SP 2416

Petroleum Development Oman L.L.C.
Revision: 01
Effective: May 2022
Petroleum Development Oman L.L.C.
Document Title: Basic Process Safety Systems
Document ID SP-2416
Document Type Specification
Security Restricted
Discipline Technical Safety Engineering
Owner MSE/4 – Head of Technical Safety Engineering
Issue Date 8 May 2022
Revision 1.0
Keywords: This document is the property of Petroleum Development Oman, LLC. Neither the
whole nor any part of this document may be disclosed to others or reproduced, stored in a
retrieval system, or transmitted in any form by any means (electronic, mechanical,
reprographic recording or otherwise) without prior written consent of the owner.
8/5/2022 SP-2416 Basic Process Safety Systems Page 1
Printed copies are UNCONTROLLED.

Petroleum Development Oman L.L.C. Revision: 01
Effective: May 2022
Authorization, History and Related Processes and Documents
i Document Authorization
Document Authorization
Document Owner Document Custodian Document Author
(CFDH)
Alex van der Veen, MSE4 Johannes Intven, MSE8 Johannes Intven, MSE8
Alex van Digitally signed by

Alex van der Veen
der Veen Date: 2022.05.09

07:55:42 +04'00'
Date: 8 May 2022 Date: 8 May 2022 Date: 8 May 2022
ii Revision History
The following is a brief summary of the 4 most recent revisions to this document. Details of all
revisions prior to these are held on file by the issuing department.
Version Date Author Scope / Remarks

No.
1.0 1-4-2022 Johannes First issue.
Intven, MSE8
This document was generated as part of the Default
Industries Solution project. The basis of this document is
DEP 39.01.00.10-Gen. Rev. February 2021. The purpose
of the change is to align the PDO standard with the
relevant international standards to reduce project cost and
schedule and to align with Global Oil and Gas industry
norms.
iii Related Business Processes
Code Business Process (EPBM 4.0)
iv Related Corporate Management System (CMS) Documents

The related CMS Documents can be retrieved from the Corporate Management Portal (CMS).

Effective: May 2022
Table of Content
Table of Content ...........................................................................................................................................3
1. Introduction ..............................................................................................................................................5
2. Scope .........................................................................................................................................................5
3. Basic Process Safety Systems ...............................................................................................................5
4. Definitions .................................................................................................................................................6
4.1 Remote and Unmanned Site Definition ............................................................................................................. 6
4.2 Safety Device Symbols and Identification .......................................................................................................... 7
5. General ......................................................................................................................................................9
5.1 Background .......................................................................................................................................................... 9
5.2 Safety Analysis .................................................................................................................................................. 10
5.3 Application of the Safety Analysis Checklist ....................................................................................................... 10
6. Wellheads and Flowlines ...................................................................................................................... 11
6.1 General .............................................................................................................................................................. 11
6.2 Figures ............................................................................................................................................................... 11
6.3 Safety Analysis Table......................................................................................................................................... 12
6.4 Safety Device Location and Initiation ................................................................................................................. 13
6.4.1 Pressure safety devices (PZH, and RV) .................................................................................................................13
6.4.2 Flow safety device (FZV) ..........................................................................................................................................13
6.4.3 Shutdown valve (ESD) ..............................................................................................................................................13
6.4.4 Sand probe (YCP)......................................................................................................................................................13
6.4.5 Temperature safety devices (TZH) ..........................................................................................................................13
6.5 Safety Analysis Checklist (SAC) ........................................................................................................................ 13
7a. Headers ................................................................................................................................................ 14
7a.1 General ............................................................................................................................................................ 14
7a.2 Figures ............................................................................................................................................................. 14
7a.3 Safety Analysis Table....................................................................................................................................... 14
7a.4 Safety Device location and Initiation ................................................................................................................ 15
7a.4.1 Pressure safety devices (PZH, and RV) ...............................................................................................................15
7a.4.2 Flow safety device (FZV) ........................................................................................................................................15
7a.4.3 Shutdown devices (ESD) ........................................................................................................................................15
7a.5 Safety Analysis Checklist (SAC) ...................................................................................................................... 15
8. Pressure Vessels................................................................................................................................... 17
8.1 General .............................................................................................................................................................. 17
8.2 Figure ................................................................................................................................................................. 18
8.4 Safety Device Location and Initiation ................................................................................................................. 19
8.4.1 Safety devices (PZH, PZL and RV) .........................................................................................................................19
8.4.2 Level safety devices (LZH and LZL)........................................................................................................................19
8.4.3 Flow safety device (FZV) ..........................................................................................................................................20
8.5 Safety Analysis Checklist ................................................................................................................................... 20
9. Atmospheric Tanks ............................................................................................................................... 20
9.1 General .............................................................................................................................................................. 20
9.2 Figure ................................................................................................................................................................. 21
9.4 Safety device location and initiation ................................................................................................................... 22
9.4.1 Pressure safety devices (PVV and BOH) ...............................................................................................................22
9.4.2 Level safety devices (LZH and LZL)........................................................................................................................22
TZHTZHTZH9.5 Safety Analysis Checklist .............................................................................................................. 22
10. Fired Components............................................................................................................................... 22
10.1 General ............................................................................................................................................................ 22
10.2 Figures ............................................................................................................................................................. 23
10.3 Safety Analysis Table....................................................................................................................................... 23
10.4 Safety Device Location and Initiation ............................................................................................................... 24
10.4.1 Temperature safety devices (TZH)........................................................................................................................24

Effective: May 2022
10.4.2 Pressure safety devices (PZH, PZL and RV) ......................................................................................................24

10.4.3 Level safety devices (LZH and LZL) .....................................................................................................................25
10.4.3 Ignition safety devices .............................................................................................................................................25
10.5 Safety Analysis Checklist ................................................................................................................................. 25
11. Pumps ................................................................................................................................................. 25
11.1 General ............................................................................................................................................................ 25
11.2 Figures ............................................................................................................................................................. 25
11.4.2 Flow safety devices (FZV) ......................................................................................................................................27
1. The check valve (FZV) should be located on the pump discharge line to minimize backflow. .........................................27
11.4.3 Shutdown Valve (ESD) ...........................................................................................................................................27
12. Compressors ....................................................................................................................................... 27
12.1 General ............................................................................................................................................................ 27
12.2 Figure ............................................................................................................................................................... 28
12.3 Safety Analysis Table ...................................................................................................................................... 28
12.4.2 Gas and flame detecting devices (ASH and UZH) ..............................................................................................29
12.4.3 Shutdown devices (ESD and BDV) .......................................................................................................................29
13. Shell-and-Tube Heat Exchangers ...................................................................................................... 29
13.1 General ............................................................................................................................................................ 29
13.2 Figure ............................................................................................................................................................... 30
13.4.1 Pressure safety devices (PZH, and RV) ...............................................................................................................31
14. Combustors ......................................................................................................................................... 31
14.1 General ............................................................................................................................................................ 31
14.2 Figure ............................................................................................................................................................... 31
14.5 Safety Analysis Checklist................................................................................................................................. 32
15. References ........................................................................................................................................... 32
Appendix A. Definitions ............................................................................................................................ 33
Appendix B. Flowing Well Safety Analysis Checklist ........................................................................... 35
Appendix C. Beam Pumped Well Safety Analysis Checklist ................................................................ 37
Appendix Da. Headers Safety Analysis Checklist ................................................................................. 38
Appendix Db. Manifolds Safety Analysis Checklist .............................................................................. 39
Appendix E. Pressure Vessels Safety Analysis Checklist .................................................................... 40
Appendix F. Atmospheric Tanks Safety Analysis Checklist ................................................................ 43
Appendix G. Heater Treater (Pressure Vessel) Safety Analysis Checklist ......................................... 45
Appendix H. Fired Heaters – Glycol Reboiler (Pressure Vessel) Safety Analysis Checklist ............ 48
Appendix I. Fired Heaters – Indirect Heater (Atmospheric Tank) Safety Analysis Checklist ............ 51
Appendix J. Fired Heaters – Direct Fired Heated Tanks (Atm. Tank) Safety Analysis Checklist ..... 53
Appendix K. Pumps Safety Analysis Checklist ..................................................................................... 56
Appendix L. Packaged Compressors Safety Analysis Checklist ......................................................... 58
Appendix M. Heat Exchangers (shell-and-tube) Safety Analysis Checklist ........................................ 60
Appendix N. Combustors Safety Analysis Checklist ............................................................................ 62

Effective: May 2022
1. Introduction
This document specifies the requirements and gives recommendations for the Basic Process Safety
Systems. This SP contains requirements to mitigate process safety risks in accordance with the
Design Engineering Manual (DEM)-1 requirements as included in SP-2388.
This document should be used in an early phase of the design to develop the PFS and PEFS before
the Design Review (DR) and HAZOP. The assurance of the design will be done by the DR and the
HAZOP.
This PDO standalone specification is a First Issue of the SP-2416 dated April 2022.
2. Scope
Define the process inclusive of its mapping to the latest version of the PDO Business Model. This
Specification provides guidance on Basic Process Safety Systems during the early design phase.
This will be assured by the DR and HAZOP
Responsibility for this document is with the Technical Safety CFDH, the Owner. Changes to this
document are only be authorized and approved by the Owner. Users of the Document who identify
inaccuracy or ambiguity can notify the Custodian and request changes be initiated.
Feedback from users of this Specification will be considered as indicators of performance levels of
this SP by the Owner to ascertain the timeline for updating the document and actions to be taken if
measurements indicate corrective action is required.
Performance monitoring for this SP is to be undertaken every 3 years under Technical Safety CFDH,
and actions to be taken if measurements indicate corrective action is required based on performance
feedback.
The Document Owner and the Custodian have to ensure review and reverification of this specification
every 3 years and/or whenever there is significant update of specifications referred in this document.
Periodic, systematic review for the process specification will be decided by Technical Safety CFDH,
the Owner and there is review of specifications referred in this specification.
3. Basic Process Safety Systems

This document specifies requirements and gives recommendations for basic process safety systems
for onshore, upstream oil and gas primary production installations. It provides and overview for the
early design phase of the controls necessary to prevent or mitigate the effects of undesirable events
that pose a process safety threat to surface facilities.
The application of this document supports:
a. ensuring consistency between facilities and structured risk controls,
b. verifying safeguarding of the entire system through application of this Specification and the
Hazard and Operability (HAZOP) process (PR-1696),
c. identifying safety systems that are needed and supplying an approved rationale where
safeguards are not necessary; and
d. providing a design standard that identifies required safeguards.
This document does not specify the required controls for, and does not apply to the following types of
upstream systems:

Effective: May 2022
• Equipment containing light liquid hydrocarbons (i.e., butane or lighter); Water injection
systems
• Sour gas production or processing; Power plants; LNG facilities.
This Specification is modelled after API RP 14C, applicable to off-shore production installations,
however, is focusing on the on-shore requirements. It uses the same approach of identifying the
common controls that could be necessary while clearly defining the reasons some controls would not
be necessary. The Safety Analysis Checklists (SACs) are provided in the appendices of this
specification for each component type.
4. Definitions
General definitions and abbreviations have been provided in Appendix A.
4.1 Remote and Unmanned Site Definition
1. A site is defined as REMOTE when all of the following conditions are met:
Rationale: To establish the criteria to determine what can be considered to be a REMOTE site.
a. Within a 450-meter radius of the site, none of the following are present:
i 10 or more occupied buildings (per SP-1127) or permanent campsites of any type,
(e.g., residences, recreational vehicle parking spots);
ii any hospitals,
iii any residential areas,
iv any places of worship,
v any schools,
vi any sports parks,
vii any places of business,
viii any multi-lane roads, meaning two lanes or more in each direction.
b. There are no habitable buildings or public roads located such that, in the event of a release,
public receptors would be exposed to hydrocarbons >50 % Lower Flammability Limit (LFL)
or very toxic >Immediately Dangerous To Life or Health (IDLH). For H2S toxic limits see
SP-1190-1.
2. A site is defined as UNMANNED when the site does not have employees regularly assigned to
work at the location on a daily shift basis.
Rationale: If the site is operated, maintained, or serviced by employees who visit the site only
periodically to check its operation and to perform necessary operating or
maintenance tasks, then this is not considered a regularly assigned shift basis.
Note: A site operated on a dayshift basis is not considered UNMANNED.
3. A site is defined as REMOTE AND UNMANNED when the conditions in both (4.1, Item 1 and
Item 2) are met.
Rationale: To establish that a site that is both a REMOTE site and an UNMANNED site can be
considered to be a REMOTE AND UNMANNED site without having to satisfy any
additional criteria.

Effective: May 2022
4.2 Safety Device Symbols and Identification

1. Table 4.1 specifies the symbols and abbreviations used within this document.
The functional identification includes one first letter covering the measured or initiating variable
and one or more succeeding letters covering the function of the device. The term “safety” (S)
applies to emergency protective elements and is used as the second letter of sensing and self-
acting devices.
Table 4.1 Symbol Identification
Sensing element and self-acting device
Safety Device Designation Symbol
International
Variable Society of Combination
Common Single Device
Automation Device
(ISA)
Flow Safety
Backflow Check Valve
Valve
Burner Flame Burner Safety

Burner Flame
Detector Low
High Level Level Safety

Sensor High
Level
Low Level Level Safety

Sensor Low
High Pressure Pressure

Sensor Safety High
Pressure
Low Pressure Pressure

Sensor Safety Low

Effective: May 2022
International
Automation Device
(ISA)
Pressure Pressure Relief Pressure

or Safety Valve Safety Valve
Emergency
Pressure Relief Pressure
Vent Safety Valve
Pressure Pressure
Vacuum Relief
or Safety Valve Safety Valve
Pressure or
Vacuum
Vent None
High
Temperature Temperature
Safety High
Sensor
Temperature
Low
Temperature Temperature
Safety Low
Sensor
Flame or Stack
Flame spark arrestor None
Flame Detector
(Ultraviolet/
Infrared)
Fire
Heat Detector Temperature
(Thermal) Safety High

Effective: May 2022
International
Automation Device
(ISA)
Temperature
Fusible Material Safety Element
Combustible Gas Combustible Analyzer Safety

Concentration Gas Detector High
Toxic Gas Toxic Gas

Concentration Detector
Sand Probe
Sand
(Erosion Probe)
Actuated valves
Service Common Symbols
Surface Safety Valve
Blow Down Valve
All Other Shut Down Valves
5. General
5.1 Background
The purpose of a safety system is to protect personnel, the environment, and the facility from
threats to safety caused by the production process. Potential threats to safety are identified
through proven systems analysis techniques that have been adapted to the production process.
Recommended protective measures are common industry practices proven through experience.
The systems analysis and protective measures have been combined into a “safety analysis” for
production installations.

Effective: May 2022
5.2 Safety Analysis

1. For each process component, a safety analysis has to be completed to identify required
protective measures:
Rationale: It provides and overview for the early design phase of the controls necessary to
prevent or mitigate the effects of undesirable events that pose a process safety threat
to surface facilities.
a. Requirements for each basic process component at surface producing operating facilities
are specified in section (6) through section (14);
b. Each component analysis includes the following:
i a description of each process component,
ii a typical drawing (PEFS) of each process component showing safety devices that
has to be considered based on individual component analysis,
iii a Safety Analysis Table (SAT) for each process component analyzing the
undesirable events that could affect the component,
iv an outline of the safety device locations,
v a reference to the appropriate appendices containing the Safety Analysis Checklist
(SAC)s for each process component listing safety devices and showing conditions
under which particular safety devices may be excluded.
5.3 Application of the Safety Analysis Checklist
1. For each process component within the facility, safety devices designed to protect the process
component has to be identified:
Rationale: The Safety Analysis Checklist (SAC) lists the recommended safety devices to protect
each process component, if it were viewed as an individual unit with the worst
probable input and output conditions. Individual SACs are provided in the appendices
of this document.
Listed under each recommended device are certain acceptable conditions that eliminate the
need for that particular device when the component is viewed in relation to other process
components. This action can be justified because safety devices on other components will
provide the same protection, or because in a specific configuration, the abnormal condition that
the device detects will not lead to a threat to safety.
a. The safety devices have to be selected from the choices specified in the SACs provided in
(Appendix B) through (Appendix N).
b. For each section of a SAC, at least one item has to be selected.
2. Except for the types excluded in this clause, the selected safety device or acceptable alternative
identified in the SAC have to be incorporated into the in the early phase of design:
a. The following types are excluded:
i Flow Safety Devices (FZV) on the wellhead,
ii stuffing box level switch on the beam pumped well,
iii erosion probe (sand probe) on the wellhead,
iv Pressure Safety Low (PZL) (on the wellhead, pressure vessel, pump, heat exchanger,
flowlines and pipeline, unless designed for full vacuum).
3. If a process component is not covered by a SAC in this document, a SAC has to be developed.

Effective: May 2022
4. The safety devices should be incorporated into the design at the locations provided in this
Specification.
6. Wellheads and Flowlines

6.1 General
Safety devices for typical wellheads and flowlines and their location are shown in Figure 6.1 and
Figure 6.2.
6.2 Figures
Legend:
• CITHP –Closed In Tubing Head Pressure,
• MAWP – Maximum Allowable Working Pressure.
Figure 6.1 Safety devices –Flowing well
Notes:
1. Long radius Elbows or cushion tees are recommended for bends on the flowlines for flowing wells per Materials.
2. FZV recommended to prevent cross circulation.
3. For gas wells a local RV needs to be added to cater for HIPPS leakage.

Effective: May 2022
Figure 6.2 Safety devices –Beam pumped well
Notes:
1. FZV recommended to prevent cross circulation.
2. The Stuffing box level switch is a secondary containment device that catches liquid from a seal leak and shuts
down the pump jack when a level is detected.
The safety system remains the same whether gas is routed within a dedicated line or is mixed with liquid.
6.3 Safety Analysis Table

Table 6.1 SAT for flowline segment
Detectable abnormal
Undesirable event Cause condition at component
Overpressure • Blocked or restricted line High Pressure

• Choke plugged
• Hydrate plug
• Upstream flow control failure
• Changing well conditions
• Closed outlet valve
Erosion • Abrasives (sand, proppant) Low Pressure
Over Temperature • Operating temperature > Max High Temperature

Operating temperature
• Well fluid higher than design
• Well cooler abnormal operation
Stuffing Box Leak • Spill of liquid hydrocarbon High Level

Effective: May 2022
6.4 Safety Device Location and Initiation

6.4.1 Pressure safety devices (PZH, and RV)
1. PZHs should be located to protect them from damage due to vibration, shock, and incidental
damage.
2. The flowline PZH should be located in the flowline such that if hydrates were to occur in a
flowline section where the MAWP is less than the CITHP of the well, the PZH will detect the
pressure build-up.
3. The sensing point should be located on top of a horizontal run or in a vertical run.
4. The design should be in line with SP-2283 Off-Plot Production Facilities Overpressure
Safeguarding. When installed, the RV should be located upstream of the first blocking device in
the flowline segment.
5. The RV should not be set higher than the rated working pressure of the segment.
6. If the RV is not routed to a flare, the RV outlet should be located far enough from the wellhead to
allow access to the master valves.
7. Refer to the requirements of Part IV, Section 5.8 of SP-2361 for atmospheric vapor release.
8. A risk assessment should be done for areas where there is potential for atmospheric release of
liquids.
a. As part of this risk assessment, refer to PSBR 6 (Avoid liquid release relief to atmosphere)
the requirements for any RV that could lead to atmospheric release of liquid hydrocarbon.
6.4.2 Flow safety device (FZV)
1. FZVs should be located downstream of the wellhead ESDs and upstream of where the tubing
and casing production tie together.
6.4.3 Shutdown valve (ESD)
1. The ESD should be located on the wellhead as the second valve in the flow stream from the
wellbore.
2. The ESD should be actuated by the flowline pressure sensors, emergency shutdown (ESD)
system, fire loop system, erosion probe (sand probe), and sensors on downstream process
components.
6.4.4 Sand probe (YCP)
1. An erosion probe, commonly referred to as a sand probe, should be installed in the highest
velocity area of the flowline, per the Mechanical Static TA.
6.4.5 Temperature safety devices (TZH)
1. A TZH should be installed in the flowline where the Maximum Operating Temperature (MOT)
could be exceeded.
2. If a well cooler is installed to maintain flow temperature less than the MOT, a TZH should be
installed immediately downstream of the cooler.
6.5 Safety Analysis Checklist (SAC)
The SACs associated with wellheads and flowlines are at the following locations:
a. Flowing Well, refer to (Appendix B),

Effective: May 2022
b. Beam Pumped Well, refer to (Appendix C).
7a. Headers
7a.1 General
Safety devices for typical manifolds are shown in Figure 7.1.
7a.2 Figures
Figure 7a.1 Safety devices –Headers
7a.3 Safety Analysis Table

Table 7a.1 SAT for Headers
Detectable abnormal

• Thermal expansion
• Inflow exceeds outflow

Effective: May 2022
Leak • Deterioration Low Pressure

• Erosion
• Corrosion
• Impact damage
• Vibration
7a.4 Safety Device location and Initiation

7a.4.1 Pressure safety devices (PZH, and RV)
1. PZHs should be located downstream of any facility input source and upstream of an outlet
manifold’s FZV.
2. If a RV is required, it should be located downstream of all input sources and installed so that it
cannot be isolated from inlet sources.
Dispersion modeling might be required to determine the location.
3. If the RV is not routed to a flare, the RV outlet should be located far enough from the header to
allow access to the local manually operated valves.
4. Refer to the requirements of Part IV, Section 5.8 of SP-2361. for atmospheric vapor release.
liquids.
7a.4.2 Flow safety device (FZV)
1. The inlet manifold to a facility should have an FZV located immediately upstream of the process
equipment. The Design will provide check valves for critical requirement like two fields
combining in a header or new fields joining the inlet header of the facility etc.
2. The FZV on a departing outlet manifold should be located as far downstream as is practical, but
upstream of a block valve.
Rationale: Continued flow from offsite piping can prolong an abnormal situation within the facility
by allowing additional hydrocarbon to enter a facility either from continued delivery or
backflow.
Note: Check valve shall not be considered as SCE, Maintenance and Isolation are not provided,
Non-slam type to be selected. For cases where backflow cannot happen due to
elevation difference, check valve is not required
7a.4.3 Shutdown devices (ESD)
1. All ESDs should be actuated by the facility’s emergency shutdown (ESD) system.
2. The ESD on an outlet manifold should be actuated by the offsite piping’s PZHs and the facility’s
ESD system.
7a.5 Safety Analysis Checklist (SAC)
1. The SACs associated with manifolds are at the following locations:
a. Headers, refer to (Appendix Da).

Effective: May 2022
7b. Manifolds
7b.1 General
Safety devices for typical manifolds are shown in Figure 7b.1.
7b.2 Figures
Figure 7b.1 Safety devices –Manifolds
7b.3 Safety Analysis Table

Table 7b.1 SAT for Manifolds
Detectable abnormal
Undesirable event Cause
condition at component

Leak • Deterioration Low Pressure
• Erosion
• Corrosion
• Impact damage
• Vibration

Effective: May 2022
7b.4 Safety Device location and Initiation

7b.4.1 Pressure safety devices (PZH, and RV)
6. PZHs should be located downstream of any facility input source and upstream of an outlet
manifold’s FZV.
7. If a RV is required, it should be located downstream of all input sources and installed so that it
cannot be isolated from inlet sources.
Dispersion modeling might be required to determine the location.
8. If the RV is not routed to a flare, the RV outlet should be located far enough from the header to
allow access to the local manually operated valves.
liquids.
7.4.2 Flow safety device (FSV)
3. If a FZV is installed, the downstream system requires its own overpressure protection.
4. FZV
7b.4.3 Shutdown devices (ESD)
3. All ESDs should be actuated by the facility’s emergency shutdown (ESD) system.
4. The ESD on an outlet manifold should be actuated by the offsite piping’s PZHs and PZLs and
the facility’s ESD system.
7b.5 Safety Analysis Checklist (SAC)
1. The SACs associated with manifolds are at the following locations:
a. Manifolds, refer to (Appendix Db).
8. Pressure Vessels
8.1 General
This discussion covers only the effects of heat input to the process section of a heated vessel.
Heating equipment is covered in (8).
Pressure vessels associated with compressors, other than compressor cylinders, are covered in
this section.
Safety devices for typical pressure vessels are shown in Figure 8.1.

Effective: May 2022
8.2 Figure
Figure 8.1 Safety devices –Pressure vessel
Note: If pressure vessel is heated, TZH should be installed.

Table 8.1 SAT for pressure vessels
Detectable abnormal condition at

Undesirable event Cause component
Overpressure Blocked or restricted outlet or High pressure

demister mat
Inflow exceeds outflow
Gas blow-by from upstream
component
Pressure control system failure
Thermal expansion or external fire
case
Excess heat input
Liquid overflow Inflow exceeds outflow High liquid level
Liquid slug flow
Blocked or restricted liquid outlet
Level control system failure

Effective: May 2022
Detectable abnormal condition at

Undesirable event Cause component
Gas blowby Liquid withdrawals exceed Low liquid level

inflow
Open liquid outlet
Level control system failure
Unloading well
Leak Liquid side Deterioration Low pressure Low liquid level
Erosion
Corrosion
Impact damage
Vibration
Leak gas side Deterioration Low pressure high liquid level
Erosion
Corrosion
Impact damage
Vibration
Reversed flow High pressure downstream Backflow

8.4.1 Safety devices (PZH, PZL and RV)
1. PZHs and s and the RV should be located to sense and relieve pressure from the gas or vapor
section of the vessel.
This is usually on or near the top or just below the demister mat if the vessel is so equipped.
However, such devices could be located on the gas inlet or outlet piping if the pressure drop
from the vessel to the sensing point is negligible and if the devices cannot be isolated from the
vessel.
Such isolation could be caused externally (e.g., by blocked valves on gas outlet) or internally
(e.g., by plugged mist extractors).
Pressure vessels need to be designed for vacuum conditions, otherwise PZL needs to be
installed.
2. If the RV is not routed to a flare, the RV outlet should be located to allow safe access to the
devices that mitigate the relief from the pressure vessel RV.
liquids.
8.4.2 Level safety devices (LZH and LZL)
1. The LZH and LZL should be located so that there is sufficient liquid hold-up time to provide
adequate time for operator intervention.

Effective: May 2022
2. The LZHs and LZLs should be installed in external columns that can be isolated from the vessel,
allowing device testing without interrupting the process:
a. However, if solid deposits or foam cause fouling or false indication of devices in external
columns, the level sensors may be installed directly in the vessel.
In this case, a pump could be required to manipulate vessel liquid level for testing.
8.4.3 Flow safety device (FZV)
1. Check valves (FZVs) should be located in the outlet piping.
Note: If a FZV is installed, the downstream system requires its own overpressure protection.
8.5 Safety Analysis Checklist
1. Refer to (Appendix E) for the SAC associated with pressure vessels.
9. Atmospheric Tanks
9.1 General
This discussion covers only the effects of heat input to the process section of an atmospheric
tank. Heating equipment is covered in (10).
Safety devices for typical atmospheric tanks used in a production process system are shown in
(Figure 9.1). Small portable tanks (< 2500 liters (660 gallons)) such as those used for methanol
or chemical storage that are ancillary to the production process system are not covered by this
document.
1. Tanks should be equipped for emergency venting based on exposure to an external fire case,
per section 7.3 of SP-2399.
2. For emergency venting of tanks located at remote onshore production sites, the exemption
permitted under API SPEC 12F should not be applied.
3. Use of non-metallic tanks for hydrocarbon or produced water storage should be subject to
approval by the Owner’s Mechanical Static TA.

Effective: May 2022
9.2 Figure
Figure 9.1 Safety devices –Atmospheric tanks

Table 9.1 SAT for atmospheric tanks
Detectable abnormal
Overpressure • Blocked or restricted outlet High pressure
• Gas blowby/vapor breakthrough
(upstream component)
• Pressure control system failure
• Excess heat input
Ignition source within • Flashback from lightning strike on -
tank vent
• Static electricity due to splash
• filling
• Static electricity during gauging
or sampling

Effective: May 2022
Detectable abnormal
Flammable mixture in • Tank in breathing -
vapor space
Under-pressure • Pump-out Low pressure
• Thermal contraction
• Pressure control system failure
9.4 Safety device location and initiation
9.4.1 Pressure safety devices (PVV and BOH)
1. The pressure vacuum relief or safety valve (PVV) or the emergency pressure relief vent (BOH)
should be located on the top (highest practical elevation in the vapor section) of atmospheric
tanks.
2. Provide low-low pressure safeguarding (PZL) on the fuel gas blanketing supply header. For
facilities which have no separate (independent) fuel-gas blanketing supply header, the PZLL-
pressure safeguarding is to be prioritized in the common supply header.”
1. The LZH and LZL should be located so that there is sufficient liquid hold-up time to provide
adequate time for operator intervention.
The LZH function can be accomplished by level transmitters or switches.
2. In firetube heated components, the LZL should be located above the fire tubes.
a. Where a firetube heater is operated in an aqueous layer and organic layer, the LZL should
measure the interface between the aqueous and organic phases.
3. The LZH and LZL functions may be provided by either transmitters or switches.
a. The LZH and LZL functions should be installed to allow for testing without interrupting the
process
b. The same level transmitter may have both a LZL and LZH setting.
TZHTZHTZH9.5 Safety Analysis Checklist
1. Refer to (Appendix F) for the SAC associated with atmospheric tanks.
10. Fired Components

10.1 General
1. Refer to DEP 31.24.67.10 ‑Gen. on firetube heaters for design aspects and potential safety and
control aspects that are outside the scope of this DEP.
2. Refer to DEP 32.24.20.44‑Gen. for the instrumentation requirements for fired heaters.

Effective: May 2022
10.2 Figures
Figure 10.1 Safety devices –Fired Heater
Note: TZE designations are symbolic and are not intended to reflect actual location of quantity.

Table 10.1 SAT for a natural draft firetube heater
Undesirable event/ Cause Detectable abnormal

consequence condition at component
Undesirable Event: Unburned fuel in firing • Flame failure

Accumulation and delayed chamber during operation due • Low fuel pressure
ignition of to flame • High fuel pressure
fuel/air mixture in firing out
chamber Unburned fuel in firing
Consequence: chamber during startup
Fire/explosion
Undesirable Event: Loss of Tube rupture due to • Low liquid level
process containment overheating of process tubes
Consequence:
Fire/explosion

Effective: May 2022

Undesirable Event: Hot surfaces and/or • High stack temperature

Ignition outside of firing flame/spark emission
chamber Consequence:
Fire/explosion
Table 10.2 SAT for a forced draft firetube heater

Undesirable Event: Unburned fuel in firing chamber • Flame failure

Accumulation and delayed during operation due to flame • Low fuel pressure
ignition of out • High fuel pressure
fuel/air mixture in firing • Low air pressure
chamber Unburned fuel in firing chamber • Low air velocity
Consequence: during startup
Fire/explosion Blower failure / blocked air inlet
Undesirable Event: Loss of Tube rupture due to • Low liquid level
process containment overheating of process tubes
Consequence:
Fire/explosion
Undesirable Event: Hot surfaces and/or • High stack temperature
Ignition outside of firing flame/spark emission
chamber
Consequence:
Fire/explosion

10.4.1 Temperature safety devices (TZH)
1. Temperature sensors that are not fusible or skin contact types should be installed in a
thermowell for ease of removal and testing.
2. If the fire tube is immersed, the TZH should be located in the heated liquid medium or process
fluid:
a. If the liquid medium or process fluid flows through tubes within the firing or exhaust heated
chambers, the TZH should be located in the discharge line as close as practical to the
heater and upstream of all isolating devices.
3. A TZH in the exhaust stack should be located near the base of the stack.
10.4.2 Pressure safety devices (PZH, PZL and RV)
1. The PZH in the fuel supply line should be located between the last pressure regulator and the
burner.

Effective: May 2022
2. The PZL in the fuel supply line should be located between the last fuel control valve and the
burner.
1. In fire-tube heated components, the LZL should be located above the fire tubes.
10.4.3 Ignition safety devices
1. The intake flame arrestor and stack spark arrestor on fired components should be located to
prevent flame emission from the air intake and spark emission from the exhaust stack.
2. The BZL should be located in the firing chamber.
1. Refer to the following for the SACs associated with fired components:
a. Fired Heaters – Heater Treater (Pressure Vessel), refer to (Appendix G);
b. Fired Heaters – Glycol Reboiler (Pressure Vessel), refer to (Appendix H);
c. Fired Heaters – Indirect Heater (Atmospheric Tank), refer to (Appendix I);
d. Fired Heaters – Direct Fired Heated Tanks (Atmospheric Tank), refer to (Appendix J).
11. Pumps
11.1 General
Safety devices for typical pump installations are shown in Figure 11.1 and Figure 11.2. “Pipeline
pumps” are referred to as pumps transferring fluid to a regulated pipeline or to a facility operated
by another entity.
11.2 Figures
Figure 11.1 Safety devices –Pumps

Effective: May 2022
Figure 11.2 Safety devices –Glycol powered glycol pump

Table 11.1 SAT for pumps
Detectable abnormal
Overpressure • Blocked or restricted discharge High pressure

• line
• Excess back pressure
• High inlet pressure
• (centrifugal)
• Overspeed
• Fluid density increase
Leak • Deterioration Low pressure
• Erosion
• Corrosion
• Impact damage
• Vibration

Effective: May 2022

1. The PZHs and PZLs should be located on the pump discharge line upstream of the FZV or any
block valve.
2. In a glycol powered glycol pump, the PZL on the wet glycol high pressure line should be located
between the pump and the ESD.
3. On pumps, the RV should be located on the discharge line upstream of any block valve in the
process flow path.
11.4.2 Flow safety devices (FZV)
1. The check valve (FZV) should be located on the pump discharge line to minimize backflow.
11.4.3 Shutdown Valve (ESD)
1. A ESD should be located near the outlet of a storage component (e.g., tank, separator) that
delivers production to a pipeline pump to prevent the flow of hydrocarbons through the pipeline
pump and into the pipeline in the event of a pipeline leak.
2. When glycol powered pumps are used, a ESD should be located near the high-pressure wet
glycol outlet of the glycol contactor to shut off flow from the contactor and to shut down the
pumps.
1. Refer to (Appendix K) for the SACs associated with pumps.
12. Compressors
12.1 General
The safeguards not specified by ISO 13631 Table 7 are shown in Figure 12.1.
1. Safeguards should address Figure 12.1 and those specified by ISO 13631 Table 7.
2. All RV outlets and vents should be routed outside of the building.
3. The outlet piping design should both keep the discharge side of the relief piping drained and
minimize the precipitation that could come inside the building through a drain or weephole.

Effective: May 2022
12.2 Figure
Figure 12.1 Safety devices –Compressor unit
Note:
1. Compressor design with all shutdowns per ISO 13631 Table 7.
2. Suction Scrubber are not shown; they should be analyzed according to the heat exchanger list.
3. All RV outlets and vents to be routed outside of the building.
4. UZH, AZH, OZH designated by the Fire Safety Assessment and may not be necessary for compressors installed
outside of buildings.
5. UZH, AZH, OZH designations are symbolic and are not intended to reflect actual location of quantity.

The majority of the safeguards added in this section are meant to minimize the impact of the
abnormal operation of a compressor (e.g., detection, isolation, and de-inventorying).
Table 12.1 SAT for compressors
Detectable abnormal
Overpressure (suction) Excess inflow from the facility High pressure
Leak • Deterioration • Low pressure

• Erosion • High gas
• Corrosion • concentration
• Impact damage • Flame detection
• Vibration • High toxic concentration

Effective: May 2022

1. The PZHs and PZLs should be located on each suction line as close to the compressor as
practical and on each discharge line upstream of the ESD, FZV, and any block valve.
12.4.2 Gas and flame detecting devices (ASH and UZH)
1. If the compressor unit is installed in a building or enclosure, gas detectors (ASHs) and flame
detectors (UZHs) should be installed.
2. If the compressor unit is installed outside of a building or enclosure gas detectors (ASHs) and
flame detectors (UZHs) should address the Fire Safety Assessment or the Fire and Gas
Detector Mapping review.
12.4.3 Shutdown devices (ESD and BDV)
3. An ESD should be located on each process inflow line and fuel gas line so that the compressor
can be isolated from all input sources:
4. if the compressor unit is installed in a building, ESDs should be located outside the building.
5. All ESDs should be actuated by a signal from the emergency shutdown (ESD) system and fire
loop and by any abnormal pressure condition sensed in the suction and discharge lines.
6. A blowdown valve should be located on the compressor unit final discharge line(s):
7. blowdown valve(s) may be actuated by a signal from the compressor’s fire loop, gas detectors,
and compressor ESD system.
8. The blowdown piping should route the gas outside the building if a building is present.
1. Refer to (Appendix L) for the SAC associated with reciprocating compressors.
13. Shell-and-Tube Heat Exchangers

13.1 General
Safety devices for a typical shell and tube heat exchanger are shown in Figure 13.1.
This section does not apply to non-tubular heat exchangers (e.g., plate-frame, plate-fine, and
printed circuit heat exchangers) or heat exchangers used with primary heat sources (e.g.,
turbine exhaust exchangers) that are analyzed under (8).
1. This section may be used to analyses heating or cooling coils inserted into vessels.
a. Refer to (8) or (10) as applicable for the vessels themselves.
2. This section may be used to analyses heat exchangers using air to cool or heat hydrocarbons,
but this section only applies to the hydrocarbon section of these air-cooled heat exchangers.

Effective: May 2022
13.2 Figure
Figure 13.1 Safety devices –Shell-and-tube heat exchangers

Table 13.1 SAT for shell-and-tube heat exchangers
Detectable abnormal
Overpressure • Blockage or restriction High pressure

• Tube leak
• Vaporization
Leak • Deterioration Low pressure

• Erosion
• Corrosion
• Impact damage
• Vibration

Effective: May 2022

13.4.1 Pressure safety devices (PZH, and RV)
1. The PZHs and the RV should be located to sense pressure in or relieve pressure from each
section of the heat exchanger:
a. They may be located in the inlet or outlet piping if both of the following apply,
i. The pressure drop from the heat exchanger section to the sensing point is negligible,
and
ii. The devices cannot be isolated from the heat exchanger section.
1. Refer to (Appendix M) for the SAC associated with shell-and-tube heat exchangers.
14. Combustors
14.1 General
Safety devices for a typical combustor are shown in Figure 14.1.
1. Combustors with internal knock-out vessels should also comply with the requirements in (8).
14.2 Figure
Figure 14.1 Safety devices –Combustors

Effective: May 2022

Table 14.1 SAT for combustors
Detectable abnormal
Undesirable Event:
Accumulation and
delayed ignition of • Unburned fuel in firing chamber
during operation due to flame out
fuel/air mixture in firing • Flame failure
chamber • Unburned fuel in firing chamber
Consequence: during start-up
Fire/explosion
Undesirable Event:
Ignition outside of firing
chamber • Hot surfaces and/or flame/spark • High stack temperature
Consequence: emission
Fire/explosion

1. A TZH in the exhaust stack should be located near the base of the stack.
1. Refer to Standard Form (Appendix N) for the SAC associated with combustors.
15. References
Standard SP DEP No Title
PR-1696 80.00.00.15 Hazard and operability (HAZOP) study
SP-2357 01.00.01.30 Definition of temperature, pressure, and toxicity levels
SP-1127 80.00.10.11 Layout of onshore facilities
SP-2361 80.45.10.10 Design of pressure relief, flare and vent systems
SP-2399 80.45.10.11 Overpressure and under pressure – Prevention and protection
31.24.67.10 Firetube heaters
32.24.20.44 Instrumentation control and protection for fired equipment
SP-2283 Off-Plot Production Facilities Overpressure Safeguarding
SP-2388 Design Engineering Manual DEM 1
SP-2388 Design Engineering Manual DEM 2
API RP 14C Recommended Practice for Analysis, Design, Installation, and Testing
of Basic Surface Safety Systems for Offshore Production Platforms
API SPEC 12F Specification for Shop Welded Tanks for Storage of Production
Liquids - Twelfth Edition
ISO 13631 Petroleum and natural gas industries -- Packaged reciprocating gas
compressors
Note: Unless specifically designated by date, the latest edition of each publication should be used, together with any
amendments/supplements/revisions thereto.

Effective: May 2022
Appendix A. Definitions
A.1 General definitions
The Contractor is the party that carries out all or part of the design, engineering, procurement,
construction, commissioning or management of a project or operation of a facility. The Owner may
undertake all or part of the duties of the Contractor. The Manufacturer/Supplier is the party that
manufactures or supplies equipment and services to perform the duties specified by the Contractor.
The Owner is the party that initiates the project and ultimately pays for it. The Owner may also
include an agent or consultant authorized to act for, and on behalf of, the Owner.
The word shall indicates a requirement.
The capitalized term SHALL [PS] indicates a process safety requirement.
The word should indicates a recommendation.
The word may indicates a permitted option.
A.2 Specific definitions
The following definitions are specific to this SP.
Term Definition
Toxic Refer to SP-1190 series for additional details concerning the
(substances) Definitions.
Manifold Piping that combines or has the potential to combine feeds from multiple
sources and directs them to processing equipment.
Maximum Maximum pressure allowed in a piece of equipment, e.g., vessel or pipe,
Allowable within its design temperature range.
Working
Pressure
(MAWP)
Natural Gas Natural gas processing plant (gas plant) means any processing site engaged
Processing in the extraction of natural gas liquids from field gas, fractionation of mixed
Plant natural gas liquids to natural gas products, or both, classified as North
American Industrial Classification System (NAICS) code 211112 (previously
Standard Industrial Classification (SIC) code 1321).
Overpressure Pressure increase over the set pressure of a pressure relief device during
discharge and is usually expressed as a percentage of the set pressure.
Pipeline Pumps transferring fluid to a regulated pipeline or to a facility operated by
Pumps another entity.
Process Pictorial representation of a process or utility unit which shows all the
Engineering equipment, including installed spares and the associated piping and piping
Flow Scheme components, instrumentation, heat tracing and insulation.
(PEFS) NOTE: These are also known as Piping and Instrumentation Diagrams
(P&ID).
Relief Pressure Set pressure plus the overpressure. Also known as the relieving pressure.

Effective: May 2022
Term Definition
Closed-In Equilibrated pressure in the tubing/casing measured when the entire gas or
Tubing/Casing oil outflow has been shut off.
Pressure
(CITHP/SICP)
Sour gas ≥ 100ppm H2S as per SP-1190-1
A.3 Abbreviations
The following abbreviations are specific to this SP.
Term Definition
ASH Analyzer Safety High
BDV Blow Down Valve
BZL Burner Safety Low
BOH Emergency Pressure Relief or Safety Valve
ESD Emergency Shutdown
FZV Flow Safety Valve
LNG Liquefied Natural Gas
LZH Level Safety High
LZL Level Safety Low
YCP Sand Probe (Erosion Probe)
OZH Toxic Gas Detector
PRV Pressure Relief Valve
PSBR Process Safety Basic Requirements
PZH Pressure Safety High
PZL Pressure Safety Low
RV Pressure Safety Valve
PVV Pressure-Vacuum Relief or Safety Valve
SAC Safety Analysis Checklist
SAT Safety Analysis Table
ESD Shut Down Valve
SSV Surface Safety Valve
TA Technical Authority
TZE Temperature Safety Element
TZH Temperature Safety High
TZL Temperature Safety Low
UZH Flame Detector (Ultraviolet/Infrared)

Effective: May 2022
Appendix B. Flowing Well Safety Analysis Checklist

Shutdown Valve(s) (ESD)
ESDs installed on each producing line with an ESD button in a safe location.
Flow Safety Valve (FZV)
FZV installed.
The well does not normally produce from the casing.
The well is not producing from different formations, so crossflow is not a concern.
Erosion Probe, commonly known as Sand Probe (YCP)
Sand probe installed.
Sand probe not required per Integrity Reference Plan.
High Pressure Sensor (PZH)
PZH installed.
NOTES: PZH to be located upstream of the spec break to detect credible high pressure scenarios
caused by hydrates.
Flow line segment has a maximum allowable working pressure greater than the maximum shut in
pressure and is protected by a PZH on a downstream flow line segment.
Pressure Safety Valve (RV)
RV installed capable of relieving credible overpressure scenarios.
Flowline segment is protected by a RV on downstream component that cannot be isolated from the
flowline segment.
A high reliability high pressure shutdown system is installed where there is adequate flowline volume
upstream of any block valves to allow sufficient time for the ESDs or wellhead pump tripto close before
exceeding the flowline MAWP.
Flow line segment has maximum allowable working pressure greater than maximum shut in pressure.

Effective: May 2022
REMARKS
APPROVAL
Discipline Engineer
Approval Date

Effective: May 2022
Appendix C. Beam Pumped Well Safety Analysis Checklist
Flow Safety Valve (FZV)
FZV installed.
The well does not normally produce from the casing.
In a pumped well, the flowline does not comingle liquid and casing gas.
No hazardous consequences have been identified associated with crossflow between casing and
tubing.
Stuffing Box Level Switch (LZH)
LZH or an alternate means of detecting and stopping a seal leak is installed.
LZH not installed and residual risk documented in Environmental Assessment.
REMARKS
APPROVAL
Discipline Engineer
Approval Date

Effective: May 2022
Appendix Da. Headers Safety Analysis Checklist
Check Valve (FZV)
FZV installed.
PZH installed.
Inlet Header MAWP is greater than the maximum pressure of any input source. (Preferred)
All input sources to inlet header are protected by PZHs set no higher than the header MAWP.
RV installed. If the flowline contains liquid hydrocarbon, the vent system is designed per the SP-2361.
to prevent liquid hydrocarbon release to atmosphere.
Header MAWP is greater than the maximum pressure of any input source. (Preferred)
All input sources having a pressure rating greater than the inlet Header
MAWP are protected by a RV set no higher than the inlet Header MAWP.
Header is protected by a downstream RV that cannot be isolated from the header.
All input sources having a pressure greater than the inlet manifold MAWP are protected by an IPF set
no higher than the inlet header MAWP.
REMARKS
APPROVAL
Discipline Engineer
Approval Date

Effective: May 2022
Appendix Db. Manifolds Safety Analysis Checklist
PZH installed.
Inlet manifold MAWP is greater than the maximum pressure of any input source. (Preferred)
All input sources to inlet manifold are protected by PZHs set no higher than the manifold MAWP.
RV installed. If the flowline contains liquid hydrocarbon, the vent system is designed per the SP-2361.
to prevent liquid hydrocarbon release to atmosphere.
Manifold MAWP is greater than the maximum pressure of any input source. (Preferred)
All input sources having a pressure rating greater than the inlet manifold
MAWP are protected by a RV set no higher than the inlet manifold MAWP.
Header is protected by a downstream RV that cannot be isolated from the header.
All input sources having a pressure greater than the inlet manifold MAWP are protected by an IPF set
no higher than the inlet manifold MAWP.
REMARKS
APPROVAL
Discipline Engineer
Approval Date

Effective: May 2022
Appendix E. Pressure Vessels Safety Analysis Checklist
PZH installed.
Input is from a pump or compressor that cannot develop pressure greater than vessel MAWP.
Each input source is protected by a PZH that also protects the vessel.
Adequately sized piping without block or regulating valves connects gas outlet to downstream
equipment protected by a PZH that also protects the upstream vessel.
Vessel is final scrubber in a flare, relief, or vent system and is designed to withstand maximum built up
back pressure.
Vessel operates at atmospheric pressure and has an adequate vent system.
Vessel is associated with a wellpad instrument and/or fuel gas system.
RV installed.
Each input source is protected by a RV set no higher than the vessel MAWP and a RV is installed on
the vessel for fire and thermal expansion.
Each input source is protected by a RV set no higher than the vessel MAWP and at least one of these
RVs cannot be isolated from the vessel.
RVs on downstream equipment can satisfy relief requirement of the vessel and a system is in place to
ensure that there is always an open flow path to the RV.
Vessel is the final scrubber in a flare, relief, or vent system, is designed to withstand maximum built up
back pressure, and has no obstructions, such as mist extractors or back pressure valves.
Vessel’s design pressure exceeds the maximum expected pressure and no credible fire or thermal
expansion scenario.
Level Safety High (LZH)
LZH installed.
Vessel function does not require handling separated fluid phases (e.g., volume bottles, pulsation
dampeners, mixing drum).

Effective: May 2022
The equipment downstream of gas outlet is not a flare or vent system and can safely handle maximum
liquid carry-over.
Vessel is a small trap which is manually drained and is located in a normally dry system.
Level Safety Low (LZL)
LZL installed to protect each liquid outlet.
Liquid level is not automatically maintained in the vessel and the vessel does not have an immersed
heating element subject to excess temperature.
Equipment downstream of liquid outlet(s) can safely handle maximum gas rates that can be discharged
through the liquid outlet(s) without relieving to atmosphere, and the vessel does not have an immersed
Check Valve (FZV)
FZV installed on each outlet.
The maximum volume of hydrocarbons that could backflow from downstream equipment is
insignificant.
A control device in the line will effectively minimize backflow.
Flow restriction (FCV)
Flow restrictions installed in all liquid outlets.
Relief on downstream equipment has been designed for maximum blowby (vapor breakthrough)
flowrate from the vessel.
Liquid Outlet Shut Down Valve (ESD)
ESDs are installed on all the liquid outlets.
Blowby (vapor breakthrough) scenarios can be safely dispersed and are acceptable from an
environmental perspective.
MAWP of downstream equipment is equal to or greater than the MAWP of the pressure vessel, and no
other hazardous conditions associated with liquid inflow or blowby (vapor breakthrough) have been
identified.

Effective: May 2022
REMARKS
APPROVAL
Discipline Engineer
Approval Date

Effective: May 2022
Appendix F. Atmospheric Tanks Safety Analysis Checklist

Pressure Vacuum Safety Valve (PVV)
PZL (LL) installed

(Note: PSA(LL) low-low pressure safeguarding on the fuel gas blanketing supply header installed. For
facilities which have no separate (independent) fuel-gas blanketing supply header, the LL-pressure
safeguarding is to be prioritized in the common supply header.
PVV installed.
(Note: PVV and BOH must be evaluated independently; PVV must be able to handle maximum relief
rates without taking credit from BOH).
Vent installed with flame arrestor.

(Note: Flame arrestors are not preferred as these are prone to blockage and could cause
overpressure of the tank).
Vent installed without flame arrestor, flammable or combustible liquid is not stored within the tank, and
vapors are not ignitable.
Emergency Pressure Relief Vent (BOH)
BOH installed.
(Note: PVV and BOH must be evaluated independently; BOH must be able to handle maximum relief
rates without taking credit from PVV).
Tank has second vent capable of handling maximum relief capacity (including external fire).
LZH installed.
Overflow is diverted or contained by other process components.
Level Safety Low (LZL)
LZL installed.
Liquid level is not automatically maintained in the tank, and the tank does not have an immersed
Component is final tank in a containment system designed to collect and receive hydrocarbon liquids
from other tank overflows.
The heating element is an indirect heater (e.g. glycol heater) and the maximum temperature from the
indirect heater does not create a hazardous condition.
Blanket Gas

Effective: May 2022
Blanket gas system installed.

NOTE: blanket gas is required if the tank vapor space is connected to a combustor or flare.
The tank does not contain ignitable or toxic vapors or flammable liquids.
The tank does contain ignitable vapors but does not contain flammable liquids and is properly
grounded, contains a submerged fill, and is not routinely sampled or strapped.
Downcomer
Downcomer installed.
Tank is bottom filled.
Tank does not contain flammable or combustible materials.
REMARKS
APPROVAL
Discipline Engineer
Approval Date

Effective: May 2022
Appendix G. Heater Treater (Pressure Vessel) Safety Analysis

Checklist
Fired Component
Flame Arrestor – Air Intake
Flame arrestor is installed.
Component is equipped with a forced draft burner.
Pilot Flame Failure Sensor
BZL or TZL installed.
Fusible Link (TZE)
Fusible links installed.
Fired heater is located at a Remote and Unmanned site.
High Pressure Sensor (PZH-2) – Fuel Supply
PZH installed.
Stack spark arrestor
Stack spark arrestor installed.
High Temperature Sensor (TZH-2) – Stack
TZH installed.
The fluid being heated is not flammable and the heater fuel is natural gas.
The Heater Treater is located at a Remote and Unmanned site.
Burner Gas Shut Down Valve (ESD-1)
Burner gas shutdown valve installed.
NOTE: Common valve for burner gas and pilot gas shutdown is acceptable if regulations allow.
Pilot Gas Emergency Shut Down Valve (ESD-2)
Pilot gas emergency shutdown valve installed.
Low Pressure Sensor (air supply) (PZL)
PZL installed.
Component is equipped with a natural draft burner.
Low Pressure Sensor (fuel supply) (PZL)
PZL installed.
Motor Interlock (forced draft fan motor)

Effective: May 2022
Motor interlock installed.

High Temperature Sensor (TZH-1) – Medium or Process Fluid
TZH installed.
Pressure Vessel Component
Low Liquid Level (LZL-1) – Medium or Process Fluid
LZL installed.
LZH installed.
The equipment downstream of gas outlet is not a flare or vent system and can safely handle
maximum liquid carry-over.
Level Safety Low (LZL-2)
Equipment downstream of liquid outlet(s) can safely handle maximum gas rates that can be
discharged through the liquid outlet(s) without relieving to atmosphere, and the vessel section does
not have an immersed heating element subject to excess temperature.
Check Valve (FZV)
insignificant.
High Pressure Sensor (PZH-1)
PZH installed.
Input is from a pump or compressor that cannot develop pressure greater than the vessel MAWP.
Low Pressure Sensor (PZL-1)
PZL installed.

Effective: May 2022
Minimum operating pressure is atmospheric pressure when in service.
Piping without block or regulating valves connects gas outlet to downstream equipment protected by a
PZL.
RV installed.
Each input source is protected by a RV set no higher than the vessel

MAWP, and a RV is installed on the vessel for fire and thermal expansion.
Each input source is protected by a RV set no higher than the vessel MAWP and at least one of these
RVs cannot be isolated from the vessel.
ensure there is always an open flow path to the RV.
REMARKS
APPROVAL
Discipline Engineer
Approval Date

Effective: May 2022
Appendix H. Fired Heaters – Glycol Reboiler (Pressure Vessel)

Safety Analysis Checklist
Fired Component
Fusible Link (TZE)
High Pressure Sensor (PZH-2) – Fuel Supply
PZH installed.
TZH installed.


PZL installed.
PZL installed.

Effective: May 2022
Pressure Vessel Component
LZL installed.
TZH installed.
High Pressure Sensor (PZH-1)
PZH installed.
Input is from a pump or compressor that cannot develop pressure greater than the vessel MAWP.
Low Pressure Sensor (PZL-1)
PZL installed.
Piping, without block or regulating valves connects gas outlet to downstream equipment protected by a
PZL.
RV installed.
Each input source is protected by a RV set no higher than the vessel MAWP and a RV is installed on
the vessel for fire and thermal expansion.
Each input source is protected by a RV set no higher than the vessels

MAWP and at least one of these RVs cannot be isolated from the vessel.

Effective: May 2022
ensure that there is always an open flow path to the RV.
LZH installed.
The equipment downstream of gas outlet is not a flare or vent system and can safely handle maximum
liquid carry-over.
Level Safety Low (LZL-2)
Equipment downstream of liquid outlet(s) can safely handle maximum gas rates that can be
discharged through the liquid outlet(s) without relieving to atmosphere, and the vessel section does not
have an immersed heating element subject to excess temperature.
Check Valve (FZV)
insignificant.
REMARKS
APPROVAL
Discipline Engineer
Approval Date

Effective: May 2022
Appendix I. Fired Heaters – Indirect Heater (Atmospheric Tank)

Fired Component
Fusible Link (TZE)
High Pressure Sensor (PZH) – Fuel Supply
PZH installed.
TZH installed.
Burner gas shutdown valve installed. NOTE:

Common valve for burner gas and pilot gas shutdown is acceptable if regulations allow.
Pilot gas emergency shutdown valve installed. NOTE:

PZL installed.

Effective: May 2022
PZL installed.
Atmospheric Tank Component (non-flammable heat medium with manual level control)
LZL installed.
TZH installed.
Component is an indirect glycol/water heater in atmospheric service and is protected by an LZL.
Atmospheric Vent
Adequately sized atmospheric vent installed capable of handling credible relief scenarios.
High Liquid Level (LZH) – Medium or Process Fluid
LZH installed.
The process fluid is gas.
The process fluid being heated is not flammable.
REMARKS
APPROVAL
Discipline Engineer
Approval Date

Effective: May 2022
Appendix J. Fired Heaters – Direct Fired Heated Tanks (Atm. Tank)

Fired Component
Fusible Link (TZE)
High Pressure Sensor (PZH) – Fuel Supply
PZH installed.
TZH installed.

NOTE:

NOTE:
PZL installed.

Effective: May 2022
PZL installed.
Atmospheric Tank Component
Low Liquid Level (LZL) – Medium or Process Fluid
LZL installed.
TZH installed.
Routine Pressure Vacuum Safety Valve (PVV) – Vent
PVV installed.
(Note: PVV and BOH must be evaluated independently; PVV must be able to handle maximum relief
rates without taking credit from BOH).
Vent installed with flame arrestor.
Vent installed without flame arrestor; flammable or combustible liquid is not stored in the tank, and
vapors are not ignitable.
Emergency Pressure Vacuum Safety Valve (BOH)
BOH installed.
(Note: PVV and BOH must be evaluated independently; BOH must be able to handle maximum relief
rates without taking credit from PVV).
Tank has second vent capable of handling maximum relief capacity (including external fire).
LZH installed.
Overflow is diverted or contained by other process components.
Blanket Gas
Blanket gas system installed.
The tank does not contain ignitable or toxic vapors or flammable liquids.

Effective: May 2022
The tank contains ignitable vapors, but does not contain flammable liquids and is properly grounded,
contains a submerged fill, and is not routinely sampled or strapped.
The tank is located on a Remote and Unmanned site.
Downcomer
Downcomer installed.
Tank is bottom filled.
Tank does not contain flammable or combustible materials.
REMARKS
APPROVAL
Discipline Engineer
Approval Date

Effective: May 2022
Appendix K. Pumps Safety Analysis Checklist

Pump Component
Pressure Safety High (PZH) - pipeline pumps
PZH installed.
Pressure Safety High (PZH) -other pumps
PZH installed.
Max pump discharge pressure does not exceed 70% of the max allowable working pressure of
discharge piping.
Pump discharges to an atmospheric vessel.
Downstream equipment to which the pump discharges is protected by a PZH.
Pump is a glycol powered glycol pump.
Low Pressure Sensor (PZL) - pipeline pumps
PZL installed.
Pump does not handle hydrocarbons.
Low Pressure Sensor (PZL) - other pumps
PZL installed.
Small, low volume pumps, e.g., chemical injection.
Pump discharges to an atmospheric vessel.
Pump is manually operated and continually attended.
External release hazards have been reviewed and adequate mitigation measures are in place.
Pressure Safety Valve (RV) - pipeline pumps
RV installed.
Pump is kinetic energy type and incapable of generating a head greater than the MAWP of the
discharge piping.
Pressure Safety Valve (RV) - other pumps
RV installed.
Max pump discharge pressure is less than MAWP of discharge piping MAWP.
Pump is a glycol powered glycol pump, and the wet glycol low pressure discharge piping is rated
higher than the maximum discharge pressure.

Effective: May 2022
Pump is a glycol powered glycol pump, and the wet glycol low pressure discharge piping is protected
by a RV on a downstream component that cannot be isolated from the pump.
Check Valve (FZV) - all pumps
Check valve installed
No credible backflow scenarios identified and documented in HAZOP.
Shutdown Valve (ESD) - pipeline pumps
Shutdown valve installed (near storage component outlet).

Note: TZEs are not considered in this assessment but are recommended.
REMARKS
APPROVAL
Discipline Engineer
Approval Date

Effective: May 2022
Appendix L. Packaged Compressors Safety Analysis Checklist

ISO 13631 Table 7 Compliance
The compressor package is equipped with all shutdowns per ISO 13631 Table 7
High Pressure Sensor (PZH) – Compressor Inlet
PZH Installed
Each input source is protected by a PZH that will also protect the compressor
High Pressure Sensor (PZH) – Compressor Discharge
PZH Installed
Compressor is protected by a downstream PZH, located upstream of any cooler, that cannot be
isolated from the compressor
Pressure Safety Valve (RV-1) – Compressor Inlet
RV installed.
Each input source is protected by a RV set no higher than the 1st stage suction MAWP.
Vessel’s design pressure exceeds the maximum expected pressure and no credible fire or thermal
expansion scenario
Pressure Safety Valve (RV) – Compressor Discharge
RV installed.
Compressor is protected by a downstream RV, located upstream of any cooler, that cannot be
isolated from the compressor
Blow Down Valve (BDV)
BDV installed.
Compressor is not located in a building and risks associated with not automatically blowing down the
compressor during an upset are acceptable.
Shutdown Valve (ESD-1) – Inlet
ESD installed.
ESDs located upstream within the facility limit that would isolate all flow to the compressor.
Shutdown Valve (ESD-2) – Final Discharge
ESD installed.

Effective: May 2022
Risks associated with backflow to the compressor during a release scenario have been reviewed and
adequate mitigation measures in place.
Hydrocarbon Analyzer Safety High (AZH)
ASH installed.
Compressor package is not enclosed in a building and the ASH is not required by the facility Fire
Safety Assessment.
Flame Detector (UZH)
UZH installed.
Compressor package is not enclosed in a building and the UZH is not required by the facility Fire
Safety Assessment.
Toxic Gas Detector (OZH)
OZH installed.
Toxic gas is not present.
Compressor package is not enclosed in a building.
Check Valve (FZV)
FZV installed.
REMARKS
APPROVAL
Discipline Engineer
Approval Date

Effective: May 2022
Appendix M. Heat Exchangers (shell-and-tube) Safety Analysis

Checklist
PZH installed.
Input source to heat exchanger section cannot develop pressure greater than the heat exchanger
section MAWP.
Each input source is protected by a PZH that also protects the heat exchanger section.
A PZH is installed on a downstream component and cannot be isolated from the heat exchanger
section by block or regulating valves.
Low Pressure Sensor (PZL)
PZL installed.
PZL installed on another component will provide necessary protection and the PZL cannot be isolated
from the heat exchanger section when the heat exchanger is in service.
External release hazards have been reviewed and adequate mitigation measures are in place.
RV installed.
Each input source is protected by a RV set no higher than the heat exchanger section MAWP and a
RV is installed on the heat exchanger section for fire exposure and thermal relief.
Each input source is protected by a RV that is set no higher than the heat exchanger section MAWP
and cannot be isolated from the heat exchanger section.
RVs on downstream equipment can satisfy relief requirement of the heat exchanger section and
cannot be isolated from the heat exchanger section.
Input sources to the heat exchanger section cannot develop pressure greater than the heat exchanger
section MAWP and the heat exchanger section cannot be over pressured due to temperature or
pressure in the other section.
Each input source is protected by a RV set no higher than the heat exchanger section MAWP and the
heat exchanger section cannot be over pressured due to temperature or pressure in the other section.
REMARKS

Effective: May 2022
APPROVAL
Discipline Engineer
Approval Date

Effective: May 2022
Appendix N. Combustors Safety Analysis Checklist

Shutdown Valve (ESD-1)
Gas for destruction shutdown valve installed that isolates hydrocarbon gas flow for any shutdown
condition per Cause and Effect Diagram
Shutdown Valve (ESD-2)
Fuel (pilot) gas emergency shutdown valve installed that will shutdown fuel (pilot) gas on trips initiated
by an ESD of the facility or the fire detection of the combustor
Flame Arrestor (FA) in “Gas for Destruction” line
Flame arrestor installed.
Stack Spark Arrestor
Stack High Temperature Sensor (TZH)
Stack TZH installed
Fuel (pilot) Flame Failure Sensor
BZL installed.
PZL installed.
PZL installed.
Flame Arrestor (FA)
Flame arrestor installed.
Component is equipped with a forced draft heater.
Spacing from process equipment precludes ignition of credible releases.

Effective: May 2022
REMARKS
APPROVAL
Discipline Engineer
Approval Date

SP 2416

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

SP 2416

Uploaded by

Copyright:

Available Formats

Petroleum Development Oman L.L.C.

Petroleum Development Oman L.L.C.

Document Title: Basic Process Safety Systems

Document Type Specification

Discipline Technical Safety Engineering

Owner MSE/4 – Head of Technical Safety Engineering

Issue Date 8 May 2022

8/5/2022 SP-2416 Basic Process Safety Systems Page 1

Printed copies are UNCONTROLLED.

Authorization, History and Related Processes and Documents

Alex van Digitally signed by

der Veen Date: 2022.05.09

Date: 8 May 2022 Date: 8 May 2022 Date: 8 May 2022

Version Date Author Scope / Remarks

Code Business Process (EPBM 4.0)

iv Related Corporate Management System (CMS) Documents

8/5/2022 SP-2416 Basic Process Safety Systems Page 2

Printed copies are UNCONTROLLED.

8/5/2022 SP-2416 Basic Process Safety Systems Page 3

Printed copies are UNCONTROLLED.

10.4.2 Pressure safety devices (PZH, PZL and RV) ......................................................................................................24

8/5/2022 SP-2416 Basic Process Safety Systems Page 4

Printed copies are UNCONTROLLED.

3. Basic Process Safety Systems

8/5/2022 SP-2416 Basic Process Safety Systems Page 5

Printed copies are UNCONTROLLED.

8/5/2022 SP-2416 Basic Process Safety Systems Page 6

Printed copies are UNCONTROLLED.

4.2 Safety Device Symbols and Identification

Sensing element and self-acting device

Safety Device Designation Symbol

Burner Flame Burner Safety

High Level Level Safety

Low Level Level Safety

High Pressure Pressure

Low Pressure Pressure

8/5/2022 SP-2416 Basic Process Safety Systems Page 7

Printed copies are UNCONTROLLED.

Sensing element and self-acting device

Safety Device Designation Symbol

Pressure Pressure Relief Pressure

8/5/2022 SP-2416 Basic Process Safety Systems Page 8

Printed copies are UNCONTROLLED.

Sensing element and self-acting device

Safety Device Designation Symbol

Combustible Gas Combustible Analyzer Safety

Toxic Gas Toxic Gas

Service Common Symbols

Surface Safety Valve

Blow Down Valve

All Other Shut Down Valves

8/5/2022 SP-2416 Basic Process Safety Systems Page 9

Printed copies are UNCONTROLLED.

5.2 Safety Analysis

8/5/2022 SP-2416 Basic Process Safety Systems Page 10

Printed copies are UNCONTROLLED.

6. Wellheads and Flowlines

8/5/2022 SP-2416 Basic Process Safety Systems Page 11

Printed copies are UNCONTROLLED.

Figure 6.2 Safety devices –Beam pumped well

6.3 Safety Analysis Table

Overpressure • Blocked or restricted line High Pressure

Over Temperature • Operating temperature > Max High Temperature