Twelve Steps To Engineering Safe Onshore Oil and Gas Facilities
Twelve Steps To Engineering Safe Onshore Oil and Gas Facilities
Twelve Steps To Engineering Safe Onshore Oil and Gas Facilities
Vent
Wellhead
Compressor
Division 2:
10-ft radius
Division 1
The NEC classifies hazardous locations generally into two dif- vents or stacks. Class I, Division 2 areas are generally confined
ferent “divisions” for the oil and gas industry. The first classifica- areas where vapors are not normally present and 10 ft around stacks
tion, Class I, Division 1 locations, are defined as locations where or vents. The area inside of a bermed area is also classified as Class
ignitable concentrations of flammable gases or vapors can exist I, Division 2.
under normal operations; may exist frequently because of repair or The area classification drawing should be used to determine the
maintenance or because of leakage; or may exist because of equip- placement and rating of electrical equipment. Only equipment that
ment breakdown that simultaneously causes the equipment to be- is certified by the manufacturer or allowed by the code should be
come a source of ignition. used in a classified area. An example of nonclassified equipment is
The second classification, Class I, Division 2 locations, are de- any electrical fitting or enclosure not labeled “Class I, Div 1 or 2.”
fined as locations where volatile flammable liquids or flammable Other examples would be nonrated junction boxes, exposed wiring,
gases or vapors exist, but are normally confined within closed con- batteries, transformers, light fixtures, controllers. or computers.
tainers; where ignitable concentrations of gases, vapors, or liquids Nonclassified electrical equipment should be kept away from
are normally prevented by positive mechanical ventilation; or adja- classified areas around vents, tanks, wellheads, separators, meter
cent to a Class I, Division 1 location where ignitable concentrations runs, compressors, and pumps, and outside of bermed areas. Areas
might be communicated occasionally. with straight runs of piping (all-welded closed-piping systems
The NEC also recognizes the International Electrochemical without valves or flanges) are generally nonclassified and are suit-
Commission (IEC) method for classification of areas. The two able for the installation of electrical equipment.
methods are compatible, and users can obtain equipment that meets
the requirements of both the NEC and the IEC. 10. Design the Instrumentation and Control System for Safety.
Many sites have been observed where the latest in low-voltage Instrument alarms and shutdowns provide the first level of safety
automation systems have been installed, but often these are not rated in the event that a process upset occurs. Control systems using
for classified areas. In many instances, this equipment has been used programmable-logic controllers, distributed control systems, and
in other industries and has not yet been rated for hazardous loca- supervisory-control and data-acquisition systems have greatly im-
tions. Personnel also need to recognize that carrying a “nonclassi- proved the safety of facilities by enabling advanced logic in safety
fied” device into a “classified” area is in violation of the code. systems and by making it easier to add alarm and shutdown points.
The first step is to develop an “area classification” drawing for Safety systems can be examined in terms of levels of protec-
the site. API RP 500 Recommended Practice for Classification of tion to prevent or minimize the effects of equipment failure within
Locations for Electrical Installations at Petroleum Facilities Clas- the process. Generally, facilities are built to have at least two levels
sified as Class I, Division 1 and Division 2 (1997) provides a de- of protection. API 14C Recommended Practice for Analysis, De-
tailed guide on determining the classification for each area around sign, Installation, and Testing of Basic Surface Safety Systems for
drilling rigs, production facilities, and gas plants. API RP 500 is Offshore Production Platforms (2001) provides an excellent refer-
based on and is consistent with NFPA 497 Classification of Flam- ence to help the engineer design in two levels of safety. Having two
mable Liquids, Gases, or Vapors and of Hazardous (Classified) levels of safety allows for safe operation in the event that one of the
Locations for Electrical Installations in Chemical Process Areas protection means fails to operate as designed.
(1997). Refer to Fig. 1 for an example of an area classification The two levels of safety should be independent and in addition
drawing based on API RP 500. to the control devices being used in the normal process operation.
Generally, API RP 500 sets Class I, Division 1 areas as being It is good practice for the two levels of safety to be provided by
confined areas where vapors are normally present and 5 ft around functionally different types of safety devices, the reason being that
Overpressure High inflow Sudden rupture or Pressure safety PSV Gas vapor section
pressure; thermal leak high (PSH)
expansion
Leak Corrosion, erosion, Release of Pressure safety low Sump/drain PSL in vapor
mechanical failure, hydrocarbons to (PSL) to shut off system; LSH on section; LSL at
rupture, external the atmosphere inflow; check valve sump system lowest point in
damage to prevent atmospheric tank
backflow; level
safety low (LSL) on
an atmospheric
tank or vessel
Liquid overflow High liquid inflow; Overpressure or Level safety high Sump/drain LSH at high point in
upstream failure of excess liquids in (LSH) system; LSH on vessel or tank
a device; blockage downstream sump system
of liquid outflow devices; release of
hydrocarbons to
atmosphere
Gas blow-by Failure of liquid Overpressure of LSL Safety devices on LSL at lowest point
level system; downstream downstream in vessel or tank
opening of bypass components component
Underpressure Withdrawal in Collapse of the Atmospheric Atmospheric PSL at highest
excess of inflow; component; leak vessels: vent; vessels: second practical point;
thermal contraction pressurized vent or PSV; PSVs and vents in
when blocked in vessels: gas pressurized accordance with
makeup system vessels: PSL to good engineering
shut off inflow and practices
outflow
Excessive High inlet Reduction of Temperature safety high TSH for a fired TSH in exhaust gas
temperature temperature; heater working pressure (TSH) if caused by component; TSH for fired system;
malfunction; and subsequent fire or heated for heat medium oil TSH in liquid for
fouling; fires metal failure element; LSL if systems heat medium
caused by low system
level; flow safety high
by low flow
if one device fails, an identical device could easily fail from the • A greater understanding of how the facility functions and oper-
same causes. An example case of two functionally different safety ates by those working with the PHA process.
devices is a high-pressure alarm and a springloaded pressure-relief • Reduced downtime and maintenance because potential prob-
valve, to provide two levels of protection in the event of a high pres- lems are identified “up front.”
sure. Each of these devices works in a very different way and has • Optimization of equipment and potentially reduced equipment
different failure modes. purchases. Often, PHAs will identify valves, piping runs, and other
The engineer usually determines the minimum safety require- equipment items that are not needed.
ments for each process component. By examining each component There are many different types of PHAs that can be used to ana-
as an independent unit, and assuming the worst-case conditions for lyze a facility for hazards. Each different type of PHA has its advan-
input and output, the analysis will be valid for that component in tages and disadvantages. Some techniques are performed in a team
any process configuration. Table 1 illustrates how to determine format (e.g., what-if, hazard and operability study) while others are
protection requirements for a broad range of abnormal conditions. performed by experts in a particular technique (e.g., failure-mode
and effects analysis, fault-tree analysis). Usually, the best PHAs are
11. Conducting a Process Hazard Analysis. A process hazard those where the operations, engineering, and safety personnel can
analysis (PHA) (US DOE 2004) is a systematic method to iden- meet as a team and work through the hazards of the facility.
tify and analyze the potential hazards associated with a facility. The The results of the PHA should include findings, a risk ranking of
goal of the PHA should be to recommend any necessary design the findings, and recommendations to resolve any of the findings.
changes to make the facility “safe” during any abnormal or un- Recommendations should be followed up with a list showing the
planned operating condition. Each facility should be designed to responsible party for making corrections and also the time frame in
ensure that personnel, the environment, and equipment are “safe” if which the corrections must be made.
control equipment fails (i.e., liquid dump valves or pressure regula- Any additions or changes to the facility that might impact the
tors), human operating errors occur (i.e., turning of the wrong valve safety or materially change the PHA need to be reviewed. Compa-
or tanks overflowing), mechanical equipment fails (i.e., compressor nies usually employ a “management-of-change” process to make
valves or pump seals), or if natural causes occur (i.e., rain, freezing sure that changes do not degrade the safety systems put in place at
weather, or change of wind direction). Often PHAs are conducted the facility.
during the design phase of the project, but the final design of the
facility should undergo a PHA. 12. Design Verification and Commissioning. The successful pre-
The benefits of conducting a PHA for facilities include startup safety review (PSSR) is a formal process to ensure that each
• Increased safety for personnel working at the facility. component and system in a facility is thoroughly checked and ready