Contractor HSE capability assessment and scoring system

Supplement to Report 423 - Scalable version UPDATE October 2020

STEP 1 - "IOGP423 Short"

Collect data from suppliers to identify best available suppliers in the market (to get a "ticket to the dance"/"seat on the tab
The first questions is conditional, meaning if the Supplier is registered in either Achilles, Avetta, EPIM or ISN - OR- has an re
needed to report.
Based on scope and risk the The Contract Management Team can decide if and how much further verification is needed us

STEP 2 - "IOGP423 Inquire & Assess"

Based on scope, risk and if data is available in Industry or not, decide on initial desktop- or site review.
Ask Supplier to deliver data in selected number of questions from the full IOGP423 questionaire (suggested pre-selection i
The questions are to a large extend aligned with the UK Oil & Gas (UKOG) and EPIM/JQS selected questions.
The simplified languages comes from UKOG and a cross reference to the EMPIM/JQS questionaire will be added later

STEP 3 - "IOGP423 Full"

Based on scope, risk and if data is already provided/verified by trusted body, go out and verify the information received.
Select the questions to verify based on scope and Contract risk (trust the "Red' and challenge the "Greens").
Add questions from the Go deeper list (to be included in the IOGP423 questionaire in a future update) and when needed in

ADDITIONAL QUESTIONS - Additional questions related to Health, Safety, Environment, Social Responsibility, Competen
In collaborations with IOGP member companies and Industry partners additional questions have been collected for when a
It's IOGP ambition to keep the list of additional questions up to date and ensure industry alignment to lower audit burdon
Company name: Date: Location: PROPOSAL Use:

A/B/
Fill in blank fields only. Tick off A, B, C, or D as appropriate.
C/D

1.1 Commitment and g) 1) Provide evidence to show that the HSE-MS is in place across the Please provide proof of a documented Management System (Service A = We have more in place/available then listed in below
accountability to HSE organization, with priorities established, authorities and Provider system registration number or Certificate number) B = Available:
aspects accountabilities assigned, and resources allocated. (E1.1) System data to be assessed and verified when needed AND/OR - Registration with Achilles, Avetta, ISN or EPIM
Latest audit report to be verfified when needed. - ISO45001 or OSHA18001 or VCA*/SCC*or VCA**/SCC** or VCA Petro or MASE
(France) or STOW (T&T) certificate is in place
C = Not all from what is listed is in place/available
D = We have nothing in place/nothing available on this topic

2.2 HSE Objectives a) Does your company have HSE objectives which include measurable
success criteria based on continuous improvement; maintaining
standards; or compliance with policy, regulatory or other requirements?
(E2.4)
If the answer is yes, please attach a copy.
Does your company have HSE objectives and an associate plan? A = We have more in place/available then listed in below
Explain how they are developed, reviewed and implemented. If yes, B = Available:
please provide a copy. (and/or provide details, context, evidence) - HSE Policy
(OGUK 3.1) - HSE Objectives
- HSE Improvement plans
C = Not all from what is listed is in place/available
D = We have nothing in place/nothing available on this topic

3.3 Competence a) Does your organization have a competence assurance process in Describe the scope and content of your competency validation and A = We have more in place/available then listed in below
assurance place? If yes, please describe the scope and content of your assurance process including ongoing verification (UKOG.3.3a) B = Available:
competence assurance process. (E3.3) - HSE training plans/programs/matrix and/or Job descriptions and competence
requirements are available
- HSE introduction program for new-employees & Competence assurance
process or system is in place
C = Not all from what is listed is in place/available
D = We have nothing in place/nothing available on this topic

4.1 Stakeholders and b1) What processes does your company have to assess, manage and Describe your process to assess, manage and proactively engage with A = We have more in place/available then listed in below
customers engage with customers and other stakeholders regarding life cycle risks your company's interested parties or stakeholders (UKOG.4.1a) B = Available:
and opportunities associated with the company’s products, assets and - Stakeholders overview/mapping is available
activities? (E4.2) - Communication process (internal and external stakeholders) and Engagement
plan is available
- Grievance register and Compliance register is kept up to date
C = Not all from what is listed is in place/available
D = We have nothing in place/nothing available on this topic
5.1 Risk assessment and a) 1) What processes and methods does your company have in place to Describe your HSE risk management process. (UKOG.5.1a) A = We have more in place/available then listed in below
control manage risks to an acceptable level for the scope of your activities? B = Available:
(E5.1) - A Procedure how we manage Risks is available
- HSSE Risks are registered and include mitigating actions
C = Not all from what is listed is in place/available
D = We have nothing in place/nothing available on this topic

6.1 Asset design and e1) Briefly describe the processes in place to maintain, replace, test, Describe the processes in place to operate, maintain, replace, test, A = We have more in place/available then listed in below
integrity inspect, calibrate, certify and verify performance of facilities and inspect, calibrate, certify and verify performance of facilities and B = Available:
equipment? (E6.5) equipment (UKOG.6.1c) - An equipment overview/register with maintenance status is kept up to date
- An inspection and test plan is available
- Equipment Manufacturer manuals and recommendations are followed
C = Not all from what is listed is in place/available
D = We have nothing in place/nothing available on this topic

7.2 Contingency, a) 1) What arrangements does your company have for: What arrangements does your company have for: • Contingency A = We have more in place/available then listed in below
emergency, crisis and • Contingency planning • Emergency response • Crisis management • Continuity B = Available:
continuity management • emergency management (OGUK.11.1a) - An Emergency response plan or training plan is available
• crisis - Risk scenarios covering both business and community element are present
• continuity management planning? (E7.5) - Critical suppliers are identified as part of business continuity plan
C = Not all from what is listed is in place/available
D = We have nothing in place/nothing available on this topic
8.1 Execution and a) 1) What processes does your company use to prepare for activities How does your company ensure consistent application of processes to A = We have more in place/available then listed in below
control of activities and ensure operational readiness and integrity of systems before confirm work is executed in accordance with plans? (UKOG.9.1a) B = Available:
commencing work? (E8.1) - Organisational charts and job descriptions are available
- Roles and responsibilities are defined
- Examples of tool box talks, safe job analysis, permits to work are available
- Management of change process is defined
- A Stop Work policy is present
C = Not all from what is listed is in place/available
D = We have nothing in place/nothing available on this topic

9.2 Incidents, events c) Please provide the following Company work-related activities Please provide the following Company work-related activities
and non-conformities statistics for each year for the last five years, including work performed statistics for each year for the last five years, including work
by Contractor personnel: performed by Contractor personnel:
9.2 Incidents, events a. Number of fatalities
and non-conformities

9.2 Incidents, events b. Number of lost time injuries

and non-conformities

9.2 Incidents, events c. Number of Resticed Workday Casess

and non-conformities

9.2 Incidents, events d. Number of Medical Treatment Cases

and non-conformities

9.2 Incidents, events e. Number of First Aid Cases

and non-conformities

9.2 Incidents, events f. Number of Near Miss Incidents

and non-conformities

9.2 Incidents, events g. Fatal Accident Rate (per 100 million hours worked)
and non-conformities

9.2 Incidents, events h. Lost Time Injury Frequency (per million hours worked)
and non-conformities

9.2 Incidents, events i. Total Recordable Incident Rate (per million hours worked).
and non-conformities

9.2 Incidents, events j. Total number of exposure hours

and non-conformities

10.1 Assurance process, a) 1) Briefly describe your company’s assurance process to evaluate
including audits conformity with expectations; organizational capability; effectiveness
of the HSE-MS in meeting objectives, stakeholder and business needs;
and also identify areas for improvement? (E10.1)
a) Describe your management system assurance process and how it is
implemented? (UKOG.13.1a)
A = We have more in place/available then listed in below
B = Available:
- Assurance process and plans are in place
- Audit are executed according to plan
- Findings are managed and close-out is reported regular
C = Not all from what is listed is in place/available
D = We have nothing in place/nothing available on this topic