Professional Documents
Culture Documents
Page 1 of 68
May 2007
D. Anelli D. Anelli
5 Feb 2004
Date
Revision
Prepared
Verified
Approved / Date
Authorized / Date
Rev 1
Page 1
Page 2 of 68
DISTRIBUTION LIST
DESCRIPTION Chairman & Managing Director General Manager & Managing Director Operations General Mgr. Deputy Operations General Mgr. Finance General Mgr. Deputy Finance General Mgr. Exploration General Mgr. Deputy Exploration General Mgr. Materials General Mgr. Projects General Dept. Deputy Projects General Mgr. Internal Auditing General Dept. Administration General Dept. Industrial Safety & Environmental Protection Asset Integrity & Quality Management Tenders & Contracts General Dept. Planning & Follow Up General Dept. Legal General Dept. Information Services & SVS. General Dept. Sinai Fields General Mgr. Sinai Fields Operations Gen. Mgr. Sinai Production Gen. Mgr. Sinai Drill. & W. O. Gen. Mgr. Sinai Assist Field Gen. Mgr. Sinai Support Service Gen. Mgr. Sinai Petroleum Eng. Gen. Dept. Sinai Maintenance Gen. Mgr. Sinai L.P.G. Sector Sinai Spec. Proj. & Ops. Cons. Sector Sinai Marine Sector Sinai Labs. & Corros. Sector
Rev 1 Risk Screening and Assessment Procedure
No. of
Page 2
Page 3 of 68
32
No. of
Sinai Field Safety Div. Ras Garra Fields General Mgr. Nile Delta Gen. Mgr. Nile Delta Operations Gen. Mgr. Nile Delta Maintenance Gen. Mgr. Nile Delta Sup. Services sector Nile Delta Safety Div. Port Fouad Fields Gen. Mgr. Port Fouad Production Assist Gen. Mgr. Port Fouad Maintenance Assist Gen. Mgr. Port Fouad Support Services Assist Gen. Mgr. Port Fouad Safety Dept. Mgr. EGPC Ieoc Medical Department
34 35 37 38 39 40 41 42 43 44 45 46 47 48
Rev 1
Page 3
Page 4 of 68
A 0
1
19.01.04 05.02.04
June 2007
The custodian of this procedure is the HSE Manager and any suggested changes to this procedure or queries about the applicability of it should be addressed to him. He is also responsible for coordinating periodic reviews of this procedure, which will take place every two years.
Rev 1
Page 4
Page 5 of 68
LIST OF CONTENTS
1.0 2.0
2.1 2.2
8 9
9 10
3.0
3.1 3.2 3.3 3.4 3.5 3.6
10
10 11 11 11 12 12
4. RISK CATEGORIES
4.1 4.2 4.3 4.4 4.5 4.6 Event Risk RISKS TO PEOPLE (HEALTH AND SAFETY) Risk to Critical equipment and Facilities Environmental Risk Asset Risk Reputation Risk
13
13 13 13 13 13 14
5.
5.1 5.2
Rev 1
15
15 15 Page 5
Page 6 of 68
5.3
RISK REPORTING
21
6.
6.1 6.2 6.3 6.4 6.5 6.6 6.7
22
22 24 25 26 27 28 29
30
30 30 31 31 32 32 32 32 33 33
6.0
REFERENCES
34 36 39
APPENDIX A1 HIGH LEVEL RISK REGISTER PERFORMA APPENDIX A2 RISK SCREENING KEY WORDS
Rev 1
Page 6
Page 7 of 68
APPENDIX A3: HAZARD CHECKLISTS APPENDIX A4 CONTROL MEASURES GUIDANCE APPENDIX A5 RISK ASSESSMENT EXAMPLE APPENDIX A6 HSE WORK PLAN EXAMPLE APPENDIX A7: RISK ASSESSMENT FORM APPENDIX B: RISK MATRICES APPENDIX B1: EVENT RISK SCREENING MATRIX APPENDIX B2: PERSONNEL (TASK) RISK ASSESSMENT MATRIX
41 48 54 56 59 60 61 62
APPENDIX B3: RISK TO PEOPLE (OPERATION) ASSESSMENT MATRIX63 APPENDIX B6: ASSET RISK MATRIX APPENDIX B7: REPUTATION RISK MATRIX APPENDIX B8: SOCIAL RESPONSIBILITY 66 67 68
Rev 1
Page 7
Page 8 of 68
1.0 PURPOSE AND OBJECTIVES This procedure covers all activities of PETROBEL, including contractors personnel working for PETROBEL. Contractors with their own HSE arrangements must also comply with this procedure as a minimum. It has been developed to achieve compliance with Eni E&P Division HSE IMS HSE Standard: HSE Risk Management Doc. No. 1.3.0.03 (Ref 1), Eni HSE Risk Reporting Procedure- DOC. No. 1.3.0.05 (20-02-2006) (Ref 2) and HSE Risk management and Petrobel HSE IMS (Ref 3). It follows the general principles of international management systems (Refs 4, 5, 6, 7). This procedure should be implemented in conjunction with the Petrobel Work Precautions Procedure (Ref 8) where appropriate. The scope of this procedure is to define how risks should be classified, how frequencies and consequences of hazards should be qualitatively assessed and how the relevant mitigation plans should be prepared, and is used to support the formulation and overall ranking of the key risks faced by the Company. Also it gives guidance on how to prepare and update the risk report. The purpose of this procedure is to ensure that all staff in PETROBEL field operations, offices, warehouses and supply bases are aware of, and understand, the importance of their responsibilities for hazard identification, risk assessment and risk control with respect to health, safety and environmental management.
Two levels of risk assessments are addressed in this procedure. The top level (High Risk assessment) allows Petrobel to report a summary of the high level of risks to Ieoc on yearly basis as required by the HSE risk Management Standard of Eni HSE Directives. The second level allows Petrobel departments/ sites to develop detailed risk register which details the main areas of HSE risk associated with their activities.
Effective risk control will enable PETROBEL to minimize the frequency and consequence (severity) of accidents/incidents and ill health, and minimize the environmental impact of its activities. The objectives of this procedure are: 1. to provide a consistent approach to HSE hazard and risk management throughout all activities of the Company in order to minimize HSE risks; 2. to provide a structured process for HSE risk screening, assessment and control.
This procedure is also developed to meet the requirements of Environmental legislation No 4 of 1994 (Ref 9).
Rev 1 Risk Screening and Assessment Procedure
Page 8
Page 9 of 68
2.0
DEFINITIONS
2.1
General
Hazard:
Something with the potential to cause harm, loss or environmental impact, whether by injury, illness or damage. The Probability of a hazard being realized. The extent of the consequences, which could result from the hazard being realized. Risk is the product of the likelihood and the severity. A document proving a brief, but complete overview of the identified hazards, the relevant screening criteria and the measures (controls) necessary to manage them. Indicates that a hazard or risk is anything other than trivial. One which requires some form of positive safeguard or control measure to eliminate, or reduce it to an acceptable level; A precautionary measure, which prevents or reduces a risk. Control Measures can include physical, procedural, and human systems. The probability that an item will perform a required function under stated conditions for a stated period of time.
likelihood: severity
Significant Risk:
Control Measure:
Reliability
Rev 1
Page 9
Page 10 of 68
2.2
This procedure covers all PETROBEL operations, including activities in offices, warehouse premises and in the field. As these operations will have differing organizational structures, it is necessary to use generic terms for the personnel having responsibilities for risk screening and assessment. In order to provide clarity, these generic terms are defined below with examples. Further guidance may be obtained from the HSE department if required. In certain locations, all of the levels of supervision described in this procedure may not be in place and the same person may, therefore, have more than one set of responsibilities. All personnel are responsible for working with due regard to health, safety and the environment, especially those with responsibility for others, e.g. Line Supervisor: The immediate supervisor of the person(s) who will perform the activities for which the risk screening and assessment is being conducted. The manager of the site / department where the risks of the activity are being screened and assessed. The manager of the relevant Division for the activities being considered.
Division Manager:
3.0
3.1
The Chairman & MD and General Manager &MD shall ensure that HSE risk screening and assessments are carried out for all activities conducted by the Geographical Unit. They shall ensure that actions and controls arising from the assessments are developed and implemented. They shall ensure that suitable and adequate resources of funding and personnel are made available to conduct the HSE risk assessments, to implement actions and controls
Rev 1 Risk Screening and Assessment Procedure
Page 10
Page 11 of 68
arising from the assessments and for training of personnel. Also he shall ensure that Petrobel is reporting to the Ieoc by the end of June each year a summary of the High level risk assessment. 3.2 General Managers
Each Department General Manager should initiate and lead a High Level Risk Screening exercise for all ongoing Departmental activities on an annual basis. Additionally, he should ensure that: HSE risk screening and assessments are conducted for all intended activities within their remit prior to performing the activity. All controls and actions arising from such HSE risk screenings and assessments, including procedures, are developed and implemented, and monitor the progress of implementation. HSE risk screening and assessment sheets (risk register) are reported, updated/ developed on annual basis. Line managers/supervisors are fulfilling their responsibilities in accordance with the procedure in hand. All appropriate company and contractor personnel understand all controls, procedures and precautions which apply to the activities to be carried out and are trained as necessary.
3.3 Line Manager Line Managers shall: Initiate and ensure risk screening/assessment is conducted prior to any activity under his responsibility; Formulate a team, including a member from HSE, to conduct the required risk screening/ assessments for all activities; Participate in risk screening/assessment conducted for all ongoing departmental activities on an annual basis; Follow up the development and implementation of required controls.
3.4 Line Supervisors Line supervisors are required to: Lead task related risk assessments Develop and implement controls Participate in risk screening teams Report any impediments to Line Managers
Rev 1
Page 11
Page 12 of 68
3.5
The HSE Department General Manager is accountable for the application of the company tolerability criteria into the risk management process of the whole company and for updating the company Risk Screening Matrix. In addition to the responsibilities described above, the HSE Manager will also be responsible for providing assistance and/or advice in the following areas: Developing the company high level risk register and sending annually to Ieoc through the MDs, Developing the scope of HSE risk screening and assessments; Incorporating relevant risk screening and assessments into Department annual work plans; Participating as required in HSE risk screening and assessments and advising on the suitability of control measures and their implementation; Reviewing any work produced by external consultants on behalf of the commissioning Department; and Assisting with the preparation or review of specific procedures, HSE plans or briefing documentation and, Monitoring of the implementation of measures( controls) identified in the risk register through audits/ inspections
3.6 Role of the Medical Department The medical department is responsible for: Participating in high level and detailed risk assessment exercise Advising on possible health hazards in relation to site, process or environment Outlining reasonable consequences of hazard exposure Recommending an appropriate risk level Advising on suitable control measures to reduce any risk.
Rev 1
Page 12
Page 13 of 68
4. RISK CATEGORIES 4.1 Event Risk Risk is a function of the likelihood of an event and the severity of its consequences. The risk form a particular event, the Event Risk is the HSE risk associated with a specific, discrete scenario (such as helicopter crash, transport accident, oil spill, etc.) in terms of effects on people, environment, assets and reputation and is usually assessed qualitatively. 4.2 RISKS TO PEOPLE (HEALTH AND SAFETY) Hazardous activities may result in injury, fatality or diseases both to those personnel engaged in work associated with the activity or to community. Risks to people may be divided into: a) Personnel Risk - a non-specific term covering the risk of injury, diseases or fatality to personnel from named tasks, or from routine or special operations. b) b) Individual risk- the total risk of death in a fixed time period (most often one year) to which a worker or a member of the community may be exposed from all credible hazards and sources of accidents c) Societal Risk- the risks to society arising from operations; the term society in this context include communities, residential areas. In general the public domain which is not connected with those operations. 4.3 Risk to Critical equipment and Facilities The risks to critical equipment protecting personnel from high hazard operations also need to be addressed. Such equipment and facilities may include Temporary Refuges (TRs) and electronic control system. 4.4 Environmental Risk The environmental risk is the risk to the environment from different activities that fall under the responsibility of the company. As a consequence, environmental risk management should take account of the exposure of the environmental resources to a variety of activities which constitute, as a whole, the sustainable development of the company itself. 4.5 Asset Risk The Asset Risk considers the probability of damage to companys physical assets, impacts on projects (failure to meet project objectives) and operations in terms of production loss, deferred production and costs of replacement of damaged structure and equipment due to any incidents
Rev 1
Page 13
Page 14 of 68
4.6 Reputation Risk Reputation risk is the risk to the reputation of a company as received by society at large, or sometimes more specifically its peers (other oil companies), its employees, its shareholders, the government or financial situations. The reputation of the company is linked and can be affected by HSE incidents or accidents of all types. Reputation consists of a combination of the characteristics, performance and behavior of a company and importantly for risk management, the perception of the company. Although reputation can be considered as an intangible asset, it is important because it can affect the ability of the company to establish or maintain business at all stages of the development cycle. Therefore, actual or perceived HSE impacts can damage the reputation/ the business of the company and in turn tangible company assets.
Rev 1
Page 14
Page 15 of 68
5.
High Level Risk Assessment should be conducted for all departmental activities. A risk screening exercise of all departmental activities is to be conducted on an annual basis. Nevertheless, major activities e.g, project modifications; seismic surveys, drilling, etc., require a separate risk screening and assessment prior to initiation. The line manager should plan the exercise by splitting the job into discrete sub-activities and identifying the required expertise in the team which will be doing the assessment.
This chapter provides a guide for the preparation of the Company-wide HSE Risk Reports, in compliance with the Eni E&P Divisions HSE Management System. The scope of this chapter is to provide guidance on how to prepare and update the Risk Report. In particular, it defines how risks should be classified, how frequencies and consequences of hazards should be qualitatively assessed and how the relevant mitigation plans should be prepared, and is used to support the formulation and overall ranking of the key risks faced by the Company. This process does not apply to projects, which are carried out under the control of the relevant IMS Risk Management process and procedure. 5.1 Formulating the Team In general, these high level risk assessment teams should be led by the department general manager and include the line manager and the line supervisor of the proposed activity, along with a member of the HSE department and medical department along with any other expertise that is thought necessary.
5.2 Instruction For The High Level Risk Register Preparation and Updating This Standard defines how the high level Company Risk Registers shall be prepared and updated; it is not intended to be used as the only reference in preparing detailed department/ site/ project risk registers. Seven Areas of Risk have been identified. Risks associated to each area shall be addressed, where applicable (see Table No. 1). Other risk areas and categories may be added to the list depending on specific local conditions.
Rev 1
Page 15
Page 16 of 68
2. Environment
2.1. Emissions
2.4. Production water 2.5. Biodiversity Legal Aspects (HSE related) HSE System Management Safety 3.1. Legal compliance 4.1. Documentation 5.1. Asset integrity 5.2. Operations Safety
E E, R R A P,A,E P
5.3.Emergency Response 5.4. Office Safety 5.5 Public Safety Health 6.1. Work Environment
Rev 1
Page 16
Page 17 of 68
A: Asset
R: Reputation
E: Environment
P: People
Risk Areas are numbered to allow a management summary to be developed in a structured manner, which shows where the key risks are located. Risk Ranking Matrices are used to rank the risks, according to the following process. Upon selection of the Risk Areas (step 1), the Risk Category (step 2) and the identification of potential areas of impact - P, E, A, R - (step 3), it is necessary to associate a frequency (or probability) of occurrence to the events being analyzed (step 4). This can be done by using the reference matrix in Annex B1. Two different methods can be adopted to enter the proper frequency, depending on whether or not such an event has already happened within the Company. In the first case (reactive method) the frequency category of the event can be identified by using Table 2. Frequencies corresponding to 0 and A are not covered, as these categories imply that the event has not happened within the Company, and therefore the second method should be used. Table (2) Annual Frequency Has occurred at least once in Company Has occurred several times in Company Has occurred several times per year in Company Has occurred several times per year in one location
Where there is no experience of any previous occurrence of the event being analyzed within the Company, the following method be used (predictive method), where the realization of the hazard under consideration is the result of potential failures or absence of relevant controls, which may be hardware (HC) or operational (OC) in nature. Table 3 shows how the level of risk is determined, based on the number of, and reliability of the controls.
Rev 1
Page 17
Page 18 of 68
Table (3)
In either case a frequency category 0 to E (for reactive), or 0 to C (for predictive), will be allocated to the event. This parameter, together with the severity category of the events consequences (identified in accordance with the guidance provided in the E&P Division HSE Risk Management Standard [Ref.1]), will allow the risk figure to be entered in the matrix of Annex B1 (step 5). The risk may fall in the red region (High Risk); in the yellow region (Medium Risk) or in the light blue region (Low Risk); the meaning of these regions is explained in section 7.2 of this document. The next step (step 6) requires that measures are identified that allow the High Risk events to be moved at least to the Medium Risk area and the Medium Risk events to be moved, if practicable, as close as possible to the Low Risk area. This can be done by taking measures which reduce the severity of the event or its probability of occurrence. An Action Plan shall be drafted to ensure that these measures are then implemented in a controlled manner. Examples of Hardware and Operational Controls are provided in Table 4 and Table 5 respectively.
Rev 1
Page 18
Page 19 of 68
Table (4) HARDWARE CONTROL(HC) HC1. Equipment 1. Item or assembly design 2. Item or assembly layout / footprint 3. Process control equipment 1. Explosion / Fire / Leak containment system 2. Pressure / Temperature / Fluids containment system 1. Emergency isolation system different from process / equipment control system 2. Emergency relief / disposal system 1. Active emergency equipment (e.g. fire fighting, standing-by emergency device) 2. Collective / Personal Protective Equipment 3. Escape, Evacuation and Rescue equipment
Rev 1
Page 19
Page 20 of 68
Table (5) OPERATIONAL CONTROL OC1. Work Instruction 1. Activity/Product/Service information (process, design, changes and risk data) 2. HSE rules for system of work 3. Start-up, shut-down, preventive maintenance manual 4. Procedure for non-routine / repetitive tasks (critical or driven by experienced errors or incidents) 1. Due diligence 2. Education/dialogue program 3. OH&MS (*) program 4. Inventory monitoring and reduction 5. Incentive scheme 6. Communication agreement 7. Audit / Review program 8 Regular inspections / monitoring program 9. Documentation and approval of changes 10.Community program 1. Standardised emergency action plan 2. Scenario-based Contingency Plan 1. Line manager responsibility to recognise/remove the hazard 2. Contractor responsibility to recognise/remove the hazard 1. HSE clauses in contracts 2. Training/Awareness 3. HSE Professional 4. Minimum level of staff experience at all staff changes (turn-over, shift etc.) 5. Assessment of people conduct and motivation
Page 20
Page 21 of 68
Risk Category: 6.2 Medical Emergency Potential area of impact: P Harm to People Severity: 4 potential for 1 PTD or fatality Has it already happened? Not within Company Frequency: B 2 barriers exist: HC4.3 (rescue equipment) and OC5.2 (Competent staff), but reliability is low (a maintenance program is not evident and a fit-for-purpose review has not recently been carried out) Risk: C-4 (Medium Risk) Once the risk has been evaluated, the mitigation programme can be set up, and the mitigation measures identified: Example No.1 To move the risk from the region B-4 to the region A-4 (at least), it is necessary to: Add a barrier (e.g. OC5.4: coverage of 24H with experienced emergency teams on shift). This example is included in the Risk Register Proforma in Appendix A1. 5.3 RISK REPORTING A Risk Report should be prepared and maintained by the company in line with the requirements outlined in Eni HSE Risk Reporting Procedure (Ref 2) A copy of the summary of Risk Report shall be sent to the Ieoc- HSE department manager by the end of June each year.
Rev 1
Page 21
Page 22 of 68
6.
Task Related Risk Assessments include specific activities e.g scaffold erection, material handling, loading/offloading, transportation etc. The line manager in this case should formulate a team led by the supervisor of the specific activity and including a member of the HSE department along with personnel specific to the task if deemed necessary. The following chapter of this procedure will focus on the risk management process and on how to perform risk screening and assessment. 6.1 Risk Management process: The Risk management Process (see figure 1) is a continuous, iterative process, which typically consists of four major tasks: 1 2 Identification and definition of hazards and their potential effects. Evaluation of the risk arising from identified hazards in terms of evaluation of the likelihood/ probability/ frequency of occurrence of accident sequence and evaluation of the severity of the consequences. Assessment of tolerability of risk to people, environment, assets and reputation by comparing risk level with the relevant tolerability criteria. identification of risk reduction measures needed to reduce the likelihood/ probability/ frequency (prevention) and/ or the consequence of an accident (control and mitigation)
3 4
Rev 1
Page 22
Page 23 of 68
Rev 1
Page 23
Page 24 of 68
Risks arise from the interaction of people, equipment, materials and the work environment. The intent of the risk screening and assessment process is to systematically identify the hazards, their probability of occurrence and their potential consequences, screen and assess the risks, develop and implement control measures which minimize the risk, and record the findings of the process.
(a)
What can go wrong and how often? i.e. Identify the hazards and the likelihood of occurrence. What would happen if something did go wrong? i.e. Identify the consequences.
(b)
The product of the answer to these first two questions establishes the initial potential risk from the activity.
(c)
What can be done to prevent or minimize this risk? i.e. Identify and implement the control measures needed.
The Risk Screening and Assessment process consists of five essential steps. Identify the Hazards Evaluate the Risk Analyze the Risk Reduce/Control the Risk Record and Review
Each step of the assessment process should be completed before going onto the next. 6.2 Identify the Hazards This is the starting point for the risk assessment and requires consideration of all the tasks that are likely to be carried out. In order to assess the risks associated with the tasks, a manageable level of detail is required and this may require the task to be broken down into discrete steps.
Rev 1
Page 24
Page 25 of 68
6.2.1
Definition of Tasks
Each task should be identified in terms of: Activities Use of plant and equipment Use of materials/substances Workplace Procedures used
This should help to build up, in time, an inventory of tasks that Departments conduct and the type of work carried out in the different workplace areas. 6.2.2 Record the Hazards
Once all the tasks have been identified, an inventory should be drawn up, which lists all the tasks carried out in each workplace area. These tasks may be considered as routine, non-routine or generic, and should be fed forward for risk assessment. To ensure that all hazards are identified at this stage, typical risk screening key words are listed in Appendix A2 and hazard identification checklist tables are provided for guidance in Appendix A3. The checklists given are not exhaustive and should be updated each time a new hazard is identified. Look for what could reasonably be expected to cause harm. Ignore the trivial and concentrate on significant hazards, which could result in serious harm or affect several people. Manufacturer instructions and material data sheets can help put risks in perspective. 6.3 Evaluate the Risks Decide who may be harmed and how. Think also about people who may not be at the work place at the time, e.g. cleaners, visitors, contractors, and members of the public, etc. Is there any chance that they might be harmed by the activities? Consider the probability of realization of the hazards. Typical factors which may affect the analysis of probability include:
Rev 1
The number of times the situation occurs; Duration of exposure; Quantities of materials involved; Environmental conditions, e.g. lighting, temperature; Competence of people involved;
Risk Screening and Assessment Procedure
Page 25
Page 26 of 68
Condition of equipment.
Estimate the hazard effects, i.e. the consequence of the risks arising from the hazards. The assessed severity rating of the hazard effects, with or without any control measures in place, should be entered on the Risk Assessment form as a number using the Consequence (Severity) Rating shown in each matrix. 6.4 Analyze the Risks Analyze the initial Risk Rating (Risk Rating With Existing Control Measures) by multiplying the consequence number by the likelihood number/ letters, to provide a risk rating (or ranking) for each hazard. This product of these two ratings should be entered in the Risk column on the relevant Risk Assessment Matrix (Appendix B). The values in the Risk column provide an indication of priority and of the extent of the risk without any specific control measures. The objective of this process is not to arrive at a certain number but to provide a systematic method of ensuring that consequence and likelihood ratings are analyzed carefully and a record made of the analysis for future reference and review. The next step is to consider the existing control measures and additional control Measures needed to control, reduce and minimize the risk for each identified hazard. The preferred hierarchy for the control measures is described in Section 6.5 below. The control measures may address the consequence, the likelihood or both. The required control measures for each hazard should be recorded alongside each hazard on the Risk Assessment Form (Appendix A7). Appendix A4 provides guidance on the type of control measures that can be employed for the various hazards. Residual Risk to assess the residual risk that remains with the control measures in place, new hazard effect (consequence) and likelihood ratings are selected from the relevant matrices, with the inclusion of the control measures. The product of these two ratings provides a measure of the Residual Risk and completes the risk analysis stage. The information provided in the Residual Risk box is used in the next stage of the risk assessment to evaluate whether the risk is adequately controlled or not. Risk Evaluation - this is the final step in the risk assessment process and will require the assessor to decide if the hazards identified have been controlled to a suitable level. The risk analysis stage took into account the control measures currently applied to the hazard and, therefore, the result of the analysis indicates the amount of risk that remains, or the residual risk.
Rev 1
Page 26
Page 27 of 68
From this analysis, the risk matrices shown in Appendix B indicate whether the residual risk of each hazard is:
Broadly acceptable and generic control measures are required aimed at avoiding deterioration.( Continuous improvement) Tolerable only once a structured review of risk-reduction measures has been carried out and implemented (Risk reduction measure) Not acceptable and risk control measures are required to move the risk figure to the previous regions(Intolerable risk)
Record the results in the final (right hand) column of the Risk Assessment Form. This risk rating assessment will assist in deciding priorities for action and in deciding the authorization levels for the work commensurate with the risk. In general, high risks may require the provision of considerable additional resources involving special equipment, training, high levels of supervision, and consideration of the most effective methods of eliminating or controlling hazards. Some situations may require special consideration, including: if the task is new, complex or unfamiliar if the task is unusual or occasional if it is impractical to comply with normal industry standards if previously used safeguards are not appropriate for this activity
There may be a need to consider alternative engineering solutions to eliminate the risk from the task, if no suitable combination of control measures can be found, which would reduce risks to an acceptable level. Lower level risks may be considered as acceptable but actions should still be taken to try to reduce these risks further if possible within reasonable limits. 6.5 Reduce / Control Risk
Use the following hierarchy to reduce risks to acceptable levels: Elimination or Substitution Eliminate the hazard; e.g. use of sodium hypochlorite solution instead of free chlorine gas for disinfectant purposes. Hazard Reduction
Rev 1
Page 27
Page 28 of 68
Reduce the hazard with an alternative; e.g. use flame retardant scaffold boards where hot work may be taking place.
Segregation Isolate the hazard from people; e.g. fencing of excavations, machine guards. Control Control the hazard by introducing suitable measures, which may be in either or both of the following two categories; Personal controls Organizational controls competence based (e.g. well trained staff) rule based (e.g. adherence to work procedures)
Controls should be introduced using the following preferred sequence: (a) (b) (c) (d) Procedures, such as permit to work, emergency response, etc. training and instruction supervision maintenance
Mitigation Provide personal protective equipment (PPE) as necessary, e.g. hard hats, boots, gloves, harnesses to prevent falls from height, etc.
When considering what control measures are already provided, or need to be provided, to control or reduce the risk, the risk assessor must take into account the possibility of control measures not being implemented because of human error, lack of maintenance, difficulty in compliance, complexity of instructions, etc. It is essential to discover how the task is actually carried out and base the assessment on this, rather than assessing the likelihood on how the task is supposed to be carried out. 6.6 Record the Findings For each of the more significant hazards identified, e.g. fire, electric shock, etc, write down the control measures to be used to manage the risk from the hazard, e.g. for fire, controls including evacuation and emergency response procedures, fire extinguishers, etc.
Rev 1
Page 28
Page 29 of 68
Once the risk assessments have been completed, a Work Plan should be prepared for the more complex activities. A sample plan is indicated in Appendix A6.
6.7 Monitor and Review If there is any significant change to the hazards or consequences, the risk assessments should be revised and the data base updated. Risk assessments should be reviewed annually.
Rev 1
Page 29
Page 30 of 68
7.1 EVENT RISK SCREENING MATRIX A preliminary measure in the global assessment of risk is the Event Risk Screening Matrix. This provides definition of consequences and a range of qualitative criteria to estimate probability or frequency for risks to people, the environment, etc. The meaning of the terms in the matrix, such as continuous improvement, etc is explained below in section 7.2. This matrix is mandatory in the identification of high level HSE Risks during risk screening (Major Hazard Analysis, Environmental Impact Assessment etc.). This matrix provides the basis to identify significant risks or areas of risk and prioritise further assessment and management efforts. Risk screening matrices are suitable to be linked with other means of assessing tolerability, especially when assessing human risk in high hazard scenarios, usually connected with safety accidents. 7.2 Risk Matrices and Criteria Risk matrices also provide a means of assessing risk in single areas of concern such as to the environment. The risk matrix is a tool, inspired to the ISO standard 17776, which shall be used as a background for setting risk tolerability criteria. When used as a qualitative matrix, it considers events that have been experienced by the Company or the Company may expect in case of deterioration of such events. In case Company history/experience is considered not consolidated (in terms of No. of plants / operations), reference shall be made to E&P industry in the same geographical area. The matrix axes, consistent with the definition of risk, are Consequences and Likelihood / Probability or Frequency. The vertical axis represents the measure of the potential consequences of credible scenarios. A scale of consequences from 1 to 5 is used to indicate increasing severity. The potential consequences of credible scenarios are considered as consequences that could have resulted from the released hazard if circumstances had been less favorable. The horizontal axis represents the measure of likelihood / probability / frequency of the occurrence of a hazardous event. Such a scale is defined in general terms from 0 to E on the basis of historical evidence or experience that such consequences have materialized within E&P industry or the Company. The risk matrices included in Appendices, are separated in three regions that identify the limit of risk tolerability; such regions are:
Rev 1
Page 30
Page 31 of 68
1. Continuous improvement
The level of risk is broadly acceptable and generic control measures are required aimed at avoiding deterioration.
The level of risk can be tolerable only once a structured review of riskreduction measures has been carried out (where necessary, the relevant guidance from the local Authorities should be adopted for application of ALARP). ALARP is a concept that applies well only to personnel risk. For environmental risk the concept of Best Practicable Environmental Option (BPEO) is more frequently applied. Asset risk is often most easily judged on a basis of costs and benefits alone.
3. Intolerable risk
The level of risk is not acceptable and risk control measures are required to move the risk figure to the previous regions.
Depending on the position of intersection of a column with a row in the matrix, it is possible to classify the risk. For the same scenario (grouping all hazardous events which have the same severity of consequences), a resulting likelihood / probability / frequency is assigned or calculated, such that the risk can be classified. The classification is repeated for all the risk areas (People, Environment, Assets and Reputation). The overall risk of a hazard is classified according to which among consequences has the highest rating. 7.2.1 Event Screening The Event Risk Screening Matrix is reported in Appendix B1 and provides definition of consequences and a range of qualitative criteria to estimate likelihood / probability or frequency. This shall be used in the identification if high level HSE risk during risk screening. This matrix provides the basis to identify significant risks or areas of risk (e.g. transportation risk) and priotrize further assessment and management effort. Should the qualitative risk figure be intolerable, either a quantitative risk analysis (QRA) or the adoption of fit- for purpose and more effective risk reduction measures shall be required. 7.2.2 Personal Risk (task)
When considering Occupational Health and Safety Risk Assessment related to specific tasks, a qualitative approach is preferred, since it is usually based on past experience. The Personnel (Task) Risk Assessment Matrix is based on the document Task Risk Assessment Guide - A step change in safety (Ref 10). The occupational health risk (occupational illness or injury) is usually based on exposure to hazardous agents (physical, chemical, etc.); this is covered by specific
Rev 1 Risk Screening and Assessment Procedure
Page 31
Page 32 of 68
Minimum Health Standards (Ref. 11). For more details about the occupational health risk, please see the Petrobel/ Health Risk Assessment procedure that will be in Petrobel OHMS manual. The Risk to personal Assessment Matrix is reported in Appendix B2. 7.2.3 Risk to people (E&P Operation) Risk to people induced by the E&P operations can be assessed qualitatively and quantitatively. When performing Quantitative Risk Assessment (QRA) as a forecast of possible, future events, fatalities have to be considered with care, avoiding a deterministic approach; in this context, for example, to evaluate the risk of fatality, it is necessary to consider not only the frequency (or probability) of the accidental load (in terms of radiation from a fire, overpressure from an explosion, toxicity from a toxic release etc.) but also the vulnerability of humans to this load. The Risk to People (E&P Operations) Assessment Matrix is reported in Appendix B3. 7.2.4 Environmental Risk The environmental risk matrix has been derived from a document prepared by the OLFs environmental committee for oil spill to sea (Ref 12) and has been extended to onshore activities too; it is reported in Appendix B5. This matrix essentially provides an expansion of the definitions of environmental consequences included in the Event screening matrix. As far as consequences are concerned, a list of options is shown; they are not to be used contemporarily; for example, in sensitive areas, the option based on amount of spilled oil is not suitable, and is preferable to adopt options related to protection of fauna and flora. 7.2.5 Asset Risk The asset risk matrix is reported in Appendix B6. Even in this case, different options are shown to describe consequences, based on times and costs for repair. As far as probability / frequency is concerned, both quantitative and qualitative criteria are shown, where the latter is based on reliability of technical / operational protection systems, such as temporary refuges, control systems etc. The reliability is expressed in terms of minimum number of failures needed for the hazard to be realized (higher the number of failures, higher the number of barriers against the hazardous event). 7.2.6 Reputation Risk Reputation is essentially an intangible asset. However, HSE risks can have a significant impact on reputation with serious consequences to the Company. It is therefore advisable that the reputation aspect of any risk is properly evaluated against the criteria in Appendix B7.
Rev 1
Page 32
Page 33 of 68
7.3 Risk management Options For any given risk there are four basic management approaches
Take/Accept the risk is tolerated in its basic state with no active controls being applied Terminate the factors which create the risk are eliminated (eg replacement of dangerous chemicals) Treat/Manage apply controls in the form of hardware, software, procedures with the effect of reducing the frequency or consequences of the event Transfer Insure or outsource.
Rev 1
Page 33
Page 34 of 68
6.0
REFERENCES
1.
Eni E&P Division HSE IMS HSE Standard: HSE Risk Management Doc. No. 1.3.0.03 (31/07/2004)
2. Eni HSE Risk Reporting Procedure- DOC. No. 1.3.0.05 (20-02-2006) 3. HSE Risk management and PETROBEL HSE IMS. 4. ISO 14001. 5. OHSAS 18001. 6. ISO 9000 2000. 7. ISO 17776 8. PETROBEL Work Precautions Procedure, PETROBELHSE/Office/26, Rev 0, Feb 2004. 9. Environmental Legislation No 4 of 1994. 10. Task Risk Assessment Guide - A step change in safety 11. 12. MHS: Eni-E&P Division Document Doc. N.1.3.2.11 Minimum Health Standards Main document and 8 attachments: OLF (1999) "OLF recommended method for environmental risk analysis "
Rev 1
Page 34
Page 35 of 68
APPENDICES
APPENDIX A APPENDIX A1 APPENDIX A2 APPENDIX A3 APPENDIX A4 APPENDIX A5 APPENDIX A6 APPENDIX A7 HIGH LEVEL RISK REGISTER PERFORMA RISK SCREENING KEY WORDS HAZARD CHECKLISTS CONTROL MEASURES GUIDANCE RISK ASSESSMENT EXAMPLE HSE WORK PLAN EXAMPLE RISK ASSESSMENT FORM
APPENDIX B APPENDIX B1: APPENDIX B2: APPENDIX B3: APPENDIX B4: APPENDIX B5: APPENDIX B6: APPENDIX B7: APPENDIX B8: The Event Risk Screening Matrix. The Risk to personal Assessment Matrix. The Risk to People (E&P Operations) Assessment Matrix. Social Responsibility Matrix The Environmental risk matrix The Asset risk matrix The Reputation risk matrix Social Responsibility
Rev 1
Page 35
Page 36 of 68
APPENDIX A1
ConsequencesImpact
Area of Impact
1. Social Aspects
1.1 Communities relations/ impacts Concerns on indigenous groups and interruption to oil activities; Organised environmental lobbyists; Disparity between oil workers and others or fuel price sensitivity promote civil unrest. Working hours; Shifts / rotation; Morale; Language barriers (nationals and expats). People Reputation Assets Reputation Assets OC2.2.Education/ dialogue program: self help policy; reduction of reliance on company handouts. OC2.I0. Community program: sustainable community projects. None B 4 M No. and type of community projects; Community related incident/illness reporting; Local content (salaries; local goods and services expenditures) Age, seniority and job based accident and illness statistics Personnel turnover OC1.4 Work instructions include repetitive tasks; OC5.2 Staff covered by competency appraisal; OC2.5 Incentive scheme. YES L None N/A M
1.2
Workforce / ethics
3 H
2. Environment
2.5 Biodiversity Change in water, air and soil/ sediment quality; Soil disturbance; Upsetting nutrient balances and microbial activity in the soil. Environment Reputation None E 4 H HC1.2 Assembly layout includes habitat management; OC2.8 Regular monitoring program; No. of specialists (biologists) in the OC2.1 Due diligence organization approach: EIA include site clean-up and rehabilitation. Environmental Quality Indicators (fishery, etc.) YES L
Rev 1
Page 36
Page 37 of 68
Event ID
Risk Category
ConsequencesImpact
Area of Impact
Measures to be implemented Performance Indicators Recommended Measures (*) Action assigned Residual Risk
3. Legal Aspects (HSE- related) 3.1 Legal Compliance Lack of legislation; Conflicts between Gov. and NGO on sensitive areas; Lack of agreements with Gov / National Company for environmental issues Reputation None B 2 L No. of prosecutions/ fines Updates of legal register OC2.8 Continuous monitoring of new legislation YES L
5. Safety 5.2 Transportation risk (see example No. 1 in the text) Helicopter distress / crash People HC1.1. Assembly design covered by functional requirements. OC5.1. Qualified Contractor as per HSE clauses. HC1.2. Assembly layout as per functional requirements. HC3.1. Emergency isolation system (circuit breaker) properly tested. B 5 H Near Miss Reporting Annual HSE Audit of Helicopter Service Co. HC4.1require dual engine helicopter Carry out a fit-forpurpose audit to Contractors organization and premises OC2.8 regular inspection program and record of malfunctions. YES L YES M
5.4
Electrocution
People
Rev 1
Page 37
Page 38 of 68
Event ID
Risk Category
ConsequencesImpact
Area of Impact
Measures to be implemented Performance Indicators Recommended Measures (*) Action assigned Residual Risk
6. Health 6.2 Unsuitable medical emergency response for process related casualties (see example No. 3 in the text) Suffocation (chemicals) People HC4.3. Rescue equipment available but a maintenance program is not evident. OC5.2. Medical staff covered by competency appraisal, but a fit-forpurpose review has not been recently conducted. B 4 M Near Miss Reporting EER exercises No. of process high potential casualties No. of casualties suitably rescued. OC5.4 Minimum level of staff emergency experience at staff changes, in order to assure 24H coverage in emergency. YES M
Rev 1
Page 38
Page 39 of 68
APPENDIX A2 Leadership
Health
Substances Asbestos Noise Poisons Carcinogens Stress Biological Wild animals Sewage
Safety
Fire Explosives Road ravel Air travel Sea travel Drowning Electricity Hot work
Policy Commitment Communications Top-down Elitism Standards Guidance Targets Information Confined Lessons Planning Organization Control Responsibility Feedback Openness
Food/Water Ergonomics Lighting Vibration VDUs Radiation Hot/Cold Remote Terrain Long hours
Spaces Heights Excavation Diving Rigging Hoisting Scaffolding Power tools Pressure Steam Machinery Guarding Purchasing
Environment Weather Seasons Waste Disposal Energy/Resource Emissions Discharges Water EIA/Regulations Spills Permits Geography Local sensitivities Water intake Conservation Leisure History Flora/Fauna
Engineering/Change Change Modifications Corrosion Erosion Stress Metal fatigue Structure Quality Design Construction Maintenance Specifications Standards Inspection Documentation Technical authority
Contractors Contract type Contractor quality Experience QA/QC Planning Qualification Schedule Personnel Communications Technical Number Sub-contractor
QA/QC Purchase orders Specifications Receipt Inspection Storage Handling Segregation Inventory Critical parts Spares Hazardous substances Temporary/Casual HSE equipment Discipline Scrap Enforcement Transportation Monitoring Insurance Audit Local purchasing
Rev 1
Page 39
Page 40 of 68
APPENDIX A2
Operating/Technical Simultaneous Start up Shut down Isolations One-off Unusual Assemble Dismantle Specialist Expert Shift changes Overhaul Workover Procedures Practices Instructions Guidelines
Emergency Fire/Explosion Spill/Leak Dispersion Structural Well control Power Collision Weather Earthquake Flood Landslide Communications Epidemic Medevac Heart attack Fatality Media Support Lost
Monitoring Audit Auditor Technical Limits Permit Review Inspection General Critical Hygiene Environment Analysis Loss Statistics Reporting Verification Follow-up Feedback
Security Terrorism Bomb Threat Theft Fraud Lighting Camera Hi-jack Politics Religion Revenge Sabotage Invasion War Riot Weapons Abduction Hostage
Extortion
Facilities
Rev 1
Page 40
Page 41 of 68
APPENDIX A3: HAZARD CHECKLISTS 1. 2. 3. 4. 5. 6. 7. Plant and Equipment (including non-powered plant and hand tools) Materials and Substances Place of Work The Working Environment The Method of Work Work Organization Hazards - Other Types HAZARD CHECKLIST - 1 Hazards Associated with Plant and Equipment (including non-powered plant and hand tools)
Category Thermal
Type of Harm Burns Fires Scalds Frostbite Ionising: - Burns - Cancers - Blood disorders - Sickness Non-ionising: - Burns - Melanomas - Cataracts - Static shock - Induced body currents Hearing loss Deafness Tinnitus Vibration white finger Whole body effects Circulatory disorders Crushing
Examples of Hazards Hot / cold surface: Blow torch Welding flame/arc Refrigerant Steam X Rays Alpha or Beta Rays Naturally occurring radioactive material Low Scale Activity Neutrons Micro wave Radio frequency Laser Ultra violet Infra red Electromagnetic (transformers, power cables) Machine tools/equipment Hand tools Compressors Pneumatic tools/equipment Pneumatic drill Operation of machinery Crane overload Chain sling Eye bolt overload Scaffold overload Poor layout of work station Poor furniture Poorly sited screens Illegible text
Radiation
Vibration
Rev 1
Page 41
Page 42 of 68
Rev 1
Page 42
Page 43 of 68
Flammable substances
Burns Dehydration
Burns
Acute: - Respiratory irritation - Chemical asphyxiation - Nervous system effects - Narcotic effects - Damage to eye Chronic :- Anaemia - Leukaemia Acute: - Skin, eye, - Respiratory irritation - burns - ulceration - tissue destruction Acute: - Skin, eye and respiratory irritant: - dermatitis
Corrosive Material
Examples of Hazards Hydrocarbons Timber stack (e.g. scaffold board store) Paper store Grease Oily rags Plastic foam Hydrocarbon gases, condensate, oils Bottled hydrocarbon gases (e.g. acetylene) Lubricants Diesel Methanol Paint/thinners/solvents Hydrogen (e.g. battery room) Aromatic hydrocarbons (benzene, toluene, etc) Explosive material Pyrotechnics (e.g. flares) Detonators Hydrogen Sulphide Benzene Methanol Isocyanates Corrosion Inhibitors Dust Paints Degreasing Solvents Anaerobic sealant Primers Sulphuric acid Caustic soda Hydrochloric acid Bleaches
Irritant Material
Rev 1
Page 43
Page 44 of 68
HAZARD CHECKLIST 2
(continued)
Type of Harm Acute: - respiratory and skin allergic reactions after sensitisation
Examples of Hazards Isocyanates Gluteraldehyde (biocide) Terpene Welding/soldering fumes Asbestos Polyaromatic hydrocarbons Used engine oil Nitrogen Carbon dioxide Argon Bacterial Viral Fungal Biological dusts (flour, hardwood) Swarf Rough timber Concrete blocks Molten metal Frozen food
Possible Carcinogens
Chronic: - skin, lung cancers - asbestosis, mesothelioma - dermatitis Acute (suffocation) and chronic effects on health Acute: - Legionnaires disease - gastro-intestinal disorders - food poisoning Chronic: - asthma Cuts, abrasions Burns, frostbite
Asphyxiants
Biological
Contact
Rev 1
Page 44
Page 45 of 68
Category Access/Egress
Work at height
Falls
Striking against Fall into substances: - Drowning - poisoning - suffocation Entrapment during escape, eg from fire Fatality, injury
Examples of Hazards Damaged floors Trailing cables Oil spills Water on floors Ice Debris Sloping surface Uneven steps Changes in floor level Fragile roof Edge of roof Edge of mezzanine floor Work on ladder Erecting scaffold Hole in floor Low headroom Sharp projections Tank Sump Work over sea Locked exits Obstructed egresses Long exit route Motor vehicle Air Marine Rail Pedestrian Lightning Flash flood Earthquake
Emergencies
Transport
Natural Hazards
Injury Illness
HAZARD CHECKLIST - 4
Rev 1 Risk Screening and Assessment Procedure
Page 45
Page 46 of 68
Category Light (NB : also increases risk of contact with other hazards) Temperature Eye strain Arc eye Cataracts
Type of Harm
Examples of Hazards Glare Poor lighting Stroboscopic effect Arc welding Molten metal Cold room Outdoor work Hot weather Cold weather Wind chill factor Work in rain, snow, etc. Ambient Noise > 85 dB(A) Machinery noise Relief valve noise Work in tank Chimney Unventilated room Vessel Silo Fumes Odours Tobacco smoke Extreme (high/low) humidity
Heat stress Hypothermia Sunburn Melanoma Hypothermia Hearing loss Deafness Tinnitus Asphyxiation
Noise
Confined space
Ventilation
Examples of Hazards Lifting Lowering Carrying Pushing Pulling Hot / Cold Loads Rough Loads Live Loads - Animal / Person Keyboard work Using screwdriver Using hammer and chisel Production line tasks Seated work Work above head height Work with display screen equipment Work at floor level
Repetitive Movement
Posture
Muscle strains/ sprains Back pains Work related upper limb disorders Stress
Rev 1
Page 46
Page 47 of 68
Category Contractors
Type of Harm Injuries and ill health to employees by contractors. Work Injuries and ill health to contractors' employees by work in premises
Examples of Hazards Work above employees Use of harmful substances Contractors welding Process fumes Services (e.g. underground electricity cables) Stored hazardous materials Monotonous work Stress Too much work Lack of control of job: - lack of supervision - lack of information - lack of instruction - lack of training - inadequate monitoring Work too demanding/high work rate Communication Provision of unsuitable equipment Trailing cables Traffic/plant movement Obstructions to pedestrians Work above public
Organisation of work
Injuries to employees
Type of Harm Bite Sting Crushing Kick Ill health Bees Dog Horse Camel Scorpion Fleas Mosquito Snake
Examples of Hazards
Attack by people
Criminal attack Angry customer Drunken person Drug abuser Mentally ill person Page 47
Rev 1
Page 48 of 68
APPENDIX A4
Control measures should be applied as described in Section 5.4, using the hierarchy: Elimination or Substitution Eliminate the hazard; e.g. use of sodium hypochlorite solution instead of free chlorine gas for disinfectant purposes. Hazard Reduction Reduce the hazard with an alternative; e.g. use flame retardant scaffold boards where hot work may be taking place. Segregation Isolate the hazard from people; e.g. fencing of excavations, machine guards. Control Control the hazard by introducing suitable measures, which may be in either or both of the following two categories; Personal controls Organizational controls competence based (e.g. well trained staff) rule based (e.g. adherence to work procedures)
Controls should be introduced using the following preferred sequence: (a) (b) (c) (d) Procedures, such as permit to work, emergency response, etc. training and instruction supervision maintenance Mitigation Provide personal protective equipment (PPE) as necessary, e.g. hard hats, boots, gloves, harnesses to prevent falls from height, etc.
The following tables describe typical control measures and are not exhaustive.
Page 48
Page 49 of 68
Contents 1. 2. 3. 4. 5. 6. 7. 8. 9. 10. 11. 12. 13. 14. Health Hazards Falling/Swinging/Dropping Loads Electricity Noise/Vibration Emergency Equipment Failure Machinery/Equipment Explosion Fire Human Error Entry into Confined Space Pressure Ionising Radiation Slip/Trip/Fall
Rev 1
Page 49
Page 50 of 68
1.
1) 2) 3) 4) 5) 6) 7) 8) 9) 10) 11) 12) 13) 14) 15) 16) 17) 18) 19) 20) 21) 22) 2. 1) 2) 3) 4) 5) 6) 7) 8) 9) 10) 11) 12) 13) 14) 15) 16) 17) 18) 19)
Control Measures for Health Hazards Atmospheric Monitoring Barrier Cream Breathing Apparatus Detailed COSHH Assessment Enclosure/Segregation of Contaminant Ergonomic Assessment Forced Extract Ventilation Information Instruction Local Exhaust Ventilation Manual Handling Assessment Medical Surveillance/Screening Minimised Fume/Dust/Vapour Production Natural Ventilation Protective Clothing Regular Cleaning/Decontamination Respiratory Protective Equipment Restricted Workplace Eating / Drinking / Smoking Restricted/Controlled Access to Workplace Substituted Safer Material Supervision Training Control Measures for Falling/Swinging/Dropping Loads Additional Suspension/Support Devices Adequate Lighting Banksman Bumper Protection Competent Lifting Operation Competent Rigging Failure Mode Effect Analysis (FMEA) Fall Restraint Device Load Monitoring Maintenance Programme Movement Restraint Device Overhead Protection Overload Warning System Periodic Examination/Testing/Inspection General Issue Personal Protective Equipment Relocation of Vulnerable Equipment / Depressurization Restricted Access to Safe Distances Safety Watch Warning Notices
Rev 1
Page 50
Page 51 of 68
3. 1) 2) 3) 4) 5) 6) 7) 8) 9) 10) 11) 12) 13) 14) 4. 1) 2) 3) 4) 5) 6) 7) 8) 9) 10) 11) 12) 13) 5. 1) 2) 3) 4) 5) 6) 6. 1) 2) 3) 4) 5) 6) 7) 8) 9) 10) 7. 1) 2) 3) 4) 5) 6) 7)
Rev 1
Control Measures for Electricity Anti-static Classification of Hazardous Areas (Flammable Gases and Vapors) (Ref BS5345) Earth Monitoring Equipment & Fittings Constructed, Installed & Maintained for use in Potentially Explosive Atmospheres Fusing Insulation Isolating Transformer Isolation Phase Separation Residual Current Device Permit to Work/Limitation of Access Shielding Voltage Reduction Work Carried Out by Competent Person/s Control Measures for Noise/Vibration Audiometry Design Out Noise/Vibration from Equipment Design Out Noise/Vibration from Task Detailed Noise/Vibration Assessment Enclose Noisy/Vibrating Equipment Engineering Controls Hearing Protection Zone Noise/Vibration Exposure Monitoring Noise/Vibration Survey Restricted Access to Noisy/Vibrating Areas Selection and use of Appropriate Hearing Protectors Warning Signs Work Patterns e.g.: Defined Spells of Exposure Control Measures for Emergency Adequate Planning Competent Person/s in Charge Platform PA and Alarm System Emergency Response Procedures Drills/Exercises/Training Provision of Adequate EER Facilities Control Measures for Equipment Failure Appropriate Materials (Fit for Purpose) Certified Equipment/Materials Design Diversity Design Redundancy Failure Mode Effects Analysis Fault Tree Analysis HAZOP Planned Preventative Maintenance Programme Operational Monitoring Regular Inspection/Testing Control Measures for Machinery/Equipment Control System Interlocked Guarding Emergency Stop Device Fixed Guarding Planned Preventative Maintenance Programme Mechanical and Electrical Isolation Permit to Work System General Issue Protective Equipment
Risk Screening and Assessment Procedure
Page 51
Page 52 of 68
8) 8. 1) 2) 3) 4) 5) 6) 7) 8) 9) 10) 11) 12) 13) 14) 15) 9. 1) 2) 3) 4) 5) 6) 7) 8) 9) 10) 11) 12) 13) 14) 15) 16) 17) 10. 1) 2) 3) 4) 5) 6) 7) 8) 9) 11. 1) 2) 3) 4) 5) 6) 7)
Rev 1
Warning Signs/Notices Control Measures for Explosion Electrical Equipment and Fittings Constructed, Installed and Maintained in Accordance with BS5345 Blast Wall/Enclosure Deluge on Confirmed Gas Detection Earthing/Earth Monitoring Exclusion of Ignition Sources Explosion Venting/Relief Inert Gas Blanketing Leak/Spillage Detection - Portable Gas Monitor Leak/Spillage Detection - Gas Detection System Purging Security of Access to Explosive Materials Permit to Work System Use of Non-Sparking Tools Safety/Fire Watch Pressure Relief Panels Control Measures for Fire Automatic Fire Doors Classification of Hazardous Areas Ref. BS5345 Containment/Segregation of Flammable Materials Emergency Shut Down System Exclusion of Ignition Sources Exclusion of Oxygen Sources Fire Extinguishing Protection Systems - Fire, Water, CO2, Halon Passive Fire Protection Fire Watch Fire and Gas Detection System Depressurization/ Blowdown System Inspection/Certification of Premises Self-Closing Fire Doors Portable Fire Extinguishers Portable Gas Monitors Use of Fire Blankets Permit to Work System Control Measures for Human Error Adequate Rest Periods Audit Performance Defined Competence Level Defined Performance Standard Defined Responsibilities Adequate Information Adequate Instruction Adequate Supervision Adequate Training Control Measures for Entry into Confined Space Atmospheric Monitoring of Confined Space Breathing Apparatus Lifeline Safety Watch Forced Ventilation Natural Ventilation Equipment Positively Isolated (Mechanical/Electrical)
Risk Screening and Assessment Procedure
Page 52
Page 53 of 68
8) 9) 10) 12. 1) 2) 3) 4) 5) 6) 7) 13. 1) 2) 3) 4) 5) 6) 7) 8) 9) 10) 11) 12) 14. 1) 2) 3) 4) 5) 6) 7) 8) 9) 10) 11) 12)
Adequate Lighting Safe Access/Egress Permit-To-Work System Control Measures for Pressure Appropriate Design/Construction Materials Barriers at Safe Distance Certified Equipment/Materials Periodic Inspection/Testing Examination Pressure Monitoring Overpressure Protection e.g.: PSV, Bursting Disc, Pressure Relief Panels Safe Working Pressure Specification Control Measures for Ionising Radiation Competent Personnel Dose Monitoring Health Surveillance Local Rules Personal Protective Equipment Adequate Training Appointed Radiation Protection Supervisor Permit to Work System Warning Signs Area Cordoned Off (Three Dimensionally) Non-essential Personnel Cleared PA Announcements Control Measures for Slip/Trip/Fall Adequate Lighting Appropriate Footwear Openings Covered Edge Protection/Rails/Barriers Fixed Platform/Ladder Good Housekeeping Harness, Line and Attachment Non-slip Surface Periodic Cleaning Periodic Inspection General Issue Personal Protective Equipment Warning Notices.
Rev 1
Page 53
Page 54 of 68
APPENDIX A5
NO. HAZARD CONSEQUENCE EXISTING CONTROL
EVALUATION
SEVERITY LIKELIHOOD
RISK 5C Conduct more frequent firewater tests Ensure ESD systems regularly tested in accordance with specification
RISK 3C The control measures must be fully maintained to keep them as reliable as possible and reduce human error
Fire of oil Major damage to producing well assets, potential for multiple fatalities and serious injuries
Reliable ESD system, Reliable fire detection system Reliable FF system Operating procedure in place as Permit to Work System
Extensive damage Preventive (the separator can Maintenance System blow) and and inspections of possibility of separators and multiple fatalities equipment (PSV, (the separators ESD, instruments etc.) are located on the Reliable ESD system, platform D10 Reliable fire detection manned all the system time)
5C
3C
Rev 1
Page 54
Page 55 of 68
NO.
HAZARD
CONSEQUENCE
EXISTING CONTROL
Reliable FF system Operating procedure In place as Permit to Work System Major damage to Reliable ESD system, Fire propagate assets, potential reliable fire detection from MWP4 to for multiple system and reliable MWP5 or vice fatalities and FF/Cooling system to versa serious injuries reduce the thermal These Jackets are radiation in case of fire close to each Operating procedure other in place as Permit to Work System
REQUIRED RISK ANALYSIS ADDITIONAL (WITH EXTRA CONTROL C ONTROLS) MEASURES Enhance training of firefighting personnel Enhance communications between platforms Exchange information on Permits to Work prior to authorization Develop joint Emergency Response Procs Review extent of implementation of Permit To Work System 3 C 3C
EVALUATION
5C
Pool fire on the Major damage to Reliable ESD system, assets, potentiality Reliable fire detection sea of multiple system fatalities and Reliable FF system serious injuries
5C
3C
Rev 1
Page 55
Page 56 of 68
APPENDIX A6 1
Description of Activity
This generic risk assessment and control arrangements covers the erection and dismantling of scaffolding on a construction site for work at heights carried out by employees and contractors. 2 Persons at Risk
Personnel erecting and/or dismantling the scaffolding will be especially at risk from the following hazards. Any other person in the area could also be at risk from falling objects or scaffolding collapse. 3 Hazards
The significant hazards associated with the erection/dismantling of scaffolding are :a) Scaffolding Collapse b) Adverse Weather (High Wind, Rain, Snow) c) Falling Objects d) Person(s) Falling from Scaffolding e) Inadequate Lighting f) Open Grating (if applicable) g) Access/Egress h) Trapping of Body Parts Between Scaffolding Components or Between Components and Surfaces i) Striking People or Equipment with Scaffolding Components j) Striking/Obstructions k) Contact with Hot/Cold Surfaces Others hazards include, but are not restricted to :Particles (Dust from Board Cutting, Debris in Tubing) Cuts/abrasions from Sharp Edges, Swarf, Contact with Hand Saws Extreme Ambient Temperature Stacking/Storing of Scaffolding Components 4 Risk Analysis and Evaluation
The following arrangements should eliminate or reduce the risk from the above hazards to a tolerable level. The risk assessment on which these are based (identification of the hazards, analysis of severity and likelihood of the hazards and identification and evaluation of control measures) is filed in the Site Office. Additional risk assessments must be conducted and appended to this assessment with details of the appropriate arrangements, if any other hazards are identified not included above. 5 5.1 Arrangements Planning and Organizing
The (responsible person) shall ensure that scaffolding can be erected and dismantled safely and efficiently at the work site taking into account specific area hazards, other persons and activities within the area. Where there is any doubt, the HSE Adviser shall be consulted for advice.
Rev 1 Risk Screening and Assessment Procedure
Page 56
Page 57 of 68
Competent supervisors shall be employed to carry out inspections. All scaffolding shall be erected, altered or dismantled by competent Scaffolders or under the direct supervision of a competent person. The Site Construction Supervisor shall ensure that the following equipment is provided and maintained:safety harness for use when working above 2m. protective clothing (including safety helmet, safety footwear, gloves, warm weather during extreme cold weather). eye protection. hearing protection (if required by the Workplace Noise Assessment). communication (safety watch to control room), if hot work is involved.
The work plan shall allow for sufficient rest periods during periods of extreme hot/cold weather.
5.2 Management Control
No person shall erect, alter or dismantle any scaffolding unless authorized by the (appropriate senior person as above) or appointed representative. The supervisor must ensure the following when scaffolding is to be erected, altered or dismantled:Conformance with BS 5973 : 1993 Code of Practice for Access and Working Scaffolds and Special Scaffold Structures in Steel. Inspection and subsequent tagging of approved scaffolding. Compliance with load bearing capacity. Work is suspended and the site made safe during extreme weather conditions. Inspection of scaffolding prior to continuing work following extreme weather conditions. Standby vessel is on location, safety watch posted and overboard discharges noted, if work over the sea. Compliance with manual handling assessment. guard rails and toe / kicker boards are fitted. scaffolding area is barriered off, warning tape/notices are posted and restricted access imposed. vulnerable/fragile equipment within the area are noted. secure means for lifting/handling/storing of scaffold components are employed. high standard of housekeeping. materials and tools are removed from or secured to the scaffolding when not in use. suitable fall arrestors to be worn when working above 2m. ladders are secured. adequate lighting is provided. open areas in floors to be barriered off/hand railed. access/egress routes are unobstructed and alternative escape routes are available. obstructions, protrusions, hot/cold surfaces are noted. boards are protected from hot surfaces. protection is provided on cut surfaces. compliance with workplace noise assessment and confined space risk assessment, where appropriate. 5.3 Procedures for Serious or Imminent Danger
Any defect noted in the scaffolding equipment must be reported and attended to immediately.
6
Rev 1
Page 57
Page 58 of 68
6.1
Inspections
The Site Construction Supervisor shall ensure that the equipment, facilities and working practices are maintained to these standards by arranging regular inspections by a competent person(s). All new or hired scaffolding components will be inspected and approved for use by a competent person prior to use. A record of the inspection shall be made and filed in the Site Construction Office. All scaffolding shall be inspected at 7 day intervals by the supervisor and a record of inspections made and filed in the Site Construction Office. 6.2 Risk Assessment Review
This risk assessment and arrangements shall be reviewed at intervals of 3 months or after any reported complaint, incident or accident, or whenever the activity changes.
Rev 1
Page 58
Page 59 of 68
APPENDIX A7: RISK ASSESSMENT FORM Location: Completed by: Checked by: Line Manager: NO. HAZARD CONSEQUENC EXISTING CONTROL
E
Task/Activity: Date: Date: Date: RISK ANALYSIS (EXISTING CONTROLS) SEVERITY LIKELIHOOD RISK REQUIRED ADDITIONAL CONTROL MEASURES RISK ANALYSIS (WITH EXTRA CONTROLS) SEVERIT LIKE- RIS
Y LIHOOD K
EVALUATIO
N
2 3 4
Rev 1
Page 59
Page 60 of 68
APPENDIX B: RISK MATRICES APPENDIX B1: APPENDIX B2: APPENDIX B3: APPENDIX B4: APPENDIX B5: APPENDIX B6: APPENDIX B7: APPENDIX B8: The Event Risk Screening Matrix. The Risk to personal Assessment Matrix. The Risk to People (E&P Operations) Assessment Matrix. Social Responsibility Matrix The Environmental risk matrix The Asset risk matrix The Reputation risk matrix Social Responsibility
Rev 1
Page 60
Page 61 of 68
B
Unlikely occurrence
C
Credible occurrence
D
Probable occurrence
E
Likely/Frequent occurrence
Severity
Environ.
Assets
People
Slight effect
Slight damage
Slight impact
Continuous Improvement
Minor effect
Minor damage
Minor impact
Local effect
Local damage
Local impact
Major effect
Intolerable Risk
Multiple fatalities
Extensive effect
Extensive damage
International impact
Page 61
Page 62 of 68
A
Not Applicable
B
Could occur, when additional
C
Not certain to happen but an additional factor may result in an accident.
D
Almost inevitable than an accident would result
E
Almost inevitable that more than one accident would result
Severity
factors are present; otherwise unlikely. Has occurred at least once in Company
N/A
N/A
Slight health effect / injury (NOT APPLICABLE) Minor health effect / injury:
offsite medical treatment or LTA; up to 10 days off. Agents have reversible effects to health.
Continuous Improvement
Multiple fatalities
from an accident or occupational illness (e.g. chemical asphyxiation or cancer or epidemic diseases)
Intolerable Risk
(*) Permanent Total Disability Rev 1 Risk Screening and Assessment Procedure
Page 62
Page 63 of 68
0
<10-6 occ/y (1)
A
10-6 to 10-4 occ/y (1)
B
10-4 to 10-3 occ/y (1)
E
>1 occ/y (1)
Severity
Likely outcome of Could be outcome Could be outcome 2 concurrent failures (Low Probability of 2 concurrent failures (High Probability of a single failure
Continuous Improvement
Intolerable Risk
Page 63
Page 64 of 68
0
Toxicity (ppm)
(based on 30 min event duration)
A
10 to 10 occ/y
-6 -4 -4
B
10 to 10 occ/y
-3
C
N. A.
D
N. A.
E
N. A.
Flash Fire
Overpressure (mbar)
<10 occ/y
-6
1 2 3 4 5
<3
< 30
Up to TLV
Continuous improvement
Up to 500 people in enclosures, 100 at open, 1000 people/day max. at railway stations (*) Up to 1m3/m2 in residential area. None in the open unless on monthly basis. (*)
30
TLV
No more than 500 people in the open or 100 if mobility is reduced. (*) Up to 500 people in enclosures, 100 at open, 1000 people/day max. at railway stations (*) Up to 1m /m in residential area. None in the open unless on monthly basis. (*)
3 2
70
IDLH
No more than 500 people in the open or 100 if mobility is reduced. (*) Up to 500 people in enclosures, 100 at open, 1000 people/day max. at railway stations (*)
LFL
140
LC 1% hmn
12.5
LFL
300
LC 50% hmn
Up to 1m3/m2 in residential area. None in the open Up to 0.5m3/m2 in unless on monthly basis. residential area. (*) (*)
Intolerable risk
Rev 1
Page 64
Page 65 of 68
0 Environment
<10-6 occ/y
A
10-6 to 10-4 occ/y
B
10-4 to 10-3 occ/y
C
10-3 to 10-1 occ/y
D
10-1 to 1 occ/y
E
> 1 occ/y
Slight effect
a) No stakeholder impact -b) temporary impact on the area. 2 c) Involved area < 0.1 sq mile(0.26km ) d) Onshore spill (1) < 1 m e) no sensitive impact on ground.
3
Continuous improvement
Minor effect
a) Some local stakeholder concern- b) 1 year for natural recovery c) impact on small no. of not compromised species. d) Involved area < 1 sq mile(2.6km2) e) onshore Spill (1)l < 10 m3 f) impact on localized ground.
Local effect
a) Regional stakeholder concern b) 1-2 years for natural recovery c) 1 week for clean-up d) threatening to some species- e) impact on protected natural areas. f) Involved area < 10 sq miles (26 km2) g) onshore spill (1) < 100 m3.
Major effect
A) National stakeholder concern b) impact on licenses c) 2-5 years for natural recovery d ) up to 5 months for clean-up e) threatening to biodiversity f) impact on interesting areas for science. g) Involved area < 100 sq miles (260km2) h) Onshore spill (1) < 1000 m3.
Extensive effect
a) International stakeholder concern b) impact on licenses / acquisitions c) > 5 years for natural recovery d) > 5 months for clean-up e ) reduction of biodiversity f) impact on special conservation areas. g) Involved area > 100 sq miles (260 km2) h)- Onshore spill (1) > 1000 3 m.
Intolerable risk
(1) To be reduced of a factor 10 for offshore spill and a factor 100 for sensitive areas.
Rev 1
Page 65
Page 66 of 68
A
10 to 10 occ/y
-4 -4
B
10 to 10 occ/y
-3 -3
C
10 to 10 occ/y
-1
D
10 to 1 occ/y Could be outcome of a single failure
-1
E
>1 occ/y
1 2 3 4 5
Slight damage
No disruption to operations/business.
Continuous improvement
Minor damage
Possible short disruption of operations/business: repair cost < 200000; production downtime < 1 day.
Local damage
The unit has been repaired/replaced to resume operations: repair cost < 2500000; production downtime < 1 week. Damage to escape ways.
Major damage
Long time/Major change to resume operations/business: repair cost < 25000000; production downtime < 3 months. Major inquiry for the damage cost. Damage to escape ways.
Extensive damage
Total loss of operations/business. Revamping necessary to resume the process: repair cost > 25000000; production downtime > 3 months. Extensive inquiry for the damage cost. Total loss of facility.
Intolerable risk
(*) failure of Critical system protecting people (escape ways to temporary refuges, control systems, emergency systems, etc)
Rev 1 Risk Screening and Assessment Procedure
Page 66
Page 67 of 68
0
Severity
Could happen
A
Heard of in E&P industry
B
Has occurred at least once in Company
C
Has occurred several times in Company Credible Occurrence
D
Happens several times/y in Company
E
Happen several times/y in one location
Reputation
in E&P industry
Non-credible occurrence
1 2
Slight impact
Minor and short lived impact in the locality
Continuous improvement
Minor impact
Some loss of reputation in the area, which should be recovered
3 4
Local impact
Significant potentially long lived damage to the regional reputation .
Intolerable risk
Rev 1
Page 67
Page 68 of 68
Rev 1
Page 68