Anda di halaman 1dari 18

Exploration & Production

GENERAL SPECIFICATION SAFETY


GS EP SAF 371

Emergency control facilities

02 01 00 Rev.

10/05 10/03 04/01 Date

Addition of EP root to document identification Change of Group name and logo Old TotalFina SP SEC 371 Notes

This document is the property of Total. It must not be stored, reproduced or disclosed to others without written authorisation from the Company.

GS_EP_SAF_371A Rev02.doc

Exploration & Production


General Specification GS EP SAF 371 Date: 10/05 Rev: 02

Contents
1. Scope ....................................................................................................................... 3
1.1 1.2 Purpose of the specification...............................................................................................3 Applicability........................................................................................................................3

2. Reference documents............................................................................................. 4 3. Terminology and definitions .................................................................................. 5 4. Emergency response plan...................................................................................... 6


4.1 4.2 4.3 Principles ...........................................................................................................................6 ERP check-list ...................................................................................................................6 Emergency response team................................................................................................8

5. Ergonomics ............................................................................................................. 9
5.1 5.2 5.3 5.4 5.5 Alarms................................................................................................................................9 Operator interface............................................................................................................10 Delegation of control........................................................................................................11 Push buttons....................................................................................................................11 Operating modes .............................................................................................................12

6. Communication ..................................................................................................... 12
6.1 6.2 6.3 6.4 6.5 General ............................................................................................................................12 Telephone........................................................................................................................13 UHF/VHF radios ..............................................................................................................13 Internal video system.......................................................................................................13 External communications.................................................................................................14

7. Alert to personnel.................................................................................................. 14
7.1 7.2 7.3 PAGA system ..................................................................................................................14 Visual alarms ...................................................................................................................15 Not normally manned facilities.........................................................................................15

8. Emergency station ................................................................................................ 16


8.1 8.2 8.3 Definition..........................................................................................................................16 Functional requirements ..................................................................................................16 Location ...........................................................................................................................17

9. Testing the emergency control facilities............................................................. 17

This document is the property of Total. It must not be stored, reproduced or disclosed to others without written authorisation from the Company.

GS_EP_SAF_371A Rev02.doc

Page 2/18

Exploration & Production


General Specification GS EP SAF 371 Date: 10/05 Rev: 02

1. Scope
1.1 Purpose of the specification
The purpose of this general specification is to define the safety requirements for the emergency control systems in production, processing, transportation and storage installations. On the basis of the hazard tree proposed by API RP 14J, the objectives of the emergency control facilities can be summarised as follows: Containment of hydrocarbons and preventing of ignition - Provide adequate operator interface for better control of the loss of containment once hydrocarbon leakage has occurred (see chapter 0) - Render ignition sources shut-off operation easier and more efficient in case of loss of containment of hydrocarbons (see chapter 0). Mitigation - Improve efficiency and ease activation and control of mitigation measures (see chapter 0) - Provide an emergency station where suitable conditions are met and in which key personnel can undertake mitigation duties in case of an emergency (see chapter 0). Escape, Evacuation and Rescue - Alert personnel during an emergency conditions (see chapter 7) - Provide an emergency station where suitable conditions are met and in which key personnel undertake EER co-ordination duties (see chapter 0) - Provide telecommunications within the installation and to other relevant location during an emergency condition (see chapter 0).

1.2 Applicability
This specification is not retroactive. It shall apply to new installations and to major modifications or extensions of existing installations. This specification applies to onshore and offshore installations. This specification is limited to highlight safety considerations, and it should not be considered as a substitute for proper design, specification, implementation or operations of emergency control systems. It does not cover, in particular: Egress, fire-fighting and smoke-control facilities of buildings, for further specifics refer to GS EP SAF 221 (Safety rules for buildings), Design and operation of the ESD system, for further specifics refer to GS EP SAF 261 (Emergency Shut-Down and Emergency De-Pressurisation (ESD & EDP), Design and operation of the F&G detection system, for further specifics refer to GS EP SAF 312 (Guidelines for selecting and installing fire and gas detection systems), EER means and procedures, for further specifics refer to GS EP SAF 351 (Escape, evacuation and rescue from fixed installations) Detailed design of the electrical and instrumentation associated equipment.

This document is the property of Total. It must not be stored, reproduced or disclosed to others without written authorisation from the Company.

GS_EP_SAF_371A Rev02.doc

Page 3/18

Exploration & Production


General Specification GS EP SAF 371 Date: 10/05 Rev: 02

2. Reference documents
The reference documents listed below form an integral part of this General Specification. Unless otherwise stipulated, the applicable version of these documents, including relevant appendices and supplements, is the latest revision published at the EFFECTIVE DATE of the CONTRACT. Standards Reference ISO/CD 13-702 Title (Under progress) Petroleum and natural gas industries - Control and mitigation of fires and explosions on offshore installations Requirements and guidelines

Professional Documents Reference API RP 14J UKOOA Title Recommended Practice for Design and Hazards Analysis for Offshore Production Facilities Guidelines for Telecommunication systems on Normally Attended Installations. Issue 2, December 1996

Regulations Reference Not applicable Codes Reference Not applicable Other documents Reference Operating Philosophy Safety Concept Statement Of Requirements (SOR) Title Title Title

Total General Specifications


Reference GS EP SAF 221 GS EP SAF 261 Safety rules for buildings Emergency Shut-Down and Emergency De-Pressurisation (ESD & EDP) Title

This document is the property of Total. It must not be stored, reproduced or disclosed to others without written authorisation from the Company.

GS_EP_SAF_371A Rev02.doc

Page 4/18

Exploration & Production


General Specification GS EP SAF 371 Date: 10/05 Rev: 02

GS EP SAF 312 GS EP SAF 351

Guidelines for selecting and installing fire and gas detection systems Escape, evacuation and rescue from fixed installations

3. Terminology and definitions


Abandonment Active Fire-Fighting (AFF) Alarm Act of personnel onboard leaving an installation in an emergency (ISO). Same as Fire Protection, Active. Audible or visible signal indicating an off-standard or abnormal condition (ISO).

Control actions undertaken to depressurise equipment or process Emergency Depressurisation (EDP) down to a pre-defined threshold (generally 7 barg or 50 % of design pressure) in a given period of time (generally 15 minutes) in response to a hazardous situation (ISO + COMPANY). Emergency Response (ER) Emergency Response Plan (ERP) Emergency response team Emergency Shutdown (ESD) Emergency Shutdown system Emergency station Escape Escape, Evacuation and Rescue (EER) Essential safety system Evacuation Fire and Gas (F&G) system Action taken by personnel on or off the installation to control and/or mitigate a hazardous event (ISO). Set of actions to be taken by personnel on or off the installation to control and/or mitigate any hazardous event (ISO). Personnel who have designated duties in an emergency (ISO). Control actions undertaken to Shutdown equipment or process in response to a hazardous situation (ISO). System of manual stations and automatic devices which, when activated, initiate installation Shutdown (COMPANY). Place where emergency response personnel go to undertake their emergency duties (ISO). Act of personnel moving away from a hazardous event to a place where its effects are reduces or removed (ISO). General term used to describe the range of possible actions including escape, muster, refuge, evacuation, escape to the sea and rescue/recovery (ISO). Any system which has a major role in the control and mitigation of fires and explosions and/or in any subsequent Evacuation, Escape and rescue (EER) activities (ISO). Planned method of leaving the installation in an emergency (ISO). Safety system which monitors the temperature or the energy flux (fire), the concentration of flammable or toxic gases (gas), and initiates alarm and Shutdown functions at pre-determined levels (COMPANY).

This document is the property of Total. It must not be stored, reproduced or disclosed to others without written authorisation from the Company.

GS_EP_SAF_371A Rev02.doc

Page 5/18

Exploration & Production


General Specification GS EP SAF 371 Date: 10/05 Rev: 02

Fire Protection (Active) Any fire protection system or component which requires the manual or automatic detection of fire and which initiates a consequential (AFP) response (API). Fire Protection, Passive (PFP) Coating, cladding arrangements or a free standing system which in the event of fire will provide thermal protection to the substrate to which it is attached or to the protected area and does so independently of a requirement for human, mechanical or other intervention to initiate a response (COMPANY from ISO and API). Designated area where personnel gather and report when required to do so (COMPANY from ISO). Abbreviation for Public Address and General Alarm. Process by which those who, in an emergency situation, have been injured, and/or have been blocked in the escape ways, and/or have evacuated the installation by unusual means, are retrieved to a place where medical assistance is available (COMPANY from ISO). Area within the boundaries of the installation, and hence under the control of COMPANY, which is affected permanently by normal operation of the facility or exceptionally by the consequences of an emergency situation caused by a major failure (COMPANY). Place provided where personnel can take refuge for a predetermined period whilst investigations, emergency response and evacuation pre-planning are undertaken (ISO).

Muster area PAGA Rescue

Restricted area

Temporary Refuge

4. Emergency response plan


4.1 Principles
The Emergency Response Plan (ERP) is the set of actions to be taken by personnel on or off the installation to control and/or mitigate any hazardous event. Even if the existence of an ERP is not imposed by applicable regulation, it is COMPANY practice to have one, in all cases. It constitutes the basis for the definition of the emergency operating procedures which shall be defined by the Operation Department, prior to the start-up, and shall address such issues as the members, the responsibilities and the role of the emergency response team. The ERP fundamentals shall be established early in the project, preferably at pre-project phase, and shall be based on the set of emergency situations enclosed in the SAFETY CONCEPT. The ERP shall consider the different development phases of the installation, including temporary facilities, construction, drilling, major maintenance, future extensions and simultaneous operation. The design and characteristics of emergency control facilities (control room equipment and ergonomics, communication, alarm systems, emergency station, etc.) shall be such that the implementation of the ERP is rendered possible. Note: The ERP may involve other installations and/or other safety and rescue means.

4.2 ERP check-list

This document is the property of Total. It must not be stored, reproduced or disclosed to others without written authorisation from the Company.

GS_EP_SAF_371A Rev02.doc

Page 6/18

Exploration & Production


General Specification GS EP SAF 371 Date: 10/05 Rev: 02

Although the purpose of the present specification is not to elaborate on the detailed content of the ERP, a generic list of actions to be covered by the ERP, as relevant, is enclosed below and shall be used as a reference to cross check that no important issue has been overlooked when designing emergency control facilities. Actions listed below shall be either automatic and without delay of activation, but with confirmation of their satisfactory completion, or decided and controlled by the emergency response team as per pre-determined procedures. 4.2.1 Safety to life Loss of containment: alert and evacuate non-essential personnel away from the restricted area Risk of explosion/ignition: alert and evacuate non-essential personnel away from the restricted area Mitigation in case of fire: - Alert and evacuate non-essential personnel away from the restricted area - Activate smoke control (release of hold-open doors if any, pressurisation of stairwells or elevators shafts if any, smoke control pressure differentials if any and as applicable) - Activate or continue ESD and EDP - Activate fire-fighting as appropriate. Escape, Evacuation and Rescue - Alert to personnel and provide spoken messages to personnel - Control escape of personnel (unlocking of doors, if applicable, emergency lighting, if any, gather personnel in muster areas) - First aid to injured personnel - Establish external communications for external assistance - Gather logistic means for evacuation and rescue - Evaluate, decide and control the evacuation of non-essential personnel - Rescue personnel (blocked in temporary refuges, overboard to sea) - Evaluate and decide the evacuation of emergency response team - Abandonment, if necessary. 4.2.2 Protection of environment Loss of containment: - Detect the place of leakage, isolate leaking equipment or unit (manual or ESD), EDP leaking equipment or unit - Dispose contaminants in a safe and environment friendly manner, disperse or contain pollution. Risk of explosion/ignition: activate or continue ESD and EDP 4.2.3 Protection of assets

This document is the property of Total. It must not be stored, reproduced or disclosed to others without written authorisation from the Company.

GS_EP_SAF_371A Rev02.doc

Page 7/18

Exploration & Production


General Specification GS EP SAF 371 Date: 10/05 Rev: 02

Risk of explosion/ignition: activate the ESD system such as all ignition sources are shutoff in the restricted area Mitigation in case of fire: activate fire-fighting as appropriate.

4.3 Emergency response team


The design of emergency control facilities shall be such that the members of the emergency response team can fulfil their duties efficiently. Unless otherwise specified in the OPERATING PHILOSOPHY, the following rules shall apply. 4.3.1 Roles In case of an emergency, non-essential personnel shall be evacuated away from the restricted area as defined in section 4.2. The essential personnel remain in charge of the essential safety systems. The essential personnel are divided between: The designated persons in charge of controlling locally EER procedures: muster point coordinator, TEMPSC master, supply boat captains, helicopter pilots, Rescue co-ordinator if any designated by the Installation Manager, etc. The designated persons of the emergency response team in charge of controlling the emergency situation (see section 4.3.2). 4.3.2 Composition They emergency response team shall comprise, and should be limited to: In the Emergency Station - To evaluate the emergency situation and take necessary decisions - The Installation Manager, the safety Superintendent (wells and surface production if necessary), the operations Superintendent, the maintenance Superintendent, the logistics Superintendent. In the main control room - To monitor/control and check the ESD and EDP sequences - The duty operation supervisor, the duty lead panel operator. In the radio room - To maintain internal and external communications throughout the emergency - The duty radio operator, as a back-up and if possible, the off-duty radio officer. Outdoor or in technical rooms - To prevent escalation, mitigate and undertake corrective actions - The duty outdoor operators, the instrumentation team leader, the mechanics team leader (preferably in the diesel engines enclosures), and the electrical team leader (preferably in the essential switch-room). Around the area at fire - To activate the fire-fighting means - The fire brigade, permanent or designated.

This document is the property of Total. It must not be stored, reproduced or disclosed to others without written authorisation from the Company.

GS_EP_SAF_371A Rev02.doc

Page 8/18

Exploration & Production


General Specification GS EP SAF 371 Date: 10/05 Rev: 02

Outdoor or in clinics - To provide first aid - The medical orderly.

5. Ergonomics
5.1 Alarms
5.1.1 Introduction Controlling and limiting the number of alarm indications presented to the control room operators is an important factor in ensuring the efficient and safe operation of the installation because the multiplication of alarms is a potential cause of accident. Therefore alarms shall be segregated and fall into two main categories: New alarms: indication that an abnormal event has just occurred Outstanding alarms: indication that an abnormal condition still prevails. The selection of alarms to be transmitted to the main control room and the manner they are grouped together shall fulfil the OPERATING PHILOSOPHY requirements and in particular those defining the operation to be controlled from the main control room and those to be managed locally or in a dedicated technical room. 5.1.2 Number of alarms The number of unnecessary alarms shall be reduced by a proper design and the following recommendations shall be adhered to: Proper process design, in particular avoid unnecessary alarms when preparing the P&IDs Unnecessary process alarms which are not shown on the P&IDs should not be part of the design of the Process Control System (PCS): specific case of built-in alarms for each transmitter Regrouping of alarms (especially for packages) Non repetition of the display of the PSS, ESD and PCS alarms (in agreement with the principle of independence). 5.1.3 List of alarms Ideally the list of alarms should be that of the P&IDs. However, this basic principle can prove impracticable on large projects considering that the P&IDs are normally finalised by the end of the preliminary (basic) engineering phase, at a time where all relevant information are not yet finalised or even available. Therefore it can prove necessary to issue an update a separate list of alarms, containing all that are shown on P&IDs, plus all that appears at the project (detailed) engineering phase. While establishing the list of alarm and its subsequent revisions particular attention shall be paid to built-in alarms and integration of packages: The operational value of built-in alarms not shown on P&IDs should be assessed. Unnecessary build-in alarms shall not be connected to the PCS.

This document is the property of Total. It must not be stored, reproduced or disclosed to others without written authorisation from the Company.

GS_EP_SAF_371A Rev02.doc

Page 9/18

Exploration & Production


General Specification GS EP SAF 371 Date: 10/05 Rev: 02

Package VENDORS shall provide their list of alarms with the same principles as for the main process lists. 5.1.4 Hierarchy of alarms The hierarchy of alarms shall be achieved by colour coding and sound toning. A possible hierarchy is: General case - Alarms likely to lead to an automatic SD soon - Alarms not requiring immediate corrective action. Packages - Common alarms - Detailed alarms. F&G detection - Common alarm by zone - Individual alarm by detector. 5.1.5 Memorisation of the first alarm The memorisation of the first alarm is mandatory for all ESD-0 and ESD-1 inputs and SD-2 inputs reflecting a loss of containment (LSLL, PSLL, FSHH, etc.). The memorisation of the first alarm is recommended for all other SD-2 inputs (that are not an indication of a loss of containment) and SD-3 inputs. However it does not constitute a compulsory requirement since it may prove expensive for large systems that require a very short scanning time. 5.1.6 Masking the alarms The control system shall be provided with adequate facilities to mask unnecessary alarms coming from idle or stand-by equipment. Alarm masking capability shall be incorporated in the DCS and shall be standard feature provided by the project. Alarm masking shall be active if the equipment is not in use (signal from DCS) and if the alarm masking is enabled (signal from operator). An interlock shall be provided to preclude equipment restart if alarm masking is not removed.

5.2 Operator interface


At least two VDUs and one printer shall be dedicated to safety systems (ESD, F&G, and PSS) in the control room. One of the VDU shall display by default a schematic overview of the installation, split into fire zones, with the F&G detection status for each type of hazard (flammable gas, toxic gas, fire) and for each zone.
The hard-wired Fire and Gas matrix that was customarily provided on the COMPANYs installation is not required anymore. The colour code shall be unique for all emergency control facilities throughout an installation. It shall be easy-to-interpret, for instance: OK: Green

This document is the property of Total. It must not be stored, reproduced or disclosed to others without written authorisation from the Company.

GS_EP_SAF_371A Rev02.doc

Page 10/18

Exploration & Production


General Specification GS EP SAF 371 Date: 10/05 Rev: 02

Fault: Flashing green Alarm: Yellow (flashing till acknowledged) Confirmed detection: Red.

5.3 Delegation of control


The DCS shall be designed in such a way that the delegation of equipment (or system or unit) control from the central control room to local premises shall be possible, if relevant. This requirement is specifically applicable to such cases as: Wells supervisor when intervening on wellhead platforms Operators and/or maintenance technicians to start-up/shutdown a system or an equipment from its technical room or local panel. The control systems shall make provision to indicate which part of the team (central or local) is responsible for a given equipment. Note: This requirement assumes that a clear definition of the responsibilities within the operation team, has been included into the OPERATING PHILOSOPHY and that this definition has been done early enough, for instance at pre-project stage.

5.4 Push buttons


Push buttons shall be properly located, tagged and illuminated by essential lighting. They shall be physically protected against spurious activation and fitted with a specific unlocking tool to return to normal position. Push buttons shall be located in the different places of the installation to trigger the relevant shutdown levels (as mentioned identically in GS EP SAF 261), as follows: Location Emergency control centre Muster points/temporary refuge Drillers console Control room (CCR) Unit local panels (3) Outdoor ESD-0 (2), ESD-1, SD-2, SD-3 SD-2, SD-3 ESD-1 ( )
4

Offshore Platform ESD-0 ESD-0

Drilling or WO rig ESD-0 (1) ESD-0 ESD-1, SD-2 ESD-1, SD-2, SD-3 SD-2, SD-3

Onshore Plant

ESD-1, SD-2, SD-3 SD-2, SD-3 ESD-1 (4)

(1): Relates to drilling rig shutdown at an ESD-0 level (no ESD-0 level on a wellhead platform) - SIMOPS dossier to define the relevant actions (2): Push buttons in CCR only for remote facility controlled from CCR (3): Outdoor panel close to equipment or unit (4): ESD-1 push buttons can be provided outdoor at convenient locations, if imposed by site specifics (not base case) In case the activation of a shutdown push button unlatches a permissive to EDP signal, the corresponding EDP push button shall be located close by.

This document is the property of Total. It must not be stored, reproduced or disclosed to others without written authorisation from the Company.

GS_EP_SAF_371A Rev02.doc

Page 11/18

Exploration & Production


General Specification GS EP SAF 371 Date: 10/05 Rev: 02

5.5 Operating modes


The DCS shall have at least three different operating modes: Operator mode, which is the normal mode and the single mode accessible to operators, aimed at providing control and safety of the installation Maintenance mode, aimed at testing equipment, and/or modifying software parameters which are not accessible to operators (some PID actions, timer settings, etc.) Engineer mode, aimed at developing and testing software modifications. Access to the maintenance mode and, all the more so, to the engineer mode shall be restricted.

6. Communication
6.1 General
Each permanently manned installation shall be provided with communications means, either for internal use, alert or external use. Part of the internal and external means of communications, and the whole system of alert to personnel shall remain active in case of an emergency, without creation of additional hazards. Minimum safety-related requirements for communication systems are summarised below: Type Telephone UHF/VHF System General Local network Marine/aero Not for EER Video For EER General Ext. com. PAGA (3) Direct line Back-up Any Active in case of Emerg. Fl. gas No No No Yes No Yes No Yes Yes Yes No Yes ( ) No No No Yes Yes Yes
2

Autonomy 1.5 hr 6 hr 6 hr NA 2 hr NA 0.5 hr 2 hr 0.5 hr full load + 1.5 hr at 20 % load

Range Internal + (1) Field Traffic + rescue Internal World-wide Dedicated World-wide Internal

(1): The general telephone network can be connected with outside. (2): UHF/VHF portable sets shall be suitable for use in methane flammable gas environment, but are of prohibited use in hydrogen flammable gas environment. (3): See chapter 7. A dedicated radio room shall be installed in the clean, low-noise section of the living quarters, preferably high enough and fitted with windows such as to have a general view over the traffic around, if this does not expose the room to the blast of an explosion. The access to the radio room should be limited to authorised personnel. The radio room shall in no case be considered as part of the required means of egress. The background noise level in the radio room shall not exceed 50 dB(A).

This document is the property of Total. It must not be stored, reproduced or disclosed to others without written authorisation from the Company.

GS_EP_SAF_371A Rev02.doc

Page 12/18

Exploration & Production


General Specification GS EP SAF 371 Date: 10/05 Rev: 02

The communication means shall consist in a combination, but not necessarily limited to, of the following: Telephones (see section 6.2) UHF/VHF radios (see section 6.3) Internal video system (see section 6.4) External communications (see section 6.5). Although being also part of the communication systems, the Public Address and General Alarm are developed in a dedicated section of this document, distinct from other communication systems. For further details refer to chapter 7.

6.2 Telephone
The telephone system shall consist in a set of two (or possibly three) networks: A general telephone network, accessible to anybody at the relevant locations in the installation, and that can be able to communicate with outside; it is not considered as a safety device and it is not necessary it remains active in case of gas detection. A set of direct telephones in the main rooms where decisions are likely to be taken in case of an emergency: control room(s), radio room, muster stations, emergency control station, etc. They are considered as safety device and as a part of the emergency control facilities. Refer to the UKOOA document listed in chapter 2, section Muster Station Communications, for more details. Where relevant a set of direct telephones between the control room, radio room, emergency control station and the pipeline supervision centres. They are considered as safety device and as a part of the emergency control facilities.

6.3 UHF/VHF radios


A set of UHF/VHF radios shall supplement the telephone system. Part or the whole of the UHF/VHF radios shall be of a portable type. The UHF/VHF radios shall have a range and an autonomy compatible with the distances and time required for evacuation and rescuing. Depending on local regulations and/or technical constraints, the use of VHF bands may be limited to marine and air communications. In this case, a separate set of UHF radios shall be provided for the internal communications in the installation. The UHF/VHF bands shall not interfere with any safety or vibration monitoring system. All portable UHF/VHF radios shall be able to remain in service without additional hazard in case of emergency, including in case of gas detection (methane), however entrance into the rooms where hydrogen can be released (battery rooms) shall be strictly prohibited. Fixed UHF/VHF radios not suitable for use in case of gas detection shall be automatically shut-off. In addition and not to be confused with the UHF/VHF radios mentioned above for general purpose, it shall be provided a set of VHF radios, specific for aeronautical communications and another set, distinct, for marine communications. Part or the whole of these radios can be portable but are not necessarily to be suitable for use in hazardous areas.

6.4 Internal video system


The need for an internal video system shall be assessed. If this option is selected it shall preferably provide surveillance to traffic, lifting and handling areas, paths of restricted access,

This document is the property of Total. It must not be stored, reproduced or disclosed to others without written authorisation from the Company.

GS_EP_SAF_371A Rev02.doc

Page 13/18

Exploration & Production


General Specification GS EP SAF 371 Date: 10/05 Rev: 02

special hazard or remote areas and flares. Another possible use is for remote controlled fire monitors. The associated VDUs can be in the radio room or the control room and the cameras can be either fixed or remotely adjustable. Unless otherwise specified, it is not necessary this system remains active in case of emergency, with the exception of the video focused on the muster areas and embarkation posts which, if any, shall remain operational for two hours. It is not necessary, either, that this system remains active in case of gas detection.

6.5 External communications


In addition to the above, supplementary means to communicate with others shall be provided. They shall include, but are not limited to, communications with subsidiary headquarters (cable, microwave or satellite link) and/or with shore. For the specific case of offshore installation, the supplementary means shall include Emergency Position Indication Radio Beacons (EPIRB) with a 24 hours autonomy to be provided on life rafts and life boats and type approved marine VHF radios. A back-up system is recommended; in some places it is requested by local regulations (North Sea) it generally consists of an INMARSAT link. Part of the external communication means shall remain active in an emergency (and as far as possible even in case of gas detection) for the time necessary to escape and evacuate. It shall comprise at least one direct telephone with outside (headquarters or others), and the back-up system, if any.

7. Alert to personnel
7.1 PAGA system
7.1.1 General A fully duplicated integrated Public Address and General Alarm (PAGA) system shall be provided to enable intelligible verbal announcements to be made in all parts of the installation where personnel may be present during normal operation and to enable audible alarm signals to be announced in all parts of the installation. Flashing beacons shall supplement alarm signals in noisy areas of the installation with the exception of accommodation and office areas. The PA should not be over-used for communication between persons in the installation and shall not be designed accordingly. Telephones and UHF/VHF radios are the preferred solution for routine communication purposes. 7.1.2 Safety requirements In any emergency situation the PAGA system shall remain active and its continued operation shall not create additional hazards. PAGA equipment of that are inside the restricted area shall be suitable for operation in zone 1 hazardous area. A possible solution is to have PAGA loudspeakers in the restricted area suitable for use in zone 1 and the amplifier located in the safest room (radio room or emergency station). The main equipment shall be powered by independent back-up battery systems with an autonomy of one hour at full load, so that it shall; remain operative for at least 0.5 hour at full load and 1.5 hour at 20 % load.

This document is the property of Total. It must not be stored, reproduced or disclosed to others without written authorisation from the Company.

GS_EP_SAF_371A Rev02.doc

Page 14/18

Exploration & Production


General Specification GS EP SAF 371 Date: 10/05 Rev: 02

7.1.3 Functional requirements The Public Address shall be of a power compatible with the ambient noise level outdoor and indoor. The General Alarm shall be audible all over the impacted area, including sleeping rooms. Only four types of signals shall be broadcast through the PAGA system: Voice: Used for general service information, man overboard alert, instruction to abandon installation and to confirm instruction to prepare to abandon installation PAPA: (Prepare to Abandon Platform Alarm) continuous tone (no hauling even if standard in some areas) broadcast by the GA system instructing personnel to gather to muster areas and await for further instructions GPA: (General Platform Alarm) intermittent tone broadcast by the GA system and activated in case of fire or gas detection or any other relevant incident as per ERP scenarios TGA: (Toxic Gas Alarm) dual tone broadcast by the GA system and activated in case of toxic gas detection. Any further sophistication in audible signals is a source of confusion and is therefore prohibited. The above can be summarised by next table. Sub-system involved Emergency situation F&G detection Toxic gas cloud GA Other emergency Escape to muster area (prepare to abandon) PA Evacuation Man overboard Name of signal GPA TGA GPA PAPA Tone Characteristics Intermittent (1) Dual tone Intermittent (1) Continuous + spoken message Spoken message Spoken message

(1): These two signals shall be identical.

7.2 Visual alarms


In supplement to the PAGA system, visual alarms shall be provided outdoor in noisy areas, along the main paths of ways and inside accommodation public rooms, offices, workshops and warehouses. The visual alarms shall be activated in parallel with GPA or PAPA audible signals, and limited to: Yellow flashing beacons in case of fire or flammable gas detection Red flashing beacons in case of toxic gas detection.

7.3 Not normally manned facilities


Considering that facilities which are not normally manned are attended only by competent personnel or by personnel closely supervised by competent personnel, and unless imposed

This document is the property of Total. It must not be stored, reproduced or disclosed to others without written authorisation from the Company.

GS_EP_SAF_371A Rev02.doc

Page 15/18

Exploration & Production


General Specification GS EP SAF 371 Date: 10/05 Rev: 02

otherwise by local applicable regulation, the minimum requirements for systems to alert personnel shall be as follows: Alert to/from main facilities shall be sent through the normal communication means (radios, telephone, etc.) used locally for daily routine activities, with at least one link with the set of direct telephones part of the emergency control facilities (see section 6.2). The facility shall be equipped with a minimum GA system capable of issuing a GPA and a TGA signal, if relevant; no PA is required. Evacuation means, if any, shall be as per common rule (see section 6.5).

8. Emergency station
8.1 Definition
The emergency station is the place where the key emergency response personnel in charge of communication with personnel and to take decisions go to undertake their emergency duties. As already described in section 4.3, other members of the emergency response team either stay in the control room and the radio room or intervene locally for checking, repairing, undertaking prevention or mitigation measures and rescuing. Non-essential personnel escape, and stay on their muster areas till further spoken message. The emergency station is not a survival/temporary refuge for other personnel than the key emergency response personnel. It is not, either, a duplicate or a back-up of the control room.

8.2 Functional requirements


8.2.1 Protection of personnel inside the emergency station The emergency station provides shelter for key personnel while they actuate during an emergency. The emergency station should be in a safe area. If this requirement proves not practicably feasible, the emergency station shall be adequately designed and fitted with necessary life support systems to provide protection to personnel for two hours. Such issues as blast/fire proofing, toxic or flammable gas ingress, smoke ingress and development and others as relevant shall be addressed. 8.2.2 Communications means The communications means in the emergency station shall be as reliable as practicable. Consideration should be taken for diversified, direct, dedicated communication means to/from: Outside (UHF/VHF, telephone and back-up) Control room (adjacent to, direct phone, UHF/VHF) Radio room (adjacent to, direct phone) Medics (UHF/VHF, direct phone) Muster areas and embarkation posts (PAGA, direct phones, UHF/VHF, video). 8.2.3 Decision-making means

This document is the property of Total. It must not be stored, reproduced or disclosed to others without written authorisation from the Company.

GS_EP_SAF_371A Rev02.doc

Page 16/18

Exploration & Production


General Specification GS EP SAF 371 Date: 10/05 Rev: 02

The emergency station shall be equipped with all necessary fixtures to have vital documentation available in case of an emergency. It is also recommended that main information from the control room should be displayed on a dedicated VDU. 8.2.4 Escape and evacuation means It shall be ensured that the few remaining persons in the emergency station can reach an embarkation post by an escape way still clear and safe two hours after the emergency arose and can evacuate and abandon the installation by means adapted to the few persons and requiring no external assistance.

8.3 Location
In all cases the emergency station shall be located in another fire zone than hydrocarbons production, processing, storage and transportation facilities. Except when inevitable, the emergency station shall neither be the control room nor the radio room, but it can be adjacent to, providing it is conveniently protected from surrounding noise. The emergency station can be part of the Installation Manager's office, or a meeting room, or a dedicated room. If the control room is in a safe area apart from hydrocarbons fire zones (accommodations), the emergency station should preferably be adjacent to control room and radio room. If the control room is inside the process units, the emergency station should preferably be adjacent to accommodations.

9. Testing the emergency control facilities


It is fundamental to note that the emergency control facilities can activate only upon demand, and therefore their reliability is closely determined by their testing periodicity. Therefore their reliability shall be guaranteed by periodic visual inspections and tests, according to the typical table attached next page and provided for information purposes only. Local regulations or particular cases may impose more demanding testing program. As a consequence of what precedes the design of all emergency control facilities shall make possible the implementation of this table. Furthermore, design requirements for the testing of the ESD and Fire and Gas systems are further detailed in GS EP SAF 261 and GS EP SAF 312, respectively. No credit shall be given to the possible useful service of superfluous, obsolete emergency control systems which are no more inspected, tested and maintained. In order to avoid any confusion in case of emergency, the emergency control systems which are not required shall be removed.
Emergency equipment testing schedule ESD systems - Control panel - ESD loops, including PB (1) - ESDVs partial stroking - SSVs - Critical alarms/trips F( )
2

Minimum periodicity 1 day 1 week 1 month 3 months 6 months 1 year

F F F Leaktest F

This document is the property of Total. It must not be stored, reproduced or disclosed to others without written authorisation from the Company.

GS_EP_SAF_371A Rev02.doc

Page 17/18

Exploration & Production


General Specification GS EP SAF 371 Date: 10/05 Rev: 02

1 day Fire and Gas detection systems - Control panel - F&G general alarm - Detectors Fire protection systems - Fixed gaseous systems (4) (5) - Deluge/sprinkler systems - Fixed dry chemical systems - Fire hoses, nozzles, monitors - Mobile fire-fighting equipment - Fire-water pumps - Smoke control systems Electrical equipment - Essential generator - Battery and chargers - Emergency lighting Communication systems - Public Address/General Alarm - Marine/aero. fixed VHF - Marine/aero. portable VHF - Aeronautical beacon - Life boat radios and EPIRB EER equipment - Life boats (9) - Life rafts - Tertiary escape equipment F F

1 week

1 month

3 months 6 months

1 year

F F C/F (3) C/F (3)

I/F F I I/F I F F (8) F (7) I (6)

F I/F F

I/F F I/F

I/F I I (10)

C: Stands for re-Calibration, F: Function test, I: Visual Inspection.


(1): Overhaul/recalibration dependent on Function test results (2): SCSSV type only (3): Depends on the type of detectors, in the one to three months range (4): Gaseous systems include water mist systems (5): Inspection to include container weight and pressure checks (6): Dry chemical storage cylinder to be inspected for contamination each year (7): Pump performance test each year (8): COMPANY's practice is to test essential generators each week (9): Overhaul as required by regulation (10): Re-certification each year.

This document is the property of Total. It must not be stored, reproduced or disclosed to others without written authorisation from the Company.

GS_EP_SAF_371A Rev02.doc

Page 18/18