammable, a sudden
deflagration (fire) or explosion may occur, further increasing the energy of
the sudden vapour release, and causing the creation of a fireball that
releases a sudden burst of radiant (heat) energy.

As a result of the explosion the containment vessel could fragmentise into

airborne missiles

Identify TWO TWO ways in which vapour clouds can be generated:

ways in which
vapour clouds Confined / unconfined generation
can be generated
Vaporization of a release of liquefied gas from a ruptured vessel or pipeline

Loss of containment, such as Buncefield incident

Outline how a A vapour cloud explosion can be generated by:

vapour cloud
explosion can be Confined / unconfined generation
generated
Vapour cloud explosions may arise from vaporization of a release of
liquefied gas from a ruptured vessel or pipeline contacting an ignition source

Identify the The physical consequences of vapour cloud explosions:

physical
consequences of Overpressure
vapour cloud
explosions Fire & explosion

Airborne missiles from resulting debris

In relation to CVCE - Confined Vapour Cloud Explosion

Hydrocarbon
Vapour Clouds Explosion of a liquefied hydrocarbon or other flammable gas cloud in a
Define what is confined Space, such as vessels, pipelines, buildings
meant by:

CVCE's

In relation to UVCE - Unconfined Vapour Cloud Explosion

Hydrocarbon
Vapour Clouds Explosion of a liquefied hydrocarbon or other flammable gas cloud in an
Define what is unconfined space. Such as a fuel leaking from a Storage facility, e.g.
meant by: Buncefield incident

UVCE's

Describe the Passive Fire Protection:

difference
between active Is predominantly thermally insulating design elements that are put and left
and passive fire in place, like fire barriers, fire resistant coatings and cladding.
protection
measures They help stop escalation of the fire and protect routes.

Active Fire Protection:

Means measures that are brought into play when a fire is detected, in order
 to actively tackle/extinguish the fire,

e.g. fixed sprinkler installations, hoses and monitors.

Following Hazards associated with LSA radioactive sludge:

preparation of a
vessel for Risk of fire, explosion.
maintenance
within an oil and Toxicity to Divers
gas installation a
low specific
activity (LSA)
radioactive
sludge was
encountered.

Identify hazards
associated with
the sludge.

FOUR control FOUR control measures to reduce the risk to workers exposed to the sludge:
measures to
reduce the risk to Wearing of correct PPE - Respirator
workers exposed
to the sludge. Monitoring devices and personal sensors

Explosion proof certified equipment

Safety procedures

Training etc

Identify TWO TWO other pieces of workplace equipment where the sludge may be found:
other pieces of
workplace Shale Shakers
equipment where
the sludge may Mud Pits
be found.

Identify the There are many factors that have to be considered when assessing the health
factors that and safety competence of a contractor:
should be
considered when HSE Policy's
assessing the
health and safety Certifications - Accreditations
competence of a
contractor Commitment to HSE from senior management and how this is demonstrated
 Safety Management system and implementation
Safety tools used

Project records - track record of similar projects

Past Performance - Safety Statistics - KPI's records achieved

Risk Management system and procedure

Previous incident investigations reports

References from previous clients

Training Records

Proof of applicable insurance policies

Competency of employees and project staff

Details of Sub-contractors

Safety Initiatives used with in the business and projects

Oil and gas Risks at Oil and gas installations when working with water include:
installations use
water for cooling When stored under pressure as in Fire lines and steam water lines
and heating
although it can be May contain bacteria if not circulated (dead end pipe legs)
a hazard in some
situations May cause an unstable reaction when mixed with some hydrocarbons

Identify risks with Water can flash to steam in processes operating above its boiling point
water AND give a
practical example Can react violently when mixed with other chemical
in EACH case
Cause long term corrosion

Boiler operations

A distillation A fixed water deluge system could provide protection for a distillation
column requires column by extinguishing the fire, controlling the fire.
protection from
fire through Or by providing protection for the adjacent distillation columns with the
passive and active cooling effect the fixed water deluge system provides
fire protection ----------------------------------------------------------------
 ---------
(a) Outline how a Water mist systems and a Firewater monitor and hose-reels
fixed water
deluge system
could provide fire
protection (2)

(b) Identify two

additional
examples of
active fire
protection. (2)

A distillation Metal legs of a distillation column should be protected because:

column requires
protection from Fires can cause thermal weakening of steelwork and result in the collapse of
fire exposure structures, failure of equipment, and subsequent escalation of the initial
through active or event
passive fire
protection

Outline why the

metal legs of the
column should be
protected

Identify TWO Examples of passive fire protection:

examples of
passive fire Fire resistant coatings
protection
Thermal insulation

Cladding

Fire doors

Fire walls

Identify TWO Elements of the fire triangle:

elements of the
fire triangle Fuel

Heat

Oxygen

Identify THREE THREE properties of Hydrogen Sulphide - H2S:

properties of
Hydrogen Highly toxic
Sulphide - H2S
Flammable gas

Heavier than air and hence tends to accumulate in low-lying areas

Pungent, smells like rotten eggs but rapidly destroys the sense of smell

Outline the types Failure mode of storage tanks that may lead to loss of containment from
of failure mode of hydrocarbon:
storage tanks
that may lead to Overfilling
loss of
containment from Corrosion
hydrocarbon
Construction fault

Design Fault

Bund Failure

Operator / Instrument Error

Tank not tested

Foundations Overload

Vacuum effect during emptying of tank

During an TWO reasons for providing a tank bund:

inspection an
external fuel Prevent a potential leak causing environmental damage
storage tank is
found without a Control any leak within a known area
bund.
Ensure the maximum quantity of product can be contained within the bund
Identify TWO
reasons for
providing a tank
bund

Outline the Features which should be included in the design of a tank bund:
features which
should be Ensure the maximum quantity of product can be contained within the bund
included in the at least 110%
design of a tank
bund Make allowance for the space occupied by other tanks

Located away from traffic routes

Impermeable base

No drain valve- rain water should be pumped out

Lightening protection

Petroleum How a fire risk may exist with floating tanks:

storage tank fires
have been Lightning strikes
reduced
substantially by Leaks due to corrosion, damaged pipe work
using floating
roofs, but a fire Product overfill or high internal pressures
risk may still
exist. Rainwater or snow load sinks the roof and exposes fuel vapours

Outline how a fire

risk may exist
with floating
tanks

Identify TWO TWO examples of fire protection systems used on floating roof tanks:
examples of fire
protection Fixed foam systems
systems used on
floating roof Fire Monitors
tanks
Portable foam fire fighting systems

Hose lines

Outline the fire For floating roof tanks the main means of fire protection is to use fixed foam
protection that installations which spread foam around the rim seal.
would be used on
a floating roof Monitors and water deluge cooling sprays may also be used
tank

Identify the The environmental effects if a tank failure occurred:

environmental
effects if a tank Oil contamination of ground would be highly toxic to plant and animal life
failure occurred and could enter rivers and waterways depriving life of oxygen

Outline the The tiered three-level approach to emergency medical treatment is:
tiered, three-level
approach to Level 1 - Basic first-aid:
emergency
medical Intended as first line treatment to preserve life and stabilise the injured:
treatment
Requiring the provision of an adequate number of trained first-aiders
(depending on the level of risk, number of workers, installation remoteness,
etc.) and first-aid equipment (first-aid kits etc.).

Level 2 - Advanced first-aid

Requiring first-aiders with more advanced skills (such as the use of

specialised equipment or methods).

Level 3 - Utilising medics or paramedics

With remote support from other medical professionals, who will have specific
medical training and be capable of administering drugs, advanced wound
treatment, etc.

Distinguish Offshore evacuation methods are:

between primary,
secondary and Primary Method
tertiary offshore
evacuation The usual none-emergency method, e.g. ship.
methods
Secondary method

Used when the primary method is unavailable, e.g. lifeboat launched from
the rig.

Tertiary Method

Heavily reliant on the individuals own effort and used as a last resort when
all other methods are unavailable, e.g. putting on lifejackets and survival
suits and jumping into the sea

An operator is Factors that influence the generation of the electrostatic charge:

draining a
flammable liquid Hot Dry Weather
from process pipe
work to a metal Flow rate,
container.
Overfilling
The supervisor is
concerned about Lack of earthing / bonding
the possibility of
an electrostatic Liquid instability
charge forming
and stops this Splash Filling
operation until a
risk assessment Agitation
is undertaken.
Filters
During this work
activity:

Identify factors
that influence the
generation of the
electrostatic
charge;

Outline practical Practical ways of minimising the formation of an electrostatic charge:

ways of
minimising the Humidification of the atmosphere
formation of an
electrostatic Antistatic additives
charge
Reduce flow velocity

Intrinsically safe equipment

Bonding & Grounding of equipment & containers

Avoid splash filling by submerging the fill pipe bellow the liquid level in the
container

Increasing the conductance of floors, footwear

73 terms
Terms Definitions
Identify the 5 key The 5 key stages of a workplace risk assessment are:
stages of a
workplace risk Identify the hazards
assessment
Decide who might be harmed and how

Evaluate the risks and decide on precaution

Record your findings and implement them

Review your assessment and update if necessary

Outline the "ALARP" is short for "as low as reasonably practicable".

meaning of `as
low as reasonably ALARP involves weighing risk against the trouble, time and money needed to
practicable' control it.
ALARP.
Thus, ALARP describes the level to which we expect to see workplace risks
controlled.

To spend £1m to prevent five staff suffering bruised knees is obviously

grossly disproportionate

But

To spend £1m to prevent a major explosion capable of killing 150 people is

obviously proportionate

Describe the Key The Key Principles of Safe Shift Handover:

Principles of Safe
Shift Handover A formal procedure

High priority conducted Face to Face

Two way communication, with both parties taking joint responsibility

Both verbal & written communication

Based on the analysis of the needs of incoming staff

Given as much time as necessary

Provide as much, information as necessary

Outline the main Main operational issues communicated at shift handover include:
operational issues
communicated at Operational status of the installation or process.
shift handover
Maintenance:
Completed
Still ongoing
Planned during on-coming shift

Routine operation for next shift.

Updating PTW's - Closed out or still open

Any events that happened during the out-going shift:

Emergencies,
Incidents,
Accidents,
Breakdowns
Plant overrides

Situations where safety systems have been overridden

e.g. fire deluge system switched to manual operation.

Planned events during oncoming shift, shutdowns, drills exercises

Operational issues that will occur during the on-coming shift

Changes in plant parameters

Outline the term A Major Accident Is:

Major Accident
An unplanned event with potential for multiple fatalities and or serious
damage, possibly beyond the asset itself.

Typically these are hazardous releases, but also include major structural
failure or loss of stability that could put the whole asset at risk.

Outline reasons Reasons why such incidents should be investigated by employers Include:
why such
incidents should Establish the Chain of Events
be investigated
by employers Establish Causes of incident

Establish Route Cause

Establish process failures

 Establish Lessons learnt to prevent similar occurrences

Why are accident Accident investigations are carried out to:

investigations
carried out To identify the immediate root causes of the incident.

Incidents are usually caused by unsafe acts and unsafe conditions in the
workplace, but these often arise from underlying root causes.

To identify corrective actions that will prevent a recurrence - The main

reason for investigating

An Investigation An Investigation Report Must Include:

Report Must
Include Date of Incident

Date investigation began

Description of the incident

Factors that contributed to the incident

Recommendations

Identify four Four parties, other than the employer, who may want to investigate
parties, other incidents:
than the
employer, who Authorities
may want to
investigate these Insurance Companies
types of incident
Manufactures

Suppliers

What are the four The four steps in the investigation process are:
steps in the
investigation Step 1: Gather factual information about the event.
process?
Step 2: Identify the immediate and root causes.

Step 3: Identify suitable corrective measures.

Step 4: Plan the remedial actions

What are the two The two categories of immediate cause of accidents/incidents are:
categories of
immediate cause Unsafe acts and unsafe conditions
of
accidents/inciden Immediate causes are the unsafe acts and unsafe conditions that gave rise to
ts? the event itself.

These will be the things that occurred at the time and place of the accident.

For example a worker slips on a patch of oil spilt on the floor

Immediate causes:

The slip hazard = unsafe condition

The worker walking through it = unsafe act

Identify the Documented information that might be used by the investigating team to
documented determine the causes of this accident are:
information that
might be used by PTW
the investigating
team to Photographs
determine the
causes of this CCTV Footage
accident
Witness Statements

Previous Health and Safety Meeting Minutes

Risk Assessments / JSA's

Method Statements

Control Room Data

Internal incident report forms

Disciplinary records
Safe systems of work

Audit / inspection reports

SOP's

D & A Test results

Company Policies

Safety cases and Safety cases and safety reports

safety reports
provide The content of these documents usually include; (Offshore Safety Case)
document
evidence that an Details of the Operator
oil and gas Installation Design Details
installation is
safe. Major accident hazards Identification

Outline the Major accident hazard management

typical content of
these types of Major accident risks and control measures
documents.
Major accident prevention policies.

Audit and audit reports arrangements

Safety management system is in place.

Emergency plan.

Identify three Marine hazards associated with FPSO's

marine hazards
associated with Flaring near production area
all types of
Floating Platform Crew transfer
Storage
Offloading Units Weather
- FPSO's
Environmental impact

Transferring oil to tanker vessels

Risk of collision from sea going vessels

Supply/logistics difficulty

Pirates

Terrorists

Spillage damage to marine life

Identify suitable Suitable controls that minimize risk when operating Floating Platform
controls that Storage Offloading Units - FPSO's
minimize risk
when operating Security & surveillance
Floating Platform
Storage Competent and certified captain and crew
Offloading Units
- FPSO's Safety Management systems including Inspection

Permits-to-Work, Risk Assessments

Procedures for the control of spillages

Suitable fire and gas detection systems

Have an adverse weather policy

A pump EIGHT risks to the operator when preparing the pump for maintenance are:
containing
flammable 1. Asphyxiation due to displacement of 02
corrosive slurry
has been stopped 2. Fire
for maintenance.
3. Explosion
An operator will
prepare the pump 4. Irritant/Corrosive substance
for maintenance
using a nitrogen 5. Incorrect isolation of valves
supply, drain
header and 6. Incorrect Lock Out/Tag Out system
collection vessel.
Using this 7. Lack of gas monitoring
information;
8. Burst pressure lines causing injury
Outline EIGHT
risks to the
operator when
preparing the
pump for
maintenance

Identify the Controls available to maintain Safety Critical Equipment:

controls available
to maintain Safety Process Control Systems
Critical
Equipment Process and Emergency Shutdown systems

Fire and Gas Systems

Drilling Control systems

What does the Blowdown
term "Blowdown"
refer to The removal of liquid content from process vessels and equipment to reduce
the likelihood of fires or explosions occurring.

It is similar to depressurisation carried out in the gas process system

Following an Operational control measures that could minimise the risk of an incident
annual shutdown before filling equipment in preparation for start-up:
of a process plant
outline the Ensure work carried out under the controls of a PTW
operational
control measures Emergency plan - in place
that could
minimise the risk Suitable supervision of the operation
of an incident
before filling Trained and competent employees
equipment in
preparation for Eliminate or control ignition sources
start-up
Certification of items that have been maintained or replaced

Establish all isolations reconnected, all blanks removed

Ensure all safety systems are operational

Ensure all systems are tested before start-up

Management of overrides

Complete PTW

Outline Operational control measures that could minimize the risk of plant damage
operational or injury during start-up or shutdown of a process:
control measures
that could Shutdown
minimize the risk
of plant damage Ensure work carried out under the controls of a PTW
or injury during
start-up or Emergency plan - in place
shutdown of a
process Suitable supervision of the operation

Trained and competent employees

All services are;

 Stopped
Isolated
Drained down
Blanked

Empty & drain hydrocarbon facilities, with all liquids, gases and residues
removed leaving the plant safe to work on

Eliminate or control ignition sources

Start-up

Certification of items that have been maintained or replaced

Establish all isolations reconnected, all blanks removed

Ensure all safety systems are operational

Ensure all systems are tested before start-up

Management of overrides

Complete PTW

Large quantities Process safety control measures that would minimize the risk of an
of hydrocarbons explosion at a process plant:
are contained in a
process plant, Gas detectors
with the risk of
gas release and Zoning
explosions.
Passive Fire Protection systems
Identify process
safety control Structural Fire Protection systems
measures that
would minimize Fire Detection Systems
the risk of an
explosion. Process safety systems and controls

Flares and vents

Excluding active Physical design features of an offshore platform that would minimize risk to
and passive fire operating personnel in the event of a major incident:
protection
systems. Plant separation
Outline physical Compartmentalization
design features of
an offshore Protection of personnel / equipment
platform that
would minimize Means of escape - More than one
risk to operating
personnel in the Blow out panels - Explosion proof
event of a major
incident Temporary refuges with communications & control and means of escape

Outline physical Physical design features of an oil and gas installation that would minimize
design features of risk to operating personnel in the event of a major incident.
an oil and gas
installation that Temporary Refuge
would minimize
risk to operating Routes to and from the TR
personnel in the
event of a major Means of evacuation from these points
incident.
Facilities within the TR for monitoring and control of the incident and
organizing evacuation

Explain the Safe Isolation

meaning of the
term safe The interruption, disconnection and separation of all the equipment's motive
isolation power sources in such a way that this disconnection and separation is secure
by lockable means

What does the Blowdown

term "Blowdown"
refer to. The removal of liquid content from process vessels and equipment to reduce
the likelihood of fires or explosions occurring.

It is similar to depressurisation carried out in the gas process system

Outline the The contents of a typical permit-to-work include:

contents of a
typical permit- Permit Title
to-work
Date & Time

Permit reference number & reference to Isolation

certificates

Description of the task to be carried out

Work location
 Duration of permit

Potential Hazards

Precautions that are needed (ppe rpe etc)

Details of the person authorising the work

Signature of the worker carrying out the work

Risk Assessment / JSA number

Extension / Shift Handover Procedures

Details of when the permit is revoked or finished

Outline how the Hot Work permits would vary as hot works may ignite flammable materials.
contents of a hot
work permit are These would need to be eliminated or removed (preferable) or protected
different to a
typical permit- Control of ignition sources through damping down or fire blankets
to-work
Firefighting equipment has been checked and placed on location together
with trained personnel.

Gas test details must be included.

Additional PPE appropriate to task to be used in addition to the daily

mandatory PPE as part of the special precautions to be indicated on the hot
work permit

Outline FOUR FOUR types of work activity associated with an oil platform that might
types of work require permit to-work:
activity
associated with Hot Work
an oil platform
that might Welding, burning or grinding.
require permit
to-work AND give Cold work
a reason in EACH
case for the Scaffolding, over side working
requirement
Confined space entry

Storage tanks, vessels or drains

 Isolation

mechanical or electrical

This can be mechanical or electrical, where systems or processes need to be

isolated in order for certain jobs to take place.

Should a valve on an engine need to be changed, the engine needs to be

isolated to prevent accidental activation while someone is working on the
engine to prevent injury

Ensure all systems are Locked Out/Tagged Out

Outline the Creep;

following failure
modes that may A constant load at high temperature causing a slow process of plastic
lead to loss of deformation over a period of time.
hydrocarbon
containment from
storage
tanks/vessels or
pipelines

Stress corrosion Stress corrosion cracking;

cracking
Occurs under tensile stress and is worse in a corrosive environment at
elevated temperatures

Thermal shock; Thermal shock;

Cracking that results from rapid and extreme temperature changes e.g. from
hot to cold and vice versa

Brittle fracture Brittle fracture:

Occurs suddenly without warning, normally due to an excessive load, small

cracks spread through the material so quickly that a massive failure is
produced

Give the meaning Flammable range

of the following
terms: Flammable Range gives the proportion or fraction of combustible gases in a
mixture of air, between which the mixture is still flammable
Flammable range

Upper flammable Upper flammable limit - UFL

limit - UFL
 The maximum concentration of fuel in air that is sufficient to allow
combustion to occur.

Above the UFL the mixture is too rich to burn

Lower flammable Lower flammable limit - LFL

limit - LFL
The minimum concentration of fuel in air that is sufficient to allow
combustion to occur.

Bellow the LFL, the mixture is too lean to burn

Flashpoint Flashpoint

Flashpoint is the lowest temperature at which sufficient vapour is given off

to "Flash" - that is, ignite momentarily (and not carry on burning) when a
source of ignition is applied to the vapour

Identify the three Flammability falls into three distinct classifications:

classifications
within Extremely Flammable - Flash point below 0 Celsius.
flammability
Highly Flammable - Flash point between 0 and 21 Celsius

Flammable - Flash point between 22 and 55 Celsius

Explain where the Flammable Range :

flammable range
exists in a The lower flammable limit is the minimum concentration of fuel in air that
fuel/air mixture will allow combustion to occur - below this the mixture is too lean.

The upper flammable limit is the maximum concentration of fuel in air that
will allow combustion to occur - above this the mixture is too rich.

The flammable Range lies between these two limits

Identify the zone Zone classifications relating to flammable atmospheres:

classifications
relating to Zone 0
flammable
atmospheres Area where an explosive gas atmosphere is present continuously or for long
periods

Zone 1

Area where an explosive gas atmosphere is likely to occur in normal

operations
 Zone 2

Area where an explosive gas atmosphere is not likely to occur in normal

operations — if it occurs will only exist for a short time

List the three Hazard zones and the categories of electrical equipment to be used in each
hazard zones and zone:
the categories of
electrical Zone 0 = Category 1 equipment
equipment to be
used in each zone Zone 1 = Category 1 0r 2 equipment

Zone 2 = Category 1, 2 or 3 equipment

List the Hazards Hazards associated with LNG:

associated with
LNG Fire and explosion

Pool Fires

Cold Burns

Bleve's & Vapour Cloud Explosions

Cold Burns

Asphyxiation in a confined space

Terrorism

List the Hazards Hazards associated with LPG - Liquid Petroleum Gas
associated with
LPG - Liquid Extremely Flammable
Petroleum Gas
(Propane/Butane) Heavier than air and collects at low levels

An Asphyxiant at high concentrations

LPG in liquid form can cause severe cold burns to the skin owing to its rapid
vaporization

Stored under pressure - Leaks can lead to fire & explosion

What are the The dangers of LPG lie with its flammability and explosive properties, and
main dangers the fact that it is stored under great pressure, and hence very low
associated with temperature, to retain its liquid state.
LPG
 On release, LPG reverts to its gaseous state, with rapid and considerable
increase in volume.

Identify THREE THREE types of fire or explosion that could occur:

types of fire or
explosion that BLEVE Boiling Liquid Expanding Vapour Explosion
could occur
CVCE's Confined Vapour Cloud Explosion

UVCE's Unconfined Vapour Cloud Explosion

In relation to "BLEVE" is an acronym for "Boiling Liquid Expanding Vapour Explosion"

Hydrocarbon
Vapour Clouds It is an explosion caused by the rupture of a vessel containing a pressurized
Define what is liquid above its boiling point.
meant by "BLEVE's

Outline how a "BLEVE" is an acronym for "Boiling Liquid Expanding Vapour Explosion"
Boiling Liquid
Expanding It is an explosion caused by the rupture of a vessel containing a pressurized
Vapour Explosion liquid above its boiling point
(BLEVE) occurs
If an ignition source is present and the vapour is flammable, a sudden
deflagration (fire) or explosion may occur, further increasing the energy of
the sudden vapour release, and causing the creation of a fireball that
releases a sudden burst of radiant (heat) energy.

As a result of the explosion the containment vessel could fragmentise into

airborne missiles

Identify TWO TWO ways in which vapour clouds can be generated:

ways in which
vapour clouds Confined / unconfined generation
can be generated
Vaporization of a release of liquefied gas from a ruptured vessel or pipeline

Loss of containment, such as Buncefield incident

Outline how a A vapour cloud explosion can be generated by:

vapour cloud
explosion can be Confined / unconfined generation
generated
Vapour cloud explosions may arise from vaporization of a release of
liquefied gas from a ruptured vessel or pipeline contacting an ignition source

Identify the The physical consequences of vapour cloud explosions:

physical
consequences of Overpressure
vapour cloud
explosions Fire & explosion

Airborne missiles from resulting debris

In relation to CVCE - Confined Vapour Cloud Explosion

Hydrocarbon
Vapour Clouds Explosion of a liquefied hydrocarbon or other flammable gas cloud in a
Define what is confined Space, such as vessels, pipelines, buildings
meant by:

CVCE's

In relation to UVCE - Unconfined Vapour Cloud Explosion

Hydrocarbon
Vapour Clouds Explosion of a liquefied hydrocarbon or other flammable gas cloud in an
Define what is unconfined space. Such as a fuel leaking from a Storage facility, e.g.
meant by: Buncefield incident

UVCE's

Describe the Passive Fire Protection:

difference
between active Is predominantly thermally insulating design elements that are put and left
and passive fire in place, like fire barriers, fire resistant coatings and cladding.
protection
measures They help stop escalation of the fire and protect routes.

Active Fire Protection:

Means measures that are brought into play when a fire is detected, in order
to actively tackle/extinguish the fire,

e.g. fixed sprinkler installations, hoses and monitors.

Following Hazards associated with LSA radioactive sludge:

preparation of a
vessel for Risk of fire, explosion.
maintenance
within an oil and Toxicity to Divers
gas installation a
low specific
activity (LSA)
radioactive
sludge was
encountered.
Identify hazards
associated with
the sludge.

FOUR control FOUR control measures to reduce the risk to workers exposed to the sludge:
measures to
reduce the risk to Wearing of correct PPE - Respirator
workers exposed
to the sludge. Monitoring devices and personal sensors

Explosion proof certified equipment

Safety procedures

Training etc

Identify TWO TWO other pieces of workplace equipment where the sludge may be found:
other pieces of
workplace Shale Shakers
equipment where
the sludge may Mud Pits
be found.

Identify the There are many factors that have to be considered when assessing the health
factors that and safety competence of a contractor:
should be
considered when HSE Policy's
assessing the
health and safety Certifications - Accreditations
competence of a
contractor Commitment to HSE from senior management and how this is demonstrated

Safety Management system and implementation

Safety tools used

Project records - track record of similar projects

Past Performance - Safety Statistics - KPI's records achieved

Risk Management system and procedure

Previous incident investigations reports

References from previous clients

Training Records
 Proof of applicable insurance policies

Competency of employees and project staff

Details of Sub-contractors

Safety Initiatives used with in the business and projects

Oil and gas Risks at Oil and gas installations when working with water include:
installations use
water for cooling When stored under pressure as in Fire lines and steam water lines
and heating
although it can be May contain bacteria if not circulated (dead end pipe legs)
a hazard in some
situations May cause an unstable reaction when mixed with some hydrocarbons

Identify risks with Water can flash to steam in processes operating above its boiling point
water AND give a
practical example Can react violently when mixed with other chemical
in EACH case
Cause long term corrosion

Boiler operations

A distillation A fixed water deluge system could provide protection for a distillation
column requires column by extinguishing the fire, controlling the fire.
protection from
fire through Or by providing protection for the adjacent distillation columns with the
passive and active cooling effect the fixed water deluge system provides
fire protection ----------------------------------------------------------------
---------
(a) Outline how a Water mist systems and a Firewater monitor and hose-reels
fixed water
deluge system
could provide fire
protection (2)

(b) Identify two

additional
examples of
active fire
protection. (2)

A distillation Metal legs of a distillation column should be protected because:

column requires
protection from Fires can cause thermal weakening of steelwork and result in the collapse of
fire exposure structures, failure of equipment, and subsequent escalation of the initial
through active or event
passive fire
protection

Outline why the

metal legs of the
column should be
protected

Identify TWO Examples of passive fire protection:

examples of
passive fire Fire resistant coatings
protection
Thermal insulation

Cladding

Fire doors

Fire walls

Identify TWO Elements of the fire triangle:

elements of the
fire triangle Fuel

Heat

Oxygen

Identify THREE THREE properties of Hydrogen Sulphide - H2S:

properties of
Hydrogen Highly toxic
Sulphide - H2S
Flammable gas

Heavier than air and hence tends to accumulate in low-lying areas

Pungent, smells like rotten eggs but rapidly destroys the sense of smell

Outline the types Failure mode of storage tanks that may lead to loss of containment from
of failure mode of hydrocarbon:
storage tanks
that may lead to Overfilling
loss of
containment from Corrosion
hydrocarbon
Construction fault
 Design Fault

Bund Failure

Operator / Instrument Error

Tank not tested

Foundations Overload

Vacuum effect during emptying of tank

During an TWO reasons for providing a tank bund:

inspection an
external fuel Prevent a potential leak causing environmental damage
storage tank is
found without a Control any leak within a known area
bund.
Ensure the maximum quantity of product can be contained within the bund
Identify TWO
reasons for
providing a tank
bund

Outline the Features which should be included in the design of a tank bund:
features which
should be Ensure the maximum quantity of product can be contained within the bund
included in the at least 110%
design of a tank
bund Make allowance for the space occupied by other tanks

Located away from traffic routes

Impermeable base

No drain valve- rain water should be pumped out

Lightening protection

Petroleum How a fire risk may exist with floating tanks:

storage tank fires
have been Lightning strikes
reduced
substantially by Leaks due to corrosion, damaged pipe work
using floating
roofs, but a fire Product overfill or high internal pressures
risk may still
exist. Rainwater or snow load sinks the roof and exposes fuel vapours

Outline how a fire

risk may exist
with floating
tanks

Identify TWO TWO examples of fire protection systems used on floating roof tanks:
examples of fire
protection Fixed foam systems
systems used on
floating roof Fire Monitors
tanks
Portable foam fire fighting systems

Hose lines

Outline the fire For floating roof tanks the main means of fire protection is to use fixed foam
protection that installations which spread foam around the rim seal.
would be used on
a floating roof Monitors and water deluge cooling sprays may also be used
tank

Identify the The environmental effects if a tank failure occurred:

environmental
effects if a tank Oil contamination of ground would be highly toxic to plant and animal life
failure occurred and could enter rivers and waterways depriving life of oxygen

Outline the The tiered three-level approach to emergency medical treatment is:
tiered, three-level
approach to Level 1 - Basic first-aid:
emergency
medical Intended as first line treatment to preserve life and stabilise the injured:
treatment
Requiring the provision of an adequate number of trained first-aiders
(depending on the level of risk, number of workers, installation remoteness,
etc.) and first-aid equipment (first-aid kits etc.).

Level 2 - Advanced first-aid

Requiring first-aiders with more advanced skills (such as the use of

specialised equipment or methods).

Level 3 - Utilising medics or paramedics

With remote support from other medical professionals, who will have specific
medical training and be capable of administering drugs, advanced wound
 treatment, etc.

Distinguish Offshore evacuation methods are:

between primary,
secondary and Primary Method
tertiary offshore
evacuation The usual none-emergency method, e.g. ship.
methods
Secondary method

Used when the primary method is unavailable, e.g. lifeboat launched from
the rig.

Tertiary Method

Heavily reliant on the individuals own effort and used as a last resort when
all other methods are unavailable, e.g. putting on lifejackets and survival
suits and jumping into the sea

An operator is Factors that influence the generation of the electrostatic charge:

draining a
flammable liquid Hot Dry Weather
from process pipe
work to a metal Flow rate,
container.
Overfilling
The supervisor is
concerned about Lack of earthing / bonding
the possibility of
an electrostatic Liquid instability
charge forming
and stops this Splash Filling
operation until a
risk assessment Agitation
is undertaken.
Filters
During this work
activity:

Identify factors
that influence the
generation of the
electrostatic
charge;

Outline practical Practical ways of minimising the formation of an electrostatic charge:

ways of
minimising the Humidification of the atmosphere
formation of an
electrostatic Antistatic additives
charge
Reduce flow velocity

Intrinsically safe equipment

Bonding & Grounding of equipment & containers

Avoid splash filling by submerging the fill pipe bellow the liquid level in the
container

Increasing the conductance of floors, footwear