September 2004
Corrective action
Implementation
Monitoring
Audit
Management review
HSE
The companies belonging to the Royal Dutch/Shell Group of companies are separate and distinct entities, but in this document the collective expressions Shell and Group are sometimes used for convenience in contexts where reference is made to the companies of the Royal Dutch/Shell Group in general. These expressions are also used where no useful purpose is served by identifying the particular company or companies. This document is prepared by Shell Internationale Petroleum Maatschappij B.V. (SIPM) as a service under arrangements in existence with companies of the Royal Dutch/Shell Group; it is issued for the guidance of these companies and they may wish to consider using it in their operations. Other interested parties may receive a copy of this document for their information. SIPM is not aware of any inaccuracy or omission from this document and no responsibility is accepted by SIPM or by any person or company concerned with furnishing information or data used in this document for the accuracy of any information or advice given in the document or for any omission from the document or for any consequences whatsoever resulting directly or indirectly from compliance with or adoption of guidance controlled in the document even if caused by a failure to exercise reasonable care.
SHELL HEALTH, SAFETY AND ENVIRONMENT COMMITTEE The copyright of this document is vested in Shell Internationale Petroleum Maatschappij B.V., The Hague, The Netherlands. All rights reserved. September 2004
Document History
Date April 1992 September 2004 Issue 1.0 2.0 Reason for change First Issue Second Issue Author Approval Signature
OGCH/1
The printed version of this document is the controlled version. It is also available on the PXE Website. Superseded issues of this document should be destroyed.
Table of Contents
Table of Contents
1 Purpose 1.1 Definition Scope and Application Group Standards and Requirements Management System 4.1 Objectives 4.2 Responsibilities and Competence 4.3 Planning, Procedures and HEMP 4.4 Rescue Plans 4.5 Monitoring and Audit 4.6 Management Review Confined Space Hazards 5.1 Oxygen Deficiency 5.2 Oxygen Enrichment 5.3 Fire and Explosion 5.4 Toxic Hazards 5.5 Corrosive Hazards 5.6 Physical Hazards 5.7 Unsafe Conditions 5.8 Psychological Issues Controls that Apply to All Confined Space Entries 6.1 Permit to Work 6.2 Mechanical Isolation 6.3 Electrical/Hydraulic Lock-out and Tag-out 6.4 Clearance of Process Materials 6.5 Ventilation 6.6 Testing and Monitoring 6.7 Control of Ignition Sources 6.8 Control of Radiation Sources 6.9 Lighting and Electrical Equipment and Tools 6.10 Internal Combustion Engines and Gas Cylinders 6.11 Personal Protective Equipment (PPE) 6.12 Access and Escape 6.13 Attendants 6.14 Fitness to Work 1 1 2 3 4 4 4 5 5 7 8 9 9 10 10 11 12 13 13 13 15 15 15 16 16 16 17 18 19 19 19 20 20 20 21
2 3 4
Table of Contents
Entry Criteria and Specific Controls 7.1 Normal Confined Space Entry Without Breathing Apparatus 7.2 Exceptional Confined Space Entry With Supplied Air Breathing Apparatus Inert Gas Confined Space Entry for Catalyst Handling 8.1 Hazards 8.2 Equipment and Resources 8.3 Managing Specialist Contractors References Glossary
22 23 23 25 25 27 29 30 31 33 36 38
9 10
Appendix 1 Responsibilities Of Key Personnel Appendix 2 Competence Profiles Of Key Personnel Appendix 3 Rescue Plans
Gas Freeing and Cleaning of Storage Tanks, Issue 3.0, February 2003
1.1
Definition
A confined space is a fully or partially enclosed space where there is a risk of serious injury from hazardous substances or conditions within the confined space. Refer to the Glossary in Section 10 of this guide for an explanation of the concepts of an enclosed space and of hazardous substances or conditions. A confined space entry (CSE) means not only complete body entry, but also inserting a head into man way openings, hatches, pipe ends etc.
4 Management System
4
4.1
Management System
Objectives
Every effort should be made to minimise the need for CSE, which is an inherently hazardous activity, by methods such as the following: Designing out the need for entry by flooding the legs of offshore production platforms; Maximising the extent of cleaning of tanks and vessels whilst they are still in operation; Applying robots and mechanical devices instead of people for cleaning tanks; Applying on-line inspection methods such as ultrasonics; Minimising below ground level pipe trenches and process equipment in pits. Where CSE cannot be avoided, for example, for cleaning, inspection and maintenance of the equipment, every effort should be made to eliminate the asphyxiant, flammable and toxic hazards by positive isolation, thorough cleaning, gas purging and ventilation of the space. In the design of new facilities consideration should be given to the need for persons to enter into process equipment and to facilitate the rescue of persons from the space. Some examples are: Providing sufficient man ways of adequate size on process vessels and columns to allow entry of persons and materials and ventilation of the space; Fitting tray man ways in distillation columns directly above each other to facilitate movement and rescue.
4.2
4 Management System
4.3
4.4
Rescue Plans
Rescue plans are an integral part of the planning of confined space work. A rescue plan shall be prepared as part of the JHA for the specific CSE, and it should take account of any legal requirements. When a generic rescue plan is available it shall be checked for applicability to the CSE being planned. The BU or Site emergency services personnel, especially those with experience of confined space rescue, should be involved with Operations and Engineering personnel in developing the rescue plan.
4 Management System
4 Management System
The following key points should be considered in the development and implementation of confined space rescue plans: Entry of persons into a confined space should not be allowed until a plan for rescue of incapacitated persons from any part of the space has been developed, resourced and rehearsed. The minimum rehearsal is to talk through the plan and individual responsibilities, with nominated rescuers present, as part of the kick-off meeting at the work-site; If retrieval systems are needed, e.g. lifelines, tripod winch and full body harness, these should either be set-up/in use or available in the immediate work area; Rescue personnel should not put themselves at risk when attempting to rescue persons from a confined space. There have been many cases where rescuers have succumbed to the same conditions as the persons they were trying to rescue; The attendant should not attempt a rescue. Some questions that should be asked and the factors that should be taken into account when developing rescue plans are set out in Appendix 3.
4.5
4 Management System
4.6
Management Review
Line Management should periodically review the effectiveness of the CSE procedures and practices, and where necessary they should revise the procedures. Factors to be taken into account include: Changes in legislation, Industry and Group guidelines; Review of incident reports; Inspection and audit findings; Feedback from those involved in CSE activities. It would be appropriate to review the standards and relevance of guidance in this document at the same time, and provide feedback to the business and Corporate HSE advisers.
5.1
Oxygen Deficiency
The normal, naturally occurring atmospheric concentration of oxygen is 20.8% vol. at sea level. Atmospheres containing less than 20% vol. oxygen are considered to be oxygen-deficient. The oxygen content of air reduces as altitude increases, therefore locations at more than 1000 metres above sea level should make an adjustment to the criteria in this guide. Oxygen deficiency in an atmosphere can result in asphyxiation. A relatively small reduction in the oxygen level can lead to impaired mental ability and can provoke a feeling of euphoria or well being leading to an overoptimistic judgment of the situation. The effects generally occur without alerting the senses. Loss of consciousness can occur without warning. This can happen even in circumstances where only a persons head is inside a confined space. Very low oxygen concentrations, below 10%, can lead to unconsciousness and death. Inhaling an atmosphere with no oxygen results in instant death. There is no panic or discomfort; death is swift and silent. Oxygen deficiency can result from:
Displacement of air from low points in a confined space by heavier gases such as hydrocarbons or
carbon dioxide;
Purging of the confined space with an inert gas to remove flammable or toxic gases, fumes,
vapours or aerosols;
Naturally occurring biological processes that consume oxygen, which can occur in sewers,
storage tanks, production platform legs, storm water drains, wells etc.; Leaving a vessel completely closed for some time, since the process of rust formation on the inside surface consumes oxygen. Newly fabricated or shot blasted carbon steel vessels are especially vulnerable to rusting; Increased levels of carbon dioxide evolving from limestone chippings associated with drainage operations; Burning and welding, which consume oxygen; Displacement of air during pipe freezing with liquid nitrogen; Gradual depletion of oxygen as workers breathe in confined spaces and where provision of replacement air is inadequate.
Any reduction in the oxygen level from atmospheric concentration shall be investigated, the risks assessed and appropriate measures taken. Entry into confined spaces containing 16 to 20% vol. oxygen shall be allowed only by exception, when the source of oxygen deficiency is understood and it is not practical to ventilate the confined space to atmospheric oxygen level.
Atmospheres containing less than 16% vol. oxygen shall be treated in the same way as toxic atmospheres that are Immediately Dangerous to Life and Health (IDLH). Entry into confined spaces containing less than 16% vol. oxygen shall not be allowed, except under inert gas entry conditions as described in Section 8.0.
5.2
Oxygen Enrichment
The normal, naturally occurring atmospheric concentration of oxygen is 20.8% at sea level. Atmospheres containing more than 21.5 % vol. oxygen should be treated as oxygen enriched. Oxygen enrichment will significantly increase flammability of clothing, grease and other combustible materials. Oxygen enrichment can result from:
Leaks from oxygen containing equipment such as gas cylinders, valves, hoses and welding torches; Inadvertent use of oxygen instead of air for ventilation or breathing air; Deliberate addition of oxygen to increase the level of an oxygen deficient atmosphere.
Any increase in the oxygen level above normal during CSE activities should be investigated, the risks assessed and appropriate measures taken. The most common oxygen containing equipment is that used in gas cutting operations. Cylinders, gas hoses, valves and welding torches should be handled with care and should be daily inspected for damage. Gas cylinders should not be taken into confined spaces. All cutting and welding equipment should be removed from confined spaces during breaks and at the end of the working day.
5.3
10
Vapour entering the confined space from nearby process plant that has not been effectively
isolated or from nearby work that is not well controlled; Solvents brought into the space for cleaning, painting, dye penetration tests or in adhesives; Gases brought into the space for welding or gas cutting, including leakage from cylinders, valves and hoses; Contaminated firewater/process water used to wash the confined space and introduced by hoses; Vapour or fumes that build up in sewers, manholes, contaminated ground or excavations.
A source of ignition can be any heat source having enough energy to ignite a flammable vapour air mixture, or to raise the temperature above the auto-ignition temperature. Possible ignition sources include: Open flames and sparks resulting from welding, gas cutting and grinding; Sparks or arcs produced by electrical equipment, lightning and electrostatic charges; Hot pipes or exhausts that can raise the flammable mixture above the auto-ignition temperature; Heat of friction during drilling, sawing or other cutting activities; Pyrophoric materials, e.g. iron sulphide in scale; Thermite reactions from aluminium or other alloy tools striking against rusted iron or steel; Any highly reactive material capable of producing sufficient heat for combustion, for example: - Strong oxidising substances, such as hydrogen peroxide used in waste treatment facilities; - Chemicals that undergo self-accelerating exothermic reactions when a critical temperature is reached, such as ethylene oxide. The recommended approach to controlling fire and explosion hazards in confined spaces is to eliminate all flammable materials from confined spaces before persons enter. The objective should be no detectable flammable vapour, i.e. an explosimeter reading less than 1% LFL. In exceptional situations where this is not achievable, special measures have to be taken to eliminate possible ignition sources. In any event CSE shall not be allowed into spaces where the flammable concentration is greater than 10% LFL.
5.4
Toxic Hazards
Toxic substances can be solids, liquids or gases. They can cause harm by inhalation, ingestion or skin contact. They can affect the tissue at the point of contact, or organs remote from the point of contact. Toxic substances can cause injury, acute or long-latency illness, or death, depending on the characteristics of the substances, the concentration and the duration of exposure. For example, prolonged exposure to benzene can cause kidney damage or even leukaemia. Toxic hazards in confined spaces can result from the same sources as the flammable hazards described in Section 5.3. Additional hazards are: Contamination of personal protective equipment; Carbon monoxide and nitrogen dioxide, which are present in the exhaust of combustion engines; Carbon dioxide permeating from limestone containing ground into trenches.
11
Common toxic substances in the oil, gas and petrochemical industry are:
Acute toxic gases such as hydrogen sulphide, carbon monoxide, hydrogen fluoride, ammonia
and chlorine;
Narcotic gases and vapours such as butane, pentane, hexane, gasoline and gas condensate; Catalyst dusts, such as nickel, platinum, and molybdenum.
Toxicity data for specific substances, e.g. material safety data sheets (MSDS), should be sought from the supplier of materials or from government authorities, and should be made available on site. MSDSs may not be available for intermediates and products of oil refinery and petrochemical processes. In this situation a competent industrial hygienist should assess the toxicity of the intermediates and products. Crude oil and refinery process streams are mixtures of many hydrocarbons that individually have significant toxic or narcotic effects. The HRA, as input to the JHA, should assess the hazards of the mixture in the situation where persons could be exposed. Specifically, the HRA should make a recommendation on whether flammability measurements are sufficient to detect harmful levels of the potentially toxic substance. Note that different criteria may be needed for: a) Confirming that the atmosphere in the confined space is safe for entry, for planned work, and b) Requiring persons to leave the space in case of an increased level during the work Substances that are harmful by inhalation normally have an assigned Occupational Exposure Limit (OEL). An Action Limit of 50% of the published OEL should be applied as the trigger for implementing specific measures for controlling exposure to the toxic substance during the confined space work, but the target should be to reduce the airborne concentration to ALARP. OEL data may not be available for some toxic dusts, sludge and other substances, in which case specialist occupational hygiene advice should be sought. Entry into confined spaces containing a concentration of toxic vapour, fume or dust between the OEL and the IDLH value shall be allowed only by exception when and it is not practical to ventilate the confined space or otherwise remove the hazard to reduce the toxic concentration. In this case it shall only be allowed when the source, nature and concentration of the toxic hazard is understood and exposure is adequately controlled by other means.. Entry into confined spaces containing a concentration of toxic vapour, fume or dust above the IDLH value shall not be allowed, except under inert gas entry conditions as described in Section 8.
5.5
Corrosive Hazards
Corrosive substances are harmful by skin or eye contact, by inhalation of a corrosive mist or vapour or by ingestion. They destroy the tissue and may leave permanent injury or scars. Common corrosive substances in the oil and petrochemicals industry are sodium hydroxide, sulphuric acid and hydrofluoric acid.
12
5.6
Physical Hazards
Typical physical agents that are hazardous in confined spaces include:
Excessive noise levels from tools or machinery, which tend to be magnified by the walls of a
vessel or tank. For more details refer to Noise Guide, Shell SHC, 1991;
Heat stress, resulting from inadequate cooling of vessel or from ambient heating in hot climates.
It can be made worse by the PPE being worn. For more details refer to Management Guide to Thermal Stress, Shell SHC, 1991; Electric shock from hand lamps and other electric tools. For more details refer to Electrical Safety, HSE Advisers Panel, 2003); Radioactive sources used in certain types of level instrument, and radioactive substances present in certain crude oils or condensates. For more details refer to Ionising Radiation Safety Guide, Shell SHC, 1993.
5.7
Unsafe Conditions
Typical causes of unsafe conditions in confined spaces include: Structural failure, e.g. the internal floating cover or roof may not support a workers weight; Falling tools and materials, e.g. refractory in a furnace; Restricted working space and obstructions; Interaction between and incompatibility of different types of work, e.g. refractory stripping and inspection; Access and escape openings that are too small; Slippery floor surfaces and tripping hazards; Poor visibility due to misty or dusty conditions; Mixers or other moving parts, e.g. cooler fans that have not been adequately isolated or locked; Free flowing solids that can engulf a person and prevent escape, e.g. catalysts or sand; Flow of liquids into a drain or excavation leading to drowning or other serious injury; Improper shoring of excavations leading to collapse of the sides.
5.8
Psychological Issues
Selection of personnel to enter confined spaces should take account of the arduous nature of the work and the mental and physical requirements. Working in confined spaces can cause claustrophobia and anxiety to people who are predisposed to the condition. Usually this will be known in advance. If not it should become evident during training for confined space work. Depending on the severity of the condition, it is likely that the employee is not fit for this type of work. For more information, refer to the Fitness to Work Yellow Guide, Shell HSE Advisors Panel, 2003. If someone has narrowly escaped from a serious accident or has been witness of a serious accident, fear and anxiety may develop even after years of working without problems. If this is not addressed
13
in the appropriate manner employees may become permanently unfit for confined space entry work. The impact of the arduous nature of the work in confined spaces together with the psychological and physical strains are more pronounced in cases of inert gas entry work. The consequence of a breathing mishap are swift, the effect is potentially fatal and recovery measures are much more difficult compared with a confined space where a normal (20.0 - 21.5% vol.) oxygen level exists. Inhalation of low levels of narcotic materials (hydrocarbons, cleaning solvents, adhesives etc) during confined space work may impair judgement.
14
6
6.1
6.2
Mechanical Isolation
Confined spaces should be positively isolated from all potential hazards by inserting blinds or by disconnecting and blanking all lines connected to the space. The isolation flange should be as close as possible to the vessel or tank to minimise risks of inadvertent open connections to the confined space and the risks of substances in the connecting pipe work re-contaminating the confined space. Blinds and blank flanges should be sufficiently strong to withstand the maximum internal pressure that might be exerted against them. The following methods of isolation should not be used for CSE: A closed valve, even when sealed and made inoperative; Inserting a sewer plug, an inflatable balloon or a stopple in a line; Freezing of a fluid in a line. Exceptions to the general requirement for positive isolation are allowed in the following situations: Double block valve and drain arrangements (two block valves in series with an open drain valve in between to confirm the valve isolation is effective) may be used for low hazard fluids such as water or air; Sewer plugs or air bags may be used in very low pressure water service, e.g. for isolating drain pits or interceptor pits from the connecting pipes or channels. In both these exceptional situations there needs to be a detailed assessment of the risks before accepting the lower standard of isolation, and a means of verifying the effectiveness of isolation throughout the entry period. For more detailed guidance on mechanical isolation refer to Permit to Work Systems, Shell HSE Advisers Panel, 2003.
15
6.3
6.4
6.5
Ventilation
Confined spaces should be ventilated with air: a) Initially to remove the gases used to purge flammable or toxic contaminants of the previous contents; b) Throughout the entry period to replace oxygen used by people working in the space, to remove vapour or fumes produced by the work and to remove vapour generated from residues, scale, pyrophoric reactions etc. Natural ventilation has the advantage that it does not depend on mechanical devices that can fail or can provide an ignition source. in contrast forced ventilation using fans or air eductors is not dependent on wind speed and direction, and is therefore more predictable and often more effective. Whichever method is chosen, man ways and vents should be selected and eductors and fans should be located so as to reinforce the natural movement of gases, i.e.: Hot gases and air tend to rise; Hydrocarbon vapours are generally heavier than air, and tend to fall. Ventilation should be arranged so that it changes the air in all parts of the confined space, including low spots and dead ends where heavy gases and vapours can collect. Refer to Gas Freeing and Cleaning of Storage Tanks, Shell HSE Advisers Panel, 2003 for detailed arrangements that can be applied to process vessels as well as tanks.
16
To ensure that the air used for ventilation is not contaminated the following precautions should be taken: Surrounding process plant should be closely monitored, to identify leaking liquids or vapours. This is particularly important for confined spaces below ground level, drains and excavations, as many common contaminants are heavier than air; Any work in the surrounding area that could cause contamination of the ventilation air should be stopped; Diesel engines should not be located upwind of any ventilation air inlet, either vessel man way or compressor air inlet; Residues and waste materials should be moved well away from the confined space so as not to contaminate the ventilation air. Local exhaust ventilation may be needed to extract fumes or dust resulting from welding, gas burning and other work, when an analysis of the hazards indicates that the general ventilation is in adequate. Oxygen shall not be used to ventilate a confined space, as this could lead to oxygen enrichment of the space. When pneumatic tools are used in a confined space special care should be taken to ensure that they are not coupled up to nitrogen supplies by mistake.
6.6
17
Specific to the gases that have to be tested and sensitive at the OEL; Of an approved type, e.g. intrinsically safe; Designed to give an a visual and audible alarm, when being applied for monitoring as opposed to
one-off testing;
Correctly maintained and calibrated; Checked that is functioning correctly, at the start of each day.
CSE testing should be carried out by a competent, authorised gas tester, who has been trained in the use of the equipment, understands the limitations of the equipment and can interpret the results correctly. The gas tester should wear the appropriate PPE until the test results confirm that the hazard is controlled. Test results should be recorded on the permit for the work or a gas test certificate. If it becomes necessary to enter the confined space to obtain a representative sample, entry of the competent person, normally the permit issuer rather than an authorised gas tester, should only be allowed when all the controls specified on the entry permit, apart from the gas test, are implemented and effective. When the JHA indicates that conditions could change and hazardous gases could build up in the confined space during the work, the space should be continuously monitored. The optimum location of the gas test equipment within the confined space is determined by the type and direction of ventilation and the potential for heavier than air gases to build up in low points. It is recommended to use personal monitors, e.g. attached to the lapel, when it is uncertain whether the installed gas detectors or portable gas detectors will provide a rapid warning of gas build up. In the rare situations where forced ventilation is being applied to control the concentration of a flammable, toxic or asphyxiant hazard, continuous monitoring for the hazardous gas is essential.
6.7
18
Locate diesel engines and other internal combustion engines well away from the confined space; Prevent mechanical sparks, e.g. from falling tools.
When ignition sources cannot be totally eliminated they should be strictly controlled through the Permit to Work system.
6.8
6.9
6.10
19
6.11
6.12
6.13
Attendants
The permit, JHA and/or rescue plan should identify the number of attendants needed for the different phases of the work and it should detail their responsibilities. Typical responsibilities and competences of attendants are detailed in Appendices 1 and 2. An adequate and effective means of communication should be established before persons enter the space: Between the persons inside a confined space; Between the persons inside a confined space and the attendant outside; Between the attendant and the control room and/or emergency response team.
20
Communication can be by speech, tugs on a rope, telephone or radio (intrinsically safe when flammable conditions could exist). It is important that communication is easy and effective, therefore, it should be practised.
6.14
Fitness to Work
The fitness of persons who will enter a confined space, and of the rescue team, should be considered as part of the HEMP, especially in case of difficult access, heavy manual work, high temperatures or where breathing apparatus and chemical suits have to be used. Section 5.5 and 5.6 describe the physical and psychological factors that can impinge on fitness to work. For more details refer to Fitness to Work, Shell HSE Advisers Panel (2003).
21
Entry shall not be allowed into confined spaces outside these limits, where oxygen is less than 16% vol. or toxics are above IDLH limit or flammables are above 10% LFL, except for: Entry by specialist rescuers using breathing apparatus with back-up air supplies, specialist attendants and communication systems; Inert gas entry by specialist catalyst handling contractors, as described in Section 8 of this document. Notes 1. At high altitudes the atmospheric oxygen content drops below 20%. For these situations the oxygen criterion should be adjusted. 2. The IDLH value of toxic substances, and the equivalent for oxygen of 16% vol., is selected as the limit for use of conventional breathing apparatus. The logic for this is that the IDLH value is the highest level (lowest in case of oxygen) at which a person can escape from the space or area without assistance. There have been a number of fatal incidents over the years in Group activities where breathing air supplies have failed or persons have removed their air mask whilst still in the hazardous atmosphere. It is therefore considered prudent not to depend wholly on speedy rescue arrangements in case of an air supply failure, but rather set a limit such that persons should be able to escape unaided. 3. The toxic IDLH criteria should not be applied for work in open areas with breathing apparatus. 4. %LFL is a combined measure of the fire/explosion hazard, and of the toxic hazard of general hydrocarbons, when the HRA and JHA establish that there are no specific toxics present. 5. If any one of oxygen, toxics or flammables does not meet the Normal criterion, supplied air breathing apparatus shall be worn.
22
7.1
7.2
23
When air is supplied from a breathing air compressor, a bank of cylinders or a breathing air
supply main, the supply system should be reliable with sufficient back-up capacity in case of compressor or supply main failure. Persons operating the air supply system should be well trained and competent in their duties. (Note that there have been fatalities in Group activities as a result of air supplies failing); When breathing air is supplied from a compressor or supply main, separator vessels, filters or other equipment may be needed to remove water, oil or particulates from the supplied air. The compressor air intake should be located so that the supplied air is not contaminated by fumes from the diesel exhaust or other sources. If there is any doubt the air intake should be continuously monitored and installation of automatic shutdown (Chelwyn) valves should be considered; Breathing air mains should be segregated from instrument air, tool air and protected against possible contamination, e.g. by connection to hydrocarbon or nitrogen systems; Hoses supplying breathing air to a confined space should be located, suspended or otherwise guarded to avoid accidental damage. In addition these hoses should be inspected for leaks prior to use; When self-contained breathing apparatus is used, cylinders should be of sufficient capacity for the duration of the work; Air masks should be full face, and should be of the positive pressure demand type; Air purifying respirators shall not be used.
There shall always be one or more attendants, as established by the JHA and rescue plan, on standby outside the confined space.
24
8.1
Hazards
The confined space hazards described in Section 5.0 of this document apply to inert gas confined spaces, except as amended here. Loss of Breathing Air Supply There is an immediate risk to life should a person working within the space panic and remove their air mask, have the mask dislodged or lose air supply for any reason. Oxygen Deficiency at Man Ways One or more of the reactor man ways have to be kept open to allow people and equipment to enter the reactor. The area up to a few metres away from the man way will have an oxygen level lower than atmospheric as a result of inert gas leakage from the space. Workers and attendants in this area should wear positive pressure demand full-face mask breathing apparatus. Barriers and warning signs should be installed to keep other people away from this area. Fires and Explosions from Ingress of Air Fires in reactors can result from residual hydrocarbons, coke on the catalyst, carbon monoxide or pyrophoric iron sulphide if oxygen is allowed into the reactor. The main control is to maintain inert gas supply to the reactor, so that the oxygen level in the space remains below 3%. This figure includes a safety margin with respect to the theoretical maximum oxygen content of 8 to 10% to avoid a flammable mixture.
25
Certain compounds contain chemically bonded oxygen, which can be released in a combustible atmosphere. Examples are nitrates, peroxides and hydrocarbon oxides, for which specialist advice should be sought. Even when the atmosphere in the reactor itself is not flammable, gas leaving the space through open man ways may mix with air and result in a flammable mixture, and a fire/explosion hazard to persons outside the space. For this reason the entry criterion is to maintain the flammable gas level inside the confined space below 10% LFL. Note that the normal flammability detectors work on the principle of measuring temperature rise from combustion. They will not work in inert gas atmospheres, therefore special equipment is needed that is based on a different principle. These detectors are available from several of the wellknown gas detector manufacturers. Toxic gases The most common toxic gases present whilst handling catalysts under inert gas conditions is hydrogen sulphide. However, the HEMP and gas tests may identify other toxic gases such as carbon monoxide or nickel carbonyl. Given that high integrity breathing apparatus is already needed to assure the breathing air supply to those persons working in inert gas confined spaces, entry is allowed when the toxic concentration is above the IDLH value. The upper airborne concentration allowed for a toxic gas may be fixed by flammability criteria, e.g. for hydrogen sulphide or carbon monoxide, or by the protection factor of the breathing apparatus being used. Also, at these high levels of toxic gases other ways of absorbing the toxic substance into the body should be considered. It may be necessary to specify total coverage impermeable clothing to achieve full protection. The upper airborne concentration allowed for the toxic gas should be determined by industrial hygiene specialists for the individual substances identified. Nickel Carbonyl Nickel carbonyl is a hazardous chemical that is unique to processes using catalyst containing nickel. It is a highly volatile chemical formed by the reaction of carbon monoxide with nickel. Inhalation of concentrations of only a few parts per million for short periods may cause acute symptoms. A concentration of 30 ppm for 30 minutes is known to be lethal. The IDLH value is 2 ppm. Heat Stress The main application of inert gas entry is replacing catalysts without first regenerating them, thereby achieving a quick turnaround of the unit. There is liable to be pressure to minimise the vessel cooling time with possible negative impact on the potential for heat stress on individuals required to work in the confined space. Therefore it is critical to understand the causes of heat stress and how to assess these so that appropriate controls can be put in place, including identifying a maximum temperature that may be allowed, to safeguard personnel whilst in the space.
26
In general, the likelihood of heat stress increases when the temperature and/or humidity in a confined space are high, when the work done is abnormally strenuous or when impervious protective clothing is used which prevents the ability of a person to help to control their body temperature by sweating. For further details on calculation of heat index and recommended work patterns refer to The Management Guide to Thermal Stress, Shell SHC, 1991 and additional references given under Section 9.0. Catalyst Beds Catalyst that is being removed from a reactor is liable to sudden movement or collapse, which can lead to workers either falling or being engulfed. Workers should therefore wear harnesses and lifelines. The build-up of pressure inside a catalyst bed can lead to the crust rupturing violently.
8.2
27
Life support control station, set up as close to the entry point as practicable to continuously
monitor the supply air pressure to individual masks. Each breathing apparatus should be provided with an alarm indicating low supply pressure and an automatic actuating valve for the emergency air supply. It should be transparent how the system copes with a total failure of air supply from outside the confined space; The control station should also be capable of monitoring the atmospheric conditions in the confined space, e.g. oxygen and temperature; The control station should be provided with a battery power back up, automatically cutting in on failure of electricity supply. The battery supply should keep communication systems alive as well as providing emergency lighting at least for the time needed to evacuate persons from the confined space; Open communication links between entry personnel, attendants, supervisors and emergency personnel; Reinforced umbilical cords linking each person in the confined space with the monitoring station and carrying primary and emergency air supplies and communication cables; Safety harness and lifeline. Fall arrestors are commonly used; A hoisting device capable of assisting in rescuing persons from the confined space; A supply of emergency compressed air cylinders of sufficient capacity for rescue purposes; Persons required to approach the CSE area, but not actually enter it, should wear positive pressure demand breathing apparatus. Additional sets should be available outside the reactor for rescue personnel.
Other Equipment The provision of an oxygen resuscitator outside the space should be considered. However, this requires an individual trained in its use and holding a current certificate in cardiopulmonary resuscitation. Means of carrying injured persons from reactor platforms to ground level should be provided, e.g. a crane and stretcher. Safe access should be provided into and within the space, using the appropriate ladders, platforms and lighting. Rope ladders should be avoided unless users are trained and experienced in their use. Pneumatic powered tools or lights should be supplied by nitrogen to prevent oxygen being introduced to the confined space. People The following people are normally required: Technicians working in the reactor. Numbers should be kept to a minimum, to reduce the risk; Console operator, who monitors and records conditions of the technicians in the reactor, reactor conditions and equipment performance; Attendant at the man way, who assists the console operator and supervisor to maintain the breathing air supplies and the line of communications to the technicians inside the reactor. The attendant should be wearing a full inert gas suit and breathing apparatus, and be ready to respond in an emergency;
28
8.3
29
9 References
References
Shell Safety and Health Committee and HSE Advisers Panel publications: Electrical Safety (2004) Fitness to Work (2003) Gas Freeing and Cleaning of Storage Tanks (2003) Health Risk Assessment (2001) Management Guide to Thermal Stress (1991) Noise Guide (1991) Permit to Work (2003) Personal Protective Equipment (1989) Radiation Safety (1993) Risk Assessment Matrix (1999) Other publications:
Job Hazard Analysis, EP 95-0311 Hazard Identification, EP 95-0312 Guidelines for Work in Inert Confined Spaces in the Petroleum Industry, API Publication 2217A,
1997 Safe Work in Confined Spaces, L101, UK Health and Safety Executive, 1997 Respiratory Protective Equipment, HS(G)53, UK Health and Safety Executive, latest edition Guidelines and Procedures for Entering and Cleaning Petroleum Storage Tanks, API Publication 2016 Requirements for Safe Entry and Cleaning of Petroleum Storage Tanks, API Publication 2015 Permit Required Confined Space Standard, US OSHA 29 CFR 1910.146 Respiratory Protection Standard, US OSHA 29 CFR 1901.134 BS4275:1997: Guide to implementing an effective respiratory protective device programme BS7963:2000: Ergonomics of the thermal environment: Guide to the assessment of heat strain in workers wearing personal protective equipment ISO12894:2001: Ergonomics of the thermal environment: Medical supervision of individuals exposed to extreme heat and cold environments ISO9886:1992: Evaluation of thermal strain by physiological measurements
30
10 Glossary
10
Glossary
As Low As Reasonably Practicable (ALARP) For detailed guidance refer to Risk Assessment Matrix, HSE Advisers Panel, (1999) Business Unit (BU) Activities in one of the Group businesses that are operated as a single economic entity. A business unit can coincide with a Group company or straddle part or all of several companies. Confined Space A fully or partially enclosed space where there is a risk of serious injury from hazardous substances or conditions within the confined space or nearby. Common examples of confined spaces are: Process vessels, including columns, column skirts, large pipes, flare stacks, boilers, storage tanks, road/rail tankers; Spaces below ground or deck level, such as drain pits, sewage pits and associated tunnels, trenches, wells, shafts; Cargo holds, ballast tanks, engine rooms or void spaces on ships; Support columns, legs or pontoons of fixed or mobile off-shore installations. Other types of confined space are less obvious, for example: Rooms that are inadequately ventilated; Rooms that become confined because of the type of work being undertaken, e.g. spray painting; Open top tanks or on the roof of floating roof tanks; Excavations. Partially enclosed areas such as pits, excavations and tank roofs are considered to be confined spaces when they are deep enough for the breathing zone to be inside the pit (typically more then 1.5 metres) and the ventilation is insufficient to prevent possible build up of hazardous vapours. When the width (narrowest side) of such an area is less than six times the depth ventilation will be insufficient (The Institution of Petroleum Area Classification Code). Examples of hazardous substances and conditions within a confined space are: Oxygen deficiency leading to asphyxiation or unconsciousness; Toxic vapours, fumes or dusts; Flammable or combustible materials leading to fires or explosions; Free flowing solids or rising liquid level leading to engulfment, asphyxiation or drowning; Excessive temperatures leading to heat stress and unconsciousness; Inadequate lighting. A more complete description of hazardous substances and conditions is contained in Section 5.0 of this document.
31
10 Glossary
Confined Space Entry (CSE) Entry means either complete body entry or inserting a head into man way openings, hatches, pipe ends etc. Health Risk Assessment (HRA) The identification of health hazards in the workplace and subsequent evaluation of risk to health. This assessment takes into account existing or proposed control measures. Where appropriate, the need for further measures to control exposure is identified. For more details refer to Health Risk Assessment, Shell HSE Advisers Panel, 2001. Inert Gas Confined Space A confined space where the existing atmosphere is intentionally displaced with an inert gas such as nitrogen, to prevent ingress of air and oxidation of catalyst or other contents of the space. Immediately Dangerous to Life and Health (IDLH) IDLH is defined by OSHA as any condition that poses an immediate or delayed threat to life or that would cause irreversible adverse health effects or that would interfere with an individuals ability to escape unaided from a permit space. The National Institution of Occupational Safety and Health (NIOSH) defines the purpose of establishing an IDLH as to ensure that the worker can escape from a given contaminated environment in the event of failure of the respiratory protection equipment. NIOSH has established IDLH values for a number of chemicals that are toxic by inhalation. When an IDLH is not available, specialist advice should be sought to establish an equivalent to IDLH. Job Hazard Analysis (JHA) A job hazard analysis (JHA) is a method for analysing the hazards and identifying the controls and recovery measures needed to control the hazards. It is a step in the application of the Hazards and Effects Management Process (HEMP) to operations, maintenance and construction activities. For more details refer to EP 95-0311. Job Safety Analysis (JSA) and Task Safety Analysis (TSA) are equivalent terms. Lower Flammable Limit (LFL) The lower flammable limit of a hydrocarbon or other flammable vapour in air, above which the vapour will burn when ignited. Concentrations are normally expressed as % LFL. Lower Explosive Limit (LEL) is an equivalent parameter. Occupational Exposure Limit (OEL) The airborne concentration of chemical agents and levels of physical agents, to which workers may be repeatedly exposed day after day without adverse effect. Commonly used terms applied in some countries are Maximum Exposure Limit (MEL), Maximum Allowable Concentration (MAC) and Threshold Limit Value (TLV).
32
Appendix 1
Operations supervisor (Permit Issuer) The Operations supervisor fulfils the Permit Issuer responsibilities as detailed in Appendix 4 of Permit to Work Systems, HSE Advisers Panel (2003), and reproduced here: The Permit Issuer works under the delegated authority of the Asset Owner and is responsible for: Confirming that all hazards associated with the work have been identified and all relevant parties have provided their input and agree with the precautions, e.g. through supporting certificates and JHAs; Ensuring that all necessary supporting certificates, job hazard analyses and drawings are attached to the permit; Confirming that all operational preparations, including process clearance and isolations, have been completed; Confirming that the work site is safe for the work to proceed; Specifying on the permit any additional precautions that need to be taken during the work, including use of safety equipment and PPE; Identifying any conflicts between the proposed work and other activities in the area, and if necessary cross referencing the permits; Informing all people who may be affected by the work; Ensuring that the Permit Holder knows the exact location of the work, all the hazards that may be present and all the precautions that must be taken during the work; Signing and issuing the permit; Knowing the status of the work at all times, e.g. on a display board, and communicating the status to the oncoming shift at shift handover; Signing off and cancelling the permit when the work is complete or suspended. In addition the Operations supervisor is responsible for: Making an initial inspection of the confined space before allowing entry; Maintaining adequate ventilation of the confined space; Ensuring that the supervisor in charge of the work and the attendant are fully familiar with the specific flammable, toxic and asphyxiant hazards of the particular confined space, and with the precautions that must be taken; Setting up an entry log at the entrance to the confined space and briefing the attendant on how to maintain the entry log. Operations supervisor means a person in the Operations or Asset Owner organisation who has the above responsibilities. It could equally well be a senior operator or a plant manager.
33
Supervisor in charge of the work (Permit Holder) The supervisor in charge of the work will fulfil the Permit Holder responsibilities detailed in Appendix 4 of Permit to Work Systems, HSE Advisers Panel (2003), reproduced here: The Permit Holder is responsible for: Discussing the job fully with the Permit Issuer before signing to accept the permit; Showing the work party the exact location and equipment to be worked on; Explaining to the work party the details of the work, any potential hazards and precautions to be taken; Ensuring that the precautions are maintained throughout the work, and that the work party and the work stays within the limits (area, types of work, time) specified on the permit; Displaying the permit and attachments at the work-site; Stopping the work and seeking advice from the Permit Issuer if conditions at the work-site change; Ensuring that the work-site is left in a safe and tidy condition before handing back the permit on completion or suspension of the work. In addition the Supervisor is responsible for:
Briefing the work team on the methods of access and egress and the plans for escape should an
emergency arise; Liasing closely with the attendant and making sure that the attendant is familiar with the work in progress, the hazards involved and how to communicate with the emergency services; Stopping the work and withdrawing the work group should conditions develop in or around the confined space that are not allowed by the permit.
Attendant (Standby) The Attendant outside the confined space is responsible for: Knowing the hazards that may be faced by persons in the space, including toxic exposure symptoms and how persons react to those hazards; Maintaining contact with the persons inside the confined space. Where visual contact cannot be maintained radio should be used; Maintaining contact with the control room and/or emergency response team; Monitoring activities inside and outside the confined space, and ordering an evacuation should persons inside the space show behaviour that indicates they are being affected by hazardous conditions, or should conditions outside the space pose a threat to those inside; Ensuring, when breathing apparatus is being used, that the air supply from outside the confined space is maintained and is safeguarded against contamination. (It may be necessary to allocate a separate person to control the air supply); Maintaining a record of numbers and names of persons who are in the confined space at any one time, e.g. by an entry log; Barricading an area around the confined space or entry point and keeping unauthorised persons out of this area. Making sure that barricades and warning signs are in place during breaks and at the end of the day; Raising the alarm by alerting the rescue team in case of any emergency in the confined space; Remaining in attendance outside the confined space until relieved by another attendant; Assisting in any rescue that might be necessary. The attendant must not attempt a rescue that involves entry before the emergency services arrive, as this would leave the outside unattended.
34
The attendant should be dedicated to the above duties and should not act as a supervisor. In case of a large, complex confined space or of breathing apparatus entry by several persons, more than one attendant may be needed. The number of attendants should be identified by the JHA and the rescue plan. Persons entering a confined space (Entrants) The persons entering a confined space are responsible for: Knowing the hazards that may be faced during entry; Using correctly the breathing apparatus, harness and lifeline, radio or any other equipment that is specified on the JHA and permit; Keeping in communication with the attendant; Alerting the attendant if there is any warning sign or symptom of exposure to hazards in the space; Leaving the space quickly when ordered to do so by the attendant or supervisor in charge.
35
36
Have a full working knowledge of the responsibilities of the attendant and able to liaise with the
attendant in implementing rescue plans and setting up rescue equipment; Explain the activities, hazards and controls in daily team meetings and in toolbox talks; Supervise confined space entry work. Able to identify changes in conditions or activities that require the work to be stopped.
Attendant (Standby) Understands the typical process and physical hazards of confined spaces; Understands the working of breathing air supply systems, where supervising this system is part of the duty; Knows how to operate an entry log; Has the confidence to stop the work, withdraw the persons from inside the space and raise the alarm, in case of an emergency situation arising; Able to communicate in the agreed working language; Fully trained and certified competent in the duties of an attendant. Persons entering a confined space (Entrants) Be fully familiar with the hazards and controls for working in confined spaces; Trained and competent to use the specified equipment, such as breathing apparatus, harness and lifeline; Understand the importance of complying fully with all the controls on permits and supporting certificates and of reporting any deviations from specified conditions; Physically fit for the work and not liable to suffer from claustrophobia; Participate in daily team talks.
37
38
H S & E Publications Issued under the Auspices of the Shell HSE Committee/HSE Advisers Panel
Royal Dutch/Shell Group Health, Safety and the Environment Commitment and Policy (1997), reviewed 2000 Royal Dutch/Shell Group Procedure for HSE Management Systems (1997) Group HSE Management System (2002) HSE Management System, Integrating HSE into the Business (1994) only elec. Group Health, Safety and Environmental (HSE) Auditing Guidelines (2001) Group HSE Performance Monitoring and Reporting (2003) only elec. HSE Management Systems Management Information (1998) HSE Management Systems Incorporating Health Risks in an HSE Management System and HSE Cases (1998) HSE Management Systems Incorporating Environmental Risks in an HSE Management System and in HSE Cases (1999) Risk Assessment Matrix (1999) Occupational Health Guidelines Asbestos (1986) Chemical Hazards: Health Risk Assessment and Exposure Evaluation (1995) Fitness to Work Management Process (2003) Health Guidelines for Catering (1995) Health Risk Assessment (2001) Human Factors Engineering (HFE) in New Facilities Projects (2003) An Introduction to Health Risk Assessment: Training Package (2002), available through Open University,
see: http://sww-openuniversity.shell.com/scripts/dlmisapi.dll/GET?file=frameset.jsm&rshost=sww-openuniversity.shell.com&rsport=1564 Go to e-learning and then HSE and S
Legionella Management Process (2004) Management Guide to Thermal Stress (1991) Management Guidelines for Hearing Conservation (1991) Man Made Vitreous Fibres (2002) Medical Emergency Guidelines for Management (2001) Noise Guide (1991) Personal Protective Equipment Guide (1989) Repetitive Strain Injury (RSI) in the Office Environment (2002) The Use of Contact Lenses in Industry (1984) leaflet Safety Guidelines Company-Organised or Supported Social Events - Safety Considerations (1990) leaflet Contractor Safety (1987) Diving Operations Management Guidelines (1991) Electrical Safety (1986) Enhanced Safety Management (1985) Enhanced Safety Management Checklist (1989) Gas-freeing and Cleaning of Storage Tanks (2003) Guidelines for Entry into Confined Spaces (1992) Guidelines for Laboratory Safety (1989) Hand Tools and Sparking Hazards (1982) leaflet Hotel Fires, Plan for Survival (1988) leaflet Hydrogen Sulphide (1986) Incident Classification, Investigation and Reporting (2002) Ionising Radiation Safety Guide (1993) Office Safety (1987) Oxygen - A Hazard (1982) leaflet Permits to Work Systems (2003) Personal Protection of Helicopter Passengers in the Event of Ditching (1995) Road Transportation of Goods, Equipment and Product (2003) Safety Features of Light Vehicles and Mini Buses (1997) Safety Signs and Colour Coding (1981) Scaffolding Safety (1987) Seat Belts (1989) Static Electricity, Technical and Safety Aspects (1988) The Secondary Use of Containers (1978) leaflet Tripod-BETA (Incident Analysis EP 95-0321, to be ordered through Library, Library, Rijswijk SIEP-EPT-CSG) Unsafe Act Auditing (1987) The Use of Small Marine Craft by Group Companies (1992) Welding and Cutting (1976) Environmental Guidelines Guide for the Risk-Based Management of Potentially Contaminated Land (2000) Recommendations for Alternatives to Fire Fighting Halons (1994) Safe Handling and Disposal of PCBs (1985) Technical Guide for the Investigation of Potentially Contaminated Land (2004) Technical Guidance for Environmental Assessment (2000) Volatile Organic Compounds (1996) Waste Management Guide (1996)
These publications can be ordered from SI The Hague; PXE Division via E-mail: GUIDES, Internet address: Guides-Yellow@shell.com
September 2004
H S & E Publications Issued under the Auspices of the Shell HSE Committee/HSE Advisers Panel