Professional Documents
Culture Documents
A Methodology For Fire Hazard Assessment
A Methodology For Fire Hazard Assessment
Abstract
This paper outlines a methodology for the fire hazard • estimate the consequences of ignited flammable liquid
assessment of offshore platforms. The assessment process is and gas releases
described using a case study. • ensure that arrangements are in place to prevent, control
and mitigate these events
Abbreviations The significant fire hazards are:
• jet, or pool fires from the oil production flowlines;
BD Blowdown • jet, or pool fires from the HP and LP production
BLEVE Boiling Liquid Expanding Vapour Explosion manifolds;
DHSV Down Hole Safety Valve • jet, or pool fire from the HP and LP separators;
ESD Emergency Shutdown • jet, or pool fires from the oil booster pumps;
HP
• jet, or pool fires from the MOL pumps;
High Pressure
• jet fires from the gas injection and gas lift manifolds;
KO Knock Out Drum
• jet, or liquid fires from the test separator;
LER Low Electrical Room • drilling or production blowout at the drilling rig floor
LP Low Pressure or well completions unit;
LQ Living Quarter • Helicopter engine fire during personnel transfer (Not
LV Level Control Valve covered in this study).
MOL Main Oil Line
Riser hazards will form a major fire hazard risk. Potential
MV Master Valve fire hazards arising from risers and options for their
PDQ Production, Drilling and Quarters mitigation are not discussed in this article.
PFD Process Flow Diagram
P&ID Piping and Instrument Diagram
Methodology
PWV Production Wing Valve
General
TEMPSC Totally enclosed motor propelled survival craft The assessment consists of the following steps:
TR Temporary Refuge 1. Fire hazard identification i.e. jet fire, pool fire, etc.,
SBW Stand by Vessel 2. Estimate hydrocarbon inventories based on isolatable
sections (XXVs to XXVs),
XXVS Emerge
3. Define locations and facilities for control and mitigation
using P&IDs, PFDs, Plot plans and other relevant design
details,
Introduction 4. Define characteristic release sizes to be used in the
assessment,
This paper details the result of a case study of fire hazard for 5. Based on the releases described above, define the
a platform comprising living quarters, drilling and process characteristics of jet fires, predict flames’ length and
units (PDQ) which contain significant quantities of oil and decay with time taking into account no-blowdown and
gas. The assessment identifies credible fire hazards associated blowdown conditions,
with production and export operations for the associated 6. Review the effects of jet, pool fire events,
facilities and utilities on the PDQ platform. From the credible 7. Review the fire protection measures in place, based on
fire hazards, specific design fire events can be selected which the above,
define the required performance of the active and passive fire 8. Make recommendations to reduce the risk.
protection systems.
Event Identification
Using a case study, the author demonstrates a systematic fire There are a large number of fire events that could potentially
hazard assessment method and shows how to identify the major occur. These range from small electrical fires to large process
fire hazard areas and management measures for mitigation. fires. The assessment focused on those fire events that could
have a significant effect on the overall risk levels to personnel,
The objectives of this paper are to: either directly or by escalation (i.e. hydrocarbon fires).
• outline a methodology for systematic fire hazard
assessment Accordingly, process and utility systems with an inventory of
• show how all credible fire scenarios can be identified flammable liquids greater than 5m3 and with a flash point below
55°C are included in the assessment. This cut-off is consistent The results are detailed in Table 614.2.
with IP15 [1].
Pool Fires
Process system A pool fire is a burning horizontal pool of vaporising
The process flow diagrams with associated XXVs are shown hydrocarbon, where the fuel has very little momentum.
in figures 614.1 and 614.2. The isolatable process sections However it should be noted that the fuel pool is not necessarily
assessed together with their relevant locations, dimensions, static and can spread or contract with respect to the release rate
volumes, temperatures and pressures are listed in Table 614.1. of the hydrocarbon and its burning rate. A pool fire takes time
The quantities, pressure and temperature of the relevant to develop and cannot be quickly eliminated by isolating the
hydrocarbon inventories are taken from PFDs, P&IDs and fuel supply alone.
relevant equipment data sheets.
The model predicts the duration of the fire and the pool diameter.
Release Scenarios The pool of hydrocarbon will reach an equilibrium diameter;
Four leak sizes (5, 18, 50 & 100 mm) are considered. These this equilibrium is reached when the fuel release rate is equal
sizes are considered to represent all credible releases due to to the burning rate of that particular fuel. Hence the pool will
failure scenarios. no longer spread, due to the fuel undergoing combustion at the
same rate as the fuel is supplied to the pool. The fire duration
Jet fire analysis is taken to be equal to the release duration due to the action of
Each release size (as described in the previous paragraph) open drains removing liquid from the forming oil pool. If the
is analysed on the basis of an immediate ignition. For a gas release occurs into an area with a curb surround to the size of
release, the extent of the flame length is evaluated using the the resulting pool will be physically constrained.
computer program PHAST [7]. Initial flame length is assessed
at the maximum inventory pressure. Flame decays after the start According to pool fire tests carried out [6], the heat flux from a
of the ESD are assessed for 5, 15, 30 and 60 minutes duration pool fire to an engulfed target was up to 160kW/m2. The main
for Blowdown and no-Blowdown cases. trend was that heat fluxes were very low below the hot smoke
layer, increasing to about 160kW/m2 inside the layer.
Oil Releases
Having identified the process inventories it is possible to Most of the potential pool fires will originate from fires
estimate the size and duration of the associated release events. restricted by curbs below vessels and large equipment items
An inventory of less than 5m3 is unlikely to achieve a pool and will have local impinging effects on the equipment and
fire, to cause a BLEVE or provide a fire causing damage to the pipework. However, no directional probability or reduction of
structural system which could lead to escalation. Consequently heat flux due to flame diluted on impact to equipment is taken
this study considers releases from sections with a sizeable into account. The pool fire sizes based on the release rates
inventory (i.e. greater than 5m3). Therefore the following results are detailed in Tables 614.2 and 614.3.
sections which contain oil are not considered:
Location of critical/hazardous equipment
• Section 1 - Production well (DHSV-MV) (for each Equipment and piping containing hydrocarbon gas or liquid
production well) are considered as hazardous items. Using plot plans and
• Section 2 - Production well (MV-PWV) (for each PFDs (Figures 614.1 to 614.7) the locations of the items on
production well) each deck are identified and assessed based on their relevant
• Section 5 - Test manifold inventories and time of decays. Similarly target areas that could
cause escalation when subjected to a jet fire are identified and
Oil release events are only determined for the start of an summarised in Table 614.4.
event, with the duration of a release being estimated based
on the liquid inventory and assuming the process isolation is
successful. Identification of Fire Hazards
Oil release calculations have been determined using Bernoulli’s General
equation [6]. The liquid release rate is assumed to remain It is necessary to determine those fire events that will have
constant until the liquid inventory has depleted; this is a significant effects on the overall risk levels. The major types
simplification and the release rate will decline with the loss of fires are reviewed below.
in pressure over time. Releases have been determined for four
hole-sizes 5, 18, 50 and 100mm. The fire types present on the installation are:
The effect of gas Blowdown which reduces the pressure in • Process events;
isolatable sections, thus reducing the driving force for any oil • Well events, such as blowouts;
release, has not been accounted for in this study. It is recognised • Chemical Fire;
that this will reduce the release rates, but increase the release • Accommodation and electrical fire;
duration.
The platform wellbay area includes provision for production Accommodation and Electrical Fires
as well as gas and water injection, and cuttings re-injection Accommodation fires can arise in the cabins, galley or laundry
wells. This assessment is based on 42 production wells with areas due to smoking in non-smoking areas, equipment
6 gas injection wells. malfunction or unsafe practices. Electrical fires could result
from equipment malfunction or unsafe practices. However, the
A conventional Christmas tree is provided on each well with consequences of these fires are greatly reduced by the small
hydraulically actuated master and wing valves. In addition amounts of fire fuel available. Safeguards are specified in-line
a hydraulically actuated sub-surface down-hole safety valve with common practice.
(DHSV) will be installed to provide isolation of each well.
Sea Surface Fires
On gas injection wells, down-hole annular safety valves will Sea surface fires are only considered feasible following ignition
be provided, which will enable the annulus to be isolated and of a major hydrocarbon release such as failure of a separator,
prevent flow of lift gas, or production fluid via the annulus to a well blowout or failure of the oil export line. In extreme
the topsides. cases these scenarios could result in a sea fire that may exceed
TR survivability times and lead to structural collapse of the
There is a potential for blowouts to occur during development platform.
drilling, production and during workover operations on the
wells. A blow-out scenario is the result of loss of well control Small releases from the separators will be collected via drain
and the loss of containment of well and reservoir fluids. boxes and routed via the drain lines to the Open Drains Caisson.
Major releases however will overload the open drain system
The flow rate from an uncontrolled well blowout and the and be routed overboard either via the deluge overflow lines or
potential size of an ignited release means that escalation to flowing over the edge of the deck. The open drain and deluge
surrounding wellheads is likely, the rig conducting the well overflow systems are designed to prevent the discharge of
entry operation and plant at weather deck level. burning oil.
• heat exchangers inventories have a nominal volume of fire protection may be ineffective or not practical.
0.5m3;
• pump inventories have a nominal volume of 0.5m3; The fire protection is to be provided to achieve protection
• compressor inventories have a nominal volume of of certain structural steel, fire/blast walls, bulkheads and
1m3; equipment in order to:
• filter inventories have a nominal volume of 0.5m3.
• prevent further release of inventory due to failure under
The splits between oil, gas and water for certain vessels have fire conditions of selected hydrocarbon carrying vessels
been estimated based on normal operating conditions. In for a specified period;
particular the separators inventories are taken as oil, gas and • prevent structural damage or failure which could lead to
water in a 1:1:1 by volume ratio. escalation of events or impairment of any safety system
functions for a specified period;
Sections inventories and their locations are summarised in • prevent structural damage or failure, which could lead
Table 614.2. The corresponding fire sizes assessments are to impairment of escape and evacuation, for a specified
listed in Table 614.2. period.
• protect the asset such that production can be restarted
Flames length calculated for isolation and Blowdown cases following a small fire with minimum delay.
are based upon the isolated inventory being depressurised to
below 7 barg within 15 minutes. BD orifice diameters have The results of findings from this Fire Hazard Assessment study
been sized accordingly. summarised in Table 614.4 are utilised to assess PFP design
requirement.
Guidelines SI 1029 [4] suggests that an internal leak rate less For an ignited gas release, the sections taking the longest time
than 1kg/min XXVs is considered acceptable. Similarly for LVs to decay to unstable or no flame (after a successful blowdown)
with designated XXVs functions an internal leak rate of less are gas dehydration, slug catcher, first stage compression, and
than 0.3ml/min per inch of pipe ID is suggested as acceptable. fuel gas dehydration. In all areas after a successful BD the flame
The rates larger than these needs to be justified by a further will decay to no or low momentum flame within 15 minutes.
fire risk assessment.
HP vessels at full pressure if exposed to direct jet fire could
Detection/Protection Systems, Emergency Response & rupture within 12 minutes and result in escalation. Stress
Escape Routes analysis studies carried out for vessel rupture when subjected
to a jet fire suggests that the applied stress is lower than the
Detection System material yield stress during the whole history of the fire i.e. no
Fire and gas detection system will provide automatic rupture for BD cases. This is due to the fact that:
monitoring, alert personnel of potentially hazardous situations,
and allow executive actions to be manually or automatically • vessel is designed with a design stress factor (tensile
initiated in order to minimise the risk of escalation. strength / yield stress) of 1.5 for carbon steel;
• vessel operates with a margin between the design and
Passive Fire Protection the operating pressures;
Passive fire protection is generally applied to platform members
and process equipment with risk of being exposed to a jet fire
which may cause structural failure and where the use of active
References
1. IP15, Model Code of Safe Practice in the Petroleum
Industry, Part 15: Area Classification Code for
Petroleum Installations
2. Oreda-1994
3. API 521Guide for Pressure Relieving and Depressurising
Systems
4. Guidance notes in support of the offshore installations
(emergency pipeline valve) Regulation 1989:SI 1029,
Pub. Dept Energy
5. ANSI B16-104-1976
6. SINTEF, Handbook for Fire Calculation and Fire Risk
Assessment in the Process Industry, 1992
7. PHAST, DNV Software for consequence analyses
Acknowledgements
Any resemblance of the case study in this paper is coincidental
and it does not represent any existing of planned installation.
However, data from actual projects are used to make the case
study relevant to the safety professionals. The Tables were
prepared by Dr R. Atarzadeh and drawings were produced by
Stan Burgess whose contributions are gratefully acknowledged.
The author would like to acknowledge reviewers Guillaume
Sirous Yasseri
KBR Engineering
5 Test manifold Flowlines Cellar Deck 1 length of 6” pipe (5m 0.1 0.1 0.0 60 43
long)
Test Manifold Cellar Deck 8” pipe (30m long) 1.0 0.7 0.3 60 43
TOTAL 1.1 0.8 0.3 0.0
6 Flash gas Flash gas suction drum (V-31110) Weather Deck 1.7m x 3.6m 8.2 8.2 24 42
compression Flash gas compressor (C-31121) Weather Deck 1.0 1.0 24 42
(Train 1)
Flash gas comp. discharge. cooler Weather Deck 0.5 0.5 59 125
(X-31140)
TOTAL 9.7 9.7 0.0 0.0
7 Flash Flash gas suction drum (V-31210) Weather Deck 1.7m x 3.6m 8.2 8.2 24 42
compression Flash gas compressor (C-31221) Weather Deck 1.0 1.0 24 42
(Train 2)
Flash gas comp. discharge. cooler Weather Deck 0.5 0.5 59 125
(X-31240)
TOTAL 9.7 9.7 0.0 0.0
Table 614.1: Section Inventories (continued)
14 PDQ fuel gas Fuel gas KO drum (V-48010) Cellar Deck 2.1m x 5.5m 19.0 19. 57.3 43
Fuel gas heater (EEH-48020) Cellar Deck 0.5 0.5 57.3 43
Fuel gas heater (EEH-48030) Cellar Deck 0.5 0.5 57.3 43
TOTAL 20.0 20.0 0.0 0.0
Temp = 42 Deg.C
100 31.1 - - - 74.1 - - -
Isolation and No 5 0.08 0.07 0.05 0.02 5.2 4.9 4.2 2.8
Blowdown 18 1.01 0.19 - - 16.1 7.7 - -
50 7.78 - - - 40.0 - - -
100 31.1 - - - 74.1 - - -
Page 15 Table 614.2: Gas Release Rates/Flame Lengths (continued)
9600 Kg
P at start = 380 bara 50 112 - - - - 149 - - - -
Temp = 45 Deg. C 100 452 - - - - 291 - - - -
Isolation and No Blowdown 5 1.13 1.12 1 0.9 0.73 16.4 15.5 15 14 12
18 14.5 9.05 3.5 0.84 - 55.9 44.7 28.2 14.8 -
50 112 - - - - 149 - - - -
100 452 - - - - 291 - - - -
12 Slug Catcher on Isolation and Blowdown 5 0.16 0.08 0.02 - - 7.4 5.4 3.0 - -
the neighbouring 18 2.11 0.74 0.1 - - 23.5 14.9 7.0 - -
platforms
Inventory = 41.7m3 = 50 16.4 - - - - 58.3 - - - -
2072Kg 100 65.1 - - - - 106 - - - -
P = 53 bara Isolation and No Blowdown 5 0.16 0.154 0.15 1.38 0.113 7.4 7.3 7.1 6.7 6.3
Temp = 25 deg. C
18 2.11 1.44 0.69 0.21 - 23.5 20.0 14.5 8.9 -
50 16.4 - - - - 58.3 - - - -
100 65.1 - - - - 106 - - - -
Page 16 Table 614.2: Gas Release Rates/Flame Lengths (continued)
Section No. Section Hole size (mm) Release Rate (kg/s) Duration (s) Pool Fire Diameter (m) Pool Fire Location
Description
3 HP manifold/ 5 1.17 60000 3.7 Weather Deck
separators
(release assumed 18 15.17 4600 13.3 Weather Deck
to occur from the
separators)
50 117.04 600 22.1/39 Weather Deck/Sea Surface
PDQ Manifold Module 1. Jet/spray/running liquid fire The size and containment pressure of the Operation of the F&G and ESD systems functioning effectively as intended
from HP production manifold to inventory within the production manifolds and isolating the plant is critical to the integrity of the platform due to the
sea. provides the opportunity for pressurised jet or inventories available. The ESD system must isolate the manifolds rapidly to
FABIG Newsletter Issue 50 - April 2008
2. Jet/spray/running liquid fire spray releases. Escalation between manifolds is prevent substantial liquid inventories spraying onto adjacent equipment and
from LP production manifold to likely given the immediate proximity and density spilling through to sea to form a sea surface fire.
sea. of plant and flowlines in the manifold area.
3. Jet fire from gas injection
manifold to sea. If a jet fire is directed westerly, the fire will extend
4. Jet fire from gas lift manifold into the MOL pump module from the manifold
to sea. module. If the release is easterly the fire will
extend into the wellbay area.
PDQ/Wellbay (Continued) If a jet fire is directed westerly the fire may extend
into the manifold module. If the release is easterly
FABIG Newsletter Issue 50 - April 2008
Switchgear Room and 1. Pool fire from emergency generator diesel day tank. There are no escalation paths identified for the Appropriate fire detection and protection systems are
LER 2. Electrical fire in electrical switchgear room, LER or emergency generator diesel day tank as the inventory provided in electrical switchroom, LER and workshop
workshop. is small and the deck is plated in this module. using CO2 or powder fire extinguishers, to respond
immediately to a fire and limit escalation.
FABIG Newsletter Issue 50 - April 2008
Utilities 1. Pool fire from fire pump diesel day tank. There are no escalation paths identified for the fire
Module pump diesel day tank as the inventory is small and the
deck is plated in this module.
Living Quarters 1. Cooking related fire in galley. Fires in the living quarters are unlikely to escalate Appropriate fire detection and protection systems are
2. Fixtures and fittings fire in accommodation cabins beyond the compartment where the fire occurs. provided in all compartments, in particular the galley,
and offices. storerooms and cabins, and in common passageways
3. Chemicals related fire in stores. or compartments using fire extinguishers, to respond
immediately to a compartment fire and limit
escalation.
Page 24 Table 614.4: Hazard Escalation & Management (continued)
The impact to the operation of the PDQ from Well crews who cannot evacuate to the TR using the northern or southern egress
the loss of one main generator set due to a small routes at Weather Deck level can descend to cellar deck level using the stairway at
localised fire could cause a production shutdown the west end of PDQ and enter the TR from this deck level shielded by the Weather
of the platform. Deck above.
the rig conducting the well entry operation and Prior to the blowout occurring, sufficient well kill fluid should always be available
plant at weather deck level. A blowout may impair to prevent loss of control of the well, with well control mechanisms specified for
the LQ, TR and link bridge. the full wellhead pressure.
Northern and southern egress routes provide direct escape to the LQ and TR for
the well crews, Weather Deck crew, crane operators and technicians at Weather
Deck level. Personnel can also make their way down to cellar deck level using the
northern and southern stairways at the west end of PDQ where they can access the
TR is provided with H60 rated on sides and upper level and at this level is shielded
by the Weather Deck above
Table 614.4: Hazard Escalation & Management (continued)
Page 25
A burning oil pool can spill over the extremities of The separator deck is designed with a curb surround to
the separator deck into lower areas of the platform, in capture and drain the contents of at least one separator
particular the MOL pump and manifold modules. The combined with the flowrate of the firewater system in
link bridge or bridge landing area may also be exposed the separator module.
to burning oil from the separators raining down and
preventing evacuation across the link bridge. Deluge can be used to control jet/spray fires and quench
pool fires. Fire extinguishers should be used for small
The drilling utilities module and flash gas compressor leakage fires only.
area and northern crane pedestal are also exposed to
direct flame impingement from a separator fire. A separator release orientated east towards the drilling
derrick is mitigated by the fire rated barrier between the
separator module and the drilling derrick on gridline
M2.
Flash Gas 1. Jet fire from flash gas suction drum. Escalation of a jet/spray fire from the flash gas If the F&G and ESD systems function effectively as
Compressor Area 2. Jet fire from flash gas compressor. compressor or flash gas suction drum to adjacent plant intended and isolation and blowdown of the plant is
3. Jet/spray/running liquid fire from Sangachal oil or the separator module is possible, in particular if the achieved, then escalation between plant in the flash gas
export pig launcher to sea. release is orientated east into the separator module. compressor area and beyond the flash gas compressor
FABIG Newsletter Issue 50 - April 2008
4. Jet fire from GUEST Platform gas export launcher. area is less likely.
5. Jet fire from fuel gas KO drum.
6. Jet fire from fuel gas heaters. Escalation from the pig launchers is unlikely as the units
are usually empty and isolated from hydrocarbons. Any
activity on the units requires permit approval and safety
procedures in place.
Helideck 4. Helicopter engine fire during personnel transfer. Personnel injury if helicopter crashes onto helideck or The helideck will be manned during helicopter landing
occupants trapped in helicopter. and take off by a helicopter landing officer and at least
two firemen manning the helideck firewater systems.
Figure 614.1
Figure 614.2
Figure 614.3
Figure 614.5
Figure 614.7