Documenti di Didattica
Documenti di Professioni
Documenti di Cultura
Document ID PR-1721
Security Unrestricted
Revision 3.1
This document is the property of Petroleum Development Oman, LLC. Neither the whole nor any part of
this document may be disclosed to others or reproduced, stored in a retrieval system, or transmitted in
any form by any means (electronic, mechanical, reprographic recording or otherwise) without prior written
consent of the owner.
Revision 3.1
Petroleum Development Oman LLC Effective: Jul 2014
i Document Authorisation
Authorised For Issue – July 2014
ii Revision History
The following is a brief summary of the 4 most recent revisions to this document. Details of all
revisions prior to these are held on file by the issuing department.
TABLE OF CONTENTS
i Document Authorisation........................................................................................................ 3
ii Revision History.................................................................................................................... 4
iii Related Business Processes................................................................................................. 4
iv Related Corporate Management Frame Work (CMF) Documents........................................4
1 Introduction........................................................................................................................... 8
1.1 Background 9
1.2 Purpose 11
Figure 2: Early Preparation Adds Value to the Business 11
1.3 Scope 12
Figure 3. Identify the Important Shutdowns for Milestone Tracking 12
1.4 Objective 13
1.5 Changes to the Document 14
1.6 Step-out and Approval 14
2 Roles and Responsibilities.................................................................................................. 15
2.1 Responsibility Shutdown Review Board 15
Figure 4: Shutdown Review Forums 15
2.2 Responsibility Shutdown Director 16
2.3 Responsibility Operations Manager 16
2.4 Responsibilities Delivery Team Leader (DTL) 16
2.5 Responsibility Shutdown Coordinator 16
2.6 Responsibility Activity Owner 17
2.7 Responsibility Production Coordinator 18
2.8 Responsibility Shutdown Planner 19
2.9 Responsibility Attendees to SD Meetings 20
2.10 Responsibility external Shutdown Planning Challenger 20
2.11 Responsibility AI-PSM Challenger 22
2.12 Responsibility Programmer 22
Figure 5: Overall Deferment (Including Preparations And Start Up) 22
2.13 Responsibility CDFP IAP 22
2.14 Statement of Fitness 23
2.14.1 Intent 23
2.14.2 Requirements 23
2.14.3 Application of SoF for Asset Restart 23
2.14.4 Maintenance 23
2.14.5 Incidents 24
Figure 6: Value of the Process Variable 24
2.14.6 Signatories 25
2.15 Responsibility Matrix 25
Figures
Figure 1. Cyclic IAP Planning Versus Additional Separate Shutdown Planning 9
Figure 2. Identify The Important Shutdowns For Milestone Tracking 12
Figure 3: Early Preparation Adds Value To The Business 11
Figure 4: Shutdown Review Forums 15
Figure 5: Overall Deferment (Including Preparations And Start Up) 22
Figure 6: Value of the Process Variable 23
Figure 7: Change Control flow chart 36
1 Introduction
Management Summary
The objective of this procedure is to provide consistent Shutdown Management within
PDO. This procedure is largely based on historical good practices and on the Shell
Shutdown Management Guidelines.
A shutdown is the ultimate form of integration often capturing a high density of high risk
activities in a short window and constrained work site. HSE, deferment reduction and
cost optimisation are the key drivers to well manage these shutdowns. Shutdowns are a
key focus area for Process Safety Management.
A Level 1 Integrated Shutdown Plan (ISDP) across directorates shall be maintained,
with a window of between 2 to five years. The ISDP is extracted from the directorate 2
year IAP plans and includes relevant management information.
The Shutdown Review Board oversees the high level shutdown management. It
consists of the operations managers and is chaired by the operations and engineering
functional director. The board meets twice a year and appoints Shutdown Directors for
the major impact cross directorate shutdowns.
‘Critical shutdowns’ must adhere to all the requirements in this procedure. These are
shutdowns with more than 1000 m 3 deferment, significant gas capacity outage, high
potential business impact or important impact on other directorates (deferment /
capacity / power). Critical shutdowns are treated as projects with relevant milestones
that must be met.
Shutdowns with over 1000 m 3 deferment shall be overseen by the Delivery Team
Leader (DTL). The key role of the Shutdown Coordinator is to drive preparation as per
milestones and elevate issues (such as late readiness) timely to management level. In
addition to this preparation tracking, dedicated shutdown performance indicators are
developed to measure success of a shutdown.
All master activity data shall be SAP based. Additional necessary data must be added
to the shutdown plan and maintained based on existing linked SAP orders.
The lessons learnt database shall be used to record and share lessons of shutdown
planning and execution across the directorates.
This procedure contains a number of mandatory checklists that help stakeholders
preparing better in building high Shutdown Documents. Checklists help reducing
potential problems. Checklist are recognised methods in many industries such as
aviation and medical (simple surgery checklists save lives).
Shutdowns durations must be based on detailed bottoms up activity optimisation (with
reference to previous or comparable shutdowns) and full adherence to all relevant
procedures. Deviation to procedures shall be in accordance with PR-1001e –
Operations Procedure Temporary Variance.
The main risks shall be identified, mitigated and documented as part of the shutdown
plan at activity and overall shutdown levels.
The shutdown driver sheet will be completed for the critical path, and near critical path
activities. Activity owners and contractors must be fully transparent with sharing scope
and material readiness at all times during any shutdown meeting.
After scope freeze all changes shall be managed via the change request form and
approved by the shutdown coordinator. After PSM challenge all changes shall be
approved by Operations Manager. Late changes cause re-thinking, re-work and may
introduce significant HSE risks to be analysed and mitigated.
1.1 Background
When first published, this procedure was the first CMF document detailing the
shutdown management process. The procedure is aligned with the Integrated Activity
Planning (IAP) process and does not cover detailed work execution at activity level,
this being detailed in SAP Maintenance Craft Procedures (MCP’s), detailed contractors’
scope of work or CMF documents. (i.e. Instructions for doing an overhaul on a
compressor).
The key difference between Shutdown Management and IAP is that IAP is a cyclic
practiced integration routine (weekly, monthly, and quarterly); whereas Shutdown
Management is similar to projects where scope, timing and duration change each time
and the intensity of work during these ultimate integrations require special focus.
The majority of shutdown resource costs are captured via internal PDO staff costs and
costs as per agreed rates in the contracts between ODC / EMC and the directorates.
Much work is carried out by contractors who work side by side with PDO staff and have
their base in the interior.
General information, lessons learnt and examples can be found on the Shutdown
Management website
(Home page > UEOD > UOP > Shutdown Management).
1.2 Purpose
The purpose of this document is to provide a comprehensive standard across all
directorates in shutdown management and to continuously improve shutdown
preparation and planning.
The reason to prepare all our main shutdowns professionally is to execute the work
safely and timely as per shareholder cost and production promise.
Late preparation causes inefficient reactivity, potential additional mobilisation costs (up
to 0.5 mln US$), staff frustration and also sometimes disintegration of integrated work
scopes resulting in additional oil deferment or gas capacity reduction.
Figure 3 represents late effort required for late preparation.
1.3 Scope
This procedure will provide the mandatory process of Planning of Shutdowns that occur
on hydrocarbon installations (oil, gas) or installations that effect hydrocarbon production
(e.g. power, water injection). This is applicable to the following 4 directorates: Gas,
North Oil, South Oil and Infrastructure. This document will discuss the role of tools but
it will not function as the instruction manual how to use the tools.
This procedure will be the only document that provides the mandatory process of
Shutdown Management in PDO. It is in line with Shells Global Shutdown Management
Process Guideline (EP 2006-5081, April 2006). It is basically a customisation of the
Shell Guideline with the following key differences:
It is mandatory.
It is specific. It includes PDO relevant customisation of the global guideline
(organisation, KPIs, classification, agreed templates).
It includes requirements that are not captured in the global guideline (certain roles,
SAP).
Contractors play an important role in successful Shutdown Management. Their
responsibilities are captured in section 2 under ‘activity owner’. A significant part of this
procedure describes the interface with contractors and the roles and responsibilities of
PDO staff and contractors.
Figure 2 below explains the minimum requirement of shutdowns that need to comply
with this procedure.
Some shutdowns can have direct impact, or potential impact, on other stations, areas,
or directorates including Infrastructure. It is important to identify and manage these
overall impacts well. Typical impacts are:
- oil deferment due to limited tank capacity in the interior,
- condensate impact to gas (MOL outage),
- shortage of gas, power constraint, and
- Constraints in resources (e.g. static resources).
1.4 Objective
The objective of this procedure is to provide a clear consistent standard of Shutdown
Management, including roles and responsibilities, to all relevant stakeholders within
PDO.
Shutdowns in PDO contribute for a significant part to total planned company
deferment. Better management of shutdowns will lead to reduction of planned
deferment, better management of HSE risks, and reduction in resource costs and
improved overall efficiency of staff utilisation (the preparation phase and close out
phase e.g. lessons learnt).
Distribution / Target Audience
The audience of this document:
Shutdown Review Board.
Operations Managers and their leadership team.
Engineering construction coordinators (interior).
Functional Activity Owners (WRM Team Leads, Project Engineers etc).
Functional Activity Planners.
Production and maintenance supervisors and planners.
Static equipment team leader, supervisors and planners.
Planners and schedulers of activities in shutdown plans (e.g. project engineers, well
engineers).
MOL, SOGL coordinator.
MAF Terminal Coordinator.
Power Generation and distribution leaders, supervisors and planners.
Commissioning Engineers.
Integrated Activity Planning community (Heads of IAP, Planning Engineers, Area
Planners, and Area Schedulers).
Contractor planners and schedulers.
Contract Site Representatives.
Production Programmers and team leaders.
Material Expeditors.
Logistic Support.
Conduct or facilitate the external planning challenge and Process Safety Challenge
timely. Chase and check activity owners to be ready for the challenge.
Sign off the Shutdown Execution Plan.
Manage changes (assess, authorise / reject and communicate).
NOTE: Change records will be administered by the planning engineer.
Manage the execution of the SD, or where applicable handover the execution to the
field coordinator1.
Ensure that a (station) focal point during the SD is recording the actual progress as
a minimum per day and preferred per shift at hourly resolution.
Organise After Activity Review and agree a list of lessons. See appendix 16.
Sign off the Shutdown Completion Checklist in Appendix 5 Section 6.
Ensure that lessons learnt are populated in the database and a one page
management summary is issued.
Communicate and celebrate success.
1
For instance in the gas directorate where train outages can last several weeks.
2
Level 4 activity detail is at work order, or job card, or sub-equipment (e.g. lube oil system)
level. Level 3 activity is at system or equipment level (e.g. pump).
Attend SD meetings and after activity review meetings. If unable to attend, send a
knowledgeable and briefed representative that brings along the necessary
information to the meeting.
Actively contribute to the meeting. Raise concerns or potential activity impact or
constraints from your activity or other activity owners including production.
Read the previous Minutes of Meeting well in time.
Hold pre SD meetings for your own activities where necessary.
Bring the latest relevant information for the SD meeting. This includes a recent
update of work pack completions status, detailed materials status and issues that
you need support for.
Ensure that you have had a proper handover (shutdown meeting actions) if
applicable.
2.15 Intent
The intent of the Statement of Fitness (SoF) is to ensure that when significant events that
could affect the integrity of a facility have occurred the appropriate authority has been
obtained at a senior level to confirm that necessary controls are in place to ensure a safe
restart of the facility. The SoF aims to apply a formal process to aid the Asset Manager in
confirming those controls are indeed in place.
2.16 Requirements
The AI-PSM Application Manual calls for a Statement of Fitness (SoF):
After an overhaul or a turnaround
After a major modification has been carried out
NOTE: Greenfield Projects are not included in this scope (the SoF is part of the HSE
Case)
2.18 Maintenance
SoF following day-to-day maintenance is deemed to be adequately covered by a properly
functioning and effective Permit to Work (PTW) system; hence no separate SoF requires
to be completed. De-isolations, integrity checks, etc. shall be covered by the PTW system
and equipment start up shall be covered by existing operating procedures.
However, for significant maintenance shutdowns additional assurance in the form of a SoF
is required.
A significant maintenance shutdown is characterised by:
High spend and/or,
Long duration and/or,
Level of invasiveness (e.g. multiple interventions) and/or,
Control system replacements or major upgrades
2.19 Incidents
SoF shall be completed following an incident that involves uncontrolled shutdowns,
operating conditions outside equipment constraints or environmental conditions beyond
design limits. In these cases, SoF shall, as a minimum, be applied following high risk
incidents (actual or potential consequences and likelihood are assessed High or Serious
on the RAM)
IMPORTANT NOTE: The definition of high/serious risk incidents also covers high/serious
potential near misses. Therefore in the case of a high potential near miss a SoF is
required. Asset management should take a view as to whether facilities or parts thereof
should be shutdown pending the outcomes of the investigation.
A. Uncontrolled Shutdown:
An uncontrolled shutdown is defined as “a situation in which equipment shuts down
(and/or blows down) in a manner that is not in accordance with the approved
shutdown procedures.”
NOTE: Terminology used in ESP (Ensure Safe Production) and Alarm mgt DEP
(DEP 32.80.10.14-Gen)
2.20 Signatories
Signatories are, as a minimum, the senior person on site, responsible for confirming that
required actions have been taken on site, and the asset manager as the accountable
party. The signatories are required to sign of the SoF at the time of the restart. SoF’s
signed pre or post start-up are not achieving the aims of the document.
3
The shutdown driver activity, or group of activities, may not necessarily be the same as the
critical path activity. For instance a high volume static driven shutdown (correct or prevent
Technical Integrity) may be the driver to shut down the plant, whereas a minor CAPEX
modification that is carried out simultaneously but with less urgency may be the critical path
duration. In the gas directorate OLNG is often the driver to shut down trains.
4. Shutdowns impacting Tank capacity or crude oil quality shall be discussed with
Infrastructure team
Strategy:
1. Maximum effort shall be applied in the 2Y IAP planning to plan for 2 yearly
station shutdown outages (with only ESD testing at required frequencies to
maintain SIL Classification), unless there is very good business justification
within the asset leadership team. Gas shutdown frequencies will generally be gas
customer demand driven, whereas for oil they will generally be activity driven.
The intention of the strategy is to optimise shutdowns to those necessary to
undertake Maintenance, Integrity or Flowline work.
2. There will be no major Shutdowns of two areas within in one directorate at the
same time (resource issues) unless agreed with the operations manager
3. Shutdowns shall be avoided as much as possible during public holidays,
Ramadan and the hot summer months (June, July, August).
4. Unless it is not economic or unsafe, nightshift or extended shift shall be applied
to minimise planned deferment. (this may require special night time activity
restrictions)
5. The shutdown scope shall only include station shutdown activities and major
deferring activities. Non station shutdown activities shall not be included unless
there is specific high value (.e.g. vendor availability or high unit deferment).
These non-SD activities must be flagged and prioritised lower than SD
activities).
6. Contractors shall be involved from the beginning till the end.
Tools:
1. SAP shall be used for creation and closure of work and maintaining the Level 3
work scope (for PM level 4 operations). Engineering can use level 4 scope from
Primavera but this must be aligned with the specific network activity as per SAP
instructions with the relevant coding (production impact).
2. The detailed shutdown plans shall be made in MS Project or Primavera 4.
4
Once the Primavera migration with the associated interface tool to SAP is successfully
implemented across all areas and all functions Primavera shall be the mandatory detailed
shutdown planning tool.
4 Shutdown Milestones
Milestones will be measured for the agreed identified shutdowns5 as per Shutdown
review Board. The directorate milestone plan will be included in the Medium term
directorate IAP plans. Milestones will be measured for each these individual shutdowns
within the directorates. It will be rolled up functional support directorate for the
shutdown review board meetings.
The key objective of the milestone measurement is to manage preparation better and
ultimately to have better (and more efficiently) prepared shutdown plans, better
optimization and no incidents.
Weeks
Action Party from
Shutdown MS Milestones start
Shut Down 1 Kick Off Meeting: Appoint Shutdown XXO & XXO5 26
Strategy Coordinator.
2 Issue Shutdown Strategy Data Sheet XXO5X 22
5
Critical Shutdowns are estimated to be between 15 and 30 in number for a 2 year period.
5 Mitigation Registers
Risks must be identified both at activity level as well as overall shutdown level. The aim is to
mitigate risks to an acceptable manageable level. Cross discipline risks should be identified
and discussed and mitigated the Shutdown Meetings (examples are hot work and welding in
close vicinity, potential clashes of cranes used for different activities and familiarity of the route
for the vacuum truck drivers)
Separator internal
solid deposition Monitor produced
X
greater than fluids Measure Build up using nucleonic
expectation
Flare tip condition
not known until Pre-inspection during ESD. Inspect
X
shutdown during during SD. Replace parts.
ESD
6 Activity Readiness
All individual activities at level 3 (at the minimum level of work order, network activity)
in the shutdown plan shall have a readiness indicator. This readiness should mature
over time. The activity owners shall provide the status backed up by transparent
information at the shutdown meeting (e.g. material status print outs). The main reason
to track readiness at activity level is to provide good quality activity feed into the
shutdown plan and identify areas for extra focus.
Readiness element Shutdown stage
Preliminary Scope Update and Change
scope freeze Issue Rev 1 control
development Shutdown
-12w > -8w
Document
-20w
-8w
Scope of work level
1 50% 100% 100% 100%
3 (WO, nwa)
Work pack level 4
2 50% 100% 100% 100%
(operations, nwae)
3 Budget available 75% 100% 100% 100%
All required
4 50% 75% 100% 100%
Resources booked
Activity Risks
5 identified and 50% 75% 100% 100%
mitigated
Long lead items
6 identified and 50% 100% 100% 100%
ordered
Materials identified
7 50% 100% 100% 100%
and ordered
Materials Required
on site dates known
8 50% 75% 100% 100%
to be before SD
execution date
Isolation and de-
9 50% 100% 100% 100%
isolation procedures
7 Deliverables
6
This is usually included in the 2 year Integrated Activity Plan
8 Performance Monitoring
Performance of the actual Shutdown versus the planned shutdown shall be monitored
for critical shutdowns. These shutdowns are yearly agreed by the heads of IAP, CDFP
IAP and the SD review board (SDRB) along with the reference forecast and updates in
line with the 2Y IAP cycle.
Shutdown performance (date, duration, scope) will be measured against 3 base lines:
1. Reference STPF plan (promise to shareholders).
2. Frozen shutdown plan (change control applies from this point).
3. Latest version (including approved addendum scope) prior to execution.
Shutdown performance is considered to be successful if the actual performance
against all three baselines is good. The SD review board shall be briefed on the overall
PDO SD performance and provide business feedback where required (for instance
repetitive late submission) at management level.
The overall performance of a shutdown is measured via a number of composite
measures. Together they determine the overall performance. If 20% is not met, then a
shutdown is not successful. A shutdown with a serious HSE incident such as a fatality
or multiple incidents, is never a success.
Tracking against three baselines is necessary to measure real success and identify
improvement areas. Baseline 1 performance (promise to shareholders) indicates our
medium term planning capability/stability. Baseline 2 performance (IPP) indicates our
short term planning capability/stability. Baseline 3 performance (1 day prior to
execution) indicates our schedule versus execution performance. Baseline 1 and 2
may indicate significant issues that are not captured with baseline 3 measurement (for
instance a shutdown that has delayed from February (cold season) into July (hot
season) due to scope growth or insufficient maturation or material readiness.
Baseline 1 performance
(reference: STPF 2Y IAP Plans - promise to
shareholders)
Good Fair Not good Note
Plan. & Sched.
Baseline 2 performance
(reference: scope freeze)
Good Fair Not good Note
2 Start date +/- 5d +/- 6 - 15d > +/- 15d IPP promise
3 Duration +/- 10% +/- 25% > +/- 25%
mnhrs addendum
4 Scope +/- 10% +/- 25% > +/- 25% scope
5 Deferment +/- 10% +/- 25% > +/- 25%
6 Resource utilisation +/- 10% +/- 25% > +/- 25%
7 Cost deviation +/- 10% +/- 25% > +/- 25%
Baseline 3 performance
(reference: plan -1d with approved addendum
scope)
Good Fair Not good Note
1 Milestones All within 5% up to 10% >10% deviation
2 Start date 0d +/- 2d > +/- 2d mobilisation
Plan. & Sched.
Closer to execution date, more accurate data is required (scope, duration, deferment,
impact, cost). Therefore the allowed deviations are smaller. Activity owners should
focus on the shutdown part of the scope of work well in advance so that the deferment
can be booked reasonably. 2 year planning requirements can be found in the IAP code
of practice. The 2 year and 90d IAP windows functions as a routine cyclic reviewed
dynamic radar screen where shutdowns and opportunities are identified, planned,
aligned and optimised whereas the shutdown meetings focus in detail on the activities.
Example:
OVERALL
Shutdown
Performance 0.7
9 Change Control
Changes to the shutdown plan shall be managed in a structured way. Late Changes
must be prevented as much as possible as this causes inefficiency to staff and may
have negative knock on effect on other activity owners or the company’s production
promise. Changes often cause additional risk or HSE requirements that must be
reviewed in a controlled manner prior to accepting.
Changes consist not only of ‘step-in’ or ‘step-out’; they may also be significant change
of impact or duration that was not anticipated in the reference forecast and 2y IAP
plans (for instance impact on power that has been overlooked or overoptimistic
estimation of duration). A change that is submitted must be SAP based and the activity
must be matured (otherwise the impact and tasks cannot be assessed properly). All
changes shall be attached the Shutdown Execution Plan as a summary list or as
individual request.
Changes have to follow the following route:
Inputs
2 Year Directorate IAP plans (shared top SD plan)
ASDP
Deliverables
1. Minutes of meeting with agreed actions
2. Yearly Top Shutdown Plan
3. Yearly Corporate Close out report of shutdown performance analysis and
feedback
Meeting Frequency
At least twice a year. One of the meetings shall be aligned with the Program Build
submission (Reference 2Y IAP Plan)
Sponsor
Engineering and Operations Functional Director
Comments
The IAP process manages the deferment agreements. The integrated SD plan is part of
2Y IAP. The individual detailed shutdown planning is in addition to the cyclic IAP. SD
planning is provided by IAP, SD ownership is with the line.
2. Review Team Meeting Level 2 (Directorate)
Objective
1. Establish Directorate Shutdown Strategy
2. Agree yearly the top Directorate Shutdowns to be tracked via milestones and SD
performance indicators.
3. Review Directorate Performance and feedback issues to management. Identify high
level business improvement opportunities
4. Manage high level changes (management adjustments) and resolve inter-area conflicts
5. Provide input to the overall PDO SD review board.
Scope / Dimension
Main Stations shutdowns controlled by Directorate within a 2 year window
Organiser
Head of IAP
Chairman
Operations Manager
Minute Taker
Head of IAP or Planning Engineer
Board Members
Operations Manager
Engineering Manager
Delivery Team Leaders
Head of IAP
Planning Engineers
Infrastructure Planner
Head of Programming
TL Maintenance Strategy
Optional Members
Petroleum Manager
Infrastructure power system department manager
Head Infrastructure Terminal and Operations
MOL/SOGL System Management Coordinator
CFDP IAP
Inputs
2 year Area IAP Plans
Deliverables
1. Minutes of meeting with agreed actions
2. Yearly Top Shutdown Plan
3. Yearly Close out report of shutdown performance analysis and feedback
Meeting Frequency
At least twice a year. One of the meetings shall be aligned with the Program Build
submission (Reference 2Y IAP Plan) April / August.
Sponsor
Asset Director
Comments
The IAP process manages the deferment agreements. The integrated SD plan is part of 2Y
IAP. The individual detailed shutdown planning is in addition to the cyclic IAP. SD planning
is provided by IAP, SD ownership is with the line.
3. Shutdown Meeting
Objective
1. Progress the preparation
2. Agree the schedule
3. Resolve conflicts
4. Feedback main risks timely to directorate or SD review board.
Scope / Dimension
A specified Shutdown of specific Assets or sets of Assets
Chairman
Production Coordinator or Delivery Team Leader, or, if it is critical cross directorate a senior
appointee
Minute Taker
Area Planner
Members (Mandatory if Activities)
Production coordinator
Maintenance Coordinator
Construction Coordinator
Area Planner
Area Scheduler
Supervisors Mech / Elec / Instrument
Contractors
Project Engineers.
Power representative
Gas representative
Infrastructure representative
Static Coordinator
Contractor Planner
Optional Members
Delivery Team Leader (larger SD, kick off, challenge)
Field Programmer, WRM TL, PT, WS
Inputs
2Y IAP and 90d IAP SAP
Contractor Schedule (Primavera)
Activity Owners
Deliverables
1. Minutes of meeting with agreed actions
2. SD Document
3. After Activity Review lessons learnt
Meeting Frequency
At least 6 times or bi weekly
Sponsor
Operations Manager
Comments
IAP team provides planning and scheduling service to the operations leaders who own the
Shutdown
4. AI-PSM Challenge
Objective
1. To confirm all necessary Process Safety measures have been taken in accordance with
applicable CMF standards such as: safely shutting down, flushing, purging, isolating,
making all surfaces and work sites safe to work on for the shutdown work scope, re-
instatement, pressure testing and start up.
2. Confirm with the team (as table below) all relevant PDO CMF standards understood
and complied with. Demonstrate approved deviation waivers for non-compliance areas
including risk mitigation.
3. To confirm all necessary HSSE measures have been taken in accordance with the
Shutdown guidelines and this is being (has been) implemented at site
Scope / Dimension
Process Safety:
Safety Case
IAP plans
CMF framework (focussing on the top-10 procedures)
Shutdown lessons Learnt database
Shutdown Execution Plan (Scope summary, HSE plan, Activity Readiness, Detailed
Shutdown Schedule, Risk Register, Permit plan, Master isolation plan, Manpower
histogram, Logistics schedule)
Deliverables
Action List CC to Operations Manager
Meeting Frequency
At least once per identified event. For shutdowns between 8 and 12 weeks prior to execution
date (between MS10 – MS17)
Sponsor
Functional Director Operations and Engineering (PSM Champion)
The action Tracker is tracking the status of actions (closed, open, pending or changed) in one
single sheet or file (this as opposed to multiple lists after each meeting).
Every Shutdown meeting shall have minutes of meeting. Attached to those minutes will be a
master (single) action-tracking list that will be used to track all actions. It is advised to manage
this in one single Excel file so that closed actions can be filtered out (or hidden). The
advantage of having one single action list is to manage actions better (it is clear to action
parties that there is only one master action file, no confusion about the latest MOM, or the
previous MOM actions). A single action tracker may also promote progress and will be more
efficient to for after activity review (analyse) of the shutdown.
Below is an example of an action tracking list. The minimum required files are mentioned
below. The advantage of tracking all actions in one sheet is that all times the status can be
seen, hidden, filtered or sorted as per convenience of action owners or SD coordinators.
This also enables to see how long issues are ‘pending’ or to look back which decision have
been made in the past and may have to be revisited in light of new changes.
The above table is not exhaustive and should be added to where applicable
The above table is not exhaustive and should be added to where applicable
……………………………………………………
Production Coordinator
is safe to start up.
*Note: For Action Required please mention the actions, action party and closure time lines and
attach these details with this form.
Some of those fields can be hidden when representing / printing the data in a practical
format or size. It is important to have this data available when maturing the plan and /
or running scenarios or identify risks.
The following SAP fields are Optional in the detailed shutdown plan:
Used
SAP Field
YES NO
1. Planner group
2. Deferment
3. Priority Type
4. Description
5. Operation Short
6. Operation Long
7. Text, Long text
8. Comments
9. Min. duration,
7
IAP relevance can also be identified by system condition .A SAP BP IAP coding enhancement
is agreed and planned to be implemented in 2010
Applicable
Activity Attributes YES NO
1 Number of staff required in total
2 Detailed resource requirements (welders, riggers,
supervisors, crane drivers, watchmen, labourers)
3 Shift ID (e.g. shift 1, or night shift. Include staff names
to the shifts in the shutdown execution plan)
4 Permit number
5 Name Permit Holder (Name)
6 Name watchman
7 Work pack progress status (percentage complete)
8 Crane ID + boom length / maximum lifting capacity
9 Facility isolation Procedure Number
10 Drain volume
11 Purge Volume
12 Leak Test volume
13 Nitrogen Unit ID
14 Vacuum Tanker ID
15 Breathing Apparatus (BA) Sets ID
16 NORM
17 H2S
18 Mercury
19 Radiation
20 Approved deviation to procedure (Y/N)
21 Approved deviation to original due date (Y/N)
22 Approved change request (Y/N)
23 Hot Work
24 Confined Space Entry (Tank/Vessel)
25 Vendor requirement (Name)
26 Relationship to other activities (FS, SS, FF, SF, lag)
Applicable
Activity Attributes YES NO
27 Highlight critical path activity
28 Flag near-critical path activities
29 start time and finish time (hours: minutes)
30 Station Coordinator (Name)
31 Scaffolding
32 HSE standby requirements (e.g. ambulance, fire truck,
medic)
33 Priority
34 Potential regret
35 Site Accessibility (for cranes / people, restrictions)
36 Special non-routine tools (If Yes specify which)
37 Spade numbers
38 Blind numbers
39 Working at height
40 Material Tag numbers
41 Exclusion Areas (e.g. partially depressurised plant)
42 Cleaning resources required
43 Logistics requirements (transport to site)
44 Material costs
45 Resource Costs
46 Bedding requirements
47 Colour code (e.g. separate colours for PDO
supervisors)
48 Relevance to other directorate
The above table is not exhaustive and should be added to where applicable
8
This list is not intended to be complete, each shutdown has its own characteristics and
requirements
Included
Milestone / Activity
YES NO
Sanitation
22. Scaffolding Erection
23. Make programming requirements
Update swing list
Gas lift program
Test program
Sequence of shutting down wells
Sequence of starting up wells
Overall gas liquid production flow
24. Make operational preparations
Sequence and control of spading
Quality of hydrocarbon-freeing; dryness of internals
Speed of issue of work permits, quality and accuracy of
permits
Control of safety aspects including lockout/tag out
procedures.
25. Position portable equipment
Welding units
Cutting units
General hand tooling for contract labour personnel
Adequate rigging/scaffold equipment
Air powered tools and utility air distribution equipment
Specific power generation or utility air compressor
equipment
(if shutdown activities require loss or interruption of
facility utility supplies)
Precision tooling for bolt make-up (i.e. torque wrenches
etc)
Lighting systems of adequate design/standard (i.e. for
vessel entry etc)
B/A equipment for all vessel entry type activities
Site work stands/benches
Specialist personnel lifting equipment as required
Adequate cleaning equipment
Field communications equipment.
26. Provide tools and easy access to them
27. Inspect rental equipment
28. Mark spades9
9
During the last week prior to the start of shutdown date, the isolation spades should be hung
at the relevant flange joints, with a tag showing the activity and permit reference. It is
Included
Milestone / Activity
YES NO
29. Identify minor tag jobs
30. Provide drawings and specifications
31. Prepare relevant barriers/safety signage
recommended that critical spade locations be identified by distinctive paint marks: Blind
locations are identified and tagged, Blinds placed at pre-tagged locations, Tie-in points,
Decontamination injection systems.
NOTE: The directorates should establish their own strategy (e.g. one station per year,
not more than one station per month, winter based, OLNG driven etc). This needs to
be reviewed yearly aligned with the PB cycle.
……………………………………………………
Production Coordinator
Plot Plan.
ESD List (Station wise Shutdown Sensitive ESD's’.
Section 5 Planning
The low level detailed shutdown plan:
o SAP based work orders (or operations level) and net work
activities10.
o critical path identified.
o near critical paths known.
o pre and post shutdown activities.
o This plan must be at hourly resolution. (in Primavera or MS Project
where Primavera has not been implemented yet).
Contingency plan (what if scenario).
High level management schedule (if required).
Shutdown KPI’s.
Shutdown milestones.
Provide plan per station if required.
Non SAP mandatory fields are: critical relationships (Activity links),
activity ID starting at 1, department, name of supervisor or focal point,
crew name if needed (crew-1, night crew) and comments or special
constraints (e.g. vendors) if necessary. This has to be populated in the
MS Project or Primavera schedule.
Section 6 Approved and Rejected Changes.
10
SAP is the master source. Activities such as well survey, pipe line pigging, commissioning
etcetera should also be present in SAP.
1: What Did We Set Out to Do? What was our intent? What should have happened? Did
leader and team intents differ? What was on your mind?
2: What Did We Actually Do? Why? How? What would a video camera have shown? Are
we discussing facts? No blame. Look at Key Events,
Chronological Order or Functions/Roles.
3: What Have We Learned? Focus on what we have learned, not what we will do next.
What do we know now that we didn’t know before? What
strengths and weaknesses have we discovered? What
advice would we give to someone starting out now?
4: What Are We Going to Do? Exactly who will do what and when? Use descriptions
(Specific, Measurable, Achievable, Realistic and Time-
based). Sustain strengths and improve weaknesses.
5: Who Are We Going to Tell? Submit lessons learnt in the lessons learnt database and
provide a one page management summary for the
Shutdown review board. Feed essential urgent matter to
SOSLT, OSDLT or TDG.
Highlights
Lowlights
Compiled by
(Planning Engineer)
Attach the shutdown KPI.
Planning activities (on functional work plans that are identified and
planned by the functions) on hydrocarbon installations, with
the main objectives to:
minimise planned deferment.
maximise opportunities and [early] production.
reduce costs & HSE exposure.
form the basis for plan execution.
reference for changes.
All above in the best interest of the company.
Process Safety The management of hazards that can give rise to major
accidents involving the release of potentially dangerous
materials, release of energy (such as fire or explosion) or both.
Readiness Indicator how matured the activity is for execution in terms of
budget, materials, manpower, scope, vendor etc.
Shutdown Event where a station or major part of the facility (train, MOL,
tank) needs to be shut down for a temporary period causing
direct or potential deferment, in order to execute maintenance,
inspection, repairs, modifications and or tie-ins; often a
combination of cross functional high density of activities in a
short time frame.
Shutdown Execution The overall integrated document that contains the detailed
Plan schedule and all relevant information relevant to the shutdown
(See appendix). This document is signed off by the Shutdown
Coordinator and stakeholders.
Time Resolution Required accuracy in plan type.
Very Short Term Plan window of 14 days.
Short Term Plan window of 90 days.
Medium Term Plan window of 2 years.
Shall This identifies a mandatory action that must be followed.
11
Critical is defined by the plan content criteria in the IAP code of Practice CP-156.
Abbreviations
2Y 2 years
90d 90 days
AAR After Activity Review
ARP Asset Reference Planning
ASRP Activity Safety Review Panel (also known as the PSM Challenge)
Bbs Barrel
BP Business Plan
BW Business Warehouse
CAPEX Capital Expenditure
CDFP Corporate Discipline Focal Point
CFDH Corporate Functional Discipline Head
CMF Corporate Management Framework
CP(A) Critical Path (Activity)
CP Code of Practice
DTL Delivery Team Leader (manages the operations of one area)
EMC On Plot Engineering Maintenance Contractor
EPBM Exploration and Production Business Model
HSE Health Safety Environment
IA Integrity Assurance
IAP In this document: Integrated Activity Planning, or Integrated Activity Plan.
IPP Integrated Production Plan
ISDP Integrated Shutdown Plan
KPI Key Performance Indicator
L3 Level 3 (Work order, network activity level)
L4 Level 4 (Operations, detailed scope of work level at sub equipment level)
LTI Lost Time Incident
MAF Mina Al Fahal
MCP Maintenance Craft Procedure
MEI Maintenance Execution & Integrity
MOL Main Oil Line
MS Milestone
MT Medium Term (1 year – 2 year)
NWA Network Activity (SAP)
NWAE Network Activity Element (SAP)
ODC Off Plot Contractor
(O)LNG (Oman) Liquefied Natural Gas
OPEX Operational Expenditure
PB Programme Build
Management
Corporate Management Framework (CMF) PFAIMS
Framework
Policies PL-11 - Integrity Policy
PL-06 - Information Management Policy
Codes of Practice CP-102 - Corporate Document Management - CoP
CP-107 - Corporate Management Framework - CoP
CP-114 - Maintenance Code of Practice
CP-115 - Operate Surface Product Flow Assets - CoP
CP-117 - Project Engineering - CoP
CP-122 - Health, Safety and Environment Mgmt System - CoP
CP-129 - Contracting and Procurement - CoP
CP-131 - Risk Management - CoP
CP-132 - Logistics Services - CoP
CP-136 - Planning in PDO - CoP
CP-145 - Optimisation Management - CoP
CP-153 - Production Forecasting - CoP
CP-185 - Code of Practice for Technical Integrity Management
Procedures PR-1001c Temporary Override of Safeguarding System Procedure
UOP3
Custodian of Document Date: