Self-Verification Handbook A4 - May14 v10a_LowRes

GOOSelf-Verification HandbookBP Guide 100161Copyright © 2014. BP International Ltd. All rights reserved. Issue 1, May 2014

For internal use only

© 2014 BP International Ltd.

These materials were prepared by BP International Limited, and its affiliates. BP International Limited, its affiliates and employeesdo not:

A. Make any warranty or representation, expressed or implied with respect to the accuracy, completeness or usefulness of theinformation contained in these materials, or that the use of any information, apparatus, method or process disclosed in thesematerials may not infringe on third-party rights, or

B. Assume any liability with respect to the use of, or for any and all damages resulting from the use of, any information,apparatus, method or process in these materials.

For internal use only. © 2014 BP International Ltd. Global Operations Organization – Self-Verification Handbook

OMS FocusAreas

2.3 Operating Discipline

• Shift Handovers page 5

• Locked Valves 9

• Operational Risk Assessments 15

• Overrides 21

4.1 Procedures and practices

• Procedures – Operations & Maintenance Procedures 27

4.5 Control of Work

• Lifting Operations 33

• Permits 39

• Isolations 47

Global Operations OrganizationSelf-Verification Handbook


Global Operations Organization – Self-Verification Handbook

1

Introduction



Site Managers and Operations Leaders

I believe that the safety performance of our operations isa true reflection of our leadership. What we place emphasis on and the personal ownershipwe demonstrate, impacts how our teams respond andoperate. That’s why setting expectations and demonstrating apersonal commitment to conforming to OMS is one ofthe key aspects of leadership in a high hazard operatingenvironment. This includes demonstrating the right behaviours andasking the right questions to drive safe, compliant andreliable operations. It also includes a continuous effort to self-verify the healthof our operations at our sites and whether the work wecarry out is done in conformance with applicable BPrequirements; this is a requirement of OMS 8.2Assessment and Audit.

To further drive rigor and discipline into ouroperations, we are requesting SiteManagers to:• Use this handbook to support a

standardised, systematic approach to self-verification in eight key areas of ouroperations.

• Set clear and consistent expectationsaround operational performance.

• Commit to personally taking action todrive improved operational conformanceto OMS 8.2 Assessment and Audit.

• Systematically record your findings andagreements and discuss these with yourteams to understand how we canimprove.

• Demonstrate personal commitment toacting on areas identified forimprovement.

This Global Operations Organization (GOO)Self-Verification handbook is intended toassist Site Managers in preparing andcarrying out self-verification in these eightkey areas to underpin safe, compliant andreliable operations. It has been designed tohelp you focus on a few key principlesthrough tailored question sets and theexpected information to demonstrateconformance to each line of enquiry. Thehandbook applies to all of our GOO onshoreand offshore operated assets. Please note,to maintain consistency it also aligns to theLeadership Structured Field Assessmenthandbook.Please actively use the handbook at yoursite. Thank you for your commitment to self-verification, and for your continued efforts indelivering safe, compliant and reliableoperations.

Fuzzy Bitar

Fawaz (Fuzzy) Bitar

Head of Operations

2

Strategy



This handbook is designed to assist Site Managers in self-verification of the operation of our facilities. Self-verification is carried out by the Line as part ofconformance with OMS 8.2.

Self-verification forms the first of BP’s ‘three lines ofdefence’, together with Deployed Assurance (second line)and Audit (third line). Guidance on a simple self-verification process that can be used consistently acrossoperations is given on page 4 of this handbook.

This handbook is focused on eight key areas that havebeen identified, where a failure in a barrier is consideredto have most potential impact in failing to prevent anincident.

Eight protocols, set out in this handbook have beendeveloped and GOO operated sites shall use the attachedprotocols when conducting self-verification in thefollowing eight areas.

1. Shift Handovers

2. Locked Valves

3. Operational Risk Assessments

4. Overrides

5. Procedures

6. Lifting

7. Permits

8. Isolations

As a Site Manager self-verification is your opportunity to:• Demonstrate leadership commitment to safe, compliant and reliable operations.• Drive conformance to the standards and requirements in our operations.• Provide rigor and discipline as well as challenge complacency.• Self-assess our operating discipline and operating culture.• Foster continuous improvement in the way we operate.

Self-verification challenges us to demonstrate, in the field and in our control rooms, that weare conforming to our standards and requirements.

As a Site Manager, you have a key role to play in communicating BP’s core values, andreinforcing BP standards and requirements.

Fuzzy Bitar

3



• Site managers (as well as participating in thisself-verification process themselves), alsoappoint additional personnel to undertakethese reviews from Team Leader, Supervisorand Technician populations.

• Site Managers also define a set frequency forconducting the self-verification checks anddefine a sample size in each of the eight areasthat is appropriate for the site. Examplecalendars can be found in the Appendix.

• Those undertaking a self-verification check donot review samples that include their ownwork.

• The observations from each self-verificationcheck are discussed at one of the daily sitemeetings.

• There is a review with the AOMs and this isincorporated into one of the existing meetingsin the AOM meeting cadence.

• The frequency of each self-verification check isscheduled locally to adequately test thedefined monthly sample, while avoidingoverload.

• The frequency of each self-verification check isadjusted where appropriate based on theactivity set for the site and risk profile.

• Where self-verification checks identify issuesrequiring corrective action, those actions arerecorded together with the relevantobservations.

The performance of the self-verification processshould be a standing agenda item at dailyoperations meetings and the monthly leadershipperformance meeting. Items for discussioninclude:

• Performance against schedule.

• Observations and corrective actions.

• Close out status of corrective actions.

The self-verification process and documentationwill be subject to a performance improvementcycle (PIC), with the Regions, six months fromimplementation.

Process

Self-verification process

Guidance regarding the process for conducting self-verification inspections, including who conducts these is setout below. Frequency and participants are for the Region todetermine.

The following guidance is intended to assist Regions in theirself-verification:

4

Shift

Handovers

OMS Focus Areas

2.3Operating Discipline




5

Disclaimer: The observations identified during self-verification reflect the high level conclusions madeat the time of the assessment. These conclusions may change upon further review and inquiry.

6For internal use only. © 2014 BP International Ltd. Global Operations Organization – Self-Verification Handbook

2.3 Operating Discipline – Shift Handovers – 1/3

2.3 Operating Discipline – Shift Handovers

Context

Shift handovers and the communication of operationalstatus are critical to the safe operations of an asset.Communications include sharing key safety informationin a manner that enables continuous stable operationsthrough the shift change over.

Principles

1. A written shift handover covers all roles and all major events from the previous shift.2. The shift handover can be face-to-face at the job site where practical.3. Safety events, work status, isolation changes, permit status and maintenance status are included in

the shift handover.4. Operational risk assessments, abnormal situations, and overrides are included in the handover.

No. Questions / TasksAnswer

(Y/N/Partly)Observations Actions

i Are the requirements for shift handovers documented?

e.g. in approved and up to date procedures.

Areas to test:• Personnel are aware of the documents and can find them.

ii Are personnel familiar with the content and do they demonstrate

knowledge of requirements applicable to their role in particular?

Areas to test:• Person understands their role in meeting the requirements.• Person can explain the key priorities for the next 24 hours.

iii Is a written or electronic system in place for recording shift handovers?

7Disclaimer: The observations identified during self-verification reflect the high level conclusions madeat the time of the assessment. These conclusions may change upon further review and inquiry.




iv Do the records show that team members from the off-going shift are

completing the written or electronic handover properly and the on-

coming team members are accepting it?

Areas to test:• The handovers are being physically signed or electronically “accepted’’ by

on-coming shift personnel to confirm understanding of facility status.• The records show that all shift members are having a handover from the

equivalent role of the previous shift as well as meeting collectively to reviewthe facility status.

• Any amendments are being signed and dated.

v Do the handovers that you have checked cover the minimum

information requirements?

Areas to test:• Check all the minimum information requirements that apply, e.g. safety

events, work status, isolation changes, permit status, maintenance status,operational risk assessments, abnormal situations, overrides and lockedvalves and key business planning

Suggested tasks:• Review a sample of handover logs.• Review a sample of the team leader’s log books.• Review a sample of the e-Log where used.


For internal use only. © 2014 BP International Ltd.Disclaimer: The observations identified during self-verification reflect the high level conclusions madeat the time of the assessment. These conclusions may change upon further review and inquiry.



8

Area / Shift / Location / Document Reviewed: Review completed by: Date:



vi Are the shift-handovers done with the right personnel in the right

conditions?

Areas to test:• The handovers are occurring face-to-face or by phone where this is not

possible.• The environment is suitable for an effective handover, e.g. there are few

interruptions and easy access to the log books. • Individuals are satisfied with the amount of time allotted to shift handovers.

Test this with more than one person.• The shift supervisor or team leader holds a meeting to jointly agree asset

status and priorities for the shift.• Incoming and outgoing priorities are communicated and recorded.

Suggested task:• Sit in on a handover meeting to check the off-going and on-coming teams

are having a structured conversation. Ensure that they are covering all therelevant points and that these have been discussed and understood.

Locked Valves(Managing high/lowpressure interfaces)

OMS Focus Areas





9



2.3 Operating Discipline – Locked Valves (Managing high/low pressure interfaces) – 1/5


10

2.3 Operating Discipline – Locked Valves (Managing high/low pressure interfaces)

Context

The use of locked valves during normal operation is used to controlcritical valve positions for safe operations.

Reference documents

EP SDP 4.5 - 0005

Principles

1. A register exists of all locked open-locked closed valves.2. A program is in place to monitor the status of locked valves.3. A higher level approval process exists for removing or changing the position of locked valves.



i Are the requirements for Locked Valves documented?





Areas to test:• Individuals understand their role in meeting the requirements.• Individuals understand why locked valves are used, e.g. to control critical

valve positions, high pressure/low pressure interfaces, possible chemicalmixing and reaction or pressure relief valve isolation.

Suggested tasks:• Select a sample of technicians to verify that they understand the minimum

requirements for this task.






iii Do the Piping and Instrumentation Diagrams (P&IDs) show the locked

valves?

iv Is a locked valve register available, accurate, up to date and being used?

Suggested tasks:• Review relevant logs to ensure that regular locked valve confirmation checks

have been signed off at the intervals stated in the documentedrequirements.

• Select a small sample of out-of-position valves. Confirm that the referenceICC is still in place or the procedure is still in progress and that the valveposition is correctly recorded in the register and labelled in the field.

• Select a small sample of valves from the register and confirm the followingin the field:a) Each valve is labelled as a locked valve.b) The locked valve label is attached to the valve and not the locking device.c) Each valve’s position matches the current position in the register. d) The tag number in the field matches the tag number on the register and on

the P&ID.e) The air or hydraulic supply is locked in the desired position.f) The key numbers in the field match the numbers on the register.

v For the sample selected in question iv, is all the required information

recorded in line with requirements, e.g. tag numbers, signatures, dates,

correct level of approvals and key numbers?

Suggested task:• Confirm that all out-of-position valves in the sample taken reference an ICC

or procedure




12



vi Are the associated Management of Change (MoCs) and risk

assessments, operating procedures or ICCs available for changes in

locked valve positions?

Areas to test:• Individuals know that removing locks on locked open or locked closed valves

need to be controlled. These valves are operated only in exceptionalcircumstances, e.g. at start-up and shut-down for maintenance.

• Individuals are also aware that moving these valves should be controlled byoperating procedures, ICC or temporary MoCs and they are required to bereturned to normal operating status as soon as possible and then monitoredto be in place.

• An MoC and risk assessment, ICC or approved procedure was completedfor changing a locked valve position. Check that the appropriate person orpeople approved and authorised it before the change was implemented.

Suggested task:• Select a locked valve where the desired position was changed recently,

either temporarily or permanently. Review the associated risk assessmentfor this change. You may find this in the MoC, ICC or approved procedure.

vii Do the locking mechanisms meet the documented requirements?

Areas to test:• Acceptable forms of locking mechanisms are in place e.g. chain and

padlocks, wire locking loops that require considerable effort to force thevalve from the locked position. Valves are fitted with locking bar or tab toallow for fitting of a suitable lock if required. Cable ties are not allowed.

Suggested task:• Select a locked valve where the desired position was changed recently,

either temporarily or permanently. Review the locking device in the field.






viii Are the keys for the locked valves managed in a controlled way?

Areas to test:• A key management process is in place.• Keys are managed in a controlled way, that is, they are stored where

indicated and labelled.• Access to keys is controlled in line with requirements, e.g. only certain roles

have access to the keys.

Suggested tasks:• Verify with a sample of technicians that they fully understand the process

for managing keys.• Check the physical location where the keys are stored. Verify that it is

secure and managed in line with the requirements.

ix Are personnel aware of what is required to operate a locked valve?

Areas to test:• Personnel know about the potential impact on connecting systems if a

locked valve position is changed, e.g. on high/low pressure interfaces or ifthe locked valve protects more than one system.

• Personnel are aware of who is required to approve or authorise the changein a locked valve position. Examples include needing an MoC topermanently change a locked valve position or changing the locked valveposition for a long time if the system is out of service.

• Personnel are aware when they need higher levels of approval, e.g. theyrequire a process engineer to review a change in the position of a lockedvalve.

Suggested tasks:• Select a sample of technicians to verify that they understand the minimum





14




x Are changes to locked valves being appropriately communicated?

Areas to test:• Off-going and on-coming shift teams discuss any changes to locked valve

positions at the shift handover.• Shift handover documentation refers to changes in locked valve positions• Site leadership is tracking locked valves, e.g. the KPIs include the number of

non-conformant locked valves found as a percentage of the valves audited.

Suggested tasks:• Select a sample of personnel to verify that they understand the

communication requirements for locked valves.

xi Is the locked valve status monitored in the field?

Areas to test:• A schedule for structured operator rounds is in place.• The schedule is being followed, e.g. signatures are in place to show that

operators have checked all locked valves.

Operational Risk

Assessments

(ORAs)



OMS Focus Areas



15



2.3 Operating Discipline – Operational Risk Assessments (ORAs) – 1/5

16

2.3 Operating Discipline – Operational Risk Assessments (ORAs)

Context

Operational Risk Assessments detail temporary abnormaloperating conditions. Abnormal operating conditionsrepresent a potential risk to safe and compliant operationsand need to be managed carefully to prevent incidents.

Reference documents

SDP EP 4.5-0006

Principles

1. ORAs are recorded in a register.2. ORAs are positively communicated and handed over from shift to shift until they are removed.3. Mitigating measures are identified and monitored while ORAs are live.4. ORAs are approved by an appropriate level of the organization.5. ORAs form a part of the management information and KPIs, and are reviewed regularly by leadership.



i Are the requirements for Operational Risk Assessments documented?





Areas to test:• Individuals understand their role in meeting the requirements.• Individuals understand why ORAs are used and what they do, e.g. detail

temporary abnormal operating conditions.

Suggested task:• Select a sample of technicians to verify that they understand the minimum


iii Is a list of live ORAs documented and available?

Areas to test:• A register of live ORAs is available, e.g. on the CoW system.






iv Is all the required information recorded in line with requirements,

e.g. tag numbers, signatures, dates and correct level of approvals.

Areas to test:• The ORA is current and reflects the actual site conditions.• The normal and abnormal conditions are clearly stated.• The ORA states the equipment that is faulty and describes the reason for

the abnormal condition.• The ORA considers if it is safe to continue to operate with the abnormal

condition. • The ORA’s duration and endpoint are recorded. Check these dates are

accurate and are not overdue.• The ORA is approved by the relevant people in line with requirements.• All the required information is recorded in line with requirements, e.g.

signatures, dates and the correct level of approvals and authorisers.

Suggested task:• Select an ORA that has not been self-verified recently by this self-

verification process and confirm that the areas tested above are accurateand complete in their information.




18



v Has the risk been adequately understood?

Areas to test:• The risk assessment team was adequate, e.g. it included the relevant

discipline engineer and was led by a trained facilitator.• The hazards are clearly stated in the ORA.• The potential consequences of continued operation are clearly stated in the

ORA.• The ORA is approved at the correct level as per requirements. The

approvers accept the risk of continuing to operate with an abnormalcondition.

• The ORA refers to other existing ORAs on the same system, so thecumulative risk has been considered.

• Changes in conditions are in line with the ORA or changes have beenrecorded in the ORA.

• Any active overrides on the system are recorded and considered in ORA.• A formal documented risk assessment process is in place for extending

ORAs beyond their target date with the justification documented.Consideration is given to formal MoC for long term ORAs.

Suggested task:• Review the list of all the live ORAs in place. Confirm that the cumulative

impact of the ORAs has been considered.






vi Are the agreed controls or mitigation measures in place?

Areas to test:• The controls or mitigation measures set out in the live ORA are in place.• The control or mitigation measures agreed in the sample of ORAs that you

review match what exists in the field and monitoring requirements havebeen identified, signed and dated.

• All barriers that are cited as providing a mitigation whilst an ORA is in placeare active and maintenance on them is up to date.

Suggested task:• Review the list of the agreed controls or mitigation measures in the ORA.

Confirm that they are in place in the field, are operational and are beingmaintained in line with their maintenance routine.

vii Are the live ORAs being monitored and controlled?

Areas to test:• Evidence that the work team has referred any extensions or additions to the

ORA to an appropriate approval authority.• Evidence that any monitoring requirements have been completed and

recorded.

Suggested task:• Select a sample of technicians to verify that they understand the

requirements within the ORA.




20




viii Is the status of live ORAs being appropriately communicated at shift

handover?

Areas to test:• Off-going and on-coming shift teams discuss any changes to ORA status.• Site leadership is tracking ORAs, for example, the KPIs include the number

and duration of ORAs.

Overrides




OMS Focus Areas


21



2.3 Operating Discipline – Overrides – 1/5

22

2.3 Operating Discipline – Overrides

Context

Overrides, sometimes referred to as inhibits, of our Safety RelatedControl Loops, Safety Related Alarms (SRAs) and Safety InstrumentFunctions (SIFs) represent a potential risk to our operations. To helpensure safe operations, overrides are minimised and carefullymanaged to help reduce the risk of a process safety incident.

Reference documents

GP 30-47, GP 30-81, GP 48-03, GN 30-813

Principles

1. Safety related control loops, SRAs and SIFs overrides are managed by a Safety Override RiskAssessment (SORA) process.

2. As part of the SORA process:• Overrides are positively communicated and handed over from shift to shift until they are

removed.• Mitigating measures are identified and monitored while overrides are live.• Overrides are approved by an appropriate level of the organization.• Overrides form a part of the management information and KPIs, and are reviewed regularly by

leadership.



i Are the requirements for the application of Overrides documented?

e.g. in an approved and up to date SORA procedure.

Areas to test• Personnel aware of the documents and know where they can find them.



Areas to test:• Individuals understand their role in meeting the requirements.• Individuals understand that overrides represent a potential risk to our

operations.• Individuals understand that all overrides need to be risk assessed to help

ensure that it is safe to continue operating in an abnormal condition.






iii Is a Safety Override Risk Assessment (SORA) available?

Areas to test:• SORA is available and all required information is recorded in it in line with

requirements, for example signatures, dates, duration of override, correctlevel of approvals and MoC numbers.

Suggested task:Select an override that has not recently been self-verified or audited. Confirmthe following:• The override is still in place.• The duration of the override has been identified.• Permission was granted to apply the override before it was applied.• The risk assessments associated with the override are available.• The information supplied by the operators and on the override in place on

the Control or Safety System matches the information in the SORA.




24



iv Has the risk been adequately understood?

Areas to test:• The risk to operations and hazards and controls have been correctly

identified.• The risk assessment team members were competent, e.g. it included the

relevant discipline engineer and was led by a trained facilitator. Approvallevels in line with requirements are in place to confirm that the approversaccept any increased risk of continuing to operate with an override in place.

• The risk assessment refers to any relevant existing overrides on the samesystem and subsequent cumulative risk has been considered.

• Any assumed changes in conditions whilst the override is in place havebeen recorded.

• Any live ORAs on the system are recorded and are considered in the riskassessment.

• The SORA appropriately documents the justification and continued risk ofoperating with an override beyond its target date (consideration must begiven for formal MoC for long term overrides).

Suggested task:• Review a sample of live overrides and inhibits in place. Confirm that the

cumulative impact has been considered.






v Are the agreed controls and mitigation measures in place?

Areas to test:• Controls and mitigation measures agreed are in place for live overrides.• The controls and mitigation measures agreed in the sample of overrides

reviewed match what exists in the field.• Monitoring requirements have been completed and recorded.• All barriers that are cited as providing a mitigation whilst an override is in

place are active and maintenance on them is up to date.

Suggested task:• Review the list of the agreed controls or mitigation measures on the

overrides. Confirm that they are in place in the field, are being completed (ifprocedural) or working and are being maintained in line with theirmaintenance routine (if active or passive).




26




vi Are the live overrides being monitored and controlled?

Areas to test:• Extensions or additions have been escalated to the appropriate approval

authority.• A schedule is in place for overrides self-verification checks.• The schedule is being followed, e.g. signatures are in place to show that

operators have checked all overrides.• Non-conformances identified during self-verification checks are reported and

addressed.

vii Is the status of live overrides being appropriately communicated at shift

handover?

Areas to test:• The off-going and on-coming shift team members discuss override changes.• Where appropriate, determine if an override on a Normally Unmanned

Installation (NUI) or remote site has been adequately communicated to themain Hub.

• Site leadership is tracking overrides, e.g. the KPIs include the number ofoverrides and the number that were extended.

Operations and

Maintenance

Procedures




OMS Focus Areas

4.1Proceduresand Practices

27



4.1 Procedures and Practices – Operations and Maintenance Procedures – 1/5

28

4.1 Procedures and Practices – Operations and Maintenance Procedures

Context

The use of risk assessed procedures manages the risk of a processsafety incident. Procedures contain proven practice to identify hazardsand controls to provide a safe and consistent method for performingwork.

Reference documents

Group Guide (GG) 4.1

Principles

1. Operations and maintenance procedures are followed as written.2. Operations and maintenance procedures are reviewed for accuracy on a regular frequency.3. Operations and maintenance procedures include identification of hazards and controls for work

being done.4. A process exists for changes to and deviations from procedures.5. Procedures are risk assessed by persons competent in the task.



i Are the requirements for Operations and Maintenance procedures

documented? e.g. in approved and up to date procedures.


Suggested task:Select a procedure / temporary procedure and confirm the following:• It conforms with the standard and format required.• It is easy to understand and be followed.• The frequency and date of review are shown on the procedure as per

requirements.• For the sample taken the documents are within their review/validity period.



Areas to test:• Each person understands their role in meeting the requirements.• Each person understands why procedures are needed and why they are

required to be followed.






iii Is there evidence to show the procedures are being used?

Areas to test:• Records are available to show previously used and signed procedures.

Suggested task:Select some recently carried out procedures and confirm the following:• Each step has been signed and dated where required.• They meet the requirements, e.g. procedures should clearly list:

− hazards, controls and warnings for the procedure task steps.− that the right people visited the job site before the procedure started, to

identify any additional hazards such as changing weather.− any additional hazards, initialled by the supervisor.




30



iv Are new procedures or changes to procedures being risk assessed?

Areas to test:• A representative sample of procedures has been appropriately approved

and risk assessed in line with requirements.• Site-based personnel who are familiar with the task were involved in risk

assessment and developing the procedure.• Changes or updates to procedures and additional identified controls have

been approved and the relevant people have signed the document in linewith requirements.

• Changes or updates to procedures have been communicated to the relevantpersonnel and everyone affected has signed them to show that they haveread and understood the changes to the procedures in accordance withtheir procedure (MoC process).

Suggested task:Review recently issued or changed procedures and confirm the following:• A risk assessment for the change is available.• The relevant people have signed off changes and updates as per the

requirements.






v Are procedures being maintained appropriately with regards to accuracy

and review date?

Areas to test:• Personnel can verify with an example or show you that they know the

process for raising concerns or proposed changes, e.g. users should stopand tell supervisors of the concern and provide input to update theprocedures.

• The relevant people have approved changes before proceeding.• Comments and updates are red-lined and included for future updates.

Suggested task:Take a random sample of a red lined procedure.• Test that the red-lining update process is working. • Verify that it has been communicated and any training associated with it has

been completed.




32




vi Is the status of procedures being appropriately communicated at shift

handover?

Areas to test:• Any change to the status of a procedure is communicated at shift handover.• If a procedure extends beyond a shift, shift handover includes clearly

communicating the step the procedure is at and where the oncoming shiftneeds to start.

• Site leadership is monitoring the quality of how personnel are usingprocedures, e.g. KPIs include information such as the number ofprocedures used and the number of procedures overdue.

OMS Focus Areas

4.5Control of Work

Lifting

Operations




33



4.5 Control of Work – Lifting Operations – 1/5

34

4.5 Control of Work – Lifting Operations

Context

Lifting operations include lifts by cranes and fixed equipment.Detailed risk assessment of the hazards and controls of liftingoperations are critical to ensuring safe lifts occur without injuryto personnel or process equipment.

Reference documents

EP SDP 3.2-0002

Principles

1. All lifts are categorised to reflect complexity and risk.2. All lifts are planned (supported with a documented lift plan) and risk assessed by a competent person.3. All lifts have a robust review, approval, authorization and endorsement process consistent with lift

category.4. All personnel engaged in lifting, or the review and approval of lift plans, will be competent to a defined

level/standard.5. All sites have a system to provide adequate contractor oversight and lifting authority assurance

(technical reviews).



i Are the requirements for Lifting operations documented?





Areas to test:• Each person understands their role in meeting the requirements.• Each person understands who the authorised people to carry out lifting

operations are.






iii Are lifts being managed appropriately?

Areas to test:• The category of lift has been recorded.• The category of lift is correct.• The risk assessment that the category requires is in place.• Lift plans are available.• The detail of the lift plan matches the lift category, e.g. as the category

increases, the detail of the lift plan increases.• A procedure to follow the movement of the lifting equipment, including

critical clearances, is in place.• Correct levels of approval are in place in line with requirements.• High risk lifts have the appropriate review and approval, e.g. peer review is

completed by the lifting technical authority.

Suggested task:Select one lifting activity that is ongoing on the site or has been recentlycompleted and check that it conforms to the requirements defined. Examplesinclude:• All the required checks have been done, for example:

− Lifting equipment was inspected (this includes inspection of pad eyes/liftinglugs etc.). Check the inspection dates of item to be lifted and ensure they arenot overdue.

− Conditions are being monitored.− Communication is in place.− The person in charge of the lift was identified.

• The area around the lift site is controlled and non-essential personnel areremoved.

• The right people have been involved in planning., e.g. lifting experts, theoperations team and those scheduled to perform the lift have been involvedin the risk assessment.

• The right people have attended and observe the preparations for a complexlift to verify that the lifting assessment conditions are being followed.




36



iv Is the lifting equipment adequate?

Areas to test:• The lift plan includes how adequate the equipment is to safely perform the

operation.• Equipment to do the lift is certified and within its certification period.• A register of lifting equipment is available that includes the list of

quarantined lifting equipment.• The colour coding is appropriate.• The lifting equipment is stored satisfactorily.• All lifting equipment certificates are available and current.• A register of lifting equipment is available. A random sample should match

the register, e.g. tag number, colour code and inspection date.• Records are available to show that the equipment is adequately rated for

the load, e.g. markings, look-up books or calculations are available for allcomponent parts and load weight.

Suggested task:• Select any lifting equipment. Verify that the certification is not overdue and

when last used, it was used for the correct lift category.






v Are the approved personnel doing lifts?

Areas to test:• Records list those authorised to plan and conduct lifts at all levels.• Records of competency assessments are available, e.g. required personnel

certificates are available.• Personnel involved in this lift are competent in line with requirements. • Certificates for people involved in lifts are available and valid.• Competency and training requirements are defined.• Competency and training records are available for people involved in the lift.




38




vi Is the site properly managing how contractors are overseen and

assured?

Areas to test:• Records show that the region has done a technical review of lifting

contractors within the past 24 months.• These reviews are done by the correct level of personnel, such as the

regional lifting authority or segment lifting authority.

OMS Focus Areas

4.5Control of Work

Permits




39



4.5 Control of Work – Permits – 1/7

40

4.5 Control of Work – Permits

Context

The scope of work to be controlled is clear and covered by arisk assessment. Task, process and worksite hazards have beenidentified. Controls are selected and put in place to sufficientlymanage these hazards. All those involved are competent andunderstand their responsibilities Everyone is expected to stopunsafe work.

Reference documents

GDP 4.5-0001, EDP 4.5-0001, EDP 4.5-0003, EDP 4.5-0004

Principles

1. Personnel with a role in CoW are trained and competent to carry out their responsibilities.2. Task, process and worksite hazards are covered in the CoW risk assessment process (Area and

Performing Authority).3. Isolation of Energy (e.g. electrical, hydraulic, pneumatic) and process hazards (e.g. pressure,

temperature, and chemicals) are eliminated or controlled (Area and Issuing Authority).4. Higher risk jobs (e.g. confined space entry, hot work, lifting over live plant, blasting on equipment in

service) require a level 2 risk assessment with an appropriate level of approval (e.g. Site Authority).5. Tasks are risk assessed with the input and agreement of a representative from the work crew

(Performing Authority).6. The Performing Authority verifies that all in the work crew understand the task, process and worksite

hazards and associated controls.



i Are the requirements for Permits documented?





Areas to test:• Each person understands their role in meeting the requirements.






iii Are the permits completed satisfactorily?

Suggested task:Select a random sample of permits that are live and confirm the following:• Each permit clearly defines the scope of work and the task description is

full and clear.• The correct permit type is being used in line with requirements.• Each permit identifies the need for written instructions or for a procedure, in

line with requirements.• Each permit identifies the correct location and area.• All isolation plans and certificates are available and drawings are attached.• Each permit records the information required for all occasions in line with

requirements, e.g. signatures, dates, and the correct level of approvals andauthorisers.

• All the correct authorisations have been identified and given for each permit,in line with requirements.




42



iv Does the permit adequately identify the risks and controls?

Suggested task:From your random sample of permits, confirm the following:• The correct level of risk assessment is being used as per the requirements.• The need for written instruction or procedure has been appropriately

identified as per requirements.• All the potential hazards from the task process and worksite have been

identified.• All appropriate controls have been identified and are in place.• Any required certificates are approved attached such as ICC, ground

disturbance, lifting plan, blasting on live line etc.






v Have all the requirements identified in risk assessments been

completed?

Suggested task:From the random sample of permits selected confirm the following:• A pre-job site visit been carried out by the Area Authority or delegate

together with the Performing Authority (note PA only for low risk tasks).• All the controls specified have been put in place.• Where personal isolations are included, verify these are in place and meet

BP standards.




44



vi At the job site are the requirements for CoW being met?

Suggested task:At the site where work is taking place, confirm the following:• The work being done is as stated on the permit.• The correct location has been identified.• The Performing Authority has held a pre-job tool box talk with the work

party.• The work party can show you an adequate level of awareness of the task. • An up-to-date copy of the permit is at the worksite, signed by all members

of the work party.• The work party can show you an adequate level of awareness of the

hazards associated with the task, process and worksite.• The work party can show you an adequate level of awareness of the control

measures required to safely perform the task.• If the work party identified any further hazards or controls associated with

the task, have they stopped the job and consulted with the AA to updatethe permit?

• All controls that are required to date are in place.• The appropriate gas tests have been carried out and recorded on the

permit.• Work party members know what to do if an incident occurs and understand

the emergency response and rescue plan.• If the permit specifies any PPE, it is being used correctly and is in good

condition.• All safety equipment, including gas detectors, that the risk assessment lists

is available at the worksite.• If the answer to the evidence above is YES, the necessary members of

work party know how to use it.• Any personnel who have joined the work party in addition to the original

members have been briefed to the same level of understanding of the taskand its associated hazards and control measures.






vii Are supplementary certificates being used appropriately?

Suggested task:From your random sample of permits, confirm the following:• All supplementary certificates (e.g. ICC, lifting plans, ground disturbance,

blasting on live line) have been properly cross referenced, completed andapproved.

• Any supporting method statements or procedures have been reviewedbefore being used and this has been recorded and approved.

• The work party can show you they adequately understand anysupplementary certificates, method statements or procedures.

• The work party is following the requirements of any supplementarycertificates, method statements or procedures.




46




viii Have permits been returned to issuing authority at end of validity period

or end of job?

Area to test:• A face to face conversation has occurred when the PA returns the permit to

the AA.

Isolations




OMS Focus Areas

4.5Control of Work

47



4.5 Control of Work – Isolations – 1/5

48

4.5 Control of Work – Isolations

Context

The correct identification and control of isolations from ouroperations’ hazards, is critical to protecting our people, plantand environment during control of work.

Reference documents

EP SDP 4.5 – 0002, GP 44-40

Principles

1. All energy sources, including process safety hazards (e.g. pressure, temperature, chemical exposure)are identified, isolated and controlled before intervention work commences.

2. Isolation and de-isolation plans are developed for all forms of isolation.3. Isolation plans are approved by the appropriate authority.4. Energy isolation and zero energy state is demonstrated to the work crew performing the task prior to

starting the work.5. Lock out and tag out is used when energy isolation (e.g. electricity, pressure, radiation) is controlled by

valve or electrical breaker.



i Are the requirements for Isolations documented?





Areas to test:• Each person understands their role in meeting the requirements.






iii Are the isolation plans and certificates completed satisfactorily?

Suggested task:Select a random sample of permits that are live and confirm the following:• The scope and plant or system is clearly described and identified.• The reason for the isolation has been fully defined.• The type of isolation has been identified in line with requirements.• An isolation plan is available.• The isolation points are shown on clear and up to date drawing such as

P&ID, electrical line drawings.• Each isolation point has been clearly described.• The number and status of overlapping ICCs are checked.• The design of the isolation meets BP isolation standards.• Details of any temporary earths have been recorded. • Any LO and LC valves have been identified and recorded.• The isolation plan and ICC include all the earths, alarms and trip logic

overrides.• Information on a sample of isolations taken in field matches the information

recorded in the register, e.g. tag numbers, P&IDs on the register match thefield status.

iv Does the isolation certificate adequately identify the risks and controls?

Suggested task:From your random sample of ICC confirm the following:• Each isolation point has been signed for and independently verified.• The appropriate level of risk assessment is in place in line with

requirements and has been approved.• Higher level approvals and a level 2 risk assessment are in place if the

integrity of any isolation does not meet BP standards. • Each ICC identifies all the potential hazards.• Each ICC identifies all appropriate controls.




50



v At the job site are the requirements for the ICC being met?

Suggested task:At the site where work is taking place, confirm the following:• The Isolations Confirmation Certificate (ICC) reflects the current status. • Zero energy state has been demonstrated to the work crew by the Area

Authority (AA) or Isolating Authority (ISA).• All controls identified are in place.• Electrical energy isolations are locked out and tagged.• Isolation integrity has been verified, e.g. none of the valves at the isolation

points are leaking.• Each isolation point has been identified and labelled.• Each isolation lock number has been recorded, e.g. the lock number in the

field matches the information on the ICC.• Each isolation has been secured to the highest practicable standard, e.g.

chain and lock, tamper-proof isolation methods.• Where it is not possible to secure an isolation point to the highest standard

the AA has taken steps to have this remedied.• The process bleed points for pressure build up (PBU) monitoring have been

labelled.• Any alteration to the isolation has an adequate explanation, and has been

risk assessed and approved in line with requirements.• The procedure that the work party is using has been reviewed and is still

valid.• The monitoring of pressure build up (PBU) is recorded and signed.• Any pressure gauges, transmitters being used for monitoring the integrity of

the isolations are appropriately ranged.






vi Is a deviation process in place for isolations that do not meet the BP

standards and does it include an independent risk assessment and

higher level approvals?

vii Are de-isolations taking place satisfactorily?

Suggested task:Select ICC where isolations are being re-instated and confirm the following:• Isolations remain tagged until the end of a job.• De-isolation is recorded on the isolation plan and certificate.• De-isolation sequences and plan considers leak testing and sanctioned

tests where required (STT).




52




viii Are the long term isolations (LTI) being reviewed and self-verified within

the periods defined in the requirements?

Areas to test:• Signatures are available to confirm that self-verification checks on LTI are

being completed at the appropriate frequency.• Actions have been put in place to remove as many LTI as practicable.

ix Is a competency and training process in place for preparing, approving

and implementing isolations?

Areas to test:• Competency and training requirements are defined for Isolating Authorities.• Competency and training records are available for Isolating Authorities.


Appendix Example of calendars



53


Appendix – Example of calendars

54

Shift Handover

Monday Tuesday Wednesday Thursday

Week 1

Friday Satuirday Sunday

Locked Valves

ORA

Inhibits & Overrides

Procedures

Lifting

Permits

Isolations

Shift Handover


Week 2


Locked Valves

ORA


Procedures

Lifting

Permits

Isolations

Shift Handover


Week 3


Locked Valves

ORA


Procedures

Lifting

Permits

Isolations

Shift Handover


Week 4


Locked Valves

ORA


Procedures

Lifting

Permits

Isolations

Appendix 1

The following table provides the frequency for the Self-Verification audit on a four-week cycle



55

December MANAGEMENT TEAM WEEKLY SELF VERIFICATION PLAN

Audit not completed

Audit completed Further details in Greater Plutonio Standing Instruction: ANG-B18-OPS-SIN-110

WCC WCC WCC WCC WCC WCC (Completion)

WCC (Routine) WCC (Routine) WCC (Routine) WCC (Routine) WCC (Routine) WCC (Routine)

Isolation Isolation Isolation Isolation Isolation Isolation

LO/LC (OTL) HRP / Jobsite Visit TBT HRP / Jobsite Visit TBT HRP / Jobsite Visit

Isolation LTI Environmental- 7 Procedures (RGN) Isolation LTI Environmental- 8 Procedures (RGN)

SOC SOC SOC SOC SOC SOC

Process Safety SOC Process Safety SOC Process Safety SOC Process Safety SOC Process Safety SOC Process Safety SOC

GOC pack Safety Theme Area Inspection- 1 GOC Pack LO/LC (OME) Area Inspection-2

Handover (Rotation) Audit of Audits OIM Inhibits / Overrides OOE Handover (Shift) Procedures (SI) Inhibits / Overrides CRT

ORA OIM

Weekly: Random Days Weekly: Random Nights Rigging Loft Inspection DF

Security Check Team Management Team

Security Check 1 Mar Sup Weekly Audits Monthly Audits

Security Check 2 Mar Sup Deep Clean OIM/Medic Health & Hygiene Medic

Security Check 3 Mar Sup Fire Control Rooms Dep Fwd Ctl SARA OIM

BOSS Performance

FPSO's Incident Performance

Today's Date

Observations for: YTD DAFWC

Safe / Unsafe for: Last DAFWC

Appendix 2

Example of a Self-Verification plan



56



57



58



59



60


61

Self-Verification Handbook A4 - May14 v10a_LowRes

Documents

Transcript of Self-Verification Handbook A4 - May14 v10a_LowRes