NORSOK Standard Technical Safety S001

68
NORSOK STANDARD TECHNICAL SAFETY S-001 Rev. 3, Jan. 2000

Transcript of NORSOK Standard Technical Safety S001

Page 1: NORSOK Standard Technical Safety S001

NORSOK STANDARD

TECHNICAL SAFETY

S-001Rev. 3, Jan. 2000

Page 2: NORSOK Standard Technical Safety S001

This NORSOK standard is developed by NTS with broad industry participation. Please note thatwhilst every effort has been made to ensure the accuracy of this standard, neither OLF nor TBL or

any of their members will assume liability for any use thereof. NTS is responsible for theadministration and publication of this standard.

Norwegian Technology Standards InstitutionOscarsgt. 20, Postbox 7072 Majorstua

N-0306 Oslo, NORWAY

Telephone: + 47 22 59 01 00 Fax: + 47 22 59 01 29Email: [email protected] Website: http://www.nts.no/norsok

Page 3: NORSOK Standard Technical Safety S001

Technical Safety S-001 Rev. 3, Jan. 2000

NORSOK standard Page 1 of 66

CONTENTS

FOREWORD 3INTRODUCTION 3

1 SCOPE 4

2 NORMATIVE REFERENCES 4

3 DEFINITIONS AND ABBREVIATIONS 53.1 Definition 53.2 Abbreviations 8

4 SAFETY EVALUATION, MANAGEMENT AND DOCUMENTATION 94.1 General 94.2 Risk reduction principles 94.3 Analyses and optimisation 94.4 Documentation 10

5 EVACUATION AND EMERGENCY PREPAREDNESS 115.1 Introduction 115.2 Evacuation 115.3 Rescue 12

6 SAFETY REQUIREMENTS TO LAYOUT AND ARRANGEMENT 126.1 General requirements 126.2 Area Classification 136.3 Escape routes 136.4 HVAC 136.5 Helicopter deck 146.6 Emergency service areas 146.7 Process area 146.8 Riser area 156.9 Flare boom, flare tower, cold vent 156.10 Drilling and wellhead area 15

7 SAFETY REQUIREMENTS TO STRUCTURAL DESIGN 167.1 Design accidental loads 16

8 SAFETY REQUIREMENTS TO PROCESS AND AUXILIARY FACILITIES 178.1 General requirements 178.2 Safety shutdown systems 178.3 Process safety 17

9 REQUIREMENTS TO SAFETY AND COMMUNICATION SYSTEMS 189.1 General requirements 189.2 Fire and Gas detection 189.3 Emergency shutdown 199.4 Ignition source control 229.5 Alarm and communication system 239.6 Emergency power 249.7 Communication through signs and markings 26

10 REQUIREMENTS TO EXPLOSION AND FIRE PROTECTION 26

Page 4: NORSOK Standard Technical Safety S001

Technical Safety S-001 Rev. 3, Jan. 2000

NORSOK standard Page 2 of 66

10.1 Fire and Explosion strategy (FES) 2610.2 General requirements to fireprotection. FES 2610.3 Requirements for passive fire protection of equipment, piping and secondary structures. 2710.4 Fire technical requirements relating to materials 2710.5 Passive fire protection 2710.6 Storage and handling of explosives 2810.7 Active Fire Protection 2810.8 Explosion protection. 31

11 SAFETY ASPECTS RELATED TO FLOATING PRODUCTION, DRILLING ANDSTORAGE INSTALLATIONS 32

11.1 General 3211.2 Crude storage 3311.3 Layout 3311.4 Turret 3311.5 Drainage/Ballast water systems 3411.6 Emergency re-positioning 3411.7 Topside/floater interface 34

12 NORMALLY NOT MANNED INSTALLATIONS 3412.1 General 3412.2 Safety evaluation, management and documentation. 3512.3 Design principles 3512.4 System requirements. 36

ANNEX A - INFORMATIVE REFERENCES (INFORMATIVE) 37

ANNEX B - EVACUATION (NORMATIVE) 38

ANNEX C - MISCELLANIOUS SAFETY EQUIPMENT (NORMATIVE) 39

ANNEX D - LAYOUT (NORMATIVE) 42

ANNEX E - PRESSURE RELIEF (NORMATIVE) 44

ANNEX F - FIRE AND GAS DETECTION (NORMATIVE) 48

ANNEX G - PROTECTION OF PRESSURE VESSELS AND PROCESS PIPING AGAINSTFIRE (NORMATIVE) 55

ANNEX H - FIRE FIGHTING SYSTEM (NORMATIVE) 57

ANNEX I - LIVING QUARTERS (NORMATIVE) 62

ANNEX J - FIRE PROTECTION DATA SHEET (INFORMATIVE) 63

ANNEX K - NORMALLY NOT MANNED INSTALLATIONS (INFORMATIVE) 64

Page 5: NORSOK Standard Technical Safety S001

Technical Safety S-001 Rev. 3, Jan. 2000

NORSOK standard Page 3 of 66

FOREWORD

NORSOK (The competitive standing of the Norwegian offshore sector) is the industry initiative toadd value, reduce cost and lead time and eliminate unnecessary activities in offshore fielddevelopments and operations.

The NORSOK standards are developed by the Norwegian petroleum industry as a part of theNORSOK initiative and supported by OLF (The Norwegian Oil Industry Association) and TBL(Federation of Norwegian Manufacturing Industries). NORSOK standards are administered andissued by NTS (Norwegian Technology Standards Institution).

The purpose of NORSOK standards is to contribute to meet the NORSOK goals, e.g. to developstandards that ensure adequate safety, value adding and cost effectiveness and thus are used inexisting and future petroleum industry developments.

The NORSOK standards make extensive references to international standards. Where relevant, thecontents of a NORSOK standard will be used to provide input to the international standardisationprocess. Subject to implementation into international standards, the NORSOK standard will bewithdrawn.

Annexes B, C, D, E, F, G, H and I form a normat6ive part of this standard.Annexes A, J, and K are for information only.

INTRODUCTION

The purpose of this standard is to present the principles and requirements for safety design ofoffshore installations for production of petroleum.

ISO 13702 presents the general experiences and requirements from the International offshore industryand NORSOK S-001 adds the specific requirements/experiences from the Norwegian operators.Therefore ISO 13702 and NORSOK S-001 have to be read and understood in conjunction with eachother.

Page 6: NORSOK Standard Technical Safety S001

Technical Safety S-001 Rev. 3, Jan. 2000

NORSOK standard Page 4 of 66

1 SCOPEThis NORSOK standard for Technical Safety describes the principles and requirements for thedevelopment of the safety design for offshore production installations; fixed platforms,semisubmersibles and vessels. Where applicable this standard may also be used for Mobile OffshoreDrilling Units. Installations intended for short term exploration drilling, shuttle of crude to harbourand general service are not covered by this standard.

This Standard together with ISO 13702 " Control and mitigation of fires and explosions-requirements and guidelines" defines the required standard for implementation of technologies andemergency preparedness to establish and maintain an adequate level of safety for personnel,environment and material assets. This standard will further have to be applied together withNORSOK standards for working environment and environmental care.The principles and requirements for safety evaluation and safety management are described in ISO13702 Chapter 4 while the objectives and functional requirements to installation layout are describedin chapter 5. These methodologies are clarified and detailed in S-001 chapter 4.

Requirements to Risk and Emergency Preparedness Analyses are described in NORSOK Z-013 andare referenced concerning required input to the design process.

Requirements to Working environment are described in NORSOK S-002

2 NORMATIVE REFERENCESThe following standards include provisions, which, through references in this text, constituteprovisions of this NORSOK standard. Latest issue of the references shall be used unless otherwiseagreed. Other recognised standards may be used provided it can be shown that they meet or exceedthe requirements of the standards referenced below.

API 6FA Fire tests for valvesAPI RP 521 Guide for pressure-relieving and depressuring systemsBS 6755 Testing of valves. specification for fire type-testing requirementsE&P Forum Guidelines for the Development and Application of HSE Management

System.ICAO BSL 5-1 International Civil Aviation Organisation

Bestemmelser for Sivil Luftfart 5-1, Forskrift omkontinentalsokkelflygning – ervervsmessig luftfart til og frahelikopterdekk på faste og flyttbare innretninger til havs.

IEC 60079-10 Electric apparatus for explosive gas atmosphere- Part 10 Classification ofhazardous areas.

IEC 60079-13 Electric apparatus for explosive gas atmosphere- Part 13 Construction anduse of rooms or buildings protected by pressurisation.

IEC 61892-7 Mobile and fixed offshore units- Electrical installations.Part 7 area classification

IMO Resolution A653 Flame spread, surface materials and flooringsISO 10418 Analysis, design, installation and testing of basic surface safety systems

for offshore production platforms.

Page 7: NORSOK Standard Technical Safety S001

Technical Safety S-001 Rev. 3, Jan. 2000

NORSOK standard Page 5 of 66

(Replaces API RP14 C).ISO 13702 Petroleum and natural gas industries — Offshore production installations-

Control and mitigation of fires and explosions — Requirements andguidelines.

ISO 5660 Fire tests - Reaction to fire - Rate of heat release from building products.NFPA 11A National Fire Protection Association part 11

Standard for medium- and high-expansion foam systemsNFPA 13 National Fire Protection Association part 13

Installation of sprinkler systemsNFPA 14 National Fire Protection Association part 14

Standard for the Installation of Standpipe and Hose SystemsNFPA 16 National Fire Protection Association part 16

Deluge Foam-Water Sprinkler Systems and Foam-Water Spray SystemsNFPA 20 Standard for the Installation of Centrifugal Fire PumpsNFPA 72 National Fire Protection Association part 72

National Fire Alarm CodeNORSOK C-001 Living quarters areaNORSOK C-002 Architectural components and equipmentNORSOK H-001 HVAC (Heating, ventilation and air conditioning)NORSOK I-CR-002 Safety and Automation Systems (SAS)NORSOK L-002 Piping Design, Layout and Stress AnalysisNORSOK M-501 Surface Preparation and Protective Coating.NORSOK P-001 Process DesignNORSOK S-002 Working EnvironmentNORSOK S-003 Environmental CareNORSOK S-011 Safety equipment data sheetsNORSOK T-100 Telecom SubsystemsNORSOK Z-013 Risk and emergency preparedness analysis.NORSOK Z-016 Regularity, management & reliability technology

3 DEFINITIONS AND ABBREVIATIONS

3.1 Definition

Acceptance Criteria for risk Criteria that are used to express a risk level that is consideredacceptable for the activity in question, limited to the high levelexpressions of risk.

Accidental event Event or chain of events that may cause loss of life, health, or damageto environment or assets.

Barrier A measure which reduces the probability of realising a hazardspotential for harm and of reducing its consequences. Barriers may bephysical, (materials, protective devices shields, segregation etc) or non- physical (procedures, inspection, training, drills)

Can Verbal form used for statements of possibility and capability, whethermaterial, physical or casual.

Defined situations ofhazard and accident (DFU)

A selection of possible events that the emergency preparedness in theactivity should be able to handle, based on the activity’s dimensioning

Page 8: NORSOK Standard Technical Safety S001

Technical Safety S-001 Rev. 3, Jan. 2000

NORSOK standard Page 6 of 66

accidental situations associated with a temporary increase of risk andless extensive accidental events.

Dimensional explosion Explosion which in accordance with the defined acceptance criteriarepresents an unacceptable risk, and which consequently serves as abasis for design and operation of installations and for theimplementation of the relevant activity in general.

Dimensional Fire A fire which in accordance with the defined acceptance criteriarepresents an unacceptable risk, and which consequently serves as abasis for design and operation of installations and for theimplementation of the relevant activity in general.

Dimensioning accidentalevents (DUH)

Accidental events that serve as the basis for layout, dimensioning anduse of installations and the activity at large, in order to meet thedefined risk acceptance criteria.

Dimensioning accidentalload (DUL)

The most severe accidental load that the function or system shall beable to withstand during a required period of time, in order to meet thedefined risk acceptance criteria

Dimensioning explosion Explosion, which in accordance with the defined acceptance criteriarepresents an unacceptable risk and which consequently, serves as abasis for design and operation of installations and for theimplementation of relevant activity in general.

Dimensioning fire A fire which in accordance with the defined acceptance criteriarepresents an unacceptable risk, and which consequently serves as abasis for design and operation of installations and for theimplementation of relevant activity in general.

Emergency lighting Lighting which will ensure adequate light conditions on theinstallation in the event of failure of the main power supply.

Emergency power system System to ensure continuos power supply to important equipment inthe event of failure of the main power supply. This includesgenerators, control panels, hydraulic pumps, accumulators etc.

Emergency service areas Safe areas by location where the emergency equipment such as firepumps emergency generators are located.

Explosion load The pressure generated by violent combustion of a flammable gas ormist which generates pressure effects due to confinement of thecombustion induced flow and/or the acceleration of the flame front byobstacles in the flame front.

External communicationSystems

Systems which ensure necessary communication to and from theinstallation.

Fire load The total quantity of heat released in the case of complete combustionof all combustible materials in an area, including materials in walls,decks and ceiling.

Fire pump system The total system, which supplies water for fire-fighting system, i.e.water inlets with filters, fire pumps, risers, power sources, powertransmissions, fuel pipes/tanks and control systems.

Functional specification As defined in ISO 13879 and 13880:Document that specifies the requirements expressed by features,characteristics, process conditions, boundaries and exclusions definingthe performance of the product, process or service.

Hazard Potential for human injury, damage to the environment, damage toproperty or a combination of these.

Page 9: NORSOK Standard Technical Safety S001

Technical Safety S-001 Rev. 3, Jan. 2000

NORSOK standard Page 7 of 66

Hazard assessment Process whereby the results of hazard analyses are considered againsteither judgement, standards, or criteria which have been developed asbasis for decision making.

Hazards Register A document providing a brief, but complete, overview of the identifiedhazards and the measures necessary to manage them. The hazardsregister also provides references to more detailed information relevantto a particular hazard.

Informative references Shall mean informative in the application of NORSOK Standards.Intermittently manned Work area or work place where inspection, maintenance or other work

is planned to last at least two hours a day for at least 50 per cent of theinstallation’s operation time.

Internal communicationSystems

Systems which ensure that messages can be communicated to andfrom various areas on the installation.

May Verbal form used to indicate a course of action permissible within thelimits of the standard.

Normally not manned Work area or work place that is not permanently or intermittentlymanned.

Normative references Shall mean normative (a requirement) in the application of NORSOKStandards.

NORSOK Norsk Sokkels Konkurranseposisjon, the Competitive standing of theNorwegian Offshore Sector, the Norwegian initiative to reduce cost onoffshore projects.

Permanently manned Work area or work place manned at least 8 hours a day for at least 50per cent of the installation’s operation time.

Recognised institution An institution which is internationally and/or nationally recognisedwithin a professional field, and which possesses adequate competenceand experience within that field.

Shall Verbal form used to indicate requirements strictly to be followed inorder to conform to the standard and from which no deviation ispermitted, unless accepted by all involved parties.

Should Verbal form used to indicate that among several possibilities one isrecommended as particularly suitable, without mentioning or excludingothers, or that a certain course of action is preferred but not necessarilyrequired.

Temporary Refuge (TR) A place provided where personnel can take refuge for a pre-determined period whilst investigations, emergency response andevacuation pre-planning are undertaken.

All terms and phrases within the scope of this standard shall be regarded as defined in the regulationsand international codes and standards referred to in this document. Where this is not unambiguous,the definition in this standard shall be used.

Page 10: NORSOK Standard Technical Safety S001

Technical Safety S-001 Rev. 3, Jan. 2000

NORSOK standard Page 8 of 66

3.2 AbbreviationsAFFF Aqueous film forming foamAPI American Petroleum Institute (US)APS Abandon Platform ShutdownASC Area safety chartsBOP Blow Out PreventerCCR Central Control RoomCFD Computerised flow dynamicDAL Design Accidental LoadDHSV Down Hole Safety ValveDUH Dimensioning Accidental EventDUL Dimensioning Accidental LoadEERS Evacuation, Escape and Rescue Strategy (ISO 13702)ESD Emergency Shut DownESDV Emergency Shut Down ValveF&G Fire and GasFES Fire Explosion Strategy (ISO 13702)FPDS Fire protection data sheetHAZID Hazard identificationHAZOP Hzard and operabilityHC HydrocarbonsHSE Health, Safety and EnvironmentHVAC Heating, Ventilation and Air ConditioningIEC International Electrotechnical CommissionIMO International maritime organisationIP Institute of Petroleum (UK)IR Infra RedKO Knock OutLEL Lower Explosion LimitLQ Living QuarterMOB Man Over BoardMSF Module support frameNFPA National Fire Protection Association (US)NNMI Normally Not Manned InstallationsNPD Norwegian Petroleum DirectoratePA Public AddressPCDA Process control and data acquisitionPCS Process Control SystemPSD Process Shut DownRAL Deutches Institut fur Gutesicherung und Kennzeichnung e.V., BonnRP Recommended practiceSAS Safety and Automation SystemsTR Temporary RefugeUPS Uninterrupted Power SupplyUV Ultra VioletVDU Visual Display Unit

Page 11: NORSOK Standard Technical Safety S001

Technical Safety S-001 Rev. 3, Jan. 2000

NORSOK standard Page 9 of 66

4 SAFETY EVALUATION, MANAGEMENT AND DOCUMENTATION

4.1 GeneralA Health, Safety and Environmental Program (HSE) shall be developed according to the E&P forumguideline: “Guidelines for the Development and Application of HSE Management Systems”. Thisprogram shall among other issues address the follow up and closing of specific safety problem areas.Safety objectives established by operator/project other than those specified by this NORSOK standardand ISO 13702 shall be identified and expressed in the form of design objectivesand performancestandards (See 4.4). These shall be developed specifically for each development or modificationproject.The FES shall reflect the mitigating and consequence reduction measures to be implemented.Ambient conditions (normal operations or emergencies) shall be clearly defined and included inrequirements to equipment and systems covered by this standard.

4.2 Risk reduction principlesThe probability reducing measures shall be given priority over consequence reducing measures.The incorporation of this overall principle in the design calls for consideration of the following, listedin order of priority:• Inherent safety• Simplicity, comprehensibility, maintainability and recognisability e.g. by elimination of

complexity that may lead to human failure• Failure mechanisms. E.g. leading to leaks and releases of hazardous substances, ignitions or

mechanisms reducing the reliability and survivability of barriers and safety systems.• Escalation prevention, e.g. by safety barriers• Experience retention from operational reliability and incident databases.

4.3 Analyses and optimisation The design principles presented in clauses 5 to 12 reflect a normally adequate standard for safedesign, whereas the project risk acceptance criteria are reflecting the maximum risk level, notnecessarily achieved through a standard design. This is because the safety level depends on severalfactors, partly outside the range of standardisation, e.g. detailed layout and arrangement, operationalaspects, environmental conditions, and new technology. Therefore a fit for purpose approach shall be performed through consideration of possible Hazardsand Hazardous events in the design. The Hazards and Hazardous events shall be systematicallyidentified and updated regularly along with the development of the project. This process shall bedocumented, e.g. in a Hazards Register. Risk and emergency preparedness analysis shall be carried out with the objective to identify thehazards, their frequency, causes and consequeces and to verify that the risk acceptance criteria aremet. Timing, scope and method of risk and emergency preparedness analysis shall allow for theanalysis to be both a tool for decision making as well as, when relevant, a verification of acceptancecriteria being met through implementation of technical and operational safety requirements. NORSOK Z-013 states the requirements on the planning, execution and use of risk and emergencypreparedness analysis.

Page 12: NORSOK Standard Technical Safety S001

Technical Safety S-001 Rev. 3, Jan. 2000

NORSOK standard Page 10 of 66

A vulnerability/availability analysis shall be carried out to ensure that safety critical systems andfunctions maintain their integrity and perform their duty during credible accident scenarios for thetime period their functions are required. The effects from fires and explosions on operation andstability on ESD, Fire & Gas detection and PA/alarm systems are typical examples of targets for suchanalysis. See NORSOK Z-013 Clause 5.3.8. HAZOP according to ISO 10418 shall be used as a tool in the system optimisation process to achievesystem safety and operability. Cost/benefit evaluation should be applied to study different design alternatives. See NORSOK Z-013and NORSOK Z-016.

4.4 Documentation The safety design shall be documented to present how the design fulfils regulations, standards andnorms as required by the internal control system and to document the basis and assumptions for Riskand Emergency preparedness evaluations. Further, the project documentation provides the basis andnecessary information for safe operation, modifications and development of the facility. Documentation should be produced as follows, but with the necessary additions where this isconsidered necessary the particular needs of each project. The documentation may be one or severaldocuments. 1. HSE program 2. FES (Fire and Explosion Strategy). 3. EERS (Evacuation, Escape and Rescue strategy). 4. Performance Standard for Safety systems. See Note 1 5. Design accidental load requirements 6. Documented sectionalisation of the process plant including categorization and location of ESD

and PSD valves. 7. Fire and gas detection arrangements. 8. Fire Protection Data Sheets / Area Safety Charts 9. Reliability/sensitivity/availability/vulnerability analyses for safety systems 10. Safety arrangements drawings as follows:

- Passive fire and blast protection. - Escape ways, muster areas, means of evacuation - Area classification- schedule of sources - Miscellaneous safety equipment. - Active fire protection

Safety interface documents shall be produced where relevant to demonstrate how these safetyrequirements are met, e.g. between:

- Fixed platform and mobile offshore units, e.g. drilling rig or accommodation rig. - Fixed platform and storage units - Different contractors.

Safety evaluations as required by this standard shall be documented.

Page 13: NORSOK Standard Technical Safety S001

Technical Safety S-001 Rev. 3, Jan. 2000

NORSOK standard Page 11 of 66

Note 1 Performance standard for Safety systems shall define the functional and specific requirementsfor the design of the ESD/PSD/F&G systems, firewater system, HVAC and isolation of ignitionsources. Further it will be presented how these systems is meant to work together to minimizeescalation and consequences of mishaps and accidents.

5 EVACUATION AND EMERGENCY PREPAREDNESS

5.1 IntroductionAn EERS shall be developed for the installation based on ISO 13702 Chapter 4/Annex B 12 andEmergency preparedness analyses as described in NORSOK Z-013. The EERS for the installationwill define and document the adequate strategy and requirements to escape evacuation and rescueinstallations and equipment. In addition to the requirements in the referred standards the following requirements shall apply: - All evacuation equipment shall be type approved according to SOLAS and national maritime

regulatory requirements. - The layout of presentation mimics and monitors in the Central Control Room shall consider

management of emergency situations. - The design of the facilities shall consider and cater for an effective execution of the Emergency

Preparedness activities.

See Annex B for details relating to evacuation principles.

5.2 EvacuationThe requirements relating to safe evacuation will be met by using a combination of means ofevacuation according to current practice i.e.:

a) Helicopter.b) Free fall lifeboats.c) Escape chute with life raft.d) Bridge to neighbouring installation

Number, size and location of evacuation means shall be established based on manning, risk analyses(e.g. risk exposure of escape routes towards main shelter area), and emergency preparedness analysis.The time for evacuation, together with the required search and rescue operations shall be establishedand the escape routes and other facilities as firewalls, radiation shields etc. designed accordingly.

The minimum number of free fall lifeboats for fixed installations available during a dimensionalaccidental event shall be corresponding to the maximum number of personnel (100%) on board plusone additional boat. Latter is meant to provide escape for the damage control team. If there is anadditional lifeboat located in an area on the installation other than the main evacuation area, thislifeboat shall not be counted, as the additional lifeboat required

Page 14: NORSOK Standard Technical Safety S001

Technical Safety S-001 Rev. 3, Jan. 2000

NORSOK standard Page 12 of 66

The number of free fall lifeboats for floating installations shall correspond to the maximum numberof people onboard and be available in design weather conditions and with dimensional accidental heelangels, plus the significant dynamic heel in the same weather and accidental condition.The manning to be considered shall comprise all personnel on board, including day visitors.The total life raft capacity at escape chutes shall as a minimum correspond to the total number ofpersonnel (100%) on board as documented in the EERS and according to the emergency preparednessanalyses. The life raft and boarding rafts shall be lowered together with the chute. By lowering thechute, the boarding chute shall automatically inflate.

The distance between lifeboats and escape chute shall be large enough to ensure that a dropped boatwill not hit a lowered escape chute.

For detailed recommendations related to safety equipment see Annex C.

5.3 RescueGenerally the installation shall be covered by one Man Overboard Boats (MOB`s). This one shouldbe evaluated for use together with the one on the stand by vessel. Other combinations will beacceptable as proven by the emergency preparedness analyses. The functional requirements for time from man overboard alaram until being seaborn shall be definedby the emergency preparedness analyses. Utilisation of the deck crane to lift the MOB on to theinstallation shall be evaluated.

6 SAFETY REQUIREMENTS TO LAYOUT AND ARRANGEMENT

6.1 General requirementsReference is given to clauses 5, 7 and 13 in ISO 13702 for layout, orientation and location ofequipment and functions. The main principles for layouts are listed below.For further details see Annex D.

• The wellhead area should be located and designed so as to allow for external fire fightingassistance.

• Allow for identification of the blowing well in a possible blow out situation.• The utility area should serve as a barrier between hazardous areas and LQ/emergency service

areas. Good access to areas and equipment shall be ensured in order to achieve effective manualfire fighting both from the installation and by external assistance.

• Routing of hydrocarbon piping to, or through, the utility area shall be minimised and flangesavoided. One flange connection can be arranged in each fuel line to combustion engines in utilitythe area.

• Routing of hydrocarbon piping is not allowed in the living quarter areas.• Routing of liquid piping of any kind is not allowed through electrical, instrument and control room• Routing of hydrocarbon piping within emergency service areas shall be limited to diesel fuel

supply lines for the emergency services themselves.• The use of explosion panels and weather protection shields shall be kept to a minimum, with a

preference to open naturally ventilated areas. Where such arrangements are likely to cause anunacceptable working environment special solutions such as erection of temporary shields formaintenance operations should be considered.

Page 15: NORSOK Standard Technical Safety S001

Technical Safety S-001 Rev. 3, Jan. 2000

NORSOK standard Page 13 of 66

• Where explosions panels, walls or shields are provided, the possible utilisation of fire fightingvessels during emergencies should be considered. 6.1.1 Area classification

6.2 Area ClassificationThe definition of hazardous areas shall be in accordance with IEC 60079-10 and IEC 61892-7.For design principles related to pressurisation of rooms, alarms and disconnection upon loss ofpressurisation, ref. is made to IEC 60079-13.

Gases with molecular weight between 21 and 35 shall be regarded as both heavier and lighter than air(molecular weight air = 29).

The classification of hazardous areas shall be based on events and situations associated with normalplatform operations, e.g. continuous or periodic venting, evaporation from open handling systems,small leaks from flanges and gaskets, escape of flammable substances during maintenance and work-over operations. See Annex D Layout.

All electrical equipment in naturally ventilated areas shall be certified safe type apparatus. Wherecertified safe type apparatus is not available, the apparatus shall be electrically isolated on single gasdetection or confirmed gas detection dependent on the importance of the equipment.

6.3 Escape routesThe escape routes and the temporary refuge shall be in accordance with ISO 13702 clause 14.Guidelines for the design of escape routes are listed in Annex B. For large manned installations theescape route system and the temporary refuge (TR) shall be available for at least 1 hour, i.e. at leastone route of escape from each area not directly affected by the event shall be available.

Escape routes shall be well marked, including signs. Escape routes on decks shall be provided with anon-skid, oil resistant coating in the “safety yellow colour” RAL 1023. On deck grating, two parallel100mm wide yellow lines shall be painted indicating the width of the escape route. Marking shallshow the preferred direction of escape.

6.4 HVACNatural ventilation and open modules shall be preferred and the effect of natural ventilation shall beassessed and documented.A strategy for active control of possible smoke from fire in living quarters, TR and othermechanically ventilated areas shall be developed and included in the design of HVAC system. Ref.NORSOK H-001 HVAC.

All air inlets shall be located in non-hazardous areas, as far as practicable away from possible HCleakage sources, and minimum 3 m from any zones 2 boundary. Simulation studies or wind tunneltests should be used for location of main HVAC air inlets to ensure operation of HVAC systemsserving quarters and emergency equipment rooms to be minimal affected by smoke and escaped gasesfrom incidents onboard.

For arrangement and protection of non-hazardous rooms with access to hazardous areas, ref. is madeto IEC 60079-13 and IEC-61892-7.

Page 16: NORSOK Standard Technical Safety S001

Technical Safety S-001 Rev. 3, Jan. 2000

NORSOK standard Page 14 of 66

6.5 Helicopter deckThe helicopter deck is subject to approval by the national civil aviation administration, ref. BSL D 5-1.

The turbulence effects from wind across and around the installation as well as influence from turbineexhausts and flare/vent shall be considered. Simulation studies or wind tunnel tests shall beperformed during design of new installations or modifications of existing ones.

The arrangement shall be evaluated with the assistance of an experienced helicopter pilot.

The helicopter deck should have 3 access ways, sufficiently separated from each other (one pr. 120degrees).A continuous walkway around the helicopter deck edge at a level below helicopter deck surfaceshould be provided. (Approximately 1500 to 1200 mm below the level of the helicopter deck)

The helicopter deck surface shall be self-draining type, suitable for use by trolleys. The frictioncoefficient on a wet deck shall be minimum 0,65.

The helicopter deck should be provided with an AFFF system (Pop-up, Safedeck or similar). Thesystem shall be functioning according to specification within 20 seconds after activation. The systemshall be activated and deactivated from the helicopter deck control room. The system shall beprotected against unplanned activation.Details regarding drain system on helicopter deck are covered in Annex D.7.

6.6 Emergency service areasAn emergency service area is defined, as an area containing equipment and systems required duringemergency conditions. This includes firewater systems, emergency generators and emergency powerdistribution systems, safety and automation system, communication equipment, emergencyventilation, ballast system and position keeping system. (Ref. ISO 13702).

The location and protection of these systems as well as system design shall secure operations duringand after an emergency condition. The equipment necessary during evacuation is of particularimportance.

6.7 Process areaFire and explosion evaluations shall be made along with the development of the lay out to minimisethe built in escalation potential. This shall be ensured through the following principles:

1. Equipment and piping containing high-pressure gas should be located in the upper decks above theModule Support Frame or main hull.

2. Liquid vessels should be located lower than gas equipment.3. Low-pressure equipment containing large amount of liquids should be located and arranged so that

exposure to jet fires is minimised. If jet fire exposure can not be eliminated, the need for passivefire protection shall be evaluated.

Process piping, pig launchers and receivers and equipment shall be protected from external impact,e.g. from dropped objects or missiles due to disintegration of rotating machinery or as found requiredthrough analysis.

Page 17: NORSOK Standard Technical Safety S001

Technical Safety S-001 Rev. 3, Jan. 2000

NORSOK standard Page 15 of 66

The flare system shall be protected from fire and explosion loads so that its integrity is maintaineduntil the process plant has been depressurised.

6.8 Riser areaFor all hydrocarbon risers; protection from external impact such as ship collisions and drifting objectsshall be evaluated. Locating the risers behind main support structures or dedicated protectionstructures may be required to mitigate the risk.

The following means of protection shall be considered:• For two or more gas risers, or one gas riser together with several oil risers: passive fire protection.• Pig launchers and receivers: location in open, naturally ventilated areas, at the periphery of the

platform, and with hatches directed away from equipment and structures.• ESDV's: location in open naturally ventilated areas as close to the sea as practicable to minimise

exposure of the risers from topside accidental events.• Flanges and instrument connections on the riser side of the ESDV shall not be used on fixed

risers. For flexible risers special considerations have to be made.• Subsea barriers.• Utilisation factor

6.9 Flare boom, flare tower, cold ventFlare booms and flare towers shall be located and designed with due attention to all relevant flaringrates and wind conditions to ensure that the heat radiation level (ref. Annex E, clause E.4 Flaring)will be within acceptance limits in all areas of the installation, with due regard to exposure ofoperators, structures such as cranes and towers, electrical and mechanical equipment and piping.

The flare flame or hot gases shall not represent a hazard due to increased surface temperature inexposed areas. Particular attention should be paid to crane and drill tower wires/structures andpersonnel in exposed areas. Further the design of the cold vent systems shall cater for heat loadscaused by a possible ignition of the discharge.

A flare/vent study is required, identifying the potential effects in all exposed areas.

6.10 Drilling and wellhead areaThe drilling and well head areas shall be located with maximum distance to the living quarters andareas with emergency equipment and functions, and be separated from utility and processing areas inorder to minimise the consequences from a blow out.Possible collapse of the derrick shall be evaluated.

The well heads shall be located as high as practicable and above the main support frame or main hullin order to minimise exposure from a well head fire, and to facilitate control of a blow out on theinstallation. Consideration shall be given to the protection of well and BOP equipment, such as control panels andhydraulic systems and their related signal paths. Simultaneous drilling, work over and/or production shall be evaluated in detail taking into accountoperational procedures to ensure an acceptable safety level of the operation of the installation.

Page 18: NORSOK Standard Technical Safety S001

Technical Safety S-001 Rev. 3, Jan. 2000

NORSOK standard Page 16 of 66

7 SAFETY REQUIREMENTS TO STRUCTURAL DESIGN

7.1 Design accidental loads Accidental loads shall be identified and taken into account in the structural design. The probability,magnitude and potential consequences of identified loads shall be assessed and analysed. Relevant loads are:• Impact loads caused by dropped object, ship collision or others.

• Dropped objects:Protection of structure to be dimensioned for falling container, pipes etc. based on estimatedweight, probable drop height, vulnerability and criticality of the exposed areas.

• Ship collision:The possibility of collisions caused by merchant vessels and the need for adequate sea trafficsurveillance system shall be evaluated. For supply vessels operating alongside the installation, acollision load of 14MJ shall be assumed.

• Explosion loads:- Explosion loads affecting main structures- Explosion loads affecting secondary structures, e.g. walls acting as barriers between main areas.- Explosion loads acting on support of pressure vessels, flare headers, fire ring main, ESD valves

etc. shall be considered.- Explosion loads shall be established by use of recognized computer models, e.g. FLACS. See

clause 10.8. • Heat loads caused by jet fires or pool fires on the installation or adjacent installation, from risers or

from the sea surface in case of large oil releases to the sea or in case of sub sea gas releases.- Fire:

Installations that can be exposed to a dimensioning fire on the sea shall be able to withstand thisfor a time period sufficient for safe evacuation of the installation. The endurance shall not be lessthan 1 hour. Fixed installations shall be protected against fire on sea, as identified by riskanalyses. For blow-out/fire on sea concerning floating installations, see clause 11.6.

• Loads caused by extreme weather, earthquake, damage to structural elements (damaged condition)or extreme temperatures.

• Design accidental loads shall be specified in the design accidental load specification.• A weight control database shall be maintained to ensure that jacket or hull loads do not exceed

their design weight limit.

Page 19: NORSOK Standard Technical Safety S001

Technical Safety S-001 Rev. 3, Jan. 2000

NORSOK standard Page 17 of 66

8 SAFETY REQUIREMENTS TO PROCESS AND AUXILIARYFACILITIES

8.1 General requirements Process and auxiliary systems shall be designed, manufactured, equipped and installed in such a waythat the installations can be operated and maintained safely. Process and auxiliary facilities shall be designed such that no single failure during operations can leadto unacceptable hazardous situations. This principle shall apply to operational errors as well asequipment failure.

8.2 Safety shutdown systems A safety shutdown system shall be independent of and in addition to other systems and equipmentused for normal operation, control and monitoring, and shall act as a safety barrier in case ofmalfunction or maloperation of these systems and equipment. The safety shutdown system shall be logically divided into three main levels of shutdown:• Abandon platform shutdown (APS).• Emergency shutdown (ESD).• Process shutdown (PSD). Basic system philosophy is that a signal on a certain level should never initiate shutdowns or actionson higher levels, but shall always include shutdowns on lower levels. The APS and ESD system shall be separate from the PSD - system For more details reference is given to clause 9.3 Emergency shutdown.

8.3 Process safety Two levels of protection according to ISO 10418 shall control abnormal operating conditions leadingto potential hydrocarbon release:• Primary level of protection.• Secondary level of protection. As far as possible, the two levels of protection shall operate on functionally different basis.Duplication of identical safety devices given different set points does not satisfy the requirement oftwo levels of protection. The PSD system shall automatically detect abnormal operating conditions within systems orequipment and initiate actions so that uncontrolled release of hydrocarbons is prevented. The systems shall be designed to avoid cascading effects due to partial shutdown within PSD, i.e.shutdown signals should trip all affected systems so that a new abnormality is not developed as aresult of the initial trip action. The system philosophy shall ensure that the fail safe principle is applied. I.e. components shall moveto, or stay in the predetermined safest position upon loss of signal or power.

Page 20: NORSOK Standard Technical Safety S001

Technical Safety S-001 Rev. 3, Jan. 2000

NORSOK standard Page 18 of 66

The degree and extent of a PSD situation will depend on type of abnormality, and may vary fromequipment shutdown with minimum effect on the production rate, to a total process shutdown. Pressure relief and depressurising of hydrocarbon systems is covered in Annex E.

9 REQUIREMENTS TO SAFETY AND COMMUNICATION SYSTEMS

9.1 General requirements The general requirements to safety and communication systems shall be in accordance with ISO13702 clause 10 and 14. The line of actions performed by personnel and automatic safety system during emergencies shall beautomatically recorded to the extent it can ease investigations and experience retention after anyincident.

9.2 Fire and Gas detection

9.2.1 General All F&G detection system display and information facilities shall be centralised, and located in acontinuously manned area, normally the central control room Loop faults and -supervision shall be identified according to NFPA 72. With the installation divided into fire areas the design of the F&G system shall presume that each firearea shall be covered by a sufficient number of detectors suitable for detection of probable fires oraccidental releases of toxic or flammable gases in the area. The gas detection system shall have detectors for hydrogen sulphide in relevant areas on installationswhere such gas can occur. The alarm presentation in CCR should in addition to screens (VDUs) begiven on a simple fire and gas mimic. Further details regarding screen presentation is found inNORSOK I-CR-002 Safety and Automation Systems (SAS). Local F&G display and status facilities shall be provided in the drilling area incorporating F&Gmonitoring of the drilling facilities. The F&G system shall be designed so that maintenance, function testing etc. can be carried outwithout disabling the system. The location of fire - and gas detectors shall be based on definedscenarios, simulations and actual tests. Detail requirements for F & G system is incorporated in Annex F.

Page 21: NORSOK Standard Technical Safety S001

Technical Safety S-001 Rev. 3, Jan. 2000

NORSOK standard Page 19 of 66

9.3 Emergency shutdown

9.3.1 General References are given to ISO 13702 clause 6. The installation shall be analysed to identify potential hazardous conditions and their consequences.The critical operating parameters shall be selected and emergency shutdown logic developed. Dueconsideration shall be given to the event sequence in relation to the overall installation safety. In thedetail assessments of ESD philosophy, actions associated with time delays in the achievement of astate of no escalation potential shall be identified and the implications on ESD philosophydetermined. Consideration shall be given to interrelations between fields and installationsinterconnected e.g. by pipelines or control systems. The ESD hierarchy shall be kept simple with respect to sub-levels. This to ease understanding andfuture updating. Three main shutdown levels shall be included, see clause 8.2. The ESD principle hierarchy presented in figure 9.1 shall be applied for complex installations andused as guidance for simpler installations. For drilling operations see clause 9.3.4.

9.3.2 ESD valvesESD-valves shall be located and arranged in such a way that the exposure from fires and explosionsis minimised. Pneumatic and hydraulic tubing shall be capable of resisting loads from fire andexplosion until they have completed the shut down sequence.Instrument tubing from accumulators and hydraulic oil return lines should be protected frommechanical damage, which could adversely affect valve performance.

If hydraulic or pneumatic accumulators are used to move emergency shutdown valves to safeposition, they should be positioned as close to the valve as possible to ensure the best possibleavailability. The accumulator capacity should be adequate for at least three operations (close-open-close). Spring return type of valves shall be used when required size is available. On installations that are normally manned, only manual, local to the valve resetting of emergencyshutdown valves shall be possible, as advised from the control centre. If an emergency shutdown valve is used as process safety valve, the signal from the emergencyshutdown system shall be conducted to the actuator or to a hydraulic/pneumatic control valve for theactuator separate from the process safety system. An evaluation shall be carried out to determinewhich system design will represent the highest availability during an emergency shutdown. If an ESD valve is connected to the PCS system, the process control function shall be performedcompletely separate from the ESD functions. Emergency shutdown valves that may be exposed to fire shall preferably have metal to metal seats. Ifother seats are used, the valve shall be fire tested in accordance with API 6FA or BS 6755. The location of ESD valves shall be determined based on the FES. The design of the emergency shutdown system shall be such as to allow extensive function testing tobe carried out without interrupting the operations. Valve leak testing procedures with acceptance criteria shall be developed.

Page 22: NORSOK Standard Technical Safety S001

Technical Safety S-001 Rev. 3, Jan. 2000

NORSOK standard Page 20 of 66

Further the following functional requirements apply to ESD valves: • Local position indicators shall be installed and end position indications presented in the control

room through the PSD system.• The valve shall fail to safe position. Usually closed position.

Page 23: NORSOK Standard Technical Safety S001

Technical Safety S-001 Rev. 3, Jan. 2000

NORSOK standard Page 21 of 66

APS

ESD1

PSD

ESD2

Manual Push Button

Activation of:! DHSV s! Automatic depressurisation

Timerbased shutdown of:! F&G System! PA System! ESD and PSD Systems! UPS System! Radio/ext. communication! Emergency generator! Bilge/Ballast pumps

Gas detected at localHVAC intake

Manual PushButton

Gas detected ina non-hazarea

Manual Push Button

Gas/Water heatexchanger tuberupture

Fire detectionin a hazardousarea

Start of:! Emergency generator

Gas detected a hazardous area

! Isolate non-Exequ. in area

! Shutdownfans/heatersand closedampers

Shutdown of:! Main generator! All non-ex equip.

Manual Push button

Low-low hydraulicpressure (PALL)

Isolate all ign. Sourcesin nat. ventilated areas

Low-low instrument airpressure (PALL)

K.O. Drum LAHH ind.

Shutdown of:! Fuel gas supply

Activation of:! DHSV (upon riser- or wellhead fire)! Riser ESDV s! Depressurisation (man. or automatic)

Figure 9.1 Emergency Shutdown Principle Hierarchy

Page 24: NORSOK Standard Technical Safety S001

Technical Safety S-001 Rev. 3, Jan. 2000

NORSOK standard Page 22 of 66

9.3.3 Facilities for Manual ShutdownManual APS stations shall be located at a few strategic positions such as:• Muster areas• Lifeboat stations• Helicopter deck• CCR• Bridge connections. Manual ESD stations shall be located in essential areas such as:• Exits from areas with hydrocarbon piping and equipment e.g. wellheads, drilling, process etc.• The need for ESD stations in other rooms and areas shall be evaluated.

9.3.4 Shutdown of drilling and work-over operations Shutdowns of drilling and work-over operations should only be manually activated. Fire or gasdetected in rooms critical for the drilling and work-over operations as well as loss of air flow intothese rooms shall not give an automatic shutdown, but give alarm to the responsible drillingpersonnel. The adverse effects of automatic shutdowns shall be thoroughly evaluated for each case of automaticaction that are accepted. By any other ESD, the drilling and work-over operations shall not be automatically affected, exceptfor burning on the burner boom, which shall be stopped automatically. Supply of back-up power tothe drilling plant in case of main power generation shutdown shall be subject to evaluation.

9.4 Ignition source control Equipment left live after initiation of APS shall be certified for operation in zone 1 areas. Onlyequipment required for the safety operations, see figure 9.1, which is located in rooms continuouslymanned or monitored in emergency situations, shall be left live after APS. Such equipment shall beeasily isolated manually from the manned area/room. A timer shall be provided to allow for systemsto remain in operation until evacuation is completed. Equipment left live in the ESD I situation shall be certified for operation in zone 1 areas. Emergencyequipment in LQ and other areas may be left live subject to special considerations. Examples of equipment that can be accepted without certification for zone 1 areas are the followingequipment located inside or in the vicinity of the Living Quarter.• Emergency generator.• Emergency switch gear.• Equipment in CCR required for the control of the ESD I situation.• Critical equipment for internal/external communication in the living quarter.• Equipment in the living quarter connected to the main power supply.

"Low gas alarm" - detection anywhere on the installation shall isolate all high-risk ignition sourceslocated in naturally ventilated areas. This includes temporary equipment e.g. combustion engines andelectrical sockets including welding sockets, and non- Ex equipment operated under hot work permit.(See figure 9.1)

Page 25: NORSOK Standard Technical Safety S001

Technical Safety S-001 Rev. 3, Jan. 2000

NORSOK standard Page 23 of 66

Confirmed gas detection at HVAC air intake to local electrical/instrument rooms or emergencygenerator room shall close inlet dampers, shut down fan(s), shut down heater(s) and isolate all non-Ex equipment inside the respective room.

For above mentioned circuits, no hot conductors shall be found outside their feeding switchboardswhen isolated.

9.5 Alarm and communication systemThe objective of the alarm and communication system is to warn and guide personnel as quickly aspossible in the event of a hazardous or emergency situation.

Location, number, type and effect from alarm systems/equipment/signal shall be easily recognised inany area where distribution of the alarm is required. Alarm voice communication shall be heard in asurrounding noise level up to 83 dB. In areas with noise levels of 85 dB and above the audible alarmshall be supplemented by light signals.Audible alarms and messages shall be recognisable in the muster areas even if initiation of the safetysystems or the accident itself increases the background noise level.

The alarm signals shall be in accordance with table 9.5.1.

An audible alarm signal shall always be followed by an announcement on the Public Address system.For zoning of alarms, see table F.1 and F.2 found in Annex F.

Page 26: NORSOK Standard Technical Safety S001

Technical Safety S-001 Rev. 3, Jan. 2000

NORSOK standard Page 24 of 66

Table 9.5.1 Alarm signals.

Alarm Type Signal IndicatesMuster Alarm Continuous audible signal of

variable frequency. Yellowflashing light or rotating visuallamp

Prepare to abandon installation

General Alarm Intermittent audible signal ofconstant frequency.(1 sec. on, 1 sec. off). Yellowflashing or rotating visual lamp

Fire or gas leak or otherserious situations

Toxic Gas AlarmNote 1.

Intermittent audible signal(0,1 sec. on, 0,1 sec off). Yellowflashing or rotating visual lamp

Toxic gas, e.g. H2S.

Local alarm in roomsprotected by CO2 orother gases with lethalconcentrations.

Local red light at entrance.Local high freq. tone in room/areaand in adjacent room/areaproviding access.

Gas released.Note 2.

Inert gas protectedrooms/areas.

Local red light at entrance. Gas released.Note 3.

Alert Two level audible tone on PAsystem.

Important announcement tofollow on PA system

Notes1. At small local occurrences, local alarm may suffice.2. Pre-warning signal shall be used in and at doors to rooms protected by gasses that could

be lethal.3. Pre warning before release to be considered in inert gas protected rooms.Note 1 Frequencies for the different alarms are found in NORSOK T-100 Telecom Subsystems.

The system shall be designed to give appropriate access priorities.

Radio signal transmission for internal communication shall be catered for allowing communication toand from every location on the installation.

9.6 Emergency powerThe emergency power shall be supplied from a diesel engine driven emergency generator, capable ofsupplying the consumers with emergency power for at least 18 hours. The emergency generator shallbe exclusively dedicated for supply of emergency power during emergency mode of operation. Theemergency generator system shall be self-contained. Arrangements for black start shall be provided.

Start and monitoring of the emergency power system shall be possible from the CCR where a matrixpanel or dedicated VDU picture shall display the status of the generator.

In addition to automatic starting provisions a manual starting and testing device shall be provided.

Page 27: NORSOK Standard Technical Safety S001

Technical Safety S-001 Rev. 3, Jan. 2000

NORSOK standard Page 25 of 66

The prime mover for emergency generators can be stopped automatically in the event of:1. gas detection in ventilation air inlet2. overspeeding,3. loss of lubricating oil pressure4. Item 1 and 3 above do not apply to emergency generator(s) supplying firepump(s)

The following equipment/systems should be supplied from the emergency generators.

• Safety and Automation System (SAS)• Diesel transfer systems.• HVAC smoke ventilation system.• Compressor for instrument air.• Sea water utility pumps.• Charging of UPS.• Emergency lighting.• Compressors for smoke diver bottles.• De - icing systems.• Bilge pumps.• Lubrication oil pumps and ventilation fans required for run down of turbines and generators after a

shut down• Drilling systems (often by separate drilling back-up generator).• One deck crane.• Purging systems.• Fire waters and foams systems (when emergency generators supply fire water/foam pumps, the

requirements for such systems apply to emergency generators).• Other active fire protection systems, as required by FES.• Helicopter landing equipment.• Communication systems.• Process control system.• PSD system.

An uninterrupted power supply (UPS) for emergency equipment and systems shall be installed.Emergency batteries shall have a capacity to supply emergency power for a minimum period of 30minutes, ref. ISO 13702, table C1.

The emergency power distribution system shall be sufficiently protected against fire and explosion tooperate during an emergency situation until safe evacuation has been performed. The emergencypower generation and distribution shall be separated from normal power generation and distributionto the extent that a local fire cannot put both systems out of operation. The following principles shallbe the basis for arrangement/layout of emergency power systems

1. prime movers of emergency equipment with associated equipment shall be located in separaterooms in non-hazardous areas,

2. equipment for emergency power supply is appropriately located and preferably in separate rooms,3. emergency generators with distribution boards, chargers etc. shall be located in separate rooms in

non-hazardous areas,4. emergency batteries shall be located in separate rooms in non-hazardous areas except for sealed

batteries can be located within emergency switchgear rooms,

Page 28: NORSOK Standard Technical Safety S001

Technical Safety S-001 Rev. 3, Jan. 2000

NORSOK standard Page 26 of 66

5. combustion air for prime movers of emergency equipment is supplied from non-hazardous areas,6. the combustion air inlet is separated from the ventilation air inlet of the room,7. fuel for prime movers should not represent an explosion hazard under anticipated operating

conditions,8. exhaust pipes from prime movers of emergency equipment should neither emit sparks nor have a

surface temperature which exceeds the ignition temperature of the gas mixture which is producedor stored on the installation.

IMO MODU CODE, Chapter 5 provides additional useful guidance.

9.7 Communication through signs and markingsMeans of communication through signs and markings shall include:

a. An emergency preparedness station bill, which shall be efficiently communicated to all personnelon the installation.

b. Marking by painting, reflection materials/light surfaces that can be recognised visually or bytouching, e.g. a characteristic roughness.

c. Signs showing the way to or marking the location of the following:1. Emergency preparedness equipment.2. Safety and first aid equipment3. Evacuation routes.4. Safe areas.5. Evacuation equipment.6. Muster stations

Text on signs shall be both in English and Norwegian.

Recognised standard for the design of signs is to be found in Norsk Standard (Norwegian Standard)NS-ISO 6309.

10 REQUIREMENTS TO EXPLOSION AND FIRE PROTECTION

10.1 Fire and Explosion strategy (FES)The FES shall be established together with the lay out and later updated and detailed together with thedevelopment of the installation concept. The requirements for the development of a FES are definedbelow and in ISO 13702 clause 4.The FES shall consider the fire and explosion hazards and describe how the installation will deal withthe consequences of these hazards. Further the FES will describe the optimisation of passive andactive fire protection on one hand and lay out considerations like location of equipment/valves andseparation distances on the other.

10.2 General requirements to fireprotection. FESThe specific requirements for fire protection are described in ISO 13702 clause 11 and Annex A andAnnex B 8.

Active and passive fire protection shall be arranged to ensure that a fire is prevented from spreadingto other areas within a specified period of time and to protect load carrying structure against critical

Page 29: NORSOK Standard Technical Safety S001

Technical Safety S-001 Rev. 3, Jan. 2000

NORSOK standard Page 27 of 66

heat loads. Possible failure of the firewater systems and its effect shall be considered. For MajorHazards like riser fires or burning blow outs, the required time period before impairment shall bedefined.

Shielding of escape-routes and evacuation stations shall be as required to ensure escape from all areasand evacuation from the installation Necessary input will be provided by the risk and emergencypreparedness analyses)

The fire loads to be considered within an area may be limited through location of ESD or PSD valves.An evaluation shall therefore be made regarding location and categorisation of these valves.Other means to limit the consequences of liquid fires are bunds and drains.

Fire protection data sheets shall document the fire protection design / area safety charts see Annex J.

10.3 Requirements for passive fire protection of equipment, piping and secondary structures.A procedure for evaluation of protection of pressure vessels and process piping is included in AnnexG.

Saddles and secondary structures supporting HC pressure vessels shall be passive fire protected toavoid failure during the defined fire-scenarios.

10.4 Fire technical requirements relating to materialsMaterials on the installation shall, as a rule be non-combustible. If it is justified from a safety point ofview to make use of materials that do not meet the requirements to non combustibility, such materialsshall have limited flame spread properties, low smoke development and heat generation.

An assessment shall be made of the toxicity of gases emitted in the event of a fire.

Documentation shall be available to support the basis for the decision regarding selection ofmaterials.

Materials used in the living quarters should to the extent possible be non-combustible. If surfacetreatment of paint or other coating is used, the properties of the product with regard to flame spreadshall be considered. A corresponding evaluation shall also be carried out with regard to textiles.Floor, wall and roof finishes shall pass the fire test requirements in IMO Resolution A 653 (flamespread). In addition, the materials shall comply with the requirements of ISO 5660 (smoke andignition properties).

10.5 Passive fire protectionFor separation between main fire areas reference is made to ISO 13702 table C.4. Fire partitionsexposed to hydrocarbon fires shall be rated according to an H-class.

Living quarters shall be designed and protected so as to ensure that the safety functions they aredesigned for can be maintained during a dimensioning accidental event. See ISO 13702 Clause 12.

If fire technical calculations indicate that the outer surfaces of living quarters in the event of adimensioning fire may be subjected to a heat flux exceeding 100 kW/m2, they shall be fitted with firedivisions of minimum class H-60.

Page 30: NORSOK Standard Technical Safety S001

Technical Safety S-001 Rev. 3, Jan. 2000

NORSOK standard Page 28 of 66

Windows in H partitions shall be avoided.

Penetrations, e.g. for ventilation ducts, piping, cables, beams as well as windows and doors in firedivisions, shall not reduce the strength or the fire integrity of such divisions.

Fire protection materials used in outdoor areas shall comply with NORSOK M-501 SurfacePreparation and Protective Coating.

See Annex I for details relating to Living Quarters.

10.6 Storage and handling of explosivesExplosive commodities shall be stored and handled such that the risk of fire or explosion isminimised.

All explosives shall be separated from other goods. Storage locations shall be clearly marked andlocated in areas free of ignition sources.

The storage location shall be easy accessible with deck cranes for dropping of explosives into the seaif required.

Incompatible explosives shall be separately stored.

10.7 Active Fire Protection

10.7.1 GeneralFixed fire-fighting systems shall be installed in areas representing a major fire risk, and particularlycover equipment containing significant quantities of hydrocarbons. For definition of fire area see ISO13702. Firefighting systems other than fire water systems are covered in ISO 13702.The fire water system shall be operable at all times including periods of maintenance and shall ensureadequate supply of water for fire fighting. The system shall be designed and calibrated such thatdeluge nozzles will receive water not later than 30 seconds after a confirmed fire signal has beengiven. For the fire water system the fail-safe principles shall apply. Design according to the latestedition of NFPA is the minimum requirement if no requirements are given in this standard. SeeAnnex H.The capacity and efficiency of the system shall be verified through realistic full scale testing duringcommissioning.

Page 31: NORSOK Standard Technical Safety S001

Technical Safety S-001 Rev. 3, Jan. 2000

NORSOK standard Page 29 of 66

Fig. 10.1

Fig 10.1 Firewater system principles.

10.7.2 Prime Mover and FireWater Pumps.Offshore installations shall be provided with two independent prime mover and firewater pumpsystems. Each pump system shall have the capacity to supply 100% of the largest fire water demand.The water application rates to the various areas and equipment shall be as follows:

- Wellhead area 20 l/min m2- Manifolds located on FPSO turrets 20 l/min m2- Area for circulation and treatment of mud 10 l/min m2- Processing area 10 l/min m2- Surface of pressure vessels and tanks containing combustibles 10 l/min m2

Other water application rates shall be according to ISO 13702 Annex H.It is recommended that each pump system consist of 2x50% pump units, unless other solutions areevaluated to present similar or increased safety level. Ref. clause 10.2.The following principles shall be the basis for prime mover and firewater pump system design:

- NFPA 20 shall be followed- Consideration shall be given to two separate modes, normal mode and maintenance mode- In normal mode the minimum capacity for the system is two separate and independentsystems, each with 100% capacity

- Measures to compensate for possible shut downs in the system due to maintenance shall bedefined and documented as a part of the design. Compensating measures in

DEDICATEDFIRE PUMPS

DISTRIBUTIONSYSTEM

AUTOMATICEQUIPMENT

F&G /

CONTROL

SYSTEM

DEDI-CATED

POWER

GENE-RATION

UNITS

DRAIN

MANUALEQUIPMENT

FIRE FIGHTING SYSTEM

OVER BOARDDUMP/TEST LINE

PRESSUREMAINTAINANCE

FOAM /PUMPDISTRIBUTION

SYSTEM

Page 32: NORSOK Standard Technical Safety S001

Technical Safety S-001 Rev. 3, Jan. 2000

NORSOK standard Page 30 of 66

“light”(maximum 24 h limit of duration) maintenance mode will however, not generaterequirements to system design.

- . The system shall take into account fail to start of a fire pump. This may have implications onsystem design.

Fire water pumps with a capacity above 2500 m3/h (each) shall be avoided.Fire pump systems shall be independent of other systems.If other system designs are chosen, the reliability of the firewater system shall be equal to anindependent system.Automatic stop of diesel operated fire pumps shall normally only be permitted due to overspeeding.Automatic stop can however be accepted if this is documented safer than if the pumps continue torun. The combustion air inlet shall be equipped with a damper initiated by over speed due to entranceof gas. Failure of the overspeed securing device should not cause the prime mover for fire pumps tostop. Simple reset of the systems shall be possible.All active fire protection field equipment shall be certified for operation in Zone 1, gas type IIA, andtemperature class T3. Exceptions from this are the diesel engines, electric generators and motorswhich shall be located in rooms located safe by location and which are not likely to be affected byaccidental gas releases. It shall be possible to operate diesel engines when ventilation to the room hasbeen shut off.Dimensioning flow of the fire water pump duty points (100 %) shall include a contingency margincovering:

- Hydraulic imbalance.- Overlap of spray zones of deluge and sprinkler nozzles.- Shadow areas requiring additional nozzles- Two hydrants.- Freeze protection- Cooling of the pump and other emergency units.

Provisions for testing of the fire pumps shall be part of the design, including measurement ofcapacities and pressures.

CCR shall be provided with a fire water/foam pump panel with the following control and monitoringcapabilities:

• Selection of fire water/foam pumps for standby/duty.• Manual start• Start called for• Common alarm.• Firewater/foam pumps unavailable warning.• Firewater/foam pump running• Firewater/foam ring main pressure.

All fire water pumps and foam pumps on duty shall start upon confirmed fire detection.

Page 33: NORSOK Standard Technical Safety S001

Technical Safety S-001 Rev. 3, Jan. 2000

NORSOK standard Page 31 of 66

10.7.3 Fire Ring Main.The following requirements apply:a) Fire pump systems are connected to the fire main in such way that damage in one area will not

cause loss of all the fire water supply.b) fire main and supply shall be routed outside areas where it could be exposed to damage, and be

protected against external forces, such as environment, falling loads, fire, explosion etc.;c) Shut-off valves and cross connections on the fire main shall be included to enable isolation of

parts of the fire water ring main and to ensure supply to consumers from two different sections ofthe ring main.

d) Firewater rings main with branch pipes are at all times filled with water.e) Each fire water pump (related to100% capacity) shall be connected to the ring main by dedicated

headers with isolation valve between the headers.

10.7.4 Deluge systemsDeluge valves should be of a type which regulates the downstream pressure and which is notsensitive to pressure surges in the ring main.Deluge valves shall be provided with a dump line for full capacity testing without wetting theprotected area, i.e. an isolation valve shall be provided downstream the test branch-off point.Deluge valves shall be provided with manual bypass including flow restriction to match flow throughthe valve. The deluge valve skid shall include isolation valves down stream and upstream.It shall be possible to manually activate deluge skids locally, from CCR or release stations locatedalong the escape ways outside the fire area itself.

10.7.5 Fireman’s equipmentFor details regarding fireman’s equipment see Annex C.

10.8 Explosion protection.

10.8.1 GeneralAn explosion protection strategy shall be established with the objective of minimising the explosionrisk through

-preventing explosions to occur-minimising the explosion pressure.-controlling the consequences of explosions

Mitigating measures to reduce possible explosion overpressures, such as start of deluge on confirmedgasdetection, shall be evaluated and considered for implementation. (Annex H Fire fighting systemhas not considered use of deluge for explosion suppression) Reference is given to ISO 13702, clause13.

A procedure for the determination of the dimensioning explosion load is included in 10.8.2

Page 34: NORSOK Standard Technical Safety S001

Technical Safety S-001 Rev. 3, Jan. 2000

NORSOK standard Page 32 of 66

10.8.2 Procedure for establishing the dimensioning explosion loadsThe first step should be to establish a criterion for selecting the dimensioning explosion load.

Prior to assessing the explosion loads the consequences of an explosion considered unacceptable tothe installation shall be established. Such consequences may be:

- Global collapse of the structure- Rupture or unacceptable deformation of explosion barriers- Deformation of decks leading to unacceptable damage to equipment- Deformation of hydrocarbon containing equipment leading to an unacceptable escalation ofthe accident

- Unacceptable damage to safety equipment or systems that shall function after the explosion

The definition of the dimensioning explosion load shall describe the necessary dynamics in the loadwith regard to pressure, time and area distribution. External blast effects outside of primary explosionarea shall be considered.

The explosion load shall be determined based on a conservative selection of a defined number ofscenarios. If this leads to unrealistically high loads, a probability distribution of explosion loads shallbe established based on a probabilistic selection of scenarios taking into account the factors thatinfluence the types and probabilities of scenarios like

-layout-leak conditions-cloud formation conditions-ignition conditions.

Calculation of explosion overpressures related to the scenarios shall be performed with an advancedexplosion simulator e.g. FLACS.

11 SAFETY ASPECTS RELATED TO FLOATING PRODUCTION,DRILLING AND STORAGE INSTALLATIONS

11.1 GeneralThis clause contains additional safety design principles related to floating production/ drilling/storageinstallations. The risk analysis, emergency preparedness analysis and fire risk analysis, ref. clause 4, 5and 10 shall be performed, taking the special aspects related to the floating installation intoconsideration. In particular the call for automatic shutdown upon detection of hazardous situationsneeds to be considered in light of the possible adverse effects. Other issues covered by these standard,clauses 1-10 shall be applied as relevant. Items covered by clauses 11.3 - 11.9 are related to specialdesign solutions and should be applied accordingly.

Page 35: NORSOK Standard Technical Safety S001

Technical Safety S-001 Rev. 3, Jan. 2000

NORSOK standard Page 33 of 66

11.2 Crude storageCrude storage tanks, and in particular large tanks, shall be subject to special safety considerations inlight of their fire and explosion potential. Main principles for such tanks are described below:• Large crude storage tanks shall be provided with an adequate and safe vent system, and gases shall

be routed to either cold vent, flare or reclaiming system.• Location of crude pumps shall be made based on a hazard evaluation for operation and

maintenance of the pumps. Submersed pumps should be preferred.

11.3 Layout The following additional requirements shall apply concerning the layout of floating installations:• Vital control functions, e.g. maritime control/bridge, process control and special emergency

preparedness functions, should be arranged in one common control centre for the entireinstallation.

• The turret shall be located and arranged to minimise probability and consequences of escalation offires/explosions to/from neighbouring areas.

• Hydrocarbon pressure vessels and heavy duty equipment shall not be located within main hullstructure unless it is verified that: - The explosion venting is sufficient to prevent unacceptable overpressure. - The fire loads do not cause structural collapse.

• Process decks and relevant parts of the floater deck shall be arranged with the aim of minimisingthe risk of large pool fires on decks and tank tops.

• Process areas, turret areas and piping shall be designed to minimise the risk of jet fires towardstank tops.

• On floating installation that will be turned up against the wind, equipment that can represent andignition source should be located as far as possible upwind of potensial leak sources.

• The effects of “green sea” on deck shall be carefully evaluated and means of protection arranged.• When fire and gas detectors are located, considerations shall be made to environmental effects

caused by close location to the sea and necessary protection arranged.• Crane coverage and lay down areas shall be arranged to promote safe operations of the cranes and

to minimise the risk of dropped objects.

11.4 TurretThe following design principles apply to turret design:1. The turret arrangement design shall aim at achieving open naturally ventilated areas and

minimising explosion pressure. Enclosed mechanically ventilated areas shall be restricted tocontainers or small rooms with control and special equipment that requires special protection orcannot be located in outdoor environment. Such enclosed premises shall have over pressureventilation, with air taken from and exhausted to a non-hazardous area. Location of the premisesthemselves as well as their ventilation intakes shall take into account the prevailing winddirections. Equipment that can be ignition sources, e.g. electric equipment should not be arrangedin the moon pool area.

2. Anchor handling winches should be located in open areas or in an enclosed non-hazardous area. Iflocated in hazardous area, suitability for operation in hazardous area shall be ensured. Seawaterspraying (deluge) for spark suppression may be applied to equipment that is exposed to seawaterunder normal operations. Where winches are arranged on the deck below Riser Termination andESD valves, the deck separating the areas shall be solid and gas tight.

Page 36: NORSOK Standard Technical Safety S001

Technical Safety S-001 Rev. 3, Jan. 2000

NORSOK standard Page 34 of 66

3. The use of flexible hose connections for well stream transfer, within the turret and between turretand ship, should be minimised.

4. Fire protection of the turret can be arranged by fixed or oscillating fire monitors located on theship, e.g. on gantry structure.

5. Production or export/gas injection risers shall be protected against fires in the turret by passivemeans. Routing of risers within conductors is one acceptable design principle. At riser terminationend, the riser connector and first ESD valve shall be protected by passive means. For protection ofother parts of the structure, refer to other relevant parts of this standard.

6. Risers shall be protected against damage from wires and chains used for mooring. Arrangementsthat provide both protections against such loads as well as fire protection are preferred.

7. Decks above moon pool where hydrocarbons leaks may occur shall have an adequate drain routedto a collection tank.

11.5 Drainage/Ballast water systemsThese systems on floating installations shall be designed to operate satisfactorily for all sea states inwhich the installation is intended to be operable. Drainage systems for the process systems shall bedesigned to operate satisfactory for all sea states in which the process system is intended to beoperable.

Necessary pumps and valve control of the ballasting system shall be fed from the emergency powersystem during shut down of main power.

11.6 Emergency re-positioningThe need for quick re-positioning of the installation in case of specific emergency situations shall beevaluated. Important factors in this evaluation are number and types of risers, riser pressures, sub seaESDV and mooring arrangement.

Anchor moored or dynamically positioned installations located above well(s) shall be able to move150 m from the normal position in 10 minutes, or as specified based on risk analyses.

11.7 Topside/floater interfaceAll interfaces between the typical maritime floater technology and offshore petroleum technologyshall be clarified at an early stage of the design process, and be monitored during the project to ensurecompatibility with lifetime operational requirements.

12 NORMALLY NOT MANNED INSTALLATIONS

12.1 GeneralA "Normally Not Manned Installation" (NNMI) is an installation which can be left unmanned andstill maintain its intended principal function through remote control from a distant location.

This section outlines the safety design principles for the design of a NNMI and has been written for aminimum wellhead platform, but the requirements apply in principle to other NNMI such as riser andpipeline compressor platforms.

The need for well maintenance and reservoir stimulation has to be estimated for each location. Theseoperations are manned and will require people to be on board while performing the work.

Page 37: NORSOK Standard Technical Safety S001

Technical Safety S-001 Rev. 3, Jan. 2000

NORSOK standard Page 35 of 66

Dependent on the hours to be spent onboard a decision have to be made regarding possible limited ortemporary facilities for personnel to remain onboard for a defined period of time.This clause is limited to the specification of the principle requirements for NNMI, but Annex K liststhe minimum requirements for a simple NNMI, which is not designed for any overnight stay ofpersonnel. For installations allowing personnel to stay overnight careful evaluations have to be maderegarding the quartering and safety facilities. This will have to be done on a case by case basis.Therefore this standard does not establish requirements for such installations.The standard will focus on principle evaluations and decisions to be made to achieve an adequatesafety level and not on detailed design solutions.

Operations and maintenance philosophies for a NNMI are important to be able to establish therequired manning onboard and are necessary to be able to develop the safety requirements.

12.2 Safety evaluation, management and documentation.The design of the NNMI shall be documented according to the principles laid down in this standard,including standards referred to. The design decisions have to be documented based on thesemethodologies and standards.Risk acceptance criteria have to be established. The risk evaluations shall take into considerationdrilling and process data, environmental conditions, ship traffic, manning and helicopter shuttling.

Simple, reliable and sturdy concepts for the purpose of minimising maintenance activities on theinstallation shall be emphasised through system design and reliability requirements.

The following activities related to manned operations onboard shall be established:

• Drilling/well operations onboard• Simultaneous activities.• Weather conditions for boarding and departing of the installation.• Helicopter shuttling and need for personnel to stay overnight..An emergency preparedness analyses has to be performed to identify the requirements for emergencyplanning covering:

• Need for standby vessels when manned.• Call for helicopter.• Time to evacuate.• Search and rescue• Need for lifeboats.• Means of evacuation• Shelter.

12.3 Design principlesThe NNMI wellhead installation will typically be designed with a well head area and manifolds onthe well head side of the installation and a utility/shelter area to the opposite side. A fire/explosionwall will normally be required to protect the shelter area and the escape function adequately.

The installation may be equipped with christmas trees, a production manifold, a test manifold, a testseparator and a pig launcher. The installation will have a sheltered area with resting facilities.

Page 38: NORSOK Standard Technical Safety S001

Technical Safety S-001 Rev. 3, Jan. 2000

NORSOK standard Page 36 of 66

The main power source may be diesel generators onboard the NNMI or cables from neighbouring.Emergency power may be by batteries only.

The auxiliary systems may further consist of a methanol system, a closed drain system, and a utilitydrain system and seawater pump.

Requirements for possible quartering facilities have to identified based on the manning requirementstaking into account the following:

- Scheduled maintenance jobs.- Well monitoring and maintenance.- Start-up following shutdown.

The requirements to the support structure concerning resistance to impact from ship collisions shallbe developed based on an individual evaluation of each concept. This evaluation shall take intoconsideration the types of vessel expected to be in the vicinity of the installation, boarding procedures(boarding zone, weather restrictions, loading requirements, call frequency, anchoring philosophy etc.)and the layout and arrangement of the installation.

Access to the installation will normally be by helicopter.

12.4 System requirements.

The safety system requirements for a NNMI shall be carefully developed based on the hazardidentification and risk analyses performed. The need for firewater shall be evaluated and installed if asignificant risk reducing effect can be documented.

To ensure simplicity, firewater may be provided by alternative means as long as an acceptablereliability is proven.

Page 39: NORSOK Standard Technical Safety S001

Technical Safety S-001 Rev. 3, Jan. 2000

NORSOK standard Page 37 of 66

ANNEX A - INFORMATIVE REFERENCES (INFORMATIVE)

1989 MODU CODE International Maritime Organization - Code for the construction andequipment of mobile offshore drilling units, 1989

IEC 61508 Functional safety of Electrical/Electronic/Programmable Electronic Safety-Related Systems. Until the International Standard becomes available theDraft International Standard (FDIS) applies.

IMO Res. A.653 Recommendation on improved fire test procedures for surface flammabilityof bulkhead, ceiling and deck finish materials.

IP Part 15 Institute of Petroleum: Model code of safe practice, Part 15, AreaClassification code for petroleum installations.

ISO 15544 Petroleum and natural gas industries — Offshore production installations –Requirements and guidelines for emergency response.

ISO 3008 Fire-resistance tests on door and shutter assemblies.ISO 3009 Fire-resistance tests on glazed elements.ISO 834 Fire-resistance tests- Elements of building construction.NFPA 15 National Fire Protection Association part 15

Standard for water spray fixed systems for fire protectionNT Fire 021 Insulation of Steel Structures: Fire protection.

Page 40: NORSOK Standard Technical Safety S001

Technical Safety S-001 Rev. 3, Jan. 2000

NORSOK standard Page 38 of 66

ANNEX B - EVACUATION (NORMATIVE)

An EERS covering the operational phase should be developed at an early stage of the conceptualphase. The plan shall be in accordance with clause 14 in ISO 13702. The plan shall take into accountthe following evacuation principles: • The muster area and the access to the evacuation station should be arranged and protected in order

to evacuate the actual number of personnel in an organised and efficient way.• Area allocation: 0.4 m2 per lifeboat seat.• One additional evacuation system in the far end of the installation should be considered if escape

to the main evacuation area is impossible. For scenarios where the possibility for gas/smoke onthe helicopter deck is within acceptable limits, helicopter may be considered as the primary meansof evacuation.

• For installations connected by bridge to other installations and/or floating accommodationinstallations, the primary means of evacuation should be the bridge. One additional evacuationsystem in the opposite end of the installation should be considered if escape to the bridge isimpossible in dimensional accident scenarios.

• Escape chute with rafts should be used as a secondary mean of evacuation in the main evacuationarea.

• The emergency preparedness assessment shall be applied to identify any need for additionalevacuation means and the optimum location of these.

Page 41: NORSOK Standard Technical Safety S001

Technical Safety S-001 Rev. 3, Jan. 2000

NORSOK standard Page 39 of 66

ANNEX C - MISCELLANIOUS SAFETY EQUIPMENT (NORMATIVE)

C.1 Lifeboats

-Should be designed for 10 minutes running in a gas cloud or fire on sea. The external equipmentincluding the engine exhaust system shall not act as ignition sources.-Recovery from sea shall be possible in up to 2 m wave height. Winches for recovery should be fedby main power.-The hoisting speed for recovery should be minimum 3 m/min.-Main power should be provided for charging of lifeboat batteries. The disconnection point should bein the vicinity of the lifeboat and disconnection shall be automatic when dropping or lowering thelifeboat.-Access ways should be provided with anti-skid coating-Cabinet housing should be arranged for winches and consoles-Heaters should be provided for electric motors for the winches.

C.2 Escape chutes

-Shall be readily available and easy to operate with clear operating instructions located on the wallinside the container.-Winch for recovery should be fed by main power.-Removal of life rafts for re-certification shall be possible without affecting the suspension systemincluding lifting wire.

C.3 Man overboard boat and personnel basket

The MOB shall have a fixed lifting frame with one point suspension for handling by cranes. It shouldbe possible to reach the MOB from two cranes. The MOB shall be visible from the crane cabinsduring handling.

It should be possible to launch and recover the MOB in 5 meters significant wave height. The MOBshall have a minimum speed of 25 knots in calm sea with 3 men onboard.

The installation shall be provided with a basket suitable for transport of personnel and another fortransport of injured personnel.

Page 42: NORSOK Standard Technical Safety S001

Technical Safety S-001 Rev. 3, Jan. 2000

NORSOK standard Page 40 of 66

C.4 Man overboard related equipment.

One watertight cabinet for storage of gear of the MOB crew should be installed in the vicinity of theMOB.

The content of the cabinet should include:- 4 swimsuits of wet suit type- 6 survival suits- 1 thermal protection blanket- 1 VHF radio with suitable charger- 3 life jackets- 1 x 20 litres diesel can- 2 bags, each containing

- 30 m lifeline- 1 pair of flippers- 1 divers knife- 1 divers mask with breathing tube- 1 standard size waterproof torch- 1 mini size water proof torch and one 6 kg lead belt- 1 pair of night glasses (for intallations with moon pool work)

C.5 Fireman's equipment

Fireman equipment should be stored in sets at not less than two locations separated from each other,so that access to all equipment will not be blocked in the event of a fire in one area. The number ofsets of fireman equipment required and the contents of each set must be assessed.The equipment shall be suitable for the tasks of the fire teams, including the need for internalcommunication, during identified fire scenarios. Each set of fireman equipment should contain atleast 4 portable radio sets for internal communication. At least two of the breathing apparatus shouldbe equipped with radio sets. It is assumed that these radio sets shall not be able to become an ignitionsource, and that they operate in the UHF frequency range in private channels assigned by the NationalTelecommunications Authority with regard to application for use of private frequencies in the UHFfrequency range, or they operate in the international UHF frequency range for on boardcommunication. It should be ensured that the radio sets are suitable for the environmental loads towhich they may be subjected during an accidental event, e.g. water from a sprinkler- / deluge system,without their functioning being impaired.

Installations should have suitable equipment for refilling breathing apparatus.

Replacement of the breathing air in all compressed air bottles shall be carried out at regular intervalsto ensure that the air is pure and has an oxygen content above 20 volume percent.

Page 43: NORSOK Standard Technical Safety S001

Technical Safety S-001 Rev. 3, Jan. 2000

NORSOK standard Page 41 of 66

C.6 Safety Showers and EyebathsStrategic locations shall be identified through a separate evaluation considering the chemicalshandled and spillage that may occur. The following list is considering typical areas and is not to beinterpreted as a complete list replacing the need for the evaluation.-The following areas should be equipped with both Safety Showers and eyebaths

-methanol pump and injection area-chemical injection pump and injection area-production lab-tote tank area-process utility area

-The following areas should be provided with eyebaths-workshops-cementer room, shale shaker room, sack storage room-drill floor-mudpit area-battery room, paint store, and mud lab

The following areas should be provided with safety showers:-process areas-drilling areas

C.7 Safety Stations and First aid kits

Safety Station CabinetsAn adequate number of cabinets shall be provided. They should contain:- 4 vacuum wrapped blankets- one scoop type stretcher- one basket type stretcher- one first aid kitThe cabinets shall be painted Green (RAL 6002).

First aid kitsAn adequate number of first aid kits shall be provided at suitable locations, e.g. galley, workshops,drill floor and other areas where cut injuries are likely to occur.

C.8 Lifebuoys

Life buoys shall be located at regular intervals along the periphery of the lower levels of theinstallation.

C.9 Safety Equipment Data Sheets

Safety Equipment Data Sheets are included in NORSOK S-011.

Page 44: NORSOK Standard Technical Safety S001

Technical Safety S-001 Rev. 3, Jan. 2000

NORSOK standard Page 42 of 66

ANNEX D - LAYOUT (NORMATIVE)

The following aspects to be checked and evaluated as a part of the layout design

D.1 Area classification

"Catastrophic" events such as pipe rupture or vessel burst, which may be a result of materialweakness, design error, falling loads, collision or sabotage, shall not be regarded as giving rise to ahigher classification. This as the area classification reflects normal conditions onboard."Catastrophic" events shall be reflected in the risk analysis, and may impose stricter requirements toarrangements and equipment than defined by the area classification alone.

The area classification is an important part of the basis for layout, as it gives requirements to:• Location of ventilation air inlets and outlets.• Ventilation system requirements.• Location of combustion air inlets and exhaust outlets for internal combustion engines and fired

units.• Location and use of ignition sources.• Location of emergency equipment.• Location of vent points.• Location and design of doors and other connections between areas.• Operational- and maintenance procedures in hazardous areas.• Selection of equipment.• Drainage connections between areas

D.2 Escape routes

The dimension of escape routes shall be minimum 1m width (0.9 m for doors) and 2.3 m in height(2050 mm for doors). Escape routes intended for use by more than 50 persons shall be extended to1.5 m (1.2 m for doors) in width. Required width of escape routes shall emphasise easy transport of injured personnel on stretcher inaddition to the no. off persons onboard during hook-up /installation and commissioning activitiesoffshore. Other general principles are listed below.• There shall be at least two exits to escape routes from permanently or intermittently manned area

outside quarters and offices, leading in different escape directions.• The escape route network shall lead to safe areas and facilities as follows:

− Living quarters.− Temporary refuge.− Lifeboats and life rafts-stations.− Boat landings (not normally manned installations)− Helicopter deck.− Flotel or other installations linked by bridge/walk way.

• The installation shall be equipped with at least one escape route running from far end and intoliving quarter. The quality of this route shall be such that:

− Personnel shall be able to use this route for a period of time sufficiently long to perform a

Page 45: NORSOK Standard Technical Safety S001

Technical Safety S-001 Rev. 3, Jan. 2000

NORSOK standard Page 43 of 66

complete evacuation of the installation plus a safety margin of 50%.− Personnel shall be able to use this route without being subject neither to toxic fumes, smoke, excessive hot air nor unacceptable heat flux.− When personnel is moving along this route the possibility of being hit by falling objects or hot liquids shall be well within the acceptable.

• Escape routes shall be part of the daily used transport- and passageways. Where appropriate, mainescape routes should be provided on the outside along the periphery of the installation.

• Doors should normally open in the escape direction, but shall not block the outside escape route.Opening of doors should not require electric, hydraulic or pneumatic power. If such power isrequired the power supply should be local.

• Any dining room, recreation room in L.Q. etc., where more than 15 persons may be assembledshould have at least 2 exit doors. Internal room arrangement should be evaluated for possibleblocking of exits following an accident as well as external blockage. For all areas where there is arisk of congestion and panic, the doors shall be provided with panic bars.

• Escape routes leading to a higher or lower level should be provided by stairways. The number ofthese stairways shall be assessed based on the platform size, configuration of areas and equipmentlayout. Vertical ladders can be used in areas where the work is of such a nature that only a fewpersons (max. 3) are in the area on short time basis.

• It shall be possible to escape from a drilling area without running through a well head area.• A dead end corridor of more than 5 m length is not acceptable. Stairways included in escape routes

shall be designed to allow for transport of injured personnel on stretcher.• Lifts shall not be considered as a part of escape ways. However, it shall be possible to escape from

the lift and the hoist way with the lift at any elevation. Escape from legs/shafts/columns of aninstallation shall be considered separately. If use of lift is necessary to ensure adequate andeffective escape, the lift system shall satisfy special requirements, e.g. concerning transport ofinjured personnel on stretchers, protection, ventilation, power supply.

• Escape routes and emergency stations shall be illuminated. Escape routes shall be provided withadequate emergency lighting. Emergency stations shall have minimum 15 Lux., escape routesminimum 5 Lux.

• Escape routes in all areas outside the living quarter shall be marked by yellow painting (RAL1021).

• The escape routes within the living quarter should be provided with low level directional lighting,showing correct escape direction. Other enclosed and regularly manned utility and process areasshould be considered separately.

• Escape routes shall be arranged from the drill floor to adjacent modules and also down thesubstructure. Protection of these escape routes from radiation heat should be considered.

Page 46: NORSOK Standard Technical Safety S001

Technical Safety S-001 Rev. 3, Jan. 2000

NORSOK standard Page 44 of 66

ANNEX E - PRESSURE RELIEF (NORMATIVE)

E.1 General

Installations for production of hydrocarbons will normally require a gas release system. Ifinflammable and toxic gases can be conducted away from the installation safely without the use ofgas release system, such system may be omitted. Examples of such installations may be wellheadplatforms with small quantities of gas and subsea installations. Inflammable, toxic or corrosive gases should preferably be burned in a flare to prevent the causingdamage or injury to people, the environment or to assets and financial interests. A cold vent system may be permitted in cases when this cannot cause damage or injury to people, theenvironment or to assets and financial interests. Based on risk evaluations, a choice may be made between a centralised or local vent. The dischargelocation must not represent any unacceptable risk. When necessary, the discharge point should befitted with a flame control device. The design of the gas release system shall take into account low temperatures, vibrations and noisethat may occur as a result of gas expansion.

E.2 Depressurisation

Fast depressurisation shall be the mean of protection which should be utilised to its full potential forthe installation concept. Active and passive fire protection is to be considered to function assupplement to depressurisation, if necessary to prevent any resulting unacceptable events (rupture orexplosion of pressure vessels/piping). All pressure vessels and piping segments, which during shutdown contains more than 1.0 ton of produced hydrocarbons (liquid and/or gaseous) or unprocessedcrude, should be equipped with a depressurising system. For gas segments, the maximumcontainment should be set lower than 1.0 ton. Location of segment (enclosed or open area), risk ofsegment being exposed to a fire, consequence of rupture, etc. should be considered. Depressurisation systems are required in addition to pressure relief facilities because of the loss ofmaterial strength during a fire. Depressurisation systems may also be required for systems which are unable to contain flammable ortoxic materials by passive means alone. Loss of the active method of containment will requiredepressurisation to prevent escape of the material concerned (e.g. centrifugal compressor'sdependence on seal oil systems). The material properties at actual temperatures and pressures during depressurisation, steel thickness,active or passive protective measures shall together ensure that a pressure vessel/piping segment doesnot rupture at a stage where this may escalate the fire scenario beyond the control of the protectivesystems and arrangement. This may call for a detailed study of each ESD segment in particular. The design procedure is outlined in Annex G The depressurising, manually or automatic, shall be applied the following way:

Page 47: NORSOK Standard Technical Safety S001

Technical Safety S-001 Rev. 3, Jan. 2000

NORSOK standard Page 45 of 66

• Manual field depressurisation sequence is considered initiated after 3 minutes from detection ofinitial fire or gas.

• Automatic depressurisation sequence is considered initiated immediately after detection of initialfire or gas.

API RP 521 should be used as guidance in the design of depressurisation systems.

E.3 Relief and venting

The release of hydrocarbons from relief and depressurisation systems shall be routed through a closedsystem terminating at a liquid's disengagement vessel and with the liquid free gas being safely flared.Vents which are not suitable for routing to flare (e.g. due to backpressure) should be terminatedoutside the platform perimeter in such a way that accumulation of gases due to "dead pockets" etc. isavoided. Local venting of hazardous gases shall not be permitted unless it can be done without hazard to thepersonnel or the platform, e.g. for small and normally not manned installations local venting may befound acceptable. Flare K.O. drums shall be sized for two criteria:• Disengagement of entrained liquid droplets.• Containment of liquid carryover. The criteria for droplet removal will depend on the flare concept. The objective is to avoidcondensate dropping from flare. The particle size should be less than 400 microns. In case of verticalflare tower using subsonic flare burner the droplet size should be less than 300 microns. The K.O. drum liquid containment capacity should be based on the largest foreseeable liquidcondensation rate for a period of at least 20 minutes. This period should provide realistic time toidentify a problem and allow for operator intervention. Longer periods may be required, e.g. for subsea flow lines and inter field pipelines. This should be evaluated for each case. In addition the knock-out drum should provide capacity for 90 seconds of liquid carry over from the largest source(assuming overfilled vessel). Progressive release of inventories from process piping and pressure vessels that can cause significantescalation of a fire shall be avoided. As a minimum, the piping system and the pressure vessels shallmaintain their integrity during depressurisation. The depressurising system itself (blow down valves,branch piping and headers and K.O. drums) is of particular importance. The ability to maintainintegrity when exposed to the fire loads depends on selection of material, wall thickness, pressurerating and applied fire protection.

E.4 Flaring The need for flaring should be minimised from an environment point of view. Ref. NORSOK S-003, Environmental care. Calculations shall be performed to determine the levels of radiation on all areas of the platform forcritical flare conditions.

Page 48: NORSOK Standard Technical Safety S001

Technical Safety S-001 Rev. 3, Jan. 2000

NORSOK standard Page 46 of 66

Flare radiation calculations should account for variations in flaring quantities and wind conditions. Maximum heat loads from flares on open areas where personnel may be present and on locationswhere structures and equipment are exposed should be as follows:• Permissible radiation levels to personnel should follow radiation levels as given in API RP 521.• The heat loads from planned continuous flaring conditions on areas where personnel are supposed

to perform work tasks lasting for two hours or more the working environment requirements forexposed areas should be considered and ample protection provided as required.

• For long periods of flaring (continuous flaring), consideration should also be given to the radiationlevel on the helicopter deck, i.e. the radiation/temperatures on the helicopter deck shall not becomeintolerable to personnel or limit the necessary helicopter operations. Unless otherwise accepted bythe responsible for helicopter operations, max. 1.9 kW/m

2 is allowed on helicopter deck.

• Max. heat loads from flare on structures and equipment not designed for high heat loads should belimited to meet the requirements below. Higher exposure for short times, e.g. during emergencyflaring conditions, that will not harm the structure or equipment can be accepted. Such deviationsshall be documented.

Protection of exposed areas may be necessary to meet these requirements.• Heat loads on steel- or aluminium structures shall not give temperatures that results in loss of

structural integrity.• Heat loads on wires or limit switches in drill tower and cranes should be limited depending on type

of lubrication and inspection- /replacement frequency.• Flare radiation shall not cause temperatures in areas classified as hazardous above 200oC or above

the ignition temperature of the actual gas, whichever is the lowest.• Heat loads on Ex-rated electrical equipment and instrumentation should not give temperatures

exceeding 40oC. Based on a case to case evaluation of protective clothing, provision of local radiation shields, etc., thelimits for acceptable heat loads can be adjusted as applicable. Such deviations shall be documented.

E.5 Cold Flare

In systems were the relieved gas during normal operation is routed back to the processing system, thefollowing principles should be adhered to:

• The diversion of relieved gas under emergency conditions, e.g. depressurization shall notdepend upon instrumentation and control valves. A rupture disk should be installed in parallelwith control valves.

• The loop including control valves should have rapid response. A 2/3 voting system may beconsidered.

• It should be possible to test the entire control loop for both response time and set pointcalibration without routing the gas to flare or isolate the rupture disk function.

• A reliable system for detection of “gas to flare “ should be provided. CCR should be alarmed.• A pilot should be arranged.• A robust and reliable system with back-up capacity should be provided for flare ignition.• Radiation levels shall be calculated. For permissible radiation levels, see E4.

Page 49: NORSOK Standard Technical Safety S001

Technical Safety S-001 Rev. 3, Jan. 2000

NORSOK standard Page 47 of 66

E.6 Cold vent

The design of cold vents shall be based on dispersion calculations to prove that the foreseen gas ratescan be released without creating explosive air/gas mixtures on the installation or in its vicinity. Further, the possibility of an unintended ignition shall be taken into account in the design anddimensioning of the cold vent, i.e. ignition of foreseen gas rates should not give unacceptable heatloads or other consequences on the installation. For permissible radiation levels, see E4 The need for extinguishing ignited cold vent should be considered.

E.7 Drainage systems

The platform should be equipped with the following drainage systems:• One closed drainage system.• One open drainage system from non-hazardous areas.• One open drainage system from hazardous areas.• Where applicable, a separate mud drainage system should be provided covering the drill floor and

mud treatment areas. Open drainage systems from areas where there is no pollution, e.g. rain water drain from roofs andhelicopter deck could be routed directly to the sea. The drainage system form helicopter deck shall be capable of draining helicopter fuel from a crashedhelicopter and AFFF from the fire fighting system and two monitors. The drainage system together with the deck itself should be provided with de-icing facilities. Reference to ISO 13702 clause 8.

Page 50: NORSOK Standard Technical Safety S001

Technical Safety S-001 Rev. 3, Jan. 2000

NORSOK standard Page 48 of 66

ANNEX F - FIRE AND GAS DETECTION (NORMATIVE)

Only essential information shall be shown on the mimic, i.e. fire area status, except for areas orequipment where more detailed alarm identification is appropriate, e.g.:• In or at ventilation inlets/outlets.• Inside critical equipment enclosures.

F.1 Gas detector layout and alarm initiation

The following principles shall apply concerning detector layout and alarm initiation:• Location, type and number of gas detectors shall take into account:

- Leakage sources within the area. - Borders between non-hazardous and hazardous areas. - Gas density relative to air. Detection principles. Voting, if applied. - Ventilation air flow patterns. - Wind-direction and velocity. - Critical reaction time/detector response time. - Size of the area. Criticality of the area with regard to safety. Cloud size of the minimal leakage to be detected

• HVAC

- HVAC intakes or ducts shall be monitored by an adequate number of gas detectors. The size ofthe intake, air flow patterns, voting philosophy, etc. should be evaluated when deciding numberof detectors. The use of line detectors is regarded as equal to the use of IR point detectors.

- Gas detectors in HVAC supply should be located at the air intake, alternatively in the duct asclose to the duct opening as possible. Detectors in ducts should be positioned as near aspractical to the centre of the duct where the air velocity is greatest and where the response timeto gas ingress is consequently most rapid. At large intakes, the flow patterns around the openingshould be determined to achieve an optimum position of the detectors, ensuring fast responseunder various wind directions/orientations as well as for possible leak positions.

The total response time from gas at intake to shutdown of the intake shall be determined by the

transport time of gas from intake to location of shutoff dampers and HVAC units. - If gas is detected at ventilation air inlets, the ventilation fan in question shall be stopped, all

intake dampers shall be closed and the heating element shut off. The surface temperature of theheating element shall not exceed the auto. ignition temperature of any gas present in the area.

- On installations where the sources of leakage of flammable or toxic gases are concentrated ina small area, e.g. on mobile installations, gas detection at air inlets of mechanically ventilatedareas may be omitted. In such cases it is however required that the ventilation systems are shutdown automatically in the event of gas detection, and that there are gas detectors located in allareas classified as Zone 1 or Zone 2.

- Gas detectors should be located at HVAC outlets from hazardous areas.

Page 51: NORSOK Standard Technical Safety S001

Technical Safety S-001 Rev. 3, Jan. 2000

NORSOK standard Page 49 of 66

• One of the following two philosophies should be chosen:

- Voting philosophy: - “Confirmed gas” is activation of alarm from two detectors- “Low alarm” is activation of alarm from one detector- Initiation of automatic alarm is activated by alarm from one detector.- With voting philosophy applied, a "2-out-of-n, n>2" logic shall beapplied.- One alarm level shall be used.

- Single philosophy: - “Confirmed gas” is activation of high alarm from one detector.- “Low alarm” is activation of low alarm from one detector.- Initiation of automatic alarm is activated by low alarm from one

detector- Two alarm levels shall be used, low alarm and high alarm.

Each project shall define alarm set point(s). Definition should be based upon whether a votingphilosophy has been applied, ventilation conditions within the area and the events to be detected(minor or middle sized leakage or “catastrophic” events). In any case, high alarm level shall not be setto values above 30% LEL. For outdoor areas an alarm level of 20% LEL is recommended. For detection of internal leakagewithin gas turbine hoods an alarm level of 5% LEL is recommended. • Alarm on gas detection- Alarms should be automatically initiated upon confirmed low level alarm according to

Table F.1.

Table F.1 Automatic hydrocarbon gas alarm in area.

Automatic alarm in area CCR Living

Quarter Non-haz.

utility area Process

area Drilling

area Drill controlcabin/office

Confirmed gasdetected at:

HVAC intake LQ X X X X X X Non-hazardous utilityarea HVAC/air intakes

X X X X X X

Process area incl.HVAC outlets

X X X X X

Drilling area incl.HVAC

X X X X X

Any single detector X X low alarm level detector in

drilling area Any gas alarm shall be presented in CCR. For alarms from detectors located in drilling areas theinformation presented in CCR shall be mirrored in drilling contr. office and in drillers cabin.

Page 52: NORSOK Standard Technical Safety S001

Technical Safety S-001 Rev. 3, Jan. 2000

NORSOK standard Page 50 of 66

• Line gas detectors- Line detectors are preferred where the layout enables good coverage by such detectors. Line

detectors could be used in combination with point detectors for limiting the total number ofdetectors.

- Line detectors should be easily accessible via ladders and/or access platforms for maintenance,adjustment and cleaning.

- It must be ensured that the control centre receives warning well in advance of the concentrationreaching dangerous levels. As a minimum, the line detector set point should be adjustable from0.5 to 8 LEL meter. Recommended set point is between 1.0 and 2.0 LEL meter.

• Hydrogen sulphide gas

- Detectors should operate in the range of 0-50 PPM. - An alarm (light and sound signal) should be activated both in CCR and locally in the event of

a concentration of hydrogen sulphide of 6 PPM.

F.2 Fire detector layout and alarm initiation

• Fire detector type: The selection of fire detectors shall be based upon an evaluation of the nature of the fire to bedetected and the operational conditions that may exist. Fire detection in Living Quarters and office areas shall be based on addressable optical smokedetectors with alarm to CCR. Care should be taken when locating detectors to avoid interferenceby for instance steam generated in bathrooms. Early warning smoke detection systems, sensitive to small concentration of combustion products,shall be considered in rooms containing live electrical equipment subject to manual interventionand fire fighting. Such rooms will typically be: - Central control room. - Instrument room. - Switch board and electrical rooms. Early warning smoke detectors should be used together with optical smoke detectors of standardsensitivity setting. Location of all smoke detectors shall be verified by smoke tests. For smaller areas typical locationshould be at HVAC extract. Early warning smoke detectors should have a sensitivity of approx. 0,4 – 0,8 % obscuration permeter. For electrical rooms where all fire extinguishing is based on manual intervention, facilities fortotal electrical isolation of any of these rooms shall be provided either outside the room and / or inCCR. As a minimum multi IR or dual IR/UV flame detectors should be used for fire detection in processareas. For areas containing alcoholic substances, flame detectors shall be able to detect alcohol fires inaddition to hydrocarbon fires.

Page 53: NORSOK Standard Technical Safety S001

Technical Safety S-001 Rev. 3, Jan. 2000

NORSOK standard Page 51 of 66

Heat detectors should be used in enclosed areas where a significant and rapid temperature rise canbe expected, e.g. in combination with smoke detectors.

• Manual detection:

Manual fire alarm buttons shall be provided at strategic locations, e.g. exits from process areas,escape routes, fire stations. Automatic start of fire pumps upon manual fire alarm may beconsidered. These buttons may be used for other accidents or situations where the attention ofCCR is required in accordance with established operational procedures. In this case automatic startof fire pumps may not be implemented. Manual fire alarm buttons should be mounted at a heightof 1.4 meter above floor level and there should not be more than 30 meter walking distance to amanual fire alarm button from any point on the installation.

• One of the following two philosophies should be chosen:

- Voting philosophy: - Confirmed fire is alarm from two detectors of same type within an area. - With voting philosophy " 2-out-of-n n>2 logic shall be used.

- Single philosophy: - Confirmed fire is alarm from one detector within the area. • Alarm on fire detection:

Alarms should be automatically initiated upon confirmed fire according to Table F.2. Alarms in other areas to be manually initiated from CCR.

Table F.2 Automatic alarms upon fire detection.

Automatic alarm upon confirmed fire detection

CCR LivingQuarter

Non-haz.utility area

Processarea

Drillingarea

Drill controlcabin/office

Confirmed firedetected at:

LQ X X Non-hazardousutility area

X X X X X

Well head area Single loop

X X X X X

ConfirmedWellhead orProcess area

X X X X X

Confirmeddrilling area

X X X X X

Any single X X Detector detector in

drilling area Any fire alarm shall be presented in CCR. For alarms from detectors located in drilling areas theinformation presented in CCR should be mirrored in drilling contr. office and in drillers cabin.

Page 54: NORSOK Standard Technical Safety S001

Technical Safety S-001 Rev. 3, Jan. 2000

NORSOK standard Page 52 of 66

Table F.3 below presents normative examples of fire and gas detection in the various areas oninstallations. Alarms are described in the text above, and are not repeated in the table. The solutionspresented in the table can be deviated upon an evaluation of the specific risks in an area. Reference is also made to figure 9.1 regarding the emergency shutdown philosophy, and clause 10.6regarding active fire fighting.

Table F.3 Fire and gas detection/shut down actions.

Fire and gas detection / shut down actions Area/room Automatic fire

detection Shutdown

action Automatic gas

detection Shutdown

action Comments

Well head area Flame or heat(fusible plugs*)

ESD II Area ESD II *) Not normallymanned

installations Manifold area Flame ESD II Area ESD II Nat. vent./ outdoor H.C.process area

Flame ESD II Area ESD II

Mech. vent.process area(separation/gascompression)

Flame ESD II Area + HVACextr. Duct

ESD II

Water injectiontreatment area

Flame or smoke* ESD II HVAC intake* None**

ESD I* Area assumednon-hazardous

*) Mech. Vent.

Area **) Nat.vent/ outdoor area

Gas compressionarea

Flame ESD II Area ESD II

Drill floor None Manual Area Manual* *) See 9.3.6 Driller’s cabin Smoke Manual HVAC intake Manual* *) See 9.3.4 Degasser room Flame Manual

Driller’scabin

HVAC extract Manual*Driller’s

cabin

*) See 9.3.4

Shale shaker room Flame ManualDriller’s

cabin

Area, H2S* ManualDriller’scabin**

*)If sour service **) See 9.3.4

Active mud tankroom

Flame ManualDriller’s

cabin

Area + HVACextract

Manual*Driller’s

cabin

*) See 9.3.4

Sack/bulk storagearea

Heat None HVAC intake* None**

ESD II *) Mech. Ventnon-haz. Area

**) Nat. vent.Partly open area

Page 55: NORSOK Standard Technical Safety S001

Technical Safety S-001 Rev. 3, Jan. 2000

NORSOK standard Page 53 of 66

Fire and gas detection / shut down actions Area/room Automatic fire

detection Shutdown

action Automatic gas

detection Shutdown

action Comments

Mud lab Smoke None HVAC intake ESD II Assumes nopiped

connection tomud system

Cementing unitroom

Flame None HVAC intake Manualfrom

DrillersCabin

See 9.3.4

Central controlroom (CCR)

Smoke incabinets* and/ or

at roof level

Manual HVAC intake ESD I *Fire detection Early warning

system Instrument roomadjacent to CCR

Smoke* Manual HVAC intake ESD I *) See F.2 Early warning

system Central tele eq.Room

Smoke* Manual HVAC intake ESD I

*) See F.2 Early warning

system Local equipmentroom (LER)

Smoke* Manual HVAC intake ESD II** *) See F.2 **) Shut down

of internalequipment to be

evaluated Turbine hall Flame *

Smoke ** Manual HVAC intake ESD I * Fuel system

**Electricequipm.

Turbine hood Flame and heat* Unitshutdownupon area

firedetection

Area (hood) Unit**shutdownupon area

gasdetection

*) Supplier toconfirm.

**) Continueventilation.

Block and bleedfuel gas system

Turbine Combust. airintake

ESD I

Switch board andelectrical room

Smoke* El.** powerswitch off

HVAC intake ESD I *) See F.2 Early warning

system **Manual or

automatic withtimer to be

decided Battery room (lead acid)

Smoke* HVAC intake H2 detector at

extract

ESD I Shutdown

boostcharge

*) See F.2 Early warning

system

Page 56: NORSOK Standard Technical Safety S001

Technical Safety S-001 Rev. 3, Jan. 2000

NORSOK standard Page 54 of 66

Fire and gas detection / shut down actions Area/room Automatic fire

detection Shutdown

action Automatic gas

detection Shutdown

action Comments

Fire pump roomand emergencygenerator roomwith diesel engine

Flame Manual HVAC intake ESD I, Close fire- damper*

*) Running firepump will be

shutdown onlyon overspeed

Air compressor Smoke or heat Manual Air intake ESD I* *) Incl. unitshutdown

Mechanicalworkshop

Smoke or heat Manual HVAC intake ESD I Separatewelding HVAC

extract Instrumentworkshop

Smoke or heat Manual HVAC intake ESD I

Paint storage Heat or flame HVAC intake ESD I HVAC intakecommon for LQ.

Smoke at intakeand in HVAC

room

HVAC shutdown

Air intake ESD I

LQ, cabins/rooms/ Areas

Smoke Manual * *) Covered bygas detector inHVAC intake

(see above line) Vent extract fromgalley

Heat Manual

General galleyarea

Heat Manual

Crane engineroom

Heat or smoke* Manual Combustionair intake**

ESD** Unit s.d.

timer delay30sec

*) Smoke forelectrically

driven cranes. **) Depend oncrane location

Helicopter deck None None Hangar Smoke and flame None Chain locker None None Turret area Flame ESD II Area ESD II Pump room incolumn

Smoke, heat HVAC intake ESD I

Page 57: NORSOK Standard Technical Safety S001

Technical Safety S-001 Rev. 3, Jan. 2000

NORSOK standard Page 55 of 66

ANNEX G - PROTECTION OF PRESSURE VESSELS AND PROCESS PIPINGAGAINST FIRE (NORMATIVE)

The design procedure includes the following principal step: Step 1. Identification of fire types and duration. The initial step is to decide on the characteristics of fire the pressure vessel/piping can be exposed toincluding the duration of the fire. Fuel composition, mass, mass rate and duration as applicable and ventilation conditions should bedetermined: Types of fire:• Pool fires in open or enclosed areas, fuel controlled.• Pool fires in enclosed areas, ventilation controlled.• Jet fires. Step 2. Effect of firewater. Water applied for controlling the fire and cooling of pressure vessels and piping is very effectivewhen evenly distributed over the exposed areas. The following should be considered for achieving theefficiency of firewater:• Spray of deluge water from nozzles from below, from both sides and from above.• Spray nozzle location ensuring that water spray projection covers all surfaces of the protected

equipment/piping.• Supply of deluge water to a module arranged so that accidents can not damage the supply.• Coverage of fire detectors that ensures immediate detection of small fires in all parts of the fire

area.• Operational procedures ensuring high availability of these systems. Step 3. Heat flux values for the next step are then selected from the following table:

Table G.1 Heat flux values.

Type of fire Initial heat flux density Initial heat flux density Max. point loads Average load Pool fire (crude) open orenclosed area fuel controlled Note 1

150 kW/m2

100 kW/m2

Pool fire enclosed areaventilation controlled Note 1

200 kW/m2

130 kW/m2

Jet fire 250 kW/m2 Note 1. In areas with unprocessed crude or crude in the first or second stage of separation, the heat flux loads should beconsidered comparable to jet fire loads. Special considerations should be done for heavy crude fields.

Page 58: NORSOK Standard Technical Safety S001

Technical Safety S-001 Rev. 3, Jan. 2000

NORSOK standard Page 56 of 66

Alternatively, heat loads could be based on a detailed evaluation/simulation of the credible firescenarios. Application of qualified predicting tools for calculation of heat loads may be an integral part of theevaluation. The average heat flux density shall be applied where the global load over an area is dimensioning,e.g. for boil off in pressure vessels. The max. point loads shall be applied in cases where localdamage is critical, e.g. for the integrity of a pressure vessel shell or of critical structural elements. Step 4. Depressurising / rupture calculations. Perform depressurising calculations for each major pressure vessel and piping segment, establishinginternal pressure fluctuation, wall material temperature and residual strength, as a function of time.Determine whether rupture will occur during depressurising, and identify time to rupture if this willoccur. The effect of manual versus automatic initiation is specified in Annex E, clause E.2. Step 5. Evaluation of failure mode. If a rupture of pressure vessels and piping occurs as a result of a combination of excessive heat loadand internal pressure, an acceptance of the situation will have to be judged based on the risk analyses.Residual quantities, escalation potentials both within the area and towards adjacent areas shall betaken into account. Simplified evaluations can be made when the pressures are considered low (< 4.5 barg) or the potential leakage of hydrocarbon is low (less than 1 ton) in the pressure vesselsand piping when the rupture occurs. Where rupture can not be accepted, i.e. the risk acceptance criteria are not met, the provision ofadditional protective systems and arrangements shall be implemented. This can be: • Change from manual to automatic depressurising.• Modifications to depressurising system (increase its capacity)• Application of passive protection that will reduce the heat loads to the exposed pressure

vessels/piping.• Modifications to pressure vessel /piping design (material, wall thickness etc.).• Modifications to the general arrangements that have an impact on the time to rupture. The procedure will then have to be repeated from step 1, 2 or 3 as applicable.

Page 59: NORSOK Standard Technical Safety S001

Technical Safety S-001 Rev. 3, Jan. 2000

NORSOK standard Page 57 of 66

ANNEX H - FIRE FIGHTING SYSTEM (NORMATIVE)

H.1 Fire Water Drivers and Pumps

Diesel Engines and generators• Diesel engines providing power to more than 100% of the design firewater capacity shall not be

located within the same room.• It shall be possible to start the fire water system even if no other systems on the platform are

operational.• A manual isolation switch/valve between the starter motor and the start battery/air bank shall be

provided per starter motor. Each engine shall have two independent starting systems• The start batteries for the fire water diesels and the batteries for the diesel control system shall be

located within the same room as the diesels.• Stopping the fire water diesel engines shall only be possible local to the engines.• In case of gas in air intake to the fire water engine room, the room shall be automatically closed

and the cooling air shall be taken from the engine room itself.• Cooling of the engine room shall be by an air/fire water-cooling unit powered directly from the

diesel engine.• The fire water diesel start batteries shall be charged by the fire diesel generator while running in

addition to the main power.• Fire resistant cables shall be used between firewater generator and motor.• Each diesel engine shall have its own dedicated day tank sufficient for 18 hours continuous full

power operation.

Fire Water and Jockey PumpsThe fire water pumps and up- and downstream piping shall be completely filled with water at alltimes.

• The fire water system shall be pressurised in the standby mode. The pressure source shall have thecapacity of flow through frost protection bleed lines plus two hydrants.

Fire Water Pump Control• Each fire water pump shall be fitted with a minimum flow control valve.• A test valve for the fire water pumps shall be installed to enable checking of the fire pump curve

up to 150% of design flow rate. The valve shall be able to regulate from zero flow up to 150%capacity and shall be of low noise design.

• Possible water hammer effects shall be considered.

Page 60: NORSOK Standard Technical Safety S001

Technical Safety S-001 Rev. 3, Jan. 2000

NORSOK standard Page 58 of 66

H.2 Fire Water Piping, Valves and Nozzles

General• It shall be possible to start the fire water pump system without delay and without causing

unacceptable pressure surges. A pressure surge study shall be performed. Means that may beconsidered for eliminating pressure surge problems are pressure vacuum valves, soft closingminimum flow valves, pressurised overhead tanks, etc.

• The deluge and monitor skid cabinets shall have doors with sufficient stopper arrangements toprevent a personnel risk associated with the cabinet doors in strong winds. The skids shallwithstand the applicable explosion loads.

• The deluge system shall comply with NFPA 16, Deluge Foam - Water System.• The sprinkler system shall comply with NFPA 13, Sprinkler Systems.• Deluge, monitor and sprinkler valves shall fail in last position upon loss of signal from F&G

logic.• The system design shall allow for complete system flushing in commissioning and operation.

Fire Water Piping• For general piping requirements, reference is made to NORSOK P-001, clause 8 and L-002 clause

4.7.• There shall be a minimum of two pressure transmitters in the Fire Water Ring main providing the

low-pressure start signal to the firewater pump diesels.• The FireWater Ring main shall be equipped with two points (min 6”) for connection to external

water supply for commissioning. (SOLAS international shore couplings should be used.)• The fire water piping system shall be fitted with sufficient number of high point vents to achieve

the following:• Efficient frost protection at all locations.• Efficient removal of all entrained air pockets in the water.• All low points in piping downstream deluge and monitor skids shall be equipped with 3 mm weep

wholes to prevent pockets of water to be entrained. The weep holes shall be considered in thefirewater demand calculations.

• Sprinkler systems shall have a test and flush connection in the far end of the piping system and atthe sprinkler valve(s). The connections shall be easy accessible from deck level and have onedrain box located below the connection.

• Adequate venting facilities with valves shall be provided for wet pipe sprinklers.

Valves• Sprinkler valves shall be provided with full capacity manual by-pass• The arrangement of the isolation valves shall be such that not more than 50% of the fire water to

water hoses and hydrants for one area, is effected if one segment of the fire water ring main istaken out of service.

• All valves (> 1") shall be painted red and provided with a car-sealing system.• Control valves for sprinkler and deluge systems shall be located outside the area they protect.• Deluge control valves shall be automatically activated by the F&G logic.• All deluge valves, monitors and sprinklers shall be fitted with a test line with 100 % capacity.• For manned installations resetting of deluge, monitor and sprinkler control valves shall only be

possible local to the valves.

Page 61: NORSOK Standard Technical Safety S001

Technical Safety S-001 Rev. 3, Jan. 2000

NORSOK standard Page 59 of 66

• Activation of deluge, monitor and sprinkler systems shall trigger alarm in CCR. Pressuretransducers downstream deluge, monitor and sprinkler valves shall be fitted to provide confirmedflow signal to CCR.

• Quick operating isolation valves shall be provided for each hydrant.

Nozzles and sprinklers.• When arranging deluge nozzles, the vertical distance between nozzle and floor shall be

considered to ensure adequate cooling effect.• All deluge and sprinkler nozzles shall have “Factory Mutual” approval.• Nozzles for area coverage on fully open process and drilling areas shall only be the high velocity

types.• The sprinkler heads should be of the frangible bulb type, set to burst at 68oC, in general areas.

However, a higher temperature limit should be selected for areas where high ambienttemperatures might be expected.

• The sprinkler heads should be located in positions which ensures an application rate of not lessthan 6 l/min/m2 at all times over the nominal areas protected by the sprinklers. Due considerationto overlap, obstructions, etc. should be given when positioning the sprinkler heads.

H.3 Monitors

• Automatic drain facilities shall be provided for each fire water monitor.• All monitors shall be adjustable through 3600 in the horizontal plane and + 600, - 400 in the

vertical and it shall be possible to manually lock them in any position.• Fixed firewater monitors with the possibility of foam mixing at predetermined ratio should in

general be used for areas with a high fire potential and which are not protected by fixed delugesystems

• Water monitors shall be sized to discharge at least 120 m3/h at a nozzle pressure of 7 barg. Themonitor nozzles shall be of the constant flow type, i.e. same flow at fog and at jet spray. Thespray angle shall be easily adjusted when in operation and return to maximum spray angle afteruse.

• When monitor valves are opened manually and local to the monitor, a signal shall automaticallybe given to the F&G logic and to the starter logic for the fire water pumps. The fire watermonitors are flanged directly on the feed pipe. A considerable reaction force from the monitorswill normally require a pipe support immediately below the flange.

H.4 Hydrants and Hose Reels

General• Hydrants and hose cabinets shall comply with NFPA 14, Standpipe and Hose System.• The maximum reaction force on the hose nozzle where only one person is supposed to operate the

hose shall not be more than 25 KP.• It shall be possible to reach any area where a fire may occur on the installation with at least two

water jets from monitors or hoses.

Page 62: NORSOK Standard Technical Safety S001

Technical Safety S-001 Rev. 3, Jan. 2000

NORSOK standard Page 60 of 66

Hydrants and Hose Reels• One cabinet shall be provided per hydrant.• The cabinet incorporated in each hydrant shall consist of:

• 4 off 1 1/2 inch fire hoses of an approved fire-resistant type, 15 meter in length withinstantaneous connection joints to hydrants and nozzles.

• Two auto to fog nozzles with pistol grip. Capacity minimum 20 m3/hr with 2 hoses and anozzle hooked up.

• Two sets of connecting key.• All hydrants shall have two outlets fitted with 1½" quick connections of a standard approved type

throughout all areas (NOR No. 1).• The hydrants shall be located in weather resistant cabinets fitted with heating units where

required. The cabinets shall be designed for bolting to the deck.• Non collapsible hose reels shall have:

• Within living quarter 25 meters of 1” bore hose with auto-to-fog nozzle, capacity approx.8 m3/hr.

• within all other areas 25 meters of 11/4" bore hose with auto-to-fog nozzle, capacityapproximately 15 m3/h

H.5 Foam System

General• Foam supply shall be provided for all areas where hydrocarbon or alcohol pool fires are likely to

occur.• The foam system shall comply with NFPA 11, Foam Extinguishing System.• Filling of foam to the supply tanks shall be performed from tote tanks in the lay down area.

Foam Pumps• For centralised foam systems there shall be 2x100% foam pumps. The pumps shall be powered

from the fire water diesel generators, but it shall also be possible to run the pumps from mainpower through the emergency switchboard in order to run/test pump without starting the firewater diesel generator.

• Both foam pumps shall be in stand-by mode and start simultaneously with the fire water dieseldrivers.

• In a centralised foam system a jockey pump shall be provided and powered from emergencypower

• Each of the foam pumps shall be connected to one foam supply tank, each having a capacity for30 minutes supply to the largest fire area, alternatively to one tank with capacity for 60 minutes.The foam pumps shall be equipped with minimum flow control and pump testing facilities.

• For the foam pumps all scenarios from minimum to maximum flow, is to be considered as normalduty for the pumps.

Page 63: NORSOK Standard Technical Safety S001

Technical Safety S-001 Rev. 3, Jan. 2000

NORSOK standard Page 61 of 66

Foam Control and Piping• If a centralised foam system is selected, the foam ring main shall be provided with isolation

valves.• For a centralised foam system a balanced foam proportioners shall be used.• When in operation the foam supply shall have an operation pressure of at least 2 bar above the

firewater pressure to prevent reverse flow.• Foam shall be injected downstream deluge and monitor control valves to prevent ingress of foam

into the fire water system.• Monitors and hydrants on helicopter deck shall be equipped with foam for > 10 minutes

continuous service. Foam capacity shall correspond to 10 minutes operation at full monitor designcapacity.

• The pressure in the foam ring main shall be presented in CCR,• To avoid foaming and contamination, draining of the foam concentrate tanks shall not be made to

the open deck drain.

Page 64: NORSOK Standard Technical Safety S001

Technical Safety S-001 Rev. 3, Jan. 2000

NORSOK standard Page 62 of 66

ANNEX I - LIVING QUARTERS (NORMATIVE)

The living quarters shall be designed and protected so that:

a) each floor is separated by decks that meet the requirements of Class A-60. The main structuressupporting/stabilising the decks shall have a fire resistance of 60 minutes according to a standardfire test or approved calculation. Joints between the deck and the outer wall shall have aminimum fire resistance of 60 minutes;

b) all staircases meet the requirements of Class A-60. For stairs connecting two floors only, it issufficient that the walls of the staircase at one of the floors meet the requirements of Class A-60;

c) all shafts interconnecting floors are built to Class A-60;

d) kitchen and dining room are separated from the rest of the living quarters by Class A-60 firedivisions;

e) work spaces, laboratories, rooms for electrical equipment such as major distribution panels,transformers etc. and rooms for water heating are separated, individually or in sections, from therest of the living quarters by fire divisions of at least Class A-0;

f) all walls and doors where Class A fire division are not required meet the requirements of Class B-15;

g) walls in corridors extend from deck to deck and meet the requirements of Class B-30.

If a suspended ceiling design is continuous between Class A division and meets the requirementsof Class B-15, walls in corridors may be terminated at the ceiling;

h) suspended ceilings meet the requirements of Class B-0;

i) draught stoppers are installed above suspended ceilings, which meet the requirements to ClassB-0. The distance between draught stoppers should not exceed 14 meters;

j) there are no windows in walls facing processing area etc;

k) fire doors are installed in corridors to the extent necessary.

l) additional principles and requirements relating to Living Quarters are included in NORSOK C-001/002

Page 65: NORSOK Standard Technical Safety S001

Technical Safety S-001 Rev. 3, Jan. 2000

NORSOK standard Page 63 of 66

ANNEX J - FIRE PROTECTION DATA SHEET (INFORMATIVE)

SDS-001 Fire protection data sheet

NORSOK FIRE PROTECTION DATA SHEET / SDS-001

S-001 AREA SAFETY CHART Rev. 3, April 1999Rev. 3, April 1999 Page 1 of 1

Package no. Doc. no. Rev.

WALLS / FLOOR /CEILING N S E W FLOOR CEILING

NONE:

AREA CLASSIFICATIONS VENTILATION OCCUPANCY WIND SHIELD:

HEAT SHIELD:

ZONE 1 NATURAL PERMANENT STEEL WALLS:

ZONE 2 MECHANICAL INTERMITTENT FIRE PARTITIONS:

NON-HAZARDOUS BY LOCAT. OVERPRESSURE NORMALY NONE EXPL. PANELS:

NON-HAZARDOUS BY VENT. UNDERPRESSURE NONE

SUSPENDED:

FALSE:

HAZARDS FIRE AND GAS DETECTION FIRE & BLAST PROTECTION RATE

CRUDE OIL HC GAS IN AREA - POINT OR BEAM AREA DELUGE 10 l/min/m2

CONDENSATE LIQUID HC GAS IN HVAC INTAKE EQUIPMENT DELUGE 20 l/min/m2

LIGHTER HYDROCARBON GAS HC GAS IN COMBUSTION INTAKE AFFF 1 0/0

HEAVIER HYDROCARBON GAS HC GAS IN COMB./VENT. INTAKE SPRINKLER

TOXIC GAS H2S, CO2 HC GAS AT BOUNDARY - POINT OR BEAM WATERMIST

CHEMICALS TOXIC GAS IN AREA MONITORS 54 m3/hr

METHANOL SMOKE IN AREA HYDRANT 2 x 20 m3/hr

GLYCOL SMOKE IN HVAC INTAKE CO2

FUEL OIL / DIESEL EARLY SMOKE HOSE REEL (HIGH CAP.) 13 m3/hr

LUBRICANTS HEAT IN AREA HOSE REEL (LOW CAP.) 8 m3/hr

ELECTRICAL FLAME IN AREA DUAL AGENT HOSE REEL (DAHR)

OTHER COMBUSTIBLES MANUAL CALL POINT (MCP) WHEELED PORTABLE EXTINGUISHER BC CO2

RADIOACTIVE MANUAL CO2 RELEASE CO2 PORTABLE

EXPLOSIVES MANUAL RELEASE WATER (MRW) POWDER PORTABLE

HYDROGEN GAS AREA RESET WATER PORTABLE

ESD PUSHBUTTON GASEOUS EXT.

MANUAL ELECTRICAL ISOLATION (MEI)

O

U

NOTES: T

P

U

T

S

I

G

N

A

L

INPUT SIGNALS S

FIRE ZONE: AREA SAFETY CHARTS FOR:

AREA: DESCRIPTION:

Page 66: NORSOK Standard Technical Safety S001

Technical Safety S-001 Rev. 3, Jan. 2000

NORSOK standard Page 64 of 66

ANNEX K - NORMALLY NOT MANNED INSTALLATIONS(INFORMATIVE)

K.1 General requirements

This Annex outlines detailed recommendations to a simple NNMI, which is manned only duringdaylight and under weather conditions that allow safe access and departure by boat or helicopter. Nofacilities are provided for overnight stay. For more complex installations, or where personnel will stay onboard for shorter periods, additionalrecommendations should be considered to achieve an adequate level of safety.A simple NNMI considered in this annex will typically be arranged with means of access from thesea, an access deck for the christmas trees and a helicopter deck.

The process equipment typically includes christmas trees, production manifold and a removable spoolfor pigging.

The main power source should be a battery pack with recharging by a small diesel generator or by apower cable from the service installation.

When manned, manual shutdown of the installation should be possible locally as well as from remotecontrol point.

K.2 Production systems

K.2.1 Well head system

The well head system should be designed to withstand the highest load combination of pressure andtemperature occurring during operation, shutdown and maintenance of the wells.

In addition to local operation, wing control valves may be controlled from the remote control centre,allowing remote shutdown and restart of the production. Blocking of remote start-up of productionshould be possible while the installation is manned.

K.2.2 Piping systems and pressure vessels

Piping systems and pressure vessels should be designed to minimise the instrumentation and controlequipment.

Piping systems designed to withstand the highest load combination of pressure and temperature, towhich the systems are expected to be exposed, need not be provided with full flow pressure reliefvalves.

Page 67: NORSOK Standard Technical Safety S001

Technical Safety S-001 Rev. 3, Jan. 2000

NORSOK standard Page 65 of 66

K.2.3 Drain and vent systems

Manual depressurisation of all pressurised systems should be possible from the platform when it ismanned.

Vent pipes from systems containing hydrocarbons should be terminated at a minimum of 3 m aboveor outside decks. The location of vent pipe termination should take into account helicopteroperations.The consequences of ignited vent pipes should be considered.Vents on atmospheric vessels, which are not dimensioned to withstand a full inside explosionpressure, should be provided with adequate flame arrestors.

K.2.4 Risers

Production and lift gas risers should be equipped with a riser emergency shutdown valve.

On risers for stable fluids, which may be depressurised from the main installation, omission of riseremergency shutdown valves may be considered.

K.2.5 Auxiliary systems

Engines should be avoided, but if required, be certified for operation in hazardous areas.

K.3 Safety systems

Primary protection of personnel should be quick and effective evacuation.

K.3.1 Escape routes/Shelter

Escape routes to the shelter should be established. The shelter should provide for protection ofpersonnel until evacuation can be performed.

If the platform is provided with a boat landing for personnel transfer a secondary escape route to thelanding should be established if it makes a contribution to the evacuation options in an emergencysituation.

K.3.2 Life-saving appliances

Adequate life saving appliances for the crew that comes on board should be available. (Ref EERS)Installation of at least one free fall lifeboat is recommended, but other arrangements such as acombination of MOB /lifeboat may be used. This is to be decided based on the emergencypreparedness analyses.An evacuations chute with rafts should be considered to achieve the required redundancy of theevacuation means.

K.3.3 Emergency shut-down

Provisions should be made for emergency shutdown and operational shutdown of the installation tobe made both locally at the installation and at the remote control centre. Reset of the ESD valvesshould be made at the valve itself, but may be done from the remote CCR when the NNMI isunmanned if adequate means to evaluate the situation onboard from the CCR is provided.

The emergency shutdown signal from the remote control centre should be by a fail-safe signal (e.g. bymeans of a radio link) which on disconnection shuts down the normally not manned installation. Apossible time delay in shutdown due to a link failure should not exceed 10 min.

Page 68: NORSOK Standard Technical Safety S001

Technical Safety S-001 Rev. 3, Jan. 2000

NORSOK standard Page 66 of 66

Emergency shutdown of the remote control centre or plant should result in operational shutdown ofthe not normally manned installation.

It should not be possible to inhibit a local emergency shutdown system from the remote controlcentre.

The emergency shutdown system should be in operation when the installation is unmanned.

The emergency shut down system should be separate from PSD and PCDA.

K.3.4 Communication

Voice communication between the installation and the remote control centre and directly between theinstallation and standby vessel should be possible when the installation is manned.

If voice communication is based on portable radios, a minimum of two radios should be available onthe satellite installation.

The reliability of the communication links for the emergency and control systems between the CCRon the main installation and the NNMI should be documented.

K.3.5 Fire and gas detection

Fire detection should be provided and automatic shutdown initiated upon confirmed signal.

Gas detectors with shut down functions should be in operation when personnel is onboard theinstallation.

If portable detectors with built-in alarm functions are used, the crew should place these in fixtures onapproved locations when ascending the installation.

K.3.6 Alarm systems

Upon gas detection an audible alarm should be activated. Portable gas detectors may provide thealarm.

When the installation is manned, an APS signal should be operable, which can be perceived by all onboard.

K.3.7 Emergency power

An emergency power supply should be provided with a capacity of minimum four hours.

K.3.8 Helicopter deck

The helicopter deck should as a minimum be equipped with a dual agent extinguisher system basedon 250-kg dry powder and 250 l premixed foam.On regularly operated decks (this means when shuttling have to be done for temporary periods.) abuilt in fire fighting system is recommended.