088 Norwegian Oil and Gas Recommended Guidelines for a Common Model for Work Permits (WP) Translated version

Transcription

1 088 Norwegian Oil and Gas Recommended Guidelines for a Common Model for Work Permits (WP) Translated version

2 No.: 088 Established: Revision no: 5 Date revised: Page: 2 PREFACE These guidelines are recommended by the Norwegian Oil and Gas Association s (Norwegian Oil and Gas s) HSE Managers Forum and by the Norwegian Oil and Gas Association s Operations Committee. They have also been approved by the director general. The working group has consisted of members from: Statoil, Total, Shell, ExxonMobil, ConocoPhillips, Talisman, Lederne, LO and SAFE. The responsible manager at the Norwegian Oil and Gas Association is the risk management manager, who can be contacted by telephoning the association s switchboard on These guidelines have been prepared with the participation of a broad range of interested parties within the Norwegian petroleum industry, and are owned by the Norwegian petroleum industry, represented by the Norwegian Oil and Gas Association. The association is also responsible for the administration of these guidelines. Norwegian Oil and Gas Association Vassbotnen 1, 4313 Sandnes P.O. Box Stavanger Norway Tel.: Fax: Website: firmapost@norog.no

3 No.: 088 Established: Revision no: 5 Date revised: Page: 3 CONTENTS 1 INTRODUCTION Purpose Terminology Work that requires a level 1 work permit Work that requires a level 2 work permit Identifying the need for a Safe Job Analysis (SJA) Work that does not require a work permit Organisation and roles relating to work permits Special terms associated with hot work Definitions and abbreviations References Publication and follow-up CHANGES MADE TO THE GUIDELINES Summary WORK PERMITS BASIC PRINCIPLES AND REQUIREMENTS The purpose of using work permits Functional requirements of the work permit system Fundamental principles Internal control Area/operational responsibility Executing responsibility Coordination of work permits and simultaneous activities Planning and preparation requirements Application process Validity, completion of the form and changes to work permits Application period, duration and extension Restrictions to the scope of a work permit Restrictions regarding the execution of a work permit Preparing the work permit; planning of operational and safety preparations Approval requirements Preparation and control requirements prior to starting the work Preparations prior to starting the work Control and clearance of the work at the work site and in the Central Control Room (CCR) Isolation of safety systems and isolation/locking of electrical equipment Requirements during the execution of the work Starting the work Overview and control during the work Cancellation or suspension of a work permit Requirements upon completion of the work Final control of the work and reactivation of safety systems Level 2 work permit over several days Transfer of experience, learning and improvement Requirements regarding the training of personnel WORK PROCESS FOR PLANNING AND EXECUTION OF WORK PERMITS STANDARD SAFETY REQUIREMENTS FOR LEVEL 1 WORK PERMITS Introduction Matrices covering standard safety requirements for work permits Hot work class A Hot work class B Entry into confined spaces Isolation of safety system Work on hydrocarbon system Pressure testing... 34

4 No.: 088 Established: Revision no: 5 Date revised: Page: Work over sea Work with radioactive substances Work with dangerous substances Work with explosives Fire, entry and safety (FES) guards Duties of the fire guard Duties of the safety guard during entry into confined spaces Duties of the safety guard during work over sea APPENDIX A: GUIDELINES FOR COMPLETION AND USE OF THE WORK PERMIT FORMS. 44 A.1 Introduction A.2 Planning the work A.3 Approval of the work permit A.4 Preparation of equipment and facility prior to starting the work A.4.1 General A.5 Execution of the work A.6 Completion and reactivation A.6.1 General A.6.2 Level 2 work permit over several days A.7 Signing APPENDIX B: WORK PERMIT (WP) FORMS B.1 Administration of the work permit forms B.2 Use of the form B.3 WP Level 1 form B.4 WP level 2 form... 54

5 No.: 088 Established: Revision no: 5 Date revised: Page: 5 1 INTRODUCTION 1.1 Purpose The purpose of this common model is to establish common practices for the use of work permits on fixed and floating production installations on the Norwegian continental shelf. The common model for work permits covers all activities that require a work permit on such installations, including work in drilling areas. The safe management and execution of work depends upon the establishment of safety barriers, so that accidents, injuries and damage can be prevented. Such barriers are implemented through an interaction between three main elements: The work permit system The organisation, which represents competence, personal responsibility, roles and authority Operational safety procedures This model covers the work permit system, including standard role descriptions relating to work permits. The individual installations may have different organisational models, but these must take the described roles into account in order to ensure that the work permit system fulfils its intended functions. The document also covers standard safety requirements for selected work operations. The individual operating companies may also have special procedures that provide stricter requirements for individual operations. This document is a translation of the original Norwegian document. 1.2 Terminology Safe Job Analysis (SJA) A safe job analysis (SJA) is a systematic and stepwise review of all risk factors, undertaken prior to a specific work task or operation so that steps can be taken to eliminate or control the identified risk factors during the preparation and execution of the work. Risk factor The term risk factor refers to all aspects that may directly or indirectly influence the risk of losses, injuries to personnel, or damage to the environment or financial assets. Identified risk Identified risk refers to a description of the risk associated with the work to be carried out. What hazards may be generated by the work? What types of accidents may occur and what is the worst that could happen? What forms of energy are in the immediate vicinity, and what risks might these represent?

6 No.: 088 Established: Revision no: 5 Date revised: Page: 6 Mitigated risk Mitigated risk means that measures have been implemented in order to reduce the identified risk to an acceptable level. Who shall carry out these measures must also be clarified. Work order (WO) defining a need for work Generally, many tasks on the installations are registered and generated through work orders (WOs). WOs often form the basis for work permits. Based on the work described in the work order, one or more work permits may be associated with the WO. A WO is a description of one or more work activities or tasks, and has no limitations with regards to scope or type of work activity. Work permit (WP) A work permit (WP) provides written authorisation to carry out defined work at a specific location on an installation under certain conditions and in a safe manner. It provides permission for the work to be started once approval has been given, when a specific set of operational and safety requirements has been fulfilled, and when this is accepted, documented and approved. The WP is an operational safety barrier against undesirable incidents. The WP system ensures that normal safety barriers are not taken out of service or disabled without compensating measures being put in place. In addition, the WP system sets requirements regarding the operational and safety preparations that must be carried out as a prerequisite for clearing the work for execution. The WP system also ensures that simultaneous activities on the installation are assessed and coordinated in order to avoid unintended consequences and the escalation of undesirable incidents. It is the duty of everyone involved in the planning, approval and execution of work to evaluate the need for a WP for the work in question. Work permit levels 1 and 2 WPs are divided into two levels based on risk assessments and the need for coordination and clearance. WP level 1 is required for activities with higher risk and for work that requires coordination and clearance at installation level. This includes activities such as hot work, entry into confined spaces and the shutdown of safety systems, etc. See also chapter WP level 2 is used for all other types of work which, due to risk, require coordination and clearance within a specific area or system, ref. chapter The need for a safe job analysis shall always be considered at both WP levels, ref. chapter

7 No.: 088 Established: Revision no: 5 Date revised: Page: 7 Classification of work within the WP system WP Level 1 Higher risk Medium risk WP Level 2 Need for SJA shall be evaluated Lower risk Work that does not require a WP Work that requires a level 1 work permit Hot work class A Work with equipment and tools that constitute an effective ignition source and which when used in a normal manner may ignite an explosive atmosphere and/or solid materials or liquids, i.e. high energy is given off in the form of sparks, an open flame or electric arc, and/or the tool/equipment has a surface temperature that exceeds the ignition temperature for the exposed medium. Typical ignition sources include: Welding Hot tapping of pipes and containers under pressure Ordinary grinding/cutting discs Heat shrinking with an open flame Preheating using an open flame Annealing Burning Hot work class B in classified areas Work with equipment that constitutes a potential ignition source and that in the event of a fault or malfunction may constitute an effective ignition source which may ignite an explosive atmosphere, i.e. equipment that does not have a sufficient surface temperature and/or does not give off sparks, an open flame or electric arc, or in any other way release sufficient energy to ignite an explosive atmosphere or flammable liquid during normal use, but which when used incorrectly or in the event of a fault or malfunction may constitute an effective ignition source. Typical ignition sources include: Heat shrinking with an electrical heat gun Sandblasting/needle picking Electrical isolation testing (megger testing) Soldering equipment

8 No.: 088 Established: Revision no: 5 Date revised: Page: 8 All electrical or battery-operated equipment/apparatus/instruments that are not Ex-protected in accordance with the classification of the areas in which they will be used Rotating steel brushes Entry into confined spaces Complete or partial entry into confined spaces or areas that are not normally naturally or mechanically ventilated, such as tanks, pipes, chain lockers and exhaust ducts. Isolation of safety system Covers work that involves the isolation, testing and bypassing of safety systems. Safety systems include but are not limited to: Emergency shutdown systems Fire-fighting systems Blowdown system Detection systems Alarm systems Emergency power and non-interruptible power supplies Evacuation systems and equipment For a detailed listing of safety systems, refer to the regulations for the specific installation. Work on hydrocarbon systems Work on piping systems, tanks and associated components that may pose a risk of the release of produced oil/gas/condensate. Other work on hydrocarbon systems may be carried out with a WP level 2. Work activities that are defined as regular routines covered by existing specific work procedures may be carried out with a WP level 2. Pressure testing Testing of newly installed or modified tanks / piping systems / Xmas trees in accordance with an approved pressure testing procedure and testing above working pressure and/or design pressure. Work over sea Work over sea refers to work that takes place outside permanent railings where there is a risk of a personnel falling into the sea. The use of rope access (RA) is not defined as work over sea when it is performed in accordance with NS 9600 (SOFT Standard); Arbeid i tau (Rope access techniques). Ref. section Other activities / critical operations requiring WP level 1. Work in a hydraulic basket in a moon pool and on approved scaffolding is not defined as work over sea when extra barriers such as the following are used: Fall arrest equipment Man-riding belt Net

9 No.: 088 Established: Revision no: 5 Date revised: Page: 9 Scaffolding with extra high railings, erected in accordance with class 3 and certified as class 2. The scaffolding shall be re-certified once a week and following any external influences such as inclement weather and strong winds Work with dangerous substances Work operations involving substances/products classified as chemical substances and mixtures that may be hazardous to health or the environment, or pose a risk of fire or explosion. Examples of work with dangerous substances: Fire/explosion hazard: Handling/use of flammable chemicals where the volume and/or proximity to ignition sources poses a higher risk of ignition. Environmental hazard: Work that poses an increased risk of discharges of chemicals to sea, where the volume that shall be used exceeds 1 m 3. Health hazard: Heating of materials that are surface-treated and which may result in the thermal decomposition of, for example, paint. Work on pipe systems, tanks and associated components that may pose a risk of the release of chemical products. Grinding, sandblasting or cutting of structures or work that generates dust or dangerous substances pollution that is harmful to health and to which other personnel may be exposed. Work with radioactive substances Work with radioactive substances/isotopes, including work on systems with radioactive scale deposits. Well operations/interventions Well operations/interventions. This includes such operations as: Wireline operations/production logging Perforation/well flow over side burner Well stimulation Coiled tubing or snubbing operations Setting plug in or removal of Xmas tree Work with explosives Preparation, arming and control of explosives. Critical lifting operations Critical lifting operations are operations that may require special safety precautions or special attention and communication when taking interfaces with adjacent activities into account. Such operations may include but are not limited to: Lifting above critical areas / process equipment / well equipment Transportation of personnel using lifting devices, unless another approval scheme has been established by the management Tandem lifts where the weight of the load exceeds the maximum lifting capacity of one of the lifting devices

10 No.: 088 Established: Revision no: 5 Date revised: Page: 10 Overload testing of lifting devices with an SWL exceeding 10 tonnes Lifting of special loads such as structures, mobile cranes, etc. Heavy lifts not considered to be normal routine operations Subsea operations that involve the use of an offshore crane Other activities / critical operations requiring WP level 1 The operating companies may define other operations or critical activities that require a WP level 1. Examples of such activities include: Personnel diving Use of ROV under or in the immediate vicinity of the platform Moving of derrick Work on live electrical equipment Use of rope access, ref. NS-9600 (SOFT Standard) Painting works involving spray guns Work that requires a level 2 work permit A WP level 2 is used for work that, due to risk, requires coordination and clearance within a specific area or system. A WP level 2 normally includes, but is not limited to: Mechanical work Work on electrical equipment Work on automation, data and telecommunications systems Erection of scaffolding Painting works using brushes and rollers, regardless of hazard category Insulation works Identifying the need for a Safe Job Analysis (SJA) The need for a Safe Job Analysis (SJA) should be assessed in all phases of the work, from the planning stage all the way through to actual execution. It is a duty of everyone involved in the planning, approval and execution of work tasks and WPs to assess the need for an SJA, ref. Norwegian Oil and Gas Guidelines 090. An SJA is required when risk factors are present or may arise, and when these factors are not sufficiently identified and controlled through relevant existing procedures or an approved WP. Typical factors that should be considered when assessing the need for an SJA: Is the work described in procedures or routines, or does it require deviations from these? Are all risk factors identified and controlled through the WP? Has this type of work previously been prone to incidents/accidents? Is the work considered risky or complex, or does it involve several disciplines or departments? Are new types of equipment or methods that are not covered by existing procedures or routines to be used? Do the involved personnel have experience with the relevant work or operation?

11 No.: 088 Established: Revision no: 5 Date revised: Page: Work that does not require a work permit There are several work activities that may be carried out without a WP. This mainly applies to normal routine production, drilling, logistics or maritime operations, where the work is carried out within the scope of applicable operational procedures and requirements. It also applies to work activities with lower risk, and where coordination and clearance (ref. 3.5) and an SJA are not required. The individual operating company defines the specific limitations for work that may be carried out without a WP. Examples of such activities include: Work in workshops, provided the workshop is approved for the specific type of work General work / domestic chores in the living quarters Inspection activities that can be performed without physical intervention into the inspected equipment Cleaning and tidying that do not involve the use of equipment or chemicals that require a WP Use of chemicals with a lower risk and without the need for coordination Organisation and roles relating to work permits Each installation has its own organisational description with associated functions and job titles. Through the use of standard roles in the handling of WPs, the model described in this document has been rendered independent of such organisational descriptions and job titles. The organisation of the individual installations is therefore not addressed here, but it is presumed that the roles defined below are actually taken into account and incorporated within the individual organisation.

12 No.: 088 Established: Revision no: 5 Date revised: Page: 12 The following roles have been defined in association with the handling of WPs: Role Definition Applicant The person who plans the work and applies for a WP on behalf of those who will carry out the work. Approver/Area/ The management function responsible for the area or system that the Operations work will affect, and who will therefore be involved in and approve the Supervisor work. If the area and operational responsibility is divided between two different positions, both must take part in the execution of this role. HSE Function An HSE function that checks the quality of the WP application during Overall Approver / Platform Manager Area Technician Executing Skilled Worker CCR Technician Other position planning and approval. The most senior manager on the facility, who has the overall responsibility for ensuring that the work is carried out in accordance with the WP system, including responsibility for the coordination of simultaneous operations and activities. The skilled worker who has the operational responsibility for a specific system and/or area. If the role is divided between two positions, both must participate in the execution of this role. The skilled worker who carries out the physical and specific work covered by the WP. A control room function that has a role in the shutdown of safety functions and the monitoring, control and clearance of WPs from the location that is defined as the central control room in this context. Other functions that shall be involved in the handling of WPs in accordance with the requirements of the individual operating company Special terms associated with hot work Classified area An area defined as zone 0, zone 1 or zone 2 in accordance with the area classification plan for the individual installation. Unclassified area An area defined as unclassified in accordance with the area classification plan for the individual installation. Approved workshop An unclassified area defined as a workshop and approved for this purpose in accordance with the guidelines of the individual operating company. Normal operation All production states following the introduction of hydrocarbons to the plant. Production shutdown with depressurised process plant A state where all production on the installation has been shut down. Barriers against wells and in/outgoing hydrocarbon pipelines have been established. Process systems have been depressurised.

13 No.: 088 Established: Revision no: 5 Date revised: Page: Definitions and abbreviations WP WO CCR SJA LSA RA ROV Work Permit Work Order Central Control Room Safe Job Analysis Low Specific Activity (radioactive scale) Rope Access Remote Operated Vehicle 1.4 References The Petroleum Regulations, Section 30 of the Activities Regulations. 1.5 Publication and follow-up This document is issued and maintained by the Norwegian Oil and Gas Association (Norwegian Oil and Gas). Further development in the form of transfer of experience, learning and improvement will be handled by a dedicated group of representatives from operating and contracting companies. Appropriate mechanisms will be implemented in order to ensure the efficient handling of feedback and proposals from users. Exceptions should be handled in accordance with the guidelines of the individual operating company. Such exceptions should also be considered as input for the revision and updating of this document.

14 No.: 088 Established: Revision no: 5 Date revised: Page: 14 2 CHANGES MADE TO THE GUIDELINES 2.1 Summary The following changes have been made in revision 3: Use of rope access (RA) is no longer defined as work over sea when carried out in accordance with NS A rescue plan shall be attached to the WP. Added examples of extra barriers. Spray painting is now classified as WP level Painting works using brushes and rollers are still classified as level Emphasised that a WP may only be approved for a period of 14 days and feature a maximum of seven clearances See Breathing air must be in accordance with NS-EN and SfS recommendation 09N/ Added detection system and PA system, as well as testing of emergency generator Definition of hydrocarbon system more precisely explained Reference to Corrected text in paragraph 2 from under to over Clarified requirements for safety guard. The following changes have been made in revision 4: The new template that was created in connection with the name change from OLF to Norwegian Oil and Gas has been applied to the guidelines. As a consequence, the chapter divisions and references to chapters have been changed. In addition, a new appendix, Appendix 1, has been added in order to illustrate how to ensure and maintain focus on operational safety in connection with individual activities. The following changes have been made in revision 5: No significant policy-related changes have been made. Corrections have been made to a number of points to ensure compliance with new equipment and the procedures and routines that apply on the continental shelf. The section on dangerous substances has been changed and clarifies that work with dangerous substances may be exempt from a WP in certain cases (e.g. in the event of small volumes use of adhesives and spray cans). The guidelines have been adapted for use on larger facilities/onshore facilities through more generic role descriptions (approver and overall approver). The WP level 1 and 2 forms have also been updated. The biggest change here is that risk shall be identified and the form shall be signed to confirm that the identified risk is understood and mitigated. In addition, everyone who participates in the execution of the work shall sign the WP form. A description of identified and mitigated risk has been added in chapter 1.2.

15 No.: 088 Established: Revision no: 5 Date revised: Page: 15 3 WORK PERMITS BASIC PRINCIPLES AND REQUIREMENTS 3.1 The purpose of using work permits The main objective of the WP system is to ensure that all risk factors associated with a work operation are taken into consideration in the planning, approval, preparation, execution and completion of the work. The WP forms a basis for: Preventing undesirable incidents and controlling risk Documenting safety measures and the appropriate approvals Communicating information about work activities to all affected personnel Handling and controlling interfaces between activities on the installation 3.2 Functional requirements of the work permit system The WP system shall ensure that the following functions are performed: Clarify which types of work require a WP Ensure that such work is approved in accordance with the terms of responsibility and regulatory provisions that apply on the individual installation Clearly identify the work to be carried out, the risk involved, restrictions relating to the execution of the work and the time interval during which the work may be carried out Specify the necessary safety measures and precautions, including isolation from potential hazards such as hazardous substances or energy sources Provide information to the person responsible for an installation or area and others that may be affected by the work Maintain a documented overview, control and management of the work at all times Internal control Rules regarding interruptions to the work before it is concluded Coordination of simultaneous activities Formal handover and exchange of information when a WP is issued for a period of longer than one shift, or when there is a change of personnel who have signed the WP during the execution of the work Formal hand back following completion of the work to ensure that the part of the plant affected by the work is in a safe condition and ready for reinstatement, and that proper cleaning and tidying have been carried out at the work site.

16 No.: 088 Established: Revision no: 5 Date revised: Page: Fundamental principles Internal control The WP system is based on the principles of internal control. This means that several independent parties are involved in the approval, control, coordination and management of activities. The WP system s principles for the control of work activities and risk are based on the requirement that one group holds the area/operational responsibility and another group is responsible for the execution of the work. In principle, this means that during the operational and safety preparations, prior to starting the work and during its execution and completion, there are two independent parties. Both groups or parties have specific duties and responsibilities during the WP process. One party is defined as the owner and is the approver/ area/operations responsible for the equipment and facility. The other party is defined as the supplier and is responsible for the execution of the required work to be carried out on the equipment or facility. In this way, the WP can be considered a contract between two different parties. In small organisations, where the approver/area/operational responsibility ( owner ) and executing responsibility ( supplier ) are handled by the same group, efforts must still be made to actively fulfil the relevant roles associated with clearing WPs for execution so that the intention of internal control is fulfilled Area/operational responsibility The person responsible for the area/operations must have knowledge of the system/facility and competence relating to the operation of relevant systems and areas. The most important duties and expectations of the area/operations responsible are as follows: Maintain a complete overview of and control over barriers, systems and areas in operation and ongoing work activities Administer the required isolation of energy sources, mechanical or electrical Undertake safety preparations relating to the system or area in operation prior to starting the work Ensure that it is safe to execute the planned work at the work site prior to starting the work. Carry out thorough checks at the work site together with the executing skilled worker. Risks shall be identified and mitigated Reactivate systems and remove isolations when the work is completed and verify that it is safe to return the equipment to normal operation Maintain control of interfacing activities associated with systems and areas in operation

17 No.: 088 Established: Revision no: 5 Date revised: Page: Executing responsibility The parties executing the work must have the professional competence required to carry out the work. The most important duties and expectations of the executing workers are as follows: Have the necessary professional competence to carry out the specific work Undertake safety preparations associated with the work task Ensure that all necessary work preparations are carried out and that the appropriate tools are available at the work site In cooperation with the persons responsible for the area/operations, ensure that risks are identified and mitigated so that it is safe to carry out the planned work at the work site Carry out the work in accordance with the requirements given in the WP and relevant procedures Keep the work site in a clean and tidy state during execution of the work, and leave the work site clean and tidy when the work is completed Coordination of work permits and simultaneous activities The management shall ensure that there are routines in place on board the installation which ensure that simultaneous activities and interfaces are coordinated, and that any incidents caused by an operation do not escalate due to other simultaneous operations. WPs must be coordinated at a daily coordination meeting on the installation. The approver/area/operations supervisor or area technician may assume responsibility for the coordination and handling of interfaces for WP level 2 in accordance with the guidelines of the individual operating company. 3.4 Planning and preparation requirements Application process Preparation of the work permit The unit responsible for the execution of the work prepares the WP. Administrative handling The individual installation shall have an administrative process which ensures that all necessary quality requirements relating to the administration of WPs are fulfilled. The importance of dialogue and cooperation during the planning stage Management shall ensure that the local application process ensures the necessary contact and dialogue between the applicant and approver/ area/operations responsible during the planning phase of the work. This may include activities such as joint reviews of the work and assessments at the planned work site when this is considered necessary due to the nature of the work.

18 No.: 088 Established: Revision no: 5 Date revised: Page: Validity, completion of the form and changes to work permits Agreement between work description and work permit The work described in the WP must be in accordance with the WO or any other existing job package / work description associated with the work. Completeness/accuracy The WP is not valid unless the form is correctly and completely filled out and features all the required approvals. Changes to the work permit must not be made A completed and approved WP must not be changed. If changes are required, the WP must be reprocessed. Exemptions to this apply in cases where a need for stricter operational or safety preparations is identified Application period, duration and extension Application period A WP application shall be made for planned work tasks to be carried out during the coming night shift and subsequent day shift. Duration A WP has a normal validity of up to 12 hours and expires at the end of the day or night shift. Concerning the duration of WP level 2 The operating company may implement a scheme that allows a WP level 2 to be approved for a period of up to 14 days and a maximum of seven (7) shifts. This saves having to print out and approve a new original each day. However, it is emphasised that beyond this the same requirements apply regarding maintaining an overview, control, clearance and completion of the work on a daily basis. If the company chooses to implement such a scheme, the WP level 2 form in Appendix B4 is used. Extension A WP may be extended for up to a maximum of 4 hours if the work is continued with the same crew. Long-term isolation of safety systems An overview and control of safety systems that are isolated/deactivated over longer periods shall be maintained in accordance with the routines of the individual operating company Restrictions to the scope of a work permit If there is more than one activity/operation included on a WP, it must be ensured that there are no misunderstandings regarding which parts of the work have been cleared for execution.

19 No.: 088 Established: Revision no: 5 Date revised: Page: Restrictions regarding the execution of a work permit Work that may involve risk of the release of hydrocarbons Work that may result in the release of hydrocarbons is not permitted until all WPs for hot work class A and entry permits for areas that may be exposed have been suspended. The suspension of permits for hot work class B shall be considered in each individual instance. Restrictions due to simultaneous activities / simultaneous drilling and production The individual installation will have special procedures regulating simultaneous activities Preparing the work permit; planning of operational and safety preparations The applicant The applicant shall prepare the work description, identify risks and suggest the necessary operational and safety preparations/measures required for the work the WP is being applied for. Approver/area/operations supervisor The approver/area/operations supervisor shall review the proposed measures and specify other required measures if necessary. Cooperation and dialogue during the planning stage A close dialogue between the applicant and the approver/area/operations supervisor will often be necessary during the planning stage. Both parties have a responsibility to consider the need for a joint review and assessment at the planned work site as a part of the planning process. Use of safe job analysis (SJA) Whether the work requires an SJA should be assessed throughout all stages of the work, from the planning stage until the work is carried actually out. It is a duty of everyone involved in the planning, approval and execution of WPs to consider the need for an SJA. 3.5 Approval requirements WP Level 1 WP Level 2 A WP level 1 must be approved by the approver/area/operations supervisor, checked/quality-assured by an HSE function on the installation if such a function exists, and approved by the overall approver / platform manager. All level 1 WPs shall be discussed at the installation s daily meeting for the coordination of WPs and simultaneous activities. As a minimum, WP level 2 should be approved by the approver/area/operations supervisor. The approver/area/operations supervisor must ensure that interfaces to other areas, activities and work operations are considered as a part of the approval.

20 No.: 088 Established: Revision no: 5 Date revised: Page: Preparation and control requirements prior to starting the work Preparations prior to starting the work Area technician Prior to clearing the work for execution, the area technician must ensure that the necessary operational and safety preparations, including the identification of risks and measures, have been completed as required by the WP and in accordance with applicable procedures. Executing skilled worker The executing skilled worker shall carry out the required operational and safety preparations and take the identified risks into consideration in accordance with the WP and applicable procedure(s) for the relevant activity Control and clearance of the work at the work site and in the Central Control Room (CCR) The work process for the WP must include controls prior to commencement of the work in order to ensure that: The work site is safe The necessary deactivations and isolations of energy sources have been carried out The work does not represent a safety conflict in relation to any other work that is planned or currently ongoing Those affected by the work have been informed of any possible impact on their own work activities Appropriate communication and coordination meetings are held and important decisions are documented Executing skilled worker The executing skilled worker shall undertake the control tasks described above, and by signing the WP confirms that instructions regarding operational and safety preparations and identified risks have been understood and have been / will be carried out / taken into consideration. Area technician The area technician shall check that the WP form has been properly filled out and features the necessary approval signatures, and assess whether the work may be started, taking into account other activities that are in progress in the area. By signing the WP, the area technician confirms that the work site has been cleared in accordance with instructions and identified risks. CCR technician The CCR technician shall assess whether the work may be allowed to start, taking into consideration other activities currently in progress on the installation. The CCR technician confirms that the work has been cleared by the CCR by signing the WP or via another documented scheme.

21 No.: 088 Established: Revision no: 5 Date revised: Page: 21 The responsibility for maintaining an overview, control and clearance of WP level 2 may be delegated to the approver/area/operations supervisor or area technician in accordance with guidelines issued by the individual operating company Isolation of safety systems and isolation/locking of electrical equipment The isolation of safety systems and isolation/locking of electrical equipment shall be registered on the WP form or other isolation document used within the operating company. 3.7 Requirements during the execution of the work Starting the work The work may start when the necessary approvals have been given and the work site has been checked and cleared. An approved WP must be kept at the work site and shall be reviewed by involved personnel prior to starting the work Overview and control during the work CCR An overview of ongoing work that requires a WP level 1 must be kept in the CCR or the location at which this function is carried out in the context of WPs. The responsibility for maintaining an overview of WP level 2 may be delegated to the approver/area/operations supervisor or area technician. Planned and ongoing activities, as well as any extended WPs, shall be reviewed during handovers at shift changes. Area technician The skilled worker responsible for the plant and area(s) shall ensure the necessary control during the work, when the work is stopped or suspended, and upon continuation of the work. Planned and ongoing activities, as well as any extended WPs, shall be reviewed during handovers at shift changes. Executing skilled worker The executing skilled worker must contact the area technician regarding stopping and resuming the work Cancellation or suspension of a work permit A WP may be cancelled or suspended at any time, depending on the situation on the installation or at the work site. The work shall be stopped if: An emergency alarm sounds on the installation The preconditions and requirements that form the basis for the WP are no longer fulfilled

22 No.: 088 Established: Revision no: 5 Date revised: Page: 22 A hazardous situation arises or operational conditions necessitate stopping the work The work may be resumed when permission to do so is given over the PA system by the CCR, or continuation of the work is cleared by the area technician. The WP is rendered invalid if: The work has not been started within an hour of being cleared for execution and a gas test being carried out, when a gas test is required prior to starting the work If the scope of the work has changed and is no longer in accordance with the description in the WP 3.8 Requirements upon completion of the work Final control of the work and reactivation of safety systems Executing skilled worker The executing skilled worker shall undertake a final control at the work site when the work has been completed. By signing the WP, the executing skilled worker confirms that the work has been completed and that the work site is clean, tidy and secure. Area technician The area technician shall carry out a final control at the work site when the work has been completed in order to ensure that: The work has been completed in a satisfactory manner All isolations and disconnections have been removed, and that any safety systems disconnected locally by the area technician prior to or during the work are reconnected, and that this is noted on the WP The work site and systems have been returned to operation and reactivated in a safe condition and that the work site has been cleaned up The area technician shall undertake a final inspection together with the executing skilled worker. By signing the WP, both the area technician and executing skilled worker confirm that the work site is accepted, and indicate whether tags/locks have been removed and whether the equipment is ready for operation. CCR technician When the area technician and the executing skilled worker have completed the final section of the WP, the CCR technician shall reactivate any deactivated safety functions where relevant and register this on the WP form. By signing the WP, or using another documented scheme, the CCR technician confirms that the work has been cleared by the CCR. The responsibility for maintaining an overview, control and clearance of WP level 2 may be delegated to the approver/area/operations supervisor or area technician in accordance with the guidelines of the individual operating company.

23 No.: 088 Established: Revision no: 5 Date revised: Page: Level 2 work permit over several days The operating company may decide that a WP level 2 may be approved with a duration of up to 14 days and a maximum of seven (7) clearances. If this scheme is used, the WP level 2 form in Appendix B4 applies. The signature table in the WP level 2 form is used for the daily clearance/completion of the work. The signature table provides space to clear/complete the same WP over several days, so that it is not necessary to issue and approve a new WP for each day. It is emphasised that beyond this, the same procedures apply as for a WP level 2 with a duration of one shift. 3.9 Transfer of experience, learning and improvement Management is responsible for establishing routines that enable the transfer of experience, learning and improvement. This includes periodic verification of how the WP system is practised on the installation. WPs are filed in accordance with the individual operating company s guidelines Requirements regarding the training of personnel Management is responsible for ensuring that all personnel who issue or use WPs receive the necessary training in WP handling, the application of the WP procedure, and the operational safety procedures associated with operations. This includes completion of the Working Together for Safety (SfS) WP interactive e-learning course, the training of safety guards (fire, entry and work over sea), and training in the use of gas detectors and other safety and emergency equipment.

24 No.: 088 Established: Revision no: 5 Date revised: Page: 24 4 WORK PROCESS FOR PLANNING AND EXECUTION OF WORK PERMITS WPs are planned and executed in accordance with the main steps shown in the flow diagram below. Planning of the work permit Approval of the WP Operation and safety preparation Work permit (WP) Execution of the work Completion and reinstatement Experience transfer and learning A detailed workflow with roles and cross-references to the relevant part of the WP form is shown on the following pages.

25 No.: 088 Established: Revision no: 5 Date revised: Page: 25

26 No.: 088 Established: Revision no: 5 Date revised: Page: 26

27 No.: 088 Established: Revision no: 5 Date revised: Page: 27 5 STANDARD SAFETY REQUIREMENTS FOR LEVEL 1 WORK PERMITS 5.1 Introduction The objective of this section is to assist in establishing a standard practice for operational and safety preparations for WP level 1. The developed matrices represent a compilation and systematisation of the requirements that are commonly practised in the industry today, and aim to represent good operational practice. The individual operating companies may set stricter requirements if necessary. 5.2 Matrices covering standard safety requirements for work permits The matrices have been compiled to provide a concise overview of: Prerequisites and limitations that apply to the execution of a given type of work Required necessary operational and safety preparations The intention is that the matrices shall be used as checklists for different types of WPs, and thereby support the introduction of a common model for WPs on the continental shelf. If several types of work are involved on the same WP, all the relevant matrices should be taken into consideration. Checklists are also included for fire, entry and safety guards, covering: Duties of the fire guard Duties of the safety guard during entry into confined spaces Duties of the safety guard during work over sea

28 No.: 088 Established: Revision no: 5 Date revised: Page: Hot work class A Work with equipment and tools that constitute an effective ignition source and which when used in a normal manner may ignite an explosive atmosphere and/or solid materials or liquids, i.e. high energy is given off in the form of sparks, an open flame or electric arc, and/or the tool/equipment has a surface temperature that exceeds the ignition temperature for the exposed medium. Typical ignition sources include: - Welding - Hot tapping of piping/vessels under pressure - Ordinary grinding/cutting discs - Heat shrinking with open flame - Preheating using an open flame - Annealing - Burning Preconditions and limitations Limitations for hot work class A depend on the production status, as well as the classification of the area in which the work shall take place. Comments a) All hot work class A requires a separate advance assessment in accordance with the guidelines of the individual operating company. b) Additional limitations associated with drilling and well operations will apply in accordance with the procedures for simultaneous drilling and production given by the individual operating company. c) Not permitted during rundown/start-up of process systems when there is a risk of hydrocarbon release. d) Guidelines for the use of habitats are given by the individual operating company. Requires WP Level 1 Classified area Unclassified area Normal operation: Is hot work A allowed without habitat? No Yes (a) Yes Is hot work A allowed with habitat? Yes (a)(b)(c)(d) N/A N/A Production shutdown: Is hot work A allowed without habitat? Yes (a)(b)(c) Yes (a) Yes depressurised process plant Is hot work A allowed with habitat? Yes N/A N/A (a)(b)(c)(d) Operational and safety preparations by area technician 1. An SJA must always be carried out prior to the work. x 2. The equipment must be taken out of operation, depressurised, drained/emptied, cleaned/rendered gas-free/made inert. x x 3. The equipment must be isolated/blinded from other parts of the plant. x x 4. Prevent release of oil/gas in the area. Undertake thorough evaluations of potential leakage sources in the surrounding area. x x 5. Inspection of the work site: The area technician shall inspect the work site prior to and during the work. x x 6. Gas measurement prior to the work. x x 7. All safety systems in the area/adjacent areas shall be operative/compensating x x x measures shall be implemented. Operational and safety preparations by executing skilled worker 1. An SJA shall always be carried out prior to the work. x 2. Gas measurement at the work site: Continuous gas measurement so that the work can be stopped and the equipment secured if gas is detected. x x 3. Verify mechanical isolation. x x 4. Fire extinguisher/fire prevention measures: Including shielding against sparks with x x x fire blankets, inspection at the rear side of the work site or behind walls in cavities, removal or covering of flammable materials, removal of oil spills, gas bottle valves to be closed during interruptions/work stoppages, electrical earthing of equipment. Portable fire extinguisher/fire extinguishing equipment available at the work site. 5. Welding equipment safely located and earthed. x x x 6. Continuous guard/radio communication in accordance with Duties of the fire guard. x x 7. Drains/outlets in the area plugged/covered. x x 8. Barriers/warning signage. x x 9. Coordination with CCR/area technician. x x 10. Procedures/checklists for the operation read and understood by involved personnel. x x x 11. Special personal protective equipment for the operation noted on the WP in x x x accordance with the relevant work. WP not required Approved workshop

29 No.: 088 Established: Revision no: 5 Date revised: Page: Hot work class B Requires WP Level 1 in classified areas Work that constitutes a potential ignition source and which is not defined as hot work class A. Typical ignition sources include: Heat shrinking with an electrical heat gun Sandblasting, needle picking Electrical hand tools Electrical isolation testing (megger testing) Soldering equipment All electrical or battery-operated equipment/apparatus/instruments that are not Ex-protected in accordance with the classification of the areas in which they will be used Rotating steel brushes Preconditions and limitations Limitations associated with drilling and well operations will apply in accordance with the procedures for simultaneous drilling and production given by the individual operating company. Comments In unclassified areas this type of work may be performed with a WP level 2. Operational and safety preparations by area technician 1. Prevent release of oil/gas in the area. Undertake thorough assessment of potential leakage sources in the surrounding area. 2. Inspection of the work site: The area technician shall inspect the work site prior to and during the work. 3. Gas measurement prior to starting the work (in classified areas). 4. All safety systems in the area/adjacent areas must be operative/compensating measures implemented. Operational and safety preparations by executing skilled worker 1. Gas measurement at the work site: Continuous gas measurement (in classified areas) so that the work can be stopped if gas is detected. 2. Fire extinguisher/fire prevention measures: Use a suitable fire extinguisher. Consider whether removal or covering of flammable materials is necessary with regard to the work equipment to be used. 3. Procedures/checklist for the operation read and understood by involved personnel. 4. Special personal protective equipment for the operation must be noted on the WP in accordance with the relevant work.

30 No.: 088 Established: Revision no: 5 Date revised: Page: Entry into confined spaces Requires WP Level 1 Complete or partial entry into confined spaces or areas that are not normally naturally or mechanically ventilated, such as tanks, pipes, chain lockers and exhaust ducts. Preconditions and limitations 1. All pipelines connected to the container must be isolated using a spade blind. In special cases, other means of isolation may be accepted provided that the barrier is kept under continual control during all phases of the work. If such an alternative isolation method is used, it shall be specified in the individual operating company s work procedures. 2. The container/confined space must not be entered until the area technician has ensured that it is safe to do so and has given clearance to start the work. 3. A WP for entry is only valid for entry into the space and a visual inspection. A separate WP must be used for any other work to be carried out. 4. Documentation covering a minimum of the following shall be available: Isolations/valve and blind lists Marked-up drawings This documentation must be linked to the WP and stored in accordance with the guidelines of the individual operating company. Breathing air equipment must be in accordance with NS-EN and the Labour Inspection Authority s regulations regarding action and limit values and the Manufacturer Regulations (Produsentforskriften). Operational and safety preparations by area technician 1. An SJA shall always be carried out prior to the work. 2. The equipment shall be depressurised, drained/emptied, cleaned/rendered free of gas. 3. Equipment shall be isolated and blinded from other parts of the plant, including electrical and mechanical isolation. 4. Equipment shall be vented. Extra ventilation shall be used as required. 5. Measures against radioactive radiation: If radioactive scale deposits are suspected inside containers or pipes, the work must not proceed until the radiation levels have been measured. Permanently installed radioactive sources must be closed/shielded. 6. Inspection of the work site: The area technician shall inspect the work site prior to and during the work. The time interval for new gas tests must be specified on the WP. 7. Other: If iron sulphide is expected, the tank/container should be cleaned with water. Iron sulphide deposits should be kept moist and removed. 8. Gas measurement: Gas measurements including an oxygen test and other relevant industrial hygiene measurements must be performed prior to entry. Results of the measurements shall be noted on the WP. If the work has not started within one hour of clearance for entry being given, new gas tests shall be performed and a new clearance obtained. The concentration of flammable or toxic substances shall be reduced to a level that is not harmful to personnel when entry takes place without the use of protective respiratory equipment. The oxygen level must be 20.9%. Operational and safety preparations by executing skilled worker 1. An SJA shall always be carried out prior to the work. 2. Gas measurements at the work site: Continuous gas/oxygen measurement so that the work can be stopped if gas/lack of oxygen is detected. 3. Verify mechanical isolation. 4. Electrical isolation/locking as necessary. 5. Continuous guard/radio communication in accordance with Duties of the safety guard. 6. Barriers/warning signage. 7. Chemical datasheet or action card read and available. 8. Procedures/checklists for the operation read and understood by involved personnel. 9. Special personal protective equipment for the operation must be noted on the WP in accordance with the relevant work. See also Duties of the safety guard.

31 No.: 088 Established: Revision no: 5 Date revised: Page: Other requirements /preparations prior to entry: All lamps/lighting used inside the container shall be of an explosion proof type when entering an atmosphere that may contain hydrocarbons. All equipment used for the ventilation of containers must be explosion-proof, preferably pneumatically-operated. Use of electricity is not permitted in tanks in which an explosive atmosphere may be present. If electrical lighting/equipment is used (after the tank/container has been cleaned and there is no risk of explosion) a suitable earth fault protection relay must be used. Escape routes must be identified and known to involved personnel. Gas bottles must not be brought inside tanks/containers. Gas hoses must be removed from the tank/container and the bottle valves closed whenever the work is stopped. Special caution must be exercised when entering tanks/spaces that have been rendered inert.

32 No.: 088 Established: Revision no: 5 Date revised: Page: Isolation of safety system Requires WP Level 1 Work that involves the isolation, testing and bypassing of safety systems. Safety systems include but are not limited to: Emergency shutdown systems Fire-fighting systems Blowdown system Detection systems Alarm systems Emergency power and non-interruptible power supplies Evacuation systems and equipment PA systems For a detailed overview of safety systems, refer to the provisions for the specific installation. Preconditions and limitations 1. The isolation of safety system functions shall always be assessed on the basis of the consequences and risks associated with the isolated function. Isolation shall always be considered with regard to other activities on the installation, including drilling and well operations, hot work and other work on safety systems. Compensating measures shall be implemented. 2. The person responsible for areas/systems affected by the isolation of safety systems must be informed of the work in advance. If the isolation affects more than one installation, the relevant installations must be contacted for coordination. 3. Work to be undertaken while the safety system is disconnected must be planned with the smallest scope and shortest duration possible. 4. An up-to-date overview of isolated safety systems on the installation must be available at all times. Comments 1. Routine testing as a part of the preventive maintenance of fire and gas detection systems, emergency shutdown systems and PA systems, and the testing of emergency generators, is not regarded as isolation of a safety system when performed in accordance with an established programme where dedicated personnel are present at the specific location at the facility and in the CCR. Such work may be performed with a WP level Brief isolation of fire and gas system detectors during routine draining/bleed off performed by the area technician may be carried out without a WP. 3. Brief isolation of single devices in the process shutdown system, performed by the CCR technician in the event of special operational needs such as the start-up/run down of systems, draining of level switches, etc., may be performed without a WP. Operational and safety preparations by area technician 1. Safety tags/locking. 2. Isolation of safety system: Compensating measures must be implemented so that sufficient barriers are in place at all times. Examples of such compensating measures include use of a safety guard in the area, placing additional firefighting equipment in the area, installing additional detection equipment, the use of additional communications equipment, the use of alternative evacuation/rescue equipment, etc. Isolation and reactivation must be logged in accordance with the guidelines of the individual operating company. Operational and safety preparations by executing skilled worker 1. Continuous guard/radio communication must be considered as a compensating measure. 2. Barriers/warning signage to be considered in each individual instance. 3. Coordination with CCR/area technician. 4. Procedures/checklists for the operation read and understood by involved personnel.

33 No.: 088 Established: Revision no: 5 Date revised: Page: Work on hydrocarbon system Requires WP Level 1 Work on piping system, tanks and associated components that pose a risk of the release of produced oil/gas/condensate. Other work on hydrocarbon systems may be carried out with a WP level 2. Routine work with existing procedures may be carried out with a WP level 2. Preconditions and limitations Documentation that covers a minimum of the following shall be available: Isolation/valve and blind lists Marked-up drawings This documentation must be linked to the WP and be stored in accordance with the individual operating company s guidelines. Operational and safety preparations by area technician 1. Depressurisation of the equipment. 2. Draining/emptying if piping system/equipment is to be opened. 3. Cleaning/removal of gas to be assessed with regard to the work to be carried out. 4. The equipment must be isolated/blinded from other parts of the plant in accordance with the individual operating company s guidelines if the piping system/equipment is to be opened. 5. Safety tags/locking. 6. Other: Checks for possible leaks must be performed and the affected equipment must be checked for H2S and benzene where these are likely to be present. Operational and safety preparations by executing skilled worker 1. Verify mechanical isolation. 2. Consider electrical isolation/locking. 3. Coordination with CCR/area technician to be assessed with regard to the work to be performed. 4. Chemical datasheet or action card read and available. 5. Procedures/checklists for the operation read and understood by involved personnel. 6. Special personal protective equipment for the operation must be noted on the WP in accordance with the relevant work.

34 No.: 088 Established: Revision no: 5 Date revised: Page: Pressure testing Requires WP Level 1 Testing of newly installed or modified tanks/piping/xmas trees in accordance with an approved pressure testing procedure and testing above working pressure and/or design pressure. Preconditions and limitations 1. Executing personnel must have knowledge of the equipment to be tested (design conditions, pressure rating, etc.) and the equipment to be used during testing. 2. A test procedure for the relevant job must be available, and include a work description covering isolations/valve and blind lists and marked-up drawings. 3. A liquid test medium (water) shall normally be used. If any other test medium is used as an exception, this must be clearly stated on the WP. Operational and safety preparations by area technician 1. Isolation/blinding. 2. Safety tags/locking. Operational and safety preparations by executing skilled worker 1. Verify mechanical isolation. 2. Continuous guard/radio communication. 3. Implement barriers/warning signage. 4. Coordinate with CCR/area technician. 5. PA announcement prior to and upon completion of the work. 6. Procedures/checklists for the operation read and understood by involved personnel. 7. Other requirements/preparations: Equipment used for pressure testing must be calibrated, approved and certified. Alternative escape routes must be established if normal escape routes are blocked.

35 No.: 088 Established: Revision no: 5 Date revised: Page: Work over sea Requires WP Level 1 Work over sea refers to work that takes place outside permanent railings where there is a risk of a person/persons falling into the sea. The use of rope access (RA) is not defined as work over sea when it is performed in accordance with NS 9600 (SOFT Standard); Arbeid I tau (Rope access techniques). Ref. section Other activities/critical operations requiring WP Level 1. Work in a hydraulic basket in a moon pool and on approved scaffolding is not defined as work over sea when extra barriers are used. Example of extra barriers include: Fall arrest equipment Man-riding belt Net Scaffolding with extra high railings, erected in accordance with class 3 and certified as class 2. The scaffolding shall be re-certified once a week and following any effects of external influences such as inclement weather and strong winds Preconditions and limitations 1. Wind: 30 knots measured at 10 m above sea level. 2. Waves: Max. wave height of 5 m (equivalent to 3 m significant wave height). Emergency response: Establish MOB response. Lighting/visibility: The work must only take place if there is sufficient lighting and visibility for the work and the rescue of personnel. 3. Roll/movement. The work must not take place if the roll or heave of a floating vessel poses a risk to involved personnel. 4. Diving operations: In the event of diving close to the work site, the person responsible for the operation on board the diving vessel shall decide whether work over sea may be permitted. Comments: a. Stricter limitations may apply on the individual installation due to possible launches, crane limitations, etc. b. For floating production installations with drilling activities, work over sea may be governed by special working procedures for the specific installation. Operational and safety preparations by area technician 1. Other: Avoid effluent/overflow from operational systems when personnel are working below cellar deck. Operational and safety preparations by executing skilled worker 1. Continuous guard/radio communication in accordance with Duties of the safety guard during work over sea. 2. Procedures/checklists for the operation read and understood by involved personnel. 3. Special personal protective equipment for the operation: Life buoy with line and light must be readily available. Personal protective equipment shall adapted to the work situation and may include a life vest/jacket, safety harness with integrated buoyancy aid, safety line and rescue belt. 4. Other requirements/preparations: The need for measures to prevent dropped objects falling to lower levels or onto vessels must be assessed.

36 No.: 088 Established: Revision no: 5 Date revised: Page: Work with radioactive substances Requires WP Level 1 Work with radioactive substances/isotopes including work on systems with radioactive scale deposits (LSA). Preconditions and limitations Regulations issued by the Norwegian Radiation Protection Use of Low radiation activities Authority (Statens Strålevern) must be complied with when radioactive Instrumentation Low Specific working with/using radioactive sources. The matrix below only isotope with radioactive Activity includes the requirements that directly relate to WPs. sources deposits (LSA) 1. Only authorised personnel may perform work involving radioactive substances and a radiation protection supervisor must be present at the installation. 2. LSA contaminated equipment and materials are classified as radioactive if the radiation activity exceeds 10Bq/g of 226Ra or the dose rate on the outer surface is over double the background radiation in the area. 3. Personnel who are to assist during radiography works or with LSA materials must have received information and training regarding radiation hazards and relevant protection. x x x x x 4. The dose rate (Geiger counter) for exposed personnel must be measured prior to starting the work. 5. The emergency response plan for radiation protection must be known and understood and emergency equipment must be available. Operational and safety preparations by area technician 1. During LSA activities the area technician s operational and safety preparations will most often be associated with requirements regarding entry into confined spaces or work on hydrocarbon systems. x x x 2. Measures against radioactive radiation. x x x 3. Other: Radioactive radiation may affect instruments that are based on radioactive measurements. The impact on process equipment with such instruments must therefore be evaluated when using radioactive isotopes. x Operational and safety preparations by executing skilled worker 1. Barriers/warning signage/pa announcement: Areas where the x x x radiation level may exceed 7.5 micro Sv/hour are defined as hazardous areas that must be monitored, cordoned off and marked with signage that declares a radiation hazard. Other work activities are prohibited in such areas. PA announcement prior to starting and upon completion of the work. 2. Coordination with CCR/area technician. x x x 3. Procedures/checklist for the operation read and understood by involved personnel. x x x 4. Special personal protective equipment for the operation: Protective equipment shall be used in order to prevent skin contact with LSA materials or the inhalation of dust. Personnel working with isotopes must carry a personal dosimeter. This also applies when working with LSA if the exposure exceeds 7.5 micro Sv/h. x x x x x

37 No.: 088 Established: Revision no: 5 Date revised: Page: Other requirements/preparations: LSA materials must be kept moist in order to prevent the inhalation of dust. Openings on LSA contaminated equipment shall be covered or wrapped in plastic. Personnel who handle LSA materials must pay special attention to personal hygiene and thoroughly wash their hands prior to consuming food/beverages. LSA = Low Specific Activity radioactive scale x

38 No.: 088 Established: Revision no: 5 Date revised: Page: Work with dangerous substances Requires WP Level 1 Work operations involving chemical products classified as chemical substances and mixtures that may be hazardous to health or the environment, or pose a risk of fire or explosion. Examples of work with dangerous substances: Fire/explosion hazard: Handling/use of flammable chemicals where the volume and/or proximity to ignition sources poses a higher risk of ignition. Environmental hazard: Work that poses an increased risk of discharges of chemicals to sea, where the volume that shall be used exceeds 1 m3. Health hazard: Heating of materials that are surface-treated and which may result in the thermal decomposition of, for example, paint. Work on pipe systems, tanks and associated components that may pose a risk of the release of chemical products. Grinding, sandblasting or cutting of structures or work that generates dust or hazardous chemical pollution that is harmful to health and to which other personnel may be exposed. A WP level 2 is required in the event of: - Painting works involving the use of brushes and rollers, regardless of the hazard category. - Work on piping systems, tanks and associated components that do not entail a risk of the release of dangerous substances, or which have a lower risk. Exemption from WP: The individual operating company may decide that work operations or tasks in which chemicals are handled may be carried out without the use of a WP, ref. chapter Such activities may include: - Normal operating activities within production, drilling, logistics, maritime operations or hotel management if relevant procedures, safety datasheets and executed risk assessments with suggested barriers have been read and understood by the executing personnel. - Handling of chemicals in closed systems (pipes/hoses) with drip-free connections that prevent spills during connection and disconnection. - The use of small volumes of red or black chemicals (e.g. tubes of adhesive or sprays) where the work description forms part of the risk assessment. Preconditions and limitations 1. Chemicals shall be labelled in accordance with regulations and approved for use on the installation in accordance with the guidelines issued by the individual operating company. 2. Safety datasheets shall be available. Operational and safety preparations by area technician 1. Depressurisation of equipment if piping system/equipment is to be opened. 2. Draining/emptying if piping system/equipment is to be opened. 3. Cleaning/removal of chemical vapours must be considered with regard to the specific work to be carried out. 4. Isolation/blinding of equipment from other parts of the plant in accordance with guidelines issued by the individual operating company if the piping system/equipment is to be opened. 5. Safety tags/locking. 6. Other: Check for leaks. Safety datasheet or action card must be reviewed prior to starting the work. Operational and safety preparations by executing skilled worker 1. Verify mechanical isolation if pipe system/equipment is to be opened. 2. Barriers/warning signage: The area must be cordoned off if there is a risk that other personnel may be exposed. 3. Safety datasheet or action card must be available and reviewed by executing personnel prior to starting the work. 4. Procedures/checklists for the operation read and understood by involved personnel. 5. Special personal protective equipment for the operation: Protective equipment shall be used in accordance with the safety datasheet or action card. Safety equipment such as an emergency shower and eyewash station shall be available. 6. Other requirements/preparations: Products shall be stored and used correctly in accordance with the safety provisions outlined in the safety datasheet.

39 No.: 088 Established: Revision no: 5 Date revised: Page: Work with explosives Requires WP Level 1 Preparation, arming and control of explosives. Preconditions and limitations 1. Only authorised personnel may carry out this type of work. Operational and safety preparations by area technician Operational and safety preparations by executing skilled worker 1. Barriers/warning signage: The area must be cordoned off and marked with warning signage. 2. PA announcement prior to starting the work. 3. Procedures/checklists for the operation read and understood by involved personnel. 4. Other requirements/preparations: In the event of well operations involving the use of explosives, the perforation and safety procedures must be described in the relevant programme. Radios must be secured if radio silence is required.

40 No.: 088 Established: Revision no: 5 Date revised: Page: Fire, entry and safety (FES) guards The following prerequisites are used for the selection of personnel to act as FES guards: - FES guards shall not be connected to rescue efforts. - Personnel who hold valid basic safety and emergency response training for the continental shelf have the necessary general competence. - Personnel who have completed basic training for onshore facilities (two day course) hold the necessary general competence. - It must be ensured that no conflict arises between the work tasks of FES guards and other work or rescue activities and/or physical work. - It is recommended that FES guards are equipped with a vest that renders their role visible.

41 No.: 088 Established: Revision no: 5 Date revised: Page: Duties of the fire guard The fire guard must: Have received necessary training in accordance with company guidelines. Be identified/marked so that it is clearly visible who holds the guard function. Have participated in any SJA that has been performed/have reviewed the SJA. Have located the nearest manual fire call point/telephone. Have agreed a stop signal with executing skilled workers. Have established radio communication with the CCR if required by the WP. Have an intact dry chemical fire extinguisher at the work site and other firefighting equipment as required by the WP. Have located the nearest fire hydrant/hose reel and checked that it is functioning. Have located the release button for the relevant sprinkler system. Ensure that the involved personnel are familiar with the escape routes. Have checked and placed a portable gas detector at the work site. Know where the electrical power supply to welding/electrical equipment can be switched off. OK Ensure that the area is tidy and cleared of flammable materials, including behind and beneath the work site and inside cavities. Ensure that the necessary equipment is covered with fire blankets. Ensure that drains have been plugged/covered. Ensure that gas bottles have been secured. Ensure that hoses/cables are in good condition and suspended in a safe position. Ensure that fire blankets or the equivalent will prevent the spread of sparks. Not take an active part in the work and always be present when hot work is underway. Monitor the work situation and surroundings so that the work can be stopped should a situation that necessitates this arise. Stop the work if the portable gas detector s alarm sounds. Switch off electrical equipment/close gas bottles. Inform the area technician if safety systems have been isolated so that these can be reinstated. Be present at the work site during heat treatment until the temperature has cooled to 200 degrees Celsius. Ensure that no ignition sources that may ignite a fire at a later stage are left at the work site. Alert fellow workers and sound the fire alarm. Inform the CCR. Undertake immediate rescue efforts if such efforts can be made without risk to self or others. Shut off equipment/electrical power supply. Start fire-fighting/extinguishing efforts. Remove gas bottles from the area. Alert fellow workers and stop the work. Shut off equipment/electrical power supply and secure the work site. Muster according to the station bill.

42 No.: 088 Established: Revision no: 5 Date revised: Page: Duties of the safety guard during entry into confined spaces General Communication/ warning Emergency response / preparations During the work In the event of interruptions to / completion of the work Actions in the event of undesirable incidents during entry into confined spaces Other alarm situations The safety guard must: Have received necessary training in accordance with company guidelines. Be identified/marked so that it is clearly visible who holds the guard function. Have participated when the SJA was performed / have reviewed the SJA. Have located the nearest manual fire call point/telephone. Have established radio communication with the CCR and visual or radio contact with the personnel performing the entry job. Have agreed a stop signal with executing personnel. Have equipment for the rescue of personnel available at the work site, such as a safety line, rescue harness, explosion-proof flashlight, breathing apparatus with buddy mask and other rescue equipment as specified in the WP. Be capable of using/operating the rescue materials/equipment. Check and be able to use breathing equipment used for rescue. Ensure that involved personnel are familiar with the escape routes. Not take active part in the work and always be present when entry work is underway. Be located near the entrance to the tank/container/space, keep watch and monitor the number of personnel who enter. Monitor the work situation and surroundings so that the work can be stopped should a situation that necessitates this arise. Stop the work if the portable gas detector sounds an alarm. Secure equipment/the work site. Inform the area technician if safety systems have been isolated so that these can be reactivated. Alert fellow workers and sound the alarm. Inform the CCR. Undertake immediate rescue efforts if such efforts can be made without risk to self or others. Secure equipment/the work site. Alert fellow workers and stop the work. Secure equipment/the work site. Muster according to the station bill. OK

43 No.: 088 Established: Revision no: 5 Date revised: Page: Duties of the safety guard during work over sea The safety guard must: General Have received necessary training in accordance with company guidelines. Be identified/marked so that it is clearly visible who holds the guard function. Have participated in any SJA that has been performed/have reviewed the SJA. Communication / warning Emergency response / preparations During the work Interruptions / breaks / completion of the work Actions in the event of man over board Other alarm situations Have located the nearest manual fire call point/telephone. Have established radio communication with the CCR/radio room/mob function and the work site. Agree upon the communication routine with the involved parties, including the exchange of information at start-up, upon completion, and in the event of interruptions to the work. Communication channels shall be checked prior to starting the work. Ensure that the MOB function is informed and operational prior to starting the work. Ensure that involved personnel are familiar with the escape routes. Become familiar with the weather limitations for work over sea and the prevailing weather conditions. Not take active part in the work and always be present when work over sea is underway. Remain on the permanent deck of the installation and have an unobscured view of the executing personnel. Maintain an overview of the number of personnel involved in the work, keep watch and sound the alarm should personnel fall overboard. Monitor changes in weather conditions/visibility and light, and stop the work if the preconditions and limitations for the work are exceeded. Monitor the work situation and surroundings so that the work can be stopped should a situation that necessitates this arise. Secure equipment/the work site. Inform the area technician if safety systems have been isolated so that they can be reactivated. Adhere to the agreed communication routine. Monitor personnel until everyone has reported back to a safe location on the permanent platform deck. Alert fellow workers and the CCR/MOB function and sound the alarm. Throw out a life buoy. Maintain visual contact with the person. Secure equipment/the work site. Alert fellow workers and stop the work. Secure equipment/the work site. Muster according to the station bill. Monitor personnel until everyone has reported back to a safe location on the permanent platform deck. OK

44 No.: 088 Established: Revision no: 5 Date revised: Page: 44 APPENDIX A: GUIDELINES FOR COMPLETION AND USE OF THE WORK PERMIT FORMS A.1 Introduction These guidelines have been written to assist the user in the completion and use of the WP forms. A.2 Planning the work The applicant first selects the correct form, depending on whether the application is for a WP level 1 or WP level 2, and checks the relevant box(es) to indicate the type(s) of work involved. Section 1, top section Logo field Field for WP no. / bar code Field for activity / work operation Identification of level and type of operation/work Space for company logo Space for WP number and bar code to be printed/written Check the box to indicate the type of activity (does not apply for level 2) The applicant then completes the fields in the form that identify the work to be carried out and the person applying for the WP.

45 No.: 088 Established: Revision no: 5 Date revised: Page: 45 Section 1 Applicant name Discipline Phone Work description Identified risks Equipment/tools Installation Location/module Deck Tag/line no. Zone Attachment SAFE JOB ANALYSIS NO: REQUIRES APPROVAL FROM ELECTRICAL DEPARTMENT WORK ORDER NO.: OPERATION NO.: ISOLATION NO.: Day/Night/Ongoing work Date From Hr To Hr Extension to hr: Identification of the work and the person who is applying for the permit Name of the applicant in block capitals. Name of the discipline/department that is applying for the WP/will carry out the work. Internal telephone number on the installation where the applicant can be reached. Description of the work. A description of the risks associated with the work to be carried out. What hazards may be generated by the work? What types of accidents may occur and what is the worst that could happen? What forms of energy are in the immediate vicinity, and what risks might these represent? Measures must be implemented in order to mitigate the identified risk. Short description of tools and equipment that will be used, so that it is possible to identify the required operational and safety preparations based on this and the work description. Name of the installation where the work will take place. Name of the area/module where the work will take place. Name of the deck where the work will take place. Identification of tag/line number to be worked on. State the area classification of the area where the work will take place. Reference to attachments such as P&ID, ISO drawings or similar. Check the box if an SJA is required. Fill in the SJA number if applicable. For companies that have a work process where an electrical department is involved in the approval of WPs. Checking this box implies that an approval from the electrical department is required in accordance with company guidelines. Usually, the approver/area/operations supervisor checks this box. (When this requirement is specified, the responsible person in the electrical department signs part 3 of the form under Other position to provide his/her approval). Fill in the WO number, if relevant. If relevant, enter the operation number given in the WO or work description. If relevant, enter the number of the associated isolation document used in the operating company (e.g. isolation certificate, valve and blinding package or similar). Check the box for day, night shift or if the work is ongoing. (Ongoing work means that the WP is a continuation of work that has been carried out during the previous shift). Date applied for, when the work will take place. Planned time when the work will start. Planned time when the work will be stopped. Field for approval to extend the WP for up to 4 hours.

46 No.: 088 Established: Revision no: 5 Date revised: Page: 46 The applicant also completes section 2 with the operational and safety preparations that he/she recommends based on his/her knowledge of the work and the facility. In the planning stage of the work the relevant measures under Required are checked. Section 2 A Depressurisation Draining/emptying Cleaning/hydrocarbon removal Isolation by single valve / double block and bleed Blinding/isolation plan Safety tags/locks Venting / extra ventilation Prevent release of oil and gas in the area Measures against radioactive radiation Coordinate with other activities Operations and safety preparations Performed by area technician When depressurisation is necessary. When the equipment needs to be drained or emptied. When there is a need for cleaning of the equipment or hydrocarbon removal. When there is need for isolation by single valve or double block and bleed. When it is necessary to blind off the equipment from other parts of the plant or a more extensive isolation plan is required (isolation certificate, valve and blind package etc. in accordance with usual practice in the operating company). When safety tags or locking of the equipment to be worked on is required, including driving gear. When ventilation/airing out or extra ventilation is required. When special precautions are required to prevent the release of oil and gas in the area, e.g. avoid taking samples. When measures against radioactive radiation are required (radioactive deposits, radioactive instruments, use of isotopes). Check the box here when there is a need for special coordination with other activities. Inspection of the area every... hours When regular inspections by the area technician are required. State the necessary inspection interval. Other Space for specification of other requirements. GAS MEASUREMENTS PRIOR Check the box for the specific type of gas measurement required TO/DURING THE WORK and, where relevant, the time interval between each measurement that the area technician or other function shall adhere to. The executing skilled worker must have a separate portable gas detector for continual gas measurement at the work site, and there is a separate checkbox for this in part 2B of the form. ISOLATION OF SAFETY SYSTEM Check the box to specify whether the isolation of the safety system is to be performed locally or by the CCR. Also state which system(s) will be involved, what location on the installation will be affected and the necessary compensating measures.

47 No.: 088 Established: Revision no: 5 Date revised: Page: 47 Part 2 B Portable gas detector no. at the work site Verify mechanical isolation Electrical isolation or locks Fire extinguisher or fire prevention measures Welding equipment safely located and earthed Continuous guard / radio communication Drains blocked or covered Barriers or warning signs Coordinate with CCR/area technician Follow requirements for work over sea or work at height Safety datasheet or action card read and available Procedure or checklist for the operation read and understood Operational and safety preparations Performed by executing skilled worker When continuous gas measurements are required. Note the identification number for the instrument on the form. The type of gas that shall be measured must be in accordance with that specified in part 2A under GAS MEASUREMENTS. When mechanical isolation shall be verified by the executing skilled worker. When electrical isolation or locking is required. For detailed isolation routines, refer to the individual operating company s procedures. There is also a line where the tag number of the equipment to be isolated can be stated. When measures to prevent fire are required. The measures must be suited to the actual work to be performed and be in accordance with procedures/checklists. When using electrical welding equipment. When a safety guard is required during hot work, entry to confined spaces, work over sea and/or it is a requirement that the executing skilled worker must be able to be contacted via radio. When blocking or covering drains is required during hot work. When barriers and/or safety signage is required at the work site. When special coordination is required between the executing skilled worker and CCR and/or area technician. During work over sea or at height there may be requirements relating to the emergency response should personnel fall overboard, requirements relating to weather limitations, the use of special personal protective equipment, etc. The measures must be in accordance with the specific work and correspond to applicable procedures/checklists. When required, safety datasheets or action cards should be read and available in connection with the use of dangerous substances. Checking this box indicates that there are procedures or checklists for the specific operation that should be read and understood by involved personnel. There is a space to enter the relevant procedure or checklist number. Control of temporary lifting equipment Checking this box indicates that documentation exists which certifies that the temporary lifting equipment is approved for use and that the user of the equipment has the required competence in accordance with the requirements given in relevant regulations. Follow requirements for entry into confined spaces Special personal protective equipment for the operation Measures to avoid occupational illnesses Other requirements/preparations Check this box to include requirements for entry into confined spaces. The measures must be appropriate to the specific work and in accordance with procedures/checklists. Check here when special personal protective equipment beyond that which is standard is required. The actual type of equipment shall be noted on the WP form. When there is a need to prevent occupational illnesses. This may for example be the use of lifting equipment to avoid unnecessary strain, remembering time limitations when working in noisy areas, facilitating variation in the work to avoid physical wear and tear, etc. Specific measures shall be noted in the allocated space. Space to specify other requirements and/or preparations. If a need to implement stricter operational and safety preparations is identified, additions may be made during any stage of the work, including during planning, after a pre-job discussion or during the execution of the work. Field 8 may be used if there is not enough space in field 2B.

48 No.: 088 Established: Revision no: 5 Date revised: Page: 48 The approver/area/operations supervisor reviews the WP application prepared by the applicant. He/she checks that the necessary operational and safety preparations have been specified in accordance with the above guidelines. If necessary, he/she may enter additional measures beyond those specified by the applicant. He/she may also delete items by drawing a line through the relevant item on the form and adding his/her initials, so that it is clear who made the change. It is emphasised that a close dialogue between the applicant and approver/area/operations supervisor is necessary during the planning stage in order to ensure a mutual understanding of the required measures. A.3 Approval of the work permit The approver/area/operations supervisor gives his/her approval by signing the relevant section of the form. If the area and operational responsibility is divided between two parties, both will sign on their respective side of the dotted line, so that approval is granted by both parties. WP level 2 may be approved by the approver/area/operations supervisor. WP level 1 requires additional processing as described below. For companies that have a work process where an electrical department is involved in the approval of WPs, the Other Position field may be used by the responsible person in the electrical department. The HSE function checks and quality assures the WP application completed by the applicant and the approver/area/operations supervisor. The HSE function may add requirements or remarks to the WP through a dialogue with the applicant and the approver/area/operations supervisor if necessary. The overall approver/platform manager assesses the WP application against other simultaneous activities and provides his/her approval by signing in the allocated field. Part 3 Authorisation/approval Approver/area/operations supervisor Other position HSE function Overall approver/platform manager Remarks/requirements Explanation Signature from approver/area/operations supervisor Signature from other position when relevant. For companies that have a work process where an electrical department is involved in the approval of WPs, the relevant individual shall sign here Signature from the HSE function (signature for quality assurance) Signature from the overall approver/platform manager Space for any remarks/preconditions given during the approval phase. These will often be linked to simultaneous activities/other WPs in the same area.

49 No.: 088 Established: Revision no: 5 Date revised: Page: 49 A.4 Preparation of equipment and facility prior to starting the work A.4.1 General The area technician checks that the WP has been correctly completed and has the required approval signatures, and evaluates whether the work can be started taking into account other ongoing activities in the area. He/she performs his/her operational and safety preparations and enters his/her initials in the relevant field in section 2A when the measures have been completed. When safety systems are isolated locally, the area technician signs the relevant field in section 4A of the form. If the isolation is to take place at a later stage of the work, this is noted as a remark. Gas measurements and industrial hygiene measurements are performed if required. For entry into confined spaces, the gas measurements are logged in section 4B of the form, together with the time and individual s initials. The relevant space in the table is used to specify another type of gas than those specified, such as benzene. The area technician provides his/her clearance by signing the Work site cleared in accordance with requirements field. The time is also noted on the form. The executing skilled worker carries out his/her operational and safety preparations and enters his/her initials in the relevant field in section 2B when the measures have been completed. If there are measures that will be executed at a later stage in the work, such as a PA announcement, the signature expresses that the executing skilled worker is aware of the requirement and that he/she will ensure that it is carried out at the relevant point in time. Prior to starting the work, the executing skilled worker enters his/her name in block letters in the Precautions understood and are/will be fulfilled field. CCR Technician For the isolation of safety systems, the CCR technician signs section 5A of the form to signify that the system(s) have been isolated as required. If the isolation is to take place at a later stage of the work, this is noted as a remark. When the work is cleared for start-up, the CCR technician signs the The work is cleared with CCR field in section 5A of the form. He/she also notes the time. If the responsibility for maintaining an overview of and clearing level 2 work is delegated to the approver/area/operations supervisor or area technician, the CCR does not sign/keep a copy of the WP at this stage. A.4.2 Work permit level 2 over several days If the prepared application covers a WP level 2 that has been approved for several days, the signature table in part 5 of the form is used from the second time that the work is cleared for execution. A.5 Execution of the work General

50 No.: 088 Established: Revision no: 5 Date revised: Page: 50 The executing skilled worker is now ready to start the work. He/she shall keep the original WP available at the work site. The area technician follows up the WP in accordance with the given requirements. Extension If it becomes necessary to extend the WP, the relevant field in section 1 is used. Space has been provided to note the time at which the extension expires and for relevant signatures. For a WP level 2 approved for several days, the signature table is also used for the approval of extensions. A.6 Completion and reactivation A.6.1 General The executing skilled worker completes section 6B when the work has been completed. The relevant boxes are checked to indicate whether the work site has been cleaned and cleared (including the source separation of waste) and whether the work has been completed. The executing skilled worker then signs the form. The area technician specifies whether locks/tags have been removed and whether the equipment is ready for operation in section 6A. Any locally isolated safety systems are reactivated and a confirming signature is provided in section 4. Finally, the area technician notes the time and signs in section 6A. The CCR technician reactivates isolated safety systems and confirms that this has been done by signing section 6A. If the responsibility for maintaining an overview of and clearing level 2 work is delegated to the approver/area/operations supervisor or area technician, the CCR does not sign/keep a copy of the WP at this stage. A.6.2 Level 2 work permit over several days The signature table in section 5 of the level 2 form is used when temporarily terminating a WP level 2 that applies for several days. Section 6 of the form is then used when the work is finally completed. A.7 Signing General The entire work team signs in this field in order to ensure that everyone is familiar with the details of the WP particularly those relating to the identified measures to mitigate risk.

51 No.: 088 Established: Revision no: 5 Date revised: Page: 51 APPENDIX B: WORK PERMIT (WP) FORMS B.1 Administration of the work permit forms It is an adopted principle that the individual operating companies shall not make changes to the standard WP forms, however the following rules apply: The companies shall use their own logo in the specified logo field of the forms. The companies may specify the use/distribution of WP copies in the specified field. The original form shall always be kept at the work site. Fields that are not used may be marked not used or be crossed out on the printed forms or forms generated from an IT system. Further changes shall not be made to the forms. Forms that shall be manually filled out and completed shall be identical to those found in the attached original PDF file. WP forms that are completed and printed using an IT system shall be printed with black text on white paper. B.2 Use of the form All companies shall use the dedicated form for WP level 1 or 2 as provided in Appendices B3 and B4.

52 No.: 088 Established: Revision no: 5 Date revised: Page: 52 B.3 WP Level 1 form Page 1

53 No.: 088 Established: Revision no: 5 Date revised: Page: 53 Page 2

54 No.: 088 Established: Revision no: 5 Date revised: Page: 54 B.4 WP level 2 form Page 1

55 No.: 088 Established: Revision no: 5 Date revised: Page: 55 Page 2