Mitigation (M) Generic Performance Standards

Summary

Performance
SECE System Standard Revision Revision Date Page

M1 - Dropped Object Protection B2 01/10/2013 2

M2 - Blast Resistant Construction B2 01/10/2013 11
M3 - Fire Mitigation B2 01/10/2013 16
M4 - Temporary Refuge B1 30/05/2013 23
M5 - Fire Pumps B2 01/10/2013 33
M6 - Firewater Main B1 09/10/2013 49
M7 - Firewater Systems B2 01/10/2013 59
M8 - Foam Systems B3 24/10/2016 77
M9 - Liquid and Gaseous Extinguishing Systems B2 01/10/2013 93
M10 - Portable Fire Extinguisher B2 18/03/2014 105
M11 – Collision Mitigation B1 11/09/2017 112

1
SECE Number: M1 SECE: - Dropped Object Protection Revision: Draft Rev B2 Date: 01/10/2013
Goal:
Prevent any significant loss of hydrocarbon containment or major structural failure following a dropped object or swinging load event.

Scope / Equipment

SECE Sub Number SECE Sub System: Installation

Plant (1) Plant (2) Plant (n)

Tick these boxes to indicate which systems are

present at each location.

M1.4 Dropped Object Protection

Scope
Scope
The following is included within the dropped object protection scope:
 Impact decks.
 Swinging load protection.
 Dropped object protection to subsea architecture pipelines and risers.
 Limit switches / locking keys to prevent lifting over hydrocarbon containing equipment / pipework.
Excluded from Scope
 Dropped loads during well operations and COMOPS.

Notes

2
 Principal Interacting SECEs

SECE Number SECE System

P17 Crane and Lifting Equipment

P1 Structural Integrity

P4 Process Containment Integrity.

P5 Pipelines & Riser Integrity

C5 Riser ESDVs

M1 SECE Sub System: Dropped Object Protection

Number Performance Requirements Means of Assurance

Functionality References Means of Assurance Design References Means of Assurance References

Operational

M1.4_F1 Impact decks are Provide The elements making up the Provide references Results of periodic topside Provide references
capable of absorbing references to the: dropped object protection have to the: structural inspection and to the:
the impact energies been designed and constructed dropped object incidents are
 Asset plot  Asset plot  Relevant work
identified in Table 1. to withstand the accidental reviewed by the relevant
plans. plans. instructions.
loads identified by the dropped Technical Authority.
NOTE  Topside  Topside  The electronic
object assessment.
dropped Dropped object Engineering critical assessment (or other)
Protection is provided
object risk The data sheets for elements risk are carried out where required. system used to
commensurate with
assessment. making up the dropped object assessment. schedule
the risk of dropped The potential impacts changes
 Relevant protection have been reviewed.  Asset safety inspection and
objects from the asset to lifting operations /
performance The review has confirmed that philosophy. maintenance.
and the consequence modifications to the platform
standards the structure is capable of  TOTAL’s  Change control
of damage to the decks are assessed in
(See meeting functional assessment of procedure.
accordance with the local

3
M1 SECE Sub System: Dropped Object Protection

Number Performance Requirements Means of Assurance

Functionality References Means of Assurance Design References Means of Assurance References

Operational

platform topsides. interactions requirements. the change control procedure.  Maintenance

above). competence of management
Vendors used to procure NOTE
 Asset safety supplier. procedure.
structural elements are on the
philosophy.  Relevant Impact deck are inspected at  Asset Integrity
approved vendor list.
fabrication intervals specified in the Strategy
Review of the selected procedures. maintenance management  Inspection
fabrication procedures,  FEA system. Inspection frequency Strategy
material traceability, assessments of should be consistent with the  Structural
dimensional checks, impact decks. Structural Inspection Strategy. Inspection
NDE/welder qualifications and Database
Sufficient baseline data are
NDE records has been  Inspection
available to permit an
undertaken as applicable. Anomaly
assessment of the continuing
During fabrication, witnessing integrity of dropped object Management
of selected fabrication protection following discovery Procedure.
procedures, review material of any anomaly or any  Secondary
traceability, dimensional departure from design intent. Structural
checks, NDE/welder Inspection
qualifications and NDE records Visual.
has been undertaken where  Tertiary
required. Structural
Inspection
Visual.
 Maintenance
Plans.
 Performance
Standard P1 –
Structural
Integrity.

4
M1 SECE Sub System: Dropped Object Protection

Number Performance Requirements Means of Assurance

Functionality References Means of Assurance Design References Means of Assurance References

Operational

M1.4_F2 Swinging load Provide See M1.4.1 See M1.4.1 Results of periodic topside See M1.4.1
protection e.g. bumper references to the: structural inspection and
bars are capable of swinging load incidents are
 Asset plot
absorbing the impact reviewed by the Technical
plans.
energies identified in Authority.
 Topside
Table 1
dropped Engineering critical assessment
NOTE object are carried out where required.
assessment.
Protection is provided The potential impacts changes
commensurate with  Relevant to lifting operations /
performance
the risk of swinging modifications to swinging load
standards
load from the asset protection are assessed in
(See
and the consequence accordance with the local
interactions
of damage to the change control procedure.
above).
impacted object.
NOTE
Swinging load protection e.g.
bumper bars are inspected at
intervals specified in the
maintenance management
system. Inspection frequency
should be consistent with the
Structural Inspection Strategy.
Sufficient baseline data are
available to permit an
assessment of the continuing
integrity of dropped object
protection following discovery
of any anomaly or any

5
M1 SECE Sub System: Dropped Object Protection

Number Performance Requirements Means of Assurance

Functionality References Means of Assurance Design References Means of Assurance References

Operational

departure from design intent.

M1.4_F3 Protection on subsea Provide Dropped object protection on Provide references Results of periodic subsea Provide references
pipelines, risers and references to the: subsea pipelines / risers and to the: structural inspection and to the:
architecture are architecture has been defined dropped object incidents are
 Subsea  Subsea  Relevant work
capable of absorbing by means of appropriate reviewed by the Technical
layouts. layouts. instructions.
the impact energies dropped object studies. Authority.
 Subsea  Subsea  CMMS /
identified in Table 1
dropped The elements making up the dropped object Engineering critical assessment Maintenance
NOTE object risk subsea structure dropped risk are carried out where required. management
assessment. object protection have been assessment. system
Protection is provided The potential impacts changes
 Pipeline designed and constructed to  Topside  Change control
commensurate with to lifting operations /
MAPD withstand the accidental loads dropped object procedure.
the risk of dropped modifications to subsea
(where identified by the subsea risk  Maintenance
objects from the asset dropped object protection are
applicable). dropped object risk analysis. assessment. management
and the consequence assessed in accordance with the
of damage to the The data sheets and other  Pipeline local change control procedure. procedure.
pipeline / riser / subsea relevant detail design MAPD.  Area Inspection
NOTE Manual:
architecture. . documentation for the
elements making up the subsea Subsea dropped object  Asset Integrity
dropped load protection has protection e.g. mattresses and Strategy
been reviewed. The review has protection frames are  Inspection
confirmed that elements are inspected at intervals specified Strategy
capable of meeting functional in the maintenance  Structural
requirements. management system. Inspection
Inspection frequency should be Database
Vendors used to procure  Inspection
consistent with the Structural
structural elements are on the Anomaly
Inspection Strategy.
approved vendor list. Management
Sufficient baseline data are Procedure.
Review of the selected
available to permit an

6
M1 SECE Sub System: Dropped Object Protection

Number Performance Requirements Means of Assurance

Functionality References Means of Assurance Design References Means of Assurance References

Operational

fabrication procedures, assessment of the continuing  Secondary

material traceability, integrity of dropped object Structural
dimensional checks, protection following discovery Inspection
NDE/welder qualifications and of any anomaly or departure Visual.
NDE records has been from design intent.  Tertiary
undertaken as applicable. Structural
Inspection
During fabrication, witnessing
Visual.
of selected fabrication
procedures, review material  Maintenance
Plans:
traceability, dimensional
checks, NDE/welder  Subsea
qualifications and NDE records inspection
has been undertaken as programme.
applicable.  Performance
Standard P1 –
Structural
Integrity.

M1 SECE Sub System: Dropped Object Protection

Number Performance Requirements Means of Assurance

Availability / References Means of Assurance Design References Means of Assurance References

Reliability Operational

M1.4_A1 Dropped / swinging

load protection devices

7
M1 SECE Sub System: Dropped Object Protection

Number Performance Requirements Means of Assurance

are available at all

times lifting operations
are being undertaken
on the asset, unless
agreed with the
relevant TA.
This includes during
platform shutdowns
while the pipelines are
retaining a significant
hydrocarbon
inventory.

M1 SECE Sub System: Dropped Object Protection

Number Performance Requirements Means of Assurance

Survivability References Means of Assurance Design References Means of Assurance References

Operational

M1.4_S1 Not Applicable - Not Applicable. Not Applicable.

survivability is only
applicable to those
SECEs that may have a
role to perform after
the occurrence of a
major hazardous
event, but are not
specifically designed

8
M1 SECE Sub System: Dropped Object Protection

Number Performance Requirements Means of Assurance

for that purpose.

OPERATIONAL VERIFICATION VSEL 3

No. Site Verification Reference Base Office Verification Reference

M1_V1 Review any changes made to the asset which may M1 - All
effect the assets provision for dropped object
protection since the last operational verification
visit.

Confirm that the modifications have been subjected

to the change management system and that any
actions arising have been satisfactorily closed out.

M1_V2 Confirm that all standard work text instructions have M1 - All
scheduled within the maintenance management
system have been completed as scheduled.

M1_V3 Where accessible, visual examination of Examination will

protection frames as specified in Table 1, support Functionality
ensuring no structural deformation, visible Items M1.4_1 to
cracks, corrosion etc. M1.4_3.

M1_V4 Dropped / swinging load Base Office Verification will

be by review of records in accordance with the
Topsides Structural Integrity programme described
under Performance Standard P1.

9
 Table 1 – [HOLD FACILITY] Dropped Object Protection Requirements

Protection Type Description and Location Impact Resistance Criteria

e.g. Topside dropped load e.g. Platform Weather deck. [HOLD REFER TO DROPPED [HOLD REFER TO DROPPED
protection OBJECT RISK ASSESSMENTS] OBJECT RISK ASSESSMENTS]

e.g. Topside dropped load e.g. Platform Weather deck. [HOLD REFER TO DROPPED [HOLD REFER TO DROPPED
protection OBJECT RISK ASSESSMENTS] OBJECT RISK ASSESSMENTS]

e.g. Topside swinging load e.g. Swinging object protection frame for the exhaust stack. e.g. 18kJ e.g. 6.0te swinging load - 10°,
protection 20m rope length
[HOLD REFER TO DROPPED
OBJECT RISK ASSESSMENTS] [HOLD REFER TO DROPPED
OBJECT RISK ASSESSMENTS]

e.g. Topside swinging load e.g. Tote tank area central vertical bumper barrier e.g. 27kJ e.g. (6.0te swinging load - 10°,
protection 30m rope length)
[HOLD REFER TO DROPPED
OBJECT RISK ASSESSMENTS] [HOLD REFER TO DROPPED
OBJECT RISK ASSESSMENTS]

e.g. Subsea pipeline e.g. PL XXX 36-inch export pipeline – Concrete mattresses [HOLD REFER TO DROPPED [HOLD REFER TO DROPPED
protection protecting the pipeline in the vicinity of the platform Xm to SSIV. OBJECT RISK ASSESSMENTS] OBJECT RISK ASSESSMENTS]

e.g. Subsea architecture e.g. Protection frame covering SSIV XXX [HOLD REFER TO DROPPED [HOLD REFER TO DROPPED
protection OBJECT RISK ASSESSMENTS] OBJECT RISK ASSESSMENTS]

HOLD – INSERT RELEVANT HOLD – INSERT RELEVANT INFORMATION HOLD – INSERT RELEVANT HOLD – INSERT RELEVANT
INFORMATION INFORMATION INFORMATION

10
SECE Number: M2 SECE:- Blast Resistant Construction Revision: Draft Rev B2 Date: 01/10/2013
Goal:
To reduce the consequences of design case blast overpressures upon sensitive receptors (including people, plant and equipment).

Scope / Equipment

SECE Sub Number SECE Sub System: Installation

Plant (1) Plant (2) Plant (n)

Tick these boxes to indicate which systems are

present at each location.

M2.1 Blast Walls

Scope
The scope of the above SECE includes doors and other penetrations within the blast wall.

Notes

Principal Interacting SECEs

SECE Number SECE System

M3 Passive Fire Protection (PFP)

P1 Structural Integrity

11
SECE Sub Number: M2.1 SECE Sub System: Blast Walls and their associated penetrations.

Number Performance Requirements Means of Assurance

Functionality References Means of Assurance Design References Means of Assurance References

Operational

M2.1_F1 Blast Walls, including Provide reference Reasonably foreseeable Provide reference Operational assurance is Provide reference
doors and other to: explosions and sensitive to: provided by routine to:
penetrations through receptors are recorded in the inspections, carried out in
them are designed and  Table 1. asset fire and explosion risk  Table 1.  GS EP EXP
accordance with relevant work
constructed to analysis (FERA).  Asset FERA. 311 Plant
instruction at frequencies
withstand design  Structural / Integrity
Asset explosion models scheduled in as scheduled in
explosion other response Minimum
determine the blast the asset maintenance
overpressures. to blast Inspection
overpressures arising from management system.
analysis. Requirement
Table 1 of this reasonably foreseeable
Changes to the system are in s
performance standard explosions.
accordance with the Total  GSP EP EXP
summarises each of The structural design change control procedure. 213
the blast walls and philosophy considers the
their design reasonably foreseeable Minimum
overpressures. explosion pressures detailed Maintenance
within the FERA and includes Requirement
strategies for their mitigation. s
 Asset
Blast resistant construction Inspection
Basis Of Design detail the and
specification of the structures Maintenance
with respect to over pressure. Management
Drawings of the blast System
structures provide  Total Change
confirmation that the Control
structures are as per required Procedure.
by the BOD.

12
 Availability References Means of Assurance References Means of Assurance References
Design Operational

M2.1_A1 The functional Provide - - - -

requirements detailed References to
in M2.1 are available the:
at least 95% of the
time Hold: Revise this  Relevant
figure to be consistent functional
with the QRA. design
specification

M2.1_A2 Blast resistant - - - Local risk assessment Provide

structures unable to procedures dictate the References to the:
achieve the requirement for risk
functionality defined assessment.  Relevant
within M2.1 for a functional
period of time greater design
than a single shift are specification
subject to a risk
assessment.

Survivability References Means of Assurance References Means of Assurance References

Design Operational

M2.1_S1 Blast Walls and M3. Not applicable. Not applicable. Not applicable. Not applicable.
penetrations to retain
their fire rating
following the
realisation of the
design case explosion.

13
 Table 1 – Register of Asset Blast Resistant Constructions

Blast Resistant Construction Design Overpressure Basis Provide References to Source Drawing References
& Location Analysis and Construction
Specifications

Provide details such as type of Summarise the design basis. List all source references and Detail all relevant drawings.
construction and its location and specifications.
what it is installed to protect.

Provide details such as type of Summarise the design basis. List all source references and Detail all relevant drawings.
construction and its location and specifications.
what it is installed to protect.

OPERATIONAL VERIFICATION VSEL 3

No. Site Verification Reference Base Office Verification Reference
- - Review the maintenance management records since the M2.1_F1
last verification visit. Confirm that the scheduled
M2.1_V1 inspection and maintenance activities have been carried
out satisfactorily and that all actions arising are being
tracked through to completion.
Review any changes made to the blast resistant M2.1_F1. - -
constructions or local area that have the potential to
M2.1_V2 affect M2.1 functionality or availability. Confirm that the
changes have been assessed in accordance with local
change management procedures.
M2.1_V3 Visually inspect a range of the asset blast resistant M2.1_F1. - -
constructions. Check for any signs of deterioration likely M2.1_S1.
to affect M2.1 functionality.
Check that the specifications of penetrations (including
doors) are in accordance with the relevant design
drawings and supporting philosophies and are at least the

14
 OPERATIONAL VERIFICATION VSEL 3

same rating as the wall.

Review any blast resistant construction that is not M2.1_A2
available for more than a single shift. Confirm that a risk
M2.1_V4
assessment has been performed and that suitable
temporary measures have been enacted.

15
SECE Number: M3 SECE:- Fire Mitigation Revision: Draft Rev B2 Date: 01/10/2013

Goal:
To prevent premature failure of safety critical components and to contain the spread of smoke or fire for a predetermined period of time.

Scope / Equipment

SECE Sub Number SECE Sub System: Installation

Plant (1) Plant (2) Plant (n)

Tick these boxes to indicate which systems are

present at each location.

M3.1 Passive Fire Protection (PFP)

Scope
Fire and blast rated barriers /enclosures, Passive Fire Protection (PFP) coatings.
Scope includes all blast rated walls, fire rated walls, self-closing doors, floors, roofs, partitions, galley shutters etc. including machinery
enclosures, PFP applied to structures, walls, vessel/piping and/or their supports, risers/pipelines, ESDV/SDVs.
Penetrations in fire or blast rated barriers e.g. doors, windows, cables, pipes and seals are also part of the PS scope.
PFP coating may be pre-fabricated panels, boxes, shells, fibre blankets, epoxy (normally intumeSECEnt) or cementitious. GRE/GRP, silicones
and gums may also have been used.
Structures, vessels or other equipment deemed to have sufficient inherent fire protection e.g. reinforced concrete and have not been given a
specific fire rating are outwit the scope of this PS.

Notes

Principal Interacting SECEs

SECE Number SECE System

16
E1 Alarm and PA System

M4 Temporary Refuge

P1 Structural Integrity

P4 Process Containment Integrity

P5 Pipelines & Riser Integrity

SECE Sub-System Number: C11.1 SECE Sub-System: Passive Fire Protection (PFP)

PR Number Performance Requirements (PR) Means of Assurance

Functionality References Means of Assurance Design References Means of Assurance References

Operational

M3.1_F1 PFP applied to BDV and Provide reference External fire events are defined Provide references Operational assurance is Provide reference
ESDV protect the to: within the asset fire and to the: provided by routine to:
valves from external explosion risk assessment. inspections, carried out in
thermal flux such that  GS EP SAF  Asset basis of  GS EP EXP
The asset PFP philosophy accordance with relevant work
continued valve 337 design 311 Plant
describes which vulnerable instruction at frequencies
operation is possible  Passive Fire document. Integrity
receptors require PFP. scheduled in as scheduled in
for the time periods Protection:  Asset PFP Minimum
The BDV and ESDV P&IDs have the asset maintenance
defined in Table 1. Basis of assessment. Inspection
been reviewed. The review management system.
Design.  Relevant P&IDs Requirement
Note: Endurance confirms that the PFP has been Changes to the system are in
 Table 1 of indicating PFP s
times need to be this specified correctly (as indicated clad valves. accordance with the Total  GSP EP EXP
consistent with the Performance by the P&ID legend).  Asset PFP change control procedure. 213
QRA and fire and Standard. protection Minimum
explosion risk philosophy. Maintenanc
analysis. e
Requirement

17
SECE Sub-System Number: C11.1 SECE Sub-System: Passive Fire Protection (PFP)

PR Number Performance Requirements (PR) Means of Assurance

Functionality References Means of Assurance Design References Means of Assurance References

Operational

s
 Asset
Inspection
and
Maintenanc
e
Managemen
t System
 Total
Change
Control
Procedure.

M3.1_F2 PFP are applied to See M3.1_F1 The ducting basis of design Provide references See M3.1_F1 See M3.1_F1
ducting fire louvers specifies that fire compartment to the:
and firewall penetrations are to be
penetrations. maintained by provision of fire  Ducting Basis
louvers to a specification of at of Design.
Installed PFP, as
least the fire compartment  Ducting
summarised in Table 1,
through which it is being drawings.
will meet or exceed
penetrated.  Fire
the rating of the
compartment
penetrated fire Each duct passing through a fire
drawings.
compartment. compartment wall has been
identified on the ducting layout
drawings.
Each fire louver and
penetration drawing has been
reviewed to confirm that the

18
SECE Sub-System Number: C11.1 SECE Sub-System: Passive Fire Protection (PFP)

PR Number Performance Requirements (PR) Means of Assurance

Functionality References Means of Assurance Design References Means of Assurance References

Operational

correct PFP has been specified.

M3.1_F3 PFP applied to walls/ See M3.1_F1 Hold: Provide a summary of Provide references See M3.1_F1 See M3.1_F1
structures and other means of design assurance. to the:
vulnerable receptors
are as per defined  Relevant
within Table 1 of this references.
Performance Standard.

M3.1_F4 PFP will be resistant to: See M3.1_F1 The PFP data sheets provide Provide references See M3.1_F1 See M3.1_F1
 The chemicals/ information regarding their to the:
environment into suitability for chemical
exposures and environmental  PFP data sheet
which it is being
conditions. references.
applied.
 PFP
 The reasonably A PFP assessment has been
assessment.
foreseeable performed which examined the
potential thermal location of the PFP and the
shock loads (ie likely environmental conditions
from deluge/ and chemical exposures.
water cannon). The PFP drawings have been
 Damage caused reviewed against the PFP
vibration/ report. The review confirmed
movement etc of that the PFP has been correctly
the substrate to specified on the drawings.
which it is applied.

19
 Availability References Means of Assurance Design References Means of Assurance References
Operational

M3.1_A1 PFP unavailable for See M3.1 See M3.1 See M3.1 See M3.1 Provide
more than a single shift references to the:
are subject to a
 Risk
document risk
assessment
assessment, otherwise
procedure.
M3.1 functionality are
available for at least
95% of the time (Hold:
Revise this statement
to be consistent with
the QRA).

Survivability References Means of Assurance Design References Means of Assurance References

Operational

M3.1_S1 PFP will survive the Not applicable. - - See M3.1_F1 See M3.1_F1
design fire scenarios
for the time specified
in the standard to
which the PFP is
installed.

M3.1_S1 PFP will be rated to at GS EP SAF 337. See M3.1_F4 See M3.1_F4 See M3.1_F4 See M3.1_F4
least the same blast
resistance as the
surface/structure it is
applied to.

20
 Table 1 – Installed PFP Design Criteria

Receptor Being Protected Duration the Protected PFP Specification Relevant Drawings Fire / Other Risk
Valve Must Remain Assessment That Defines
Functional (min) the Design Fire Scenario

Hold: State valve/ wall/ structure etc Hold: Provide information Hold: Specify the PFP rating ie Hold: List relevant drawings Hold: Provide a reference to
that is being protected. where for PFP protected A60/J30 etc. showing the applied PFP. the source fire risk
valves. Enter ‘ Not assessment that identifies
Applicable’ if the receptor the fire hazard.
being protected is not a
valve.

Hold: State valve/ wall/ structure etc Hold: Provide information Hold: Specify the PFP rating ie Hold: List relevant drawings Hold: Provide a reference to
that is being protected. where for PFP protected A60/J30 etc. showing the applied PFP. the source fire risk
valves. Enter ‘ Not assessment that identifies
Applicable’ if the receptor the fire hazard.
being protected is not a
valve.

Hold: State valve/ wall/ structure etc Hold: Provide information Hold: Specify the PFP rating ie Hold: List relevant drawings Hold: Provide a reference to
that is being protected. where for PFP protected A60/J30 etc. showing the applied PFP. the source fire risk
valves. Enter ‘ Not assessment that identifies
Applicable’ if the receptor the fire hazard.
being protected is not a
valve.

21
 OPERATIONAL VERIFICATION VSEL 3

No. Site Verification Reference Base Office Verification Reference

M3_V1 - - Review any changes made to the PFP or to plant that M3_F1
may affect the deployment of PFP since the last
operational verification visit.
Confirm that the modifications have been subjected
to the relevant change management system and that
any actions arising have been satisfactorily closed
out.

M3_V2 - - Review the maintenance records since the last M3_F1

verification visit. Confirm that all scheduled routine
inspection and maintenance activities have been
carried out and that all actions arising are being
tracked through to completion.

M3_V3 Visually inspect a range of PFP and M3.1_F1 - -

penetrations. Confirm that the PFP is, present,
is to the correct specification undamaged and
not degraded to an extent likely to affect its
functionality. Note: The inspections should
cover a suitable number of each category of
receptors listed in Table 1. The number
requiring inspection should be driven by the
OIAVS.

M3_V4 Confirm that any PFP undergoing maintenance M3.1_A1 - -

or repair lasting more than a single shift is
supported by a documented risk assessment.
Inspect a number of PFP’d fire dampers.
M3_V5 M3.1_F2 - -
Confirm that the presence, correct fire rating
and visual condition of the applied PFP.

22
SECE Number: M4 SECE System: Temporary Refuge Revision: Livermore Rev Date: 30/05/2013
B1.
Goal:

Provide safe refuge for personnel on the asset for as long as required for a controlled evacuation to be carried out and to ensure easy, fast and safe access to means of
evacuation.

Scope / Equipment

SECE Sub Number SECE Sub Function Installation

M4.1 Temporary Refuge / Muster Drill
Plant (1) Plant (2) Plant (n)

Scope: Tick these boxes to

indicate which
The scope of this performance standard includes:
systems are present
 Main Temporary Refuge (TR) as presented in the asset Safety Case. at each location.
 Primary & other Muster Points (if applicable) – See Note 1.
The following is outside the scope of this Performance Standard:
 See Note 2 and principal interacting Safety Critical Elements (SECEs).

Notes
Note 1
Temporary Refuge is a term applicable to offshore facilities and infers a level of protection is provided for individuals against the effects of Major Accident Hazards (MAH)
(smoke, heat radiation, blast, toxic gases) for a necessary endurance period. The term ‘Muster Point’ covers a wider scope that could include one or more of the following
examples: the main muster area onshore; the main muster area inside a TR; the main muster area offshore where no designated TR is provided e.g. unmanned installation,
the secondary muster area and the life boat embarkation area etc. Certain muster areas may also have protective features such as a fire/blast wall.
Note 2
The Temporary Refuge (TR) is a Safety Critical system made up of a number of individual SECEs. As a result of this, performance requirements for the TR systems can be
found in their individual Performance Standards rather than within this document. Where applicable, these interactions have been highlighted in the interacting SECE

23
below so that a cross reference to relevant performance standards can be made.
Note 3
The PS for the TR will be very installation specific. Please refer to CR SAF 351 for further details.

Principal Interacting SECEs

SECE Number SECE System

Maintained Power Supplies - Required to supply essential systems necessary for the emergency response plan to be executed during a Major
E9
Accident.
M3 Fire Mitigation - Maintain the integrity of the TR and muster areas against identified fire scenarios.

M2 Blast Resistant Construction – Maintain the integrity of the TR and muster areas against reasonably foreseeable over pressure.

P11 HVAC Systems - To prevent the ingress or build-up, of flammable gas-air mixtures or life threatening atmosphere in/into the TR.

C2 Fire Detection - To detect smoke at the HVAC inlets to the TR.

C1 Flammable Gas Detection - To detect gas at the HVAC inlets to the TR

E5 Internal Communication - Required for communication with personnel onboard to escape and muster.

E6 External Communications – Required for communicating with external parties for evacuation.

E3 Emergency Lighting - A minimum level of illumination is required to enable escape, muster and evacuation during a Major Accident.

M7 Firewater Systems - Required to rapidly reduce the production of heat and smoke from a fire in the TR.

E1 Alarm and PA System – Required to alert personnel of the requirement to abandon asset.

E2 Egress and Access Routes - Required during a Major Accident to enable personnel to escape to muster in the TR, or to leave the TR to a
proceed to a location for evacuation.

24
 SECE Sub System:

Number Performance Requirements Means of Assurance

Functionality References Means of Assurance Design References Means of Assurance References

Operational

To maintain a breathable atmosphere within the TR for a specified duration.

Provide reference
M4.1_ F1 The TR have a A TR impairment analysis has Provide reference Operational assurance is Provide reference
to:
maximum air leakage been undertaken. This review to: provided by routine inspection to:
rate of [HOLD – Insert  TR confirms that [HOLD – Insert and function checks, carried out
 TR impairment  GS EP EXP 311
number of air changes] impairment positive pressure to be in accordance with relevant
analysis. Plant Integrity
air change per hour. assessment. maintained] Pa provides work instruction at frequencies
 P11 – HVAC Minimum
 Offshore adequate pressurised scheduled in as scheduled in
Note – Guidance system. Inspection
Information ventilation to limit the effects of the asset maintenance
provided within Requirements
Sheet No heat and ingress of smoke or management system.
Offshore Information  GSP EP EXP
1/2006. gas.
Sheet No 1/2006 states Changes to the system are in 213 Minimum
that it is common  ISO 15138. See also means of design accordance with the Total
 Operations Maintenance
practice in the offshore assurance presented in P11 – change control procedure. Requirements
industry to pressurise Notice 27. HVAC system.  Asset
TR’s to between 50 Inspection and
and 75 Pa and to Maintenance
measure pressure Management
decay with time. From System
this an air leakage rate  Total Change
is calculated and used Control
as a performance Procedure.
measure of the
structure’s integrity. It
is usually taken as 0.35
air changes per hour
(ac/hr.) New build TRs

25
 SECE Sub System:

Number Performance Requirements Means of Assurance

Functionality References Means of Assurance Design References Means of Assurance References

Operational

are constructed to a
leakage standard of
0.25 ac/hr. The actual
numerical value is not
critical and should not
be considered in
isolation. More
technical advice on this
issue can be found in
ISO 15138 and
Operations Notice 27.

Provide sufficient space at muster areas to allow the muster of [HOLD – Insert POB of asset as stated in Safety Case / COMAH Safety Report] and ensure easy, fast and safe
entering of the evacuation systems in question

M4.1_ F2 The total surface of all Provide reference Asset EER philosophy outlines Provide reference See M4.1_ F1 See M4.1_ F1
muster (embarkation) to: the minimum space to:
areas is not less than N requirements for all asset
GS EP SAF 351.  EER
x 0.35 m2, and muster areas. 
Philosophy.
adequate access to  EERA.
A review of relevant  EERA.
evacuation systems is
documentation and functional  Relevant asset
provided.
specifications has been functional
Note - N being the undertaken to confirm that the specifications
maximum number of room for mustering to be and
persons likely to be at provided for both normal documentation
the same time on the operational periods and  Escape and
installation. Additional maintenance periods (if there is evacuation
space for stretcher increased manning) is drawings.

26
 SECE Sub System:

Number Performance Requirements Means of Assurance

Functionality References Means of Assurance Design References Means of Assurance References

Operational

cases should also be adequate.

provided.
The asset EERA and escape and
evacuation drawings have been
reviewed to ensure that there is
adequate access to evacuation
facilities.
Note – This applies to all muster
areas highlighted in Note 1.

Availability / References Means of Assurance Design References Means of Assurance References

Reliability Operational

M4.1_ A1 The TR and muster - TR and muster area reliability / Provide reference Ongoing suitability is addressed Provide reference
areas are available at availability is assured through to: within the scope of the risk to:
all times the platform adherence to standards and assessment in support of the
 Total Change  Total Change
is manned. procedures, regular inspections Safety Case / COMAH Report
Control Control
and reporting, monitoring and and updates of supporting
Procedure. Procedure –
completion of corrective work studies.
 Asset ISSOW  Asset safety
orders (as per priority
procedure. Changes to the system are in case / COMAH
assignment).
accordance with the Total Report.
Temporary / permanent change control procedure.  Relevant
changes to the system are in supporting
accordance with the Total safety studies
change control procedure and e.g. EERA, FEA,
Integrated Safe System Of Work QRA.

27
 Availability / References Means of Assurance Design References Means of Assurance References
Reliability Operational

(ISSOW).

Survivability References Means of Assurance Design References Means of Assurance References

Operational

M4.1_ S1 The TR continue to Provide reference Various formal safety studies Provide reference Ongoing suitability is addressed Provide reference
perform is function to: have been undertaken to assess to: within the scope of the risk to:
where subjected to all TR and muster area exposure to assessment in support of the
 Facility  Relevant  Change
reasonably foreseeable MAHs. Recommendations from Safety Case and updates of
safety safety studies Control
MAHs e.g. loss of these studies have been supporting studies.
philosophy. e.g. Procedures
containment, and incorporated into the design
 EERA.  Dropped object Changes to the system are in  Facility safety
environmental events where appropriate. The
 EER assessments. accordance with the Total case / COMAH.
for a period of [HOLD] primary means of limiting TR
Philosophy.  Fire and change control procedure.  Relevant
minutes. and muster area exposure to
 TR functional explosion supporting
MAHs has been through
Note - Temporary specification. assessment safety studies
location rather than protection.
refuges are designed (FEA).
and protected for the Continual review of platform  Quantified Risk
period of time required layout and facility drawings in Assessment
to ensure safe muster, relation to TR location has been (QRA).
search and rescue undertaken during project  TR impairment
operations (if defined design stages e.g. FEED, Detail analysis
in EER analysis), design etc.  EERA.
embarkation and  Facility safety
Note - As stated in Note 2, The
abandonment of the philosophy.
Temporary Refuge (TR) is a
installation during a  Facility layout
Safety Critical system made up
dimensioning review.
of various individual SECEs.
accidental event.
Many of these interacting
SECEs are required to fulfil a

28
Survivability References Means of Assurance Design References Means of Assurance References
Operational

functional role, in order for the

TR to remain protected for the
required period of time. Please
refer to the functional
requirements of the identified
principal interacting SECEs for
further information and
relevant design and operational
assurance activities.

The probability that Provide reference Various formal safety studies Provide reference Ongoing suitability is addressed Provide reference
the TR will be to: have been undertaken to assess to: within the scope of the risk to:
prevented from TR and muster area exposure to assessment in support of the
 Asset TR  Total Change
performing its function MAHs. Recommendations from Safety Case and updates of
impairment Control
due to the occurrence these studies have been supporting studies.
analysis. Procedure –
of other reasonably incorporated into the design of
 Asset QRA. Changes to the system are in  Asset safety
foreseeable events are the asset and TR where
 Asset ALARP accordance with the Total case / Report.
no greater than 1x10-3 appropriate.
demonstration. change control procedure.  Relevant
The asset TR Impairment supporting
analysis has shown the risk of safety studies
TR impairment as being ALARP. e.g. EERA, FEA,
The TRIF calculated in the QRA, TR
analysis is HOLD per year. This impairment
is in agreement with TRIF analysis.
calculated in asset QRA of
HOLD.
Note – The following is
provided for guidance only.
Sufficient evidence is required
to demonstrate that the
frequency with which
accidental events will result in a

29
 Survivability References Means of Assurance Design References Means of Assurance References
Operational

loss of TR integrity, within the

minimum stated endurance
time, does not exceed the 1x10-
3
order of per year. This
frequency should be reduced to
a lower level whenever this is
reasonably practicable. Where
the frequency is close to 1x10-3
per year, there should be
convincing arguments that it is
not reasonably practicable to
reduce it further.

OPERATIONAL VERIFICATION VSEL 3

No. Site Verification Reference Base Office Verification Reference

M4_V1 Review any changes made to the asset which affect M4 - All
the TR since the last operational verification visit.

Confirm that the modifications have been subjected

to the change management system and that any
actions arising have been satisfactorily closed out.

M4_V3 Confirm that all standard work text instructions have M4 - All
scheduled within the maintenance management
system have been completed as scheduled.

M4_V3 Witness function test of TR pressurisation tests Test will support

and confirm the following: Functionality Item M4.1_ F1

30
 OPERATIONAL VERIFICATION VSEL 3

No. Site Verification Reference Base Office Verification Reference

 Positive pressurisation of TR does not

exceed [HOLD – Insert number of air
changes] air changes per hour.
 Negative pressurisation of TR does not
exceed [HOLD – Insert number of air
changes] air changes per hour.

Note - The performance standard is not met if a

leak rate is in excess of the target value by
more than HOLD% (either positive or negative
pressurisation test).

M4_V4 Visual examination and function checks to Test will support

confirm the following: Functionality Item M4.1_ F1

 TR doors and door Frames are free from

significant damage (this includes all
external doors, internal airlock doors and
Internal fire doors.
 Door and door frame seals are in good
condition.
 Windows and window frames are free
from significant damage (where
applicable).
 Window and window frame seals are in
good condition.
 Doors fitted with door release mechanisms
close on demand.
 Manually operated doors open and close

31
 OPERATIONAL VERIFICATION VSEL 3

No. Site Verification Reference Base Office Verification Reference

without excess effort or force.

 Once closed, all doors remain closed until
deliberately re-opened.

M4_V5 Visual examination to confirm the following: Test will support

Functionality ItemM4.1_ F2
 Muster areas and access to evacuation
facilities are available for use and free
from obstructions.

32
SECE Number: M5 SECE Lifeboats: - Fire pumps Revision: Draft Rev B2 Date: 01/10/2013

Goal:
Upon manual or automatic demand, to deliver suitable quality firewater at the required flow, pressure and duration into the firewater ring main.

Scope / Equipment

SECE Sub Number SECE Sub System: Installation

Plant (1) Plant (2) Plant (n)

Tick these boxes to indicate which systems are

present at each location.

M5.1 Fire Pumps

M5.2 Firewater Pumps Enclosures.

M5.3 Diesel Day Tanks

Scope
Fire water pumps i.e. Main fire water pumps, fire water supply pumps feeding the main fire water pumps (if provided and critical to meet the
goal ) e.g. sea water lift pumps, fuel supplies, surge protection, instrumentation and control. There are (State numbers of pumps> x <Enter
configuration type e.g.50%, 100%, etc) fire pumps, (Indicate their location on the Facility).

Notes

Principal Interacting SECEs

SECE Number SECE System

C3 Fire & Gas System

33
C4 Emergency Shutdown Systems

M6 Firewater Main

M7 Firewater Systems

SECE Sub System:

Number Performance Requirements Means of Assurance

Functionality References Means of Assurance Design References Means of Assurance References

Operational

By automatic or manual activation, the system is able provide sufficient firewater of appropriate quality into the ring main to adequately service firewater user points.
M5.1_F1 The firewater pumps Provide reference Reasonably foreseeable fires Provide reference Operational assurance is Provide reference
will provide to: have been identified and are to: provided by routine inspection to:
firewater at Hold detailed within the asset fire and function checks, carried
 GS EP  GS EP SAF 322  GS EP EXP 311
barg pressure at and explosion risk out in accordance with relevant
SAF321 – Fire – Fixed Fire Plant Integrity
Hold m3/hr into the assessment. work instruction at frequencies
Pump Water Minimum
firewater ring main scheduled in as scheduled in
Stations and The asset fire and gas Systems.
the asset maintenance Inspection
for at least Hold Fire Water protection philosophy  Asset fire and Requirements
management system.
hours. Mains. defines how firewater is to explosion risk  GSP EP EXP 213
assessment. Changes to the system are in
Note: The stated (Additional be used to mitigate the Minimum
 Asset fire and accordance with the Total Maintenance
duration is to facilitate references are reasonably foreseeable fires
gas protection change control procedure. Requirements
safe, mustering and provided within defined within the fire and
philosophy.  Asset Inspection
evacuation of the General explosion risk assessment.
Specification).  Fire pump data and
personnel.
The philosophy defines the sheets. Maintenance
The safety critical required deluge/ spray and  Asset active Management
duration does not duration requirements for firewater System
relate to asset the worst case simultaneous protection  Total Change
protection 3/6 hours layout
fire zone deluge activation Control
as defined within GS

34
 SECE Sub System:

Number Performance Requirements Means of Assurance

Functionality References Means of Assurance Design References Means of Assurance References

Operational

EP SAF321. plus concurrent additional drawings. Procedure.

firewater users.  Firewater user
The detailed active firewater data sheets
suppression layout drawings (eg monitors,
define the type, number and sprays, hose
reels etc).
location of active firewater
‘users’.
Based upon the firewater
suppression layout drawings,
firewater hydraulic
calculations have been
performed. The calculations
define the required fire
pump flowrate at a defined
head pressure.
The firewater calculations
have been reviewed and
confirm that all firewater
user points have sufficient
flowrate and head for
defined simultaneous
firewater demands defined
within the asset firewater
philosophy.
M5.1_F2 The functionality - The auto and manual start Provide reference See M5.1_F1. See M5.1_F1.

35
 SECE Sub System:

Number Performance Requirements Means of Assurance

Functionality References Means of Assurance Design References Means of Assurance References

Operational

defined within functionality of the firewater to:

M5.1_F1 is auto pumps is defined within the
 Asset fire and
and/or manually asset fire and gas protection
gas protection
initiated upon philosophy. philosophy.
defined demands. The asset fire and gas cause  Asset fire and
and effects have been gas cause and
reviewed. The review effects charts.
confirmed that the cause
and effects fully enact
M5.1_F2 functionality
requirements.
Note: The provision of fire
resistant cabling for starter
circuits is not safety critical in
that i) Fire pump auto start is
initiated upon drop of f

M5.1_F3 The firewater Provide reference The firewater source/s are Provide reference See M5.1_F1. See M5.1_F1.
provided by the fire to: defined within the asset fire to:
water pumps will be and gas protection
 GS EP  Asset fire and
of a quality so as not philosophy.
SAF321 – Fire gas
to be detrimental to Pump Where relevant, the protection
the efficiency of Stations and required specification of philosophy.
firewater users. Fire Water firewater for user points is  Firewater
Mains detailed within the firewater user data
further references user datasheets.

36
 SECE Sub System:

Number Performance Requirements Means of Assurance

Functionality References Means of Assurance Design References Means of Assurance References

Operational

are provided The fire pump data sheets sheets.

within the specify the required quality  Relevant
General of firewater feeding them. HAZID,
Specification. Hazard identification (eg HAZOP and
HAZID), deviation analysis other risk
(eg HAZOP) and risk assessments.
assessments identify issues  Water quality
with respect to potential analysis.
blockage of the firewater  Relevant
system due to extraneous Firewater
matter within the firewater; P&IDs.
they also detail the relevant  Data sheets
control measures. of filters etc
Hold: Provide details of any located
chemical dosing/treatment within the
facilities if these have been fire pump
deemed to be required. suction lines.
 P&IDs of
The design of the firewater
chemical
supply system has been
dosing
reviewed. The review
system.
confirmed that the quality of
the firewater fed into the
suction side of the fire
pumps will not be
detrimental to the firewater
users functionality or

37
 SECE Sub System:

Number Performance Requirements Means of Assurance

Functionality References Means of Assurance Design References Means of Assurance References

Operational

availability.

The status of the firewater pumps is made visible to personnel in diverse asset locations.

M5.1_F4 The status of the Provide reference The locations at which Provide reference See M5.1_F1. See M5.1_F1.
criteria defined to: M5.1_F1 functionality to:
within M5.1_F1 is criteria are to be displayed is
 GS EP  Asset fire
made visible to SAF321 – Fire defined within the asset fire
pumps
personnel in Hold: Pump and gas protection
human
List the locations. Stations and philosophy.
machine
Fire Water The locations of the interface
Mains. firewater human machine basis of
(Further interfaces are defined within design.
references are the firewater user
provided within requirement specification.
the General
The specification has been
Specification).
reviewed confirming that
M5.1_F4 functionality is fully
enacted.
The operation of the firewater pumps does not give rise to surge, vacuum or water hammer pressures that may adversely affect the functionality and/or availability of the
fire ring main.

M5.1_F5 A surge valve/ pump Provide reference The surge, vacuum and Provide reference Maintenance and See M5.1_F1.
soft start/ to: water hammer pressures to: functionality checks of the
associated with the protective systems are
accumulator system  GS EP  Documents
operation of the fire pumps performed at intervals
(Hold delete/add as SAF321 – that describe

38
 SECE Sub System:

Number Performance Requirements Means of Assurance

Functionality References Means of Assurance Design References Means of Assurance References

Operational

appropriate) has Fire Pump have been calculated and the MAH scheduled in Hold: Define the
been installed to Stations reported. events. relevant maintenance
and Fire The surge/vacuum/ water  Surge, vacuum management system.
mitigate the adverse
Water hammer protective system and water Any deficiencies found
effects of fire pump
Mains basis of design has been hammer during the above likely to
operation. reviewed. The review analysis affect the functionality,
Further
confirmed that pump surge, report. availability or survivability of
references are
vacuum and water hammer  Specification/ the surge protection system
provided within
pressures will not affect the Data sheet for is treated as a downgraded
the General
functionality and/or the surge situation and managed
Specification.
availability of the fire ring protection accordingly.
main. system or
systems.

The firewater pump enclosures are constructed so as to enable the fire pumps to function for duration at least equal to that defined within M5.1_F1 during reasonably
foreseeable fires and explosions (external to the enclosures).

M5.2_F1 The firewater pump - Reasonably foreseeable fires Provide reference Operational assurance is Provide reference
enclosures are H/J60 and explosions are defined to: provided by routine to:
Hold: Revise to within the fire and explosion inspections, carried out in
 Asset fire and accordance with relevant work  GS EP EXP 311
enable the fire risk analysis.
explosion instruction at frequencies Plant Integrity
pumps to function The firewater pumps analysis. scheduled in as scheduled in Minimum
for duration at least enclosures are designed to  Data sheets for the asset maintenance Inspection
equal to that defined protect the pumps from Requirements
PFP applied to management system.
within M5.1_F1 reasonably foreseeable fires  GSP EP EXP 213
the enclosures. Changes to the system are in
during reasonably and explosions allowing Minimum
 Specification/ accordance with the Total
foreseeable fires and Maintenance

39
 SECE Sub System:

Number Performance Requirements Means of Assurance

Functionality References Means of Assurance Design References Means of Assurance References

Operational

explosions (external their functionality to be data sheets for change control procedure. Requirements
to the enclosures). sustained for a duration the fire pump  Asset Inspection
defined within M5.1_F1. enclosures wrt and
The data sheet/s for the fire explosion Maintenance
Management
pump enclosures have been overpressure
System
reviewed with respect to the design.
 Total Change
protection they provide Control
against the reasonably Procedure.
foreseeable fires and
explosions detailed within
the asset fire and explosion
risk assessment.
The review confirmed that
the fire pumps will continue
to function for the duration
defined within M5.1_F1
resulting from reasonably
foreseeable fire and
explosions.

A sufficient quantity of diesel fuel oil is stored and made available to the firewater pump diesel engines to enable the pumps to run for a period of time defined within
M5.1_F1.

M5.3_F1 Hold m3 of diesel - The required diesel fuel oil Provide reference Operational assurance is Provide reference
fuel oil is stored and consumed by the fire pump to: provided by routine inspection to:
made available to engines to meet and function checks, carried
 Asset fire and out in accordance with relevant  GS EP EXP 311
the firewater pump functionality M5.1_A1 has

40
 SECE Sub System:

Number Performance Requirements Means of Assurance

Functionality References Means of Assurance Design References Means of Assurance References

Operational

diesel engines. been calculated. gas protection work instruction at frequencies Plant Integrity
The diesel fire pump engine philosophy. scheduled in as scheduled in Minimum
and associated diesel tank/s  Diesel fire the asset maintenance Inspection
data sheets have been management system. Requirements
pump engine
 GSP EP EXP 213
reviewed. data sheet. Changes to the system must be
Minimum
The review confirmed that  Diesel fuel oil in accordance with the Total
Maintenance
capacity change control procedure.
The installed diesel fuel oil Requirements
tank is 120% (Hold: Change calculations.  Asset Inspection
as necessary) of the required  Fire pump and
capacity to meet M5.1_A1 diesel supply Maintenance
(based upon full diesel data sheet/s. Management
engine load conditions). System
 Total Change
Control
Procedure.

The functionality defined within M5.3_F1 is not impeded by ambient temperatures.

M5.3_F2 Trace heating has - The environmental basis of Provide reference See M5.3_F1. See M5.3_F1.
been applied to the design conditions have been to:
diesel fuel oil system reviewed and compared to
 Diesel
to maintain the the diesel waxing
supplier’s data
temperature of temperature. This review
sheet.
diesel above its wax has shown that diesel
 Environmental
formation waxing is credible. Hold:
basis of design.
temperature of Hold Delete this row if waxing is
 Drawings
Deg C. not reasonably foreseeable.
P&IDs

41
 SECE Sub System:

Number Performance Requirements Means of Assurance

Functionality References Means of Assurance Design References Means of Assurance References

Operational

The trace heating isometrics detailing the

have been reviewed. The trace heating.
review confirmed that trace  Trace heating
heating has been applied to data sheet and
all parts of the fuel oil information to
system vulnerable to waxing show the
and that the trace heating is number of
suitable and sufficient to wraps per m.
maintain the temperature
above the waxing
temperature (Hold: Reword
as necessary).

Availability / References Means of Assurance Design References Means of Assurance References

Reliability Operational

M5.1_A1 Unless subject to a Provide reference The availability has been Provide reference See M5.1_F1. See M5.1_F1.
risk assessment the to: assured by provision of n to:
functionality defined (Hold – insert number)
 Asset QRA.  GS EP SAF
in M5.1 is available independent firewater
321 Fire
at all times that a pumps where failure of one
Pump
reasonably of the pumps will not
Stations and
foreseeable demand prevent the functionality
Fire Water
may be placed upon defined within M5.1_F1.
Mains.
the firewater pumps. Each firewater pump has  Asset fire and

42
 Availability / References Means of Assurance Design References Means of Assurance References
Reliability Operational

Note: Any individual been subject to a reliability gas

firewater pump analysis to ensure that the protection
provided in excess of availability of each pump is philosophy.
n+1 may be taken off satisfactory and that the  Hydraulic
line for a defined ability of the pumps to start modelling
period of time upon demand is report.
without a risk independent from one  Asset active
assessment (where n another. fire
is the maximum The fire pump data sheets, suppression
credible number of hydraulic modelling and fire basis of
firewater pumps and gas cause and effects design.
that may have a have been reviewed. The
demand placed upon review confirmed that the
them). functionality defined within
M5.1_F1 is maintained when
Note: This
one of the n pumps fails to
availability
start or fails on duty. The
statement must be
review also confirmed that
consistent within the
the n pumps are
QRA.
independent of one another
(with respect to functionality
described in M5.1_F1).
M5.1_A2 The fire pump surge Provide reference Hold: This section needs to be Provide reference See M5.1_F1. See M5.1_F1.
protection system is to: updated dependent upon the to:
available at all times results of the surge, vacuum
 SECEs M6 – and water hammer analysis  Surge,
a demand is likely to
Firewater report. vacuum and
be placed upon the
Main and water
fire pumps unless an
M7 – hammer
assessment is
Firewater analysis

43
 Availability / References Means of Assurance Design References Means of Assurance References
Reliability Operational

performed that systems. report.

confirms infrequent
activation of the fire
pumps without
protection is unlikely
to adversely affect
the firewater ring
main and firewater
system functionality
or availability.
Note: This row may
not be applicable
M5.2_A1 Unless subject to a - - Provide reference See M5.2_F1. See M5.2_F1.
risk assessment the to:
functionality defined
 Fire pump
in M5.2_F1 for a
enclosure
specific enclosure
passive
are available at all
and /or active
times that a
fire
reasonably
protection
foreseeable demand
philosophy.
will be placed upon
 Installed
the firewater pumps
passive/
within the enclosure.
active data
sheets.

M5.3_A1 The availability of an - The P&IDs of the diesel fuel Provide reference See M5.3_F1. See M5.3_F1.
individual diesel fuel oil supply lines have been to:
oil storage vessel reviewed. The review of
 PFDs/ P&IDs

44
 Availability / References Means of Assurance Design References Means of Assurance References
Reliability Operational

and its associated confirmed that the detailing the

supply lines to the functionality defined within relationship
fire pump engine M5.1 is not dependent upon between the
does not affect the the availability of a single fuel oil tanks
availability of the fire fuel oil tank. and the fire
pumps detailed in pump diesel
M5.1_A1. engines
 Trace heating
data sheet
and
information
to show the
number of
wraps per m.

Survivability References Means of Assurance Design References Means of Assurance References

Operational

M5.1_S1 The functionality - The fire pumps are located in M5.2 See M5.2. See M5.2.
defined above will be a safe position and/or
capable of surviving housed within enclosures
reasonably designed to protect them
foreseeable MAH from reasonably foreseeable
events for a period hazards for a duration at
of time at least equal least equal to that defined
to that defined within M5.1_A1. Hold: Revise
within M5.1_A1. this statement to reflect the fire
and asset fire and gas
protection philosophy.

45
 Survivability References Means of Assurance Design References Means of Assurance References
Operational

M5.2_S1 The functionality - - - See M5.2_F1. See M5.2_F1.

defined within
M5.2_F1 is required
to be maintained
during MAH events.
M5.3_S1 The diesel fuel tanks - The location of the diesel Provide reference See M5.3_F1. See M5.3_F1.
supplying the fire fuel oil tanks have been to:
pumps and their reviewed against the
 Fire and
supply lines to the findings of the fire and
explosion risk
fire pump engines explosion risk analysis.
analysis.
should be so The review has confirmed  Plot plans
positioned and/or that the diesel fuel oil tanks showing the
protected such that supplying the fire pump location of
they continue to engines are not vulnerable the diesel fuel
support the to MAHs for a time period oil tanks.
functionality defined defined within M5.1_F1.
within M5.1_F1.

OPERATIONAL VERIFICATION VSEL 3

No. Site Verification Reference Base Office Verification Reference

M5_V1 - - Review the maintenance records associated M5.1_F1, M5.1_F2,

with the fire pumps since the last verification M5.1_F3, M5.1_F4,
visit. Confirm that all of the planned M5.1_F5, M5.1_A1,
maintenance activities have been performed M5.1_A2,
and that actions arising are being satisfactorily

46
 OPERATIONAL VERIFICATION VSEL 3

tracked through to completion.

M5_V2 - - Review any modifications performed on the fire M5.1_F1, M5.1_F2,

pumps and associated control system since the M5.1_F3, M5.1_F4,
last verification visit. Confirm that any M5.1_F5, M5.1_A1,
implemented changes have been assessed in M5.1_A2,
accordance with relevant change control
procedures and that actions have are being
satisfactorily tracked through to completion.

M5_V3 Witness the testing of a fire pump and M5.1_F1 - -

confirm that it is at least capable of
supplying the necessary flow and head into
the fire ring main under the defined test
conditions.

M5_V4 Witness a test in which the fire ring main M5.1_F2 - -

pressure is depressurised and confirm that
the fire pumps autostart in compliance
with the fire and gas cause and effects.

M5_V5 Witness a test the manual starting of the M5.1_F2 - -

fire pumps.

M5_V6 Witness that the fire pump status criteria M5.1_F4 - -

are correctly presented at the fire control
panel/s.

47
 OPERATIONAL VERIFICATION VSEL 3

M5_V1 - - Review the maintenance records associated M5.3_F1, M5.3_F2,

with the diesel fuel oil tanks since the last M5.3_A1, M5.3_S1.
verification visit. Confirm that all of the
planned maintenance activities have been
performed and that actions arising are being
satisfactorily tracked through to completion.

M5_V2 - - Review any modifications performed on the M5.3_F1, M5.3_F2,

diesel fuel oil tanks and associated lines since M5.3_A1, M5.3_S1.
the last verification visit. Confirm that any
implemented changes have been assessed in
accordance with relevant change control
procedures and that actions have are being
satisfactorily tracked through to completion.

M5_V3 Visually inspect the levels within the diesel M5.3_F1. - -

fuel oil tanks supplying the fire pump
engines. Confirm that a sufficient quantity
of fuel oil is present to satisfy M5.3_F1.

M5_V4 Visually inspect the fuel oil trace heating M5.3_F2 - -

and confirm its satisfactory operation.

48
SECE Number: M6 Firewater Ring Main & Supports Revision: Draft Rev B2 Date: 09/10/2013

Goal:
To provide an independent means for all personnel to escape from the asset in the event that primary and preferred means of evacuation are unavailable.

Scope / Equipment

SECE Sub Number SECE Sub System: Installation

Plant (1) Plant (2) Plant (n)

Tick these boxes to indicate which systems are

present at each location.

M6.1 Firewater Ring Main & Supports

Scope
The following is included within the scope of this PS:
 Firewater ringmain piping, associated valves, supports, control and instrumentation.
The following is omitted from the scope of this PS:
 Cathodic protection system, if provided – Considered under P18.
 Deluge system – Considered under M7.
 Manual fire fighting equipment - Considered under M10.
 Foam Systems - Considered under M8.
 Fire water Pump - Considered under M5.
 Sprinklers and Fine Water Spray Systems - Considered under M9.

Notes
Firewater main over pressure protection is detailed within performance standard M5
The functionality of the jockey pump/s is not safety or environmentally critical.

Principal Interacting SECEs

49
SECE Number SECE System

M5 Firewater Pumps

M7 Firewater Systems

SECE Sub System:

Number Performance Requirements Means of Assurance

Functionality References Means of Assurance Design References Means of Assurance Operational References

Upon demand the firewater ring main is capable of conveying the required pressure and flow of firewater to all of its the user points.

M6.1_F1 The firewater main GS EP SAF 321 The pump performance Provide The firewater main is subject to Provide references
and its associated Fire pump discharge curves and the fire references to: detailed inspection, maintenance and to:
valves and supports is stations and fire pump surge, hammer and functional testing defined within
 The pump  The relevant
constructed so as to water mains. vacuum analysis have been HOLD: Define the relevant
discharge maintenance
contain the firewater reviewed. maintenance management system.
Further curve/s. management
within it for all
references are The fire water system  The fire Any proposed changes to the system.
foreseeable
provided within components (flanges, fittings, pump surge, firewater main are assessed in  Change
operating conditions.
the GS. line pipe, etc.) are designed hammer and accordance with local change control control
to ASME B 16.5 for flange vacuum procedures. procedure.
class 150#. analysis.
 Firewater
The above reviews confirmed
main P&IDs.
that the fire main at least
meets the functional
specification.

M6.1_F2 The firewater main - The asset fire system basis of Provide The management of the firewater Provide references
can maintain the design defines the reasonably isolation valves is controlled in

50
 SECE Sub System:

Number Performance Requirements Means of Assurance

Functionality References Means of Assurance Design References Means of Assurance Operational References

pressure and flow to foreseeable simultaneous fire references to: accordance with local procedures. to:
each user point for all zones and other fire water
 The fire Ongoing performance of the  Procedures
foreseeable fire users. The basis of design is
system basis firewater main is assessed as part of that cover the
demand scenarios. an input into the fire system
of design. M6.1_F1 operational assurance operation of
hydraulic analysis.
 The firewater activities. firewater
A hydraulic analysis of the system main isolation
firewater main has been hydraulic valves.
performed. analysis.
A review of the analysis
confirms that the firewater
main allows the flow and
pressure functional
requirements of the firewater
users to be at least met.

The functionality of the firewater main is resilient to external damage.

M6.1_F3 The firewater main is See M6.1_F1. The fire main P&IDs and fire Provide See M6.1_F1. See M6.1_F1.
designed so as to system basis of design have references to the:
deliver firewater been reviewed.
 Firewater
from at least two
The review confirmed that system basis
opposing directions
the defined functional of design.
to each defined fire
specifications are at least  Firewater
zone.
met. main P&IDs.
Note: This functional
requirement is not
applicable to some
jetties, certain

51
 SECE Sub System:

Number Performance Requirements Means of Assurance

Functionality References Means of Assurance Design References Means of Assurance Operational References

helideck systems etc.

Local expert fire
engineering advice
should be sought.

M6.1_F4 The fire main is See M6.1_F1. See M6.1_F2. See M6.1_F2. See M6.1_F1. See M6.1_F1.
served by isolation
valves that allow
isolation of damaged
sections of the fire
main whilst
maintaining firewater
supply to each fire
zone.

M6.1_F5 Access to the - Access to/from firewater GS EP SAF 351. Continued access / egress to the Provide references
firewater main main isolation valves is Escape, firewater main isolation valve is to the:
isolation valves is treated as secondary escape evacuation and assured by maintenance of good
 Housekeeping
present at all times routes as defined within GS rescue from fixed housekeeping standards in
procedures.
the fire pumps are EP SAF 351, as such requiring installations. accordance with local procedures.
available. a width of at least 0.8m and
Provide
preferentially 1m.
references to the:
The layouts & elevation
 Relevant
drawings/ three dimensional
firewater
models showing the relative
main plot/
location of the fire isolation
side
valves and adjacent plant and
elevation
equipment have been
drawings/ 3D
reviewed.

52
 SECE Sub System:

Number Performance Requirements Means of Assurance

Functionality References Means of Assurance Design References Means of Assurance Operational References

The review has confirmed models.

that a clear access width of
0.8m is available for each
firewater main isolation
valve.

M6.1_F6 The position of each See M6.1_F1. The data sheets of the Provide See M6.1_F1. See M6.1_F1.
firewater main firemain isolation valves have references to the:
isolation valve is been reviewed. The review
 Firewater
readily discernable confirms that suitable valve
main
by visual inspection. positional indicators are
isolation
present and that each valve is
In the case of valve data
clearly tagged.
remotely operated sheets.
valves, the position The user requirement  Firewater
of the valve is also specifications for the panel
made apparent at firewater pump/ main control interface
the firewater pump panel/s have been reviewed. user
main control panel/s. requirement
The review confirmed that
specification.
the functional specifications
are at least met.

The functionality of the firewater ring main must not be impeded by low temperatures.

M6.1_F7 Sections of the - The historical environmental Provide See M6.1_F1. See M6.1_F1.
firewater ring main temperature of the asset references to the:
and associated location has been reviewed.
 Asset/
valves that are The review confirmed that
project
vulnerable to the firewater system is prone
environ
freezing are to ice blockage. Hold: Revise

53
 SECE Sub System:

Number Performance Requirements Means of Assurance

Functionality References Means of Assurance Design References Means of Assurance Operational References

protected by burial/ as necessary. Delete this row mental

trace heating Hold: if not applicable. basis of
Revise as necessary. design.
The asset/project
 Historical
environmental basis of design
environment
defines the minimum
al
temperature that the fire
temperature
system is required to operate
report.
at. The basis of design
 Firewater
specifies frost protection
system basis
including auto free drain
of design.
points/ trace heating/
 Firewater
underground burying /other
system
Hold: Define.
P&IDs.
The fire system P&IDs have
been reviewed and compared
with the basis of design. The
review has confirmed that
the firewater system has
enacted the frost protection
requirements of the basis of
design.

54
 SECE Sub System:

Number Performance Requirements Means of Assurance

Availability References Means of Assurance Design References Means of Assurance Operational References

M6.1_A1 Unless supported by Provide A reliability analysis of the Provide The availability of the firewater main Provide references
a risk assessment, the references to firewater system including references to the: system is underpinned by the to the:
functionality the: the firewater pumps and maintenance, inspection and testing
 Firewater  Downgraded
described above is associated ring mains has regime outlined in the functionality
 QRA. system situations
available at all times been performed. criteria above.
reliability procedure.
the fire pumps are
The firewater main is analysis. Failure of the firewater main or its
available.
positioned and/or protected  Vehicular associated supports and valves to
Note: This statement so as to avoid the risks impact risk meet the above functionality is
should reflect the associated with assessments. defined as being unacceptable and
assumed availability dropped/swining loads or  Dropped are managed via the downgraded
documented in the vehicular impacts. object and situations procedure.
asset QRA. swinging load
The review indicated that the
assessments.
reliability of the fire main is
greater than that of the fire
pumps.

55
 SECE Sub System:

Number Performance Requirements Means of Assurance

Survivability References Means of Assurance Design References Means of Assurance Operational References

M6.1_S1 For a period of time See M6.1_F1. The requirement for the fire Provide references to M6.1_F4 M6.1_F4
defined within M5; main to survive MAH events the:
the functionality has been incorporated into
 MAH analysis
described above does the firewater main basis of
documentation.
not be impaired by design.
 Firewater main
reasonably
The fire main isometrics have Basis of Design.
foreseeable MAHs.
been reviewed. The review  Relevant
has confirmed that the fire firewater main
main and associated isolation protection
valves are, so far as is philosophy.
reasonably practicable,
positioned and/or protected
to survive MAHs for a period
of time defined within M5.
See M6.1_F4.

56
 OPERATIONAL VERIFICATION VSEL 3

No. Site Verification Reference Base Office Verification Reference

- - Review all modifications since the last verification M6.1_F1, M6.1_F2,

visit. Confirm that all modifications that could M6.1_F3, M6.1_F4,
potentially affect the functionality, availability or M6.1_F5, M6.1_F6,
M6_V1
survivability of the fire main have been subject to M6.1_F7, M6.1_A1,
the change control procedure and that all actions are M6.1_S1.
being tracked through to completion.

Inspect a sample of the firewater main isolation - -

valves. Confirm that:
 The access functionality criteria are at
M6.1_F5
least met.
 The status of all firewater main
M6_V2 isolation valves can be visually
M6.1_F6
ascertained locally.
 The status of remotely activated
firewater main isolation valves can be
ascertained at each firewater system
control panel provided.

Witness the functionality tests of the installed M6.1_F7 - -

M6_V3 firewater frost protection systems and confirm
their satisfactory operation.

- - Review the operational records associated with the M6.1_A1

isolation of the firewater main. Confirm that any
M6_V4 operations requiring the isolation of the main have
been supported by a suitable and sufficient risk
assessment.

M6_V5 - - Review the maintenance, inspection and testing M6.1_F1

records associated with the firewater ring main and

57
 OPERATIONAL VERIFICATION VSEL 3

confirm that:
 The maintenance programme is being
executed to plan.
 Identified issues are being tracked through
to completion.

[During a full wet test of firewater system – M6.1_F4 - -

See M5 and M7] Witness the satisfactory
M6_V6 isolation of a section of ring main to confirm
that firewater main isolation valves effectively
isolate the chosen section.

Visually inspect a sample of any fire protection M6.1_S1 - -

applied or shielding provided to protect the
M6_V6
firewater main and confirm satisfactory
condition.

58
SECE Number: M7 SECE System: Firewater Systems Revision: Rev B2 Date: 01/10/2013

Goals:
To contain and/or extinguish pool fires and reduce the effects of smoke and thermal radiation from all fire events.

Scope / Equipment

SECE Sub Number SECE Sub System: Installation

Plant (1) Plant (2) Plant (n)

Tick these boxes to indicate which systems are

present at each location.

M7.1 Deluge System

M7.2 Fixed / Oscillating Firewater Monitors

M7.3 Sprinkler System

M7.4 Hydrants

M7.5 Hose Reels

Scope
The scope of this performance standards includes:
 All firewater systems fed from the firewater pumps including, but not limited to:
o Deluge System including control system, dry deluge piping and nozzles .
o Fixed / Oscillating Firewater Monitors.
o Sprinkler System including the piping, the fusible head and nozzle.
o Hydrants.
o High Capacity Hose Reels.
The following is omitted from the scope of this PS:

59
  Foam Systems – Covered under M8.
 Liquid and gaseous extinguishing systems not fed from the firewater pumps – Covered under M9.
 Portable / trolley mounted extinguishers – Covered under M10.

Notes

Principal Interacting SECEs

SECE Number SECE System

C3 Fire & Gas Control System

E1 PA/GA System.

M5 Firewater Pumps

M6 Firewater Main

M8 Foam Systems

60
 SECE Sub System:

Number Performance Requirements Means of Assurance

Functionality References Means of Assurance Design References Means of Assurance References

Operational

Distribute sufficient pressure / flow of water to meet the design application requirements in each deluge area

M7.1_F1 Deluge system meet Provide Reasonably foreseeable fires Provide references to Operational assurance is Provide reference to:
the minimum rates references to: are detailed and assessed the: provided by routine
and pressures shown within the asset fire and inspection and function  GS EP EXP 311 Plant
 GS EP SAF  GS EP SAF 322 Integrity Minimum
in Table 1 presented explosion risk assessment. checks, carried out in
322.  Asset fire and Inspection
at the back of this accordance with relevant
 Table 1. The asset fire protection explosion Requirements
document. work instruction at
 Asset fire philosophy details how fixed analysis.  GSP EP EXP 213
frequencies scheduled in as
Note - Table 1 make protection fire fighting systems are to be  Asset fire Minimum
scheduled in the asset
reference to the philosophy. used to mitigate fire hazards. protection Maintenance
maintenance management
firewater demand The philosophy enacts philosophy. Requirements
system.
design case to application rates specified in  Asset fixed fire  Asset Inspection and
emphasise that the GS EP SAF 322. system basis of Changes to the system are Maintenance
required design. in accordance with the Total Management System
The detailed active firewater
area/equipment  Asset fixed fire change control procedure.
suppression layout drawings
coverage flows and system P&IDs and
define the type, number and
pressures must be layout drawings.
location of active firewater
achieved for the  Fire System data
users.
maximum demand sheets.
case. The complete Based upon the firewater  TA report
hydraulic data can be suppression layout drawings, confirming
difficult for older firewater hydraulic compliance with
facilities. To calculations have been codes, standards
complement the data performed. The calculations and statutory
extractable from the define the required flowrate regulations
hydraulic analysis and pressures to be delivered  Affiliate / Asset
report, there may be at the deluge nozzles, these Procurement and
field test report on are presented in Table 1. QA Procedure

61
 SECE Sub System:

Number Performance Requirements Means of Assurance

Functionality References Means of Assurance Design References Means of Assurance References

Operational

deluge valve tests, The firewater calculations

operating procedures have been reviewed and
and vendor confirm that all firewater
datasheets. user points have sufficient
flowrate and head for
Note: The ability of
defined simultaneous
the firewater pumps
firewater demands defined
and fire main to
within the asset firewater
deliver the overall
philosophy.
system flowrate is
addressed under Fire The fire system P&IDs, data
Water Pump (F17) sheets and layout plot plans
and Fire Main (F18). have been reviewed. The
review confirms that the
functional design
specifications are at least
met.
Documented confirmation by
suitably competent technical
authority that system
complies with company
standards and statutory
regulations.
Procurement and QA
procedures ensure original
equipment and components
comply with the relevant
design codes, company

62
 SECE Sub System:

Number Performance Requirements Means of Assurance

Functionality References Means of Assurance Design References Means of Assurance References

Operational

standards and statutory

regulations.

M7.1_F2 Deluge system is Provide The asset fire protection Provide reference to: See M7.1_F1. See M7.1_F1.
activated via the reference to: philosophy details the
 Asset FERA.
following: activation philosophy for the
 GS EP SAF  Asset fire
deluge system.
 [HOLD – Insert 322. protection
asset specific  Firewater Documented confirmation by philosophy.
systems] e.g. functional suitably competent technical  TA report
 Automated specification authority that system confirming
signal from Fire . complies with company compliance with
and Gas Panel]. standards and statutory codes, standards
 Manual release regulations. and statutory
valve at deluge Procurement and QA regulations
cabinet. procedures ensure original  Affiliate / Asset
 Manual release equipment and components Procurement and
button in control comply with the relevant QA Procedure
room. design codes, company
 Fusible bulbs. standards and statutory
regulations.

M7.1_F4 Firewater at the most Provide The asset fire protection Provide reference to: See M7.1_F1. See M7.1_F1.
remote water spray reference to: philosophy details the
 Asset FERA.
nozzle to be fully activation philosophy for the
 GS EP SAF  Asset fire
established within deluge system. Deluge
322. protection
[HOLD – Insert value] system response times have
 Asset fire philosophy.
seconds from been determined based on
protection  Firewater
confirmed detection. Total guidance and other

63
 SECE Sub System:

Number Performance Requirements Means of Assurance

Functionality References Means of Assurance Design References Means of Assurance References

Operational

philosophy. applicable standards. sensitivity

analysis.
Sensitivity analysis on deluge
 Equipment data
response time has been
sheets.
carried out as part of the FRA
 Firewater
studies to determine the
suppression
criticality of the time taken to
layout drawings.
provide deluge coverage to
the protected area.  Relevant pump
performance
A review of the firewater curves.
suppression layout drawings,  Total approved
firewater hydraulic vendor list.
calculations and firewater  TA report
pump performance curves confirming
has been undertaken. This compliance with
review confirms that codes, standards
performance requirements and statutory
are capable of being met. regulations
Procurement and QA  Affiliate / Asset
procedures ensure original Procurement and
equipment and components QA Procedure
comply with the relevant
design codes, company
standards and statutory
regulations.

Distribute sufficient pressure / flow of water to meet the design application requirements for fire monitors

64
 SECE Sub System:

Number Performance Requirements Means of Assurance

Functionality References Means of Assurance Design References Means of Assurance References

Operational

M7.2_F1 Fixed monitors Provide See M7.1_F1 See M7.1_F1 See M7.1_F1. See M7.1_F1.
achieve minimum references to:
rates and pressures
 Table 1.
shown in Table 1
 Asset fire
protection
philosophy.

M7.2_F2 Monitors are on Provide The asset fire protection Provide reference to: See M7.1_F1. See M7.1_F1.
actuation oscillate reference to: philosophy details how fixed
 Asset fire
smoothly and fully in fire fighting systems are to be
 Asset fire protection
the horizontal plane used to guard against fire
fighting philosophy.
(this is applicable for hazards.
philosophy.  TA report
both manual and
Documented confirmation by confirming
automatic monitors).
suitably competent technical compliance with
authority that system codes, standards
complies with company and statutory
standards and statutory regulations
regulations.  Affiliate / Asset
Procurement and QA Procurement and
procedures ensure original QA Procedure.
equipment and components
comply with the relevant
design codes, company
standards and statutory
regulations.

M7.2_F3 Helideck monitors See M7.2_F2 See M7.2_F2 See M7.2_F2 See M7.1_F1. See M7.1_F1.

65
 SECE Sub System:

Number Performance Requirements Means of Assurance

Functionality References Means of Assurance Design References Means of Assurance References

Operational

are pneumatically
operated and can be
remotely operated
from a remote
control panel, even
when all power is
lost.

Distribute sufficient pressure / flow of water to meet the design application requirements for sprinkler system

M7.3_F1 Sprinkler systems are See M7.1_F1 See M7.1_F1 See M7.1_F1 See M7.1_F1. See M7.1_F1.
supplied by the
firewater ring as
detailed in Tables 2 &
3.

M7.3_F2 Sprinkler system are Provide See M7.1_F2 See M7.1_F2 See M7.1_F1. See M7.1_F1.
activated via the reference to:
following:
 Asset FERA.
 HOLD – Insert  Asset fire
asset specific protection
systems e.g. philosophy.
 [Automated
signal from Fire
and Gas Panel].
 Manual release
valve at deluge
cabinet.

66
 SECE Sub System:

Number Performance Requirements Means of Assurance

Functionality References Means of Assurance Design References Means of Assurance References

Operational

 Manual release
button in control
room.
 Fusible bulbs.

Distribute sufficient pressure / flow of water to meet the design application requirements for hydrants

M7.4_F1 Hydrants are located Provide The asset fire protection Provide references to: See M7.1_F1. See M7.1_F1.
such that all areas of references to: philosophy details how fixed
 GS EP SAF 322.
plant not covered by fire fighting systems are to be
 GS EP SAF  Asset FERA.
any other area fire used to guard against fire
322.  Asset fire
protection can be hazards.
protection
reached by two
Locations of the hydrants are philosophy.
hydrants.
shown on the Escape Route  Escape Route and
and Safety Equipment layout Safety Equipment
plot plans which are layout plot plans.
displayed at strategic  TA report
locations throughout the confirming
installation. compliance with
Documented confirmation by codes, standards
suitably competent technical and statutory
authority that hydrant regulations
location complies with  Affiliate / Asset
company standards and Procurement and
statutory regulations. QA Procedure

Procurement and QA
procedures ensure original

67
 SECE Sub System:

Number Performance Requirements Means of Assurance

Functionality References Means of Assurance Design References Means of Assurance References

Operational

equipment and components

comply with the relevant
design codes, company
standards and statutory
regulations.

M7.4_F2 Hydrants to be Provide See M7.1_F1 See M7.1_F1 See M7.1_F1. See M7.1_F1.
capable of delivering references to:
a minimum flow-rate
 GS EP SAF
of HOLD m3/hour.
322.
For safety of
personnel handling
the hose the hydrant
outlet pressure must
be limited to HOLD
barg.

Distribute sufficient pressure / flow of water to meet the design application requirements for high capacity hose reels

M7.5_F1 High Capacity Hose Provide The asset fire protection Provide references to: See M7.1_F1. See M7.1_F1.
reels to be located in references to: philosophy details how fixed
 GS EP SAF 322.
nominated areas as fire fighting systems are to be
 GS EP SAF  Asset FERA.
indicated on the Fire used to guard against fire
322.  Asset fire
& Safety Equipment hazards.
protection
Layout drawings.
Locations of the high capacity philosophy.
hose reels are shown on the  Escape Route and
Escape Route and Safety Safety Equipment
Equipment layout plot plans layout plot plans.

68
 SECE Sub System:

Number Performance Requirements Means of Assurance

Functionality References Means of Assurance Design References Means of Assurance References

Operational

which are displayed at  TA report

strategic locations confirming
throughout the installation. compliance with
codes, standards
and statutory
regulations
 Affiliate / Asset
Procurement and
QA Procedure

M7.5_F2 Each hose reel is of Provide Documented confirmation by Provide references to: See M7.1_F1. See M7.1_F1.
the drum type references to: suitably competent technical
 TA report
mounted in cabinets authority that hose reel
 GS EP SAF confirming
and capable of design, specification and
322. compliance with
delivering a minimum manufacture complies with
codes, standards
flow of HOLD the relevant design codes,
and statutory
m3/hour. company standards and
regulations.
statutory regulations.
 Affiliate / Asset
Procurement and QA Procurement and
procedures ensure original QA Procedure
equipment and components
comply with the relevant
design codes, company
standards and statutory
regulations.

69
 SECE Sub System:

Number Performance Requirements Means of Assurance

Availability / References Means of Assurance Design References Means of Assurance References

Reliability Operational

M7_A1 Firewater delivery Provide reference Documented confirmation by Provide references See M7.1_F1. See M7.1_F1.
systems to be to: suitably competent technical to:
continuously available authority that the, specification
 Asset active  TA report
during platform and manufacture of relevant
Fire confirming
production. firewater systems complies
Protection compliance
with the relevant design codes,
In the event of critical philosophy. with codes,
company standards and
unavailability of the  GS EP SAF standards and
statutory regulations.
firewater delivery 322 Fixed statutory
systems, with a Firewater Design reviews, approvals and regulations.
duration that exceeds Systems the associated QA/QC  Affiliate / Asset
a single shift, processes completed during the Procurement
production operations engineering phase of the Asset and QA
may only continue in EPC provide the primary Procedure
controlled conditions, assurance activity that the
where a risk firewater delivery systems are
assessment has been fit for purpose.
completed and
accepted by senior
management; and
when suitable
temporary provisions
are in place.
Any failure of a safety
critical element to

70
 SECE Sub System:

Number Performance Requirements Means of Assurance

Availability / References Means of Assurance Design References Means of Assurance References

Reliability Operational

function on demand is
treated as
unacceptable and the
root cause identified
and rectified.
Planned outages are
subject to appropriate
risk assessment and
may require
alternative fire-fighting
systems to be put in
place during the period
of the outage.

SECE Sub System:

Number Performance Requirements Means of Assurance

Survivability References Means of Assurance Design References Means of Assurance References

Operational

M7_S1 Deluge skids to be Provide reference Various safety studies assess Provide references Ongoing suitability is addressed Provide
protected from fire to: the potential impairment of to the: within the scope of the risk reference to:
and explosion by safety systems during MAHs assessment in support of the
 Asset active  MAH analysis  Total
location away from and makes recommendations Safety Case / COMAH and
Fire documentation Change
protected area. with respect to protection updates of supporting studies.
Protection  TA report Control

71
 SECE Sub System:

Number Performance Requirements Means of Assurance

Survivability References Means of Assurance Design References Means of Assurance References

Operational

philosophy. strategy including achievement confirming Changes to the system are in Procedure
 GS EP SAF of this through design location, compliance accordance with the Total  Asset safety
322 Fixed redundancy and diversity in with codes, change control procedure. case /
Firewater equipment. standards and COMAH
Systems statutory Report.
The location relevant firewater
regulations  Relevant
system has been reviewed. The
 Affiliate / Asset supporting
review has confirmed that the
Procurement safety
equipment is, so far as is
and QA studies e.g.
reasonably practicable,
Procedure EERA, FEA,
positioned and/or protected to
QRA.
survive MAHs.
Documented confirmation by
suitably competent technical
authority that the, specification
and manufacture of relevant
firewater systems complies
with the relevant design codes,
company standards and
statutory regulations.
Design reviews, approvals and
the associated QA/QC
processes completed during the
engineering phase of the Asset
EPC provide the primary
assurance activity that the
firewater delivery systems are
fit for purpose.

72
 SECE Sub System:

Number Performance Requirements Means of Assurance

Survivability References Means of Assurance Design References Means of Assurance References

Operational

M7_S2 Deluge pipe work to be See M7.1_S1 See M7.1_S1 See M7.1_S1 See M7.1_S1 See M7.1_S1
routed to minimise
effect of predicted
explosion
overpressure.

M7_S3 Single items of fire See M7.1_S1 See M7.1_S1 See M7.1_S1 See M7.1_S1 See M7.1_S1
fighting equipment
may be rendered
unavailable or
inaccessible as a result
of a fire or accident.
Sufficient redundancy
is provided to ensure
that a minimum
provision is always
available.

OPERATIONAL VERIFICATION VSEL 3

No. Site Verification Reference Base Office Verification Reference

M7_V1 Review any changes made to the asset which could M7 - All
affect the firewater water systems since the last
operational verification visit.

73
 OPERATIONAL VERIFICATION VSEL 3

Confirm that the modifications have been subjected

to the change management system and that any
actions arising have been satisfactorily closed out.

M7_V2 Confirm that all standard work text instructions have M7 - All
scheduled within the maintenance management
system have been completed as scheduled.

M7_V3 Visual examination of deluge piping, nozzles This will support

etc. Functionality Items
M7.1_F1, M7.1_F3,
M7.1_F4, M7.1_F6

M7_V4 Witness function test (dry tests) of deluge This will support
skids. Functionality Items
M7.1_F1, M7.1_F2,
M7.1_F3, M7.1_F4,
M7.1_F5, M7.1_F6

M7_V5 Visual examination and witness function test of This will support
monitors. Functionality Items
M7.2_F1, M7.2_F2.

M7_V6 Visual examination and witness function test of This will support
sprinklers. Functionality Items
M7.3_F1, M7.3_F2.

M7_V7 Visual examination and witness function test of This will support
hydrants. Functionality Items
M7.4_F1, M7.4_F2

M7_V8 Visual examination and witness function test of This will support
hosereels. Functionality Items

74
 OPERATIONAL VERIFICATION VSEL 3

M7.5_F1, M7.5_F2

M7_V9 Witness function test of Helideck monitors and This will support
confirm remote operation when all power is Functionality Item M7.2_F3.
lost.

Table 1 – Minimum Acceptable Flow Rates and Pressures for the Deluge and Fixed Monitor Systems.

Location / Protected Equipment Minimum Flow Rate [litres Minimum Pressure [bar] (Measured P&ID No.
per minute] downstream of deluge valve)
Deluge Valves
HOLD – Asset specific details to be incorporated. HOLD – Asset specific details HOLD – Asset specific details to be HOLD – Asset specific details
All modules with the deluge system should be listed here and to be incorporated. incorporated. to be incorporated.
the corresponding minimum flow rates and pressures. [##] <##> [P & ID Reference]
HOLD – Asset specific details to be incorporated. HOLD – Asset specific details HOLD – Asset specific details to be HOLD – Asset specific details
to be incorporated. incorporated. to be incorporated.
Fire Monitors
HOLD – Asset specific details to be incorporated. HOLD – Asset specific details HOLD – Asset specific details to be HOLD – Asset specific details
to be incorporated. incorporated. to be incorporated.
HOLD – Asset specific details to be incorporated. HOLD – Asset specific details HOLD – Asset specific details to be HOLD – Asset specific details
to be incorporated. incorporated. to be incorporated.

75
 Table 2: Sprinkler Application rates

Location Application rate

HOLD – Asset specific details to be HOLD – Asset specific details to be
incorporated. incorporated.
HOLD – Asset specific details to be HOLD – Asset specific details to be
incorporated. incorporated.

Table 3: Sprinkler Minimum Operating Requirement

Location Discharge Density Minimum Flow Rate Minimum Pressure [bar] P&ID No.
[mm/min] [litres per minute] (Measured downstream of
deluge valve)
Sprinklers
HOLD – Asset specific details to be incorporated. HOLD – Asset specific HOLD – Asset specific HOLD – Asset specific details to HOLD – Asset specific
All modules with the deluge system should be details to be details to be be incorporated. details to be
listed here and the corresponding minimum flow incorporated. incorporated. <##> incorporated.
rates and pressures. [##] [P & ID Reference]
HOLD – Asset specific details to be incorporated. HOLD – Asset specific HOLD – Asset specific HOLD – Asset specific details to HOLD – Asset specific
details to be details to be be incorporated. details to be
incorporated. incorporated. incorporated.

76
SECE Number: M8 SECE System: Foam Systems Revision: Rev B3 Date: 24/10/2016

Goal:
To provide a reliable and secure supply of foam for firefighting at the required pressures and flows for all foam dependent systems on the installation.

Scope / Equipment

SECE Sub Number SECE Sub System: Installation

Plant (1) Plant (2) Plant (n)

Tick these boxes to indicate which systems are

present at each location.

M8.1 Heli-deck Foam Monitors

M8.3 Foam Storage Tank

M8.5 Process Deluge / Foam System

M8.6 Mobile Foam Units (to be developed)

M8.9 Foam Piping Network

M8.10 Foam Injection Pump

Scope:
Foam storage tanks, pumps, proportioner including all associated valves, pipework & control instrumentation.

Note 1
Foam type likely to include variations of normal Aqueous Film Forming Foam (AFFF), Alcohol Resistant Aqueous Film Forming Foam (AR-AFFF), Low/Medium/High
expansion etc.
Note 1

77
‘Flow control method’ is the means of foam proportioning used such as a flow control valve, proportioner.

Principal Interacting SECEs

SECE Number SECE System

C3 Fire & Gas Control System

E4 Helideck

M7 Firewater Systems

SECE Sub System:

Number Performance Requirements Means of Assurance

Functionality References Means of Assurance Design References Means of Assurance References

Operational

Provide means of fire fighting and rescue during helideck incidents

M8.1_F1 The Helideck is Provide reference Reasonably foreseeable fires Provide reference Operational assurance is Provide reference
provided with HOLD – to: are detailed and assessed to: provided by routine inspection to:
Insert number within the asset fire and and function checks, carried out
 CAA -CAP  CAA -CAP 437.  GS EP EXP
automatically explosion risk assessment. in accordance with relevant
437  GS EP SAF 322 311 Plant
controlled water/AFFF work instruction at frequencies
 NPFA 11 - The asset fire protection Fixed Integrity
monitors. Each scheduled in as scheduled in
Standard for philosophy details how fire Firewater Minimum
monitor has a capacity the asset maintenance
Low, fighting systems are to be used Systems Inspection
of [HOLD – Insert management system.
Medium, to mitigate fire hazards,  FERA. Requirement
flowrate] L/min in of
High including the type and required  Asset fire Changes to the system are in s
with [HOLD – Insert
Expansion duration of foam application. protection accordance with the Total  GSP EP EXP
pressure] barg inlet
Foam. philosophy. change control procedure. 213
pressure. The fire system basis of design
 Active Fire enacts the fire protection  Fire system Minimum

78
 SECE Sub System:

Number Performance Requirements Means of Assurance

Functionality References Means of Assurance Design References Means of Assurance References

Operational

Each monitor is Protection philosophy. BOD. Maintenance

individually capable of philosophy.  TA report Requirement
Documented confirmation by
meeting the minimum  GS EP SAF confirming s
suitably competent technical
required flowrate of 6 322 Fixed compliance  Asset
authority that foam system
L/min/m2 over the  Firewater with codes, Inspection
design (including foam storage
helideck, based on a D Systems standards and and
tanks), specification and
value of 21m. philosophy. statutory Maintenance
manufacture complies with the
regulations Management
relevant design codes, company
 Asset HAZID System
standards, statutory regulations
study.  Total Change
and enacts the asset fire
 Asset HAZOP Control
protection philosophy.
study. Procedure.
Confirmation based on review
of firewater calculations and  Affiliate / Asset
other design and manufacture Procurement
documentation. and QA
Procedure
The process design has been
subject to HAZID / HAZOP
studies to ensure appropriate
protection from design
deviations is provided.

Procurement and QA
procedures ensure original
equipment and components
comply with the relevant design
codes, company standards and
statutory regulations.

79
 SECE Sub System:

Number Performance Requirements Means of Assurance

Functionality References Means of Assurance Design References Means of Assurance References

Operational

M8.1_F2 Helideck foam tanks See M8.1_F1 See M8.1_F1 See M8.1_F1 See M8.1_F1 See M8.1_F1
are filled with
minimum of:
 [HOLD – Insert
tank description,
tag number and
volume m3.

M8.1_F3 The Helideck High See M8.1_F1 See M8.1_F1 See M8.1_F1 See M8.1_F1 See M8.1_F1
Capacity Hose reels
deliver [HOLD – Insert
percentage] % AFFFAR
foam at a minimum
rate of [HOLD – Insert
flowrate] lpm, fed from
the foam concentrate
ring main. The hose
reel pressure is
regulated to [HOLD –
Insert pressure] barg,
which is sufficient to
ensure uniform
application to all parts
of the safe landing
area, irrespective of
wind strength or
condition, in
accordance with the

80
 SECE Sub System:

Number Performance Requirements Means of Assurance

Functionality References Means of Assurance Design References Means of Assurance References

Operational

requirements of CAA
CAP437.

M8.1_F4 On actuation of the See M8.1_F1 See M8.1_F1 See M8.1_F1 See M8.1_F1 See M8.1_F1
manual air release
valves, foam reach the
Helideck in less than
[HOLD – Inert no of
Second] seconds.

M8.1_F5 Foam Monitors See M8.1_F1 Procurement and QA Provide reference See M8.1_F1 See M8.1_F1
including those that procedures ensure original to:
service the helideck equipment and components
 Affiliate / Asset
are on actuation comply with the relevant design
Procurement
oscillate smoothly and codes, company standards and
and QA
fully in the horizontal statutory regulations.
Procedure.
plane (this is applicable
for both manual and
automatic monitors).

M8.1_F6 Foam Monitors in See M8.1_F1 See M8.1_F1 See M8.1_F1 See M8.1_F1 See M8.1_F1
conjunction with their
Foam Induction Units
produce Finished Foam
of the correct
concentration.

M8.1_F7 The Helideck Foam See M8.1_F1 See M8.1_F1

System continue to

81
 SECE Sub System:

Number Performance Requirements Means of Assurance

Functionality References Means of Assurance Design References Means of Assurance References

Operational

function for a
minimum of [HOLD –
Insert minutes] on loss
of Instrument Air
Supply

Sufficient foam concentrate at the correct storage conditions are stored on the asset.

M8.3_F1 Foam tanks are filled See M8.1_F1 See M8.1_F1 See M8.1_F1 See M8.1_F1 See M8.1_F1
with minimum of:
 [HOLD – Insert
tank description,
tag number and
volume m3.
 [HOLD – Insert
tank description,
tag number and
volume] m3.

M8.3_F2 The quality of the Provide reference See M8.1_F1 See M8.1_F1 See M8.1_F1 See M8.1_F1
stored Foam to:
Concentrate is to be
 NPFA 11 -
within the following
Standard for
specification:
Low,
 [HOLD – Insert Medium,
tank description, High
tag number [HOLD Expansion
– Insert

82
 SECE Sub System:

Number Performance Requirements Means of Assurance

Functionality References Means of Assurance Design References Means of Assurance References

Operational

percentage] % Foam.
AFFF.  GS SAF 334
 [HOLD – Insert Foam Fire
tank description, Extinguishing
tag number and Systems.
[HOLD – Insert
percentage] %
AFFF.

Correct proportioning of foam concentrate into firewater stream meet requirements.

M8.5_F1 [HOLD – Insert flow See M8.1_F1 See M8.1_F1 See M8.1_F1 See M8.1_F1 See M8.1_F1
control method]
maintain foam
injection at a rate
between [HOLD –
Insert minimum
percentage of
flowrate] and [HOLD –
Insert maximum
percentage of
flowrate] of the
required firewater
deluge demand.
[HOLD – Depending on
the number of
proportioners, this
information may

83
 SECE Sub System:

Number Performance Requirements Means of Assurance

Functionality References Means of Assurance Design References Means of Assurance References

Operational

require to be outlined
within a table at the
back of this document.

M8.5_F2 Deluge systems Provide reference Documented confirmation by Provide reference One-time Approval Process – One-time
protecting areas which to: suitably competent technical to: See means of design assurance. Approval Process
present a credible pool authority that foam system – See means of
 NPFA 11 -  TA report
fire risk are provided design (including foam storage design assurance.
Standard for confirming
with dual water / foam tanks), specification and
Low, compliance
capability in manufacture complies with the
Medium, with codes,
accordance with NFPA relevant design codes, company
High standards and
11. standards, statutory regulations
Expansion statutory
and enacts the asset fire
Foam. regulations
protection philosophy.
 GS SAF 334  Affiliate / Asset
Confirmation based on review
Foam Fire Procurement
of firewater calculations and
Extinguishing and QA
other design and manufacture
Systems. Procedure.
documentation.
Procurement and QA
procedures ensure original
equipment and components
comply with the relevant design
codes, company standards and
statutory regulations.

M8.5_F3 The foam system for See M8.5_F2 See M8.5_F2 See M8.5_F2 One-time Approval Process – One-time
the Methanol storage Approval Process

84
 SECE Sub System:

Number Performance Requirements Means of Assurance

Functionality References Means of Assurance Design References Means of Assurance References

Operational

is designed in See means of design assurance. – See means of

accordance with design assurance.
NFPA16.

M8.6_F1 Mobile foam units - - Provide reference Monthly visual inspection Provide reference
are provided as to the Safety to asset
additional means to concept and to inspection
either protect safety equipment program
layout
specific equipment
or provide additional
capabilities to the
emergency response
team

M8.6_F2 Mobile Foam - - Provide reference Monthly visual inspection Provide reference
Trolleys shall be to the Safety to asset
provided with a concept. inspection
[hold, tank insert program
capacity] storage
tank.

M8.6_F3 Foam concentrate - - Provide reference Monthly visual inspection and Provide reference
shall be [hold, to the Safety annual functional test if to manufacturer
insert foam type concept. possible using for instance out maintenance
and concentration] of date foam supply documentation
and minimum

85
 SECE Sub System:

Number Performance Requirements Means of Assurance

Functionality References Means of Assurance Design References Means of Assurance References

Operational

flowrate shall be Preventative maintenance as

[hold, insert per manufacturer instruction
flowrate] Ensure that foam is within its
validity range and that storage
conditions are compliant with
manufacturer
recommendations. Foam
validity is [hold] years.

M8.6 : Action P. Lezeau : fonctionnalité capacitaire et/ou localisation

Safely contain foam within the pipework connecting the foam storage tanks to the inductor on the deluge skid as per design requirements

M8.9_F1 Foam is contained Provide reference Documented confirmation by Provide reference See M8.1_F1 See M8.1_F1
within the pipework to: suitably competent technical to:
connecting the foam authority that process
 GS SAF 334  GS EP PVV
storage tanks to the
Foam Fire equipment design, specification 111 Piping
inductor on the deluge
Extinguishing and manufacture complies with Valves Vessels
skid (via the foam
Systems. the relevant design codes, General
pump/s) for conditions
within the design company standards and Specification
operating envelope. statutory regulations. catalogue
Confirmation based on review  TA report
confirming
of process/structural
compliance
calculations, material selection with codes,
reports and other design and standards and
manufacture documentation. statutory

86
 SECE Sub System:

Number Performance Requirements Means of Assurance

Functionality References Means of Assurance Design References Means of Assurance References

Operational

The process design has been regulations

subject to HAZID / HAZOP  Asset HAZID
studies to ensure appropriate study.
protection from design  Asset HAZOP
study.
deviations is provided.
 Affiliate / Asset
Procurement and QA Procurement
procedures ensure original and QA
Procedure
equipment and components
comply with the relevant design
codes, company standards and
statutory regulations.

Deliver foam concentrate for fire control.

M8.10_F1 Foam pumps achieve See M8.1_F1 See M8.1_F1 See M8.1_F1 See M8.1_F1 See M8.1_F1
the following on
activation:
 [HOLD – Insert
foam pump
description,
equipment tag
deliver [HOLD
insert flow rate
m3/hr and
pressure barg].
 [HOLD – Insert

87
 SECE Sub System:

Number Performance Requirements Means of Assurance

Functionality References Means of Assurance Design References Means of Assurance References

Operational

foam pump
description,
equipment tag
deliver [HOLD
insert flow rate
m3/hr and
pressure barg].
[HOLD – Depending on
the number of pumps,
this information may
require to be outlined
within a table at the
back of this document.

SECE Sub System:

Number Performance Requirements Means of Assurance

Availability / References Means of Assurance Design References Means of Assurance References

Reliability Operational

M8_A1 Helideck foam Provide reference Documented confirmation by Provide references Foam system availability is Provide
monitors are 100% to: suitably competent technical to: assured through adherence to reference to:
available during flying authority that the, specification standards and procedures,
 GS SAF 334  TA report  Total
operations. and manufacture of helideck regular inspection and function
Foam Fire confirming Change
fire fighting systems complies testing and reporting,
Foam monitors work Extinguishing compliance Control

88
 SECE Sub System:

Number Performance Requirements Means of Assurance

Availability / References Means of Assurance Design References Means of Assurance References

Reliability Operational

on demand. In the Systems. with the relevant design codes, with codes, monitoring and completion of Procedure.
event of critical  CAA -CAP company standards and standards and corrective work orders (as per  Asset safety
unavailability of the 437 statutory regulations. statutory priority assignment). case /
Helideck fire systems. regulations. COMAH
Design reviews, approvals and Temporary changes to the
 Affiliate / Asset Report.
Helideck operations the associated QA/QC system are in accordance with
Procurement  Relevant
may only continue in processes completed during the the Total change control
and QA supporting
controlled conditions, engineering phase of the Asset procedure
Procedure safety
where a risk EPC provide the primary
Ongoing suitability is addressed studies e.g.
assessment has been assurance activity that the
within the scope of the risk EERA, FEA,
completed and firewater delivery systems are
assessment in support of the QRA.
accepted by senior fit for purpose.
Safety Case / COMAH Report  Asset ISSOW
management; and
and updates of supporting procedure.
when suitable
studies.
temporary provisions
are in place. Changes to the system are in
accordance with the Total
Any failure of a safety
change control procedure.
critical element to
function on demand is
treated as
unacceptable and the
root cause identified
and rectified.
Planned outages are
subject to appropriate
risk assessment and
may require
alternative fire-fighting

89
 SECE Sub System:

Number Performance Requirements Means of Assurance

Availability / References Means of Assurance Design References Means of Assurance References

Reliability Operational

systems to be put in
place during the period
of the outage.

M8_A2 Deluge delivered foam Provide reference See M8_A1 See M8_A1 See M8_A1 See M8_A1
systems are available to:
at all times, unless
 NPFA 11 -
down for maintenance
Standard for
or inspection which
Low,
should be subject to an
Medium,
appropriate risk
High
assessment.
 Expansion
Foam.
 GS SAF 334
Foam Fire
Extinguishing
Systems.

M8.6_A1 As part of the - - Provide references Monthly survey of equipment

emergency response to safety location
plan, mobile foam unit equipment layout
shall be available at all
time. This is usually
achieved by
redundancy

90
 SECE Sub System:

Number Performance Requirements Means of Assurance

Survivability References Means of Assurance Design References Means of Assurance References

Operational

M8_S1 Helideck foam Provide reference Various safety studies assess Provide references Ongoing suitability is addressed Provide
monitors to be to: the potential impairment of the to the: within the scope of the risk reference to:
protected from effects foam system and its elements assessment in support of the
 NPFA 11 -  MAH analysis  Total
of aircraft collision and during MAHs and makes Safety Case / COMAH Report
Standard for documentation Change
effects of fire on recommendations with respect and updates of supporting
Low, Control
Helideck by location to protection strategy including studies.
Medium, Procedure
and provision of achievement of this through
High Changes to the system are in  Asset safety
multiple units. design, location and
Expansion accordance with the Total case /
redundancy.
Foam. change control procedure. COMAH
 GS SAF 334 Design reviews, approvals and Report.
Foam Fire the associated QA/QC  Relevant
Extinguishing processes completed during the supporting
Systems. engineering phase of the Asset safety
 CAA -CAP EPCI provide the primary studies e.g.
437 assurance activity that the foam EERA, FEA,
 Active Fire systems are fit for purpose. QRA.
Protection
philosophy

M8_S2 Deluge foam supplies See M8_S1 See M8_S1 See M8_S1 See M8_S1 See M8_S1
to be protected by
location and
redundancy from
effects of fire and
explosion in the
protected area.

M8.6_S1 Survivability is ensured - - Provide references Monthly survey of equipment -

91
 SECE Sub System:

Number Performance Requirements Means of Assurance

Survivability References Means of Assurance Design References Means of Assurance References

Operational

by location (distance as to safety location

far as possible and equipment layout
redundancy)

92
 OPERATIONAL VERIFICATION VSEL 3

No. Site Verification Reference Base Office Verification Reference

M8_V1 Review any changes made to the asset which affect M8 - All
the foam system since the last operational
verification visit.

Confirm that the modifications have been subjected

to the change management system and that any
actions arising have been satisfactorily closed out.

M8_V2 Confirm that all standard work text instructions have M8 - All
scheduled within the maintenance management
system have been completed as scheduled.

M8_V3 Visual examination and witness function test of Test will support
helideck fixed foam monitors. Functionality Items
M8.1_F1, M8.1_F4,
M8.1_F5

M8_V4 Visual inspection of foam tanks. Test will support

Functionality Items
M8.1_F2, M8.3_F1

M8_V5 Witness function test of helideck High Capacity Test will support
Hose reels. Functionality Items
M8.1_F3

M8_V6 Analyse samples from foam storage and from Test will support
dispensed foam. Functionality Items
M8.1_F6, M8.3_F2,

93
 OPERATIONAL VERIFICATION VSEL 3

No. Site Verification Reference Base Office Verification Reference

M8.5_F1.

M8_V7 Visual examination and witness function test of Test will support
foam pumps. Functionality Items
M8.10_F1.

94
SECE Number: M9 SECE System: Liquid & Gaseous Extinguishing Revision: Rev B2 Date: 01/10/2013

Systems
Goal:
To extinguish fires within enclosures or spaces that could lead to a MAH.

Scope / Equipment

SECE Sub Number SECE Sub System: Installation

Plant (1) Plant (2) Plant (n)

Tick these boxes to indicate which systems are

present at each location.

M9.1 Enclosure Extinguisher Systems (CO2)

M9.2 Tech Room Extinguisher Systems (FM 200)

M9.3 Galley Hood Supression System

M9.4 Inergen Gaseous System

M9.5 Water Mist / Fog Systems

Scope:
All gaseous extinguishant systems [HOLD – Insert type e.g. Inergen, CO2 etc] including storage, distribution piping, valves, nozzles and all
associated instrumentation and control systems (See Note 1).
[HOLD – Inset Extinguishant agent system i] which protects areas:
 Area [HOLD – Insert area description].
 Area [HOLD – Insert area description].
[HOLD – Inset Extinguishant agent system ii] which protects areas:

95
  Area [HOLD – Insert area description].
 Area [HOLD – Insert area description].
HOLD - List any other agent systems used on the Facility with their location.
Exclusions:
 Water-based self-contained systems which are covered under M7 – Firewater Systems.
 Enclosure fire dampers operating on Non-Hazardous Ventilation Systems which are covered under P8 – Process Area Ventilation.

Note 1
Not all gaseous extinguishant systems will necessarily be SECE. They are primarily provided for equipment protection to prevent escalation, should a fire event occur.
Refer to GS EP EXP 407 for guidance on the Selection of Safety and Environmentally Critical Elements.
Engagement with the Facility Engineer(s) and Mechanical Technical Authority is also recommended to ensure all aspects of the facility are covered.

Principal Interacting SECEs

SECE Number SECE System

None identified None identified

M9 SECE Sub System: Liquid & Gaseous Extinguishing Systems

Number Performance Requirements Means of Assurance

Functionality References Means of Assurance Design References Means of Assurance References

Operational

Deliver extinguishant agent within the protected area.

M9.1_F1 Extinguisher system Provide reference Reasonably foreseeable fires Provide reference Operational assurance is Provide reference
(CO2, FM200, Inergen, to: are detailed and assessed to: provided by routine inspection to:
M9.2_F1
Water Mist / Fog within the asset fire and and function checks, carried out
 Asset FERA.  Asset FERA.  GS EP EXP
M9.4_F1 Systems) distribute explosion risk assessment. in accordance with relevant
 Asset fire

96
M9 SECE Sub System: Liquid & Gaseous Extinguishing Systems

Number Performance Requirements Means of Assurance

Functionality References Means of Assurance Design References Means of Assurance References

Operational

M9.5_F1 sufficient protection The asset fire protection  work instruction at frequencies 311
extinguishment to philosophy. philosophy details how fire  Asset fire scheduled in as scheduled in  GSP EP EXP
extinguish fire with  Fire and Gas fighting systems are to be used protection the asset maintenance 213
sufficient after flow to Layout to mitigate fire hazards, philosophy. management system.  Asset
compensate for Drawings including the type and required  Fire system Inspection
Changes to the system must be
enclosure leakage.  Fire and Gas duration of extinguishant. BOD. and
in accordance with the Total
System requirements  Logigrams  TA report Maintenance
The fire system basis of design change control procedure.
are presented in Table P&ID for CO2 confirming Management
enacts the fire protection
1. Skids. compliance System
philosophy.
 NFPA 12: with codes,  Total Change
Standard for Documented confirmation by standards and Control
Carbon suitably competent technical statutory Procedure.
Dioxide authority that the extinguishant regulations
Extinguishing system design, specification and  Asset HAZID
Systems manufacture complies with the study.
 TOTAL relevant design codes, company  Asset HAZOP
General standards, statutory regulations study.
Specification: and enacts the asset fire  Affiliate / Asset
Safety –GS protection philosophy. Procurement
EP 331 – Confirmation based on review and QA
Carbon of firewater calculations and Procedure
dioxide fire other design and manufacture
extinguishing documentation.
system The process design has been
subject to HAZID / HAZOP
studies to ensure appropriate
protection from design

97
M9 SECE Sub System: Liquid & Gaseous Extinguishing Systems

Number Performance Requirements Means of Assurance

Functionality References Means of Assurance Design References Means of Assurance References

Operational

deviations is provided.

Procurement and QA
procedures ensure original
equipment and components
comply with the relevant design
codes, company standards and
statutory regulations and are fit
for purpose.

M9.1_F2 Units to have 100% See M9.1_F1 Documented confirmation by Provide reference See M9.1_F1 See M9.1_F1
back up supply of CO2 suitably competent technical to:
M9.2_F2
and FM200 i.e. dual authority that the extinguishant
 TA report
M9.4_F2 shot capability. system design, specification and
confirming
manufacture complies with the
M9.5_F2 compliance
relevant design codes, company
with codes,
standards, statutory regulations
standards and
and enacts the asset fire
statutory
protection philosophy.
regulations.
Confirmation based on review
 Affiliate / Asset
of firewater calculations and
Procurement
other design and manufacture
and QA
documentation.
Procedure.
Procurement and QA
procedures ensure original
equipment and components

98
M9 SECE Sub System: Liquid & Gaseous Extinguishing Systems

Number Performance Requirements Means of Assurance

Functionality References Means of Assurance Design References Means of Assurance References

Operational

comply with the relevant design

codes, company standards and
statutory regulations and is fit
for purpose.
M9.1_F3 Systems to be provided See M9.1_F1 See M9.1_F2 See M9.1_F2 See M9.1_F1 See M9.1_F1
with positive means of
M9.2_F3
isolation to prevent
M9.4_F2 release of CO2 and
FM200 during
M9.5_F2
personnel entry to
protected enclosure.

M9.1_F4 Systems to be provided See M9.1_F1 See M9.1_F2 See M9.1_F2 See M9.1_F1 See M9.1_F1
with a manual release.
M9.2_F4
M9.4_F4
M9.5_F4

M9.1_F5 System status and See M9.1_F1 See M9.1_F2 See M9.1_F2 See M9.1_F1 See M9.1_F1
alarm signals to be
M9.2_F5
provided in the CCR.
M9.4_F5
M9.5_F5

M9.1_F6 CO2 and FM200 See M9.1_F1 See M9.1_F2 See M9.1_F2 See M9.1_F1 See M9.1_F1
systems to be provided

99
M9 SECE Sub System: Liquid & Gaseous Extinguishing Systems

Number Performance Requirements Means of Assurance

Functionality References Means of Assurance Design References Means of Assurance References

Operational

M9.2_F6 with local

visual/audible status
M9.4_F6
and alarm signals,
M9.5_F6 which will initiate prior
to release of CO2 or
FM200.
The period between
‘ALARM ‘and ‘RELEASE’
should allow sufficient
time (currently set at
20 seconds time delay)
for the enclosure to be
vacated by any person
inside at the time of
alarm.

M9.1_F7 CO2 or FM200 See M9.1_F1 See M9.1_F2 See M9.1_F2 See M9.1_F1 See M9.1_F1
protected areas to be
M9.2_F7
clearly marked with
M9.4_F7 warning signs.
M9.5_F7

M9.1_F8 Executive action upon See M9.1_F1 See M9.1_F2 See M9.1_F2 See M9.1_F1 See M9.1_F1
confirmed fire
M9.2_F8
detection as per F&G
M9.4_F8 logograms.
M9.5_F8

100
M9 SECE Sub System: Liquid & Gaseous Extinguishing Systems

Number Performance Requirements Means of Assurance

Functionality References Means of Assurance Design References Means of Assurance References

Operational

M9.1_F9 Area fire dampers See M9.1_F1 See M9.1_F2 See M9.1_F2 See M9.1_F1 See M9.1_F1
close upon F&G signals
M9.2_F9
in accordance with
M9.4_F9 F&G Cause and Effect
diagrams.
M9.5_F9

M9.3_F1 Galley Hood Fire Provide reference Documented confirmation by Provide reference See M9.1_F1 See M9.1_F1
Suppression to: suitably competent technical to:
Extinguishing System authority that the extinguishant
 Asset fire  TA report
to be capable of system design, specification and
protection confirming
delivering manufacture complies with the
philosophy. compliance
extinguishing agent relevant design codes, company
 NFPA 17A: with codes,
(HOLD – Insert name of standards, statutory regulations
 Standard for standards and
suppressant) over all and enacts the asset fire
Wet statutory
areas of cooking protection philosophy.
Chemical regulations.
surfaces were cooking Confirmation based on review
Extinguishing  Affiliate / Asset
oil or fat fire may of firewater calculations and
Systems Procurement
occur. other design and manufacture
and QA
documentation.
Procedure.
Procurement and QA
procedures ensure original
equipment and components
comply with the relevant design
codes, company standards and
statutory regulations and are fit
for purpose.

M9.3_F2 Manual system See M9.3_F1 See M9.3_F1 See M9.3_F1 See M9.3_F1 See M9.3_F1

101
M9 SECE Sub System: Liquid & Gaseous Extinguishing Systems

Number Performance Requirements Means of Assurance

Functionality References Means of Assurance Design References Means of Assurance References

Operational

operation is achieved
by the activation of a
cable pulley system
located at the galley
exit which opens a
valve on the nitrogen
cylinder.
Automatic system
operation is initiated
by fusible link
detectors rated at
[HOLD – Insert
temperature] and
located within the
extract hood.
The system is
interfaced with the
F&G System for shut
down of the fire
dampers and stopping
of the fans. The
activation is from the
F&G System.

102
 SECE Sub System: Liquid & Gaseous Extinguishing Systems

Number Performance Requirements Means of Assurance

Availability / References Means of Assurance Design References Means of Assurance References

Reliability Operational

M9.1_A1 Liquid and gaseous See M9.3_F1 See M9.3_F1 See M9.3_F1 System reliability / availability is Provide
extinguishing systems assured through adherence to reference to:
M9.2_A1
to be available at all standards and procedures,
 Total
M9.4_A1 times unless regular inspections and
Change
alternative reporting, monitoring and
Control
arrangements are in completion of corrective work
Procedure –
place. orders (as per priority
 Asset safety
assignment).
case /
Temporary / permanent COMAH
changes to the system are in Report.
accordance with the Total  Relevant
change control procedure. supporting
safety
Ongoing suitability is addressed
studies e.g.
within the scope of the risk
EERA, FEA,
assessment in support of the
QRA.
Safety Case / COMAH Report
and updates of supporting
studies.
Changes to the system are in
accordance with the Total
change control procedure.

103
 SECE Sub System: Liquid & Gaseous Extinguishing Systems

Number Performance Requirements Means of Assurance

Survivability References Means of Assurance Design References Means of Assurance References

Operational

M9.1_S1 System to be Provide reference Various safety studies assess Provide reference Ongoing suitability is addressed Provide
unimpaired in a MAH to: the potential impairment of to: within the scope of the risk reference to:
M9.2_S1
for which it is meant to safety systems during MAHs assessment in support of the
 Asset fire  MAH analysis  Total
M9.4_S1 provide protection. and makes recommendations Safety Case / COMAH and
protection documentation Change
with respect to protection updates of supporting studies.
philosophy.  Communicatio Control
strategy including achievement
n systems Basis Changes to the system are in Procedure
of this through design location,
of Design. accordance with the Total  Asset safety
redundancy and diversity in
  EER change control procedure. case /
equipment.
philosophy. COMAH
The requirement for field  Asset Safety Report.
equipment (including antennas) Philosophy.  Relevant
to survive MAH events has been supporting
incorporated into the safety
communication system basis of studies e.g.
design. EERA, FEA,
The location of field equipment QRA.
(including antennae) has been
reviewed. The review has
confirmed that the equipment
is, so far as is reasonably
practicable, positioned and/or
protected to survive MAHs.

104
 OPERATIONAL VERIFICATION VSEL 3

No. Site Verification Reference Base Office Verification Reference

M9_V1 Review any changes made to the asset which affect M9 - All
the suppressant system since the last operational
verification visit.

Confirm that the modifications have been subjected

to the change management system and that any
actions arising have been satisfactorily closed out.

M9_V2 Confirm that all standard work text instructions have M9 - All
scheduled within the maintenance management
system have been completed as scheduled.

M9_V3 Visual examination and witness function test of Test will support all
fire suppressant systems to confirm the functionality requirements
following: associated with 9.1, 9.2, 9.3
and 9.4.
 All piping and equipment within skid
enclosures are undamaged, securely fitted
and functioning.
 Control gas container pressure is kept as
per [HOLD – Insert relevant P&ID
reference].
 Normally open/ car seal open valves are as
per [HOLD – Insert relevant P&ID
reference].
 Gas bottles are within certification.
 Each gaseous extinguishant system control
and instrumentation is functioning in
accordance with the asset F&G Cause and

105
 OPERATIONAL VERIFICATION VSEL 3

No. Site Verification Reference Base Office Verification Reference

Effect diagrams.
 Fire dampers close upon F&G signal in
accordance with F&G Cause and Effects.
 Visual conformation of fire damper blade
full travel and closure.
 Relevant audible and visual alarms activate
as per the Cause and Effect Charts.

M9_V4 Visual examination and witness function test of Test will support
Galley Hood Fire Suppression Extinguishing Functionality Items
System to confirm the following: M9.3_F1 and M9.3_F2.

 Manual activation of system is operational.

 Automatic activation of system is
operational.

Table 1: Fire Suppressant Operating Requirement

Location Extinguishant Required Concentration / Flow P&ID No.

HOLD – Asset specific details to be incorporated. HOLD – Asset specific details to HOLD – Asset specific details to HOLD – Asset specific details to
All modules with the deluge system should be listed here and the be incorporated. be incorporated. be incorporated.
corresponding minimum flow rates and pressures. [##] [P & ID Reference]
HOLD – Asset specific details to be incorporated. HOLD – Asset specific details to HOLD – Asset specific details to HOLD – Asset specific details to
be incorporated. be incorporated. be incorporated.

106
SECE Number: M10 SECE:- Portable Fire Extinguishers Revision: Rev B2 Date: 18/03/2014

Goal:
To fight small fires in process areas, living quarters, technical rooms, helideck etc, to prevent escalation.

Scope / Equipment

SECE Sub Number SECE Sub System: Installation

Plant (1) Plant (2) Plant (n)

Tick these boxes to indicate which systems are

present at each location.

E10.1 Portable Fire Extinguishers.

Scope
The scope of this performance standard includes:
 Portable fire extinguishers (All types including large capacity wheeled and trolley mounted extinguishers)

Principal Interacting SECEs

SECE Number SECE System

None Identified None Identified

107
 SECE Sub System:

Number Performance Requirements Means of Assurance

Functionality References Means of Assurance Design References Means of Assurance References

Operational

M10.1_F1 Portable fire fighting Provide reference Safety studies making Provide reference Operational assurance is Provide reference
equipment meets to: recommendations with respect to: provided by routine inspection to:
applicable standards to required number, type and and function checks, carried out
 Fire and  Safety  GS EP EXP
and is located as per location of extinguishers have in accordance with relevant
Explosion Equipment 311
Table 1. been reviewed. These reviews work instruction at frequencies
Risk Analysis Layout  GSP EP EXP
have been used to specify the scheduled in as scheduled in
Note: (FERA) Drawings. 213
design, number and location of the asset maintenance
 Specification  Fire and  Asset
Applicable standards extinguishers which are management system.
for Explosion Risk Inspection
each extinguisher must presented in Table 1.
Miscellaneou Analysis (FERA) Changes to the system are in and
conform to is
s Safety A review of the asset Safety  Specification accordance with the Total Maintenance
presented in Table 1.
Equipment. Equipment Layout Drawings for change control procedure. Management
Unless an alternative  CAP 437: and has been undertaken to Miscellaneous System
standard or regulation Offshore ensure the location and number Safety  Total Change
can be justified, fire Helicopter of extinguishers detailed in Equipment. Control
extinguishers meet the Landing Table 1 are suitable.  CAP 437: Procedure.
requirements of BS Areas – Offshore
Documented confirmation by
5306 and CAP 437 Guidance on Helicopter
(where applicable). suitably competent technical
Standards. Landing Areas
 BS 5306 authority that extinguisher – Guidance on
specification and manufacture Standards.
complies with the relevant  BS 5306.
design codes, company  TA report
standards and statutory confirming
regulations. compliance
with codes,
Procurement and QA standards and
procedures ensure original statutory
equipment and components regulations.

108
 SECE Sub System:

Number Performance Requirements Means of Assurance

Functionality References Means of Assurance Design References Means of Assurance References

Operational

comply with the relevant design  Affiliate / Asset

codes, company standards and Procurement
statutory regulations. and QA
Procedure.
Note:
Ensure that the Safety
Equipment Layout Drawing
contains sufficient information
regarding each extinguisher
(number, type, etc.). If not then
provide an additional reference
to a document containing the
required details.

SECE Sub System:

Number Performance Requirements Means of Assurance

Availability / References Means of Assurance Design References Means of Assurance References

Reliability Operational

M10_A1 Multiple independent Provide reference Initial assurance is provided by Provide reference Ongoing suitability is addressed Provide
units and diverse to: means of specification, design, to: within the scope of the risk reference to:
locations supported by construction and assessment in support of the
 Active Fire  TA report  Total
appropriate commissioning in compliance Safety Case / COMAH and
Protection confirming Change
maintenance strategy with the relevant international updates of supporting studies.
philosophy compliance Control
should be provided to design codes, company general

109
 SECE Sub System:

Number Performance Requirements Means of Assurance

Availability / References Means of Assurance Design References Means of Assurance References

Reliability Operational

ensure that sufficient specifications and statutory with codes, Changes to the system are in Procedure –
extinguishers are regulations. standards and accordance with the Total  Asset safety
available at all times statutory change control procedure. case /
Portable Extinguishers are sited
and function on regulations. COMAH
at locations as shown in Safety
demand.  Affiliate / Asset Report.
Equipment layout drawings,
Procurement  Relevant
which are agreed with the
and QA supporting
necessary TAs
Procedure. safety
Design reviews, approvals and studies e.g.
the associated QA/QC EERA, FEA,
processes completed during the and QRA.
engineering phase of the Asset
EPC provide the primary
assurance activity that the type
selection, number and location
of portable extinguishers is fit
for purpose.

110
 SECE Sub System:

Number Performance Requirements Means of Assurance

Survivability References Means of Assurance Design References Means of Assurance References

Operational

M10.1_S1 Protection from all - Various safety studies assess Provide references Ongoing suitability is addressed Provide
major accidents the potential impairment of to the: within the scope of the risk reference to:
provided by location safety equipment during MAHs assessment in support of the
 MAH analysis  Total
and provision of and make recommendations Safety Case / COMAH and
documentation Change
multiple independent with respect to protection updates of supporting studies.
 Asset Safety Control
units. strategy including achievement
Philosophy. Changes to the system are in Procedure
of this through design location,
accordance with the Total  Asset safety
redundancy and diversity in
change control procedure. case /
equipment.
COMAH.
The location of extinguishers  Relevant
has been reviewed. The review supporting
has confirmed that the safety
equipment is, so far as is studies e.g.
reasonably practicable, EERA, FEA,
positioned and/or protected to and QRA.
survive MAHs.

OPERATIONAL VERIFICATION VSEL 3

No. Site Verification Reference Base Office Verification Reference

M10_V1 Review any changes made to the asset which could M10 - All
affect the type, number or location of fire
extinguishers since the last operational verification
visit.

111
 OPERATIONAL VERIFICATION VSEL 3

No. Site Verification Reference Base Office Verification Reference

Confirm that the modifications have been subjected

to the change management system and that any
actions arising have been satisfactorily closed out.

M10_V2 Confirm that all standard work text instructions have M10 - All
scheduled within the maintenance management
system have been completed as scheduled.

M10_V3 Visual examination of extinguishers to confirm Test will support

the following: Functionality Items
M10.1_F1.
 The location and quantity of extinguishers
is as detailed within the Table 1 and the
Safety Equipment Layout Drawings.
 There is no visible damage to
extinguishers.
 Extinguishers are within their expiry date.

112
 Table 1 – Extinguisher Details

Extinguishing Material Type Capacity (kg) Location Quantity Applicable Standards

HOLD – Asset specific HOLD – Asset specific HOLD – Asset specific HOLD – Asset specific HOLD – Asset specific HOLD – Asset specific
details to be details to be incorporated. details to be details to be details to be details to be
incorporated. incorporated. incorporated. incorporated. incorporated.
e.g. Portable Fire
e.g. Dry powder Extinguishers. e.g. 50 e.g. Weather deck e.g. 2 e.g. BS 5306

HOLD – Asset specific HOLD – Asset specific HOLD – Asset specific HOLD – Asset specific HOLD – Asset specific HOLD – Asset specific
details to be details to be incorporated. details to be details to be details to be details to be
incorporated. incorporated. incorporated. incorporated. incorporated.
e.g. Portable Fire
e.g. water Extinguishers. e.g. 100 e.g. Mezzanine deck e.g. 1 e.g. BS 5306

HOLD – Asset specific HOLD – Asset specific HOLD – Asset specific HOLD – Asset specific HOLD – Asset specific HOLD – Asset specific
details to be details to be incorporated. details to be details to be details to be details to be
incorporated. incorporated. incorporated. incorporated. incorporated.
e.g. Trolley Mounted
e.g. CO2 Extinguishers. e.g. 50 e.g. Cellar deck e.g. 1 e.g. BS 5306

HOLD – Asset specific HOLD – Asset specific HOLD – Asset specific HOLD – Asset specific HOLD – Asset specific HOLD – Asset specific
details to be details to be incorporated. details to be details to be details to be details to be
incorporated. incorporated. incorporated. incorporated. incorporated.
e.g. Large Capacity
e.g. Foam Wheeled Extinguishers. e.g. 200 e.g. Helideck e.g. 1 e.g. CAP 437 / BS 5306

HOLD – Asset specific HOLD – Asset specific HOLD – Asset specific HOLD – Asset specific HOLD – Asset specific HOLD – Asset specific
details to be details to be incorporated. details to be details to be details to be details to be
incorporated. incorporated. incorporated. incorporated. incorporated.

113
SECE Number: M11 SECE: - Collision Mitigation Revision: Draft Rev B1 Date: 15/06/2017
Goal:
Minimize structure damage in the event of a collision

Scope / Equipment

SECE Sub Number SECE Sub System: Installation

Plant (1) Plant (2) Plant (n)

Tick these boxes to indicate which systems are

present at each location.

M11.1 Fenders

Scope
Collision protection structures (HOLD – Insert collision protection structures for asset e.g. Berthing Aids, Kinetic Energy Impact Protection)

Notes

Principal Interacting SECEs

SECE Number SECE System

P1 Structural Integrity

P5 Pipelines & Riser Integrity

C5 Riser ESDVs

114
M11.1 SECE Sub System: Collision Avoidance Systems

Number Performance Requirements Means of Assurance

Functionality References Means of Assurance Design References Means of Assurance References

Operational

M.11.1 F1 Physical barriers are - Reasonably foreseeable kinetic Provide reference Operational assurance is Provide reference
provided in specified energy impacts with MAH to: provided by routine to:
locations to prevent MAH potential are identified during inspections, carried out in
 Project HAZID.  GS EP EXP
incidents caused by kinetic the asset HAZID assessments. accordance with relevant work
 Physical
energy impacts. instruction at frequencies 311 Plant
The physical barrier basis of barrier basis of
scheduled in as scheduled in Integrity
design have been reviewed design.
the asset maintenance Minimum
and compared with the  Plot plan/s
management system. Inspection
reasonable foreseeable showing the
vehicular incident kinetic location of Requirement
energies. physical s
The review confirmed that the barriers.  GSP EP EXP
physical barriers are suitable
213
and sufficient to mitigate the
effects of kinetic impacts. Minimum
Maintenance
Requirement
s
 Asset
Inspection
and
Maintenance
Managemen
t System

Total Change
Control
Procedure.

115
M11.1 SECE Sub System:

Performance Requirements Means of Assurance

Availability References Means of Assurance Design References Means of Assurance References

Operational

M11.1_A1 Physical barriers are - - Cf. M11.1_F1- - - Cf. M11.1_F1 Provide

available at all times a references to the
Visually inspect several of the
kinetic energy impact risk plot plan or
physical barriers.
exists. installations
diagrams of all
physical barriers

M11 SECE Sub System: Collision Avoidance Systems

Performance Requirements Means of Assurance

Survivability References Means of Assurance Design References Means of Assurance References

Operational

M11.1 The physical barriers are - - - - -

S1 sacrificial. They are not
designed to survive any
MAH.

116
 OPERATIONAL VERIFICATION VSEL 3

No. Site Verification Reference Base Office Verification Reference

M11_V1 - - Review any changes made since the last operational

verification visit that have the potential to affect the
collision mitigation devices . Confirm that the
modifications have been subjected to the relevant
change management system and that any actions
arising have been satisfactorily closed out.

M11_V2 Confirm that all standard work text instructions have

scheduled within the maintenance management
system have been completed as scheduled.

M11_V3 - - Review the inspection, maintenance and function

test records and confirm that all planned work has
been performed and that all actions arising are being
satisfactorily tracked through to completion.

M11_V3 Visually inspect several of the physical barriers. - -

Confirm that they are present and are
undamaged to an extent that may affect their
functionality.

117