Permit-To-Work System - (20-0029PR) - tcm24-174597 REPSOL

Business Regulation
D.G. E&P Non-controlled printed copy

Valid regulations available in our search engine
Permit To Work (PTW) System

Scope: Business Global Code: 20-00029PR
Owner: D. S&E E&P Revision: 2.0
Purpose
The purpose of this document is to establish a standardized Permit to Work (PTW) System in E&P production
assets.
The main objectives are:
 Establish the mandatory conditions to control any work executed by an Organization Unit in the Area of
responsibility of another Organization Unit, by means of written documents known as “Permits to Work”.
 Establish the process and responsibilities for operating the PTW System.
Specific local legal requirements shall be applied when implementing this procedure. In case of difference between
the requirements of this procedure and local requirements, the more stringent requirement shall be applied.
Scope of application
It covers all E&P activities and projects that are carried out in the operated production assets onshore and offshore.
In case of non-operated production assets, all reasonable attempts to influence partners to implement this procedure
should be made.
Framework regulations
 Permit to Work System (00-00468NO)
 Safety and Environmental Risk Management at Industrial Assets Standard (00-00353NO)
 Confined Space Entry (00-00472PR)
 Incident Management (00-00343PR)
 Implementation and compliance with the "Basic Safety Rules" (00-00533NO)
© REPSOL, S. A., 2017. All rights reserved. This document is the exclusive property of Repsol, S. A. and may only be used by the companies of the Repsol Group and their staff, in the exercise of their respective roles as employees
of the Repsol Group, except with the express written consent of Repsol, S. A. It may not be revealed to third parties, copied, distributed, reproduced, made public and/or modified, totally or partially, without the express written consent
of Repsol, S. A. Repsol reserves the right to take appropriate action against any violation of the terms in this section.
Business Regulation
D.G. E&P
Non-controlled printed copy
Permit To Work System (PTW)

Index
1. Definitions and Acronyms.................................................................................................................................... 4
1.1. Definitions ............................................................................................................................................. 4
1.2. Acronyms .............................................................................................................................................. 5
2. Permit to Work process ........................................................................................................................................ 6
2.1. Step 1 – Generate PTW ........................................................................................................................ 8
2.1.1. Carry out Risk Assessment ................................................................................................... 8
2.2. Step 2 – Authorize and verify ................................................................................................................ 9
2.3. Step 3 – Perform the Work ................................................................................................................... 9
2.3.1.Perform Gas/Atmosphere tests ............................................................................................ 10
2.4. Step 4 – Manage Revalidation, Suspension, Cancellation and Closure ............................................ 10
2.4.1.Revalidation .......................................................................................................................... 10
2.4.2.Suspension ........................................................................................................................... 10
2.4.3.Cancellation .......................................................................................................................... 11
2.4.4.Closure .................................................................................................................................. 11
2.5. Step 5 – Record .................................................................................................................................. 11
3. Types of PTW and Certificates .......................................................................................................................... 11
3.1. Cold Work Permit ................................................................................................................................ 12
3.2. Hot Work Permit .................................................................................................................................. 12
3.3. Confined Space Entry Certificate ........................................................................................................ 14
3.4. Radiation Certificate ............................................................................................................................ 14
3.5. Excavation Certificate ......................................................................................................................... 15
3.6. Isolation Certificate.............................................................................................................................. 15
3.7. Work at Height Certificate ................................................................................................................... 16
3.8. Electrical Work Certificate ................................................................................................................... 16
3.9. Additional Verifications ........................................................................................................................ 16
3.9.1.Lift Plan ................................................................................................................................. 17
3.9.2.Diving Plan ............................................................................................................................ 17
4. Use of PTW in unmanned installation ............................................................................................................... 17
5. Use of PTW in simultaneous operations (SIMOPS) ......................................................................................... 18
6. Use of PTW in Major Work areas ....................................................................................................................... 18
7. Personnel qualified to authorize PTWs ............................................................................................................ 19
8. Monitoring and auditing ..................................................................................................................................... 19
9. Roles & Responsibilities .................................................................................................................................... 20
10. Exemptions .......................................................................................................................................................... 22
11. Appendices .......................................................................................................................................................... 22
Appendix I. Reference documentation ............................................................................................................. 22
Appendix II. Cold Permit to Work ..................................................................................................................... 22
Appendix III. Hot Work Permit.......................................................................................................................... 22
Appendix IV. Confined Space Entry Certificate ............................................................................................... 22
Appendix V. Radiation Works Certificate ......................................................................................................... 22
Appendix VI. Excavation Certificate ................................................................................................................. 23
Appendix VII. Isolation Certificate .................................................................................................................... 23
Appendix VIII. Work at Height Certificate ........................................................................................................ 23
© Repsol, S.A., 2017.
2 / 24
Business Regulation
D.G. E&P

Appendix IX. Electrical Work Certificate .......................................................................................................... 23

Appendix X: SIMOPS Form ............................................................................................................................. 23
Appendix XI: PTW Audit Check List ................................................................................................................ 23
Appendix XII: List of works that the PTW can be issued remotely for contractors in unmanned installations 23
Appendix XIII: List of works that a contractor can carry out without PTW in unmanned installations ............. 23
Approval ...................................................................................................................................................................... 24
© Repsol, S.A., 2017.
3 / 24
Business Regulation
D.G. E&P

1. Definitions and Acronyms

1.1. Definitions
 Affected Area: Any area of the asset which is not under the responsibility of the PTW Authorizer and could
be affected by the works associated to the PTW.
 Area: A physical zone delimited by physical boundaries where the work is going to be executed and an
Authorizer is assigned.The asset could be formed by one or more Areas that cover all the surface of the
asset.The different Areas must be established and drawn in a plan known as the PTW Areas Map.
 Authorized Worker for Electrical Work: Any worker authorized by the company to carry out certain works
with electrical risks. This authorization shall be provided on the basis of the worker’s competence to perform
the works safely.
 Authorizer: The person in charge of an Area, who is sufficiently capable and competent to ensure that the
necessary safety measures have been taken and can approve the execution of certain work in the Area or
equipment.
 Classified Areas: Areas are where flammable liquids, gases or vapors or combustible dust may exist in
sufficient quantities to produce an explosion or fire.
 Confined Space: A space which, by design, has limited openings for entry and exit; unfavorable natural
ventilation which could contain or has contained any type of hazardous products in its interior (asphyxiating,
flammable, or toxic), or which could produce hazardous conditions due to work being carried out inside it.
 Contingent Employee: An individual performing temporarily full time labour to the benefit of the company
but not employed directly by Repsol. This individual works alongside and takes direction from a Repsol E&P
employee.
 Diving: All under water works carried out by a person immersed at a depth greater than 1 meter.
 Gas/Atmosphere Testing: Checking of the work site with a suitable gas detector, prior to certain types of
work activities and during the work activity, to provide a warning of the presence of flammable and/or toxic
gas, or an oxygen deficient/enriched atmosphere.
 Isolation: Separation of the plant, process and equipment from every source of energy (electrical,
mechanical, hydraulic, pneumatic, gravitational, chemical, thermal, etc.).
 Job Safety Analysis (JSA): A technique that focuses on job tasks as a way to identify hazards before they
occur. It focuses on the interactions between the worker, the task, the tools and the work environment.It is
also known as a job safety assessment, job hazard analysis or task risk control, etc.
 Organization Unit (OU): Part of the organizational structure with responsibility in a certain area of the asset.
 Performing Authority: A person belonging to a Repsol E&P Organizational Unit or to a related or
contracted company who has been appointed by the Permit Requester as the “Person-in-Charge of the
Execution” of the work. This person is responsible for the work to be performed, under the conditions of the
PTW and additional procedures or certificates.
 Qualified Worker for Electrical Works: An authorized worker with specialized knowledge on the risks
associated with electrical equipment or installations, or any work in proximity of an electrical line. In addition
to being an Authorized Worker, the Qualified Worker holds an official license to carry out electrical works,
provided by the relevant local authority regarding the worker. If there is no official license available in the
country for electrical works, the BU has to determine the experience or studies necessary to designate this
type of job position.
 Requester: A sufficiently capable and competent person belonging to an Organizational Unit who requests
authorization to execute a job.
© Repsol, S.A., 2017.
4 / 24
Business Regulation
D.G. E&P

 Simultaneous Operations (SIMOPS): Simultaneous Operations are considered when there are different
operations in the same Area, authorized by different authorizers, typically when Drilling, Workover,
Construction or other operations take place in the Production Area. This situation is likely to increase the
level of risk due to the interferences between them.
In these cases a SIMOPS form shall be created to coordinate all the works managed or authorized by every
authorizer.
 Task Observed Person: A person who was observed on an specific task and deemed fully competent to
carry out the task safely according to the applicable procedures. Task Observation is a system based on
competency, evaluation and monitoring which has to be done by Repsol and according to the BU Task
Observation program.
Task Observation is valid for a limited period of time, and when expired has to be renewed accordingly.
 Tool Box Talk: A talk by a Permit Requester / Performing Authority with the Work Performers about the task
risks and conditions of the PTW at the workplace.
 Unmanned Installation: An installation where the owner of the area is not present daily.
 Work Performer: A person who works under the terms of the PTW , i.e., a performing crew.
1.2. Acronyms
 ALARP: As Low As Reasonably Practicable
 BU: Business Unit
 E&P: Exploration & Production
 HSE: Health, Safety and Environment
 JSA: Job Safety Analysis
 LEL: Lower Explosion Limit
 LOTO: Lock Out / Tag Out
 OU: Organizational Unit
 PTW: Permit To Work
 Repsol: The Repsol Group of Companies
 TRA: Task Risk Assessment
 WO: Work Order (OT: Orden de Trabajo)
 SIMOPS: Simultaneous Operations
© Repsol, S.A., 2017.
5 / 24
Business Regulation
D.G. E&P

2. Permit to Work process

The PTW process includes the following steps (see figure 1):
 Generate PTW
 Verify and Authorize
 Perform the Work
 Manage Revalidation, Suspension, Cancellation and Closure
 Record
Those steps are explained in more detail in the following sections.
For unmanned installations, some specific conditions apply which are described in section 4.
The BU HSE provides support to the people involved in the PTW process as required.
© Repsol, S.A., 2017.
6 / 24
Business Regulation
D.G. E&P


© Repsol, S.A., 2017.
7 / 24
Business Regulation
D.G. E&P

2.1. Step 1 – Generate PTW

A PTW is required when Requester needs to execute work in an area under the responsibility of another
Organizational Unit (Authorizer).
Works executed in an Area by the personnel belonging to the same Area do not require the application of the PTW
system. The works are controlled by utilizing work/operation procedures.
Only in the following cases, an employee belonging to the organization of an Authorizer will need a PTW even if the
work is completed in his/her area:
Confined Space Entry
Hot Work in classified area
Under no circumstances the same person can authorize a PTW for himself/herself and always it has to be
authorized by a competent authorizer in the area.
The Organizational Unit in charge of executing the work may be the Requester’s or another Organization (typically a
contracted company) appointed by the Requester.
Both the Area and the work have their own risks. The work introduces new risks in the Area where it is to be
performed. Both organizations responsible for the Area and the work must share their knowledge about these risks
according to the PTW formats in order to implement preventive and mitigation measures for reducing and controlling
the risks.
For activities like visits or certain inspections that neither interact with the installations nor use any equipment
(camera, motored vehicle, etc.) that can introduce a new hazard to the installation, access control and entrance
protocols/procedures are used and PTW is not necessary.
It is recommended that the Authorizer and Requester (plus the Performing Authority when necessary) hold a specific
meeting in order to agree on the work program, interaction with other works and the required permit to works.
In general:
 The Permit to Work Requester informs the Authorizer about the time, place and method of the work. He/she
also provides information about the risks introduced by the work and the tools which are to be used to
execute the work.
 The Authorizer informs the Requester about the conditions of the Area and work environment, i.e. work
zone, surroundings, installations and equipment, as well as the potential risks foreseen as a consequence of
changes in those conditions during the work time.
Based on these risks, a Cold or Hot PTW shall be used, as well as the corresponding certificates according to this
document (see PTW and Certificate templates – Appendix II to IX).Then the Requester completes the work
description within the PTW form and submit it to the Authorizer.
2.1.1. Carry out Risk Assessment
All PTWs include an identification of hazards and definitions of control measures. For high risk or complex work, a
specific risk assessment (JSA, HAZID, TRA, or similar) must be carried out by the Permit Requester and be verified
by the Authorizer. A specific Risk Assessment is always required at least in the following cases:
 High Energy Hot Works
 Confined Spaces Entry
The Authorizer/Requester might request support from the BU HSE to conduct the risk assessment.
© Repsol, S.A., 2017.
8 / 24
Business Regulation
D.G. E&P

2.2. Step 2 –Verify and Authorize

Once the request for the PTW has been received by the Authorizer, either the Authorizer or the delegated person
belonging to the Authorizer Organization fills in the PTW form and specifies the preventive/mitigation measures of
the Area in order to carry out the work.
The PTW is always signned by the Authorizer, to allow the execution of work in his/her Area by people not belonging
to his/her Organizational Unit (OU).
The Authorizer and the Performing Authority shall not be the same person or belong to the same OU. (In case of
Confined Space entry and hot work in classified area Authorizer and Performing Authority can belong to the same
OU but not be the same person).
The Authorizer shall arrange an inspection of the work zone to make sure that all the area, equipment items, tools or
installations involved comply with the safety measures required for the work. Such inspection will be conducted by
the Authorizer, an Operator of the Area or Authorizer delegated person in the Area where the work is to be carried
out.
The preventive measures of the PTW shall be implemented and verified by the Authorizer or delegated person. The
Operator or whoever implements these preventive measures shall sign the PTW form once these tasks have been
executed. The work can be started only after all these required signatures are done. In the event that a specific risk
assessment has been prepared, the Authorizer must assure that its preventive/mitigation measures have been
implemented.
The Authorizer is responsible for communicating to the involved personnel and controlling the different PTWs that
are active in the Area, and other activities that could be affected by these works.
When there are Production, Drilling or Workover operations in progress in the same Area, a “Simultaneous
Operations” form shall be used. The Authorizer shall ensure that the Performing Authority is aware of these possible
interactions.
The Authorizer may delegate a competent person belonging to his/her Organization to authorize all or certain types
of PTWs. This delegation shall be formal and a list of the Authorizer delegates shall be available.
Once the work has been authorized, the Permit Requester shall submit the original PTW and Certificates forms to
the Performing Authority. The PTW and Certificates must be available both at the worksite and in a location under
the responsibility of the Authorizer, until the PTW has been cancelled / closed.
2.3. Step 3 – Perform the Work

The work has to be carried out by the Performing Authority according to the procedures of each Asset, the
Contractor or if applicable, as established in the corresponding Bridging Document. See DG E&P HSE Bridging
Document Practice (code 031-PR-03464MN.UP).
All Work Performers and other personnel present in the Area shall be duly notified about the active/open PTWs and
Certificates in the Area.
The Performing Authority shall hold a tool box talk on the work site for all Work Performers.
At this talk, the Performing Authority points out the hazards and preventive measures associated with the work to be
carried out.
If a Job Safety Assessment (JSA) has been prepared, each Work Performer must sign it. Their signatures confirm
that the workers involved in the work fully understand the scope of the work to be carried out, associated risks, and
precautions to be taken.
The Performing Authority shall ensure compliance with the established safety measures during the entire period of
work execution. Once the work is finished the areas has to be left clean and safe and the equipment either
operational or secured.
© Repsol, S.A., 2017.
9 / 24
Business Regulation
D.G. E&P

If any of the Worker Performers is changed, the Performing Authority shall inform new Work Performer about the
identified hazards and implemented safety measures for the correct execution of the work. In case of existence of
JSA, the new Worker Peformer has to sign it.
The Authorizer shall maintain safe operations while the work covered by the PTW is being performed. It is
recommended that both Authorizer and Requester conduct regular inspections in order to verify compliance with the
specifications stipulated for the work.
2.3.1. Perform Gas/Atmosphere tests
The Authorizer is responsible for ensuring that Gas/Atmosphere tests are performed and registered as established
in the PTW and during the permit validity period.
Should any of the Authorizer’s inspections reveal deviations from the specifications, he or she shall immediately
suspend the work and correct the deviations (see Step 4).
2.4. Step 4 – Manage Revalidation, Suspension, Cancellation and Closure

The maximum validity time for a PTW is one shift. After this period, the PTW is expired, and if the work is finished
the PTW must be closed. In case the work continues the PTW must be revalidated.
2.4.1. Revalidation
The PTW can be revalidated once expired, for 5 calendar days at most; after this, a new PTW shall be prepared.
If the conditions previously established in the original PTW have changed, the PTW cannot be revalidated.
If either Authorizer or Performing Authority change, the PTW shall be revalidated and the revalidation shall be shown
in the PTW.
For revalidation, the Authorizer, the Operator and the Performing Authority shall sign the PTW form.
2.4.2. Suspension
A PTW can generally be suspended on the following grounds:
 If any uncontrolled risk for the workers is detected
 In the case of unplanned interactions with other works
 While waiting for materials or spare parts
 If any of the required documents associated to the PTW is not available
 Activation of Emergency Plans
To suspend a PTW, it is mandatory that the safety conditions in the area have been assured and the PTW has been
signed by at least Authorizer and Performing Authority. In case of suspension, all the PTW copies have to be
gathered and signed accordingly.
In case of suspended works, no safe isolation shall be removed until the PTW is closed by the Authorizer. Bypassed
alarms and inhibited safety systems should be reinstated if technically possible.
Once a PTW has been suspended, the PTW shall be revalidated in order to continue with the work.
In the event of activation of emergency plans in the area where the work is being done, all works in the area shall be
suspended according to the Emergency Plan, and all PTW copies shall be delivered to the control room when
possible. The suspension signatures shall be affixed in an adequate time.
© Repsol, S.A., 2017.
10 / 24
Business Regulation
D.G. E&P

2.4.3. Cancellation
If the work environment or equipment conditions established in the PTW change, the current PTW shall be
cancelled, and a new one shall be prepared.
PTWs shall be cancelled if the following circumstances occur, and in order to restart the work, a new PTW is
required:
 Expiration of their validity date and time, with no revalidation being possible (i.e. more than five days since
first authorization, no revalidation boxes available).
 Unforeseen modifications in the work conditions provided for in the original permit.
 Changes in the pre-established safety conditions.
Only the Authorizer is allowed to cancel a PTW.
2.4.4. Closure
PTWs shall be closed once the work has been fully completed or when the work is dismissed (the work will not be
restarted again).
The following steps shall be carried out either when the work has been completed or dismissed:
 Re-establish normal operating conditions in the area and/or equipment involved.
 Remove all additional protective devices and isolation means (alarm by-passes, safety systems inhibits,
etc.) used for the work.
 Ensure all waste is properly handled and the work area is clean with proper housekeeping.
Before Closing the PTW, the Authorizer or delegated person shall verify that the previous actions have been
implemented. Only the Authorizer is allowed to close a PTW.
Once the Performing Authority and the Authorizer have confirmed compliance with all these conditions, they shall
close the PTW and sign all the copies indicating their respective approval.
2.5. Step 5 – Record

The original copy of all the PTWs shall be kept at least one year after closure or cancellation of each PTW.
In case where a near-miss or incident has occurred, the original PTW forms are kept on file as recommended by the
BU Legal Department. These PTW forms shall be uploaded in Repsol incident management tool as attachments of
the Incident Investigation Process by the Incident Investigation Coordinator.
3. Types of PTW and Certificates

Depending on the hazards of the work, the adequate PTW and the associated certificate shall be used.
Depending on the nature of the hazard, PTWs are divided into the following categories:
 Cold Work
 Hot Work
For certain work, there are Specific Certificates which complement the PTWs:
 Confined Spaces Entry
 Radiation
 Excavation
© Repsol, S.A., 2017.
11 / 24
Business Regulation
D.G. E&P

 Isolation
 Working at Height
 Electrical Work
Templates of PTWs and Specific Certificates are provided in Appendix II to IX. However:
a) BUs are expected to include local requirements if necessary
b) In all cases, the form shall be printed out in keeping with the following considerations:
 Correlative number pre-printed.
 At least two copies, Authorizer and Performing Authorizer.
 Proposed colors:
i. Cold PTW. White with a light blue frame
ii. Hot PTW. White with a light red frame, and a diagonal light red band
3.1. Cold Work Permit

The Cold Work Permit is used for work in which neither naked/open flames, nor equipment that produces sparks or
generates heat is used in a classified area, and which entails specific risks that require special precautions to protect
people and assets (see the flowchart in section 3.2. on Hot PTW).
This Permit can be used for the following tasks (as examples):
 Work in which no flames are present.
 Fire-fighting network water outlets.
 Work done on mobile equipment such as pumps, compressors, motors, cranes lift apparatus, etc.
 Work that interfere with traffic.
 Work entailing health risks (high noise level, atmosphere that is breathable but highly contaminated, high
ambient temperature, possibility of noxious dust in suspension).
 All work which in the opinion of the Requester or Authorizer require PTW due to:
o the intrinsic nature of the work
o the place of the work
o the organizations involved in the work.
A Cold Work Permit can be used alone or in conjunction with Specific Certificates, depending on the nature of the
work. The Permit form includes the risks and tasks and formally sets out the control measures to be implemented
(see Appendix II).
3.2. Hot Work Permit

The Hot Work Permit is used for works in which an ignition source for flammable or combustible materials present in
the area can be produced, or when the tools and equipment used may produce sparks or generate heat in a
classified area.
Depending on the characteristics of the ignition source, those works, that involve the use of naked/open flames or
sources of energy that could reach the auto-ignition temperature of the materials present in the area, are classified
as “high energy” hot work.
© Repsol, S.A., 2017.
12 / 24
Business Regulation
D.G. E&P

The following flowchart can be used as a guide for the selection of the PTW when potential ignition sources are
involved:
In general, and as example, if any of the following is used in a classified area (or an area with the possible presence
of flammable or combustible materials) the work shall be considered as a “high energy” hot work:
 Welding machines
 Radial cutters
 Heat treatments
 Flame cutting
 Tin lamps, torches
 Bonfires of any kind or type
 Explosives
 Pyrophoric handling
 Decreased material stress / preheating prior to welding electrical induction.
 Grinding
 All open fires.
In Classified Areas, any activity in which the equipment used is capable of generating sparks or heat while being
operated shall be considered Hot Work. For example:
 Equipment with internal combustion engines, including automobiles
© Repsol, S.A., 2017.
13 / 24
Business Regulation
D.G. E&P

 Electrical equipment that is not protected in accordance with the classification of the area
 Tools operated by compressed air or by hand, that are used to chisel, cut, break, strike, caulk or drill metal,
concrete or masonry
 Sand blasting and grout blasting
 Flash photography
 Opening of electrical equipment under power
 Hand-operated tools not made of non-sparking material
 Any source of static electricity
In the event of work in presence of naked/open flames (High Energy hot works), continuous Gas/Atmosphere testing
is required. Consequently, for works considered as ‘High Energy’ the following boxes in the Hot Work PTW form
(see Appendix III) have to be ticked:
- High Energy box
- Continuous Gas/Atmosphere monitoring box
It is recommended that continuous Gas/Atmosphere testing is used in Hot Work as well.
When the value of the gas concentration measured by the Gas/Atmosphere test is higher than 10% of the Lower
Explosion Limit (LEL), the work shall not be authorized, or must be stopped.
A Hot Work Permit can be used alone or in conjunction with other specific Certificates, depending on the nature of
the work. The Permit form includes risks and tasks and formally sets out the control measures to be put in place.
3.3. Confined Space Entry Certificate

The Confined Space Entry Certificate evaluates a space with regard to the presence of dangerous vapors or
asphyxiating gases. The Certificate must specify the measures to be taken in the enclosed atmosphere against the
hazards, considering the possibility of fumes escaping from residues, oxygen depletion of the atmosphere as a
result of oxidation, or the entry of airborne contaminants from adjacent sources (see Appendix IV).
This Certificate authorizes and controls the entry of people into any closed or confined space including: trenches,
cellars, pits, tanks, separators, columns, condensers, exchangers, furnaces, boilers, cisterns, conduits, drainage
pipes, channels, collection boxes and pockets.
This Certificate only authorizes entry into specific containers or enclosures. For any work in Confined Space, this
Certificate shall be accompanied with the Cold or Hot Work Permit and corresponding complementary certificates
when needed. Usually the Isolation Certificate will be needed in order to enter the Confined Space (for tanks,
vessels, etc.).
All work which requires confined spaces entry must fulfill the requirements set out in Repsol Procedure Confined
Space Entry (code 00-00472PR).
3.4. Radiation Certificate

This certificate outlines the necessary control measures for reducing the risk of exposure to radioactive sources
arising from hazards such as the following:
 Unsafe handling of a radioactive substance or equipment containing a radioactive substance
 Release or leakage of a radioactive substance
 Exposure of personnel to a radioactive substance
 Radioactive waste manipulation
© Repsol, S.A., 2017.
14 / 24
Business Regulation
D.G. E&P

Locking and unlocking of ionizing radiation sources requires control measures, including site inspection, source
exposure controls, access or containment barriers and radiation monitoring to minimize the risk of exposure (see
Appendix V).
Radiation Certificates are always used in conjunction with the corresponding Work Permit.
Only certified personnel are authorized to manage, handle or isolate ionizing radiation sources. Specific local
regulations must be followed.
3.5. Excavation Certificate

This certificate, also known as “Ground Disturbance”, is used to control digging operations around or inside any
existing installation in order to ensure that no underground services or pipework will be affected, either by damage or
downfall and that the work can be carried out safely.
An Excavation Certificate shall be issued whenever the work to be carried out must go deeper than half a meter. Any
excavation work deeper than 1.2 meters shall, in addition, require a Confined Space Entry Permit.
It is necessary to ensure that all the underground installations are identified and wherever possible or if required, the
certificate shall be accompanied by an ultrasonic or magnetic survey of the area to be excavated in order to identify
underground installations that have not been identified using existing drawings or other means.
The accuracy of the information available on the Excavation Certificate shall be used to decide how the excavation
can be carried out (for example, hand digging, hydro vac excavation or machine digging), or whether further
investigation is required before the excavation can take place (see Appendix VI).
The Excavation Certificate is used always in conjunction with the corresponding Work Permit. This Certificate
documents the risks and tasks, and formally set out the control measures to be put in place.
3.6. Isolation Certificate

Isolation Certificate is used when isolation or blocking (mechanical or electrical) of a machine, equipment or an
installation is required to authorize a specific work. Isolation Certificate is a single copy document and always in the
custody of Authorizer (see Appendix VII). However the Authorizer shall attach a copy of the Isolation Certificate to
the Permit to Works that use the established isolation or blocking.
Authorizer shall include the number of corresponding Isolation Certificate in PTWs that use the established isolation
or blocking, and also shall record the number of PTWs that use the established isolation or blocking on the backside
of the Isolation Certificate, ensuring the correct implementation of the applicable Isolation Procedure also known as
LOTO (Lock Out / Tag Out) system.
The Assets shall have an Isolation Procedure (also known as LOTO system) which considers the isolation of:
 Electrical energy sources
 Process fluid and pressures
 Control systems and alarms
 Radioactive sources
When there are different PTWs using the same isolation, a proper isolation/control system shall be used, to
guarantee that all the works are finished before isolation is removed.
Only isolation certificate can be used with various PTWs as specified in the certificate.
Isolation is executed according to the following minimum conditions:
 It shall be made using secure elements that prevent inadvertent or wrong actuations (disconnect piping or
electrical connections, blind flanges, seals, chain and lock, LOTO, etc.).
© Repsol, S.A., 2017.
15 / 24
Business Regulation
D.G. E&P

 Each element of isolation shall be identified.

 The installation and removal of the isolation shall be done only under the control of the Authorizer.
 The installation and removal of the isolation shall be verified in-situ by the Authorizer or another person from
his / her organization who has sufficient training.
 Isolation Diagram (including isolation elements and isolated points) shall be prepared and a copy attached
to the Certificate.
 When isolation is used for more than one work, it shall be identified in a way that allows all affected permits
to work to be referenced.
The temporary shut-down of safety protection systems shall be performed according to the Repsol procedure
Temporary Shut-down of Safety Protection Systems (code 00-00470PR).
3.7. Work at Height Certificate

Work at height is a work carried out more than two meters above ground level and work carried out more than two
meters above the bottom of any pit dug in the ground (trenches, excavations, etc.).
The Work at Height Certificate is used always in conjunction with the corresponding Work Permit. These permits
document the task, risks and the control measures in place. It not only prevents and mitigates the risks for workers,
but also for the people around the workplace (see Appendix VIII).
Some of the activities which require a Work at Height Certificate are:
 Scaffolding
 Working on platforms (i.e. those installed in towers, tanks, stacks, piperacks, vessels, etc.)
 Working on roofs and chimneys
 Using ladders higher than 2 meters
 Working on foundations structures during construction works
DG E&P Lifting and Hoisting Operations Practice (code 026-PR-03467MN-UP) must be applied when lifting
personnel.
3.8. Electrical Work Certificate

Electrical Work Certificates are used for working with live equipment, near high voltage/low voltage electrical
equipment or installations and whenever electric isolation work is required in order to ensure that the
equipment/installation to be worked on is electrically safe and the electrical power is isolated to the extent necessary
for the safe performance of the authorized work.
When isolation is needed, this certificate and the corresponding Isolation Certificate ensure that the power supply
has been cut-off, to enable the task to be safely performed (see Appendix IX).
The Electrical Certificate is used always in conjunction with the corresponding Work Permit.
All installation work including temporary electrical installations must fulfill the requirements stated in Repsol
Procedure Use of temporary electrical installation (code 00-00471PR).
Only authorized personnel are permitted to carry out any electrical service work, including the isolation, repair,
adjusting, testing or servicing of electrical equipment.
3.9. Additional Verifications

In addition to the above mentioned certificates, the following documents are required to accompany the PTW if
applicable:
© Repsol, S.A., 2017.
16 / 24
Business Regulation
D.G. E&P

3.9.1. Lift Plan

Lifting and Hoisting works are regulated by the DG Lifting and Hoisting Operations Practice, (code 026 PR 03467
MN UP).
A Lift Plan according to the provided format in the DG Lifting and Hoisting Operations Practice shall be accompanied
with the PTW. It allows the person in charge of the lifting to act as Requester, in the Area under the responsibility of
the Authorizer, with the Performing Organization being the Lifting Contractor, and its Performing Authority being in
charge of the PTW management.
3.9.2. Diving Plan
For all operations involving diving or surface swimmer a specific document called Diving Plan has to be
accompanied with the PTW. Without exception, all diving works shall be performed by a professional diving
contractor. And no diving is to be carried out by Repsol personnel.
Diving methods include:
 Surface-supplied air diving.
 SCUBA diving (Self Contained Underwater Breathing Apparatus). SCUBA diving is considered an unsafe
working practice and is not recommended except for scientific or surveying works.
 Mixed gas diving.
The Asset Manager shall appoint a Repsol E&P Diving Representative. This representative must be onsite during all
diving activities and act as the Permit Requester. In addition, the Contractor Diving Representative must be onsite
during all diving operations and act as the Performing Authority.
A HAZID shall be completed prior to any diving operation in order to take into account possible interferences,
procedures and hardware associated with the task.
Diving Plan shall be provided by the contractor. This plan shall include atmospheric condition, seawater condition,
underwater condition, hazards and associated control measures and an specific contingency plans for the diving
operations. Special attention will be paid to obtaining proper weather information and data on other environmental
conditions. Work activities should be scheduled to take into account prevailing weather conditions.
4. Use of PTW in unmanned installation

For an unmanned installation it is preferred that PTW authorizer (also known as PTW issuer in some places)
issues/closes PTWs on site, but since it is not always possible, PTW is managed as below:
1- Work Performer is a Repsol employee/Contingent employee:
a) and belongs to the Organization Unit of the Area: PTW is NOT required, except for Confined Space Entry
and Hot Work in classified area.
b) but does not belong to the Organization Unit of the Area: PTW is required.
If the work performer is Task Observed on the work to be carried out, installation/lease entry and PTW
System, the Authorizer might decide to issue the PTW remotely or in situ.
2- Work Performer is NOT a Repsol employee/Contingent employee: PTW is required*
a) carrying out a work that is included in the LIST OF WORKS THAT THE PTW CAN BE ISSUED
REMOTELY FOR CONTRACTORS IN UNMANNED INSTALLATIONS. If the work performer is Task
Observed on the work to be carried out, installation/lease entry and PTW System, the Authorizer might
decide to issue the PTW remotely or in situ.
b) carrying out a work that is not included in the List of a) and List of work without PTW*. Remote issuing is
NOT allowed and in situ issuing is required.
© Repsol, S.A., 2017.
17 / 24
Business Regulation
D.G. E&P

* except for works in the LIST OF WORKS THAT CONTRACTOR CAN CARRY OUT WITHOUT PTW IN
UNMANNED INSTALLATIONS.
List of works that the PTW can be issued remotely for contractors in unmanned installations: Only routine
works with risk level less than 35 based on Safety and environmental risk management at industrial assets standard
(00-00353NO) are included in this list. These works have to be carried out according to the specific procedures that
are already prepared and approved by Repsol. The workers have to be task observed by Repsol on these works
based on the procedures. The list of these works is provided in Appendix XII.
List of works that a contractor can carry out without PTW in unmanned installations: Only routine works that
do not need access to classified areas, with risk level less than 35 based on Safety and environmental risk
management at industrial assets standard (00-00353NO) are included in this list. These works have to be carried out
according to the specific procedures that are already prepared and approved by Repsol. These specific procedures
have to include required communications to area owner before, during and at the completion of work. The workers
have to be task observed by Repsol on these works based on the procedures. The list of these works is provided in
Appendix XIII.
The process to issue and authorize the PTW remotely requires:
- Filling out of the format by the Performing Authority
- Definition of communication channels including phone, radio, email, etc. between Authorizer, Performing
Authority, Operator, Requester and Affected Area when applicable.
- Auditable evidences and documents like photo, video, etc. for verification of safety measures definition and
implementation by Authorizer.
- Once the implementation of safety measures have been verified, the Authorizer issues the PTW
accompanied with the auditable evidences of PTW authorization including SMS text, email, electronic
signature, etc.
- Auditable evidences of PTW closure signature including SMS text, email, electronic signature, etc.
Each Asset shall prepare a formal written process for remote issue and approval aligned with the abovementioned
criteria.
5. Use of PTW in simultaneous operations (SIMOPS)

In case of SIMOPS, a SIMOPS form shall be filled out and signed by all Authorizers on daily basis. This form
includes and describes the works to be carried out by different operations (either by PTW or without PTW) in the
Area and ensures the awareness and coordination of all the Authorizers. The Recommended SIMOPS form is
attached in Appendix X.
The site-specific PTW System shall be agreed between the BUs and Contractors. These agreements shall be
documented in a Bridging Document (DG E&P HSE Bridging Document Practice (code 031-PR-03464MN.UP)).
A Bridging Document shall specify the physical boundaries within which the Simultaneous Operations apply.
In Drilling operations it is recommended to choose the PTW System of the Drilling Contractor except when important
aspects are not considered or if it is clearly less demanding than that of Repsol.
6. Use of PTW in Major Work areas

When major maintenance, assembly or construction tasks are carried out in an installation which have been
separated from normal operations using a screen or other similar means with access control, the person in charge of
the installation may authorize the partial suspension of some stages of this procedure by establishing general
documented procedures to be applied in the mentioned area.
All areas which cannot be separated in the manner described above (because of their location or the risks present in
them) are subject to this PTW System.
© Repsol, S.A., 2017.
18 / 24
Business Regulation
D.G. E&P

7. Personnel qualified to authorize PTWs

According to the definition of the Permit Authorizer, each BU shall prepare, and keep an updated list of qualified
Repsol personnel who can authorize PTWs. Interested parties must be duly notified of the appointed personnel.
The PTW Authorizer in an installation (plant, platform, etc.) is the highest authority of the installation. An installation
may be divided in multiple Areas (e.g. production, maintenance, power generation, laboratories, safety, etc.) with
delegated Authorizers. These Areas shall be established and drawn up in a plan known as the PTW Areas Map.
Within one Area, only one person/position is allowed to authorize the PTWs at any given time. The Authorizer shall
have a full overview of all open and active PTWs in his/her area of responsibility. In case the Authorizer of the
installation authorizes a PTW in a certain Area within the installation, he/she shall inform the delegated Authorizer of
that Area.
For specific large works, if support for the PTW is needed due to the amount of work in the area, another Authorizer
could be formally assigned. Proper measures shall be established to ensure adequate communication and
coordination of all works within the area.
8. Monitoring and auditing

The effectiveness and compliance of the PTW system used by Repsol personnel and by contractors shall be
monitored through a regular PTW monitoring by Repsol employees who participate in the PTW System. Appendix XI
includes a reference checklist for use in PTW monitoring checks.
It is recommended that this regular PTW monitoring is done as frequent as possible to ensure a continuous
evaluation of the PTW quality.
Field/Site HSE Representative has the responsibility to monitor the active/open and closed/filled PTWs on a regular
basis and consolidate the outcome. Due to the particular situation of some BUs, other operational staff
(recommended only PTW Authorizers) is also allowed to conduct the regular PTW monitoring, and in no
circumstances an individual is allowed to audit a PTW issued by him. The monitored PTWs in a period of time shall
be a representative sample of the total issued PTWs in that period.
Statistics of the audited PTWs shall be analyzed to identify and improve gaps in the application of this system.
All deviations identified during monitoring checks and HSE audits or during the PTW application shall be corrected
as soon as possible, and when necessary, work shall be stopped until corrective actions are taken.
The PTWs and their associated records shall be audited along with the rest of the HSE document system, pursuant
to the BU audit procedure.
© Repsol, S.A., 2017.
19 / 24
Business Regulation
D.G. E&P

9. Roles & Responsibilities

The following roles are key in the effective implementation of this document.
ROLE RESPONSIBILITIES
 Ensure effective implementation of the PTW system in accordance with this procedure,
regardless of whether operations are carried out by the company’s own personnel or by
BU Director / Asset external contractors
Manager
 Provide the necessary human and material resources to implement the PTW system and for
the safe performance of non-routine operations
 Review and validate the proposed preventive measures by the Permit Requester and define
any additional measures necessary
 Do/arrange an inspection before work commencement in order to ensure that all safety
measures are in place.
 Brief the Permit Requester and the Performing Authority on the conditions affecting the work
and the PTW
 Control compliance with the conditions and preventive measures established to respond to
the risks inherent in the work
 Post a copy of each and every active PTW in the Control Room or equivalent location.
 Keep updated records in the control room or equivalent location of all currently active PTWs
so that relevant personnel are informed at all times
Authorizer
 Update the “shift book” or equivalent tool to report the PTW active in the shift
 Cross reference all of the hazards that may interact when there are multiple PTWs active in
the same plant area or system, and keep the performers informed of the possible
interactions
 Establish and arrange/perform Gas/Atmosphere tests at the beginning of the work, and
ensure that Gas/Atmosphere tests are carried out according to the PTW requirements
during the validity of the permit
 Study the applicable HSE Bridging Document to understand roles and responsibilities
defined for performance of specific work
 Close the Permit to Work after having inspected the work area and verified that it has been
left in safe working condition
Delegated Authorizer  Carry out the activities assigned by the Authorizer in accordance with the PTW system
 Carry out an inspection before work commencement in order to ensure that all safety
measures are in place.
 Brief the Performing Authority and Work Performers on the conditions affecting the work and
the PTW
 Update the “shift book” or equivalent tool to report the PTW active in the shift
Operator  Cross reference all of the hazards that may interact when there are multiple PTWs active in
the area under the responsibility of Operator, and keep the performers informed of the
possible interactions
 Inspect the work area and verify that it has been left in safe working condition
 Perform Gas/Atmosphere tests at the beginning of the work, and ensure that
Gas/Atmosphere tests are carried out according to the PTW requirements during the validity
of the permit
© Repsol, S.A., 2017.
20 / 24
Business Regulation
D.G. E&P

ROLE RESPONSIBILITIES
 Carry out the necessary activities to request authorization to do work under his or her
responsibility that must be controlled by permits
 Inform third parties of potential dangers while the work is in progress
 Propose preventive and hazard control measures
 Ensure that frequent inspections are conducted to verify compliance with the PTW
Permit Requester
conditions
 Suspend the work if compliance deviations are identified and correct any such deviations
 Coordinate with the Performing Authority the work preparation and execution, in due time
and manner
 Ensure all personnel performing the work are competent and skilled
 Advise on general PTW issues and in the implementation of this procedure
 If necessary provide initial risk assessment advice regarding activities and sites so the
Permit Requester can start the PTW process
BU HSE
 Provide support for risk assessement
Representative
 Monitor the open/ongoing and closed/filed PTWs on a regular basis and consolidate the
outcome
 PTW System audit
 Validate the PTW, if required, and provide advice regarding the risks associated with the
Affected Area work in the area of responsibility
Responsible
 Inform any personnel within the area of responsibility that could be affected by the works
 Ensure all personnel performing the work are competent and skilled
 Post a copy of the relevant active Permit to Work in a visible place
 Give an onsite safety talk to all employees involved and obtain signatures of all Work
Performers to confirm that they have attended the safety talk
 Verify that all the conditions and preventive measures are fulfilled according to the
requirements included in the PTW form.
Performing Authority
 Ensure that the safety measures are complied with by the work team once the work has
been completed
 Suspend PTWs until compliance with procedures and safety practices is confirmed
 Close the Permit to Work after inspecting the work area and ensuring that the area has been
left clean and safe and the equipment is operational or secured once the work has been
completed
Work Performer  Follow the instructions provided in the PTW
 Act in accordance with the applicable procedures and practices established in the BU and in
Contractors
this document.
© Repsol, S.A., 2017.
21 / 24
Business Regulation
D.G. E&P

10. Exemptions
If for any reason, compliance with this procedure is deemed not possible, a formal risk assessment shall be
undertaken to demonstrate that the HSE risks associated with the PTW, will be both ALARP and Tolerable as
defined in the E&P Hazard Management Procedure (012 MR 03400 MN EP). The risk assessment must be
reviewed by the owner of this procedure and a variance must be signed by the corresponding level of authorization
according to the norm on Safety and Environment Risk Management in Industrial Assets (00-00353NO).
11. Appendices
Appendix I. Reference documentation
Internal Reference Documentation
 DG E&P Managing HSE in contracts Practice (030 PR 03461 MN UP)
 DG E&P HSE Bridging Document (031 PR 03464 MN UP)
 DG E&P Lifting and Hoisting Operations Practice (026 PR 03467 MN UP)
 Temporary Shut-down of Safety Protection Systems (00-00470PR)
 Use of temporary electrical installations (00-00471PR)
 Permit to Work Practice (North American Operations) NAO-HSEOI-PRA-05-02
 Permit to Work (Malaysia) TML-HSE-GEN-PR-L-0023
 Work Permit (Norway) POP-PRO-TEN-011
 Permit to Work Program (Marcellus) HSSEOI-PRG-05-03-01
 Safe Work Permits – Edson Gas Plant OP-1-28
 Other Permit to Work related operational documents
External Reference Documentation
 OGP - Guidelines of Permit to Work (P.T.W.) Systems. Report No 6.29/189 January 1993
 Guidance on Permit-to-Work Systems. UK Health and Safety Executive, 2005
 The safe isolation of plant and equipment. UK Health and Safety Executive, 2006
 OGP – Diving Recommended Practice. Report No 411 June 2008
Appendix II. Cold Permit to Work

See Word attached
Appendix III. Hot Work Permit

See Word attached
Appendix IV. Confined Space Entry Certificate

See Word attached
Appendix V. Radiation Works Certificate

See Word attached
© Repsol, S.A., 2017.
22 / 24
Business Regulation
D.G. E&P

Appendix VI. Excavation Certificate

See Word attached
Appendix VII. Isolation Certificate

See Word attached
Appendix VIII. Work at Height Certificate

See Word attached
Appendix IX. Electrical Work Certificate

See Word attached
Appendix X: SIMOPS Form

See Word attached
Appendix XI: PTW Audit Check List

See Word attached
Appendix XII: List of works that the PTW can be issued remotely for contractors in
unmanned installations
1. Crude Truck loading and unloading
2. Water Truck loading and unloading in classified Area
3. Road Maintenance (Only specific to Repsol owned roads/leases)
4. Vegetation Control (Walking and working with chemicals)
5. Trim Inspections (Checking valves and flanges to ensure they are still intact)
6. Hazardous waste removal
7. Meter calibration
Appendix XIII: List of works that a contractor can carry out without PTW in
unmanned installations
1. Water Truck loading and unloading in non-classified Area
2. Domestic waste removal
3. Drinking bottled water delivery
© Repsol, S.A., 2017.
23 / 24
Business Regulation
D.G. E&P

Approval
Validity
This procedure will become valid on the tenth (10th) working day after the date of its approval.
Revoked regulation
None
General and temporary provisions

None
Revision 2.0 approved by:
Hector Américo Gónzalez Gómez

E.D. Technical Development and S&E
Approval: 25/07/2017
© Repsol, S.A., 2017.
24 / 24

Permit-To-Work System - (20-0029PR) - tcm24-174597 REPSOL

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Permit-To-Work System - (20-0029PR) - tcm24-174597 REPSOL

Uploaded by

Copyright:

Available Formats

Business Regulation

D.G. E&P Non-controlled printed copy

Permit To Work (PTW) System

Owner: D. S&E E&P Revision: 2.0

Permit To Work System (PTW)

Owner: D. S&E E&P Revision: 2.0

Permit To Work System (PTW)

Owner: D. S&E E&P Revision: 2.0

Appendix IX. Electrical Work Certificate .......................................................................................................... 23

Permit To Work System (PTW)

Owner: D. S&E E&P Revision: 2.0

1. Definitions and Acronyms

Permit To Work System (PTW)

Owner: D. S&E E&P Revision: 2.0

Permit To Work System (PTW)

Owner: D. S&E E&P Revision: 2.0

2. Permit to Work process

Permit To Work System (PTW)

Owner: D. S&E E&P Revision: 2.0

Permit To Work System (PTW)

Owner: D. S&E E&P Revision: 2.0

2.1. Step 1 – Generate PTW

Permit To Work System (PTW)

Owner: D. S&E E&P Revision: 2.0

2.2. Step 2 –Verify and Authorize

2.3. Step 3 – Perform the Work

Permit To Work System (PTW)

Owner: D. S&E E&P Revision: 2.0

2.4. Step 4 – Manage Revalidation, Suspension, Cancellation and Closure

Permit To Work System (PTW)

Owner: D. S&E E&P Revision: 2.0

2.5. Step 5 – Record

3. Types of PTW and Certificates

Permit To Work System (PTW)

Owner: D. S&E E&P Revision: 2.0

3.1. Cold Work Permit

3.2. Hot Work Permit

Permit To Work System (PTW)

Owner: D. S&E E&P Revision: 2.0

Permit To Work System (PTW)

Owner: D. S&E E&P Revision: 2.0

3.3. Confined Space Entry Certificate

3.4. Radiation Certificate

Permit To Work System (PTW)

Owner: D. S&E E&P Revision: 2.0

3.5. Excavation Certificate

3.6. Isolation Certificate

Permit To Work System (PTW)

Owner: D. S&E E&P Revision: 2.0

 Each element of isolation shall be identified.

3.7. Work at Height Certificate

3.8. Electrical Work Certificate

3.9. Additional Verifications

Permit To Work System (PTW)

Owner: D. S&E E&P Revision: 2.0

3.9.1. Lift Plan

4. Use of PTW in unmanned installation

Permit To Work System (PTW)

Owner: D. S&E E&P Revision: 2.0

5. Use of PTW in simultaneous operations (SIMOPS)

6. Use of PTW in Major Work areas

Permit To Work System (PTW)

Owner: D. S&E E&P Revision: 2.0