Risk Screening and Assessment Procedure - Petrobel

7/27/2019 Risk Screening and Assessment Procedure - Petrobel

1/68

RISK SCREENING AND ASSESSMENT PROCEDURE

HSE IMS Procedure No 02 Page 1 of 68



2/68



DISTRIBUTION LIST

DESCRIPTION COPY SERIAL No. No. of

Chairman & Managing Director 1

General Manager & Managing Director 2

Operations General Mgr. 3

Deputy Operations General Mgr. 4

Finance General Mgr. 5

Deputy Finance General Mgr. 6

Exploration General Mgr. 7

Deputy Exploration General Mgr. 8

Materials General Mgr. 9

Projects General Dept. 10

Deputy Projects General Mgr. 11

Internal Auditing General Dept. 12

Administration General Dept. 13

Industrial Safety & Environmental Protection 14

Asset Integrity & Quality Management 15

Tenders & Contracts General Dept. 16

Planning & Follow Up General Dept. 17

Legal General Dept. 18Information Services & SVS. General Dept. 19

Sinai Fields General Mgr. 20

Sinai Fields Operations Gen. Mgr. 21

Sinai Production Gen. Mgr. 22


3/68



Sinai Materials Sector 32

DESCRIPTION COPY SERIAL No. No. of

Sinai Fields Support General Mgr. 33

Sinai Field Safety Div. 34

Ras Garra Fields General Mgr. 35

Nile Delta Gen. Mgr. 37

Nile Delta Operations Gen. Mgr. 38

Nile Delta Maintenance Gen. Mgr. 39

Nile Delta Sup. Services sector 40

Nile Delta Safety Div. 41

Port Fouad Fields Gen. Mgr. 42

Port Fouad Production Assist Gen. Mgr. 43Port Fouad Maintenance Assist Gen. Mgr. 44

Port Fouad Support Services Assist Gen. Mgr. 45

Port Fouad Safety Dept. Mgr. 46

EGPC 47

Ieoc 48

Medical Department


4/68



REVISION RECORD

RevisionNumber Date Descrip tion of Changes

A 19.01.04 Draft for Review

0 05.02.04 Issued for Use1 June 2007 Risk Tolerability criteria, high level risk assessment

reporting, responsibilities,

The custodian of this procedure is the HSEManager and any suggested changes tothis procedure or queries about the applicability of it should be addressed to him. Heis also responsible for coordinating periodic reviews of this procedure, which will takeplace every two years.


5/68



LIST OF CONTENTS

1.0 PURPOSE AND OBJECTIVES 8

2.0 DEFINITIONS 9

2.1 General 9

2.2 Responsible Job Titles 10

3.0 ROLES AND RESPONSIBILITIES/ OWNERSHIP 10

3.1 Chairman & MD and General Manager & MD 10

3.2 General Managers 11

3.3 Line Manager 11

3.4 Line Supervisors 11

3.5 Role of the HSE Department 12

3.6 Role of the Medical Department 12

4. RISK CATEGORIES 13

4.1 Event Risk 13

4.2 RISKS TO PEOPLE (HEALTH AND SAFETY) 13

4 3 Risk to Critical equipment and Facilities 13


6/68



5.3 RISK REPORTING 21

6. DETAILED RISK ASSESSMENT 22

6.1 Risk Management process: 22

6.2 Identify the Hazards 24

6.3 Evaluate the Risks 25

6.4 Analyze the Risks 26

6.5 Reduce / Control Risk 27

6.6 Record the Findings 28

6.7 Monitor and Review 29

7. RISK TOLERABILITY CRITERIA: 30

7.1 EVENT RISK SCREENING MATRIX 30

7.2 Risk Matrices and Criteria 30

7.2.1 Event Screening 31

7.2.2 Personal Risk (task) 31

7.2.3 Risk to people (E&P Operation) 32

7.2.4 Environmental Risk 32

7.2.5 Asset Risk 32

7.2.6 Reputation Risk 32


7/68



APPENDIX A3: HAZARD CHECKLISTS 41

APPENDIX A4 CONTROL MEASURES GUIDANCE 48

APPENDIX A5 RISK ASSESSMENT EXAMPLE 54

APPENDIX A6 HSE WORK PLAN EXAMPLE 56

APPENDIX A7: RISK ASSESSMENT FORM 59

APPENDIX B: RISK MATRICES 60

APPENDIX B1: EVENT RISK SCREENING MATRIX 61

APPENDIX B2: PERSONNEL (TASK) RISK ASSESSMENT MATRIX 62

APPENDIX B3: RISK TO PEOPLE (OPERATION) ASSESSMENT MATRIX63

APPENDIX B6: ASSET RISK MATRIX 66

APPENDIX B7: REPUTATION RISK MATRIX 67

APPENDIX B8: SOCIAL RESPONSIBILITY 68


8/68



1.0 PURPOSE AND OBJECTIVES

This procedure covers all activities of PETROBEL, including contractors personnel working

for PETROBEL. Contractors with their own HSE arrangements must also comply with thisprocedure as a minimum. It has been developed to achieve compliance with Eni E&PDivision HSE IMS HSE Standard: HSE Risk Management Doc. No. 1.3.0.03 (Ref 1),Eni HSE Risk Reporting Procedure- DOC. No. 1.3.0.05 (20-02-2006) (Ref 2) and HSE Riskmanagement and Petrobel HSE IMS (Ref 3).

It follows the general principles of international management systems (Refs 4, 5, 6, 7).

This procedure should be implemented in conjunction with the Petrobel WorkPrecautions Procedure (Ref 8) where appropriate.

The scope of this procedure is to define how risks should be classified, how frequenciesand consequences of hazards should be qualitatively assessed and how the relevantmitigation plans should be prepared, and is used to support the formulation and overallranking of the key risks faced by the Company. Also it gives guidance on how to prepareand update the risk report.The purpose of this procedure is to ensure that all staff in PETROBEL field operations,

offices, warehouses and supply bases are aware of, and understand, the importance oftheir responsibilities for hazard identification, risk assessment and risk control with respectto health, safety and environmental management.

Two levels of risk assessments are addressed in this procedure. The top level (HighRisk assessment) allows Petrobel to report a summary of the high level of risks to Ieocon yearly basis as required by the HSE risk Management Standard of Eni HSEDirectives. The second level allows Petrobel departments/ sites to develop detailed risk

register which details the main areas of HSE risk associated with their activities.

Effective risk control will enable PETROBEL to minimize the frequency and consequence(severity) of accidents/incidents and ill health, and minimize the environmental impact of itsactivities.


9/68



2.0 DEFINITIONS

2.1 General

Hazard: Something with the potential to cause harm, loss orenvironmental impact, whether by injury, illness ordamage.

likelihood: The Probability of a hazard being realized.

severity The extent of the consequences, which could resultfrom the hazard being realized.

Risk: Risk is the product of the likelihood and the severity.

Risk register A document proving a brief, but complete overview ofthe identified hazards, the relevant screening criteriaand the measures (controls) necessary to managethem.

Significant Risk: Indicates that a hazard or risk is anything other thantrivial. One which requires some form of positivesafeguard or control measure to eliminate, or reduceit to an acceptable level;

Control Measure: A precautionary measure, which prevents or reducesa risk. Control Measures can include physical,procedural, and human systems.

Reliability The probability that an item will perform a required


10/68



2.2 Responsible Job Titles

This procedure covers all PETROBEL operations, including activities in offices, warehousepremises and in the field. As these operations will have differing organizational structures, it

is necessary to use generic terms for the personnel having responsibilities for risk screeningand assessment. In order to provide clarity, these generic terms are defined below withexamples. Further guidance may be obtained from the HSE department if required. Incertain locations, all of the levels of supervision described in this procedure may not be inplace and the same person may, therefore, have more than one set of responsibilities.

All personnel are responsible for working with due regard to health, safety and theenvironment, especially those with responsibility for others, e.g.

Line Supervisor: The immediate supervisor of the person(s) who willperform the activities for which the risk screening andassessment is being conducted.

Division Manager: The manager of the site / department where the risksof the activity are being screened and assessed.

Department General Manager: The manager of the relevant Division for the activities

being considered.

3.0 ROLES AND RESPONSIBILITIES/ OWNERSHIP


11/68



arising from the assessments and for training of personnel. Also he shall ensure thatPetrobel is reporting to the Ieoc by the end of June each year a summary of the High

level risk assessment.

3.2 General Managers

Each Department General Manager should initiate and lead a High Level Risk Screeningexercise for all ongoing Departmental activities on an annual basis. Additionally, he shouldensure that:

HSE risk screening and assessments are conducted for all intended activities withintheir remit prior to performing the activity.

All controls and actions arising from such HSE risk screenings and assessments,including procedures, are developed and implemented, and monitor the progress ofimplementation.

HSE risk screening and assessment sheets (risk register) are reported, updated/developed on annual basis.

Line managers/supervisors are fulfilling their responsibilities in accordance with the

procedure in hand. All appropriate company and contractor personnel understand all controls, procedures

and precautions which apply to the activities to be carried out and are trained asnecessary.

3.3 Line Manager

Line Managers shall:

Initiate and ensure risk screening/assessment is conducted prior to any activity underhis responsibility;

Formulate a team, including a member from HSE, to conduct the required riskscreening/ assessments for all activities;

Participate in risk screening/assessment conducted for all ongoing departmentalactivities on an annual basis;

F ll th d l t d i l t ti f i d t l


12/68



3.5 Role of the HSE Department

The HSE Department General Manager is accountable for the application of thecompany tolerability criteria into the risk management process of the whole companyand for updating the company Risk Screening Matrix. In addition to the responsibilitiesdescribed above, the HSE Manager will also be responsible for providing assistanceand/or advice in the following areas:

Developing the company high level risk register and sending annually to Ieocthrough the MDs,

Developing the scope of HSE risk screening and assessments;

Incorporating relevant risk screening and assessments into Department annual workplans;

Participating as required in HSE risk screening and assessments and advising onthe suitability of control measures and their implementation;

Reviewing any work produced by external consultants on behalf of the

commissioning Department; and

Assisting with the preparation or review of specific procedures, HSE plans or briefingdocumentation and,

Monitoring of the implementation of measures( controls) identified in the risk registerthrough audits/ inspections

3.6 Role of the Medical Department

The medical department is responsible for:

Participating in high level and detailed risk assessment exercise

Advising on possible health hazards in relation to site, process or environment


13/68



4. RISK CATEGORIES

4.1 Event RiskRisk is a function of the likelihood of an event and the severity of its consequences. Therisk form a particular event, the Event Risk is the HSE risk associated with a specific,discrete scenario (such as helicopter crash, transport accident, oil spill, etc.) in terms ofeffects on people, environment, assets and reputation and is usually assessedqualitatively.

4.2 RISKS TO PEOPLE (HEALTH AND SAFETY)

Hazardous activities may result in injury, fatality or diseases both to those personnelengaged in work associated with the activity or to community. Risks to people may bedivided into:

a) Personnel Risk - a non-specific term covering the risk of injury,diseases or fatality to personnel from named tasks, or from routine orspecial operations.

b) b) Individual risk- the total risk of death in a fixed time period (most oftenone year) to which a worker or a member of the community may beexposed from all credible hazards and sources of accidents

c) Societal Risk- the risks to society arising from operations; the termsociety in this context include communities, residential areas. In generalthe public domain which is not connected with those operations.

4.3 Risk to Critical equipment and Facilities

The risks to critical equipment protecting personnel from high hazard operations alsoneed to be addressed. Such equipment and facilities may include Temporary Refuges

(TRs) and electronic control system.

4.4 Environmental Risk

The environmental risk is the risk to the environment from different activities that fallunder the responsibility of the company. As a consequence, environmental risk


14/68



4.6 Reputation Risk

Reputation risk is the risk to the reputation of a company as received by society at large,

or sometimes more specifically its peers (other oil companies), its employees, itsshareholders, the government or financial situations.

The reputation of the company is linked and can be affected by HSE incidents oraccidents of all types. Reputation consists of a combination of the characteristics,performance and behavior of a company and importantly for risk management, theperception of the company. Although reputation can be considered as an intangibleasset, it is important because it can affect the ability of the company to establish ormaintain business at all stages of the development cycle. Therefore, actual or perceived

HSE impacts can damage the reputation/ the business of the company and in turntangible company assets.


15/68



5. HIGH LEVEL RISK ASSESSMENT

High Level Risk Assessment should be conducted for all departmental activities. A riskscreening exercise of all departmental activities is to be conducted on an annual basis.Nevertheless, major activities e.g, project modifications; seismic surveys, drilling, etc.,require a separate risk screening and assessment prior to initiation. The line managershould plan the exercise by splitting the job into discrete sub-activities and identifying therequired expertise in the team which will be doing the assessment.

This chapter provides a guide for the preparation of the Company-wide HSE RiskReports, in compliance with the Eni E&P Divisions HSE Management System. Thescope of this chapter is to provide guidance on how to prepare and update the RiskReport. In particular, it defines how risks should be classified, how frequencies andconsequences of hazards should be qualitatively assessed and how the relevantmitigation plans should be prepared, and is used to support the formulation and overallranking of the key risks faced by the Company.

This process does not apply to p rojects, which are carried out under the control of

the relevant IMS Risk Management process and procedure.

5.1 Formulating the Team

In general, these high level risk assessment teams should be led by the departmentgeneral manager and include the line manager and the line supervisor of the proposedactivity, along with a member of the HSE department and medical department along withany other expertise that is thought necessary.

5.2 Instruction For The High Level Risk Register Preparation and Updating


16/68



Table (1) Risk Areas and CategoriesRISK AREAS RISK CATEGORY AREA OF IMPACT

Hostile communities / media1.1. Communities

Damage to cultural heritages

R

Stress/shift induced risk

1. Social Aspects

1.2. Workforce Ethics

Inadequate training /communication

P

Climate Change (GHGemissions)

2.1. Emissions

Air Quality (VOCs, SOx, NOx

....)2.2. Spills Oil/Chemical Spill

E

Pollution from operationalwastes

Pollution from domestic wastes

2.3. Waste

Pollution from sanitary wastes

E

2.4. Production water Ground/Water pollution E

2. Environment

2.5. Biodiversity Reduction of indigenousbiodiversity

E, R

Legal Aspects(HSE related)

3.1. Legal compliance Inadequate controlof legal aspects

R

HSE SystemManagement

4.1. DocumentationInadequate documentation

A

Leak/ spill5.1. Asset integrity

Loss of integrity/control

P,A,E

Transportation risk

Cargo handling / Maintenance

Contractors / Subcontractors

5.2. Operations Safety

Simultaneous / Concurrentoperation

P

5.3.EmergencyResponse

Unsuitable emergency responseP,A, E,R

5.4. Office Safety Office-related risk P

Safety

5.5 Public SafetyRisk associated with the generalpublic

P,R,E


17/68



A: Asset R: Reputation E: Environment P: People

Risk Areas are numbered to allow a management summary to be developed in astructured manner, which shows where the key risks are located.Risk Ranking Matrices are used to rank the risks, according to the following process.Upon selection of the Risk Areas (step 1), the Risk Category (step 2) and theidentification of potential areas of impact - P, E, A, R - (step 3), it is necessary toassociate a frequency (or probability) of occurrence to the events being analyzed (step4).This can be done by using the reference matrix in Annex B1. Two different methods can

be adopted to enter the proper frequency, depending on whether or not such an eventhas already happened within the Company.

In the first case (reactive method) the frequency category of the event can be identifiedby using Table 2. Frequencies corresponding to 0 and A are not covered, as thesecategories imply that the event has not happened within the Company, and

therefore the second method should be used.

Table (2)

Annual Frequency

Has occurredat least once in

Company

Has occurredseveral times inCompany

Has occurredseveral timesper year inCompany

Has occurredseveral timesper year in onelocation

Table 2 Frequency evaluation (reactive method)

Where there is no experience of any previous occurrence of the event being analyzedwithin the Company, the following method be used (predictive method), where the


18/68



Table (3)

0 0 A

0 A B

A B C

In either case a frequency category 0 to E (for reactive), or 0 to C (for predictive), will beallocated to the event.This parameter, together with the severity category of the events consequences(identified in accordance with the guidance provided in the E&P Division HSE RiskManagement Standard [Ref.1]), will allow the risk figure to be entered in the matrix of

Annex B1 (step 5).The risk may fall in the red region (High Risk); in the yellow region (Medium Risk) orin the light blue region (Low Risk); the meaning of these regions is explained in section

7.2 of this document.The next step (step 6) requires that measures are identified that allow the High Riskevents to be moved at least to the Medium Risk area and the Medium Risk events to bemoved, if practicable, as close as possible to the Low Risk area.

This can be done by taking measures which reduce the severity of the event or itsprobability of occurrence.

An Action Plan shall be drafted to ensure that these measures are then implemented in

a controlled manner.

Examples of Hardware and Operational Controls are provided in Table 4 and Table 5respectively.

Reliability

/2/ of

Barriers

NO. OF Barriers /1/


19/68



Table (4)

HARDWARE CONTROL(HC)1. Item or assembly design

2. Item or assembly layout / footprint

HC1. Equipment

3. Process control equipment

1. Explosion / Fire / Leak containment systemHC2. Shell / Shield

2. Pressure / Temperature / Fluids containmentsystem

1. Emergency isolation system different fromprocess / equipment control system

HC3. Emergency System

2. Emergency relief / disposal system

1. Active emergency equipment (e.g. fire fighting,standing-by emergency device)

2. Collective / Personal Protective Equipment

HC4. Emergency Equipment

3. Escape, Evacuation and Rescue equipment

Table 4 List of Hardware Controls


20/68



Table (5)

OPERATIONAL CONTROL1. Activity/Product/Service information (process,design, changes and risk data)

2. HSE rules for system of work

3. Start-up, shut-down, preventive maintenancemanual

OC1. Work Instruction

4. Procedure for non-routine / repetitive tasks (criticalor driven by experienced errors or incidents)

1. Due diligence2. Education/dialogue program

3. OH&MS (*) program

4. Inventory monitoring and reduction

5. Incentive scheme

6. Communication agreement

7. Audit / Review program

8 Regular inspections / monitoring program

9. Documentation and approval of changes

OC2. Hazard-specific formalprotocol

10.Community program

1. Standardised emergency action planOC3. Emergency Plan

2. Scenario-based Contingency Plan

1. Line manager responsibility to recognise/removethe hazard

OC4. Responsibility/ commitment

2. Contractor responsibility to recognise/remove the

hazard1. HSE clauses in contracts

2. Training/Awareness

3. HSE Professional

4. Minimum level of staff experience at all staffchanges (turn-over, shift etc.)

OC5. Training and competence


21/68



Risk Category: 6.2 Medical EmergencyPotential area of impact: P Harm to PeopleSeverity: 4 potential for 1 PTD or fatalityHas it already happened? Not within CompanyFrequency: B 2 barriers exist: HC4.3 (rescue equipment) and OC5.2 (Competentstaff), but reliability is low (a maintenance program is not evident and a fit-for-purposereview has not recently been carried out)Risk: C-4 (Medium Risk)

Once the risk has been evaluated, the mitigation programme can be set up, and

the mitigation measures identified:

Example No.1To move the risk from the region B-4 to the region A-4 (at least), it is necessary to:

Add a barrier (e.g. OC5.4: coverage of 24H with experienced emergency teamson shift).

This example is included in the Risk Register Proforma in Appendix A1.

5.3 RISK REPORTING

A Risk Report should be prepared and maintained by the company in line with therequirements outlined in Eni HSE Risk Reporting Procedure (Ref 2)

A copy of the summary of Risk Report shall be sent to the Ieoc- HSE department

manager by the end of June each year.


22/68



6. DETAILED RISK ASSESSMENT

Task Related Risk Assessments include specific activities e.g scaffold erection, materialhandling, loading/offloading, transportation etc. The line manager in this case shouldformulate a team led by the supervisor of the specific activity and including a member ofthe HSE department along with personnel specific to the task if deemed necessary.

The following chapter of this procedure will focus on the risk management process andon how to perform risk screening and assessment.

6.1 Risk Management process:

The Risk management Process (see figure 1) is a continuous, iterative process, whichtypically consists of four major tasks:

1 Identification and definition of hazards and their potential effects.2 Evaluation of the risk arising from identified hazards in terms of evaluation of the

likelihood/ probability/ frequency of occurrence of accident sequence and evaluationof the severity of the consequences.3 Assessment of tolerability of risk to people, environment, assets and reputation by

comparing risk level with the relevant tolerability criteria.4 identification of risk reduction measures needed to reduce the likelihood/ probability/

frequency (prevention) and/ or the consequence of an accident (control andmitigation)


23/68




24/68



Risks arise from the interaction of people, equipment, materials and the workenvironment. The intent of the risk screening and assessment process is tosystematically identify the hazards, their probability of occurrence and their potential

consequences, screen and assess the risks, develop and implement control measureswhich minimize the risk, and record the findings of the process.

The process addresses three fundamental questions:

(a) What can go wrong and how often?

i.e. Identify the hazards and thelikelihood of occurrence.

(b) What would happen if something did go wrong?i.e. Identify the consequences .

The product of the answer to these first two questions establishes the initial potential riskfrom the activity.

(c) What can be done to prevent or minimize this risk?i.e. Identify and implement the control measuresneeded.

The Risk Screening and Assessment process consists of five essential steps.

Identify the Hazards

Evaluate the Risk Analyze the Risk

Reduce/Control the Risk

Record and Review


25/68



6.2.1 Definition of Tasks

Each task should be identified in terms of:

Activities

Use of plant and equipment

Use of materials/substances

Workplace

Procedures used

This should help to build up, in time, an inventory of tasks that Departments conduct and

the type of work carried out in the different workplace areas.

6.2.2 Record the Hazards

Once all the tasks have been identified, an inventory should be drawn up, which lists allthe tasks carried out in each workplace area. These tasks may be considered as routine,non-routine or generic, and should be fed forward for risk assessment.

To ensure that all hazards are identified at this stage, typical risk screening key wordsare listed in Appendix A2 and hazard identification checklist tables are provided forguidance in Appendix A3. The checklists given are not exhaustive and should beupdated each time a new hazard is identified.

Look for what could reasonably be expected to cause harm. Ignore the trivial andconcentrate on significant hazards, which could result in serious harm or affect severalpeople. Manufacturer instructions and material data sheets can help put risks inperspective.

6.3 Evaluate the Risks

Decide who may be harmed and how. Think also about people who may not be at thework place at the time e g cleaners visitors contractors and members of the public etc


26/68



Condition of equipment.

Estimate the hazard effects, i.e. the consequence of the risks arising from the hazards.

The assessed severity rating of the hazard effects, with or without any control measures inplace, should be entered on the Risk Assessment form as a number using theConsequence (Severity) Rating shown in each matrix.

6.4 Analyze the Risks

Analyze the initial Risk Rating (Risk Rating With Existing Control Measures) by multiplyingthe consequence number by the likelihood number/ letters, to provide a risk rating (or

ranking) for each hazard. This product of these two ratingsshould be entered in the Riskcolumn on the relevant Risk Assessment Matrix (Appendix B).

The valuesin the Risk column provide an indication of priority and of the extent of the riskwithout any specific control measures.

The objective of this process is not to arrive at a certain number but to provide asystematic method of ensuring that consequence and likelihood ratings are analyzedcarefully and a record made of the analysis for future reference and review.

The next step is to consider the existing control measures and additional controlMeasures needed to control, reduce and minimize the risk for each identified hazard.The preferred hierarchy for the control measures is described in Section 6.5 below.

The control measures may address the consequence, the likelihood or both. The requiredcontrol measures for each hazard should be recorded alongside each hazard on the Risk

Assessment Form (Appendix A7). Appendix A4 provides guidance on the type of control

measures that can be employed for the various hazards.

Residual Risk to assess the residual risk that remains with the control measures in place,new hazard effect (consequence) and likelihood ratings are selected from the relevantmatrices, with the inclusion of the control measures. The product of these two ratingsprovides a measure of the Residual Risk and completes the risk analysis stage. The


27/68



From this analysis, the risk matrices shown in Appendix B indicate whether the residualrisk of each hazard is:

Broadly acceptable and generic control measures are required aimed at avoidingdeterioration.(Continuous improvement)

Tolerable only once a structured review of risk-reduction measures has been carried outand implemented (Risk reduction measure)

Not acceptable and risk control measures are required to move the risk figure to theprevious regions(Intolerable r isk)

Record the results in the final (right hand) column of the Risk Assessment Form.

This risk rating assessment will assist in deciding priorities for action and in deciding theauthorization levels for the work commensurate with the risk.

In general, high risks may require the provision of considerable additional resourcesinvolving special equipment, training, high levels of supervision, and consideration of themost effective methods of eliminating or controlling hazards.

Some situations may require special consideration, including:

- if the task is new, complex or unfamiliar- if the task is unusual or occasional- if it is impractical to comply with normal industry standards- if previously used safeguards are not appropriate for this activity

There may be a need to consider alternative engineering solutions to eliminate the risk fromthe task, if no suitable combination of control measures can be found, which would reducerisks to an acceptable level.

Lower level risks may be considered as acceptable but actions should still be taken to try toreduce these risks further if possible within reasonable limits.


28/68



Reduce the hazard with an alternative; e.g. use flame retardant scaffold boardswhere hot work may be taking place.

SegregationIsolate the hazard from people; e.g. fencing of excavations, machine guards.

ControlControl the hazard by introducing suitable measures, which may be in either or bothof the following two categories;

Personal controls - competence based (e.g. well trained staff)Organizational controls - rule based (e.g. adherence to work procedures)

Controls should be introduced using the following preferred sequence:

(a) Procedures, such as permit to work, emergency response, etc.(b) training and instruction(c) supervision(d) maintenance

MitigationProvide personal protective equipment (PPE) as necessary, e.g. hard hats, boots,gloves, harnesses to prevent falls from height, etc.

Typical control measures are provided in Appendix A4.

When considering what control measures are already provided, or need to be provided,to control or reduce the risk, the risk assessor must take into account the possibility ofcontrol measures not being implemented because of human error, lack of maintenance,difficulty in compliance, complexity of instructions, etc.


29/68



Once the risk assessments have been completed, a Work Plan should be prepared for themore complex activities. A sample plan is indicated in Appendix A6.

6.7 Monitor and Review

If there is any significant change to the hazards or consequences, the risk assessmentsshould be revised and the data base updated. Risk assessments should be reviewedannually.


30/68



7. RISK TOLERABILITY CRITERIA:

7.1 EVENT RISK SCREENING MATRIX

A preliminary measure in the global assessment of risk is the Event Risk ScreeningMatrix. This provides definition of consequences and a range of qualitative criteria toestimate probability or frequency for risks to people, the environment, etc. The meaningof the terms in the matrix, such as continuous improvement, etc is explained below insection 7.2.This matrix is mandatory in the identification of high level HSE Risks during risk

screening (Major Hazard Analysis, Environmental Impact Assessment etc.). This matrixprovides the basis to identify significant risks or areas of risk and prioritise furtherassessment and management efforts.Risk screening matrices are suitable to be linked with other means of assessingtolerability, especially when assessing human risk in high hazard scenarios, usuallyconnected with safety accidents.

7.2 Risk Matrices and Criteria

Risk matrices also provide a means of assessing risk in single areas of concern such asto the environment. The risk matrix is a tool, inspired to the ISO standard 17776, whichshall be used as a background for setting risk tolerability criteria. When used as aqualitative matrix, it considers events that have been experienced by the Company orthe Company may expect in case of deterioration of such events.In case Company history/experience is considered not consolidated (in terms of No. ofplants / operations), reference shall be made to E&P industry in the same geographical

area.The matrix axes, consistent with the definition of risk, are Consequences and Likelihood/ Probability or Frequency.

The vertical axis represents the measure of the potential consequences of crediblescenarios A scale of consequences from 1 to 5 is used to indicate increasing severity


31/68



1. Continuous

improvement

The level of risk is broadly acceptable and generic control measures arerequired aimed at avoiding deterioration.

2. Riskreductionmeasure

The level of risk can be tolerable only once a structured review of risk-reduction measures has been carried out (where necessary, the relevantguidance from the local Authorities should be adopted for application of

ALARP). ALARP is a concept that applies well only to personnel risk. Forenvironmental risk the concept of Best Practicable Environmental Option(BPEO) is more frequently applied. Asset risk is often most easily judged ona basis of costs and benefits alone.

3. Intolerablerisk

The level of risk is not acceptable and risk control measures are required tomove the risk figure to the previous regions.

Depending on the position of intersection of a column with a row in the matrix, it ispossible to classify the risk.For the same scenario (grouping all hazardous events which have the same severity ofconsequences), a resulting likelihood / probability / frequency is assigned or calculated,such that the risk can be classified. The classification is repeated for all the risk areas(People, Environment, Assets and Reputation). The overall risk of a hazard is classifiedaccording to which among consequences has the highest rating.

7.2.1 Event Screening

The Event Risk Screening Matrix is reported in Appendix B1 and provides definition of

consequences and a range of qualitative criteria to estimate likelihood / probability orfrequency. This shall be used in the identification if high level HSE risk during riskscreening. This matrix provides the basis to identify significant risks or areas of risk (e.g.transportation risk) and priotrize further assessment and management effort.Should the qualitative risk figure be intolerable, either a quantitative risk analysis

(QRA) or the adoption of fit- for purpose and more effective risk reduction


32/68



Minimum Health Standards (Ref. 11). For more details about the occupational healthrisk, please see the Petrobel/ Health Risk Assessment procedure that will be in PetrobelOHMS manual. The Risk to personal Assessment Matrix is reported in Appendix B2.

7.2.3 Risk to people (E&P Operation)

Risk to people induced by the E&P operations can be assessed qualitatively andquantitatively. When performing Quantitative Risk Assessment (QRA) as a forecast ofpossible, future events, fatalities have to be considered with care, avoiding adeterministic approach; in this context, for example, to evaluate the risk of fatality, it isnecessary to consider not only the frequency (or probability) of the accidental load (in

terms of radiation from a fire, overpressure from an explosion, toxicity from a toxicrelease etc.) but also the vulnerability of humans to this load. The Risk to People (E&POperations) Assessment Matrix is reported in Appendix B3.

7.2.4 Environmental Risk

The environmental risk matrix has been derived from a document prepared by the OLFsenvironmental committee for oil spill to sea (Ref 12) and has been extended to onshoreactivities too; it is reported in Appendix B5. This matrix essentially provides an expansionof the definitions of environmental consequences included in the Event screening matrix.

As far as consequences are concerned, a list of options is shown; they are not to beused contemporarily; for example, in sensitive areas, the option based on amount ofspilled oil is not suitable, and is preferable to adopt options related to protection of faunaand flora.

7.2.5 Asset Risk

The asset risk matrix is reported in Appendix B6. Even in this case, different options areshown to describe consequences, based on times and costs for repair.

As far as probability / frequency is concerned, both quantitative and qualitative criteriaare shown, where the latter is based on reliability of technical / operational protectionsystems, such as temporary refuges, control systems etc. The reliability is expressed interms of minimum number of failures needed for the hazard to be realized (higher the


33/68



7.2.7 Social Responsibil ity Risks

Social Responsibility factors should be treated as a possible cause of concurrent impactto safety and health to people, asset, reputation and environment. As a consequence, noseparate specific criteria matrices are specified (see Appendix B8).

7.3 Risk management Options

For any given risk there are four basic management approaches

Take/Accept the risk is tolerated in its basic state with no active controls being

applied

Terminate the factors which create the risk are eliminated (eg replacement of

dangerous chemicals)

Treat/Manage apply controls in the form of hardware, software, procedures with the

effect of reducing the frequency or consequences of the event

Transfer Insure or outsource.



34/68



6.0 REFERENCES

1. Eni E&P Division HSE IMS HSE Standard: HSE Risk Management Doc. No. 1.3.0.03 (31/07/2004)

2. Eni HSE Risk Reporting Procedure- DOC. No. 1.3.0.05 (20-02-2006)3. HSE Risk management and PETROBEL HSE IMS.4. ISO 14001.5. OHSAS 18001.6. ISO 9000 2000.7. ISO 17776

8. PETROBEL Work Precautions Procedure, PETROBELHSE/Office/26, Rev 0,Feb 2004.9. Environmental Legislation No 4 of 1994.10. Task Risk Assessment Guide - A step change in safety

11. MHS: Eni-E&P Division Document Doc. N.1.3.2.11 Minimum HealthStandards Main document and 8 attachments:

12. OLF (1999) "OLF recommended method for environmental risk analysis "



35/68



APPENDICES

APPENDIX A

APPENDIX A1 HIGH LEVEL RISK REGISTER PERFORMA

APPENDIX A2 RISK SCREENING KEY WORDS

APPENDIX A3 HAZARD CHECKLISTS

APPENDIX A4 CONTROL MEASURES GUIDANCE

APPENDIX A5 RISK ASSESSMENT EXAMPLE

APPENDIX A6 HSE WORK PLAN EXAMPLE

APPENDIX A7 RISK ASSESSMENT FORM

APPENDIX B

APPENDIX B1: The Event Risk Screening Matrix.APPENDIX B2: The Risk to personal Assessment Matrix.

APPENDIX B3: The Risk to People (E&P Operations) Assessment Matrix.

APPENDIX B4: Social Responsibility Matrix

APPENDIX B5: The Environmental risk matrixAPPENDIX B6: The Asset risk matrixAPPENDIX B7: The Reputation risk matrix

APPENDIX B8: Social Responsibility



36/68


Rev 1 Risk Screening and Assessment Procedure Page 36

APPENDIX A1 HIGH LEVEL RISK REGISTER PERFORMA

Current

RiskMeasures to be implemented

Event ID

Risk CategoryConsequences-

ImpactArea o f Impact Contro ls i n pl ace

Prob. Sev. Ri sk

Performance

Indicators Recommended

Measures (*)

Act ion

assigned

Residual

Risk

1. Social Aspects1.1 Communities relations/

impacts Concerns on

indigenous groupsand interruption to oilactivities;

Organisedenvironmentallobbyists;

Disparity between oil

workers and others orfuel price sensitivitypromote civil unrest.

ReputationAssets

OC2.2.Education/dialogue program:

self help policy;

reduction ofreliance oncompanyhandouts.

OC2.I0. Communityprogram:

sustainablecommunityprojects.

B 4

M No. and type of

communityprojects;

Communityrelatedincident/illnessreporting;

Local content

(salaries; localgoods andservicesexpenditures)

None N/A

M

1.2 Workforce / ethics Working hours;

Shifts / rotation;

Morale;

Language barriers

(nationals and

expats).

People

Reputation

Assets

None D 3

H Age, seniority

and job based

accident and

illness statistics

Personnel

turnover

OC1.4 Work

instructions

include repetitive

tasks;

OC5.2 Staff covered

by competency

appraisal;

OC2.5 Incentive

scheme.

YES

L

2. Environment

2.5 Biodiversity Change in water, airand soil/ sedimentquality;

Soil disturbance;

Upsetting nutrientbalances andmicrobial activity in thesoil.

Environment

Reputation

None E 4

H

EnvironmentalQualityIndicators(fishery, etc.)

No. of specialists(biologists) in theorganization

HC1.2 Assembly layoutincludes habitatmanagement;

OC2.8 Regularmonitoring program;

OC2.1 Due diligenceapproach: EIAinclude site clean-upand rehabilitation.

YES

L



37/68



Current

RiskMeasures t o be implemented

Event

ID


ImpactArea ofImpact

Controls in place

Prob. Sev. Risk

PerformanceIndicators Recommended

Measures (*)Act ion

assignedResidual

Risk

3. Legal Aspect s (HSE- related)

3.1 Legal Compliance Lack of legislation;

Conflicts betweenGov. and NGO onsensitive areas;

Lack ofagreements withGov / NationalCompany forenvironmentalissues

Reputation None B 2 L No. ofprosecutions/fines

Updates oflegal register

OC2.8 Continuousmonitoring ofnew legislation

YES L

5. Safety

5.2 Transportation risk(see example No. 1 inthe text)

Helicopter distress /crash

People HC1.1. Assemblydesign coveredby functionalrequirements.

OC5.1. QualifiedContractor asper HSEclauses.

B 5 H Near MissReporting

Annual HSEAudit ofHelicopterService Co.

HC4.1require dualengine helicopter

Carry out a fit-for-purpose audit toContractorsorganization andpremises

YES M

5.4 Office-related risk(see example No. 2 inthe text)

Electrocution People HC1.2. Assemblylayout as perfunctionalrequirements.

HC3.1. Emergencyisolationsystem (circuitbreaker) pro-perly tested.

O 4 L Lost TimeInjury Freq.

Severity Rate

No. of fit-for-purposecertificates

OC2.8 regularinspectionprogram andrecord ofmalfunctions.

YES L



38/68



Current

RiskMeasures t o be implemented

Event

ID


ImpactArea ofImpact

Controls in place

Prob. Sev. Risk

PerformanceIndicators Recommended

Measures (*)Act ion

assignedResidual

Risk

6. Health

6.2 Unsuitable medicalemergency responsefor process relatedcasualties(see example No. 3 inthe text)

Suffocation (chemicals) People HC4.3. Rescue equip-ment availablebut a mainte-nance programis not evident.

OC5.2. Medical staffcovered bycompetencyappraisal, but

a fit-for-purpose reviewhas not beenrecentlyconducted.

B 4 M Near MissReporting

EER exercises

No. of processhigh potentialcasualties

No. ofcasualtiessuitably

rescued.

OC5.4 Minimumlevel of staffemergencyexperienceat staffchanges, inorder toassure 24Hcoverage in

emergency.

YES M



39/68


APPENDIX A2 RISK SCREENING KEY WORDS

Leadership Personnel Health Safety

Policy Drugs/Alcohol Substances Fire

Commitment Selection Asbestos ExplosivesCommunications Training Noise Road ravelTop-down Motivation Poisons Air travelElitism Competence Carcinogens Sea travelStandards Culture Stress DrowningGuidance Temporary Biological ElectricityTargets Experience Wild animals Hot workInformation Language Sewage

Confined

SpacesLessons Literacy Food/Water HeightsPlanning Quality Ergonomics ExcavationOrganization Quantity Lighting DivingControl Certification Vibration RiggingResponsibility Size/Strength VDUs HoistingFeedback Supervision Radiation ScaffoldingOpenness Stand-ins Hot/Cold Power tools

Remote Pressure

Terrain SteamLong hours Machinery

Guarding

Environment Engineering/Change Contractors Purchasing

Weather Change Contract type QA/QCSeasons Modifications Contractor quality Purchase ordersWaste Corrosion Experience Specifications

Disposal Erosion QA/QC ReceiptEnergy/Resource Stress Planning InspectionEmissions Metal fatigue Qualification StorageDischarges Structure Schedule HandlingWater Quality Personnel SegregationEIA/Regulations Design Communications Inventory



40/68


APPENDIX A2 RISK SCREENING KEY WORDS (continued)

Operating/Technical Emergency Monitoring Security

Simultaneous Fire/Explosion Audit TerrorismStart up Spill/Leak Auditor BombShut down Dispersion Technical ThreatIsolations Structural Limits TheftOne-off Well control Permit FraudUnusual Power Review LightingAssemble Collision Inspection CameraDismantle Weather General Hi-jack

Specialist Earthquake Critical PoliticsExpert Flood Hygiene ReligionShift changes Landslide Environment RevengeOverhaul Communications Analysis SabotageWorkover Epidemic Loss InvasionProcedures Medevac Statistics WarPractices Heart attack Reporting RiotInstructions Fatality Verification WeaponsGuidelines Media Follow-up Abduction

Support Feedback HostageLost ExtortionFacilities



41/68


APPENDIX A3: HAZARD CHECKLISTS

1. Plant and Equipment (including non-powered plant and hand tools)2. Materials and Substances

3. Place of Work4. The Working Environment5. The Method of Work6. Work Organization7. Hazards - Other Types

HAZARD CHECKLIST - 1

Hazards Associated with Plant and Equipment (includ ing non-powered plantand hand tools)

Category Type of Harm Examples of Hazards

Thermal BurnsFiresScaldsFrostbite

Hot / cold surface:Blow torchWelding flame/arcRefrigerant

Steam

Radiation Ionising:- Burns- Cancers- Blood disorders- SicknessNon-ionising:- Burns- Melanomas

- Cataracts- Static shock- Induced body currents

X RaysAlpha or Beta RaysNaturally occurring radioactive materialLow Scale ActivityNeutronsMicro waveRadio frequencyLaser

Ultra violetInfra redElectromagnetic (transformers, powercables)

e Hearing lossDeafness

Machine tools/equipmentHand tools



42/68




43/68



Hazards Associated with Materials and Substances

Category Type of Harm Examples of HazardsFire/ExplosionCombustion

BurnsDehydration

HydrocarbonsTimber stack(e.g. scaffold board store)Paper storeGreaseOily ragsPlastic foam

Flammablesubstances

BurnsDehydration

Hydrocarbon gases, condensate, oilsBottled hydrocarbon gases (e.g.acetylene)LubricantsDieselMethanolPaint/thinners/solventsHydrogen (e.g. battery room)Aromatic hydrocarbons (benzene,

toluene, etc)

OxidisingSubstances

Burns Explosive materialPyrotechnics (e.g. flares)Detonators

Health HazardsToxic Material

Acute:-Respiratory irritation-Chemical asphyxiation-Nervous system effects

-Narcotic effects-Damage to eyeChronic :-- Anaemia- Leukaemia

Hydrogen SulphideBenzeneMethanolIsocyanates

Corrosion InhibitorsDustPaintsDegreasing SolventsAnaerobic sealantPrimers



44/68


HAZARD CHECKLIST 2 (continued)

Hazards Associated with Materials and Substances


SensitisingMaterials

Acute:- respiratory and skin allergicreactions after sensitisation

IsocyanatesGluteraldehyde (biocide)TerpeneWelding/soldering fumes

PossibleCarcinogens

Chronic:- skin, lung cancers- asbestosis, mesothelioma

- dermatitis

AsbestosPolyaromatic hydrocarbons

Used engine oil

Asphyxiants Acute (suffocation) and chroniceffects on health

NitrogenCarbon dioxideArgon

Biological Acute:- Legionnaires disease- gastro-intestinal disorders

- food poisoningChronic:- asthma

BacterialViral

FungalBiological dusts (flour, hardwood)

Contact Cuts, abrasions

Burns, frostbite

SwarfRough timberConcrete blocksMolten metalFrozen food



45/68



Hazards Associated with Place of Work


Access/Egress TrippingSlipping

Falls

Damaged floorsTrailing cablesOil spillsWater on floorsIceDebris

Sloping surfaceUneven stepsChanges in floor level

Work at height Falls Fragile roofEdge of roofEdge of mezzanine floorWork on ladderErecting scaffoldHole in floor

Obstructions Striking against Low headroomSharp projections

Work over/nearliquids

Fall into substances:- Drowning- poisoning- suffocation

TankSumpWork over sea

Emergencies Entrapment during escape, eg from

fire

Locked exits

Obstructed egressesLong exit route

Transport Fatality, injury Motor vehicleAirMarineRail



46/68


Hazards Associated with the Working Environment


Light

(NB : alsoincreases risk ofcontact with otherhazards)

Eye strainArc eye

Cataracts

GlarePoor lighting

Stroboscopic effectArc weldingMolten metal

Temperature Heat stressHypothermiaSunburnMelanomaHypothermia

Cold roomOutdoor workHot weatherCold weatherWind chill factor

Work in rain, snow, etc.Noise Hearing loss

DeafnessTinnitus

Ambient Noise > 85 dB(A)Machinery noiseRelief valve noise

Confined space Asphyxiation Work in tankChimneyUnventilated roomVesselSilo

Ventilation "Sick Building Syndrome"NauseaTiredness

FumesOdoursTobacco smoke

Extreme (high/low) humidity


Hazards Associated with the Method of Work


Manual Handling Back injuryHernia

LiftingLoweringC



47/68



Hazards Associated with Work Organization

Category Type of Harm Examples of HazardsContractors

Injuries and ill health to employees bycontractors.Work Injuries and ill health to contractors'employees by work in premises

Work above employeesUse of harmful substancesContractors weldingProcess fumesServices (e.g. underground electricitycables)Stored hazardous materials

Organisation ofwork

Injuries to employees Monotonous workStressToo much workLack of control of job:- lack of supervision- lack of information- lack of instruction- lack of training- inadequate monitoringWork too demanding/high work rateCommunicationProvision of unsuitable equipment

Work in publicareas

Injuries and ill health of public Trailing cablesTraffic/plant movementObstructions to pedestriansWork above public


Hazards - Other Types



48/68


APPENDIX A4 CONTROL MEASURES GUIDANCE

Control measures should be applied as described in Section 5.4, using the hierarchy:

Elimination or SubstitutionEliminate the hazard; e.g. use of sodium hypochlorite solution instead of freechlorine gas for disinfectant purposes.

Hazard ReductionReduce the hazard with an alternative; e.g. use flame retardant scaffold boardswhere hot work may be taking place.

SegregationIsolate the hazard from people; e.g. fencing of excavations, machine guards.

ControlControl the hazard by introducing suitable measures, which may be in either orboth of the following two categories;

Personal controls - competence based (e.g. well trained staff)Organizational controls - rule based (e.g. adherence to work procedures)

Controlsshould be introduced using the following preferred sequence:

(a) Procedures, such as permit to work, emergency response, etc.(b) training and instruction(c) supervision(d) maintenance

MitigationProvide personal protective equipment (PPE) as necessary, e.g. hard hats,boots, gloves, harnesses to prevent falls from height, etc.



49/68


Contents

1. Health Hazards

2. Falling/Swinging/Dropping Loads

3. Electricity

4. Noise/Vibration

5. Emergency

6. Equipment Failure

7. Machinery/Equipment

8. Explosion

9. Fire

10. Human Error

11. Entry into Confined Space

12. Pressure

13. Ionising Radiation

14. Slip/Trip/Fall



50/68


1. Control Measures for Health Hazards

1) Atmospheric Monitoring2) Barrier Cream3) Breathing Apparatus4) Detailed COSHH Assessment5) Enclosure/Segregation of Contaminant

6) Ergonomic Assessment7) Forced Extract Ventilation8) Information9) Instruction10) Local Exhaust Ventilation11) Manual Handling Assessment12) Medical Surveillance/Screening13) Minimised Fume/Dust/Vapour Production14) Natural Ventilation15) Protective Clothing

16) Regular Cleaning/Decontamination17) Respiratory Protective Equipment18) Restricted Workplace Eating / Drinking / Smoking19) Restricted/Controlled Access to Workplace20) Substituted Safer Material21) Supervision22) Training

2. Control Measures for Falling/Swinging/Dropping Loads

1) Additional Suspension/Support Devices2) Adequate Lighting3) Banksman4) Bumper Protection5) Competent Lifting Operation6) Competent Rigging7) Failure Mode Effect Analysis (FMEA)8) Fall Restraint Device9) Load Monitoring

10) Maintenance Programme11) Movement Restraint Device12) Overhead Protection13) Overload Warning System14) Periodic Examination/Testing/Inspection15) General Issue Personal Protective Equipment



51/68


3. Control Measures for Electric ity1) Anti-static2) Classification of Hazardous Areas (Flammable Gases and Vapors) (Ref BS5345)3) Earth Monitoring4) Equipment & Fittings Constructed, Installed & Maintained for use in Potentially

Explosive Atmospheres5) Fusing

6) Insulation7) Isolating Transformer8) Isolation9) Phase Separation10) Residual Current Device11) Permit to Work/Limitation of Access12) Shielding13) Voltage Reduction14) Work Carried Out by Competent Person/s

4. Control Measures for Noise/Vibration1) Audiometry2) Design Out Noise/Vibration from Equipment3) Design Out Noise/Vibration from Task4) Detailed Noise/Vibration Assessment5) Enclose Noisy/Vibrating Equipment6) Engineering Controls7) Hearing Protection Zone8) Noise/Vibration Exposure Monitoring

9) Noise/Vibration Survey10) Restricted Access to Noisy/Vibrating Areas11) Selection and use of Appropriate Hearing Protectors12) Warning Signs13) Work Patterns e.g.: Defined Spells of Exposure

5. Control Measures for Emergency1) Adequate Planning2) Competent Person/s in Charge3) Platform PA and Alarm System

4) Emergency Response Procedures5) Drills/Exercises/Training6) Provision of Adequate EER Facilities

6. Control Measures for Equipment Failure1) Appropriate Materials (Fit for Purpose)2) Certified Equipment/Materials



52/68


8) Warning Signs/Notices8. Control Measures for Explosion 1) Electrical Equipment and Fittings Constructed, Installed and Maintained in Accordance

with BS53452) Blast Wall/Enclosure3) Deluge on Confirmed Gas Detection4) Earthing/Earth Monitoring

5) Exclusion of Ignition Sources6) Explosion Venting/Relief7) Inert Gas Blanketing8) Leak/Spillage Detection - Portable Gas Monitor9) Leak/Spillage Detection - Gas Detection System10) Purging11) Security of Access to Explosive Materials12) Permit to Work System13) Use of Non-Sparking Tools14) Safety/Fire Watch

15) Pressure Relief Panels

9. Control Measures for Fire1) Automatic Fire Doors2) Classification of Hazardous Areas Ref. BS53453) Containment/Segregation of Flammable Materials4) Emergency Shut Down System5) Exclusion of Ignition Sources6) Exclusion of Oxygen Sources

7) Fire Extinguishing Protection Systems - Fire, Water, CO2, Halon8) Passive Fire Protection9) Fire Watch10) Fire and Gas Detection System11) Depressurization/ Blowdown System12) Inspection/Certification of Premises13) Self-Closing Fire Doors14) Portable Fire Extinguishers15) Portable Gas Monitors16) Use of Fire Blankets

17) Permit to Work System

10. Control Measures for Human Error1) Adequate Rest Periods2) Audit Performance3) Defined Competence Level



53/68


8) Adequate Lighting9) Safe Access/Egress10) Permit-To-Work System12. Control Measures for Pressure

1) Appropriate Design/Construction Materials2) Barriers at Safe Distance

3) Certified Equipment/Materials4) Periodic Inspection/Testing Examination5) Pressure Monitoring6) Overpressure Protection e.g.: PSV, Bursting Disc, Pressure Relief Panels7) Safe Working Pressure Specification

13. Control Measures for Ionising Radiation

1) Competent Personnel2) Dose Monitoring

3) Health Surveillance4) Local Rules5) Personal Protective Equipment6) Adequate Training7) Appointed Radiation Protection Supervisor8) Permit to Work System9) Warning Signs10) Area Cordoned Off (Three Dimensionally)11) Non-essential Personnel Cleared12) PA Announcements

14. Control Measures for Slip/Trip/Fall

1) Adequate Lighting2) Appropriate Footwear3) Openings Covered4) Edge Protection/Rails/Barriers5) Fixed Platform/Ladder6) Good Housekeeping

7) Harness, Line and Attachment8) Non-slip Surface9) Periodic Cleaning10) Periodic Inspection11) General Issue Personal Protective Equipment12) Warning Notices.



54/68



APPENDIX A5 RISK ASSESSMENT EXAMPLE

NO. HAZARD CONSEQUENCE EXISTING

CONTROL

RISKANALYSIS

(EXISTING CONTROLS)

REQUIREDADDITIONAL

CONTROLMEASURES

RISKANALYSIS

(WITH EXTRACONTROLS)

EVALUATION

SEVERITY LIKE-LIHOOD

RISK SEVERITY LIKE-LIHOOD

RISK

1

Fire of oilproducing well

Major damage toassets, potentialfor multiplefatalities andserious injuries

Reliable ESD system,

Reliable fire detectionsystem

Reliable FF system

Operating procedure inplace as Permit to Work

System

5 C 5C Conduct morefrequent firewatertests

Ensure ESDsystems regularly

tested inaccordance withspecification

3 C 3C The control measuresmust be fully maintainedto keep them as reliableas possible and reducehuman error

2 Fire ofproducing ortest separator

Extensive damage(the separator canblow) and

possibility ofmultiple fatalities(the separatorsare located on theplatform D10manned all thetime)

PreventiveMaintenance Systemand inspections of

separators andequipment (PSV,ESD, instruments etc.)Reliable ESD system,


5 C 5C Increase frequencyof inspections ofequipment

Conduct morefrequent firewatertests

3 C 3C Full implementation ofExisting and AdditionalControl Measures

Required



55/68



NO. HAZARD CONSEQUENCE EXISTING

CONTROL

RISKANALYSIS

(EXISTING CONTROLS)

REQUIREDADDITIONAL

CONTROLMEASURES

RISKANALYSIS

(WITH EXTRACONTROLS)

EVALUATION

Reliable FF system

Operating procedure

In place as Permit toWork System

Enhance training offirefightingpersonnel

3 Fire propagatefrom MWP4 toMWP5 or viceversa

Major damage toassets, potentialfor multiplefatalities andserious injuries

These Jackets areclose to eachother

Reliable ESD system,reliable fire detectionsystem and reliableFF/Cooling system toreduce the thermalradiation in case of fireOperating procedure

in place as Permit toWork System

5 C 5C Enhancecommunicationsbetween platforms

Exchangeinformation onPermits to Work

prior toauthorization

Develop jointEmergencyResponse Procs

3 C 3C Full implementation ofExisting and AdditionalControl MeasuresRequired

4 Pool fire on thesea

Major damage toassets, potentialityof multiplefatalities andserious injuries

Reliable ESD system,


Reliable FF system

5 C 5C Review extent ofimplementation ofPermit To WorkSystem

3 C 3C Full implementation ofExisting and AdditionalControl Measures

Required



56/68


APPENDIX A6 HSE WORK PLAN EXAMPLE

1 Description of Activity

This generic risk assessment and control arrangements covers the erection and

dismantling of scaffolding on a construction site for work at heights carried out byemployees and contractors.

2 Persons at Risk

Personnel erecting and/or dismantling the scaffolding will be especially at risk from thefollowing hazards. Any other person in the area could also be at risk from falling objectsor scaffolding collapse.

3 Hazards

The significant hazards associated with the erection/dismantling of scaffolding are :-a) Scaffolding Collapseb) Adverse Weather (High Wind, Rain, Snow)c) Falling Objectsd) Person(s) Falling from Scaffoldinge) Inadequate Lightingf) Open Grating (if applicable)

g) Access/Egressh) Trapping of Body Parts Between Scaffolding Components or Between

Components and Surfacesi) Striking People or Equipment with Scaffolding Componentsj) Striking/Obstructionsk) Contact with Hot/Cold Surfaces

Others hazards include, but are not restricted to :-- Particles (Dust from Board Cutting, Debris in Tubing)- Cuts/abrasions from Sharp Edges, Swarf, Contact with Hand Saws- Extreme Ambient Temperature- Stacking/Storing of Scaffolding Components

4 Risk Analysis and Evaluation



57/68


Competent supervisors shall be employed to carry out inspections. All scaffolding shallbe erected, altered or dismantled by competent Scaffolders or under the directsupervision of a competent person.

The Site Construction Supervisorshall ensure that the following equipment is providedand maintained:-

- safety harness for use when working above 2m.- protective clothing (including safety helmet, safety footwear, gloves, warm

weather during extreme cold weather).- eye protection.- hearing protection (if required by the Workplace Noise Assessment).- communication (safety watch to control room), if hot work is involved.

The work plan shall allow for sufficient rest periods during periods of extreme hot/coldweather.

5.2 Management Contro l

No person shall erect, alter or dismantle any scaffolding unless authorized by the (appropriatesenior person as above)or appointed representative. The supervisor must ensure the followingwhen scaffolding is to be erected, altered or dismantled:-- Conformance with BS 5973 : 1993 Code of Practice for Access and Working Scaffolds

and Special Scaffold Structures in Steel.

- Inspection and subsequent tagging of approved scaffolding.- Compliance with load bearing capacity.- Work is suspended and the site made safe during extreme weather conditions.- Inspection of scaffolding prior to continuing work following extreme weather conditions.- Standby vessel is on location, safety watch posted and overboard discharges noted, if

work over the sea.- Compliance with manual handling assessment.- guard rails and toe / kicker boards are fitted.- scaffolding area is barriered off, warning tape/notices are posted and restricted access

imposed.- vulnerable/fragile equipment within the area are noted.- secure means for lifting/handling/storing of scaffold components are employed.- high standard of housekeeping.- materials and tools are removed from or secured to the scaffolding when not in use.- suitable fall arrestors to be worn when working above 2m.

ladders are sec red



58/68


6.1 Inspections

The Site Construction Supervisor shall ensure that the equipment, facilities and workingpractices are maintained to these standards by arranging regular inspections by a competentperson(s).

All new or hired scaffolding components will be inspected and approved for use by a competentperson prior to use. A record of the inspection shall be made and filed in the Site ConstructionOffice.

All scaffolding shall be inspected at 7 day intervals by the supervisorand a record of inspectionsmade and filed in the Site Construction Office.

6.2 Risk Assessment Review

This risk assessment and arrangements shall be reviewed at intervals of 3 months or after any

reported complaint, incident or accident, or whenever the activity changes.



59/68



APPENDIX A7: RISK ASSESSMENT FORM

Location: Task/Activity:

Completed by: Date:

Checked by: Date:

Line Manager: Date:

NO. HAZARD CONSEQUENCE

EXISTING CONTROL RISKANALYSIS (EXISTINGCONTROLS)

REQUIREDADDITIONALCONTROL MEASURES

RISKANALYSIS(WITH EXTRACONTROLS)

EVALUATION

SEVERITY LIKELIHOOD RISK SEVERITY

LIKE-LIHOOD

RISK

1

2

3

4



60/68


APPENDIX B: RISK MATRICES

APPENDIX B1: The Event Risk Screening Matrix.APPENDIX B2: The Risk to personal Assessment Matrix.APPENDIX B3: The Risk to People (E&P Operations) Assessment Matrix.

APPENDIX B4: Social Responsibility MatrixAPPENDIX B5: The Environmental risk matrixAPPENDIX B6: The Asset risk matrixAPPENDIX B7: The Reputation risk matrix

APPENDIX B8: Social Responsibility



61/68



APPENDIX B1: EVENT RISK SCREENING MATRIX

Consequence Increasing Annual Frequency0 A B C D E

Practically non-credible

occurrenceRare occurrence

Unlikelyoccurrence

Credibleoccurrence

Probableoccurrence

Likely/Frequentoccurrence

Severity

People

Environ.

Assets

Reputation

Could happen in

E&P industry

Heard of in

E&P industry

Has occurred at

least once in

Company

Has occurred

several times in

Company

Happens several

times/y in

Company

Happen

several

times/y in one

location

1 Slight healtheffect / injurySlighteffect

Slight damage Slightimpact

Continuous Improvement

2 Minor healtheffect / injury

Minoreffect

Minor damageMinor

impactRisk Reduction Measures

3 Major healtheffect / injury

Local

effectLocal damage

Local

impact

4 PTD (*) or 1fatality

Majoreffect

Major damage National impact

Intolerable Risk

5 Multiplefatalities

Extensiveeffect

Extensivedamage

Internationalimpact

(*) Permanent Total Disability



62/68



APPENDIX B2: PERSONNEL (TASK) RISK ASSESSMENT MATRIX

0 A B C D E

Not Applicable Not Applicable Could occur,

when

additional

factors are

present;

otherwise

unlikely.

Not certain to

happen but an

additional

factor may

result in an

accident.

Almost

inevitable than

an accident

would result

Almost

inevitable that

more than one

accident

would result

Severity

Personnel (Task) Risk

N/A N/AHas occurredat least oncein Company

Has occurredseveral timesin Company

Happensseveral times

a year inCompany

Happensseveral

times/y in onelocation

1 Slight health effect / injury

(NOT APPLICABLE)Continuous Improvement

2

Minor health effect / injury:offsite medical treatment or LTA;

up to 10 days off.Agents have reversible effects to health.

3

Major health effect / injury:more than 1 LTA; up to 30 days off.

Agents have irreversible effects to health:noise, manual handling, toxics, etc.

Risk Reduction

Measure

4PTD (*) or 1 fatality:

agents are capableof serious disability or death

5Multiple fatalities

from an accident or occupational illness (e.g. chemical asphyxiationor cancer or epidemic diseases)

Intolerable Risk

(*) Permanent Total Disabil ity



63/68



APPENDIX B3: RISK TO PEOPLE (OPERATION) ASSESSMENT MATRIX

0 A B C D E

1 occ/y (1)

Severity

People (Process Risk)(usually in the open) Always outcome

of 2 or more

concurrent failures

Usually outcome

of 2 concurrent

failures

(Very Low

Probability)

Likely outcome of

2 concurrent

failures

(Low Probability

Could be outcome

of 2 concurrent

failures

(High Probability

Could be outcome

of a single failure

Is outcome of a

single failure

1 Slight health effect / injury Continuous Improvement

2 Minor health effect / injury Risk Reduction Measures

3 Major health effect / injury

Compulsory

reduction measuresfor 3rd parties

onshore

4Permanent Total Disability or 1 fatality

(small exposed population)

Intolerable for 3rd

parties onshore

5Multiple fatalities

( large exposed population )Intolerable Risk

(1) Frequencies expressed in concurrencies per year



64/68



APPENDIX B4: SOCIETAL RISK MATRIX

Societal Risk 0 A B C D E

S

everity

Radiation

(kW/m2)

(assumingunobstructed

escape to repair)

Flash Fire Overpres-

sure

(mbar)

Toxicity

(ppm)

(based on 30min event

duration)


65/68



Appendix B5: Environmental Risk Management

0 A B C D E

Severity

Environment 1 occ/y

1

Slight effecta) No stakeholder impact -b) temporary impact on the area.

c)Involved area < 0.1 sq mile(0.26km2)

d) Onshore spill (1) < 1 m3 e) no sensitive impact on ground.

Continuous improvement

2

Minor effecta) Some local stakeholder concern- b) 1 year for natural recovery c)

impact on small no. of not compromised species.d) Involved area < 1 sq mile(2.6km

2)

e) onshore Spill (1)l < 10 m3f) impact on localized ground.

Risk reduction measures

3

Local effecta) Regional stakeholder concern b)1-2 years for natural recovery c) 1

week for clean-up d) threatening to some species- e) impact onprotected natural areas. f) Involved area < 10 sq miles (26 km2) g)

onshore spill (1) < 100 m3.

4

Major effectA) National stakeholder concern b) impact on licenses c) 2-5 yearsfor natural recoveryd ) up to 5 months for clean-upe) threatening to

biodiversity f) impact on interesting areas for science. g) Involved area 5 years for natural recovery d)> 5 monthsfor clean-upe )reduction of biodiversityf) impact on special conservation areas.

g) Involved area > 100 sq miles (260 km2) h)- Onshore spill (1) > 1000m

3.

Intolerable risk

1) To be reduced of a factor 10 for offshore spill and a factor 100 for sensitive areas.


HSE IMS P d N 02 P 66 f 68


66/68



APPENDIX B6: ASSET RISK MATRIX

0 A B C D E

1 occ/y

Sever

ity Risks to Assets/Project

Objectives costs in USD

figures below shall not be combined forderiving the value of a human life!

Always outcome of

2 or more

concurrent failures

(*)

Usually outcome

of 2 concurrent

failures (*)

(Very Low

Probability)

Likely outcome of

2 concurrent

failures (*)

(Low Probability

Could be

outcome of 2

concurrent

failures (*)

(High Probability

Could be

outcome of a

single failure

Is outcome of a

single failure

1 Slight damageNo disruption to operations/business. Continuous improvement

2Minor damage

Possible short disruption of operations/business:repair cost < 200000; production downtime < 1 day.


3Local damage

The unit has been repaired/replaced to resume operations:

repair cost < 2500000; production downtime < 1week.Damage to escape ways.

4Major damage

Long time/Major change to resume operations/business:repair cost < 25000000; production downtime < 3 months.

Major inquiry for the damage cost. Damage to escape ways.

5

Extensive damageTotal loss of operations/business.

Revamping necessary to resume the process:repair cost > 25000000; production downtime > 3months.Extensive inquiry for the damage cost. Total loss of facility.

Intolerable risk

(*) failure of Critical system protecting people (escape ways to temporary refuges, control systems, emergency systems, etc)




67/68



APPENDIX B7: REPUTATION RISK MATRIX

0 A B C D E

Could happen

in E&P industry

Heard of in

E&P industry

Has occurred at

least once in

Company

Has occurred

several times in

Company

Happens

several times/y

in Company

Happen several times/y

in one location

Severity

ReputationNon-credibleoccurrence Rare occurrence Unlikely

occurrenceCredible

OccurrenceProbable

occurrence

Likely/ Frequent Occurrence

1Slight impact

Minor and short lived impact in the locality

Continuous improvement

2Minor impact

Some loss of reputation in the area, which should be recovered

3Local impact

Significant potentially long lived damage to the regionalreputation.


4

Major national impact

Serious/permanent damage to the ability of the Company to sustain business positionin the location, some broader implicationsfor the Company

5Major i nternational impact

Potential loss of future business position in the location/region andor lasting significantdamageto broader Eni image

Intolerable risk




68/68

g


APPENDIX B8: SOCIAL RESPONSIBILITY

This aspect covers a range of subject areas including; business ethics, communities, workforce/ labor, human rights and indigenous rights and securityforces. Consequences of poor management, breaches of legislation or standards or incidents in this respect will essentially result in loss to people, assets orreputation of one form or another.

Where it is necessary to make an assessment of risk the risk/ scenario in question should be compared against the appropriate matrix and criteria.

Risk Screening and Assessment Procedure - Petrobel

Documents

Transcript of Risk Screening and Assessment Procedure - Petrobel