Offshore Standard DNV-OS-F101, August 2012 Sec.

3 Page 50

different in two connected systems. The conversion between the two system definitions will often then be based on that the incidental pressures are equal.
---e-n-d---of---G-u-i-d-a-n-c-e---n-o-t-e---

202 The submarine pipeline system shall have a specified incidental pressure or be split into different sections with different specified incidental pressures. These should all be defined at a defined reference elevation. 203 To fulfil the requirements in 201 and 202 a Pipeline Control and Safety System may be required. This comprises the Pipeline Control System (PCS) and Pipeline Safety System (PSS).
Guidance note: An example of situations where a Pipeline Control and Safety System may not be required is if full shut-in pressure including dynamic effects, is used as incidental pressure.
---e-n-d---of---G-u-i-d-a-n-c-e---n-o-t-e---

204 The purpose of the Pipeline Control System is to maintain the operating parameters within operating envelope during normal operation e.g. to ensure that the local design pressure is not exceeded at any point in the submarine pipeline system. The Pipeline Control System should operate automatically. Due account shall be given to the tolerances of the pipeline control system and its associated instrumentation, see Figure 1 in Sec.1. Hence, the maximum allowable operating pressure (MAOP) is equal to the design pressure minus the Pipeline Control System operating tolerance. 205 The Pipeline Control System could be included as a risk reducing measure provided that this system is independent of PSS and further complies with the following: The Pipeline Control System is not included as a part of the demand rate defined for the PSS Failure of an automatic pipeline control system shall not affect the alarm system needed for human intervention. Maximum risk reduction (PFD) taken is less than 10-1 unless the PCS is built in accordance with safety system standards, e.g., IEC61511. Risk reduction from human intervention, in addition to PCS, assumes that actions are based upon information from systems independent of PCS and PSS. The sum of Human Intervention and PCS risk reduction shall then not be less than 10-2. 206 The purpose of the Pipeline Safety System is to protect the submarine pipeline system by limiting the operating parameters within the parameter safety envelope during incidental operation, e.g. to ensure that the local incidental pressure is not exceeded at any point in the pipeline system in the event of failure of the pipeline control system. The Pipeline Safety System shall operate automatically. Due account shall be given to the tolerances of the pipeline safety system. Hence, the maximum allowable incidental pressure is equal to the incidental pressure minus the pipeline safety system operating tolerance. 207 The Pipeline Control System is a basic process control system as defined by IEC 61511. The Pipeline Safety shall comply with the requirements of IEC 61511. Pipeline Safety Systems required with a probability of failure on demand of less than 10-3 shall consist of two independent systems.
Guidance note: The requirements for the level of risk reduction to be provided by the pipeline safety system, the SIL Level shall be derived according to the requirements of Sec.5 D1000 and not from a risk assessment. Sec.13 E600 provides further guidance.
---e-n-d---of---G-u-i-d-a-n-c-e---n-o-t-e---

208 The Pipeline Safety System may consist of pressure relief devices (ISO 4126) and/or safety instrumented systems, see IEC 61511. Pressure relief valves are considered fulfilling requirements to the Pipeline Safety System if these are designed and maintained to relieve the required discharge capacity at a pressure not exceeding the maximum allowable incidental pressure. 209 A design pressure may be defined for each incidental pressure. The incidental to design pressure ratio shall be selected such that the Pipeline Control and Safety System meet the requirements in 201 and 202. Typical and minimum incidental to design ratios are given in Table 3-1. When design pressure is used for structural design purpose, this shall be minimum 91% of the incidental pressure.
Condition or pipeline system

Table 3-1 Incidental to design pressure ratios inc

1.10 1.05 1.00

Typical pipeline system Minimum, except for below When design pressure is equal to full shut-in pressure including dynamic effects

DET NORSKE VERITAS AS