Risk and Hazard Management in HSE Case
Risk and Hazard Management in HSE Case
4.1 Introduction...................................................................................................................................... 3
4.7 Conclusions................................................................................................................................... 9
List of Figures
List of Tables
4.1 Introduction
This part of the HSE Case provides a demonstration that all potential major accident hazards have
been identified, the risks from the hazards evaluated and understood, and the controls required to
manage the threats and consequences have been identified.
The relationships between the frequency and consequences of an event; i.e. the risk, used for this
assessment are shown in table 4.1. The risk matrix and definitions are taken from Ref. 4.1, with the
frequency terms modified for this assessment.
The scope of this HSE Case is the assessment of the major accident hazards, i.e. those, which if
realised, have the potential to cause multiple fatalities, extensive asset damage, a massive effect on
the environment or a national or international negative impact on the reputation of GWDC.
The initial identification of project hazards was the subject of a desktop HAZ-ID (Hazard
Identification) exercise by operation and HSE department manager. The HAZID addressed all of the
three key activities of the project (Rig Operation, Transportation Activities, and Camp Activities). The
principal objectives were to identify the potential major accident hazards associated with each key
activity and the controls and recovery measure in place to manage the hazards. The method of
hazard assessment used is illustrated in Figure 4.2.
The technique of “Bow-Tie” analysis (see Figure 4.3 below) is also used to assist in the Structured
Hazard Identification and Control Process (SHIDAC) , to:
Identify and document the “lines of defence” of “HSE barriers” which are in place;
Facilitate a qualitative assessment of any gaps;
Help to form an assessment of event likelihood.
As discussed, control and mitigating measures are associated with HSE-critical tasks that must be
carried out prior to, or during, the drilling operation in order to ensure the major hazards are correctly
managed. The HSE-critical tasks are listed in Part 7 of this HSE Case.
This section provides an outline description of each of the hazards assessed for this HSE Case. The
Bow-tie diagrams for the hazards, which present detailed information on the barriers and escalation
factors included for each hazard, are contained in Appendix A (still to be included).
Table 4.4 presents the primary register of the hazards assessed in the HSE Case, the threats and
consequences identified and the risk matrix ratings assigned to each consequence. Table 4.6
presents a summary of the risk levels for the hazards assessed in the HSE case.
A major release of well fluids and gases can occur during drilling or associated well operations in the
event of loss of well control. This can result in an environmental incident or, if ignition occurs, a fire
or explosion with potential for loss of life and destruction of the rig.
A number of possible threats have been identified which could cause the loss of primary well control
(i.e. taking a kick). These are summarised as:
The primary control measure against taking a kick is to maintain the drilling fluid hydrostatic head
during all phases of the well. In the event that primary well control cannot be properly maintained,
the well can be controlled by secondary well control, i.e. closing-in the blowout preventers (BOPs).
The recovery actions for the resultant release of well fluids concentrate on containing the spill and
preventing ignition. Evacuation of personnel will then take place. If ignition does occur, the response
will be to evacuate all remaining staff (if present) from the rig-site to safeguard lives. Safeguarding
the rig is always a secondary concern.
Environmental considerations dictate that water based drilling fluid will be used. This significantly
reduce the risk of hydrocarbon oil/gas being absorbed into the drilling fluid with subsequent surface
release. Again this threat has been included for completeness.
Based on the acceptance criteria and the risk level, sufficient barriers have been identified for all
causes, escalation factors and consequences.
4.5.2 H-20.01 H2S in formation released during drilling or well services operations
Entering dangerous H2S atmospheres A level of H2S at or above 100 ppm is Immediately
Dangerous to Life and Health(IDLH). Entry into IDLH atmospheres can only be made using:
A full facepiece positive pressure self-contained breathing apparatus (SCBA) with a minimum
service life of thirty minutes, or
A combination full facepiece pressure demand supplied-air respirator with an auxiliary self-contained
air supply.
If H2S levels are below 100 ppm, an air-purifying respirator may be used, assuming the filter
cartridge/canister is appropriate for hydrogen sulfide. A full facepiece respirator will prevent eye
irritation.
Never attempt a rescue in an area that may contain H2S without using appropriate respiratory
protection and without being training to perform such a rescue.
Consistent monitoring by fixed H2S detectors will be mandatory while in drilling or service wells.
Based on the acceptance criteria and the risk level, sufficient barriers have been identified for all
causes, escalation factors and consequences.
A release of hydrocarbon well fluids can occur due to loss of containment of the well testing
equipment during the well clean-up operations. The hazard has been assessed separately from the
release of hydrocarbons from the formation due to the completed well status (i.e. tubing string and
Xmas Tree) during well clean-up operations. Loss of containment could occur as a result of
corrosion, erosion, overpressure, operator error, impact damage or incorrect assembly.
Recovery actions are developed for a fire/explosion in the well test area.
Based on the acceptance criteria and risk level defined, sufficient barriers have been identified for all
causes, escalation factors and consequences.
A fire in the camp can develop as the result of smoking, faulty electrical appliances or accident in the
galley. Consequences are fatalities due to smoke inhalation and exposure to high heat flux and
destruction of the camp area. Principal control measures involve restriction of smoking to designated
areas only, maintenance of electrical equipment and galley procedures.
Mitigation systems include smoke detection and fire alarm systems, provision of fire extinguishers
and training of staff in emergency response and camp evacuation.
Based on the acceptance criteria and risk level defined, sufficient barriers have been identified for all
causes, escalation factors and consequences, with the exception of deliberate acts of vandalism
against which there can be few defences.
Conventional explosive materials will be transported by road to the rig site and stored there at
certain periods for specific operations. The activities could comprise perforating tubing or casing
prior performing a remedial operation, explosive backing-off (string shot) and explosive cutting,
wireline set packers or bridge plugs.
The threats from storage and use of explosives, and also for the retrieval of mis-runs, have been
assessed. Explosives are stored at the rigsite in lockable cabinets in a defined area and will be on
the site for a minimum period of time. A number of special precautions are undertaken prior to the
arming and running of perforating guns, including the control of stray currents (radio silence,
shutdown of machinery) and restriction of the area to essential personnel only.
The recovery actions for an explosion at the drill floor or catwalk level have been assessed.
Based on the acceptance criteria and risk level defined, sufficient barriers have been identified for all
causes, escalation factors and consequences.
Dropped objects covers any item which is suspended overhead from the derrick during drilling
operations, or overhead from the rigsite crane in support of general rig operations.
Given the scope of this HSE Case, a number of objects have been excluded from the assessment,
e.g. hand tools, as these are not considered to have the potential to cause major accident hazards.
The control of these incidents will however be addressed under the normal HSE-MS controls for
personnel working at height.
The threats of pulling the travelling blocks into the crown block, a dropped load from the crane and
auxiliary equipment (such as the Top Drive System) with components falling from the derrick onto
the rig floor have been assessed.
The recovery actions have been assessed for potential multiple fatalities on the drill floor or pipe rack
areas.
Based on the acceptance criteria and risk level defined, sufficient barriers have been identified for all
causes, escalation factors and consequences.
This hazard group considers the possibility of failure of objects under tension, principally the drill line,
derrick or drill line braking system. These failures could result in heavy loads or structural
components falling to the drill floor and causing multiple fatalities.
Based on the acceptance criteria and risk level defined, sufficient barriers have been identified for all
causes, escalation factors and consequences.
4.5.8 H-08.01 On Land Transportation – Crew Change Vehicle involved in Road Accident
This hazard considers the potential for multiple fatalities as the result of transportation of the crew to
and from the rig site from the airport by crew vehicle(PSD). Furthermore, there is the risk of fatalities
to third parties and other road users.
Control measures concentrate on ensuring the mechanical integrity of the vehicles, the competency
of the drivers and the condition of the road. Mitigation measures are identified as the medical
facilities provided on the bus and at the campsite (hospital and medic available 24 hours per day)
and the medivac plan to ensure personnel reach appropriate medical facilities with the minimum of
delay.
Based on the acceptance criteria and risk level defined, sufficient barriers have been identified for all
causes, escalation factors and consequences.
The hazard of severe weather typically is the cause of another hazard. For example, strong winds
creating extreme storm factors can result in human physical effects and structural failure of the mast
or cranes; lightning can lead to fire; storm, fog or heavy rain can result in vehicle accident or heavy
rain can cause flooding leading to pit overflowing and subsequent environmental impact. Hot
weather can result in heat stroke.
The Garraf Project will be conducted all year round. Extremely sandstorms are frequent in
Summer(July-August) with maximum wind strength occasionally.
Given the above statistical data, the principal hazard of extreme weather in the Garraf area is
considered to be ‘hot temperatures’ in combination with high sandstorms.
In the Garraf area, it is unlikely to occur and no terrorist threat identified to drilling rigs or other
installations, and of drilling and completion operations in the area of South Iraq(Info).
Project Security Plan and ERP Plan shall be the guiding profiles and barriers to cope with the
security issues.
Based on the acceptance criteria and risk level defined, sufficient barriers have been identified for all
causes, escalation factors and consequences.
Diesel and heavy oil is required at the rigsite for the electrical generators. These materials will be
transferred to and from the wellsite by road and hence there is the potential for a road traffic accident
to result in spillage resulting in environmental damage or fire. Similarly, a road traffic accident with a
truck carrying other hazardous chemicals, such as highly toxic or radio-active material could have
severe consequences if these substances were able to leak to the environment.
Although the likelihood for above incidents and respective consequences to happen is relatively
minor, the damage to the reputation of GWDC could be significant.
Control measures are similar to those in place for crew transportation. Some additional measures
apply to minimise the risks to spillage, emission or leakage. Mitigation measures are addressed by
the Emergency Response Plans, as developed by Garraf Projet
Based on the acceptance criteria and risk level defined, sufficient barriers have been identified for all
causes, escalation factors and consequences.
A Matrix of Permitted Operations (MOPO) has been distilled from the hazard assessment and
defines limitations on activities during periods of abnormal operating conditions. Three such
abnormal conditions have been identified during the hazard assessment:
The identified restrictions placed on operations should be regarded as a minimum and additional
restrictions may be required during the course of the drilling programme.
No restrictions on operation
X Operations not permitted if equipment is unavailable/non functional
@ Operations permitted subject to remedial/additional measures being employed or subject
to other equipment availability to perform the same function
Restrictions on concurrent activities identified during the hazards assessments are detailed as
follows:-
Drilling and well services activities may require suspension during periods of extreme weather,
usually hot weather with high winds/sandstorms. The exact requirements are situation specific
and will require to be assessed by the rig site management team (GWDC Rig Manager and/or
with PCIBHV Representatives).
Drilling and well clean-up activities will require special precautions during periods of high levels
of activity. Movement of tubular in the vicinity of the well production and clean-up/well testing
equipment will be restricted. Noise levels might be a hindrance to conduct adequate
communication.
Drilling and well services activities may be conducted in concurrent mode on the same cluster
location.
Note that the initial exposure of well hydrocarbons during well clean-up operations will be performed
during daylight hours only.
4.7 Conclusions
1 The hazard assessment was carried out during the planning phase of the drilling operations and
identified barriers and controls that need to be in place to manage the potential major accident
hazards associated with the Garraf Project.
2 The most significant potential major accident hazards are considered to be:
Loss of control of the hydrocarbons in formation leading to drilling blowout with associated
potential for fire and explosion. This has the potential to cause fatalities amongst the drill
crew and loss of the rig and has the potential to cause fire; and
Accident during transportation of personnel and hazardous goods to the site with the
potential for multiple fatalities or environmental damage.
3 Less severe, but still potentially significant hazards are considered to be:
Release of hydrocarbon from the well test equipment during well clean-up/testing leading to
fire and explosion at the rig site;
Development of a fire in the camp;
Falling objects resulting in impact fatalities; and
Premature detonation of downhole explosives causing fatalities.
4 Assessment of these hazards through Rig Matrix modelling indicates that sufficient control and
mitigating measures are in place (or will be put in place) such that the risk can be considered to
be as low as reasonably practicable.
5 Lower consequence hazards have not been analysed but are controlled through the application
of GWDC operating and safety procedures, summarised in Part 2 of this HSE Case.
Increasing Probability
A B C D E
Never heard of in Has occurred in Has occurred in Has occurred per Happens several
People Assets Environmental Reputation drilling industry drilling industry GWDC drilling year in GWDC times per year in
industry operations GWDC operations
0 No Injury No Damage No Effect No Impact
1 Slight Injury Slight Damage Slight Effect Slight Impact
2 Minor Injury Minor Damage Minor Effect Limited Impact
3 Major Injury Localised Damage Localised Effect Considerable Impact
4 Single Fatality Major Damage Major Effect National Impact
Multiple
5 Extensive Damage Massive Effect International Impact
Fatalities
Categories
Manage for continuous Incorporate risk
Intolerable
improvement reduction measures
Rig Matrix HAZARD SOURCE TOP EVENT (MAJOR ACCIDENT) - RISK POTENTIAL ANALYSE IN HSE CASE USING Rig
HAZARD No. CONSEQUENCES Matrix
P A E R COMMENT
H-01 Hydrocarbons
H-01.02 Major release of hydrocarbons in formation: Loss of well control - B5 B5 B4 B4 Yes
* during drilling, wirelining or cementing a) prolonged, unignited, uncontrolled (C4) (C5) (C5) (C4)
* at or below drill floor flow of hydrocarbons from well
* at choke and kill manifold leading to massive gas release
b) explosion and fire/smoke due to
ignition
H-01.06 Major release of gas from mud system Fire/explosion B1 B2 B0 B0 No – mud system is open to allow rapid
dispersal of release gas. Gas reservoir
is tight and drilling penetration is low. It
will not release significant quantities of
gas.
H-01.01 Major release of gas during well clean-up or Loss of containment – fire or spillage B4 B4 B3 B4 Yes
H-01.05 production on cluster location a) fire/explosion due to ignition of (C2) (C3) (C3) (C3)
H-01.06 hydrocarbon release
H-01.07 b) gas release due to failure of flare No
ignition
H-02 Refined Hydrocarbons
H-02.01 Damage, misuse or failure of equipment or Loss of containment – spillage with D1/2 D1/2 D2/3 N/A No
H-02.02 containers or tanks containing diesel, lube, seal potential for fire
H-02.03 or hydraulic oil
H-03 Other Flammable Materials
H-03.01 Ignition of cellulosic materials in the camp Minor fire with potential to escalate to a B5 B5 B3 B4 Yes
major fire (C4) (C3/4) (C3) (C2/3)
H-03.04 Ignition of dry vegetation surrounding the rig site Fire in dry vegetation B/C1 B0 B/C1 B/C0 No – location has sparse dry vegetation
and likelihood that vegetation will ignite
is very low.
H-04 Explosives
H-04.02 Improper storage or handling of perforating Unplanned detonation. Explosion on B5 B3 B0 B2 Yes
charges during drilling/completion catwalk or drill floor
H-05 Pressure Hazards
H-05.01 Damage to, or misuse of, pressurised gas Loss of containment - fire, explosion, flying B4 B2 B0 B1 No – to be controlled by procedures
bottles for welding, metal cutting, etc. parts (storage and handling), competence of
crews and by good work practice
H-05.02 Failure of pressurised pipework or vessels (i.e. Generation of high momentum jets and C4 C2 C0 C1/2 No – to be controlled by using certified
H-05.03 HP mud systems, bulk storage vessels, well test potential missiles equipment, certified relief systems, PtW,
H-05.04 equipment during pressure testing) procedures, supervisory and rig crew
competence and by good work practice
H-06 Hazard Associated with Difference in Height
H-06.01 Personnel working at height Fall to lower level – injury/fatality C4 C0 C0 C3 No – to be controlled by procedures,
PtW, competence of rig crew and by
Rig Matrix HAZARD SOURCE TOP EVENT (MAJOR ACCIDENT) - RISK POTENTIAL ANALYSE IN HSE CASE USING Rig
HAZARD No. CONSEQUENCES Matrix
P A E R COMMENT
good work practice
H-06.03 Any object dropped from cranes, drawworks or Dropped object with potential for direct B4 C3 C0 C3 No – to be controlled by procedures,
other lifting equipment. impact with personnel (C4) PtW, competence of rig crew and by
good work practice
H-07 Objects Under Induced Stress
H-07.01 Failure of equipment under tension such as Object dropped with potential for impact B4 C3 C0 C3 No – to be controlled by procedures,
slings, wires associated with: with personnel (C4) PtW, competence of rig crew and by
cranes good work practice
drawworks
winches
H-07.01 Failure of derrick due to overloading; Overload Direct impact with personnel B5 C4/5 C0 C3 No – to be controlled by procedures,
of braking system (C3) PtW, competence of rig crew and by
good work practice
H-07.02 Failure of objects under compression such as Unable to operate valves as required C1 C3 C0 C0 No – to be controlled by certified
relief valves and actuators and hydraulic / equipment and by work practices
pneumatic operated devices
H-08 Dynamic Situation Hazards
H-08.01 Land transport incident
a) Crew change bus in road traffic accident Fatalities amongst rig crew C5 C3 C2 C3 Yes
b) Lorry transporting diesel/ crude oil involved Spillage C4 C3 B3 B3 No – to be controlled by procedures
in RTA
H-08.05 Equipment with moving or rotating parts, e.g.: C4 C2 C0 C3 No – to be controlled by using certified
a) grinders/lathes Loss of control - injury equipment, certified relief systems, PtW,
b) pumps and compressors Loss of separation - flying parts procedures, supervisory and rig crew
c) generator Loss of control - total loss of power competence and by good work practice
H-08.06 Misuse or inadequate/defective hand tools, Loss of control - injury D/E2 - - - No – to be controlled by competence of
H-08.07 knives, etc. rig crew and supervisory staff and by
good work practice
H-09 Environmental Hazards
H-09.01 Extreme weather effects Extreme weather is considered as a cause C3 C2 C1 C2 Yes
of potential hazards such as failure of the
derrick (extreme wind loading)
H-09.03 Tectonic (earthquake, subsidence) activity Structural failure - - - - No – potential for tectonic activity is
affecting structural integrity and downhole Stuck pipe extremely remote in region of operations
operations
H-10 Hot Surfaces
H-10.01 Hot mud lines, drill pipe, engine exhaust Personal injury D3 - - - No – to be controlled by procedures,
H-10.02 systems, galley cookers, etc PPE requirements, competence of staff
H-10.03 and by good work practice
H-10.04
Rig Matrix HAZARD SOURCE TOP EVENT (MAJOR ACCIDENT) - RISK POTENTIAL ANALYSE IN HSE CASE USING Rig
HAZARD No. CONSEQUENCES Matrix
P A E R COMMENT
H-11 Hot Fluids
H-11.01 Hot fluids - steam, drilling mud Personal injury D3 - - - No – to be controlled by procedures,
H-11.02 PPE requirements, competence of staff
and by good work practice
Rig Matrix HAZARD SOURCE TOP EVENT (MAJOR ACCIDENT) - RISK POTENTIAL ANALYSE IN HSE CASE USING Rig
HAZARD No. CONSEQUENCES Matrix
P A E R COMMENT
be available for all chemicals in use
H-21.19 Sewage Out of specification discharge - - B3 - No – sewage will be discharge to septic
tanks which will be pumped out as
required an disposed of properly
H-22 Toxic Solids
H-22.03 Chemicals required for drilling and well services Exceed exposure or discharge limits B3 - B3 - No - all drill cuttings will be disposed of
H-22.04 operations, i.e. cement dust, mud additives, properly with due accord to their
H-22.05 water based mud and cement slurries. composition
H-22.11 Drill cuttings.
H-23 Corrosive Substances
H-23.02 Acids and alkalines required for drilling and well Loss of containment – personnel injury or C3 - C2 - No - to be controlled in the Independent
H-23.04 services operations environmental impact individual procedures
H-24 Biological hazards
H-24.04 Food borne bacteria Illness/ fatality B3 - - - No – to be addressed in kitchen
(C3) practises and training of kitchen staff
H-24.04 Water contamination Illness/fatality B3 - - - No – water purification plant and
H-24.05 periodic water quality checks. Bottled
water for human consumption
H-24.07 Disease transmitting insects Illness/fatality C1 - - - No – unlikely to occur in region
H-24.09
H-24.10
H-25 Ergonomic Hazards
H-25.01 Manual handling operations Injury/ impairment D2/3 - - - No – to be addressed in work practises
H-25.02 High intensity (peak) and loud (steady) noise Exceed exposure limit – hearing injuries B3 - - - No – to be addressed by PtW (PPE
H-25.03 from relief valves, or engine room. and disturbance of local fauna and requirements)
Prolonged high pitch noise during concurrent community By using efficient means of
operations (well clean-up and/or production wile communications (ear defenders with
drilling and running completion on cluster radio) during concurrent activities
location)
H-26 Psychological Hazards
H-26.01 Working away from home, living on a live plant Stress - - - - No – experienced crews
Rig Matrix HAZARD SOURCE TOP EVENT (MAJOR ACCIDENT) - RISK POTENTIAL ANALYSE IN HSE CASE USING Rig
HAZARD No. CONSEQUENCES Matrix
P A E R COMMENT
No significant hazards identified - - - -
H-30 Hazardous Goods
H-30.01 Spillage of diesel/crude oil during road Environmental damage B4 C2 B3 B2 Yes
transportation
It is the responsibility of the HSE Case Custodian to ensure the technical accuracy of the ___________
register and that it is reviewed and updated as a consequence of operating experience, change Wang Quansheng __________________
or review. Garraf Project Manager Date
HSE Case Custodian
KEY:
Intolerable P Potential for Fatalities
ALARP zone A Potential for Asset Damage
Low risk E Environmental and Social Impact
R Damage to National/International Reputation