14.12.2012 Views

fire hazard management guideline - Brunei Shell Petroleum ...

fire hazard management guideline - Brunei Shell Petroleum ...

fire hazard management guideline - Brunei Shell Petroleum ...

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

Rev. 02<br />

<strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Company Sendirian Berhad<br />

F IRE H AZARD M ANAGEMENT<br />

G UIDELINE<br />

F IRE H AZARD M ANAGEMENT G UIDELINE<br />

FOR O FFSHORE F ACILITIES<br />

Document BSP-02-Guideline- 006<br />

Approved by: HSE<br />

Document Owner: HSE/4


<strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Co Sdn Bhd<br />

Document Control<br />

TYPE OWNER SECURITY CLASS<br />

Corporate Philosophy HSE/4 CONFIDENTIAL<br />

REFERENCE AUTHOR APPROVED BY<br />

BSP-12-Guideline-xxx HSE/4 HSE<br />

KEY WORDS<br />

Fire Hazard Management Guidelines<br />

Send improvement suggestions to the Document Owner through a Document Change Proposal Form<br />

according to:<br />

� Documentation Control Procedure (TMS0436).<br />

Revision Record<br />

REV REVISION DESCRIPTION DATE<br />

Draft Issued for internal BSP review 08-2002<br />

Draft Comments from the line incorporated 26-11-02<br />

Rev. 01 Comments from the line incorporated 23-01-03<br />

Rev. 02 Update following identification of spelling mistakes<br />

and inconsistent numbering of sections<br />

14-05-2004<br />

This document has a maximum validity of five years after the last revision date. Beyond this, it must be<br />

re-validated according to TMS0436. Confirm validity with the Document Owner (or through CORMS)<br />

before application.<br />

Distribution Control<br />

The distribution of this document is covered by the BSP livelink information<br />

Notice and Warning<br />

Copyright © 2002, <strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Company Sendirian Berhad<br />

This document is the property of <strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Company Sendirian Berhad (BSP), Seria<br />

KB3534, Negara <strong>Brunei</strong> Darussalam. Circulation is restricted to BSP and its designated associates,<br />

contractors and consultants. It must not be copied or used for any other purpose other than which it is<br />

supplied, without the expressed written authority of BSP.<br />

Except where provided for purposes of contractual requirements, BSP disclaims any responsibility or<br />

liability for any use or misuse of the document by any person and makes no warranty as to the accuracy<br />

or suitability of the information to any third party. Any misuse of the document is not authorised by<br />

BSP.<br />

Fire Hazard Management Guideline Rev.02 Page 2 of 39


<strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Co Sdn Bhd<br />

TABLE OF CONTENTS<br />

1 INTRODUCTION. ........................................................................................................................................... 4<br />

1.1 Terminology...................................................................................................................................................... 4<br />

1.2 Content of this Guideline .................................................................................................................................. 4<br />

1.3 Objective of Fire Protection .............................................................................................................................. 4<br />

1.4 Objectives of this document.............................................................................................................................. 4<br />

1.5 Fire Detection/Prevention/Protection/Response Philosophy............................................................................. 5<br />

1.6 Fundamental Requirements for Fire Protection ................................................................................................ 6<br />

1.7 Risk Assessment Process ................................................................................................................................ 6<br />

1.8 Basis for decision making on <strong>fire</strong> risk reduction measures. .............................................................................. 7<br />

1.8.1 Quantitative Risk Assessment.......................................................................................................................... 7<br />

1.8.2 Qualitative Risk Assessment............................................................................................................................ 7<br />

1.9 Codes and Standards ....................................................................................................................................... 8<br />

2 Fire & Explosion Assessment Tools & Techniques (not just identification?)......................................... 9<br />

2.1 Introduction....................................................................................................................................................... 9<br />

2.2 Planning and Team Composition.................................................................................................................... 10<br />

2.3 Tools and Techniques .................................................................................................................................... 10<br />

2.4 Documentation and Results.......................................................................................................................... 101<br />

3 Prevention of Fires and Explosions.......................................................................................................... 12<br />

4 Passive Fire Protection................................................................................................................................. 13<br />

4.1 General incl. walls coverings and furnishing ................................................................................................... 13<br />

4.2 Ventilation and Air-conditioning ...................................................................................................................... 10<br />

5<br />

5.1<br />

5.2<br />

Fire Detection, Annunciation & ESD......................................................................................................... 16<br />

Fire, Gas & Smoke Detection ......................................................................................................................... 16<br />

Annunciation................................................................................................................................................... 16<br />

5.3 ESD ................................................................................................................................................................ 17<br />

5.4 Depressurisation ............................................................................................................................................... 17<br />

6 Fire fighting Equipment ............................................................................................................................. 19<br />

6.1 Manual Fire Fighting....................................................................................................................................... 19<br />

6.2 Fireman’s Equipment...................................................................................................................................... 20<br />

6.3 Active / Fixed Fire Fighting Systems............................................................................................................... 21<br />

6.3.1 Firewater ........................................................................................................................................................ 21<br />

6.3.2 Hydrants & Hoses .......................................................................................................................................... 21<br />

6.3.3 Monitors ......................................................................................................................................................... 21<br />

6.3.4 Deluge............................................................................................................................................................ 21<br />

6.3.5 Sprinklers ....................................................................................................................................................... 22<br />

6.3.6 Foam systems................................................................................................................................................ 22<br />

6.3.7 CO2, water mist & Halon systems .................................................................................................................. 22<br />

6.4 Stand-by & Support Vessels .......................................................................................................................... 22<br />

6.4.1 Stand-by Vessel ............................................................................................................................................. 22<br />

6.4.2 FIFI1 Fire Fighting Vessel .............................................................................................................................. 22<br />

7<br />

7.1<br />

7.2<br />

7.3<br />

7.4<br />

7.5<br />

7.6<br />

Protection of Specific Areas...................................................................................................................... 23<br />

Living Quarters and Control Centres .............................................................................................................. 23<br />

Muster areas................................................................................................................................................... 23<br />

Office and Utility Areas ................................................................................................................................... 24<br />

Electrical Rooms............................................................................................................................................. 24<br />

Gas turbines ................................................................................................................................................... 24<br />

Helidecks ........................................................................................................................................................ 24<br />

7.7 Fire Systems Integrity Assurance ................................................................................................................... 24<br />

8<br />

8.1<br />

8.2<br />

8.3<br />

8.4<br />

Emergency Response ................................................................................................................................ 26<br />

Emergency Response Plan ............................................................................................................................ 26<br />

Fire fighting equipment ................................................................................................................................... 26<br />

Fire fighting and Rescue................................................................................................................................. 26<br />

Command and Control.................................................................................................................................... 26<br />

9 Information Feedback ................................................................................................................................ 27<br />

Appendix 1: Terminology<br />

Appendix 2 Type of Fires<br />

Appendix 3 Fire Scenarios and corresponding mitigation measures<br />

Fire Hazard Management Guideline Rev.02 Page 3 of 39


<strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Co Sdn Bhd<br />

1 INTRODUCTION<br />

1.1 Terminology<br />

For terminology / abbreviations used in this document reference is made to Appendix 1.<br />

1.2 Content of this Guideline<br />

This document provides a <strong>guideline</strong> for use for identification, prevention, detection and response systems for<br />

potential <strong>fire</strong>s on offshore oil and gas production and processing facilities. It is intended as a higher level<br />

document to the standards, DEPs and other Codes of Practice referenced in it. Explanatory notes and guidance are<br />

included to provide background information on the purpose and application of the referenced standards<br />

General recommendations:-<br />

• National legislation and DEP (BSP’s technical engineering standard) requirements should be applied as a<br />

minimum<br />

• The requirements of this <strong>guideline</strong> should be met where they exceed DEP requirements (this includes the<br />

application of Fire Risk Assessment).<br />

• Where (e.g. as a result of the Fire Risk Assessment) there is a specific situation for the subject facility that<br />

requires a deviation from the DEP then a deviation should be granted only providing the appropriate<br />

Technical Authority approves the justification.<br />

• In cases where there is no prescribed requirement in the DEP or rigid adherence to codes and standards is<br />

not appropriate (e.g. location of gas detectors, positioning of deluge sprinklers) the risk based analysis<br />

principles described herein should be adopted.<br />

The scope of this document excludes specific provisions for:<br />

• Mitigation of explosions (Refer DEP 80.47.10.12 Section H for guidance).<br />

• Concurrent operations where special provisions may be necessary to achieve the appropriate degree of<br />

control (Refer CPRA, CPEMA & CPPA methodologies)<br />

• Protection of offshore drilling rigs, ships, boats and other mobile facilities<br />

1.3 Objective of Fire Protection<br />

The primary objective of <strong>fire</strong> protection is to protect personnel, the environment, the assets and BSP’s reputation<br />

(PEAR) against the effects of <strong>fire</strong>s and explosions that may occur on a given facility, without endangering the<br />

lives of emergency response personnel (<strong>fire</strong> fighters & rescue teams) and without incurring untenable costs or<br />

maintenance requirements or adversely impacting on the environment.<br />

1.4 Objectives of this document<br />

The objective of this <strong>fire</strong> <strong>hazard</strong> <strong>management</strong> <strong>guideline</strong> is to provide corporate guidance on the means to:<br />

• Prevent the occurrence of <strong>fire</strong>s<br />

• Detect gas/vapour releases<br />

• Detect <strong>fire</strong>s if they occur<br />

• Extinguish or mitigate the effects of <strong>fire</strong>s (as appropriate to the specific <strong>fire</strong>)<br />

• Tailor emergency response for specific <strong>fire</strong> scenarios.<br />

This process would require the identification and analysis of realistic potential losses of containment and<br />

associated <strong>fire</strong> types, sizes and effects for the subject facility.<br />

Fire Hazard Management Guideline Rev.02 Page 4 of 39


<strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Co Sdn Bhd<br />

The requirements set out in this philosophy document should be applied, either retrospectively (existing facilities)<br />

or at the design definition stage, to all new BSP offshore facilities being:-<br />

− manned facilities<br />

− not-normally manned facilities<br />

− unmanned facilities<br />

1.5 Fire Prevention/Protection/Responses Philosophy<br />

In general, all (Existing and New) facilities must undergo the HEMP process of identification, assessment, control<br />

and recovery with specific attention to potential of <strong>fire</strong> & explosions at the facilities.<br />

In every stage of the HEMP process the most appropriate / recommended methods to be used to assure protection<br />

on PEAR against FIRE must be defined. The primary objective of <strong>fire</strong> protection, detection and <strong>fire</strong> fighting<br />

facilities should be the preservation of human life.<br />

For manned, normally unmanned and unmanned offshore complexes / facilities, the first line of defence is gas/<strong>fire</strong><br />

detection followed by automatic isolation and dependant on the strategic importance of the facility, blowdown of<br />

the facilities.<br />

While all facilities are to be equipped with manual <strong>fire</strong> fighting equipment, manned complexes would also be<br />

equipped with <strong>fire</strong> water ring main systems, sprinkler systems, localised water mist systems and supported by<br />

trained <strong>fire</strong> fighters (trained in accordance with OPITO requirements). The prime objective of the <strong>fire</strong> team is to<br />

perform rescue operations, assist in securing the escape / evacuation of staff and fighting of minor <strong>fire</strong>s.<br />

The following philosophies are to be applied in response to the situation when potential Fire is occurring:<br />

Philosophies for (keep in mind on the PEAR): -<br />

Manned facilities<br />

- Means of protection for People must be provided: -<br />

- Escape route, mustering of people, evacuation of people, personal protection, etc<br />

- Means of rescue of people within a defined time scale:-<br />

- Means of evacuation of people from the facilities within a defined time scale:-<br />

- Removal of the source, Auto-protection of Asset, containment of hydrocarbon, blowdown of<br />

hydrocarbon, etc<br />

- Means of minimising escalation of FIRE must be provided: -<br />

- Means of communication on who should be involved, people awareness, minimising/avoidance of<br />

public knowledge, etc<br />

Not normally manned facilities<br />

- Means of protection for People must be provided: -<br />

- Escape route, mustering of people, evacuation of people, Personal protection, etc<br />

- Removal of the source, Auto-protection of Asset, automatic isolation of hydrocarbon and for<br />

strategic important facilities, , blowdown of hydrocarbon.<br />

- Means of minimising escalation of FIRE must be provided: -<br />

- Standby- vessel must be present and available within a defined time scale.<br />

Unmanned facilities<br />

- Means of minimising escalation of FIRE must be provided: -<br />

- Removal of the source, Auto-protection of Asset, automatic isolation t of hydrocarbon.<br />

Fire Hazard Management Guideline Rev.02 Page 5 of 39


<strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Co Sdn Bhd<br />

1.6 Fundamental Requirements for Fire Protection<br />

The following requirements are recommended:-<br />

• Identification, analysis and assessment of <strong>fire</strong> and explosion <strong>hazard</strong>s and effects.<br />

• Reduction of residual risks to personnel associated with potential <strong>fire</strong> and explosion scenarios to a level<br />

that is tolerable and as low as is reasonably practicable.<br />

• Fire detection, protection and response risk controls should be provided to a level that commensurate<br />

with the <strong>hazard</strong>s and risks on a facility, with the order of priority being:<br />

− Avoiding the occurrence of <strong>fire</strong>s<br />

− Protecting personnel against the immediate effects of gas/vapour releases<br />

− protecting all personnel against the immediate effects of <strong>fire</strong>s<br />

− removing personnel from the danger zone presented by potential escalation of the initial incident<br />

(<strong>fire</strong> or gas release)<br />

− preventing <strong>fire</strong> escalation<br />

− protecting the environment.<br />

− protecting the asset<br />

The analysis of <strong>fire</strong> and explosion risks may require quantitative modelling of releases and potential<br />

consequences. The subsequent assessment of risks to personnel from <strong>fire</strong> and explosion <strong>hazard</strong>s on<br />

manned complexes would normally require quantitative methods. For un-manned and not-normally<br />

manned facilities assessment a qualitative assessment would normally suffice, unless it is deemed that<br />

the level of personnel exposure and the <strong>hazard</strong>s involved justifies a quantitative approach. The advice<br />

of HSE/4 should be sought in determining the appropriate degree of assessment.<br />

Not withstanding the above order of priority, the primary objective of <strong>fire</strong> protection should<br />

always be the protection of human life.<br />

1.7 Risk Assessment Process<br />

Fire protection is to be provided so that risks are as low as reasonably practicable (ALARP).<br />

Through the application of the standards contained in this document and supplementary studies such as Hazard<br />

Identification, consequence modelling, <strong>fire</strong> and explosion analysis and escape analysis, which may ultimately feed<br />

in to a Quantitative Risk Assessment an assessment of risks to personnel (and assets) can be made.<br />

The outcome of this assessment should be compared with tolerability levels, performance standards etc. These<br />

studies may also identify opportunities for reducing risk as well as indicate the main contributors to overall risk<br />

that can then help focus risk reduction efforts. Finally these studies provide input to emergency response<br />

planning, including exercise programmes.<br />

This process would contribute to the demonstration of ALARP and provide the project manager and ultimate asset<br />

holder with a demonstration of assurance.<br />

The figure below gives a typical process for such assessments.<br />

Fire Hazard Management Guideline Rev.02 Page 6 of 39


<strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Co Sdn Bhd<br />

Process<br />

Events<br />

Hazard<br />

Identification<br />

Other<br />

Events<br />

Fire &<br />

Explosion<br />

Analysis<br />

Or<br />

FIREPRAN<br />

Explosion<br />

Protection<br />

Review<br />

Structural<br />

Response<br />

Analysis<br />

Misc<br />

Analysis<br />

Fig. 1: QRA Process Typical for a complex offshore facility<br />

1.8 Basis for decision making on <strong>fire</strong> risk reduction measures.<br />

1.8.1 Quantitative Risk Assessment<br />

Where there are options to consider or a decision is required on the appropriate level of <strong>fire</strong> detection and<br />

protection, comparative QRA may be used to provide support to the decision making process. This should not be<br />

done to justify a reduction in standard. In such cases the assessment criteria should be based on:<br />

� Either, a direct comparison of potential cost benefit based on differences in potential asset value and<br />

production loss, (Cost Benefit Analysis) or, where there is concern for safety<br />

� Or, an assessment of the implied cost to avert a fatality, ICAF. (refer EP 95 –0352 and Guide to<br />

application of BSP HSE Risk Tolerability and Control Acceptance Critieria Doc No. BSP-02-Guideline-<br />

005)<br />

� Or a combination of both (there may be circumstances where the application of CBA is not appropriate<br />

for example when the risk levels of individual workers are already at a high level).<br />

QRA may or may not provide a conclusive result; in such cases the decision must be based on qualitative risk<br />

assessment. In all cases factors such as perceived risk assessment and possible future changes in standards<br />

and legislation should be taken into account.<br />

The degree of <strong>fire</strong> protection provided for a facility may also be linked to the criticality of that facility in terms<br />

of securing BSP’s oil and gas production. Offshore this aspect must be taken in balance with the normally<br />

overriding safeguarding philosophy driver of personnel safety (onshore there is often more opportunity to<br />

have varying degrees of protection).<br />

1.8.2 Qualitative Risk Assessment<br />

Emergency System<br />

Survivability Analysis<br />

Evacuation &<br />

Escape Analysis<br />

Riser, dropped<br />

objects etc.<br />

studies<br />

QRA Support Studies<br />

(optional depending on facility)<br />

Exposure based<br />

Analysis<br />

Risk<br />

Tolerance<br />

Criteria<br />

Further<br />

Risk<br />

Reduction<br />

Measures<br />

-<br />

Feed in to<br />

design<br />

&<br />

Ops<br />

In combination with quantitative assessments the qualitative application of HEMP, in particular to develop bow-tie<br />

analysis (e.g. using the THESIS tool) in relation to assessing adequacy of controls should be carried out for<br />

representative <strong>fire</strong> scenarios. Here the number and effectiveness of threat barriers and escalation controls can be<br />

screened and assessed applying the qualitative risk tolerance criteria contained in BSP-02-Guideline-005. Bow-tie<br />

based analysis can address specific hardware, procedure and organisational issues such as the role of Permit to<br />

Fire Hazard Management Guideline Rev.02 Page 7 of 39<br />

QRA


<strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Co Sdn Bhd<br />

Work, emergency response measures and infrastructure that supports general <strong>fire</strong> safety, such as <strong>fire</strong>water supply.<br />

Bow-tie analysis would also identify critical activities essential to establishing and maintaining controls. It would<br />

be necessary to make a judgement and highlight the factors supporting such a judgement such as industry practice<br />

and standards. The ALARP principle that is integral to <strong>Shell</strong>’s HEMP process should be applied.<br />

1.9 Codes and Standards<br />

Generally, the <strong>fire</strong> protection on BSP facilities would be designed using a combination of engineering standards<br />

and <strong>fire</strong> and explosion risk assessment. [Ref 1.2]<br />

Specific Fire Engineering Standards used in BSP, are:<br />

ISO 13702 Standard <strong>Petroleum</strong> and Natural Gas Industries – Offshore Production<br />

Installations – Control and Mitigation of Fires and Explosions –<br />

Requirements and Guidelines, 1999<br />

NFPA 11 Foam Systems<br />

NFPA 12 Carbon Dioxide Extinguishing Systems 1993<br />

NFPA 13 Installation of Sprinkler Systems 1991<br />

NFPA 15 Water Spray Fixed Systems for Fire Protection 1985<br />

NFPA 20 Centrifugal Fire Pumps 1990<br />

NFPA 96 Fixed <strong>fire</strong> extinguisher system<br />

NFPA 101 Life Safety Code<br />

NFPA 105 Installation of Smoke Control Near Assemblies<br />

NFPA 750 Water Mist Systems<br />

CAP168 Licensing of Aerodromes<br />

(http://www.caa.co.uk/docs/33/CAP168.pdf)<br />

CAP437 Offshore Helicopter Landing Areas, Guidance on Standards<br />

(http://www.caa.co.uk/docs/33/Cap437.pdf).<br />

DEP 32.30.20.11 Gen Fire, Gas and Smoke Detection Systems<br />

DEP 80.47.10.10-Gen Fire fighting agents<br />

DEP 80.47.10.12-Gen Water-based <strong>fire</strong> protection systems for offshore facilities<br />

DEP 80.47.10.30-Gen Assessment of the Fire Safety of Onshore Installations<br />

DEP 80.47.10.31-Gen Active Fire Protection Systems and Equipment for Onshore Facilities<br />

SOLAS IMO Safety of Life at Sea<br />

OGP Fire Systems Integrity Assurance<br />

BSP-12.S.500 Process Safeguarding Standard<br />

BSP 12.2.201 Design of Helidecks<br />

BS-1400 British Standard for Foam Monitors<br />

BS-4275 British Standard for Breathing Apparatus<br />

BS-4547 British Standard for Portable Fire Extinguishers<br />

BS-6391 British Standard for Fire Hoses<br />

EP99-5807 Fire & Gas Methodologi (developed by SGSI)<br />

Fire Hazard Management Guideline Rev.02 Page 8 of 39


<strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Co Sdn Bhd<br />

2 FIRE & EXPLOSION A SSESSMENT T OOLS & TECHNIQUES<br />

2.1 Introduction<br />

Supplementary studies such as Hazard Identification, consequence modelling, <strong>fire</strong> and explosion analysis and<br />

escape analysis, which may ultimately feed in to a Quantitative Risk Assessment are introduced in Section 1.6.<br />

The formal studies adopted in BSP are summarised below. The details of the studies are documented separately,<br />

while the key findings are captured in Hazard and Risk Registers. Ultimately all studies should be referenced in<br />

the relevant HSE Case.<br />

2.2 Planning and Team composition and competency of participants<br />

2.2.1 Planning<br />

Execution of <strong>fire</strong> <strong>hazard</strong> studies (e.g. FIREPRAN) associated with new designs, should be planned and executed at<br />

an early stage e.g. conceptual design stage.<br />

2.2.2 Team Composition<br />

Most <strong>fire</strong> <strong>hazard</strong> studies and reviews are best executed by a team of staff representing different disciplines such as<br />

design & engineering, operations and for more complex studies and an HSE specialists with knowledge of HEMP<br />

tool appliance.. The exact composition of the team will need to be determined on the basis of type of review and<br />

the scope of work.<br />

2.2.3 Staff Competency<br />

a) Skilled Technical Safety Engineering (HSE-S1)<br />

� Specifies system requirements and manage the design, manufacture, commissioning and operation of all<br />

main safety systems.<br />

� Is consulted by other disciplines for guidance on the engineering of systems that have a role in major<br />

accidents.<br />

� Troubleshoots problems and produce effective solutions.<br />

� Advises line <strong>management</strong> on the impact of any system problems so that they are able to make wellinformed<br />

risk <strong>management</strong> decisions.<br />

b) Skilled applicant of specific HEMP Tools<br />

� Able to plan and execute a specific tool or technique.<br />

� Able to lead or undertake work associated with the application of a specific tool or technique<br />

� Uses a specific tool or technique to arrive at robust recommendations for risk reduction measures.<br />

� Effectively communicates both in writing and verbally, the process, the findings and recommendations<br />

from the application a specific tool or technique.<br />

� Can document the findings from the application of a specific tool or technique in a structured report e.g.<br />

HSE Case, Hazard Register etc.<br />

Incorporates workforce views into a specific tool or technique and is able to communicate results to workforce<br />

representatives.<br />

Fire Hazard Management Guideline Rev.02 Page 9 of 39


<strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Co Sdn Bhd<br />

2.3 TOOLS & TECHNIQUES<br />

2.3.1 HAZID<br />

� EP 95-0312 HAZID<br />

HAZID (HAZard IDentification) is described in <strong>Shell</strong> EP 95-0312. A HAZID study in the context of <strong>fire</strong>s and<br />

explosion focuses on identifying the <strong>hazard</strong>s, top events and possible causes of such events that may lead to a <strong>fire</strong><br />

and/or explosion. There may also be a high level identification of effects and targets (personnel, environment,<br />

assets). Such HAZIDs would tend to focus on specific facilities and cover various modes of operation over the<br />

project life cycle.<br />

HAZID should be carried out for all facilities. HAZIDs may be carried out as an integral part of other studies such<br />

as FRA and FIREPRAN.<br />

2.3.2 F(E)RA<br />

� Add EP 95 reference for a F(E)RA<br />

Fire (and Explosion) Risk Analysis is something of a misnomer: this study analyses <strong>hazard</strong>s, not risks. It would<br />

normally comprise a detail inventory of fuel sources for <strong>fire</strong>s, associated <strong>fire</strong> types and existing controls. An<br />

F(E)RA would normally be a desktop exercise. The F(E)RA should be undertaken by a competent (skill level)<br />

specialist with appropriate experience.<br />

F(E)RA’s are generally carried out as pre-cursor to QRA [Ref Fig. 1] where escalation scenarios are potentially<br />

complex.<br />

2.3.3 FIREPRAN<br />

� EP 95-0350 FIREPRAN<br />

� Fire and Explosion Standard (FIREPRAN), document number 1388-R-803, Rev 1 March 2000<br />

FIRE PRotection ANalysis is a scenario-based structured group assessment study aimed at determining the<br />

adequacy of existing <strong>fire</strong> protection measures and/or the need for new <strong>fire</strong> protection measures in the light of<br />

major <strong>fire</strong> and explosion <strong>hazard</strong>s at the subject facility FIREPRAN covers analyses what happens in various<br />

scenarios, model this and look at escape, structural loading, escalation etc FIREPRAN is a stand-alone technique<br />

that does not necessarily need to be supported by a QRA.<br />

FIREPRAN has its limitations when escalation is not predictable, for simple 2-dimensional facility analysis and<br />

simpler offshore facilities. FIREPRAN is fit for purpose. It is may be used on existing facilities but is also<br />

effective for screening and scrutinising designs.<br />

FIREPRAN is BSP’s preferred method for assessing the adequacy of <strong>fire</strong> protection measures on its hydrocarbon<br />

production and processing facilities. FIREPRAN’s should be carried out for:<br />

• Manned facilities<br />

• Not-normally-manned facilities where potential <strong>fire</strong>s and/or explosions are the major contributor to high<br />

personnel risks as measured by IRPA<br />

• Not-normally-manned and unmanned facilities where loss of the facility through <strong>fire</strong> or explosion would incur<br />

major financial impact on the company (directly or via reputation damage) or major impact on the<br />

environment,<br />

Fire Hazard Management Guideline Rev.02 Page 10 of 39


<strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Co Sdn Bhd<br />

2.3.4 QRA<br />

� EP 95-0352 Quantitative Risk Assessment<br />

Quantitative Risk Assessment involves quantification of risks to personnel and assets from identified <strong>hazard</strong>s, by<br />

application of generic failure data to the subject facility, with suitable parametric modelling to account for subjectspecific<br />

conditions.<br />

QRA should be performed for all manned facilities in order to determine:<br />

• that risks to personnel from <strong>fire</strong> and explosion <strong>hazard</strong>s are tolerable<br />

• compare the risk of alternative modifications / upgrades and to assist in the selection process in accordance<br />

with the ALARP principles<br />

QRA’s for BSP offshore facilities should preferably be performed using existing SQRAM QRA models where<br />

available or through development of new SQRAM models as necessary. Note that to date SQRAM models have<br />

been developed for all BSP’s offshore manned complexes and for a few of the not-normally-manned and<br />

unmanned offshore complexes<br />

�<br />

2.4 Documentation of Results<br />

Key findings of Fire Hazard studies should be included in the HSE cases for the respective facilities, while the<br />

study report should be made available in livelink. Action items identified as a result of the studies would normally<br />

be traced by the use of OmniSafe.<br />

.<br />

Fire Hazard Management Guideline Rev.02 Page 11 of 39


<strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Co Sdn Bhd<br />

3 PREVENTION OF F IRES AND E XPLOSIONS<br />

The first element of managing <strong>fire</strong> <strong>hazard</strong> is preventive; this section describes the required measures to prevent<br />

<strong>fire</strong>s and explosions from occurring. A large number of established measures contribute to prevention of release<br />

and, in the event of release, prevention of an ensuing <strong>fire</strong>:<br />

• Approved engineering design standards for equipment and systems<br />

• Classification of <strong>hazard</strong>ous areas, linked to requirements for all certified equipment installed or used in<br />

these areas<br />

• Maintenance of asset integrity (AIMS) including inspection work and change control<br />

• The Permit To Work system for control of maintenance and engineering activities<br />

• Procedure based control of major activities (drilling, construction, painting) through the CP procedures<br />

(CPRA, CPEMA, CPPA)<br />

• Proper organisation and maintenance of all facilities (“good <strong>fire</strong> safety practice”) including Control,<br />

Utility, LQ, Aviation, Marine<br />

• Safety audits, with follow-up<br />

• Timely detection of process upsets and corrective action<br />

• Effective shutdown and blowdown in process conditions likely to lead to immediate <strong>fire</strong> <strong>hazard</strong><br />

• Operator patrols of all areas<br />

• Operator and Fire Team Leader/Member incident response training<br />

• Smoking control<br />

• Specification and ongoing monitoring of furnishings and structure finishes to reduce ignition and <strong>fire</strong><br />

spread probabilities<br />

All of these measures are part of BSP’s normal HSE-MS and are not specific to control of <strong>fire</strong> <strong>hazard</strong>s. They are<br />

identified here for completeness.<br />

Fire Hazard Management Guideline Rev.02 Page 12 of 39


<strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Co Sdn Bhd<br />

4 PASSIVE FIRE PROTECTION<br />

4.1 General<br />

Passive <strong>fire</strong> protection (PFP) in the form of <strong>fire</strong> rated enclosures should be provided for control rooms,<br />

accommodation, offices and safety critical equipment rooms e.g. UPS. See section 7.1.<br />

PFP is not generally required for BSP’s process and utility installations, however specific cases can be justified<br />

through risk analysis and Cost Benefit evaluations.<br />

Where passive <strong>fire</strong> protection of equipment and structures is shown as justifiable to reduce risk, the specification<br />

should be appropriate to the risk. Particular care should be taken to ensure that any PFP that is installed does not<br />

compromise long-term asset integrity and takes proper account of inspection needs.<br />

For general requirement related to LQs, reference is made to SOLAS requirements.<br />

Some helidecks may be fitted with Enhanced Aluminium Helideck with a <strong>fire</strong> suppression system designed into<br />

the helideck surface structure. Such helidecks have a perforated appearance.<br />

4.1.1 Wall Coverings<br />

a) Wall coverings for “A” class walls should be of non-combustible materials.<br />

b) Wall coverings for “B” and “C” class walls should be of low <strong>fire</strong> spread materials.<br />

c) Continuous “B” class ceilings should be constructed of non-combustible materials.<br />

d) Suspended ceiling panels should be constructed of non-combustible materials.<br />

e) Interior finish materials, excluding floor material, should meet or exceed the requirements of class “A”<br />

interiors finish in accordance with NFPA 101 except that the smoke developed rating should be no higher than<br />

55.<br />

f) Interior flooring materials should meet or exceed requirements of a class 1 interior floor finish with a minimum<br />

critical radiant flux of 0.45 watts/sq.cm. as specified in NFPA 101.<br />

g) Interior finish paints which are shown to contribute to surface spread of flame should not be used. This<br />

requirement effectively limits interior finish paints to water based emulsion types only. Gloss paints are<br />

normally oil based and contribute to rapid <strong>fire</strong> spread.<br />

h) PVC and other plastic wall linings should not be used for bathroom/shower room finishing or fittings.<br />

i) For Local Control Room and Containerised Equipment Room located on manned and unmanned platforms<br />

A60 for external and B15 for internal partitions & floors are recommended.<br />

4.1.2 Furnishing<br />

Furnishings for the living quarters should, as far as practicable, be of non-combustible construction with flame<br />

retardant and/or low flame propagation material used throughout.<br />

a) Cabinets, lockers, drawers, shelving and related fittings should be factory fabricated and constructed of<br />

combinations of recognised <strong>fire</strong> retardant materials and non-combustible materials.<br />

b) Office furniture should be standard design and should be constructed of <strong>fire</strong> retardant materials.<br />

c) Bedding mattresses should be of low flammability material with a low ignition potential meetings standard<br />

ignition specification requirements of BS 7176 or equivalent.<br />

Fire Hazard Management Guideline Rev.02 Page 13 of 39


<strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Co Sdn Bhd<br />

d) Seating with expanded foam upholstery should only be permitted where smoke and flame inhibited foams are<br />

used on the construction.<br />

e) The number of furnishing items in cabins should be kept to that which is the minimum requirement for the<br />

occupants use.<br />

Additional lockers are accepted in cabins to cater for personnel working back-to-back.<br />

f) Twin cabins should have <strong>fire</strong> retardant curtains meeting International standards surrounding bunks for personal<br />

privacy.<br />

g) Additional table lamps, bedside lamps and other lamps of commercial design to be provided in addition to<br />

fixed lighting and should require to be of an approved safe design.<br />

Interior cabin carpeting should be of low ignition potential and low surface spread of flame and should be of<br />

low toxic fumes emission.<br />

h) Offices, cabins and recreation areas should be provided with non-combustible refuse bins without plastic<br />

lining.<br />

4.2 Ventilation and Air Conditioning<br />

4.2.1 General:<br />

HVAC systems should be designed to fulfil appropriate combinations of the following functions:<br />

a) Maintenance of a pressure differential between the internal and external of the living quarters.<br />

i. HVAC services to all areas of the living quarters should be fan powered.<br />

b) HVAC systems should run continuously during normal conditions in the living quarters but should, during<br />

a <strong>fire</strong> or emergency incident, be shut down with provision for start-up to required areas. Living quarters are<br />

segregated in zones by bulkheads and <strong>fire</strong> dampers. On detection of smoke or heat the effected zone is<br />

closed off / isolated and corridors kept smoke free by maintaining an over –pressure.<br />

i. HVAC systems should be capable of being kept in constant use by the provision of adequate stand-by<br />

systems.<br />

ii. HVAC systems controls and power supply from vital emergency power supply.<br />

iii. Air intakes for the living quarters should be located on the side of the platform furthest away from<br />

classified <strong>hazard</strong>ous areas.<br />

iv. Location of air intakes should take due account of the requirements for maintaining a habitable<br />

atmosphere in the living quarters and should be positioned such that they would not ingest exhaust<br />

fumes from platform motors, marine vessels or air exhaust from accommodation ventilation outlets.<br />

4.2.2 Specifics:<br />

a) Ventilation ducts should be constructed of non-combustible materials throughout.<br />

b) Ventilation ducts, external to the living quarters, shall be of welded and gas tight construction throughout.<br />

Cross-joints shall be sealed with appropriate gasket material.<br />

c) ‘A’-rated ducts internal to the living quarters shall be of welded and gas tight construction throughout. Crossjoints<br />

shall be sealed with non-combustible gasket material.<br />

d) Non ‘A’-rated ducts internal to the living quarters shall be shall be formed from light gauge sheet-metal.<br />

Longitudinal joints shall be lockformed with sealant applied to the joint. Cross-joints shall be sealed with<br />

gasket material<br />

Fire Hazard Management Guideline Rev.02 Page 14 of 39


<strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Co Sdn Bhd<br />

e) A positive pressure of at least 50Pa above outside atmospheric pressure should be maintained in the living<br />

quarters to minimise the ingress of smoke and gases.<br />

f) Fire/gas dampers should be installed in ducts at every location where ducts pass, either vertically or<br />

horizontally, through “H” or “A” or “B” class divisions and should meet the requirements of BS 476 Part 8 or<br />

equivalent.<br />

g) All <strong>fire</strong>/gas dampers and ducts should have as a minimum the same <strong>fire</strong> resistance and thermal insulation<br />

properties as the wall or deck in which they are to be located and should not impair the rating of the division.<br />

h) Fire/gas dampers should be of a type which permits a maximum leakage of 0.1 cu.m/sec per sq.m of damper<br />

face area where the damper is in the closed position and should be suitable for high velocity and pressure<br />

systems of 2000 Pa.<br />

i) Each <strong>fire</strong>/gas damper should have a suitable indicator fitted externally to identify open and closed positions and<br />

should remain open during normal operating conditions with all controls arranged to failsafe close in the event<br />

of loss of power.<br />

j) All <strong>fire</strong>/gas damper open and/or closed position status should be indicated on the main DCS system F & G<br />

graphics in the control room.<br />

k) Fire/gas dampers should be capable of operation by the following methods:<br />

- A quartzoid bulb in the air stream which should actuate at 68 degrees C.<br />

- Confirmed smoke or gas detection input to the F&G system<br />

- Manual operation of local pneumatic shut-down valve or switch.<br />

l) All main air intakes should be fitted with <strong>fire</strong>/gas dampers.<br />

m) All extract outlets should be fitted with <strong>fire</strong>/gas dampers.<br />

n) Where the exhaust ducts from kitchen ranges pass through accommodation areas or areas containing<br />

combustible materials such exhaust ducts should be constructed of class “A60” divisions and each exhaust duct<br />

should be fitted with the following:-<br />

- A grease trap easily and readily removable for cleaning.<br />

- A <strong>fire</strong>/gas damper located in the outlet end.<br />

- A manual <strong>fire</strong>/gas damper shut off control device.<br />

- A fixed <strong>fire</strong> extinguishing system complying with NFPA-96 or similar standard<br />

- Access for internal cleaning / de-greasing of exhaust ducts.<br />

o) All <strong>fire</strong>/gas dampers throughout the living quarters should have easy and simplified access for testing,<br />

inspecting and maintenance purposes.<br />

p) Air extraction from accommodation spaces into common ceiling voids should not be permitted and should be<br />

avoided by the provision of supply and return air registers and ducting in each accommodation space.<br />

q) Fire/gas dampers fitted to air outlets in external divisions should be rated for hydrocarbon <strong>fire</strong>s according to<br />

QRA results and findings.<br />

r) HVAC systems shall be designed to avoid transfer of air from rooms / cabins to corridors to assist in<br />

maintaining smoke-free escape routes.<br />

Fire Hazard Management Guideline Rev.02 Page 15 of 39


<strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Co Sdn Bhd<br />

5 FIRE D ETECTION, ANNUNCIATION & ESD<br />

5.1 Fire, Gas & Smoke Detection<br />

Fire, Gas & Smoke detector coverage should be provided in all areas, appropriate to identified <strong>hazard</strong>s and risks.<br />

Generally this means comprehensive coverage for manned facilities, with lesser coverage for not-normally manned<br />

and unmanned facilities, in accordance with the stated priorities set out in section 1.6. The minimum coverage,<br />

applicable to unmanned facilities, should comprise fusible plug heat detection<br />

In process areas the preferred type of detectors are IR flame detector for <strong>fire</strong> and IR flammable gas detectors of<br />

either the line of sight (LOS) or the point type for detection of hydrocarbon releases. Use of CCTV cameras may<br />

also be considered for new installations.<br />

In enclosed areas the preferred type of detector is generally a heat (rate compensated type) or smoke detector of<br />

either optical or ionisation type. For gas turbine enclosures see Section 6.3.7 and 7.5.<br />

Aspirating smoke detectors may be used for critical electrical switchgear rooms and should be designed in<br />

consultation with the equipment vendors and with reference to the E&P Forum report for Incipient Fire Detection<br />

(No 6.75/284) – note that the EE&P forum has since been renamed to OGP – Oil and Gas Producers. Aspirating<br />

Smoke Detectors may be considered for normally unmanned computer rooms, telecommunications rooms and<br />

electrical rooms.<br />

Location and type of detectors should be determined using the Fire and Gas mapping methodology as developed<br />

by SGSI. (EP99-5807). This must be linked into the QRA or FIREPRAN for the subject facility to ensure no<br />

scenario contradictions exist. The mapping exercise is done after QRA and FIREPRAN and adopts the scenarios<br />

from these.<br />

Zone areas should be determined during the FIREPRAN (analysis) or during the Fire and Gas mapping exercise,<br />

which considers gas dispersion mechanics and visibility to <strong>fire</strong> detectors. In principle zone areas on offshore<br />

platforms are created by physical barriers (e.g. <strong>fire</strong> rated walls) or in the absence of these, determined on a deck or<br />

platform basis.<br />

Voting rules for detectors are set out in section 5.3 below.<br />

In addition to Fire, Gas and Smoke detectors, CCTV should be used on manned facilities and critical notnormally-manned<br />

/ unmanned facilities, to allow the control room operators to view critical facilities.<br />

Personnel can also play a major role in FGS detection. Table 5.2 below sets out recommended practice on BSP<br />

complexes for provision of Audio Visual Alarms (AVA) associated with gas detection systems.<br />

5.2 Annunciation (applies to manned complexes only)<br />

Facilities should be provided in all areas to allow someone who detects <strong>fire</strong> <strong>hazard</strong> to raise the alarm promptly and<br />

communicate details by phone or walkie-talkie to the Control Room. The alarm should be raised as a higher<br />

priority than any attack on a <strong>fire</strong>.<br />

General Alarm points (GPA buttons) should be provided at each access and exit point on all decks including boat<br />

landings and helidecks.<br />

An efficient visual and audible alarm (AVA) and PA system is required, providing coverage for all areas of a<br />

complex or platform including living accommodation/quarters and boat landings used for alternative evacuation.<br />

AVA (alarms) should be provided at strategic locations and bridges, with automatic response on detection of gas<br />

or <strong>fire</strong>. Note that audible alarms should take account of background ambient noise levels and noise associated<br />

with any event for which the alarm is intended.<br />

The philosophy underlying the provision of AVAs is as follows:<br />

1. Personnel should be warned when a Fire or Gas event arises, i.e. Fire or Gas detected anywhere on the<br />

complex/ process area<br />

Fire Hazard Management Guideline Rev.02 Page 16 of 39


<strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Co Sdn Bhd<br />

2. Personnel are to be alerted to avoid platform/ process area where first level (i.e. 20% LFL or 1 LFL/m) gas or<br />

single <strong>fire</strong> has been detected.<br />

3. When gas detection on a platform has been detected (i.e. single or voted high-high) or where <strong>fire</strong> has been<br />

detected (i.e. single or voted) , a complex/plant wide alarm (i.e. including the affected platform/ process area)<br />

consisting of red / amber (depending on hi or hi-hi) flashing beacons and intermittent sounder would be<br />

raised.<br />

4. Prepare to Abandon Platform (PAPA) which is manually activated, should be implemented throughout the<br />

complex via the raising of the red flashing beacons and continuous sounder. In accordance with the DEP on<br />

Fire, Gas and Smoke Detection Systems (DEP 32.30.20.11-Gen) the sounder should be supplanted by a motor<br />

driven siren for increased reliability and should be fed from the vital switchboard.<br />

The following tabulates the philosophy:<br />

Table 5.2: FGS AVA Philosophy<br />

BSP’s philosophy with regards to FGS detection is based on automatic shutdown on confirmed <strong>fire</strong> and gas<br />

(detection) and applies also on all platforms and complexes. Therefore where FGS alarms are enunciated<br />

graphically on DCS, there is no requirement to provide a dedicated hard-wired mimic panel.<br />

5.3 ESD<br />

Central Control Room<br />

Platform/Process<br />

Area<br />

Amber flashing beacon<br />

Rest of Complex/Plant<br />

General Alarm Call Point X X<br />

Gas detector - High (Single) X X X<br />

Gas detector - High High (Single) X X X X X X<br />

Gas detector - High High (Voted) X X X X X X<br />

Flame detector - Single X X X X X<br />

Flame detector - Voted X X X X X<br />

Smoke detector - Single X X X X X<br />

Smoke detector - Voted X X X X X<br />

Heat detector X X X X X<br />

MCP / kill knob X X X X X<br />

PAPA X X<br />

Table 4.2 FGS AVA Philosophy<br />

Emergency Shut-Down is the first line of defence upon occurrence of a flammable hydrocarbon loss of<br />

containment or <strong>fire</strong> event. Both manual ESD and executive ESD provisions should be provided on BSP facilities.<br />

Manual ESD points should be provided at each access and exit point on all decks including boat landings, and in<br />

the control room.<br />

To avoid occurrence of trips due to spurious detection, executive action should be voted as follows:<br />

• for gas and flame detection: 2ooN/D i.e. 2 out of “N” number of detectors in the voting group/zone. “D”<br />

denotes that if any detector in the group has failed (non-deterministic fault) then the logic should revert to<br />

1ooN, i.e. single shot.<br />

• point smoke detectors should be voted 2ooN where “N” is the number of detectors in the zone. Aspirating<br />

smoke detectors (commonly known as HSSD - High Sensitivity Smoke Detectors) should be voted with<br />

Fire Hazard Management Guideline Rev.02 Page 17 of 39<br />

Red flashing beacon<br />

Sounder intermittent<br />

Amber flashing beacon<br />

Red flashing beacon<br />

Sounder intermittent<br />

Sounder continuous


<strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Co Sdn Bhd<br />

any point smoke detectors within the zone. The highest alert level from the aspirating smoke detector<br />

should be used (max. of incipient stage).<br />

• heat detectors (e.g. fusible plugs) are slow devices, not prone to spurious activation and should therefore<br />

never be voted<br />

5.4 Depressurisation<br />

The standard for blow down system are stated in our Process Safe guarding standard, BSP-12-Standard-500.<br />

Fire Hazard Management Guideline Rev.02 Page 18 of 39


<strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Co Sdn Bhd<br />

6 FIRE FIGHTING E QUIPMENT<br />

6.1 Manual Fire Fighting<br />

The general standard to be used for application of extinguishers for offshore manned complexes should be as per<br />

the BS-1400/4275/4547/6391 Standards (Reference is also made to BSP-02-Standard-001).<br />

Table 6.1 below shows the recommended provision of manual <strong>fire</strong> appliances on manned and not-normallymanned<br />

production and processing platforms. Provision of manual <strong>fire</strong> fighting appliances at accommodation and<br />

utility platforms must be assessed specifically because the <strong>fire</strong> <strong>hazard</strong>s are more complex.<br />

Table 6.1 : Provision Of Manual Fire Appliances<br />

Type of deck 9 kg dry powder 6kg or 4.5kg<br />

(min)CO2<br />

Deck which is<br />

plated or with<br />

a drip pan<br />

≥2 units at each<br />

access and exit<br />

point 1<br />

Wireline deck ≥2 units at each<br />

access and exit<br />

point 1<br />

Grated deck ≥2 units at each<br />

access and exit<br />

point 1<br />

Helideck ≥2 units Dry Powder<br />

extinguisher with a<br />

combined capacity<br />

of no less than 45<br />

kg.) A minimum of<br />

one unit to be<br />

installed at each<br />

access 5<br />

LQ Galley 1 unit at access<br />

and exit for 9kgs<br />

dry powder.<br />

≥1 units inside control<br />

or switchgear rooms<br />

≥1 units inside control<br />

or switchgear rooms<br />

≥1 units inside control<br />

or switchgear rooms<br />

≥2 units or more 22.5<br />

kg. CO 2 extinguishers<br />

with extension<br />

applicators capable of<br />

reaching the S61N<br />

engine <strong>fire</strong> fighting<br />

points. 5 .<br />

2 units within galley<br />

area with CO 2<br />

50kg<br />

wheeled dry<br />

powder<br />

(excl. unmanned<br />

complexes)<br />

≥1 unit at<br />

main access<br />

point 2<br />

Optional; at<br />

main access<br />

point 2 .<br />

Wheeled<br />

foam unit<br />

(AF120)<br />

(excl. unmanned<br />

complexes)<br />

Optional. for<br />

decks with<br />

pool or<br />

running <strong>fire</strong><br />

potential3 .<br />

Double outlet<br />

hydrants with<br />

hose cabinet<br />

(excl. unmanned<br />

complexes)<br />

1 at main<br />

access point 2<br />

Not required 1 at main<br />

access point 2<br />

Not required Not required 1 at main<br />

access point 2<br />

1 unit at<br />

each access<br />

2 units fixed<br />

foam monitor<br />

1 at main<br />

access<br />

Gallery<br />

should be<br />

provided with<br />

a <strong>fire</strong> blanket.<br />

Fire Hazard Management Guideline Rev.02 Page 19 of 39


<strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Co Sdn Bhd<br />

Notes:<br />

1 Access and exit points are considered to be<br />

• at bridge links connection to a platform<br />

• at entry to stairs to a deck<br />

• at entry to stairs leading to a boat landing<br />

1 The main access point to a deck is the bridge landing to the AP or the stairs leading directly to the boat<br />

landing. On a large deck, additional large extinguishers may be needed, e.g. CP decks<br />

1 Pool <strong>fire</strong> can occur on solid decks at decks under which there is a drip pan deck at equipment drip pans or<br />

spill containment<br />

4. Location of hydrants should be assessed as part of FIREPRAN exercise.<br />

5. Helideck <strong>fire</strong> extinguishers to be marked with next date due for test<br />

6.2 Fireman’s Equipment<br />

Each manned installation should carry a minimum of 4 (four) sets of Fireman's equipment. The sets of equipment<br />

would be kept in pairs, and one pair would be kept in a place that is readily accessible from the helicopter landing<br />

area.<br />

Each set contains:<br />

a) a protective outfit inherently <strong>fire</strong> resistant turnout gear including gloves, boots, a face mask or hood and<br />

helmet,<br />

b) a self contained breathing apparatus with minimum 30 minutes working duration (incl. Spare bottle),<br />

c) a <strong>fire</strong>man's axe,<br />

d) a safety harness and lifeline, and<br />

e) a portable , intrinsically safe, battery operated safety lamp capable of operating efficiently for a period of<br />

not less than 3 hours.<br />

In addition rescue equipment shall be provided in a crash box adjacent to the helideck as required by CAP 437<br />

f) an adjustable wrench<br />

g) 1 set bolt cutters<br />

h) 1 large crowbar<br />

i) 1 grab or salving hook<br />

j) a heavy duty hacksaw with 6 spare blades<br />

k) a <strong>fire</strong> resistant blanket<br />

l) a ladder<br />

m) a pair of side cutting pliers (tin snips)<br />

n) a set of assorted screwdrivers,<br />

All personnel assigned to rescue and <strong>fire</strong> fighting duties are provided with suitable personal protective equipment<br />

(PPE) such as; helmet and fitted visor, <strong>fire</strong> tunic and trousers (or one piece suit), gloves and boots.<br />

The protective equipment should meet appropriate safety standards and should not in any way restrict the wearer<br />

from carrying out his duties.<br />

Fire extinguishers would be available on unmanned platforms, but no <strong>fire</strong>men’s equipment, as the visitors are not<br />

expected to fight <strong>fire</strong>s.<br />

Fire Hazard Management Guideline Rev.02 Page 20 of 39


<strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Co Sdn Bhd<br />

6.3 Active / Fixed Fire Fighting Systems<br />

6.3.1 Firewater<br />

Firewater supply is required for all areas of manned facilities. For not-normally-manned and unmanned facilities,<br />

<strong>fire</strong>water is only required during hot work and may be temporarily supplied from the attendant workboat. Refer to<br />

DEP 80.47.10.12 for general requirement.<br />

At least one diesel engine driven <strong>fire</strong> pump is required as back up to electric motor driven pumps on manned<br />

facilities. All <strong>fire</strong>water pumps should be protected against the <strong>fire</strong>s for which they are required to operate. The<br />

main and emergency back-up pump sets should each be sized to provide adequate <strong>fire</strong>water for coverage of any<br />

one <strong>fire</strong> zone plus 2 hoses for rescue operations. Zone areas are created by physical barriers (e.g. <strong>fire</strong> rated walls)<br />

or in the absence of these, determined on a deck or platform basis according to <strong>hazard</strong> range. Note that entire LQ<br />

sprinkler systems should be counted as a single zone.<br />

A minimum practical <strong>fire</strong>water supply of 250 m³/hr with an operating pressure at the hydrant of 8 barg is required.<br />

This is ample for rescue operations and would also support one or two mobile monitors (see below).<br />

Wherever practicable the main <strong>fire</strong>water supply distribution should be in the form of a ringmain with isolatable<br />

sections that are not prone to common mode failure. However, it is recognised that this has not been achieved on<br />

all existing BSP complexes and retrofitting of new ringmains is rarely practicable (or cost justified). Consequently<br />

effort must be directed at protecting the main supply to ensure that the risk of supply failure during <strong>fire</strong> fighting<br />

and particularly during rescue operations, is ALARP and mitigation measures or alternative escape plans are in<br />

place to assure the safety of the <strong>fire</strong> / rescue teams.<br />

6.3.2 Hydrants & Hoses<br />

The purposes of hydrants are for support of hot work activities, and where practically safe to permit safe<br />

operations by a <strong>fire</strong> team engaged in rescuing casualties during an incident to provide cooling on equipment or<br />

structure during emergency. Where hydrants are provided to back-up fixed systems they should not be supplied<br />

from the same unisolatable <strong>fire</strong> main sections.<br />

All areas of manned facilities should have <strong>fire</strong>water hose coverage within two hose lengths from closest hydrants<br />

(to comply with standard <strong>fire</strong> fighting practice in providing redundancy of supply for rescue operations).<br />

6.3.3 Monitors<br />

Fixed monitors need positioned and re-positioned under <strong>fire</strong> conditions, to achieve effective cooling. Selfoscillating<br />

monitors or remote controlled monitors can provide useful cooling without the need for personnel to<br />

remain in the danger area. However, careful attention needs to be paid to the realistic reach and coverage of<br />

monitors, as units that are not properly specified can give false reassurance and act as a drain on the <strong>fire</strong>water<br />

system. Consequently, fixed monitors are only required if deemed necessary for specific scenarios from the<br />

FIREPRAN study.<br />

Mobile monitors can provide a useful facility for a <strong>fire</strong> team for example water spray protection for personnel<br />

doing rescue operations or to protect casualties from heat radiation. Fire team leaders and others involved in<br />

emergency response should identify the numbers and types of equipment required to support foreseeable rescue<br />

activities by the team. Mobile monitors are only recommended on not-normally-manned and unmanned facilities<br />

if specific activities and <strong>hazard</strong>s necessitate their (temporary) provision.<br />

For specific requirements for monitors on helidecks reference is made to section 7.6 of this document.<br />

6.3.4 Deluge<br />

Area deluge is only required if the CAPEX and OPEX (cost to maintain the deluge system and to account for<br />

potential instrumentation damage associated with regular deluge tests) are justified by quantified Cost Benefit<br />

Analysis with risk values including the potential for causing electrical short circuits and personnel exposure for<br />

maintenance of the system. A combination of QRA and FIREPRAN is required to justify provision of deluge,<br />

with procedures for regular testing to ensure continued effectiveness to be provided.<br />

Fire Hazard Management Guideline Rev.02 Page 21 of 39


<strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Co Sdn Bhd<br />

6.3.5 Sprinklers<br />

Wet pipe frangible bulb sprinkler systems are required for Living Quarters, covering sleeping, office and service<br />

areas, with the design based on a recognised internationally accepted standard such as NFPA 13. Engineering of<br />

sprinkler systems should give high priority to avoiding leakage and false alarms. Exceptions to complete sprinkler<br />

coverage are permitted, for example electrical rooms and fryer facilities in kitchens, but there must be a robust<br />

demonstration that alternative <strong>fire</strong> safety measures provide an equivalent degree of safety. See also section 7.1.<br />

6,3,6 Foam systems<br />

Foam is to be provided for helidecks as well as for fighting of contained liquid pool <strong>fire</strong>s on decks, in drip pans<br />

and in drains, on manned complexes. Where justified by the <strong>hazard</strong>s and risks, a central foam injection unit<br />

should be provided for the main <strong>fire</strong>water supply. Where this is not justified, mobile (wheeled) foam units with<br />

scenario-specific reaches should be provided on manned facilities.<br />

Foam systems are not generally required for not-normally-manned and unmanned facilities, unless specific<br />

activities and <strong>hazard</strong>s necessitate their (temporary) provision.<br />

Helidecks on manned installations should be provided with foam monitor systems.<br />

6.3.7 CO2, water mist & Halon systems<br />

Fixed CO2 systems are generally only required for special areas, e.g. vent (snuffing systems). Water mist systems<br />

are recommended for gas turbine enclosures (see section 7.5).<br />

6.4 Stand-by & Support Vessels<br />

6.4.1 Rescue / Stand-by Vessel<br />

A rescue / stand-by vessel (SBV) is required to:-<br />

• support man-over board rescue operations within a defined time scale.<br />

• support specific operations such as when working outside the platform railing.<br />

• facilitate / assist the evacuation of staff during emergencies<br />

In addition a stand-by vessel may be used to facilitate movement of staff within the field as long as rescue<br />

operations within the defined time scale can be maintained.<br />

6.4.2 FIFI1 Fire Fighting Vessel/Equipment<br />

Provision of dedicated <strong>fire</strong> fighting vessel / stand-by vessels with FIF1 <strong>fire</strong> fighting capability would be assessed<br />

on the basis of Cost Benefit Analysis or if other issues such as unacceptable IRPA, reputation or environmental<br />

risks dictate it. The response time for the vessel should be determined by the specific scenarios that are justifying<br />

its provision.<br />

Fire Hazard Management Guideline Rev.02 Page 22 of 39


<strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Co Sdn Bhd<br />

7 PROTECTION OF S PECIFIC A REAS<br />

In general, <strong>fire</strong> protection should be provided in accordance with sections 5 and 6 above. This section covers<br />

some specific requirements for special areas of a facility.<br />

7.1 Living Quarters and Control Centres<br />

Accommodation areas should have an outer envelope that is appropriately protected against <strong>fire</strong> and smoke risks,<br />

based on technical assessments.<br />

Safety of life in <strong>fire</strong> situations should be based on the requirements of NFPA 101 “Life Safety Code” treating<br />

accommodation areas under the provisions for “Existing hotels and dormitories” and other areas under the<br />

provisions of “Industrial occupancies”.<br />

The ability of control centres (as defined in SOLAS) to continue in operation during foreseeable <strong>fire</strong>s should be<br />

evaluated and appropriate measures taken for protection against <strong>fire</strong> spread, protection of safety critical systems<br />

and prevention of smoke ingress.<br />

As a general principle, Control Centres should be protected by A60 rated bulkheads, floors and ceilings as a<br />

minimum. Fire doors and <strong>fire</strong>-dampers are required to maintain the integrity of <strong>fire</strong> rated barriers, by protecting<br />

penetrations. All penetrations through enclosures rated ‘A0’, ‘A60’ or ‘H120’ should be suitably designed so as to<br />

fully maintain the <strong>fire</strong>-rating of the enclosure. As far as possible, any penetration through an ‘H120’ barrier should<br />

be avoided. Further guidance on <strong>fire</strong>-rating of enclosures for offshore living quarters is given in Section 13.3.6 of<br />

DEP 37.17.10.10-Gen: Design of Offshore Living Quarters.<br />

HVAC systems for accommodation areas and control centres should be protected by reliable means of smoke and<br />

gas detection at intakes, linked to shutdown dampers in intakes and exhausts and tripping of the Air Handling Unit<br />

(AHU). Further guidance on the design of HVAC systems for offshore living quarters is given in Section 3.3.10.2<br />

of DEP 37.10.10-Gen: Design of Offshore Living Quarters, and in Section 7.7 of DEP 37.17.10.11-Gen: Design of<br />

Offshore Temporary Refuges.<br />

Living quarters should be protected with an automatic sprinkler system covering sleeping, office and service areas,<br />

based on a recognised internationally accepted standard such as NFPA 13. Engineering of sprinkler systems<br />

should give high priority to avoiding leakage and false alarms. Exceptions to complete sprinkler coverage are<br />

permitted, for example electrical rooms and fryer facilities in kitchens, but there must be a robust demonstration<br />

that alternative <strong>fire</strong> safety measures provide an equivalent degree of safety. The kitchen cooker hood should have a<br />

fixed wet chemical or water mist system.<br />

Smoke detection should be provided in all areas of LQs and control centres except those where a high level of<br />

false alarms would result.<br />

Smoking should be prohibited except for in designated rooms. A dedicated electric cigarette lighter should be<br />

provided in the designated smoking room(s).<br />

Personal electrical equipment should be permitted subject to agreement of responsible supervisor. It should be<br />

certified and intrinsically safe if used in <strong>hazard</strong>ous area. (Note that the voltage for offshore is 254V, 60Hz which is<br />

10% higher than mains supply onshore 220-240 V, 50Hz).<br />

Effective means for manual <strong>fire</strong> fighting should be provided, including hose reels and portable extinguishers. In<br />

selecting hand held extinguishers in LQ areas, consider Film Forming Foam Spray extinguishers which are<br />

efficient and minimise clean-up compared to dry chemical units.<br />

7.2 Muster areas<br />

Muster areas should be protected against gas, <strong>fire</strong> and smoke risks, based on technical assessments.<br />

The ability of muster areas to continue in operation for as long as is necessary to achieve safe evacuation of all<br />

non-essential personnel during foreseeable <strong>fire</strong>s should be evaluated and appropriate measures taken for protection<br />

against <strong>fire</strong> spread, impingement of thermal radiation and prevention of smoke and gas ingress.<br />

Fire Hazard Management Guideline Rev.02 Page 23 of 39


<strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Co Sdn Bhd<br />

7.3 Office and Utility Areas<br />

Effective <strong>fire</strong> detection (e.g. smoke detectors) should be provided in all areas, including office and storage areas.<br />

Further provision should be considered through analysing case by case. Sprinklers should be considered for areas<br />

where there is high combustible loading or recognised potential for difficulty in fighting the <strong>fire</strong> and achieving<br />

control of it, for example stores areas.<br />

7.4 Electrical Rooms<br />

Electrical rooms should be provided with smoke detection as a minimum. This should be of the optical type.<br />

Aspirating smoke detectors (HSSD) should be specified where electrical equipment under protection is critical for<br />

safety or production. This may include communication and computer rooms.<br />

• For HVAC without fresh air intake, <strong>fire</strong> and smoke detection shall trip the HVAC to avoid air circulation and<br />

to suffocate the <strong>fire</strong>. Alarm only to control room and no trip to switchgear.<br />

• For HVAC with fresh air intake, <strong>fire</strong> and smoke detection shall close fresh air intake, trip HVAC to suffocate<br />

the <strong>fire</strong>. Alarm only to control room and no trip to switchgear.<br />

• Gas detection shall trip switchgear but the detection signal must be voted to avoid nuisance tripping.<br />

• Where HSSD is installed, it shall give an early alarm only to the operator.<br />

Fixed <strong>fire</strong> fighting systems (clean agent or CO2) are not considered necessary in electrical rooms. However,<br />

electrical rooms are to be fitted with mandatory detection and it must be possible to de-energise electrical<br />

equipment in any electrical equipment room from outside the room. Where there is already provision for<br />

automatic isolation, <strong>fire</strong> and gas detection systems may be arranged to implement automatic isolation. Emergency<br />

response teams should include technical staff trained in safe isolation of electrical equipment.<br />

Fire extinguishing devices should include CO2 hand held extinguishers outside entrances to electrical rooms.<br />

Where there is a high concentration of electrical equipment, provide 45kg cylinders with hose to increase response<br />

capability, positioned outside the room. In large rooms, consider additional extinguishers within the room.<br />

Note that the use of halon is no longer acceptable for environmental reasons.<br />

7.5 Gas turbines<br />

Gas Turbine suppliers should be requested to standardise the detectors within enclosures with those used<br />

elsewhere on the platform where ambient conditions within the enclosure allow.<br />

Water mist systems are the preferred method of fixed <strong>fire</strong> protection for turbine enclosures. Fire and gas detection<br />

should be provided in accordance with gas turbine manufacturers standard. However as a minimum the following<br />

should be provided:<br />

• gas detection at combustion air intake. Voted gas should trip turbine but maintain enclosure purge fans.<br />

• gas detection at enclosure exhaust duct to detect internal leakages. Voted gas should trip turbine but maintain<br />

enclosure purge fans<br />

• flame detection in enclosure. Due to ambient temperature limitation of IR type flame detectors, UV detectors<br />

should be applied. Voted flame should trip turbine, trip enclosure fan, close dampers and activate the <strong>fire</strong><br />

water mist system<br />

• heat detectors in enclosure (rate compensated type). Single heat detector should have the same executive<br />

actions as confirmed flame detection<br />

7.6 Helidecks<br />

The overall minimum requirement should be to comply with CAP 437.<br />

(http://www.caa.co.uk/docs/33/Cap437.pdf)<br />

Helidecks on manned complexes should be equipped with a foam system consisting of a foam-mixing unit (AFFF<br />

system), distribution system and two low profile, oscillating fixed monitor nozzles located either side of the<br />

helideck. For calculation of the required capacity of each monitor, reference is made to BSP-12-Standard-201. A<br />

foam concentrate package, comprising tank and pump is dedicated to each monitor. The foam concentrate tank<br />

Fire Hazard Management Guideline Rev.02 Page 24 of 39


<strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Co Sdn Bhd<br />

should be sized for a minimum of 10 minutes of foam consumption based upon the calculated foam monitors<br />

consumption rate and the foam solution selected (1% solution recommended i.e. to ensure quick knockout effect).<br />

The foam concentrate pump should be a rotary gear pump capable of injecting the required concentrate quantities<br />

up to full flow rate at the operating pressure of the main <strong>fire</strong> pump. The motor driver for the foam concentrate<br />

pumps should be a "pelton-wheel style" water driven motor. The water to drive the motor should be taken from<br />

the <strong>fire</strong>water header on the "dry side" of the monitor isolation valve.<br />

Foam monitors shall be positioned on opposite side of the helideck so that all areas of the helideck may be reached<br />

in all anticipated wind directions. It may be appropriate to install an unattended and remotely operated oscillating<br />

foam monitor on an outboard section of a helideck where no foam monitor platform is available.<br />

All foam concentrate procurement should be subjected to witnessed CAP 168 Level B <strong>fire</strong> test.<br />

(http://www.caa.co.uk/docs/33/CAP168.pdf)<br />

Wherever possible fluorine free concentrates should be used for new platforms in order to minimise potential<br />

environmental effects of concentrate discharge.<br />

In addition to the two foam monitors, hand controlled hose line(s) capable of applying water in a jet/ spray pattern<br />

at a minimum of 250 litres/min for cooling, or specific <strong>fire</strong> fighting tactics should be provided. Not all <strong>fire</strong>s are<br />

capable of being accessed by monitors or on some occasions the use of monitors alone may endanger passengers.<br />

Therefore, hand controlled hose line(s) for the application of foam should also be provided. Reserve stocks of<br />

foam concentrate must be held on the installation to allow for replenishment as a result of activation of the system<br />

during an incident or following training or testing. Most new facilities offshore now prefer to provide 3 foam<br />

monitors not 2 in order to allow for all wind conditions.<br />

Hand held extinguishers are also required, adjacent to the access / exit points viz.:<br />

a) 2 or more Carbon Dioxide (CO2) extinguishers of a total capacity of not less than 22.5 g (50 lbs) with<br />

extension applicators capable of reaching the S61N engine <strong>fire</strong> fighting points.<br />

b) 2 or more Dry Powder extinguishers with a total capacity of not less than 45 kg (100 bs). An additional dry<br />

powder extinguisher provided at each helideck access point should be a lightweight 9kg unit for taking<br />

inside the helicopter to assist with evacuation from the helicopter<br />

Two sets of <strong>fire</strong>man’s equipment (see section 0) should be kept in a place which is readily accessible from the<br />

helideck.<br />

Sufficient personnel to operate the helideck <strong>fire</strong> fighting equipment effectively should be dressed in protective<br />

clothing prior to helicopter movements taking place. The normal minimum manning standard for manned<br />

helidecksis one HLO and 2 Helideck Assistants with appropriate training (see 7.7).<br />

7.7 Fire Systems Integrity Assurance<br />

All active and passive <strong>fire</strong> systems should be subjected to a formal inspection, testing and maintenance<br />

system to assure their ongoing performance. Reference is made to the Fire System Maintenance<br />

Standard BSP 72 s 011 & 012”<br />

Fire Hazard Management Guideline Rev.02 Page 25 of 39


<strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Co Sdn Bhd<br />

8 EMERGENCY R ESPONSE<br />

8.1 Emergency Response Plan<br />

All facilities should be covered by an emergency response plan that should take account of the following:<br />

� Fire Fighting Equipment<br />

� Fire fighting and Rescue responsibilities<br />

� Command and Control responsibilities<br />

8.2 Fire fighting equipment<br />

Fire fighting equipment should be provided in accordance with this philosophy. Location plans for <strong>fire</strong> fighting<br />

equipment should be displayed at all deck access points and copies included in the emergency response plans.<br />

8.3 Fire fighting and Rescue<br />

Protection of life should be the overriding primary objective in all circumstances. No attempt to manually fight a<br />

<strong>fire</strong> should be made if this involves exposing <strong>fire</strong> fighting personnel to the risk of <strong>fire</strong> escalation: in particular, the<br />

<strong>fire</strong> host platform process system should be shut down and any <strong>fire</strong>-impinged process inventories should be<br />

depressurised before <strong>fire</strong> fighting personnel go onboard.<br />

For rescue operations conflicts may arise between preservation of the rescuers’ lives and preservation of the<br />

trapped/injured personnel lives. In such circumstances, extremely hard decisions may be necessary. All such<br />

decisions are the responsibility of the On-Scene Commander, who must decide whether and when the rescue<br />

attempt should go ahead. Inputs to this decision should include:<br />

• Knowledge about the numbers and condition of trapped / injured personnel<br />

• Generic knowledge of <strong>fire</strong> characteristics, thermal radiation levels and effects, smoke exposure effects<br />

• Understanding of <strong>fire</strong> escalation particularly with respect to time elapsed<br />

• Knowledge about the <strong>fire</strong> and the status of engulfed or impinged targets (elapsed time of engulfment,<br />

inventory sizes, shut-in, depressurised, criticality of structures)<br />

• Knowledge about the security of <strong>fire</strong>water supply if this is required for the rescue operation<br />

• Alternative rescue approaches or methods<br />

8.4 Command and Control<br />

A qualified On-Scene Commander (OSC) should be available at all facilities whenever personnel are present and<br />

production is on-going.<br />

OSC training should include the major <strong>fire</strong> and explosion scenarios for the facilities and activities covered.<br />

Scenario data should be drawn from the following sources in order of preference:<br />

a) The facility QRA<br />

b) The facility F(E)RA or FIREPRAN<br />

c) The facility HAZID<br />

Fire Hazard Management Guideline Rev.02 Page 26 of 39


<strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Co Sdn Bhd<br />

9 INFORMATION F EEDBACK<br />

A BSP Incident Investigation Team would review all <strong>fire</strong> and explosion incidents. The incident review would be<br />

conducted in accordance with BSP HSE modules 30 & 31 and would include the use of TRIPOD beta<br />

methodology. A full incident report would be prepared including the following information:-<br />

� TRIPOD beta (ref. EP 95-0321)<br />

� Accuracy of Hazard register / HAZID / FIREPRAN / QRA scenarios<br />

� Learning points<br />

� Inputs to HSE Case and QRA<br />

The information from all such reports should be considered during the next revision of this Fire Protection<br />

Philosophy document.<br />

Fire Hazard Management Guideline Rev.02 Page 27 of 39


<strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Co Sdn Bhd<br />

APPENDICES<br />

Appendix 1: Terminology<br />

Appendix 2: Fire Types<br />

Appendix 3: Fire Scenarios and corresponding mitigation measures<br />

Fire Hazard Management Guideline Rev.02 Page 28 of 39


<strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Co Sdn Bhd<br />

Appendix 1: Terminology<br />

Term Definition<br />

AFP Active Fire Protection – i.e. <strong>fire</strong> protection systems that take action, e.g. water<br />

deluge<br />

AHU Air Handling Unit<br />

AIMS Asset Integrity Management System<br />

ALARP As Low As Reasonably Practicable - a term applied to risk levels which are<br />

between intolerable and negligible, when all risk reduction options have been<br />

investigated and implemented if practical<br />

Anomaly Corrosion or erosion defect discovered on process piping or process vessel.<br />

Anomalies are classified according to their severity. Classifications include<br />

“Red”, “Orange-tolerable” and “Orange-potential”. Refer also to “PAR” & “PA”<br />

definition<br />

AVA Audio Visual Alarm<br />

Barrier Any physical means of preventing an uncontrolled hydrocarbon release<br />

BOP Blow Out Preventer<br />

BSP <strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Company Sendirian Berhad<br />

CAPEX Capital Expenditure (i.e. the net capital outlay to provide a system or service,<br />

excluding on-going operating & maintenance costs – see OPEX)<br />

CAS Competency Assessment Standard<br />

CBA Cost Benefit Analysis (i.e. formal comparison of benefits against costs for an<br />

upgrade measure)<br />

CCTV Closed Circuit Television<br />

CO2 Carbon dioxide<br />

Concurrent activities Two or more separate activities on a single facility simultaneously<br />

CPEMA Concurrent Production and Engineering Maintenance Activities<br />

CPPA Concurrent Production and Painting Activities<br />

CPRA Concurrent Production and Rig Activities<br />

DCS Digital Distributed Control System<br />

DEP Design Engineering Practice<br />

Drilling Rig Jack Up / Semi-Submersible / Tender Drilling Vessel or Drilling Barge<br />

ECOCALC Economic calculation spreadsheet program developed in Microsoft Excel by<br />

BSP’s TAE department<br />

EP 95-0000 <strong>Shell</strong> International Exploration and Production Health, Safety and Environment<br />

Manual<br />

ERO Emergency Response Organisation<br />

Escalation Growth of a <strong>fire</strong> to encompass multiple fuel sources and/or collapse of primary<br />

structures. In QRA terminology, escalation refers specifically to growth of a <strong>fire</strong><br />

to encompass and substantially destroy the entire host module or platform.<br />

ESD Emergency Shut Down<br />

ETC Emergency Team Co-ordinator<br />

FGS Fire, Gas & Smoke (Detection system)<br />

F(E)RA Fire & Explosion Risk Analysis<br />

FIREPRAN Fire Protection Analysis using a structured group assessment (ref. FIREPRAN<br />

doc. 1388-R-803 rev. 1 (March 2000).<br />

FIFI Fire Fighting Classification<br />

GA General Alarm<br />

HAC Hazardous Area Classification drawings showing the classification for each<br />

area of a platform<br />

HAZID Hazard Identification exercise using brainstorming approach defined in<br />

EP95-0312<br />

Heavy lift The lifting of any object, which if dropped, would exceed the strength of any<br />

impact protection provided and severely damage process equipment (lift > 5<br />

tons).<br />

HEMP Hazard and Effects Management Process<br />

HSE-MS Health, Safety, Environment – Management System<br />

Fire Hazard Management Guideline Rev.02 Page 29 of 39


<strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Co Sdn Bhd<br />

HSSD High Sensitivity Smoke Detector<br />

HVAC Heating, Ventilating and Air Conditioning system<br />

ICAF Incremental Cost to Avoid a Fatality (i.e. the pro-rata NPV cost to reduce PLL<br />

by 1)<br />

IR Infra Red<br />

IRPA Individual Risk Per Annum<br />

LFL Lower Flammable Limit<br />

LOS Line Of Sight<br />

LQ Living Quarters<br />

Manned Complex Complexes with living quarters e.g. AMPA-6, AMPA-9, Fairley-4, Champion-7<br />

MCP Manual Call Point (Kill knobs)<br />

MOPO Manual of Permitted Operations<br />

NFPA National Fire Protection Association<br />

Not-normally manned<br />

facility<br />

Platforms or complexes which are operated by day visitors only e.g. AMDP-<br />

15/24<br />

OPEX Operating Expenditure (i.e. the cost of maintaining a system in functional order,<br />

expressed on an annual basis)<br />

OPITO Offshore <strong>Petroleum</strong> Industry Training Organisation (UK standards)<br />

PA Public Address (system)<br />

PAPA Prepare to Abandon Platform Alarm<br />

PAR Piping Anomaly Report. In common usage this term is interchangeable with the<br />

term “anomaly”<br />

PFP Passive Fire Protection (i.e. a <strong>fire</strong> protection measure that takes no action but<br />

protects by virtue of its presence)<br />

PLL Potential Loss of Life (normally quoted per annum)<br />

POB Personnel On Board i.e. the number of people on a platform or complex<br />

Potential impact area The area of the platform that would be damaged by a dropped object<br />

Production The controlled flow and processing of oil, gas and condensate from one or<br />

more wells. This includes production crossing the platform from another<br />

location<br />

PTW Permit To Work<br />

QRA Quantitative Risk Assessment<br />

TA Tolerable Anomaly<br />

Underrated flow line A flow line with a maximum design pressure that is less than the theoretical<br />

maximum closed in tubing head pressure connected to it<br />

Unmanned facility Platforms or complexes which do not require operators to be present every day<br />

e.g. CPDP-10<br />

UPS Uninterruptible Power Supply<br />

Fire Hazard Management Guideline Rev.02 Page 30 of 39


<strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Co Sdn Bhd<br />

Appendix 2: Type of Fires – (reference is made to EP95-0314).<br />

9.1 Gas Jet Fires<br />

Gas jet <strong>fire</strong>s can be up to more than 100m in length, depending on the gas release rate, pressure and hole size. as<br />

the source blows down, the flame would reduce in length and move back towards the source.<br />

Hydrocarbon gas jet <strong>fire</strong>s produce extremely high levels of thermal radiation that are lethal to anyone caught in the<br />

immediate vicinity and cause heating of adjacent structures (rapid if of impinging). They are one of the most<br />

difficult types of <strong>fire</strong> to combat: surface heat flux is extremely high and the momentum of the jet flame tends to<br />

displace water deluge and prevent effective cooling, whilst extinguishing them altogether is often undesirable as<br />

the unignited gas may then form an explosive cloud and or migrate in an uncontrolled manner to other areas of the<br />

facility. The most effective means of protection are therefore rapid source depressurisation and/or intumescent<br />

PFP on all vulnerable structural and process targets. And cooling Neither of these measures would protect<br />

personnel against the immediate effects of thermal radiation from a gas jet <strong>fire</strong>.<br />

Source blow-down designed to API 521 standard may not prevent a jet <strong>fire</strong> from escalating. If the <strong>fire</strong> impinges on<br />

critical process or structural targets, escalation can be expected within 10 to 15minutes. Given isolation of the gas<br />

source, a gas jet <strong>fire</strong> can be expected to decay in size exponentially as a function of mass release rate over<br />

inventory size; that is to say, the <strong>fire</strong> may go on for a long time even with ESD and blowdown!<br />

An example gas jet <strong>fire</strong> is depicted in Figure 9.1 below:<br />

Figure 9.1: Gas Jet Fire<br />

Fire Hazard Management Guideline Rev.02 Page 31 of 39


<strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Co Sdn Bhd<br />

9.2 2-Phase Jet Fires<br />

Volatile (flashing) liquids and 2-phase streams (e.g. well fluids)<br />

Two-phase jet <strong>fire</strong>s are momentum-driven hydrocarbon fluid <strong>fire</strong>s from a pressurised source of Volatile (flashing,<br />

e.g. CHPS) liquids or 2-phase streams (e.g. well fluids). The volatile liquid flashes into a gas phase upon release<br />

or is carried as droplets in the vapour stream until heated and the resulting vapour adds to the jet <strong>fire</strong> size. They<br />

can be over 100m in length, depending on the release rate, flash-fraction, pressure and hole size.<br />

Two-phase hydrocarbon jet <strong>fire</strong>s produce very high levels of thermal radiation that are lethal to anyone caught in<br />

the immediate vicinity and cause rapid heating of adjacent of impinged structures, and large volumes of<br />

suffocating smoke. Like gas jet <strong>fire</strong>s, they are very difficult to combat: surface heat flux is high and the<br />

momentum of the jet flame may displace water deluge and prevent effective cooling, whilst extinguishing them<br />

altogether is often undesirable as the unignited vapour may then form an explosive cloud and or migrate in an<br />

uncontrolled manner to other areas of the facility. Also, higher flash point liquids may fall out of the jet to form<br />

burning liquid pools on the surface below. The most effective means of protection are therefore rapid source<br />

depressurisation and/or intumescent PFP on all vulnerable structural and process targets. Neither of these<br />

measures would protect personnel against the immediate effects of thermal radiation and smoke from a 2-phase jet<br />

<strong>fire</strong>.<br />

Source blow-down designed to API 521 standard would not prevent a jet <strong>fire</strong> from escalating. If the <strong>fire</strong> impinges<br />

on critical process or structural targets, escalation can be expected within 10 to 15 minutes. Given isolation of the<br />

fluid source, a 2-phase jet <strong>fire</strong> can be expected to decay in size exponentially as a function of mass release rate<br />

over inventory size; that is to say, the <strong>fire</strong> may go on for a long time even with ESD and blowdown!<br />

An example 2-phase jet <strong>fire</strong> is depicted in Figure 9.2 below:<br />

Figure 9.2: 2-Phase Jet Fire<br />

Fire Hazard Management Guideline Rev.02 Page 32 of 39


<strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Co Sdn Bhd<br />

9.3 Blowouts<br />

Ignited blowouts are basically the same as jet <strong>fire</strong>s (normally multi-phase) but without the option of ESD, as the<br />

fluids are emanating from a well where control has been lost. The jet would normally be obstructed resulting in<br />

loss of momentum and lateral <strong>fire</strong> spread, at least until collapse of impinged surface structures. Blowouts are<br />

normally associated with drilling activities, but are also possible during wirelining and other well intervention<br />

activities and even during normal production due to spurious failures of containment systems.<br />

Blowouts only occur on or below Drilling Platforms (DP’s) and Well Jackets (WJ’s). Without specialist<br />

intervention, their duration is only limited by natural plugging or bridging of the well – ESD and blowdown are<br />

not an option for blowouts.<br />

Ignited blowouts produce very high levels of thermal radiation that are lethal to anyone caught in the immediate<br />

vicinity and cause rapid heating of adjacent of impinged structures, and large volumes of suffocating smoke. Like<br />

process jet <strong>fire</strong>s, they are very difficult to combat: surface heat flux is high and the momentum of the flame may<br />

displace water deluge and prevent effective cooling, whilst extinguishing them altogether may lead to undesirable<br />

explosion risks. Also, higher flash point liquids may fall out of the flame to form burning liquid pools on the<br />

surface below. Fire rated walls and/or intumescent PFP on all vulnerable structural and process targets are the<br />

only available <strong>fire</strong> protection means for ignited blowouts.<br />

If the ignited blowout impinges on critical process or structural targets, escalation can be expected within 10 to 15<br />

minutes.<br />

An example ignited Blowout is depicted in Figure 9.3 below:<br />

Fig. 9.3 Simulated blowout on offshore platform<br />

Fire Hazard Management Guideline Rev.02 Page 33 of 39


<strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Co Sdn Bhd<br />

Pool Fires<br />

A pool <strong>fire</strong> occurs when a pool of flammable is ignited. The liquid can be from a process source (e.g. crude oil in<br />

a process line) or a non-process/utility source (e.g. fuel oils, lube oils, flammable chemicals like inhibitor). The<br />

latter fluids are difficult to ignite as pools without a significant heat source already being present. The pool may<br />

be on a deck, in a drip pan or drain, or on the sea.<br />

Pool <strong>fire</strong>s tend to radiate less heat, and produce more smoke, than jet <strong>fire</strong>s. In still air, the flame of a pool <strong>fire</strong> is<br />

vertical and most of the heat goes up, but in wind the flame tilts and more heat is radiated sideways. If not limited<br />

by physical containment, a pool <strong>fire</strong> would tend to grow in size until the rate of burning equals the rate of fuel<br />

release into the pool less the rate of draining. The rate of burning, and the flame height are dependent on the liquid<br />

properties and the size of the pool.<br />

Pool <strong>fire</strong>s are most readily extinguished by application of foam if the pool is contained. Foam is less effective if<br />

the pool <strong>fire</strong> is on the open sea – in this case use of water jets to break up the hydrocarbon film is more effective.<br />

If the <strong>fire</strong> impinges on critical process or structural targets, escalation can be expected within 10 to 20 minutes.<br />

The term ‘pool <strong>fire</strong>’ may also be used to refer to the ignited ‘pool’ of bubbling gas that can occur on the sea<br />

surface in the event of a sub-sea gas release.<br />

A typical pool <strong>fire</strong> on the deck of an offshore platform is depicted in Figure 9.4 below.<br />

Figure 9.4: deck pool <strong>fire</strong><br />

Fire Hazard Management Guideline Rev.02 Page 34 of 39


<strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Co Sdn Bhd<br />

9.4 Spray <strong>fire</strong>s<br />

A spray <strong>fire</strong> is formed from a pinhole leak in a high pressure non-volatile liquid hydrocarbon system, such as the<br />

lube-oil or seal-oil system of a gas turbine. The spray of lube oil or seal oil is readily ignited (unlike a pool these<br />

oils), and burns like a smoky two phase jet <strong>fire</strong>. ESD is effective in stopping the spray <strong>fire</strong> unless a pressure<br />

accumulator is in use. Unlike gas and true 2-phase jet <strong>fire</strong>s, extinguishing a spray <strong>fire</strong> is normally desirable even if<br />

the leak is on-going. Spray <strong>fire</strong>s in enclosed spaces can be extinguished by water mist or CO2 systems. Spray<br />

<strong>fire</strong>s in open areas are best dealt with by shut-down of the pressure source (usually the oil pump).<br />

A pool <strong>fire</strong> resulting from liquid drop-out would often accompany a spray <strong>fire</strong>.<br />

Figure 9.5 below depicts a typical spray <strong>fire</strong>.<br />

Figure 9.5 : Typical lube oil spray <strong>fire</strong><br />

Fire Hazard Management Guideline Rev.02 Page 35 of 39


<strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Co Sdn Bhd<br />

9.5 Compartment <strong>fire</strong>s<br />

Compartment <strong>fire</strong>s are <strong>fire</strong>s inside enclosed spaces. Normally the term is restricted to class A <strong>fire</strong>s such as the<br />

bedding and furniture in a living quarters cabin burning. After the <strong>fire</strong> has started, its growth depends on the ease<br />

with which further combustible material is ignited. The longer a compartment <strong>fire</strong> burns, the higher the<br />

temperature that is attained, until the <strong>fire</strong> becomes oxygen-limited or a ‘flashover’ occurs.<br />

Prior to flashover, large temperature differentials would exist from floor to ceiling as the hot gases and smoke<br />

from the compartment <strong>fire</strong> accumulate in a hot layer immediately below the ceiling.<br />

A flashover is the point where the <strong>fire</strong> is no longer localised, but is spread throughout the whole compartment.<br />

There is a sudden propagation of flame through the unburned gas below the ceiling and all the combustible<br />

surfaces become involved in the <strong>fire</strong>. At this point, the rate limiting feature is no longer the amount of fuel in the<br />

compartment, but the air supply. An oxygen-limited compartment <strong>fire</strong> may not flash-over until a new source of air<br />

becomes available, such as an external door to the compartment being opened.<br />

Compartment <strong>fire</strong>s can be fought by application of an appropriate extinguishing medium to the <strong>fire</strong> source,<br />

providing that safe access to the <strong>fire</strong> is possible. Otherwise air supply starvation is effective providing that the<br />

compartment is kept sealed until the entire contents have cooled down.<br />

Figure 9.6 below shows an experimental compartment <strong>fire</strong>.<br />

Figure 9.6 : Experimental compartment Fire<br />

Fire Hazard Management Guideline Rev.02 Page 36 of 39


<strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Co Sdn Bhd<br />

8.6 Helideck Fires<br />

A <strong>fire</strong> caused either by a helicopter having a leakage of aviation fuel or a leakage of oil or hydraulic fluid<br />

which makes contact with a hot point causing flash point to be reached. This may occur during a heavy<br />

landing or crash scenario. Helicopter structures often include magnesium alloys, which once ignited are<br />

extremely difficult to extinguish. Once this point is reached total burn-out of the airframe can occur in<br />

just a few minutes. Consequential loss of burning aviation fuel may spill over the helideck and<br />

superstructure below the helideck. Foam suppression must immediately be applied to effect rescue of<br />

passengers and crew and to prevent escalation to surrounding areas.<br />

Fire Hazard Management Guideline Rev.0 Page 37 of 39


<strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Co Sdn Bhd<br />

Appendix 3: Fire Scenarios and corresponding mitigation measures<br />

Scenario Preferred Mitigation means and comments<br />

Process gas jet <strong>fire</strong> High thermal radiation, high risk of escalation; do not approach<br />

<strong>fire</strong>: use ESD and rapid depressurisation (blowdown) of source and<br />

adjacent/impinged process inventories. Remote water spray, if<br />

available may be used for cooling escalation targets or shielding escape<br />

routes. PFP on targets can prevent escalation. Beware that<br />

extinguishing the <strong>fire</strong> without stopping the gas leak may result in<br />

uncontrolled explosion risk.<br />

Process 2-phase jet <strong>fire</strong> High thermal radiation, intoxicating smoke, high risk of escalation;<br />

do not approach <strong>fire</strong>: use ESD and rapid depressurisation (blowdown)<br />

of source and adjacent/impinged process inventories. Remote water<br />

spray, if available may be used for cooling escalation targets or<br />

shielding escape routes. PFP on targets can prevent escalation. Foam<br />

may be required to extinguish pool <strong>fire</strong>s associated with liquid drop-out.<br />

Beware that extinguishing the <strong>fire</strong> without stopping the gas leak may<br />

result in uncontrolled explosion risk.<br />

Liquid HC pool <strong>fire</strong> on deck or in drip pan Intoxicating smoke, rapid heating of anything above <strong>fire</strong>. Mitigate<br />

via ESD & blowdown, drains, use of mobile foam units.<br />

Liquid HC pool <strong>fire</strong> on sea Intoxicating smoke, rapid heating of anything above <strong>fire</strong>, risk of<br />

rapid drift or spread to sensitive areas (e.g. muster area). Mitigate<br />

via ESD & blowdown, sbv (or other vessel) water monitors, use of<br />

remote foam monitors if available.<br />

Gas / vapour cloud flash <strong>fire</strong> Short duration hot blinding flash. The only effective way of avoiding<br />

injury is not to enter the gas cloud – stay upwind, use gas<br />

detection to monitor cloud extent etc.<br />

Gas / vapour cloud explosion Short duration high momentum, high overpressure hot blinding<br />

flash: no effective means of mitigation other than avoidance by facility<br />

design including incorporation of blast panels in enclosed modules .<br />

Beware of ensuing jet <strong>fire</strong> (see above).<br />

Ignited Blowout High thermal radiation, intoxicating smoke, high risk of escalation,<br />

no ESD possible; do not approach <strong>fire</strong>, evacuate. Remote water<br />

spray, if available may be used for cooling escalation targets or<br />

shielding escape routes. Foam may be required to extinguish pool <strong>fire</strong>s<br />

associated with liquid drop-out. Beware that extinguishing the <strong>fire</strong><br />

without stopping the gas leak may result in uncontrolled explosion risk.<br />

Blowout may self-seal / bridge-over, else specialist services needed<br />

(use of explosive is generally required to extinguish the <strong>fire</strong>).<br />

Helideck <strong>fire</strong> Typically a running heli fuel pool <strong>fire</strong> - Intoxicating smoke, rapid<br />

heating of anything in the <strong>fire</strong>, possible escalation to<br />

Aluminium/Magnesium (alloy) helicopter body parts. Use of helideck<br />

(foam) units for main liquid <strong>fire</strong>, CO 2 for engine <strong>fire</strong>s, special dry powder<br />

for metal <strong>fire</strong>s.<br />

Diesel fuel <strong>fire</strong>s Spray <strong>fire</strong>s with similar characteristics to two-phase jet <strong>fire</strong>s are possible<br />

from pressurised systems. Pool <strong>fire</strong>s are possible due to liquid dropout.<br />

Intoxicating smoke, rapid heating of anything in the <strong>fire</strong>. Use<br />

fuel supply cut-off, mobile foam units and remote water spray cooling of<br />

escalation targets.<br />

Lube oil <strong>fire</strong> (external) Spray <strong>fire</strong>s with similar characteristics to two-phase jet <strong>fire</strong>s are possible<br />

from pressurised systems. Intoxicating smoke, rapid heating of<br />

anything in the <strong>fire</strong>. Pool <strong>fire</strong>s are unlikely due to high flash point.<br />

Use ESD and remote water spray cooling of escalation targets.<br />

Turbine enclosure <strong>fire</strong> Lube or seal oil <strong>fire</strong> or (less likely) gas jet <strong>fire</strong> within the enclosure.<br />

Water mist systems are BSP’s preferred means of mitigation.<br />

Vent <strong>fire</strong>s Thermal radiation risk. Use CO 2 snuffing system<br />

Fire Hazard Management Guideline Rev.0 Page 38 of 39


<strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Co Sdn Bhd<br />

Office / Cabin <strong>fire</strong> Intoxicating smoke & flash-over risks. HVAC shut-down, water<br />

sprinklers, <strong>fire</strong>water hoses and manual (light water and dry powder)<br />

extinguishers may be used. Early detection is essential.<br />

Control room <strong>fire</strong> Use portable CO2 extinguishers and/or dry chemical to extinguish <strong>fire</strong>.<br />

Kitchen / Galley <strong>fire</strong> Fat/grease and oil <strong>fire</strong>s producing intoxicating smoke. Fire blankets and<br />

CO2 fixed and portable extinguishers should be employed.<br />

External class A <strong>fire</strong> Wood (scaffold planks), Oily rags etc. Dry powder hand held<br />

extinguishers and <strong>fire</strong>water hoses may be used.<br />

Chemical <strong>fire</strong> Treat in accordance with manufacturer’s recommendations<br />

Electrical room <strong>fire</strong> Isolate electric supply to remove heat source and to avoid further short<br />

circuits / electrocution of personnel. Use portable CO2 extinguishers to<br />

extinguish <strong>fire</strong>.<br />

Workshop <strong>fire</strong> Intoxicating smoke & flash-over risks. HVAC shut-down, water<br />

sprinklers, <strong>fire</strong>water hoses and manual (light water and dry powder)<br />

extinguishers may be used.<br />

Battery rooms <strong>fire</strong> Treat same as electrical room <strong>fire</strong><br />

Cable <strong>fire</strong>s in concealed or hard to access Electrical isolation and use of long-nozzle CO2 extinguishers<br />

areas<br />

Fire Hazard Management Guideline Rev.0 Page 39 of 39

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!