4923 Safety Policy
4923 Safety Policy
4923 Safety Policy
0 Introduction
ONGC operates in highly hazardous environment where the presence of hydrocarbons can
result in accidents that may not only cause damage to property but result in loss of precious
lives of people working in the fields.
To assure integrity of an Installation and Rig it is essential that adequate safe guards i.e.
barriers are in place to prevent and mitigate any hazard. Therefore it is important to ensure
that critical equipment at all Installation and Rigs is maintained in working condition.
Safety Critical Element (SCE) is classified as an equipment, structure or system whose failure
could cause or contribute to a major accident, or whose purpose is to prevent or mitigate the
effect of a major accident. SCEs are categorized as follows:
Prevention SCEs
Detection SCEs
Mitigating SCEs
As such ONGC is not having any policy to clearly identify SCEs, maintain them and
monitor their performance. The purpose of this policy is to provide guidance for the
management of Safety Critical Equipment (SCEs) to manage the risks associated with Major
Accident Hazards (MAHs) on offshore installations/rigs, onshore installations/rigs
operating in ONGC.
This policy gives broad guidelines for identifying SCEs based on possible Major Accident
Hazards (MAHs) that can take place on offshore process complexes, offshore drilling Rigs,
Onshore installations, onshore drilling rigs and work-over rigs. The policy shall be applicable
to following Installations:
Page | 1
The policy brings out the possible major accident hazards that can occur at the above
Installations/ Rigs, generic list of safety critical equipment at different type of Installations,
monitoring mechanism of SCEs and replacement philosophy of SCEs.
The starting point for identifying the safety critical elements is to identify the hazardous
events. The majority of these can be identified from e.g. Hazard Identification Studies;
HAZOP (Hazard and Operability Studies); Layout reviews; Instrument Protective Function
assessment (SIL assessment); Quantitative Risk Assessment; Safety reviews and studies,
FMEA (Failure Mode and Effect Analysis); Human error identification methods; Safety
Case; and Task risk assessment. Once the hazardous events have been identified, the
potential causes can be established. Against each of the causes any preventative and
mitigating controls are highlighted with reference to supporting documentation.
The Major incident/Accident Hazards (MAH) are those unplanned event with escalation
potential for multiple fatalities and/or serious damage to the asset and possibly beyond the
asset itself. Some examples are:
Based on the pilot projects of Asset Integrity Management carried out by Corporate HSE
following generic major accident hazards have been worked out:
1. Offshore Installations:
Page | 2
Loss of Containment of Oil & Gas at Subsea Pipe lines
Damage of SBM/Loss of containment of oil at SBM
Well Blowout
Oil flowing through flare and sea fire
Ship/Rig collision with platform
Collapse of platform
Fire in topside Process area
Fire in Living Quarter Module
Helicopter Crash on/near Platform
Loss of containment of high pressure injection water
Dropped Object on People/Equipment/subsea pipeline/structure etc.
Loss of containment of ATF & Fire
Release of Toxic Gases
3. Onshore Installations:
4. Plants
Page | 3
Loss of Containment of Condensate & Naphtha
Loss of Containment of LPG
Loss of Containment of Mercaptan
Loss of containment of High Pressure Steam
Fire in the Plant Process area
Fire in CPP Area, CCR & Switchgear Room
Vehicular collision on process equipment & Piping
These are generic major accident hazards that have been identified. There can be some more
that can be added /deleted by work center depending on their existing studies like HAZOP,
QRA and HAZID etc. or as per the process being handled.
Page | 4
4.2 The Head HSE shall compile the SCE lists for the work center and put up to VCC
along with his comments on variations from generic list and reasons thereof.
Concerned Key executive shall approve the list of SCEs on the recommendation of
VCC.
4.3 Approved List shall be sent to CHSE for mapping in the ICE system and shall come
in force for concerned Installation/Rig/Plant of that work center.
4.4 Once the list is in force, subsequent changes, if any, may be considered with the
approval of concerned key executives on recommendations of VCC. The agenda for
the same shall be put up by concerned L2 level executive. The changes shall be
notified to CHSE.
4.5 The work center while deciding the SCE should consider the impact of non-
availability/failure of such equipment may result into one or more hazards as
identified above in clause 3.0 for the concerned installation/rig. The following flow
chart may be considered for identification of SCEs, addition/deletion:
4.6 The performance parameters need to be defined by the concerned work centers
based on OEM guidelines, process/regulatory and operational requirement.
4.7 Generic Maintenance Task list is placed at Annexure-B. The list provides suggested
maintenance tasks that need to be carried out for the identified SCE.
Page | 5
4.8 The maintenance task lists as provided in various SOPs prepared by work center,
Technical Services (TS) may be added /used as per the requirement of work center.
4.10 In case the work center wants to increase the frequency of maintenance schedule for
any SCE from the proposed schedule in maintenance task lists placed at Annexure-B
the same can be done by work center. While mapping the identified SCEs for that
work center the frequency of maintenance shall be maintained as defined by work
center.
4.11 In case the work center wants to reduce the frequency of maintenance schedule for
any SCE from the proposed schedule in maintenance task lists placed at Annexure-B
the same should be referred by concerned key executive to Chief TS for concurrence
before it is mapped in the system. While mapping the identified SCEs for that work
center the frequency of maintenance shall be maintained as defined by work center.
5.2 Approved Installation /Rig specific list of SCEs in the prescribed format that has
been prepared by work center shall be forwarded to CHSE for mapping in ICE
system.
5.3 Subsequent modifications if any made by work center in the approved list shall be
also informed to CHSE for making the modifications in ICE.
5.4 Work center shall enter the status of SCE, maintenance tasks carried out in the ICE
system against each SCE and identified maintenance task as per suggested schedule
mentioned in Annexure-B.
5.6 ICE system shall have provisions for exception, non-compliance of maintenance
tasks, down time reporting of these SCEs etc. for key executives/operations in
charges/OIMs/IMs/DICs/Tool Pushers etc.
Page | 6
6.0 Maintenance & Replacement philosophy
6.1 It is important to ensure that all identified safety critical equipment should be
available and in operation to ensure that SCEs get activated in the event of any
accident/hazard so that the event is either detected or mitigated in time.
6.2 In case the identified SCEs are not available, the concerned
OIM/IM/DIC/RE/RPS shall immediately bring the same to the notice of
concerned L-2 level executive. L-2 level executive and Head HSE shall carry out risk
assessment and bring out the criticality as per the risk assessment matrix as defined
in HSE management system and annexed at Annexure-C.
6.3 In case criticality is such that warrants invoking emergency action then the case shall
be put by concerned L2 level executive to the key executive for his approval who
may consult Chief HSE prior to giving his approval. Action for same can be taken
under relevant BDP 2014 clause.
The replacement may be carried out to ensure availability of SCE in following conditions:
1. Obsolete Technology
2. Change in standards
3. External or internal deteriorations leading to not meeting of performance
parameters.
4. Not meeting the performance standards
5. As per existing norms of equipment replacement policy issued by Chief TS from
time to time.
6. In case the SCE is not made available after the period mentioned in bypass
policy has got over.
The replacement requirement shall be worked out by work center based on the above
parameters or any operational requirement.
Page | 7
Annexure-A
1. Breather Valve
2. Emergency light & fixtures
3. F&G Panel
4. Fire water Pump
5. H2S/ HC Gas detector
6. Level Transmitter
7. Pressure Safety Valve (PSV)
8. Pressure Transmitter
9. Relays & MCC
10. SDV/ HC Inventory Isolation Valves
11. Smoke Detector
12. Temperature Transmitter
13. CO2/FM200/HALON Flooding system
14. Deluge/ Sprinklers/ Drenchers system
15. Communication equipment
16. Flame arrestor
Page | 8
17. Foam system
18. Self-contained breathing apparatus (SCBA)
19. Wind Sock
Page | 9
18. Smoke detector
19. Temperature Transmitter
20. Thermal detector
23. Halon/FM200 System/CO2 /Clean Agent snuffing system
24. Communication equipment
25. Deluge valve
26. Fire Dampers
27. Portable H2S detector
28. Flame Arrester
29. Helicopter Refuelling system
30. Shut in valve
31. X-mass tree valves
32. VATMS
33. Self-Contained breathing apparatus (SCBA)
34. Lighted Wind Sock
Page | 10
37. Inside Blowout Preventer(IBOP)/ Full Open Safety Valve (FOSV)/ Stab Valve
38. Mud Gas Separator (MGS)/ Degasser
39. Portable H2S detector
40. Portable Oxygen analyser
41. Self-Contained Breathing Apparatus (SCBA)
42. Upper and lower Kelly cocks
43. Wire line BOP /Lubricator
44. X-mass tree valves
45. Lighted Wind Sock
Page | 11
Annexure-B
Page | 12
9. Server Inspect and maintain as per Drill Ship Daily/ Monthly
Maintenance procedure Manual
10. NT Tracer Inspect and maintain as per Drill Ship Daily/ Monthly
Maintenance procedure Manual
11. UPS Inspect and maintain as per Drill Ship Daily/ Monthly
Maintenance procedure Manual
Page | 13
21. Foundation bolts Check for tightness Yearly
22. Fuel filter Check Half-Yearly
23. Fuel tank Drain Water & Sediment Yearly
24. Hydraulic charging pump (Engine mounted) Visual Check Half-Yearly
25. Hydraulic hand charging pump Visual Check Weekly
26. Hydraulic Oil Check/Replace Half-Yearly/
Condition based
27. Hydraulic Oil Filter Check Half-Yearly/
Condition based
28. Non-Reverse Clutch-Pins to be checked for freeness (Do not Half-Yearly
grease)
29. Thrust bearing cover Inspection Half-Yearly
30. Water pump Check Seal leakage Half-Yearly
31. Gland–Stuffing Box Greasing Monthly
32. Air Shutoff Valve Position Check Weekly
33. Battery Cell Condition Test Quarterly
34. Battery Charger Performance Test Quarterly
35. Battery Terminals & Voltage Weekly
36. Detailed Inspection of Pump/Column Pipe/Line Shaft/Coupler/ Based on condition
Centraliser after pulling out of Pump
Performance Test
37. Hydraulic Accumulator Pressure Weekly
38. Inspection of DC Starter Motor Yearly
39. Inspection of Hydraulic Starter Motor Yearly
40. Inspection/Cleaning of Pump Suction Strainer Based on condition
of Pump
Performance Test
41. Air filter element Change Yearly / Condition
based
42. Air shutoff solenoid Check Yearly
43. Companion flanges-I/P & O/P Surface Condition Yearly
44. Damper Visual inspection Yearly
45. Engine Oil Check Oil Analysis-Half-
Yearly &
Replacement on
condition based
46. Exhaust Flame Arrestor Remove and clean mesh Five Yearly
47. Fuel shutoff solenoid Check Yearly
48. Governor linkage Lubricate Yearly
Page | 14
49. Hydraulic Circuit Check hoses and fittings for damage/ cracks Yearly
50. Low level coolant unit Calibration Yearly
51. Oil pressure sensing unit Operational checks Yearly
52. Over speed shutoff Switch Yearly
53. Slip yoke assembly Check for Freeness of Joint Yearly
54. Spline shaft Check spline for radial movement Check For Missing Yearly
Balance Weights. Check For Bent Tubing
55. Turbocharger *Oil leak Weekly
56. Turbocharger *Visible signs of wheel & housing contact Yearly/Condition
based
57. Valves lash clearance Inspect clearance and the head gasket Yearly
condition.
58. Water temperature sensing unit Operational checks Yearly
59. Check Discharge Pressure (immediately after starting) Weekly
60. Check Auto Start Operation Weekly
61. Check Engine Speed & Temperature after warm up Weekly
62. Detailed Pump Performance Check-Discharge Pressure, Flow, Yearly
Volume.
63. Water should be discharged simultaneously from a minimum Monthly
TWO discharge points to qualitatively Verify the Pump and Water
Delivery System Integrity
Page | 17
deterioration.
26. Koomey Pressure Function checks and pressure Monthly
unit control switch settings.
settings
27. Koomey Nitrogen Pressure of Nitrogen cylinders Monthly
unit Packs
28. Koomey Gauges Calibrate/ replace Yearly
unit
29. Tool Panel Regular PMS as per OEM OEM guidelines
pusher
control
panel
30. Driller Panel Regular PMS as per OEM OEM guidelines
panel
(Master
panel)
31. Koomey Regular PMS as per OEM OEM guidelines
unit panel
32. BOP Stack BOP Stack Completely disassemble and overhaul 3/5 Yearly
at workshop
33. BOP Stack BOP Stack Replace all seals, including secondary 3/5 Yearly
flow valve
Page | 18
7. Accumulator Unit (HPU) Inspect, maintain and ensure as per Daily/ Weekly/
Drill Ship Maintenance procedure Monthly/ Half-Yearly/
Manual Yearly
8. Sub-sea and surface Inspect, maintain and ensure as per Half-Yearly/ 5 Yearly
accumulator bottles Drill Ship Maintenance procedure
Manual
9. High Pressure pipes & Inspect, maintain and ensure as per Monthly
valves Drill Ship Maintenance procedure
Manual
10. Hydraulic line from HPU Inspect, maintain and ensure as per Daily/ Weekly/ Monthly
to BOP (Jumper hose line, Drill Ship Maintenance procedure
subsea hose bundle, choke Manual
and kill line)
11. BOP LMRP Skidding Inspect, maintain and ensure as per Weekly/ Monthly
System Drill Ship Maintenance procedure
Manual
12. Annular BOP Inspect, maintain and ensure as per Each Trip/ Between
Drill Ship Maintenance procedure Wells/ Yearly/ 5 Yearly
Manual
13. Ram Type BOP Inspect, maintain and ensure as per Between Wells/ Yearly/
Drill Ship Maintenance procedure 3-Yearly/ 5-Yearly
Manual
14. Telescopic joint Inspect, maintain and ensure as per Daily
Drill Ship Maintenance procedure
Manual
15. Choke & Kill Manifold Inspect, maintain and ensure as per Daily
Drill Ship Maintenance procedure
Manual
16. All pressure gauges on the - 3 years
BOP control system should
be calibrated to an accuracy
1 percent of full scale
17. Emergency Function Test all functions and sequences of Pre‐Deployment and
the EDS, auto shear and dead man Between Wells/ 5
Yearly/ During
commissioning/ When
any changes are made/
During BOP control
system recertification
18. EDS Test the Emergency Disconnect Pre‐Deployment and
System (EDS) on Surface Between Wells
19. ROV Test one function of the ROV Weekly
intervention panel for the BOP
every time the BOP is function
tested, while Subsea. Create a
schedule for testing each function,
ONLY ONE function is tested
Page | 19
each time.
Page | 20
10. Helicopter Refuelling System (ATF)
4. Visual check for leakage or damage to the air and hydraulic Pre-Use / Monthly
systems
Page | 21
5. Check Devices like Boom Hoist Pawl, Helicopter Warning Pre-Use / Monthly
Light, and Crane Hook Latch.
6. Walk around visual examination of Crane Boom and Support Pre-Use / Monthly
Structure for visible damages.
7. Check correct load-rating chart in use is visible to Crane Pre-Use / Monthly
Operator.
8. Visual Check of Wire Rope for evident deterioration and Pre-Use / Monthly
damage or improper reeving. (By Operator)
9. Visual Check for loose, missing, or corroded bolts, pins, Pre-Use / Monthly
keepers or cotter pins.
10. Visual Check Rigging Gear to be used, such as Slings, Sling Pre-Use / Quarterly
Hooks and Shackles.
11. Inspection / Certification / colour coding of Rigging Gear to Half Yearly (Company
be used, such as Slings, Sling Hooks and Shackles. Policy) Replacement - As
'Replacement per Company Policy
12. Check appropriate Electrical system for proper function. Monthly
13. Check Limit switches for - Boom Hoist, Main hoist, Aux. Monthly
Hoist for proper operation.
14. Boom should be inspected for bent Chord Members, missing Quarterly / Yearly
or broken Lacing and cracked welds on Critical Members.
Boom Section end connections should be inspected for
cracked welds, deformation and corrosion.
15. Check Boom Angle/Radius Indicators over full range for Yearly
accuracy.
16. Sheaves should be inspected for wear, cracks, and rope path Half-Yearly
alignment and free run.
17. Check Engine for proper performance compliance with Quarterly
Safety requirements. (Engine Safety Devices)
18. Check Belts for proper adjustment. Quarterly
19. Visual Check of Crane Hooks for deformation, and discard if Quarterly
deformations exceed those of OEM’s recommendations.
20. Check lubricant level in all Hoists and Slew Drives. Quarterly / Yearly
Page | 22
fracture, deformation and corrosion. Special attention should
be paid to areas of rust and cracked paint.
26. Swing Circle Assembly - Check Deflection and Bolt Torque Yearly Overhaul -
of Slew Ring. - Inspect drive pinion Condition based (5 to 7
Yearly)
27. Luffing Cylinder leak Check Monthly
Page | 23
13. Deluge System: Deluge Valve
Page | 24
mounting
3. Check reflector ring Half Yearly
4. Clean lenses and detector housing Half Yearly
5. Manual test Half Yearly
6. Inspect at least annually, all systems for proper Yearly
operation by experienced personnel, following an
established procedure.
7. Visual Inspection of IR detector to ensure that no Half Yearly
blockage of sensors.
Page | 25
4. Visual Inspection of IR detector to ensure that no Half- Yearly
blockage of gas/ vapour path into sensing chamber.
Page | 26
Strands, Kinks, Corrosion)
27. Launch Pin condition Weekly
28. Air Bottle pressure Weekly
29. Dynamic Test of Winch Brake without Load. (Empty Yearly
Boat)
30. Dynamic Test of Winch Brake with Load. 5-Yearly as per IMO/DGS
Guidelines
31. Checking of Exhaust Leak inside Life Boat/Survival Weekly
Craft
32. Check for Ration, First-Aid, Drinking Water, Distress Weekly
Signalling Set, Communication Appliances.
33. Inspection of Wire Rope Quarterly
34. Check Function of Winch Brake Release system Weekly
35. Check Engine Starting Weekly
36. Check Operation of Propeller Weekly
37. Checking of Life Boat lowering Fortnightly
38. Load Test of Boat/Craft Once in 5-Year
39. Inspection of Life-Saving Appliances Fortnightly
40. Sea Trial Yearly
Page | 27
23. Navigational Aid Lights (NAL)
Page | 28
27. Pressure Transmitters (PZT)- IF IDENTIFIED AS SCE
Page | 29
7. Demand Valve Monthly
8. Operational Check of SCBA Unit Quarterly
9. Refilling of Cylinder if pressure falls Condition based
10. Servicing Yearly
Page | 30
33. Temperature Switches (TSW) - IF IDENTIFIED AS SCE
Page | 31
6. Running Line Tension-o- Inspect, maintain and ensure the set Pre-operation, Quarterly,
meters including Display & points as Refer Drill Ship Half-Yearly
Monitoring Maintenance procedure Manual Sec
3
7. Anchor Jewellery Inspect and maintain as Refer Drill Pre & post operation.
Ship Maintenance procedure
Manual Sec 3
8. Hydraulic system including Inspect and maintain as Refer Drill Daily, Pre-operation &
power unit Ship Maintenance procedure Quarterly
Manual Sec 3
Page | 32
39. Propulsion System
Page | 33
6. Tensioner Inspect and maintain as per Drill Ship Daily/ Weekly/ Monthly/
power unit Maintenance procedure Manual Yearly/ 5 Yearly
7. Tensioners & Inspect and maintain as per Drill Ship Daily/ Weekly/ Monthly/
Power unit Maintenance procedure Manual Yearly/ 5 Yearly
8. Air Pressure Inspect and maintain as per Drill Ship Daily/ Weekly/ Monthly/
Vessel and air Maintenance procedure Manual Yearly/ 5 Yearly
compressor
9. Hydraulic Inspect and maintain as per Drill Ship Daily/ Weekly/ Monthly/
Hoses Maintenance procedure Manual Yearly/ 5 Yearly
10. Lubrication Inspect and maintain as per Drill Ship Daily/ Weekly/ Monthly/
System Maintenance procedure Manual Yearly/ 5 Yearly
Page | 34
45. Other SCEs
Page | 35
ANNEXURE-C
Risk Magnitude is calculated by taking the product of severity and probability weightage.
A probability and severity matrix and the screening criteria used presently in ONGC’s operations
are as follows:
i. PROBABILITY RATING
Probability
1 2 3 4
Rating
SEVERITY RATING
2 Minor Injury Minor Damage Rs. Minor Effect: Causes Limited Impact
10 Lakhs to Rs. 1 discomfort or acid rain or
Crore causes nausea Area wide Impact
Page | 36
RISK ASSESSMENT MATRIX
Probability Rating
1 2 3 4
0 0 0 0 0
1 1 2 3 4
Severity Rating
2 2 4 6 8
3 3 6 9 12
4 4 8 12 16
5 5 10 15 20
The overall risk rating score will provide an indication as to the level of risk associated with work and to
prioritize the action to control the risks which pose the greatest hazard.
The acceptance level of a risk depends on an organization’s risk appetite, i.e. how much risk the
organization can reasonably tolerate. Each organization based on its risk appetite will create it’s own
risk acceptance criteria. Risks are screened based on the risk acceptance criteria or the screening
criteria of the organization and actions for the risk mitigation are taken.
Page | 37