Drillsafe 09-10 Stena Green Performance Stds

8/12/2019 Drillsafe 09-10 Stena Green Performance Stds

http://slidepdf.com/reader/full/drillsafe-09-10-stena-green-performance-stds 1/24

Effective management of

safety critical equipment

(SCE) – Practical Lessons



Agenda

• Solid foundation, what you don’t know can hurtyou

• Practical analysis, rig (and risk) based assessment

• Performance standards, not standardperformance, specific measureable and supportedby the Safety Management System (SMS)

• Codes and standards, they are there for a reason

• Continuous improvement.



But First – A Quote

“When anyone asks me how I can best describe myexperience of nearly 40 years at sea, I merely say

uneventful.

Of course there have been winter gales and storms and fog

and the like, but in all my experience, I have never been inan accident of any sort worth speaking about. I have seen

but one vessel in distress in all my years at sea. I never saw

a wreck and have never been wrecked, nor was I ever in any predicament that threatened to end in disaster of any sort”

Stena Clyde OIM some time before the engine room fire?



No…Captain of the Titanic, E. J. Smith, a few years before theTitanic sank.

One of our greatest risks is complacency!!

Despite having what we thought was a robust safetycase (after all, we’d had one for years), the lives of 100people were put at risk. As a direct result of the engine

room fire, we took a different approach to assessingsafety critical equipment adequacy which resulted insignificant improvements in our understanding of thisequipment and our management system arrangements.



Solid Foundation

• Safety case facilities description focused on the

wrong type of detailed information

• Lack of in depth understanding of SCE and their role

in preventing and controlling major accident events• Lack of understanding regarding systems / process

safety

• Detailed review and documentation of each SCE.Focus on operability, inter- dependency and

potential failure mechanisms / limitations



Practical SCE Analysis

• Safety case emergency systems survivability

analysis (ESSA) high levels with no detailed

understanding of system boundaries and

function

• Rig crew unfamiliar with a number of the SCE

• Performance standards not linked to any

analysis – off the shelf



SCE Analysis Approach

Practical outputs:

•What isimportant?

•What does it have

to do?•What do we needto it ensurereliability

•Monitoring-routine testing

• Auditing-

Inspection

Rig Drawings, Safety

Case, Workshops, SCE

Performance Standards

Safety Case MAEs,

Other System Failures

Vulnerability, Failure to

Safety, Redundancy

Describe SCE

Function and

Boundaries

Identify Potential

Failure Modes

Identify Causes

Assess Failure

Effects

Determine

Criticality

F un c t i on al P er f or m an c e S t an

d ar d s

M ai n t en an c e ,I n s p e c t i on an d T e s t i n gA

s s ur an c eT a s k s



SCE Analysis – Example System Block

Diagram (Firewater)

Engine Cooling Water /

Seawater Tank X-over

Vavles

Generator Cooling Pump

No. 2

Firewater Tank

Level Control and Alarms

General Service Pump


Water from

Ballast Water

or Generator

Cooling Water

PumpsWater return

from Main

Generators

Sea Chest

Ring Main

Emergency Fire Pump

Fire Pump

Acc omm odation

Sprinkler System

Fire Hose Stations

Fire Hydrants

Forward Lifeboat Muster

Area Del uge Sy stem

Drill Floor Deluge System

Anc hor Win ch Delug e

System

Helideck Foam Cannons

Helifuel Foam System

Aft Lif eboat Mus ter A rea

Deluge System



SCE Analysis – Example System Layout

Diagram (Firewater)



SCE Analysis – Outputs

• Significantly improved understanding of SCE

by the rig crew

• Robust documentation of SCE for other crew

members / new staff

• Useful performance standards – Rig crew can

make informed decisions as to the

effectiveness of the SCE

• Monitoring- functionality testing of all systems

– and yes there were some surprises here



Performance StandardsBefore:

• Individual PS incomplete (not all critical equipmentincluded), non specific, criteria not measurable, no

linkage with the SMS

After:

• Covered all critical components, very specific and

measurable criteria, clear assurance tasks that can be

linked to the SMS

• Increased knowledge of inter-dependent systems• Effect of a Major Accident Event on the SCE

survivability and function



Performance Standards - Before



Performance Standards - AfterPERFORMANCE STANDARD: SCE-09 Performance Objective: To provide means of p rotection

for fire-fighting (water, foam and CO2) in all r elevant

areas on the rig in sufficient quantities. ACTIVE FIRE PROTECTION

SYSTEM OVERVIEW

Acti ve Fi re Protect ion (SCE-09) on the Stena Cl yde i nvolv es i nclud es t he fir ewater system, foam system and CO2 fire

protection system. The following block diagrams provide a visual overview of the Active Fire Protection systems.

Engine Cooling Water /

Seawater Tank X-overVavles

Generator Cooling Pump

No. 2

Firewater Tank

Level Control and Alarms



Water from

Ballast Water

or Generator

Cooling WaterPumps

Water return

from MainGenerators

Sea Chest

Ring Main

Emergency Fire Pump

Fire Pump

Accom modat ion

Sprinkler System

Fire Hose Stations

Fire Hydrants

Forward Lifeboat Muster

Area Delu ge System

Drill Floor Deluge System

Ancho r Winc h DelugeSystem

Helideck Foam Cannons

Helifuel Foam System

Aft L ifeboat Muster Area

Deluge System

Release Mechanism

CO2 Bottles

Port Propulsion Room

Starboard Propulsion

Paint Locker

Control Room

Engine Room / Auxiliary

Machinery Room,

Mechanics Store and

Separator Room

Emergency Generator

House

Emergency Switchboard

Room

FUNCTIONALITY – FIREWATER SYSTEM

Performance Criteria Basis Performance Verific ation - Assurance Tasks

FUNCTION 1: To provide firewater storage and supply for main and emergency fire pumps in sufficient quantities.

1. The firewater tank shall be maintained at

minimum 2/3 full.

Design Basis Test generator cooling pump # 2 cross over valves to

supply the emergency fire water pump directly. Confirm

actuation results in water flow from appropriate pumps

(Tag Proc. ME224-01)

Function test level control alarm for firewater tank (Tag

Proc. ME224-01)

2. The generator cooling pump #2 can be

switched over manually to provide water

directly to the suction of the emergency

firewater pump.

Design Basis Test operation of air conditioning cooling water pump

automatic cross over valves to supply the emergency fire

water pump directly. Confirm actuation results in water flow

from appropriate pumps (Tag Proc. ME224-01)

Test generator cooling pump # 2 cross over valves to

supply the emergency fire water pump directly. Confirm

actuation results in water flow from appropriate pumps

(Tag Proc. ME224-01)

FUNCTION 2: To supply firewater at the required pressure and flow rates for end users.

1. General service pumps maintain ring main

pressure at 7 bar and can deliver water at a

rate of 100 tonnes per hour @ 64m head.

Fall in ring main pressure alarms in Control

Room between 4.5 – 4.8 bar.

Design Basis Test ring main pressure sensor and alarm at the Control

Room (Tag Proc. ME813-09)

2. The general service pump provides firewater

to ring main at a rate of 100 tonnes per hour

@ 64m head. It can deliver at least one jet

simultaneously from each of any two fire

hydrants, hoses and 19 mm nozzles while

maintaining a minimum pressure of 3.5 bar

at any hydrant.

Design Basis

DNV Rules

Verify general supply pump pressure at hydrant during

function test. Confirm via pressure gauge on pump

discharge (Tag Proc. ME813-09)

3. The emergency fire pump provides firewater

to the ring main at a rate of 130 tonnes per

hour @ 120m head. It can deliver at least

one jet simultaneously from each of any two

fire hydrants, hoses and 19 mm nozzles

while maintaining a minimum pressure of 3.5

bar at any hydrant.

Design Basis Verify fire pump pressure at hydrant during function test.

Confirm via pressure gauge on pump discharge (Tag Proc.

ME813-09)

4. The emergency fire pump provides

automatic, remote and manual start ability to

ensure fire water is supplied to the rig main

for firewater users

Design Basis Function Test emergency fire pump for local start, remote

start and automatic start on ring main low pressure (Tag

Proc. ME224-01)

5. The fire pump provides firewater to the ring

main at a rate of 100 tonnes per hour @ 64m

head. It can deliver at least one jet

simultaneously from each of any two fire

hydrants, hoses and 19 mm nozzles while

maintaining a minimum pressure of 3.5 bar

at any hydrant.

Design Basis Verify fire pump pressure at hydrant during function test.

Confirm via pressure gauge on pump discharge (Tag Proc.

ME813-09)



Performance Standard VerificationBefore:

• Focused on class requirements, no proper linkagewith the Safety Case and the role of critical

equipment in managing major hazards

After:

• Third party verification activities focused around theimproved performance standards

• Much higher level of rigour and confidence in the

scheme• Three tiers: Review, Visual Examination, Function

Test, allows verification party to focus on areas

where deficiencies identified



Performance Standard Verification -

AfterTit le ACTIVE FIRE PROTECTION Reference SCE-09

Extent All components compr isi ng the system Revision 1

TaskRef.

Task Details Frequency PerformanceCriteria Ref.

PSCompliance

Notes

Type details of each task to be done in a separate cell months # Yes No

1 VISUAL EXAMINATION

1.1 Visual external examination of General Service Pumps 12

1.2 Visual external examination of General Service Pumps 60

1.3 Visual external examination of Emergency Fire water pump 12

1.4 Visual internal examination of Emergency Fire Water Pump 60

1.5 Visual external examination of deluge pump 12

1.6 Visual internal examination of deluge pump 60

1.7 Confirm pressure is maintained in ring main under normal conditions 12

1.8 Confirm GS pumps status is indicated in Control Room 12

1.9 Confirm emergency fire pump status is indicated in Control Room 12

1.10 Confirm deluge pump status is indicated in Control Room 12

1.12 Verify level in 3% AFFF Foam tank to ensure availability 12

1.13 Verify location and visually inspect hydrant equipment, foam eductors andextinguishers against Safety Plan

12

1.14 Visual examination of CO2 Room and ensure it is located outside protectedarea

12

1.15 Visual examination of CO2 bottles and release stations (confirm no debrisor paint impairing release mechanism on bottles)

12



Performance Standard Verification -

After

2 FUNCTION TEST

2.1 Confirm GS pumps, emergency fire pump and deluge pump can be startedlocally / remotely on main and emergency power as appropriate

12

2.2 Confirm firewater tank low level alarms in Control Room 12

2.3 Confirm emergency fire pump starts upon loss of ring main pressure 12

2.4 Confirm isolation valves on ring main are tested and operational 12

2.5 Test helideck foam monitors and ensure sufficient pressure and flowcapacity of foam

12

2.6 Test concentration AFFF and water in foam monitors 12

2.7 Test deluge systems for adequate initiation and coverage, includingcondition of nozzles.

12

2.8 Test well test area monitors to ensure sufficient pressure and flow capacityof fire water

12

2.9 Test hydrant equipment while under pressure 12

2.10 Function test of release station for audible / visual alarms, HVAC shutdownin appropriate area for CO2 system

12

3 REVIEW

3.1 Review PM records to ensure that maintenance levels are acceptable. 12

3.2 Review relief valve certificates for ring main 12

3.3 Review portable and trolley mounted extinguisher service records 12

3.4 Review service reports for CO2 system 12

3.5 Review pressure test reports for CO2 system 12



Codes and Standards

• Have evolved to take account of learning fromhistory, including past events

• With older rigs, we can often make a risk

based argument not to do things• Don’t loose sight of inherent safety

• Work to making things simple/ less

complicated.

• Work to the new codes & standards/ best

practices



Other Improvements Implemented

• Emergency Fire pump – starts automatically when fire main

pressure drops – can also be started manually. Previously

several steps had to be taken to provide fire main pressure

(see previous slide)• Emergency Ballast pumps installed – This allows the rig to

recover from an angle of 15⁰ by the head

• Emergency Anchor Release – Remote release fitted to

Temporary Refuge EEC, controlled release during black out• Gas detection system up graded – Controls installed in

Temporary Refuge EEC



Other Improvements Implemented

Annual major hazard review:

• Formal review focused on major hazard management aspects

• Covers safety management systems and equipment

•Some specific areas for focus

– Change, including cumulative effects

– Emergency preparedness

– Management of safety critical elements

– Operational limits and boundaries

– Accident and incident trends

• To help – in the process of developing formal management

system performance standards



SMS Performance

Standards

Lead and lagindicators

Central Activities Leadership

Behaviour

Transferable Activities Competency and Training

Supervision

Communication

Work Activities Hazard Identification and Risk Assessment

Management of Third Parties

Management of Change

Permit to Work (and Isolation)

Maintenance

Marine Operations

Drilling Operations

Emergency Response

Improvement Activities Performance Monitoring and Improvement

Safety Critical Activity Performance Standard Layout

Performance Standard: Reference # Safety Critical Activity Name

Performance Objective: Describes the overall hazard management role of the safety critical element.

May be broken down into sub-elements depending upon complexity

Key Procedure and Tasks: Describes the components and limits of the safety critical activity. Includes

what key procedures and tasks are included, and where the interfaces or beginning and end points exist

Desired Safety Outcomes: Key

safety outcomes that demonstrate

the activity is being conducted /

implemented effectively

Assurance: Activities or tasks undertaken to ensure that the

safety critical activity delvers the desired safety outcomes

Leading Indicator: A measures of

process or inputs essential to

deliver the desired safety outcome

Lagging Indicator: A measure of

when a desired safety outcome has

not been achieved.

Criteria: The

criteria used to

measure whether

the desired safety

outcome is being

achieved

satisfactorily or not

Monitoring /

Reporting: How the

indicator is

monitored and

reported

Frequency: How

often the indicator is

monitored and

reported

G Y R

Drillsafe 09-10 Stena Green Performance Stds

Documents

Transcript of Drillsafe 09-10 Stena Green Performance Stds