fire hazard management guideline - Brunei Shell Petroleum ...
fire hazard management guideline - Brunei Shell Petroleum ...
fire hazard management guideline - Brunei Shell Petroleum ...
Create successful ePaper yourself
Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.
Rev. 02<br />
<strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Company Sendirian Berhad<br />
F IRE H AZARD M ANAGEMENT<br />
G UIDELINE<br />
F IRE H AZARD M ANAGEMENT G UIDELINE<br />
FOR O FFSHORE F ACILITIES<br />
Document BSP-02-Guideline- 006<br />
Approved by: HSE<br />
Document Owner: HSE/4
<strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Co Sdn Bhd<br />
Document Control<br />
TYPE OWNER SECURITY CLASS<br />
Corporate Philosophy HSE/4 CONFIDENTIAL<br />
REFERENCE AUTHOR APPROVED BY<br />
BSP-12-Guideline-xxx HSE/4 HSE<br />
KEY WORDS<br />
Fire Hazard Management Guidelines<br />
Send improvement suggestions to the Document Owner through a Document Change Proposal Form<br />
according to:<br />
� Documentation Control Procedure (TMS0436).<br />
Revision Record<br />
REV REVISION DESCRIPTION DATE<br />
Draft Issued for internal BSP review 08-2002<br />
Draft Comments from the line incorporated 26-11-02<br />
Rev. 01 Comments from the line incorporated 23-01-03<br />
Rev. 02 Update following identification of spelling mistakes<br />
and inconsistent numbering of sections<br />
14-05-2004<br />
This document has a maximum validity of five years after the last revision date. Beyond this, it must be<br />
re-validated according to TMS0436. Confirm validity with the Document Owner (or through CORMS)<br />
before application.<br />
Distribution Control<br />
The distribution of this document is covered by the BSP livelink information<br />
Notice and Warning<br />
Copyright © 2002, <strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Company Sendirian Berhad<br />
This document is the property of <strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Company Sendirian Berhad (BSP), Seria<br />
KB3534, Negara <strong>Brunei</strong> Darussalam. Circulation is restricted to BSP and its designated associates,<br />
contractors and consultants. It must not be copied or used for any other purpose other than which it is<br />
supplied, without the expressed written authority of BSP.<br />
Except where provided for purposes of contractual requirements, BSP disclaims any responsibility or<br />
liability for any use or misuse of the document by any person and makes no warranty as to the accuracy<br />
or suitability of the information to any third party. Any misuse of the document is not authorised by<br />
BSP.<br />
Fire Hazard Management Guideline Rev.02 Page 2 of 39
<strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Co Sdn Bhd<br />
TABLE OF CONTENTS<br />
1 INTRODUCTION. ........................................................................................................................................... 4<br />
1.1 Terminology...................................................................................................................................................... 4<br />
1.2 Content of this Guideline .................................................................................................................................. 4<br />
1.3 Objective of Fire Protection .............................................................................................................................. 4<br />
1.4 Objectives of this document.............................................................................................................................. 4<br />
1.5 Fire Detection/Prevention/Protection/Response Philosophy............................................................................. 5<br />
1.6 Fundamental Requirements for Fire Protection ................................................................................................ 6<br />
1.7 Risk Assessment Process ................................................................................................................................ 6<br />
1.8 Basis for decision making on <strong>fire</strong> risk reduction measures. .............................................................................. 7<br />
1.8.1 Quantitative Risk Assessment.......................................................................................................................... 7<br />
1.8.2 Qualitative Risk Assessment............................................................................................................................ 7<br />
1.9 Codes and Standards ....................................................................................................................................... 8<br />
2 Fire & Explosion Assessment Tools & Techniques (not just identification?)......................................... 9<br />
2.1 Introduction....................................................................................................................................................... 9<br />
2.2 Planning and Team Composition.................................................................................................................... 10<br />
2.3 Tools and Techniques .................................................................................................................................... 10<br />
2.4 Documentation and Results.......................................................................................................................... 101<br />
3 Prevention of Fires and Explosions.......................................................................................................... 12<br />
4 Passive Fire Protection................................................................................................................................. 13<br />
4.1 General incl. walls coverings and furnishing ................................................................................................... 13<br />
4.2 Ventilation and Air-conditioning ...................................................................................................................... 10<br />
5<br />
5.1<br />
5.2<br />
Fire Detection, Annunciation & ESD......................................................................................................... 16<br />
Fire, Gas & Smoke Detection ......................................................................................................................... 16<br />
Annunciation................................................................................................................................................... 16<br />
5.3 ESD ................................................................................................................................................................ 17<br />
5.4 Depressurisation ............................................................................................................................................... 17<br />
6 Fire fighting Equipment ............................................................................................................................. 19<br />
6.1 Manual Fire Fighting....................................................................................................................................... 19<br />
6.2 Fireman’s Equipment...................................................................................................................................... 20<br />
6.3 Active / Fixed Fire Fighting Systems............................................................................................................... 21<br />
6.3.1 Firewater ........................................................................................................................................................ 21<br />
6.3.2 Hydrants & Hoses .......................................................................................................................................... 21<br />
6.3.3 Monitors ......................................................................................................................................................... 21<br />
6.3.4 Deluge............................................................................................................................................................ 21<br />
6.3.5 Sprinklers ....................................................................................................................................................... 22<br />
6.3.6 Foam systems................................................................................................................................................ 22<br />
6.3.7 CO2, water mist & Halon systems .................................................................................................................. 22<br />
6.4 Stand-by & Support Vessels .......................................................................................................................... 22<br />
6.4.1 Stand-by Vessel ............................................................................................................................................. 22<br />
6.4.2 FIFI1 Fire Fighting Vessel .............................................................................................................................. 22<br />
7<br />
7.1<br />
7.2<br />
7.3<br />
7.4<br />
7.5<br />
7.6<br />
Protection of Specific Areas...................................................................................................................... 23<br />
Living Quarters and Control Centres .............................................................................................................. 23<br />
Muster areas................................................................................................................................................... 23<br />
Office and Utility Areas ................................................................................................................................... 24<br />
Electrical Rooms............................................................................................................................................. 24<br />
Gas turbines ................................................................................................................................................... 24<br />
Helidecks ........................................................................................................................................................ 24<br />
7.7 Fire Systems Integrity Assurance ................................................................................................................... 24<br />
8<br />
8.1<br />
8.2<br />
8.3<br />
8.4<br />
Emergency Response ................................................................................................................................ 26<br />
Emergency Response Plan ............................................................................................................................ 26<br />
Fire fighting equipment ................................................................................................................................... 26<br />
Fire fighting and Rescue................................................................................................................................. 26<br />
Command and Control.................................................................................................................................... 26<br />
9 Information Feedback ................................................................................................................................ 27<br />
Appendix 1: Terminology<br />
Appendix 2 Type of Fires<br />
Appendix 3 Fire Scenarios and corresponding mitigation measures<br />
Fire Hazard Management Guideline Rev.02 Page 3 of 39
<strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Co Sdn Bhd<br />
1 INTRODUCTION<br />
1.1 Terminology<br />
For terminology / abbreviations used in this document reference is made to Appendix 1.<br />
1.2 Content of this Guideline<br />
This document provides a <strong>guideline</strong> for use for identification, prevention, detection and response systems for<br />
potential <strong>fire</strong>s on offshore oil and gas production and processing facilities. It is intended as a higher level<br />
document to the standards, DEPs and other Codes of Practice referenced in it. Explanatory notes and guidance are<br />
included to provide background information on the purpose and application of the referenced standards<br />
General recommendations:-<br />
• National legislation and DEP (BSP’s technical engineering standard) requirements should be applied as a<br />
minimum<br />
• The requirements of this <strong>guideline</strong> should be met where they exceed DEP requirements (this includes the<br />
application of Fire Risk Assessment).<br />
• Where (e.g. as a result of the Fire Risk Assessment) there is a specific situation for the subject facility that<br />
requires a deviation from the DEP then a deviation should be granted only providing the appropriate<br />
Technical Authority approves the justification.<br />
• In cases where there is no prescribed requirement in the DEP or rigid adherence to codes and standards is<br />
not appropriate (e.g. location of gas detectors, positioning of deluge sprinklers) the risk based analysis<br />
principles described herein should be adopted.<br />
The scope of this document excludes specific provisions for:<br />
• Mitigation of explosions (Refer DEP 80.47.10.12 Section H for guidance).<br />
• Concurrent operations where special provisions may be necessary to achieve the appropriate degree of<br />
control (Refer CPRA, CPEMA & CPPA methodologies)<br />
• Protection of offshore drilling rigs, ships, boats and other mobile facilities<br />
1.3 Objective of Fire Protection<br />
The primary objective of <strong>fire</strong> protection is to protect personnel, the environment, the assets and BSP’s reputation<br />
(PEAR) against the effects of <strong>fire</strong>s and explosions that may occur on a given facility, without endangering the<br />
lives of emergency response personnel (<strong>fire</strong> fighters & rescue teams) and without incurring untenable costs or<br />
maintenance requirements or adversely impacting on the environment.<br />
1.4 Objectives of this document<br />
The objective of this <strong>fire</strong> <strong>hazard</strong> <strong>management</strong> <strong>guideline</strong> is to provide corporate guidance on the means to:<br />
• Prevent the occurrence of <strong>fire</strong>s<br />
• Detect gas/vapour releases<br />
• Detect <strong>fire</strong>s if they occur<br />
• Extinguish or mitigate the effects of <strong>fire</strong>s (as appropriate to the specific <strong>fire</strong>)<br />
• Tailor emergency response for specific <strong>fire</strong> scenarios.<br />
This process would require the identification and analysis of realistic potential losses of containment and<br />
associated <strong>fire</strong> types, sizes and effects for the subject facility.<br />
Fire Hazard Management Guideline Rev.02 Page 4 of 39
<strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Co Sdn Bhd<br />
The requirements set out in this philosophy document should be applied, either retrospectively (existing facilities)<br />
or at the design definition stage, to all new BSP offshore facilities being:-<br />
− manned facilities<br />
− not-normally manned facilities<br />
− unmanned facilities<br />
1.5 Fire Prevention/Protection/Responses Philosophy<br />
In general, all (Existing and New) facilities must undergo the HEMP process of identification, assessment, control<br />
and recovery with specific attention to potential of <strong>fire</strong> & explosions at the facilities.<br />
In every stage of the HEMP process the most appropriate / recommended methods to be used to assure protection<br />
on PEAR against FIRE must be defined. The primary objective of <strong>fire</strong> protection, detection and <strong>fire</strong> fighting<br />
facilities should be the preservation of human life.<br />
For manned, normally unmanned and unmanned offshore complexes / facilities, the first line of defence is gas/<strong>fire</strong><br />
detection followed by automatic isolation and dependant on the strategic importance of the facility, blowdown of<br />
the facilities.<br />
While all facilities are to be equipped with manual <strong>fire</strong> fighting equipment, manned complexes would also be<br />
equipped with <strong>fire</strong> water ring main systems, sprinkler systems, localised water mist systems and supported by<br />
trained <strong>fire</strong> fighters (trained in accordance with OPITO requirements). The prime objective of the <strong>fire</strong> team is to<br />
perform rescue operations, assist in securing the escape / evacuation of staff and fighting of minor <strong>fire</strong>s.<br />
The following philosophies are to be applied in response to the situation when potential Fire is occurring:<br />
Philosophies for (keep in mind on the PEAR): -<br />
Manned facilities<br />
- Means of protection for People must be provided: -<br />
- Escape route, mustering of people, evacuation of people, personal protection, etc<br />
- Means of rescue of people within a defined time scale:-<br />
- Means of evacuation of people from the facilities within a defined time scale:-<br />
- Removal of the source, Auto-protection of Asset, containment of hydrocarbon, blowdown of<br />
hydrocarbon, etc<br />
- Means of minimising escalation of FIRE must be provided: -<br />
- Means of communication on who should be involved, people awareness, minimising/avoidance of<br />
public knowledge, etc<br />
Not normally manned facilities<br />
- Means of protection for People must be provided: -<br />
- Escape route, mustering of people, evacuation of people, Personal protection, etc<br />
- Removal of the source, Auto-protection of Asset, automatic isolation of hydrocarbon and for<br />
strategic important facilities, , blowdown of hydrocarbon.<br />
- Means of minimising escalation of FIRE must be provided: -<br />
- Standby- vessel must be present and available within a defined time scale.<br />
Unmanned facilities<br />
- Means of minimising escalation of FIRE must be provided: -<br />
- Removal of the source, Auto-protection of Asset, automatic isolation t of hydrocarbon.<br />
Fire Hazard Management Guideline Rev.02 Page 5 of 39
<strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Co Sdn Bhd<br />
1.6 Fundamental Requirements for Fire Protection<br />
The following requirements are recommended:-<br />
• Identification, analysis and assessment of <strong>fire</strong> and explosion <strong>hazard</strong>s and effects.<br />
• Reduction of residual risks to personnel associated with potential <strong>fire</strong> and explosion scenarios to a level<br />
that is tolerable and as low as is reasonably practicable.<br />
• Fire detection, protection and response risk controls should be provided to a level that commensurate<br />
with the <strong>hazard</strong>s and risks on a facility, with the order of priority being:<br />
− Avoiding the occurrence of <strong>fire</strong>s<br />
− Protecting personnel against the immediate effects of gas/vapour releases<br />
− protecting all personnel against the immediate effects of <strong>fire</strong>s<br />
− removing personnel from the danger zone presented by potential escalation of the initial incident<br />
(<strong>fire</strong> or gas release)<br />
− preventing <strong>fire</strong> escalation<br />
− protecting the environment.<br />
− protecting the asset<br />
The analysis of <strong>fire</strong> and explosion risks may require quantitative modelling of releases and potential<br />
consequences. The subsequent assessment of risks to personnel from <strong>fire</strong> and explosion <strong>hazard</strong>s on<br />
manned complexes would normally require quantitative methods. For un-manned and not-normally<br />
manned facilities assessment a qualitative assessment would normally suffice, unless it is deemed that<br />
the level of personnel exposure and the <strong>hazard</strong>s involved justifies a quantitative approach. The advice<br />
of HSE/4 should be sought in determining the appropriate degree of assessment.<br />
Not withstanding the above order of priority, the primary objective of <strong>fire</strong> protection should<br />
always be the protection of human life.<br />
1.7 Risk Assessment Process<br />
Fire protection is to be provided so that risks are as low as reasonably practicable (ALARP).<br />
Through the application of the standards contained in this document and supplementary studies such as Hazard<br />
Identification, consequence modelling, <strong>fire</strong> and explosion analysis and escape analysis, which may ultimately feed<br />
in to a Quantitative Risk Assessment an assessment of risks to personnel (and assets) can be made.<br />
The outcome of this assessment should be compared with tolerability levels, performance standards etc. These<br />
studies may also identify opportunities for reducing risk as well as indicate the main contributors to overall risk<br />
that can then help focus risk reduction efforts. Finally these studies provide input to emergency response<br />
planning, including exercise programmes.<br />
This process would contribute to the demonstration of ALARP and provide the project manager and ultimate asset<br />
holder with a demonstration of assurance.<br />
The figure below gives a typical process for such assessments.<br />
Fire Hazard Management Guideline Rev.02 Page 6 of 39
<strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Co Sdn Bhd<br />
Process<br />
Events<br />
Hazard<br />
Identification<br />
Other<br />
Events<br />
Fire &<br />
Explosion<br />
Analysis<br />
Or<br />
FIREPRAN<br />
Explosion<br />
Protection<br />
Review<br />
Structural<br />
Response<br />
Analysis<br />
Misc<br />
Analysis<br />
Fig. 1: QRA Process Typical for a complex offshore facility<br />
1.8 Basis for decision making on <strong>fire</strong> risk reduction measures.<br />
1.8.1 Quantitative Risk Assessment<br />
Where there are options to consider or a decision is required on the appropriate level of <strong>fire</strong> detection and<br />
protection, comparative QRA may be used to provide support to the decision making process. This should not be<br />
done to justify a reduction in standard. In such cases the assessment criteria should be based on:<br />
� Either, a direct comparison of potential cost benefit based on differences in potential asset value and<br />
production loss, (Cost Benefit Analysis) or, where there is concern for safety<br />
� Or, an assessment of the implied cost to avert a fatality, ICAF. (refer EP 95 –0352 and Guide to<br />
application of BSP HSE Risk Tolerability and Control Acceptance Critieria Doc No. BSP-02-Guideline-<br />
005)<br />
� Or a combination of both (there may be circumstances where the application of CBA is not appropriate<br />
for example when the risk levels of individual workers are already at a high level).<br />
QRA may or may not provide a conclusive result; in such cases the decision must be based on qualitative risk<br />
assessment. In all cases factors such as perceived risk assessment and possible future changes in standards<br />
and legislation should be taken into account.<br />
The degree of <strong>fire</strong> protection provided for a facility may also be linked to the criticality of that facility in terms<br />
of securing BSP’s oil and gas production. Offshore this aspect must be taken in balance with the normally<br />
overriding safeguarding philosophy driver of personnel safety (onshore there is often more opportunity to<br />
have varying degrees of protection).<br />
1.8.2 Qualitative Risk Assessment<br />
Emergency System<br />
Survivability Analysis<br />
Evacuation &<br />
Escape Analysis<br />
Riser, dropped<br />
objects etc.<br />
studies<br />
QRA Support Studies<br />
(optional depending on facility)<br />
Exposure based<br />
Analysis<br />
Risk<br />
Tolerance<br />
Criteria<br />
Further<br />
Risk<br />
Reduction<br />
Measures<br />
-<br />
Feed in to<br />
design<br />
&<br />
Ops<br />
In combination with quantitative assessments the qualitative application of HEMP, in particular to develop bow-tie<br />
analysis (e.g. using the THESIS tool) in relation to assessing adequacy of controls should be carried out for<br />
representative <strong>fire</strong> scenarios. Here the number and effectiveness of threat barriers and escalation controls can be<br />
screened and assessed applying the qualitative risk tolerance criteria contained in BSP-02-Guideline-005. Bow-tie<br />
based analysis can address specific hardware, procedure and organisational issues such as the role of Permit to<br />
Fire Hazard Management Guideline Rev.02 Page 7 of 39<br />
QRA
<strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Co Sdn Bhd<br />
Work, emergency response measures and infrastructure that supports general <strong>fire</strong> safety, such as <strong>fire</strong>water supply.<br />
Bow-tie analysis would also identify critical activities essential to establishing and maintaining controls. It would<br />
be necessary to make a judgement and highlight the factors supporting such a judgement such as industry practice<br />
and standards. The ALARP principle that is integral to <strong>Shell</strong>’s HEMP process should be applied.<br />
1.9 Codes and Standards<br />
Generally, the <strong>fire</strong> protection on BSP facilities would be designed using a combination of engineering standards<br />
and <strong>fire</strong> and explosion risk assessment. [Ref 1.2]<br />
Specific Fire Engineering Standards used in BSP, are:<br />
ISO 13702 Standard <strong>Petroleum</strong> and Natural Gas Industries – Offshore Production<br />
Installations – Control and Mitigation of Fires and Explosions –<br />
Requirements and Guidelines, 1999<br />
NFPA 11 Foam Systems<br />
NFPA 12 Carbon Dioxide Extinguishing Systems 1993<br />
NFPA 13 Installation of Sprinkler Systems 1991<br />
NFPA 15 Water Spray Fixed Systems for Fire Protection 1985<br />
NFPA 20 Centrifugal Fire Pumps 1990<br />
NFPA 96 Fixed <strong>fire</strong> extinguisher system<br />
NFPA 101 Life Safety Code<br />
NFPA 105 Installation of Smoke Control Near Assemblies<br />
NFPA 750 Water Mist Systems<br />
CAP168 Licensing of Aerodromes<br />
(http://www.caa.co.uk/docs/33/CAP168.pdf)<br />
CAP437 Offshore Helicopter Landing Areas, Guidance on Standards<br />
(http://www.caa.co.uk/docs/33/Cap437.pdf).<br />
DEP 32.30.20.11 Gen Fire, Gas and Smoke Detection Systems<br />
DEP 80.47.10.10-Gen Fire fighting agents<br />
DEP 80.47.10.12-Gen Water-based <strong>fire</strong> protection systems for offshore facilities<br />
DEP 80.47.10.30-Gen Assessment of the Fire Safety of Onshore Installations<br />
DEP 80.47.10.31-Gen Active Fire Protection Systems and Equipment for Onshore Facilities<br />
SOLAS IMO Safety of Life at Sea<br />
OGP Fire Systems Integrity Assurance<br />
BSP-12.S.500 Process Safeguarding Standard<br />
BSP 12.2.201 Design of Helidecks<br />
BS-1400 British Standard for Foam Monitors<br />
BS-4275 British Standard for Breathing Apparatus<br />
BS-4547 British Standard for Portable Fire Extinguishers<br />
BS-6391 British Standard for Fire Hoses<br />
EP99-5807 Fire & Gas Methodologi (developed by SGSI)<br />
Fire Hazard Management Guideline Rev.02 Page 8 of 39
<strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Co Sdn Bhd<br />
2 FIRE & EXPLOSION A SSESSMENT T OOLS & TECHNIQUES<br />
2.1 Introduction<br />
Supplementary studies such as Hazard Identification, consequence modelling, <strong>fire</strong> and explosion analysis and<br />
escape analysis, which may ultimately feed in to a Quantitative Risk Assessment are introduced in Section 1.6.<br />
The formal studies adopted in BSP are summarised below. The details of the studies are documented separately,<br />
while the key findings are captured in Hazard and Risk Registers. Ultimately all studies should be referenced in<br />
the relevant HSE Case.<br />
2.2 Planning and Team composition and competency of participants<br />
2.2.1 Planning<br />
Execution of <strong>fire</strong> <strong>hazard</strong> studies (e.g. FIREPRAN) associated with new designs, should be planned and executed at<br />
an early stage e.g. conceptual design stage.<br />
2.2.2 Team Composition<br />
Most <strong>fire</strong> <strong>hazard</strong> studies and reviews are best executed by a team of staff representing different disciplines such as<br />
design & engineering, operations and for more complex studies and an HSE specialists with knowledge of HEMP<br />
tool appliance.. The exact composition of the team will need to be determined on the basis of type of review and<br />
the scope of work.<br />
2.2.3 Staff Competency<br />
a) Skilled Technical Safety Engineering (HSE-S1)<br />
� Specifies system requirements and manage the design, manufacture, commissioning and operation of all<br />
main safety systems.<br />
� Is consulted by other disciplines for guidance on the engineering of systems that have a role in major<br />
accidents.<br />
� Troubleshoots problems and produce effective solutions.<br />
� Advises line <strong>management</strong> on the impact of any system problems so that they are able to make wellinformed<br />
risk <strong>management</strong> decisions.<br />
b) Skilled applicant of specific HEMP Tools<br />
� Able to plan and execute a specific tool or technique.<br />
� Able to lead or undertake work associated with the application of a specific tool or technique<br />
� Uses a specific tool or technique to arrive at robust recommendations for risk reduction measures.<br />
� Effectively communicates both in writing and verbally, the process, the findings and recommendations<br />
from the application a specific tool or technique.<br />
� Can document the findings from the application of a specific tool or technique in a structured report e.g.<br />
HSE Case, Hazard Register etc.<br />
Incorporates workforce views into a specific tool or technique and is able to communicate results to workforce<br />
representatives.<br />
Fire Hazard Management Guideline Rev.02 Page 9 of 39
<strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Co Sdn Bhd<br />
2.3 TOOLS & TECHNIQUES<br />
2.3.1 HAZID<br />
� EP 95-0312 HAZID<br />
HAZID (HAZard IDentification) is described in <strong>Shell</strong> EP 95-0312. A HAZID study in the context of <strong>fire</strong>s and<br />
explosion focuses on identifying the <strong>hazard</strong>s, top events and possible causes of such events that may lead to a <strong>fire</strong><br />
and/or explosion. There may also be a high level identification of effects and targets (personnel, environment,<br />
assets). Such HAZIDs would tend to focus on specific facilities and cover various modes of operation over the<br />
project life cycle.<br />
HAZID should be carried out for all facilities. HAZIDs may be carried out as an integral part of other studies such<br />
as FRA and FIREPRAN.<br />
2.3.2 F(E)RA<br />
� Add EP 95 reference for a F(E)RA<br />
Fire (and Explosion) Risk Analysis is something of a misnomer: this study analyses <strong>hazard</strong>s, not risks. It would<br />
normally comprise a detail inventory of fuel sources for <strong>fire</strong>s, associated <strong>fire</strong> types and existing controls. An<br />
F(E)RA would normally be a desktop exercise. The F(E)RA should be undertaken by a competent (skill level)<br />
specialist with appropriate experience.<br />
F(E)RA’s are generally carried out as pre-cursor to QRA [Ref Fig. 1] where escalation scenarios are potentially<br />
complex.<br />
2.3.3 FIREPRAN<br />
� EP 95-0350 FIREPRAN<br />
� Fire and Explosion Standard (FIREPRAN), document number 1388-R-803, Rev 1 March 2000<br />
FIRE PRotection ANalysis is a scenario-based structured group assessment study aimed at determining the<br />
adequacy of existing <strong>fire</strong> protection measures and/or the need for new <strong>fire</strong> protection measures in the light of<br />
major <strong>fire</strong> and explosion <strong>hazard</strong>s at the subject facility FIREPRAN covers analyses what happens in various<br />
scenarios, model this and look at escape, structural loading, escalation etc FIREPRAN is a stand-alone technique<br />
that does not necessarily need to be supported by a QRA.<br />
FIREPRAN has its limitations when escalation is not predictable, for simple 2-dimensional facility analysis and<br />
simpler offshore facilities. FIREPRAN is fit for purpose. It is may be used on existing facilities but is also<br />
effective for screening and scrutinising designs.<br />
FIREPRAN is BSP’s preferred method for assessing the adequacy of <strong>fire</strong> protection measures on its hydrocarbon<br />
production and processing facilities. FIREPRAN’s should be carried out for:<br />
• Manned facilities<br />
• Not-normally-manned facilities where potential <strong>fire</strong>s and/or explosions are the major contributor to high<br />
personnel risks as measured by IRPA<br />
• Not-normally-manned and unmanned facilities where loss of the facility through <strong>fire</strong> or explosion would incur<br />
major financial impact on the company (directly or via reputation damage) or major impact on the<br />
environment,<br />
Fire Hazard Management Guideline Rev.02 Page 10 of 39
<strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Co Sdn Bhd<br />
2.3.4 QRA<br />
� EP 95-0352 Quantitative Risk Assessment<br />
Quantitative Risk Assessment involves quantification of risks to personnel and assets from identified <strong>hazard</strong>s, by<br />
application of generic failure data to the subject facility, with suitable parametric modelling to account for subjectspecific<br />
conditions.<br />
QRA should be performed for all manned facilities in order to determine:<br />
• that risks to personnel from <strong>fire</strong> and explosion <strong>hazard</strong>s are tolerable<br />
• compare the risk of alternative modifications / upgrades and to assist in the selection process in accordance<br />
with the ALARP principles<br />
QRA’s for BSP offshore facilities should preferably be performed using existing SQRAM QRA models where<br />
available or through development of new SQRAM models as necessary. Note that to date SQRAM models have<br />
been developed for all BSP’s offshore manned complexes and for a few of the not-normally-manned and<br />
unmanned offshore complexes<br />
�<br />
2.4 Documentation of Results<br />
Key findings of Fire Hazard studies should be included in the HSE cases for the respective facilities, while the<br />
study report should be made available in livelink. Action items identified as a result of the studies would normally<br />
be traced by the use of OmniSafe.<br />
.<br />
Fire Hazard Management Guideline Rev.02 Page 11 of 39
<strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Co Sdn Bhd<br />
3 PREVENTION OF F IRES AND E XPLOSIONS<br />
The first element of managing <strong>fire</strong> <strong>hazard</strong> is preventive; this section describes the required measures to prevent<br />
<strong>fire</strong>s and explosions from occurring. A large number of established measures contribute to prevention of release<br />
and, in the event of release, prevention of an ensuing <strong>fire</strong>:<br />
• Approved engineering design standards for equipment and systems<br />
• Classification of <strong>hazard</strong>ous areas, linked to requirements for all certified equipment installed or used in<br />
these areas<br />
• Maintenance of asset integrity (AIMS) including inspection work and change control<br />
• The Permit To Work system for control of maintenance and engineering activities<br />
• Procedure based control of major activities (drilling, construction, painting) through the CP procedures<br />
(CPRA, CPEMA, CPPA)<br />
• Proper organisation and maintenance of all facilities (“good <strong>fire</strong> safety practice”) including Control,<br />
Utility, LQ, Aviation, Marine<br />
• Safety audits, with follow-up<br />
• Timely detection of process upsets and corrective action<br />
• Effective shutdown and blowdown in process conditions likely to lead to immediate <strong>fire</strong> <strong>hazard</strong><br />
• Operator patrols of all areas<br />
• Operator and Fire Team Leader/Member incident response training<br />
• Smoking control<br />
• Specification and ongoing monitoring of furnishings and structure finishes to reduce ignition and <strong>fire</strong><br />
spread probabilities<br />
All of these measures are part of BSP’s normal HSE-MS and are not specific to control of <strong>fire</strong> <strong>hazard</strong>s. They are<br />
identified here for completeness.<br />
Fire Hazard Management Guideline Rev.02 Page 12 of 39
<strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Co Sdn Bhd<br />
4 PASSIVE FIRE PROTECTION<br />
4.1 General<br />
Passive <strong>fire</strong> protection (PFP) in the form of <strong>fire</strong> rated enclosures should be provided for control rooms,<br />
accommodation, offices and safety critical equipment rooms e.g. UPS. See section 7.1.<br />
PFP is not generally required for BSP’s process and utility installations, however specific cases can be justified<br />
through risk analysis and Cost Benefit evaluations.<br />
Where passive <strong>fire</strong> protection of equipment and structures is shown as justifiable to reduce risk, the specification<br />
should be appropriate to the risk. Particular care should be taken to ensure that any PFP that is installed does not<br />
compromise long-term asset integrity and takes proper account of inspection needs.<br />
For general requirement related to LQs, reference is made to SOLAS requirements.<br />
Some helidecks may be fitted with Enhanced Aluminium Helideck with a <strong>fire</strong> suppression system designed into<br />
the helideck surface structure. Such helidecks have a perforated appearance.<br />
4.1.1 Wall Coverings<br />
a) Wall coverings for “A” class walls should be of non-combustible materials.<br />
b) Wall coverings for “B” and “C” class walls should be of low <strong>fire</strong> spread materials.<br />
c) Continuous “B” class ceilings should be constructed of non-combustible materials.<br />
d) Suspended ceiling panels should be constructed of non-combustible materials.<br />
e) Interior finish materials, excluding floor material, should meet or exceed the requirements of class “A”<br />
interiors finish in accordance with NFPA 101 except that the smoke developed rating should be no higher than<br />
55.<br />
f) Interior flooring materials should meet or exceed requirements of a class 1 interior floor finish with a minimum<br />
critical radiant flux of 0.45 watts/sq.cm. as specified in NFPA 101.<br />
g) Interior finish paints which are shown to contribute to surface spread of flame should not be used. This<br />
requirement effectively limits interior finish paints to water based emulsion types only. Gloss paints are<br />
normally oil based and contribute to rapid <strong>fire</strong> spread.<br />
h) PVC and other plastic wall linings should not be used for bathroom/shower room finishing or fittings.<br />
i) For Local Control Room and Containerised Equipment Room located on manned and unmanned platforms<br />
A60 for external and B15 for internal partitions & floors are recommended.<br />
4.1.2 Furnishing<br />
Furnishings for the living quarters should, as far as practicable, be of non-combustible construction with flame<br />
retardant and/or low flame propagation material used throughout.<br />
a) Cabinets, lockers, drawers, shelving and related fittings should be factory fabricated and constructed of<br />
combinations of recognised <strong>fire</strong> retardant materials and non-combustible materials.<br />
b) Office furniture should be standard design and should be constructed of <strong>fire</strong> retardant materials.<br />
c) Bedding mattresses should be of low flammability material with a low ignition potential meetings standard<br />
ignition specification requirements of BS 7176 or equivalent.<br />
Fire Hazard Management Guideline Rev.02 Page 13 of 39
<strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Co Sdn Bhd<br />
d) Seating with expanded foam upholstery should only be permitted where smoke and flame inhibited foams are<br />
used on the construction.<br />
e) The number of furnishing items in cabins should be kept to that which is the minimum requirement for the<br />
occupants use.<br />
Additional lockers are accepted in cabins to cater for personnel working back-to-back.<br />
f) Twin cabins should have <strong>fire</strong> retardant curtains meeting International standards surrounding bunks for personal<br />
privacy.<br />
g) Additional table lamps, bedside lamps and other lamps of commercial design to be provided in addition to<br />
fixed lighting and should require to be of an approved safe design.<br />
Interior cabin carpeting should be of low ignition potential and low surface spread of flame and should be of<br />
low toxic fumes emission.<br />
h) Offices, cabins and recreation areas should be provided with non-combustible refuse bins without plastic<br />
lining.<br />
4.2 Ventilation and Air Conditioning<br />
4.2.1 General:<br />
HVAC systems should be designed to fulfil appropriate combinations of the following functions:<br />
a) Maintenance of a pressure differential between the internal and external of the living quarters.<br />
i. HVAC services to all areas of the living quarters should be fan powered.<br />
b) HVAC systems should run continuously during normal conditions in the living quarters but should, during<br />
a <strong>fire</strong> or emergency incident, be shut down with provision for start-up to required areas. Living quarters are<br />
segregated in zones by bulkheads and <strong>fire</strong> dampers. On detection of smoke or heat the effected zone is<br />
closed off / isolated and corridors kept smoke free by maintaining an over –pressure.<br />
i. HVAC systems should be capable of being kept in constant use by the provision of adequate stand-by<br />
systems.<br />
ii. HVAC systems controls and power supply from vital emergency power supply.<br />
iii. Air intakes for the living quarters should be located on the side of the platform furthest away from<br />
classified <strong>hazard</strong>ous areas.<br />
iv. Location of air intakes should take due account of the requirements for maintaining a habitable<br />
atmosphere in the living quarters and should be positioned such that they would not ingest exhaust<br />
fumes from platform motors, marine vessels or air exhaust from accommodation ventilation outlets.<br />
4.2.2 Specifics:<br />
a) Ventilation ducts should be constructed of non-combustible materials throughout.<br />
b) Ventilation ducts, external to the living quarters, shall be of welded and gas tight construction throughout.<br />
Cross-joints shall be sealed with appropriate gasket material.<br />
c) ‘A’-rated ducts internal to the living quarters shall be of welded and gas tight construction throughout. Crossjoints<br />
shall be sealed with non-combustible gasket material.<br />
d) Non ‘A’-rated ducts internal to the living quarters shall be shall be formed from light gauge sheet-metal.<br />
Longitudinal joints shall be lockformed with sealant applied to the joint. Cross-joints shall be sealed with<br />
gasket material<br />
Fire Hazard Management Guideline Rev.02 Page 14 of 39
<strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Co Sdn Bhd<br />
e) A positive pressure of at least 50Pa above outside atmospheric pressure should be maintained in the living<br />
quarters to minimise the ingress of smoke and gases.<br />
f) Fire/gas dampers should be installed in ducts at every location where ducts pass, either vertically or<br />
horizontally, through “H” or “A” or “B” class divisions and should meet the requirements of BS 476 Part 8 or<br />
equivalent.<br />
g) All <strong>fire</strong>/gas dampers and ducts should have as a minimum the same <strong>fire</strong> resistance and thermal insulation<br />
properties as the wall or deck in which they are to be located and should not impair the rating of the division.<br />
h) Fire/gas dampers should be of a type which permits a maximum leakage of 0.1 cu.m/sec per sq.m of damper<br />
face area where the damper is in the closed position and should be suitable for high velocity and pressure<br />
systems of 2000 Pa.<br />
i) Each <strong>fire</strong>/gas damper should have a suitable indicator fitted externally to identify open and closed positions and<br />
should remain open during normal operating conditions with all controls arranged to failsafe close in the event<br />
of loss of power.<br />
j) All <strong>fire</strong>/gas damper open and/or closed position status should be indicated on the main DCS system F & G<br />
graphics in the control room.<br />
k) Fire/gas dampers should be capable of operation by the following methods:<br />
- A quartzoid bulb in the air stream which should actuate at 68 degrees C.<br />
- Confirmed smoke or gas detection input to the F&G system<br />
- Manual operation of local pneumatic shut-down valve or switch.<br />
l) All main air intakes should be fitted with <strong>fire</strong>/gas dampers.<br />
m) All extract outlets should be fitted with <strong>fire</strong>/gas dampers.<br />
n) Where the exhaust ducts from kitchen ranges pass through accommodation areas or areas containing<br />
combustible materials such exhaust ducts should be constructed of class “A60” divisions and each exhaust duct<br />
should be fitted with the following:-<br />
- A grease trap easily and readily removable for cleaning.<br />
- A <strong>fire</strong>/gas damper located in the outlet end.<br />
- A manual <strong>fire</strong>/gas damper shut off control device.<br />
- A fixed <strong>fire</strong> extinguishing system complying with NFPA-96 or similar standard<br />
- Access for internal cleaning / de-greasing of exhaust ducts.<br />
o) All <strong>fire</strong>/gas dampers throughout the living quarters should have easy and simplified access for testing,<br />
inspecting and maintenance purposes.<br />
p) Air extraction from accommodation spaces into common ceiling voids should not be permitted and should be<br />
avoided by the provision of supply and return air registers and ducting in each accommodation space.<br />
q) Fire/gas dampers fitted to air outlets in external divisions should be rated for hydrocarbon <strong>fire</strong>s according to<br />
QRA results and findings.<br />
r) HVAC systems shall be designed to avoid transfer of air from rooms / cabins to corridors to assist in<br />
maintaining smoke-free escape routes.<br />
Fire Hazard Management Guideline Rev.02 Page 15 of 39
<strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Co Sdn Bhd<br />
5 FIRE D ETECTION, ANNUNCIATION & ESD<br />
5.1 Fire, Gas & Smoke Detection<br />
Fire, Gas & Smoke detector coverage should be provided in all areas, appropriate to identified <strong>hazard</strong>s and risks.<br />
Generally this means comprehensive coverage for manned facilities, with lesser coverage for not-normally manned<br />
and unmanned facilities, in accordance with the stated priorities set out in section 1.6. The minimum coverage,<br />
applicable to unmanned facilities, should comprise fusible plug heat detection<br />
In process areas the preferred type of detectors are IR flame detector for <strong>fire</strong> and IR flammable gas detectors of<br />
either the line of sight (LOS) or the point type for detection of hydrocarbon releases. Use of CCTV cameras may<br />
also be considered for new installations.<br />
In enclosed areas the preferred type of detector is generally a heat (rate compensated type) or smoke detector of<br />
either optical or ionisation type. For gas turbine enclosures see Section 6.3.7 and 7.5.<br />
Aspirating smoke detectors may be used for critical electrical switchgear rooms and should be designed in<br />
consultation with the equipment vendors and with reference to the E&P Forum report for Incipient Fire Detection<br />
(No 6.75/284) – note that the EE&P forum has since been renamed to OGP – Oil and Gas Producers. Aspirating<br />
Smoke Detectors may be considered for normally unmanned computer rooms, telecommunications rooms and<br />
electrical rooms.<br />
Location and type of detectors should be determined using the Fire and Gas mapping methodology as developed<br />
by SGSI. (EP99-5807). This must be linked into the QRA or FIREPRAN for the subject facility to ensure no<br />
scenario contradictions exist. The mapping exercise is done after QRA and FIREPRAN and adopts the scenarios<br />
from these.<br />
Zone areas should be determined during the FIREPRAN (analysis) or during the Fire and Gas mapping exercise,<br />
which considers gas dispersion mechanics and visibility to <strong>fire</strong> detectors. In principle zone areas on offshore<br />
platforms are created by physical barriers (e.g. <strong>fire</strong> rated walls) or in the absence of these, determined on a deck or<br />
platform basis.<br />
Voting rules for detectors are set out in section 5.3 below.<br />
In addition to Fire, Gas and Smoke detectors, CCTV should be used on manned facilities and critical notnormally-manned<br />
/ unmanned facilities, to allow the control room operators to view critical facilities.<br />
Personnel can also play a major role in FGS detection. Table 5.2 below sets out recommended practice on BSP<br />
complexes for provision of Audio Visual Alarms (AVA) associated with gas detection systems.<br />
5.2 Annunciation (applies to manned complexes only)<br />
Facilities should be provided in all areas to allow someone who detects <strong>fire</strong> <strong>hazard</strong> to raise the alarm promptly and<br />
communicate details by phone or walkie-talkie to the Control Room. The alarm should be raised as a higher<br />
priority than any attack on a <strong>fire</strong>.<br />
General Alarm points (GPA buttons) should be provided at each access and exit point on all decks including boat<br />
landings and helidecks.<br />
An efficient visual and audible alarm (AVA) and PA system is required, providing coverage for all areas of a<br />
complex or platform including living accommodation/quarters and boat landings used for alternative evacuation.<br />
AVA (alarms) should be provided at strategic locations and bridges, with automatic response on detection of gas<br />
or <strong>fire</strong>. Note that audible alarms should take account of background ambient noise levels and noise associated<br />
with any event for which the alarm is intended.<br />
The philosophy underlying the provision of AVAs is as follows:<br />
1. Personnel should be warned when a Fire or Gas event arises, i.e. Fire or Gas detected anywhere on the<br />
complex/ process area<br />
Fire Hazard Management Guideline Rev.02 Page 16 of 39
<strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Co Sdn Bhd<br />
2. Personnel are to be alerted to avoid platform/ process area where first level (i.e. 20% LFL or 1 LFL/m) gas or<br />
single <strong>fire</strong> has been detected.<br />
3. When gas detection on a platform has been detected (i.e. single or voted high-high) or where <strong>fire</strong> has been<br />
detected (i.e. single or voted) , a complex/plant wide alarm (i.e. including the affected platform/ process area)<br />
consisting of red / amber (depending on hi or hi-hi) flashing beacons and intermittent sounder would be<br />
raised.<br />
4. Prepare to Abandon Platform (PAPA) which is manually activated, should be implemented throughout the<br />
complex via the raising of the red flashing beacons and continuous sounder. In accordance with the DEP on<br />
Fire, Gas and Smoke Detection Systems (DEP 32.30.20.11-Gen) the sounder should be supplanted by a motor<br />
driven siren for increased reliability and should be fed from the vital switchboard.<br />
The following tabulates the philosophy:<br />
Table 5.2: FGS AVA Philosophy<br />
BSP’s philosophy with regards to FGS detection is based on automatic shutdown on confirmed <strong>fire</strong> and gas<br />
(detection) and applies also on all platforms and complexes. Therefore where FGS alarms are enunciated<br />
graphically on DCS, there is no requirement to provide a dedicated hard-wired mimic panel.<br />
5.3 ESD<br />
Central Control Room<br />
Platform/Process<br />
Area<br />
Amber flashing beacon<br />
Rest of Complex/Plant<br />
General Alarm Call Point X X<br />
Gas detector - High (Single) X X X<br />
Gas detector - High High (Single) X X X X X X<br />
Gas detector - High High (Voted) X X X X X X<br />
Flame detector - Single X X X X X<br />
Flame detector - Voted X X X X X<br />
Smoke detector - Single X X X X X<br />
Smoke detector - Voted X X X X X<br />
Heat detector X X X X X<br />
MCP / kill knob X X X X X<br />
PAPA X X<br />
Table 4.2 FGS AVA Philosophy<br />
Emergency Shut-Down is the first line of defence upon occurrence of a flammable hydrocarbon loss of<br />
containment or <strong>fire</strong> event. Both manual ESD and executive ESD provisions should be provided on BSP facilities.<br />
Manual ESD points should be provided at each access and exit point on all decks including boat landings, and in<br />
the control room.<br />
To avoid occurrence of trips due to spurious detection, executive action should be voted as follows:<br />
• for gas and flame detection: 2ooN/D i.e. 2 out of “N” number of detectors in the voting group/zone. “D”<br />
denotes that if any detector in the group has failed (non-deterministic fault) then the logic should revert to<br />
1ooN, i.e. single shot.<br />
• point smoke detectors should be voted 2ooN where “N” is the number of detectors in the zone. Aspirating<br />
smoke detectors (commonly known as HSSD - High Sensitivity Smoke Detectors) should be voted with<br />
Fire Hazard Management Guideline Rev.02 Page 17 of 39<br />
Red flashing beacon<br />
Sounder intermittent<br />
Amber flashing beacon<br />
Red flashing beacon<br />
Sounder intermittent<br />
Sounder continuous
<strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Co Sdn Bhd<br />
any point smoke detectors within the zone. The highest alert level from the aspirating smoke detector<br />
should be used (max. of incipient stage).<br />
• heat detectors (e.g. fusible plugs) are slow devices, not prone to spurious activation and should therefore<br />
never be voted<br />
5.4 Depressurisation<br />
The standard for blow down system are stated in our Process Safe guarding standard, BSP-12-Standard-500.<br />
Fire Hazard Management Guideline Rev.02 Page 18 of 39
<strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Co Sdn Bhd<br />
6 FIRE FIGHTING E QUIPMENT<br />
6.1 Manual Fire Fighting<br />
The general standard to be used for application of extinguishers for offshore manned complexes should be as per<br />
the BS-1400/4275/4547/6391 Standards (Reference is also made to BSP-02-Standard-001).<br />
Table 6.1 below shows the recommended provision of manual <strong>fire</strong> appliances on manned and not-normallymanned<br />
production and processing platforms. Provision of manual <strong>fire</strong> fighting appliances at accommodation and<br />
utility platforms must be assessed specifically because the <strong>fire</strong> <strong>hazard</strong>s are more complex.<br />
Table 6.1 : Provision Of Manual Fire Appliances<br />
Type of deck 9 kg dry powder 6kg or 4.5kg<br />
(min)CO2<br />
Deck which is<br />
plated or with<br />
a drip pan<br />
≥2 units at each<br />
access and exit<br />
point 1<br />
Wireline deck ≥2 units at each<br />
access and exit<br />
point 1<br />
Grated deck ≥2 units at each<br />
access and exit<br />
point 1<br />
Helideck ≥2 units Dry Powder<br />
extinguisher with a<br />
combined capacity<br />
of no less than 45<br />
kg.) A minimum of<br />
one unit to be<br />
installed at each<br />
access 5<br />
LQ Galley 1 unit at access<br />
and exit for 9kgs<br />
dry powder.<br />
≥1 units inside control<br />
or switchgear rooms<br />
≥1 units inside control<br />
or switchgear rooms<br />
≥1 units inside control<br />
or switchgear rooms<br />
≥2 units or more 22.5<br />
kg. CO 2 extinguishers<br />
with extension<br />
applicators capable of<br />
reaching the S61N<br />
engine <strong>fire</strong> fighting<br />
points. 5 .<br />
2 units within galley<br />
area with CO 2<br />
50kg<br />
wheeled dry<br />
powder<br />
(excl. unmanned<br />
complexes)<br />
≥1 unit at<br />
main access<br />
point 2<br />
Optional; at<br />
main access<br />
point 2 .<br />
Wheeled<br />
foam unit<br />
(AF120)<br />
(excl. unmanned<br />
complexes)<br />
Optional. for<br />
decks with<br />
pool or<br />
running <strong>fire</strong><br />
potential3 .<br />
Double outlet<br />
hydrants with<br />
hose cabinet<br />
(excl. unmanned<br />
complexes)<br />
1 at main<br />
access point 2<br />
Not required 1 at main<br />
access point 2<br />
Not required Not required 1 at main<br />
access point 2<br />
1 unit at<br />
each access<br />
2 units fixed<br />
foam monitor<br />
1 at main<br />
access<br />
Gallery<br />
should be<br />
provided with<br />
a <strong>fire</strong> blanket.<br />
Fire Hazard Management Guideline Rev.02 Page 19 of 39
<strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Co Sdn Bhd<br />
Notes:<br />
1 Access and exit points are considered to be<br />
• at bridge links connection to a platform<br />
• at entry to stairs to a deck<br />
• at entry to stairs leading to a boat landing<br />
1 The main access point to a deck is the bridge landing to the AP or the stairs leading directly to the boat<br />
landing. On a large deck, additional large extinguishers may be needed, e.g. CP decks<br />
1 Pool <strong>fire</strong> can occur on solid decks at decks under which there is a drip pan deck at equipment drip pans or<br />
spill containment<br />
4. Location of hydrants should be assessed as part of FIREPRAN exercise.<br />
5. Helideck <strong>fire</strong> extinguishers to be marked with next date due for test<br />
6.2 Fireman’s Equipment<br />
Each manned installation should carry a minimum of 4 (four) sets of Fireman's equipment. The sets of equipment<br />
would be kept in pairs, and one pair would be kept in a place that is readily accessible from the helicopter landing<br />
area.<br />
Each set contains:<br />
a) a protective outfit inherently <strong>fire</strong> resistant turnout gear including gloves, boots, a face mask or hood and<br />
helmet,<br />
b) a self contained breathing apparatus with minimum 30 minutes working duration (incl. Spare bottle),<br />
c) a <strong>fire</strong>man's axe,<br />
d) a safety harness and lifeline, and<br />
e) a portable , intrinsically safe, battery operated safety lamp capable of operating efficiently for a period of<br />
not less than 3 hours.<br />
In addition rescue equipment shall be provided in a crash box adjacent to the helideck as required by CAP 437<br />
f) an adjustable wrench<br />
g) 1 set bolt cutters<br />
h) 1 large crowbar<br />
i) 1 grab or salving hook<br />
j) a heavy duty hacksaw with 6 spare blades<br />
k) a <strong>fire</strong> resistant blanket<br />
l) a ladder<br />
m) a pair of side cutting pliers (tin snips)<br />
n) a set of assorted screwdrivers,<br />
All personnel assigned to rescue and <strong>fire</strong> fighting duties are provided with suitable personal protective equipment<br />
(PPE) such as; helmet and fitted visor, <strong>fire</strong> tunic and trousers (or one piece suit), gloves and boots.<br />
The protective equipment should meet appropriate safety standards and should not in any way restrict the wearer<br />
from carrying out his duties.<br />
Fire extinguishers would be available on unmanned platforms, but no <strong>fire</strong>men’s equipment, as the visitors are not<br />
expected to fight <strong>fire</strong>s.<br />
Fire Hazard Management Guideline Rev.02 Page 20 of 39
<strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Co Sdn Bhd<br />
6.3 Active / Fixed Fire Fighting Systems<br />
6.3.1 Firewater<br />
Firewater supply is required for all areas of manned facilities. For not-normally-manned and unmanned facilities,<br />
<strong>fire</strong>water is only required during hot work and may be temporarily supplied from the attendant workboat. Refer to<br />
DEP 80.47.10.12 for general requirement.<br />
At least one diesel engine driven <strong>fire</strong> pump is required as back up to electric motor driven pumps on manned<br />
facilities. All <strong>fire</strong>water pumps should be protected against the <strong>fire</strong>s for which they are required to operate. The<br />
main and emergency back-up pump sets should each be sized to provide adequate <strong>fire</strong>water for coverage of any<br />
one <strong>fire</strong> zone plus 2 hoses for rescue operations. Zone areas are created by physical barriers (e.g. <strong>fire</strong> rated walls)<br />
or in the absence of these, determined on a deck or platform basis according to <strong>hazard</strong> range. Note that entire LQ<br />
sprinkler systems should be counted as a single zone.<br />
A minimum practical <strong>fire</strong>water supply of 250 m³/hr with an operating pressure at the hydrant of 8 barg is required.<br />
This is ample for rescue operations and would also support one or two mobile monitors (see below).<br />
Wherever practicable the main <strong>fire</strong>water supply distribution should be in the form of a ringmain with isolatable<br />
sections that are not prone to common mode failure. However, it is recognised that this has not been achieved on<br />
all existing BSP complexes and retrofitting of new ringmains is rarely practicable (or cost justified). Consequently<br />
effort must be directed at protecting the main supply to ensure that the risk of supply failure during <strong>fire</strong> fighting<br />
and particularly during rescue operations, is ALARP and mitigation measures or alternative escape plans are in<br />
place to assure the safety of the <strong>fire</strong> / rescue teams.<br />
6.3.2 Hydrants & Hoses<br />
The purposes of hydrants are for support of hot work activities, and where practically safe to permit safe<br />
operations by a <strong>fire</strong> team engaged in rescuing casualties during an incident to provide cooling on equipment or<br />
structure during emergency. Where hydrants are provided to back-up fixed systems they should not be supplied<br />
from the same unisolatable <strong>fire</strong> main sections.<br />
All areas of manned facilities should have <strong>fire</strong>water hose coverage within two hose lengths from closest hydrants<br />
(to comply with standard <strong>fire</strong> fighting practice in providing redundancy of supply for rescue operations).<br />
6.3.3 Monitors<br />
Fixed monitors need positioned and re-positioned under <strong>fire</strong> conditions, to achieve effective cooling. Selfoscillating<br />
monitors or remote controlled monitors can provide useful cooling without the need for personnel to<br />
remain in the danger area. However, careful attention needs to be paid to the realistic reach and coverage of<br />
monitors, as units that are not properly specified can give false reassurance and act as a drain on the <strong>fire</strong>water<br />
system. Consequently, fixed monitors are only required if deemed necessary for specific scenarios from the<br />
FIREPRAN study.<br />
Mobile monitors can provide a useful facility for a <strong>fire</strong> team for example water spray protection for personnel<br />
doing rescue operations or to protect casualties from heat radiation. Fire team leaders and others involved in<br />
emergency response should identify the numbers and types of equipment required to support foreseeable rescue<br />
activities by the team. Mobile monitors are only recommended on not-normally-manned and unmanned facilities<br />
if specific activities and <strong>hazard</strong>s necessitate their (temporary) provision.<br />
For specific requirements for monitors on helidecks reference is made to section 7.6 of this document.<br />
6.3.4 Deluge<br />
Area deluge is only required if the CAPEX and OPEX (cost to maintain the deluge system and to account for<br />
potential instrumentation damage associated with regular deluge tests) are justified by quantified Cost Benefit<br />
Analysis with risk values including the potential for causing electrical short circuits and personnel exposure for<br />
maintenance of the system. A combination of QRA and FIREPRAN is required to justify provision of deluge,<br />
with procedures for regular testing to ensure continued effectiveness to be provided.<br />
Fire Hazard Management Guideline Rev.02 Page 21 of 39
<strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Co Sdn Bhd<br />
6.3.5 Sprinklers<br />
Wet pipe frangible bulb sprinkler systems are required for Living Quarters, covering sleeping, office and service<br />
areas, with the design based on a recognised internationally accepted standard such as NFPA 13. Engineering of<br />
sprinkler systems should give high priority to avoiding leakage and false alarms. Exceptions to complete sprinkler<br />
coverage are permitted, for example electrical rooms and fryer facilities in kitchens, but there must be a robust<br />
demonstration that alternative <strong>fire</strong> safety measures provide an equivalent degree of safety. See also section 7.1.<br />
6,3,6 Foam systems<br />
Foam is to be provided for helidecks as well as for fighting of contained liquid pool <strong>fire</strong>s on decks, in drip pans<br />
and in drains, on manned complexes. Where justified by the <strong>hazard</strong>s and risks, a central foam injection unit<br />
should be provided for the main <strong>fire</strong>water supply. Where this is not justified, mobile (wheeled) foam units with<br />
scenario-specific reaches should be provided on manned facilities.<br />
Foam systems are not generally required for not-normally-manned and unmanned facilities, unless specific<br />
activities and <strong>hazard</strong>s necessitate their (temporary) provision.<br />
Helidecks on manned installations should be provided with foam monitor systems.<br />
6.3.7 CO2, water mist & Halon systems<br />
Fixed CO2 systems are generally only required for special areas, e.g. vent (snuffing systems). Water mist systems<br />
are recommended for gas turbine enclosures (see section 7.5).<br />
6.4 Stand-by & Support Vessels<br />
6.4.1 Rescue / Stand-by Vessel<br />
A rescue / stand-by vessel (SBV) is required to:-<br />
• support man-over board rescue operations within a defined time scale.<br />
• support specific operations such as when working outside the platform railing.<br />
• facilitate / assist the evacuation of staff during emergencies<br />
In addition a stand-by vessel may be used to facilitate movement of staff within the field as long as rescue<br />
operations within the defined time scale can be maintained.<br />
6.4.2 FIFI1 Fire Fighting Vessel/Equipment<br />
Provision of dedicated <strong>fire</strong> fighting vessel / stand-by vessels with FIF1 <strong>fire</strong> fighting capability would be assessed<br />
on the basis of Cost Benefit Analysis or if other issues such as unacceptable IRPA, reputation or environmental<br />
risks dictate it. The response time for the vessel should be determined by the specific scenarios that are justifying<br />
its provision.<br />
Fire Hazard Management Guideline Rev.02 Page 22 of 39
<strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Co Sdn Bhd<br />
7 PROTECTION OF S PECIFIC A REAS<br />
In general, <strong>fire</strong> protection should be provided in accordance with sections 5 and 6 above. This section covers<br />
some specific requirements for special areas of a facility.<br />
7.1 Living Quarters and Control Centres<br />
Accommodation areas should have an outer envelope that is appropriately protected against <strong>fire</strong> and smoke risks,<br />
based on technical assessments.<br />
Safety of life in <strong>fire</strong> situations should be based on the requirements of NFPA 101 “Life Safety Code” treating<br />
accommodation areas under the provisions for “Existing hotels and dormitories” and other areas under the<br />
provisions of “Industrial occupancies”.<br />
The ability of control centres (as defined in SOLAS) to continue in operation during foreseeable <strong>fire</strong>s should be<br />
evaluated and appropriate measures taken for protection against <strong>fire</strong> spread, protection of safety critical systems<br />
and prevention of smoke ingress.<br />
As a general principle, Control Centres should be protected by A60 rated bulkheads, floors and ceilings as a<br />
minimum. Fire doors and <strong>fire</strong>-dampers are required to maintain the integrity of <strong>fire</strong> rated barriers, by protecting<br />
penetrations. All penetrations through enclosures rated ‘A0’, ‘A60’ or ‘H120’ should be suitably designed so as to<br />
fully maintain the <strong>fire</strong>-rating of the enclosure. As far as possible, any penetration through an ‘H120’ barrier should<br />
be avoided. Further guidance on <strong>fire</strong>-rating of enclosures for offshore living quarters is given in Section 13.3.6 of<br />
DEP 37.17.10.10-Gen: Design of Offshore Living Quarters.<br />
HVAC systems for accommodation areas and control centres should be protected by reliable means of smoke and<br />
gas detection at intakes, linked to shutdown dampers in intakes and exhausts and tripping of the Air Handling Unit<br />
(AHU). Further guidance on the design of HVAC systems for offshore living quarters is given in Section 3.3.10.2<br />
of DEP 37.10.10-Gen: Design of Offshore Living Quarters, and in Section 7.7 of DEP 37.17.10.11-Gen: Design of<br />
Offshore Temporary Refuges.<br />
Living quarters should be protected with an automatic sprinkler system covering sleeping, office and service areas,<br />
based on a recognised internationally accepted standard such as NFPA 13. Engineering of sprinkler systems<br />
should give high priority to avoiding leakage and false alarms. Exceptions to complete sprinkler coverage are<br />
permitted, for example electrical rooms and fryer facilities in kitchens, but there must be a robust demonstration<br />
that alternative <strong>fire</strong> safety measures provide an equivalent degree of safety. The kitchen cooker hood should have a<br />
fixed wet chemical or water mist system.<br />
Smoke detection should be provided in all areas of LQs and control centres except those where a high level of<br />
false alarms would result.<br />
Smoking should be prohibited except for in designated rooms. A dedicated electric cigarette lighter should be<br />
provided in the designated smoking room(s).<br />
Personal electrical equipment should be permitted subject to agreement of responsible supervisor. It should be<br />
certified and intrinsically safe if used in <strong>hazard</strong>ous area. (Note that the voltage for offshore is 254V, 60Hz which is<br />
10% higher than mains supply onshore 220-240 V, 50Hz).<br />
Effective means for manual <strong>fire</strong> fighting should be provided, including hose reels and portable extinguishers. In<br />
selecting hand held extinguishers in LQ areas, consider Film Forming Foam Spray extinguishers which are<br />
efficient and minimise clean-up compared to dry chemical units.<br />
7.2 Muster areas<br />
Muster areas should be protected against gas, <strong>fire</strong> and smoke risks, based on technical assessments.<br />
The ability of muster areas to continue in operation for as long as is necessary to achieve safe evacuation of all<br />
non-essential personnel during foreseeable <strong>fire</strong>s should be evaluated and appropriate measures taken for protection<br />
against <strong>fire</strong> spread, impingement of thermal radiation and prevention of smoke and gas ingress.<br />
Fire Hazard Management Guideline Rev.02 Page 23 of 39
<strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Co Sdn Bhd<br />
7.3 Office and Utility Areas<br />
Effective <strong>fire</strong> detection (e.g. smoke detectors) should be provided in all areas, including office and storage areas.<br />
Further provision should be considered through analysing case by case. Sprinklers should be considered for areas<br />
where there is high combustible loading or recognised potential for difficulty in fighting the <strong>fire</strong> and achieving<br />
control of it, for example stores areas.<br />
7.4 Electrical Rooms<br />
Electrical rooms should be provided with smoke detection as a minimum. This should be of the optical type.<br />
Aspirating smoke detectors (HSSD) should be specified where electrical equipment under protection is critical for<br />
safety or production. This may include communication and computer rooms.<br />
• For HVAC without fresh air intake, <strong>fire</strong> and smoke detection shall trip the HVAC to avoid air circulation and<br />
to suffocate the <strong>fire</strong>. Alarm only to control room and no trip to switchgear.<br />
• For HVAC with fresh air intake, <strong>fire</strong> and smoke detection shall close fresh air intake, trip HVAC to suffocate<br />
the <strong>fire</strong>. Alarm only to control room and no trip to switchgear.<br />
• Gas detection shall trip switchgear but the detection signal must be voted to avoid nuisance tripping.<br />
• Where HSSD is installed, it shall give an early alarm only to the operator.<br />
Fixed <strong>fire</strong> fighting systems (clean agent or CO2) are not considered necessary in electrical rooms. However,<br />
electrical rooms are to be fitted with mandatory detection and it must be possible to de-energise electrical<br />
equipment in any electrical equipment room from outside the room. Where there is already provision for<br />
automatic isolation, <strong>fire</strong> and gas detection systems may be arranged to implement automatic isolation. Emergency<br />
response teams should include technical staff trained in safe isolation of electrical equipment.<br />
Fire extinguishing devices should include CO2 hand held extinguishers outside entrances to electrical rooms.<br />
Where there is a high concentration of electrical equipment, provide 45kg cylinders with hose to increase response<br />
capability, positioned outside the room. In large rooms, consider additional extinguishers within the room.<br />
Note that the use of halon is no longer acceptable for environmental reasons.<br />
7.5 Gas turbines<br />
Gas Turbine suppliers should be requested to standardise the detectors within enclosures with those used<br />
elsewhere on the platform where ambient conditions within the enclosure allow.<br />
Water mist systems are the preferred method of fixed <strong>fire</strong> protection for turbine enclosures. Fire and gas detection<br />
should be provided in accordance with gas turbine manufacturers standard. However as a minimum the following<br />
should be provided:<br />
• gas detection at combustion air intake. Voted gas should trip turbine but maintain enclosure purge fans.<br />
• gas detection at enclosure exhaust duct to detect internal leakages. Voted gas should trip turbine but maintain<br />
enclosure purge fans<br />
• flame detection in enclosure. Due to ambient temperature limitation of IR type flame detectors, UV detectors<br />
should be applied. Voted flame should trip turbine, trip enclosure fan, close dampers and activate the <strong>fire</strong><br />
water mist system<br />
• heat detectors in enclosure (rate compensated type). Single heat detector should have the same executive<br />
actions as confirmed flame detection<br />
7.6 Helidecks<br />
The overall minimum requirement should be to comply with CAP 437.<br />
(http://www.caa.co.uk/docs/33/Cap437.pdf)<br />
Helidecks on manned complexes should be equipped with a foam system consisting of a foam-mixing unit (AFFF<br />
system), distribution system and two low profile, oscillating fixed monitor nozzles located either side of the<br />
helideck. For calculation of the required capacity of each monitor, reference is made to BSP-12-Standard-201. A<br />
foam concentrate package, comprising tank and pump is dedicated to each monitor. The foam concentrate tank<br />
Fire Hazard Management Guideline Rev.02 Page 24 of 39
<strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Co Sdn Bhd<br />
should be sized for a minimum of 10 minutes of foam consumption based upon the calculated foam monitors<br />
consumption rate and the foam solution selected (1% solution recommended i.e. to ensure quick knockout effect).<br />
The foam concentrate pump should be a rotary gear pump capable of injecting the required concentrate quantities<br />
up to full flow rate at the operating pressure of the main <strong>fire</strong> pump. The motor driver for the foam concentrate<br />
pumps should be a "pelton-wheel style" water driven motor. The water to drive the motor should be taken from<br />
the <strong>fire</strong>water header on the "dry side" of the monitor isolation valve.<br />
Foam monitors shall be positioned on opposite side of the helideck so that all areas of the helideck may be reached<br />
in all anticipated wind directions. It may be appropriate to install an unattended and remotely operated oscillating<br />
foam monitor on an outboard section of a helideck where no foam monitor platform is available.<br />
All foam concentrate procurement should be subjected to witnessed CAP 168 Level B <strong>fire</strong> test.<br />
(http://www.caa.co.uk/docs/33/CAP168.pdf)<br />
Wherever possible fluorine free concentrates should be used for new platforms in order to minimise potential<br />
environmental effects of concentrate discharge.<br />
In addition to the two foam monitors, hand controlled hose line(s) capable of applying water in a jet/ spray pattern<br />
at a minimum of 250 litres/min for cooling, or specific <strong>fire</strong> fighting tactics should be provided. Not all <strong>fire</strong>s are<br />
capable of being accessed by monitors or on some occasions the use of monitors alone may endanger passengers.<br />
Therefore, hand controlled hose line(s) for the application of foam should also be provided. Reserve stocks of<br />
foam concentrate must be held on the installation to allow for replenishment as a result of activation of the system<br />
during an incident or following training or testing. Most new facilities offshore now prefer to provide 3 foam<br />
monitors not 2 in order to allow for all wind conditions.<br />
Hand held extinguishers are also required, adjacent to the access / exit points viz.:<br />
a) 2 or more Carbon Dioxide (CO2) extinguishers of a total capacity of not less than 22.5 g (50 lbs) with<br />
extension applicators capable of reaching the S61N engine <strong>fire</strong> fighting points.<br />
b) 2 or more Dry Powder extinguishers with a total capacity of not less than 45 kg (100 bs). An additional dry<br />
powder extinguisher provided at each helideck access point should be a lightweight 9kg unit for taking<br />
inside the helicopter to assist with evacuation from the helicopter<br />
Two sets of <strong>fire</strong>man’s equipment (see section 0) should be kept in a place which is readily accessible from the<br />
helideck.<br />
Sufficient personnel to operate the helideck <strong>fire</strong> fighting equipment effectively should be dressed in protective<br />
clothing prior to helicopter movements taking place. The normal minimum manning standard for manned<br />
helidecksis one HLO and 2 Helideck Assistants with appropriate training (see 7.7).<br />
7.7 Fire Systems Integrity Assurance<br />
All active and passive <strong>fire</strong> systems should be subjected to a formal inspection, testing and maintenance<br />
system to assure their ongoing performance. Reference is made to the Fire System Maintenance<br />
Standard BSP 72 s 011 & 012”<br />
Fire Hazard Management Guideline Rev.02 Page 25 of 39
<strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Co Sdn Bhd<br />
8 EMERGENCY R ESPONSE<br />
8.1 Emergency Response Plan<br />
All facilities should be covered by an emergency response plan that should take account of the following:<br />
� Fire Fighting Equipment<br />
� Fire fighting and Rescue responsibilities<br />
� Command and Control responsibilities<br />
8.2 Fire fighting equipment<br />
Fire fighting equipment should be provided in accordance with this philosophy. Location plans for <strong>fire</strong> fighting<br />
equipment should be displayed at all deck access points and copies included in the emergency response plans.<br />
8.3 Fire fighting and Rescue<br />
Protection of life should be the overriding primary objective in all circumstances. No attempt to manually fight a<br />
<strong>fire</strong> should be made if this involves exposing <strong>fire</strong> fighting personnel to the risk of <strong>fire</strong> escalation: in particular, the<br />
<strong>fire</strong> host platform process system should be shut down and any <strong>fire</strong>-impinged process inventories should be<br />
depressurised before <strong>fire</strong> fighting personnel go onboard.<br />
For rescue operations conflicts may arise between preservation of the rescuers’ lives and preservation of the<br />
trapped/injured personnel lives. In such circumstances, extremely hard decisions may be necessary. All such<br />
decisions are the responsibility of the On-Scene Commander, who must decide whether and when the rescue<br />
attempt should go ahead. Inputs to this decision should include:<br />
• Knowledge about the numbers and condition of trapped / injured personnel<br />
• Generic knowledge of <strong>fire</strong> characteristics, thermal radiation levels and effects, smoke exposure effects<br />
• Understanding of <strong>fire</strong> escalation particularly with respect to time elapsed<br />
• Knowledge about the <strong>fire</strong> and the status of engulfed or impinged targets (elapsed time of engulfment,<br />
inventory sizes, shut-in, depressurised, criticality of structures)<br />
• Knowledge about the security of <strong>fire</strong>water supply if this is required for the rescue operation<br />
• Alternative rescue approaches or methods<br />
8.4 Command and Control<br />
A qualified On-Scene Commander (OSC) should be available at all facilities whenever personnel are present and<br />
production is on-going.<br />
OSC training should include the major <strong>fire</strong> and explosion scenarios for the facilities and activities covered.<br />
Scenario data should be drawn from the following sources in order of preference:<br />
a) The facility QRA<br />
b) The facility F(E)RA or FIREPRAN<br />
c) The facility HAZID<br />
Fire Hazard Management Guideline Rev.02 Page 26 of 39
<strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Co Sdn Bhd<br />
9 INFORMATION F EEDBACK<br />
A BSP Incident Investigation Team would review all <strong>fire</strong> and explosion incidents. The incident review would be<br />
conducted in accordance with BSP HSE modules 30 & 31 and would include the use of TRIPOD beta<br />
methodology. A full incident report would be prepared including the following information:-<br />
� TRIPOD beta (ref. EP 95-0321)<br />
� Accuracy of Hazard register / HAZID / FIREPRAN / QRA scenarios<br />
� Learning points<br />
� Inputs to HSE Case and QRA<br />
The information from all such reports should be considered during the next revision of this Fire Protection<br />
Philosophy document.<br />
Fire Hazard Management Guideline Rev.02 Page 27 of 39
<strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Co Sdn Bhd<br />
APPENDICES<br />
Appendix 1: Terminology<br />
Appendix 2: Fire Types<br />
Appendix 3: Fire Scenarios and corresponding mitigation measures<br />
Fire Hazard Management Guideline Rev.02 Page 28 of 39
<strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Co Sdn Bhd<br />
Appendix 1: Terminology<br />
Term Definition<br />
AFP Active Fire Protection – i.e. <strong>fire</strong> protection systems that take action, e.g. water<br />
deluge<br />
AHU Air Handling Unit<br />
AIMS Asset Integrity Management System<br />
ALARP As Low As Reasonably Practicable - a term applied to risk levels which are<br />
between intolerable and negligible, when all risk reduction options have been<br />
investigated and implemented if practical<br />
Anomaly Corrosion or erosion defect discovered on process piping or process vessel.<br />
Anomalies are classified according to their severity. Classifications include<br />
“Red”, “Orange-tolerable” and “Orange-potential”. Refer also to “PAR” & “PA”<br />
definition<br />
AVA Audio Visual Alarm<br />
Barrier Any physical means of preventing an uncontrolled hydrocarbon release<br />
BOP Blow Out Preventer<br />
BSP <strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Company Sendirian Berhad<br />
CAPEX Capital Expenditure (i.e. the net capital outlay to provide a system or service,<br />
excluding on-going operating & maintenance costs – see OPEX)<br />
CAS Competency Assessment Standard<br />
CBA Cost Benefit Analysis (i.e. formal comparison of benefits against costs for an<br />
upgrade measure)<br />
CCTV Closed Circuit Television<br />
CO2 Carbon dioxide<br />
Concurrent activities Two or more separate activities on a single facility simultaneously<br />
CPEMA Concurrent Production and Engineering Maintenance Activities<br />
CPPA Concurrent Production and Painting Activities<br />
CPRA Concurrent Production and Rig Activities<br />
DCS Digital Distributed Control System<br />
DEP Design Engineering Practice<br />
Drilling Rig Jack Up / Semi-Submersible / Tender Drilling Vessel or Drilling Barge<br />
ECOCALC Economic calculation spreadsheet program developed in Microsoft Excel by<br />
BSP’s TAE department<br />
EP 95-0000 <strong>Shell</strong> International Exploration and Production Health, Safety and Environment<br />
Manual<br />
ERO Emergency Response Organisation<br />
Escalation Growth of a <strong>fire</strong> to encompass multiple fuel sources and/or collapse of primary<br />
structures. In QRA terminology, escalation refers specifically to growth of a <strong>fire</strong><br />
to encompass and substantially destroy the entire host module or platform.<br />
ESD Emergency Shut Down<br />
ETC Emergency Team Co-ordinator<br />
FGS Fire, Gas & Smoke (Detection system)<br />
F(E)RA Fire & Explosion Risk Analysis<br />
FIREPRAN Fire Protection Analysis using a structured group assessment (ref. FIREPRAN<br />
doc. 1388-R-803 rev. 1 (March 2000).<br />
FIFI Fire Fighting Classification<br />
GA General Alarm<br />
HAC Hazardous Area Classification drawings showing the classification for each<br />
area of a platform<br />
HAZID Hazard Identification exercise using brainstorming approach defined in<br />
EP95-0312<br />
Heavy lift The lifting of any object, which if dropped, would exceed the strength of any<br />
impact protection provided and severely damage process equipment (lift > 5<br />
tons).<br />
HEMP Hazard and Effects Management Process<br />
HSE-MS Health, Safety, Environment – Management System<br />
Fire Hazard Management Guideline Rev.02 Page 29 of 39
<strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Co Sdn Bhd<br />
HSSD High Sensitivity Smoke Detector<br />
HVAC Heating, Ventilating and Air Conditioning system<br />
ICAF Incremental Cost to Avoid a Fatality (i.e. the pro-rata NPV cost to reduce PLL<br />
by 1)<br />
IR Infra Red<br />
IRPA Individual Risk Per Annum<br />
LFL Lower Flammable Limit<br />
LOS Line Of Sight<br />
LQ Living Quarters<br />
Manned Complex Complexes with living quarters e.g. AMPA-6, AMPA-9, Fairley-4, Champion-7<br />
MCP Manual Call Point (Kill knobs)<br />
MOPO Manual of Permitted Operations<br />
NFPA National Fire Protection Association<br />
Not-normally manned<br />
facility<br />
Platforms or complexes which are operated by day visitors only e.g. AMDP-<br />
15/24<br />
OPEX Operating Expenditure (i.e. the cost of maintaining a system in functional order,<br />
expressed on an annual basis)<br />
OPITO Offshore <strong>Petroleum</strong> Industry Training Organisation (UK standards)<br />
PA Public Address (system)<br />
PAPA Prepare to Abandon Platform Alarm<br />
PAR Piping Anomaly Report. In common usage this term is interchangeable with the<br />
term “anomaly”<br />
PFP Passive Fire Protection (i.e. a <strong>fire</strong> protection measure that takes no action but<br />
protects by virtue of its presence)<br />
PLL Potential Loss of Life (normally quoted per annum)<br />
POB Personnel On Board i.e. the number of people on a platform or complex<br />
Potential impact area The area of the platform that would be damaged by a dropped object<br />
Production The controlled flow and processing of oil, gas and condensate from one or<br />
more wells. This includes production crossing the platform from another<br />
location<br />
PTW Permit To Work<br />
QRA Quantitative Risk Assessment<br />
TA Tolerable Anomaly<br />
Underrated flow line A flow line with a maximum design pressure that is less than the theoretical<br />
maximum closed in tubing head pressure connected to it<br />
Unmanned facility Platforms or complexes which do not require operators to be present every day<br />
e.g. CPDP-10<br />
UPS Uninterruptible Power Supply<br />
Fire Hazard Management Guideline Rev.02 Page 30 of 39
<strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Co Sdn Bhd<br />
Appendix 2: Type of Fires – (reference is made to EP95-0314).<br />
9.1 Gas Jet Fires<br />
Gas jet <strong>fire</strong>s can be up to more than 100m in length, depending on the gas release rate, pressure and hole size. as<br />
the source blows down, the flame would reduce in length and move back towards the source.<br />
Hydrocarbon gas jet <strong>fire</strong>s produce extremely high levels of thermal radiation that are lethal to anyone caught in the<br />
immediate vicinity and cause heating of adjacent structures (rapid if of impinging). They are one of the most<br />
difficult types of <strong>fire</strong> to combat: surface heat flux is extremely high and the momentum of the jet flame tends to<br />
displace water deluge and prevent effective cooling, whilst extinguishing them altogether is often undesirable as<br />
the unignited gas may then form an explosive cloud and or migrate in an uncontrolled manner to other areas of the<br />
facility. The most effective means of protection are therefore rapid source depressurisation and/or intumescent<br />
PFP on all vulnerable structural and process targets. And cooling Neither of these measures would protect<br />
personnel against the immediate effects of thermal radiation from a gas jet <strong>fire</strong>.<br />
Source blow-down designed to API 521 standard may not prevent a jet <strong>fire</strong> from escalating. If the <strong>fire</strong> impinges on<br />
critical process or structural targets, escalation can be expected within 10 to 15minutes. Given isolation of the gas<br />
source, a gas jet <strong>fire</strong> can be expected to decay in size exponentially as a function of mass release rate over<br />
inventory size; that is to say, the <strong>fire</strong> may go on for a long time even with ESD and blowdown!<br />
An example gas jet <strong>fire</strong> is depicted in Figure 9.1 below:<br />
Figure 9.1: Gas Jet Fire<br />
Fire Hazard Management Guideline Rev.02 Page 31 of 39
<strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Co Sdn Bhd<br />
9.2 2-Phase Jet Fires<br />
Volatile (flashing) liquids and 2-phase streams (e.g. well fluids)<br />
Two-phase jet <strong>fire</strong>s are momentum-driven hydrocarbon fluid <strong>fire</strong>s from a pressurised source of Volatile (flashing,<br />
e.g. CHPS) liquids or 2-phase streams (e.g. well fluids). The volatile liquid flashes into a gas phase upon release<br />
or is carried as droplets in the vapour stream until heated and the resulting vapour adds to the jet <strong>fire</strong> size. They<br />
can be over 100m in length, depending on the release rate, flash-fraction, pressure and hole size.<br />
Two-phase hydrocarbon jet <strong>fire</strong>s produce very high levels of thermal radiation that are lethal to anyone caught in<br />
the immediate vicinity and cause rapid heating of adjacent of impinged structures, and large volumes of<br />
suffocating smoke. Like gas jet <strong>fire</strong>s, they are very difficult to combat: surface heat flux is high and the<br />
momentum of the jet flame may displace water deluge and prevent effective cooling, whilst extinguishing them<br />
altogether is often undesirable as the unignited vapour may then form an explosive cloud and or migrate in an<br />
uncontrolled manner to other areas of the facility. Also, higher flash point liquids may fall out of the jet to form<br />
burning liquid pools on the surface below. The most effective means of protection are therefore rapid source<br />
depressurisation and/or intumescent PFP on all vulnerable structural and process targets. Neither of these<br />
measures would protect personnel against the immediate effects of thermal radiation and smoke from a 2-phase jet<br />
<strong>fire</strong>.<br />
Source blow-down designed to API 521 standard would not prevent a jet <strong>fire</strong> from escalating. If the <strong>fire</strong> impinges<br />
on critical process or structural targets, escalation can be expected within 10 to 15 minutes. Given isolation of the<br />
fluid source, a 2-phase jet <strong>fire</strong> can be expected to decay in size exponentially as a function of mass release rate<br />
over inventory size; that is to say, the <strong>fire</strong> may go on for a long time even with ESD and blowdown!<br />
An example 2-phase jet <strong>fire</strong> is depicted in Figure 9.2 below:<br />
Figure 9.2: 2-Phase Jet Fire<br />
Fire Hazard Management Guideline Rev.02 Page 32 of 39
<strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Co Sdn Bhd<br />
9.3 Blowouts<br />
Ignited blowouts are basically the same as jet <strong>fire</strong>s (normally multi-phase) but without the option of ESD, as the<br />
fluids are emanating from a well where control has been lost. The jet would normally be obstructed resulting in<br />
loss of momentum and lateral <strong>fire</strong> spread, at least until collapse of impinged surface structures. Blowouts are<br />
normally associated with drilling activities, but are also possible during wirelining and other well intervention<br />
activities and even during normal production due to spurious failures of containment systems.<br />
Blowouts only occur on or below Drilling Platforms (DP’s) and Well Jackets (WJ’s). Without specialist<br />
intervention, their duration is only limited by natural plugging or bridging of the well – ESD and blowdown are<br />
not an option for blowouts.<br />
Ignited blowouts produce very high levels of thermal radiation that are lethal to anyone caught in the immediate<br />
vicinity and cause rapid heating of adjacent of impinged structures, and large volumes of suffocating smoke. Like<br />
process jet <strong>fire</strong>s, they are very difficult to combat: surface heat flux is high and the momentum of the flame may<br />
displace water deluge and prevent effective cooling, whilst extinguishing them altogether may lead to undesirable<br />
explosion risks. Also, higher flash point liquids may fall out of the flame to form burning liquid pools on the<br />
surface below. Fire rated walls and/or intumescent PFP on all vulnerable structural and process targets are the<br />
only available <strong>fire</strong> protection means for ignited blowouts.<br />
If the ignited blowout impinges on critical process or structural targets, escalation can be expected within 10 to 15<br />
minutes.<br />
An example ignited Blowout is depicted in Figure 9.3 below:<br />
Fig. 9.3 Simulated blowout on offshore platform<br />
Fire Hazard Management Guideline Rev.02 Page 33 of 39
<strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Co Sdn Bhd<br />
Pool Fires<br />
A pool <strong>fire</strong> occurs when a pool of flammable is ignited. The liquid can be from a process source (e.g. crude oil in<br />
a process line) or a non-process/utility source (e.g. fuel oils, lube oils, flammable chemicals like inhibitor). The<br />
latter fluids are difficult to ignite as pools without a significant heat source already being present. The pool may<br />
be on a deck, in a drip pan or drain, or on the sea.<br />
Pool <strong>fire</strong>s tend to radiate less heat, and produce more smoke, than jet <strong>fire</strong>s. In still air, the flame of a pool <strong>fire</strong> is<br />
vertical and most of the heat goes up, but in wind the flame tilts and more heat is radiated sideways. If not limited<br />
by physical containment, a pool <strong>fire</strong> would tend to grow in size until the rate of burning equals the rate of fuel<br />
release into the pool less the rate of draining. The rate of burning, and the flame height are dependent on the liquid<br />
properties and the size of the pool.<br />
Pool <strong>fire</strong>s are most readily extinguished by application of foam if the pool is contained. Foam is less effective if<br />
the pool <strong>fire</strong> is on the open sea – in this case use of water jets to break up the hydrocarbon film is more effective.<br />
If the <strong>fire</strong> impinges on critical process or structural targets, escalation can be expected within 10 to 20 minutes.<br />
The term ‘pool <strong>fire</strong>’ may also be used to refer to the ignited ‘pool’ of bubbling gas that can occur on the sea<br />
surface in the event of a sub-sea gas release.<br />
A typical pool <strong>fire</strong> on the deck of an offshore platform is depicted in Figure 9.4 below.<br />
Figure 9.4: deck pool <strong>fire</strong><br />
Fire Hazard Management Guideline Rev.02 Page 34 of 39
<strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Co Sdn Bhd<br />
9.4 Spray <strong>fire</strong>s<br />
A spray <strong>fire</strong> is formed from a pinhole leak in a high pressure non-volatile liquid hydrocarbon system, such as the<br />
lube-oil or seal-oil system of a gas turbine. The spray of lube oil or seal oil is readily ignited (unlike a pool these<br />
oils), and burns like a smoky two phase jet <strong>fire</strong>. ESD is effective in stopping the spray <strong>fire</strong> unless a pressure<br />
accumulator is in use. Unlike gas and true 2-phase jet <strong>fire</strong>s, extinguishing a spray <strong>fire</strong> is normally desirable even if<br />
the leak is on-going. Spray <strong>fire</strong>s in enclosed spaces can be extinguished by water mist or CO2 systems. Spray<br />
<strong>fire</strong>s in open areas are best dealt with by shut-down of the pressure source (usually the oil pump).<br />
A pool <strong>fire</strong> resulting from liquid drop-out would often accompany a spray <strong>fire</strong>.<br />
Figure 9.5 below depicts a typical spray <strong>fire</strong>.<br />
Figure 9.5 : Typical lube oil spray <strong>fire</strong><br />
Fire Hazard Management Guideline Rev.02 Page 35 of 39
<strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Co Sdn Bhd<br />
9.5 Compartment <strong>fire</strong>s<br />
Compartment <strong>fire</strong>s are <strong>fire</strong>s inside enclosed spaces. Normally the term is restricted to class A <strong>fire</strong>s such as the<br />
bedding and furniture in a living quarters cabin burning. After the <strong>fire</strong> has started, its growth depends on the ease<br />
with which further combustible material is ignited. The longer a compartment <strong>fire</strong> burns, the higher the<br />
temperature that is attained, until the <strong>fire</strong> becomes oxygen-limited or a ‘flashover’ occurs.<br />
Prior to flashover, large temperature differentials would exist from floor to ceiling as the hot gases and smoke<br />
from the compartment <strong>fire</strong> accumulate in a hot layer immediately below the ceiling.<br />
A flashover is the point where the <strong>fire</strong> is no longer localised, but is spread throughout the whole compartment.<br />
There is a sudden propagation of flame through the unburned gas below the ceiling and all the combustible<br />
surfaces become involved in the <strong>fire</strong>. At this point, the rate limiting feature is no longer the amount of fuel in the<br />
compartment, but the air supply. An oxygen-limited compartment <strong>fire</strong> may not flash-over until a new source of air<br />
becomes available, such as an external door to the compartment being opened.<br />
Compartment <strong>fire</strong>s can be fought by application of an appropriate extinguishing medium to the <strong>fire</strong> source,<br />
providing that safe access to the <strong>fire</strong> is possible. Otherwise air supply starvation is effective providing that the<br />
compartment is kept sealed until the entire contents have cooled down.<br />
Figure 9.6 below shows an experimental compartment <strong>fire</strong>.<br />
Figure 9.6 : Experimental compartment Fire<br />
Fire Hazard Management Guideline Rev.02 Page 36 of 39
<strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Co Sdn Bhd<br />
8.6 Helideck Fires<br />
A <strong>fire</strong> caused either by a helicopter having a leakage of aviation fuel or a leakage of oil or hydraulic fluid<br />
which makes contact with a hot point causing flash point to be reached. This may occur during a heavy<br />
landing or crash scenario. Helicopter structures often include magnesium alloys, which once ignited are<br />
extremely difficult to extinguish. Once this point is reached total burn-out of the airframe can occur in<br />
just a few minutes. Consequential loss of burning aviation fuel may spill over the helideck and<br />
superstructure below the helideck. Foam suppression must immediately be applied to effect rescue of<br />
passengers and crew and to prevent escalation to surrounding areas.<br />
Fire Hazard Management Guideline Rev.0 Page 37 of 39
<strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Co Sdn Bhd<br />
Appendix 3: Fire Scenarios and corresponding mitigation measures<br />
Scenario Preferred Mitigation means and comments<br />
Process gas jet <strong>fire</strong> High thermal radiation, high risk of escalation; do not approach<br />
<strong>fire</strong>: use ESD and rapid depressurisation (blowdown) of source and<br />
adjacent/impinged process inventories. Remote water spray, if<br />
available may be used for cooling escalation targets or shielding escape<br />
routes. PFP on targets can prevent escalation. Beware that<br />
extinguishing the <strong>fire</strong> without stopping the gas leak may result in<br />
uncontrolled explosion risk.<br />
Process 2-phase jet <strong>fire</strong> High thermal radiation, intoxicating smoke, high risk of escalation;<br />
do not approach <strong>fire</strong>: use ESD and rapid depressurisation (blowdown)<br />
of source and adjacent/impinged process inventories. Remote water<br />
spray, if available may be used for cooling escalation targets or<br />
shielding escape routes. PFP on targets can prevent escalation. Foam<br />
may be required to extinguish pool <strong>fire</strong>s associated with liquid drop-out.<br />
Beware that extinguishing the <strong>fire</strong> without stopping the gas leak may<br />
result in uncontrolled explosion risk.<br />
Liquid HC pool <strong>fire</strong> on deck or in drip pan Intoxicating smoke, rapid heating of anything above <strong>fire</strong>. Mitigate<br />
via ESD & blowdown, drains, use of mobile foam units.<br />
Liquid HC pool <strong>fire</strong> on sea Intoxicating smoke, rapid heating of anything above <strong>fire</strong>, risk of<br />
rapid drift or spread to sensitive areas (e.g. muster area). Mitigate<br />
via ESD & blowdown, sbv (or other vessel) water monitors, use of<br />
remote foam monitors if available.<br />
Gas / vapour cloud flash <strong>fire</strong> Short duration hot blinding flash. The only effective way of avoiding<br />
injury is not to enter the gas cloud – stay upwind, use gas<br />
detection to monitor cloud extent etc.<br />
Gas / vapour cloud explosion Short duration high momentum, high overpressure hot blinding<br />
flash: no effective means of mitigation other than avoidance by facility<br />
design including incorporation of blast panels in enclosed modules .<br />
Beware of ensuing jet <strong>fire</strong> (see above).<br />
Ignited Blowout High thermal radiation, intoxicating smoke, high risk of escalation,<br />
no ESD possible; do not approach <strong>fire</strong>, evacuate. Remote water<br />
spray, if available may be used for cooling escalation targets or<br />
shielding escape routes. Foam may be required to extinguish pool <strong>fire</strong>s<br />
associated with liquid drop-out. Beware that extinguishing the <strong>fire</strong><br />
without stopping the gas leak may result in uncontrolled explosion risk.<br />
Blowout may self-seal / bridge-over, else specialist services needed<br />
(use of explosive is generally required to extinguish the <strong>fire</strong>).<br />
Helideck <strong>fire</strong> Typically a running heli fuel pool <strong>fire</strong> - Intoxicating smoke, rapid<br />
heating of anything in the <strong>fire</strong>, possible escalation to<br />
Aluminium/Magnesium (alloy) helicopter body parts. Use of helideck<br />
(foam) units for main liquid <strong>fire</strong>, CO 2 for engine <strong>fire</strong>s, special dry powder<br />
for metal <strong>fire</strong>s.<br />
Diesel fuel <strong>fire</strong>s Spray <strong>fire</strong>s with similar characteristics to two-phase jet <strong>fire</strong>s are possible<br />
from pressurised systems. Pool <strong>fire</strong>s are possible due to liquid dropout.<br />
Intoxicating smoke, rapid heating of anything in the <strong>fire</strong>. Use<br />
fuel supply cut-off, mobile foam units and remote water spray cooling of<br />
escalation targets.<br />
Lube oil <strong>fire</strong> (external) Spray <strong>fire</strong>s with similar characteristics to two-phase jet <strong>fire</strong>s are possible<br />
from pressurised systems. Intoxicating smoke, rapid heating of<br />
anything in the <strong>fire</strong>. Pool <strong>fire</strong>s are unlikely due to high flash point.<br />
Use ESD and remote water spray cooling of escalation targets.<br />
Turbine enclosure <strong>fire</strong> Lube or seal oil <strong>fire</strong> or (less likely) gas jet <strong>fire</strong> within the enclosure.<br />
Water mist systems are BSP’s preferred means of mitigation.<br />
Vent <strong>fire</strong>s Thermal radiation risk. Use CO 2 snuffing system<br />
Fire Hazard Management Guideline Rev.0 Page 38 of 39
<strong>Brunei</strong> <strong>Shell</strong> <strong>Petroleum</strong> Co Sdn Bhd<br />
Office / Cabin <strong>fire</strong> Intoxicating smoke & flash-over risks. HVAC shut-down, water<br />
sprinklers, <strong>fire</strong>water hoses and manual (light water and dry powder)<br />
extinguishers may be used. Early detection is essential.<br />
Control room <strong>fire</strong> Use portable CO2 extinguishers and/or dry chemical to extinguish <strong>fire</strong>.<br />
Kitchen / Galley <strong>fire</strong> Fat/grease and oil <strong>fire</strong>s producing intoxicating smoke. Fire blankets and<br />
CO2 fixed and portable extinguishers should be employed.<br />
External class A <strong>fire</strong> Wood (scaffold planks), Oily rags etc. Dry powder hand held<br />
extinguishers and <strong>fire</strong>water hoses may be used.<br />
Chemical <strong>fire</strong> Treat in accordance with manufacturer’s recommendations<br />
Electrical room <strong>fire</strong> Isolate electric supply to remove heat source and to avoid further short<br />
circuits / electrocution of personnel. Use portable CO2 extinguishers to<br />
extinguish <strong>fire</strong>.<br />
Workshop <strong>fire</strong> Intoxicating smoke & flash-over risks. HVAC shut-down, water<br />
sprinklers, <strong>fire</strong>water hoses and manual (light water and dry powder)<br />
extinguishers may be used.<br />
Battery rooms <strong>fire</strong> Treat same as electrical room <strong>fire</strong><br />
Cable <strong>fire</strong>s in concealed or hard to access Electrical isolation and use of long-nozzle CO2 extinguishers<br />
areas<br />
Fire Hazard Management Guideline Rev.0 Page 39 of 39