Professional Documents
Culture Documents
Q&a Refaie Iog
Q&a Refaie Iog
ALARP involves weighing risk against the trouble, time and money needed to control it.
Thus, ALARP describes the level to which we expect to see workplace risks controlled.
It is a key part of the general duties of the Health and Safety at Work Act 1974
ALARP is about weighing the risk against the sacrifice needed to further reduce it
To spend £1m to prevent five staff suffering bruised knees is obviously grossly
disproportionate
But
To spend £1m to prevent a major explosion capable of killing 150 people is obviously
proportionate
3)Many major oil / gas incidents have occurred in recent years, eg Piper Alpha, Texas
City, Mumbai High.
Primary Method:
Secondary method:
Used when the primary method is unavailable, e.g. lifeboat launched from the rig.
Tertiary Method:
Heavily reliant on the individuals own effort and used as a last resort when all other
methods are unavailable, e.g. putting on lifejackets and survival suits and jumping into
the sea.
4)Give a brief summary of the emergency command structure for offshore installations
The emergency command structure for offshore installations.
They will be assisted by two on-scene commanders, one from drilling and one from
process, a permit controller, a radio operator and an Offshore Installation Supervisor
OIS.
Outline why it might be important to plan the route of a road tanker carrying dangerous
goods
There are two basic reasons why it might be important to plan the route of a road tanker
carrying dangerous goods.
Not all roads are suitable for tankers - narrow roads, weak bridges.
The security threat (terrorism, theft) to the valuable load being carried and its possible
use as a terrorist weapon.
Identify three marine hazards associated with all types of Floating Platform Storage
Offloading Units -FPSO's
Marine hazards associated with all types of Floating Platform Storage Offloading Units
-FPSO's
Crew transfer
Weather
Environmental impact
Supply/logistics difficulty
Pirates
Terrorists
How it happened and what course of actions were taken to prevent recurrence, Lessons
learned.
Piper Alpha Facts:
Fire Explosion knocked out fire proof - not Blast proof - walls
Lifeboats all in one location and could not be reached from accommodation block
Other platforms did not shutdown instead continued pumping hydrocarbons to Piper
Alpha, increasing the fire
Piper Alpha Failures
Piper Alpha Failures:
Platform layout
Lack of training
Communications/Shift Handover
Buncefield Incident:
Causes:
Buncefield Incident Causes:
Fuel leaked out of the vents at the top of the storage tank into the bund
Ignition leading to the vapour cloud explosion took place at a pump house
ALARP involves weighing risk against the trouble, time and money needed to control it.
Thus, ALARP describes the level to which we expect to see workplace risks controlled.
It is a key part of the general duties of the Health and Safety at Work Act 1974
ALARP is about weighing the risk against the sacrifice needed to further reduce it
To spend £1m to prevent five staff suffering bruised knees is obviously grossly
disproportionate
But
To spend £1m to prevent a major explosion capable of killing 150 people is obviously
proportionate
Q9) Many major oil / gas incidents have occurred in recent years, eg Piper Alpha, Texas
City, Mumbai High.
Insurance Companies
Manufactures
Suppliers
Pool Fires
Cold Burns
Q10) List the Hazards associated with LPG - Liquid Petroleum Gas (Propane/Butane)
Hazards associated with LPG - Liquid Petroleum Gas (Propane/Butane)
Highly Flammable
Bleve's
Pool Fires
What are the main dangers associated with LPG
The dangers of LPG lie with its flammability and explosive properties, and the fact that it
is stored under great pressure, and hence very low temperature, to retain its liquid state.
On release, LPG reverts to its gaseous state, with rapid and considerable increase in
volume.
Q11) An employee was seriously injured in an accident at work within an oil and gas
installation.
Identify the documented information that might be used by the investigating team to
determine the causes of this accident
Documented information that might be used by the investigating team to determine the
causes of an accident;
PTW
Photographs
CCTV Footage
Witness Statements
Method Statements
Maintenance records
Disciplinary records
SOP's
At the flash point the application of a naked flame gives a momentary flash rather than
sustained combustion, for which the temperature is too low
Flashpoint
Flashpoint is the lowest temperature at which sufficient vapour is given off to "Flash" -
that is, ignite momentarily, and not carry on burning, when a source of ignition is applied
to the vapour.
Q14) Give the meaning of the following term
Substances which, when hot, catch fire in contact with air at ambient temperature
without any energy input
Q15) Identify the information that might be included on a checklist for an investigation
following an accident
1. Obtain basic facts:
Names of injured
Witnesses
Place
Date and time
Persons in area
Ascertain substances / chemicals involved
Injuries
Damage to equipment
2. Establish circumstances:
What happened?
Causes
Events leading to incident
Competence
Supervision
Behavior
What precautions were actually taken? Compare them with those which should
have been taken.
What training was actually given? Compare it with training which should have
been given.
Firefighting
First aid
Containment and spillage
Toxicity to Divers
Outline FOUR control measures to reduce the risk to workers exposed to the sludge.
FOUR control measures to reduce the risk to workers exposed to LSA sludge;
Safety procedures
Training
Q17) Identify TWO other pieces of workplace equipment where the sludge may be
found.
TWO other pieces of workplace equipment where the sludge may be found;
Shale Shakers
Mud Pits
Q18) An oil and gas industry employer is reviewing tendering contracts for an offshore
platform modification.
Identify the factors that should be considered when assessing the health and safety
competence of a contractor.
Factors that should be considered when assessing the health and safety competence of
a contractor:
HSE Policy's
Certifications - Accreditations
Commitment to HSE from senior management and how this is demonstrated - Safety
Management system and implementation - Safety tools used
An unplanned event with potential for multiple fatalities and or serious damage, possibly
beyond the asset itself.
Typically these are hazardous releases, but also include major structural failure or loss
of stability that could put the whole asset at risk.
-----------------------------------------------------------------------------
1. A fire, explosion or other release of a dangerous substance involving death or serious
personal injury to persons on the installation or engaged in an activity on or in
connection with it
2. Any event involving major damage to the structure of the installation or plant affixed
thereto or any loss in the stability of the installation;
3. The failure of life support systems for diving operations in connection with the
installation, the detachment of a diving bell used for such operations or the trapping of a
diver in a diving bell or other subsea chamber used for such operations
4. Any event arising from a work activity involving death or serious personal injury to five
or more persons on the installation or engaged in an activity in connection with it
Q19) Describe the Key Principles of Safe Shift Handover
The Key Principles of Safe Shift Handover are:
A formal procedure
BLEVE's
"BLEVE" is an acronym for "Boiling Liquid Evaporating Vapour Explosion"
CVCE's
CVCE - Confined Vapour Cloud Explosion
UVCE's
Unconfined Vapour Cloud Explosion
Maintenance completed
Any events that happened during the out-going shift, Emergencies, incidents, accidents,
breakdowns, plant overrides.
Situations where safety systems have been overridden e.g. fire deluge system switched
to manual operation
Hot Work Permits are generally applied to any type of work, which involves actual or
potential sources of ignition, and work for which there may be a risk of a fire and/or
explosion, or which involves the emission of toxic fumes from the application of heat.
Cold work
Cold work shall include but not be limited to the following: scaffolding, cleaning, over
side working, painting
Isolation
Diving
Diving certificate can be used to control the diving activity itself and to ensure that there
are no other activities taking place nearby which create unnecessary additional risks
e.g. over-side work, live firewater intake pumps.
Q25) Identify TWO ways in which vapour clouds can be generated
Sudden depressurization
Rupture of vessel
Loss of containment
Vapour cloud explosions may arise from vaporization of a release of liquefied gas from
a ruptured vessel or pipeline
Overpressure
Q27) pump containing flammable corrosive slurry has been stopped for maintenance.
An operator will prepare the pump for maintenance using a nitrogen supply, drain
header and collection vessel. Using this information;
Outline EIGHT risks to the operator when preparing the pump for maintenance.
Asphyxiation due to displacement of 02
Fire
Explosion
Irritant/Corrosive substance
Identify risks with water AND give a practical example in EACH case
When stored under pressure as in Fire lines and steam water lines
May contain bacteria if not circulated e.g. dead end pipe legs
Q29) Outline operational control measures that could minimize the risk of plant damage
or injury during start-up or shutdown of a process
Shutdown:
Stopped
Isolated
Drained down
Blanked
Empty & drain hydrocarbon facilities, with all liquids, gases and residues removed
leaving the plant safe to work o
Eliminate or control ignition sources
Suitable supervision of the operation
Certification of items that have been maintained or replaced
Start-up:
Establish all isolations reconnected, all blanks removed
Ensure all safety systems are operational
Ensure all systems are tested before start-up
Complete PTW
Emergency plan - in place
Q30) A distillation column requires protection from fire through passive and active fire
protection.
(a) Outline how a fixed water deluge system could provide fire protection (2)
Q31)) Outline the types of failure mode of storage tanks that may lead to loss of
containment from hydrocarbon
Types of failure mode of storage tanks that may lead to loss of containment from
hydrocarbon:
Overfilling
Corrosion
Construction fault
Design Fault
Bund Failure
Foundations Overload
Ensure the maximum quantity of product can be contained within the bund
Q34) During an inspection an external fuel storage tank is found without a bund.
Outline the features which should be included in the design of a tank bund
Features which should be included in the design of a tank bund:
-Ensure the maximum quantity of product can be contained within the bund at least
110%
-Impermeable base
-Lightening protection
Q35) Large quantities of hydrocarbons are contained in a process plant, with the risk of
gas release and explosions
Identify process safety control measures that would minimise the risk of an explosion
Process safety control measures that would minimise the risk of an explosion:
Gas detectors
Zoning
Fire Detection Systems — Heat detectors; Flame detectors; Smoke detectors; Duct
Sampling; Acoustic detectors
Zone 2 - Area where an explosive atmosphere is not likely to occur in normal operations
— if it occurs will only exist for a short time
Q38) Outline the actions that should be taken by a person upon discovering a fire
Actions that should be taken by a person upon discovering a fire:
Call Alarm
Manually
Automatically
Visually
Verbally
Q40) Identify suitable control measures to minimise the risk to employees using
mechanical land transport
-Suitable working hours - rest periods
-Training of drivers
Vaporisation - Cold
Storage - Leaks
Fire / Explosion
Q43) Outline the risks associated with Liquid Petroleum gas LPG.
Risks associated with Liquid Petroleum gas LPG.
Asphyxiation
Fire / Explosion
Q44) Outline the following failure modes that may lead to loss of hydrocarbon
containment from storage tanks/vessels or pipelines
-Creep
Is slow movement under stress, made more severe with heat for long periods,
especially with increases in temperature approaching melting
-Stress corrosion cracking;
Occurs under tensile stress and is worse in a corrosive environment at elevated
temperatures.
-Thermal shock;
Cracking associated with rapid temperature change with different parts of an object
expanding by different amounts where the stress overcomes the strength of the
materials.
-Brittle fracture.
Rapid run of cracks through a stressed material with plastic deformation before failure
caused by such things as repetition of inappropriate heating or pressurizing rates
Q44) A large oil company is proposing to build a new oil and gas installation in the North
Sea. The Process Safety Management Team is analysing past incidents and database
records from the Oil and Gas Industry.
Excluding active and passive fire protection systems, outline physical design features of
the platform that would minimise risk to operating personnel in the event of a major
incident
-Physical design features of an offshore platform that would minimise risk to operating
personnel in the event of a major incident:
-Plant separation
-Compartmentalization
-Means of escape
Flow rate,
Overfilling
Liquid instability
Splash Filling
Agitation
Filters
Pressure Velocity
Q46) An operator is draining a flammable liquid from process pipework to a metal
container. The supervisor is concerned about the possibility of an electrostatic charge
forming and stops this operation until a risk assessment is undertaken. During this work
activity:
Antistatic additives
Avoid splash filling by submerging the fill pipe bellow the liquid level in the container
Facilities within the TR for monitoring and control of the incident and organizing
evacuation
54) Petroleum storage tank fires have been reduced substantially by using floating
roofs, but a fire risk may still exist.
Lightning strikes
Rainwater or snow load sinks the roof and exposes fuel vapours
55) Identify TWO examples of fire protection systems used on floating roof tanks
55) WO examples of fire protection systems used on floating roof tanks:
Hose lines
56) process modules in an oil and gas installation often contain computer rooms that
require fire protection
Identify TWO examples of fire extinguishing media that could be used in a computer
room.
56) TWO examples of fire extinguishing media that could be used in a computer room:
Dry Chemica
57) During an inspection an external fuel storage tank is found without a bund wall:
Oil contamination of ground would be highly toxic to plant and animal life and could
enter rivers and waterways depriving life of oxygen
58) Outline the contents of a typical permit-to-work
58) Date & Time
Work location
Duration of permit
Potential Hazards
Firefighting equipment has been checked and placed on location together with trained
personnel.
Additional PPE appropriate to task to be used in addition to the daily mandatory PPE as
part of the special precautions to be indicated on the hot work permit.
60) A distillation column requires protection from fire exposure through active or passive
fire protection.
Fire doors
Dry Powder
Outline the operational control measures that could minimise the risk of an incident
before filling equipment in preparation for start-up
65) control system - process controls intelligent alarms
Zone controls
Management of overrides
66) dentify THREE properties of Hydrogen Sulphide - H2S
66) THREE properties of Hydrogen Sulphide - H2S
Highly toxic
Flammable gas
Pungent, smells like rotten eggs but rapidly destroys the sense of smell
67) On an oil processing plant outline how activation of an H2S detection system, linked
to a control room, could prevent a fire.
67) H2s is a flammable gas, detectors can be used to trigger alarms, control room
operators can implement process control measures, emergency procedures, shutdowns
or evacuations, activate fire protection systems, and shut down any sources of ignition
remotely.
This can provide an early warning of a problem and help to ensure people's safety
68) A worker has requested a permit-to-work in order to replace damaged thermal
insulation in an overhead pipe rack that runs between two plants.
SIMOPS
69) A worker has requested a permit-to-work in order to replace damaged thermal
insulation in an overhead pipe rack that runs between two plants
Outline control measures that should be implemented to reduce the risks to the worker
69) Risk assessment/JSA for job
To identify corrective actions that will prevent a recurrence - The main reason for
investigating
71) What are the four steps in the investigation process
71) Step 1: Gather factual information about the event.
Step 2: Analyse that information and draw conclusions about the immediate and root
causes.
A safety specialist
Senior managers
A technical specialist
A worker representative
Offshore investigating teams may also include installation specialists from services such
as drilling, well services, maintenance, process, and deck crews.
73) What are the two categories of immediate cause of accidents/incidents
73) Immediate causes are the unsafe acts and unsafe conditions that gave rise to the
event itself.
These will be the things that occurred at the time and place of the accident.
Evaluation of major accident risks and measures taken (or to be taken) to control those
risks.
Identification of the safety critical elements in place to manage major accident hazards.
Residual energy
Combustion engines
The interruption, disconnection and separation of all the equipment's motive power
sources in such a way that this disconnection and separation is secure by lockable
means.
81) Identify four ignition sources that could arise from maintenance or operations on an
installation.
81) Ignition sources are (select four)
Electrical equipment:
Routinely inspect and test to prevent faults developing that could cause sparks and
overheating.
Hot work:
Welding, burning, etc. - control with a permit-to-work when done in sensitive areas.
Smoking:
Control and limit to restricted areas on site (welfare areas).
Deliberate ignition:
Prevent by good security, perimeter fences (onshore), CCTV and security lighting.
82) How is safe isolation, stoppage, draining down and blanking of systems assured
during a shut-down
82) Safe isolation, stoppage, draining down and blanking of systems during a shut-down
is assured by:
It is vital for the safety of maintenance personnel that services are stopped, isolated,
drained down, blanked etc. and remain in a safe condition for the duration of the work.
This is ensured by the work being carried out under the controls of a permit-to work.
The permit will have a completion section to ensure that all systems are put back into
operable condition before start-up, to protect maintenance and operations personnel
83) Identify the factors to be considered when assessing the health and safety
competence of a contractor.
83) There are many factors that have to be considered when assessing the health and
safety competence of a contractor.
One important factor is the contractor's experience and training, both in the type of oil
and gas process that they will be working on and offshore safety requirements.
Whether the contractor has a health and safety policy in place, supported by the
necessary organisation and arrangements, and the quality and extent of risk
assessments carried out are also significant points to look for.
The contractor's recent health and safety performance (including any accident history)
should be reviewed, as well as establishing whether any enforcement action has been
taken against the contractor.
Evidence should be requested of the availability of suitable, up-to-date method
statements; arrangements to monitor health and safety and carry out site inspections;
qualifications; training records and skills cards carried by workers; and membership of
professional bodies or trade associations.
Proof of the contractor having employer's liability and public liability insurance is an
important factor, and references should be available from previous clients.
Finally, it is important to take into consideration arrangements for the selection and
appraisal of any subcontractors and how liaison with the contractor is going to take
place.
84) What are the conditions necessary for stress corrosion cracking to occur
84) he criteria necessary for stress corrosion cracking to occur are:
A susceptible material
A corrosive environment
The principle of operation is that more than one detector in a set must be triggered and
it is in this sense that it is called a "voting" system.
They can be set to different sensitivities depending on the risk - typically two out of three
87) Describe the difference between active and passive fire protection measures
87) Passive Fire Protection:
Is predominantly thermally insulating design elements that are put and left in place, like
fire barriers, fire resistant coatings and cladding.
Means measures that are brought into play when a fire is detected, in order to actively
tackle/extinguish the fire, e.g. fixed sprinkler installations, hoses and monitors
88) Outline the fire protection that would be used on a floating roof tank
88) For floating roof tanks the main means of fire protection is to use fixed foam
installations which spread foam around the rim seal.
Intended as first line treatment to preserve life and stabilise the injured:
Requiring first-aiders with more advanced skills (such as the use of specialised
equipment or methods).
With remote support from other medical professionals, who will have specific medical
training and be capable of administering drugs, advanced wound treatment, etc
90) Distinguish between primary, secondary and tertiary offshore evacuation methods
90) Offshore evacuation methods are:
Primary Method:
The usual none-emergency method, e.g. ship.
Secondary method:
Used when the primary method is unavailable, e.g. lifeboat launched from the rig.
Tertiary Method:
Heavily reliant on the individuals own effort and used as a last resort when all other
methods are unavailable, e.g. putting on lifejackets and survival suits and jumping into
the sea.
91) Give a brief summary of the emergency command structure for offshore installations
91) The emergency command structure for offshore installations.
They will be assisted by two on-scene commanders, one from drilling and one from
process, a permit controller, a radio operator and an Offshore Installation Supervisor
OIS.
92) Outline why it might be important to plan the route of a road tanker carrying
dangerous goods.
92) There are two basic reasons why it might be important to plan the route of a road
tanker carrying dangerous goods.
Not all roads are suitable for tankers - narrow roads, weak bridges.
The security threat (terrorism, theft) to the valuable load being carried and its possible
use as a terrorist weapon.
94) Identify three marine hazards associated with all types of Floating Platform Storage
Offloading Units -FPSO's
94) Marine hazards associated with all types of Floating Platform Storage Offloading
Units -FPSO's
Crew transfer
Weather
Environmental impact
Supply/logistics difficulty
Pirates
Terrorists