HSEGP11 04s Permit To Work

QUALITY, HEALTH, SAFETY, AND ENVIRONMENT
MANAGEMENT SYSTEM
Level : 2

Doc. No. : HSEGP11-04s
Procedure for Preparation & Operation of Work Permit
Systems
Page : 1 of 109

Status New Revision 1 Revision 2
Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012

This procedure is classified as uncontrolled when printed. Prior to reference of a printed copy, please check the uncontrolled
version of the procedure on CNOOC SES Ltd. Database in order to ensure that the relevant section is at the correct use number

SES Ltd.

Document No. : HSEGP11-04s Revision: 2

Document Level : 2

PROCEDURE FOR PREPARATION & OPERATION OF WORK PERMIT SYSTEMS

This document is the property of CNOOC SES Ltd. and all information contained herein is for the exclusive use of CNOOC
SES Ltd. and their legal subsidiaries. This document may not be reproduced, recorded, transmitted, disclosed, used nor in
any manner made public without the prior written authorization of CNOOC SES Ltd.

MANAGEMENT SYSTEM
Level : 2

Systems
Page : 2 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
MANAGEMENT SYSTEM
Level : 2

Systems
Page : 3 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.

DOCUMENT REVISION PAGE

Document No. : HSEGP11-04s Revi sion: 2

Document Level : 2

Document Title : Procedure for Preparation & Operation of Work Permit Systems

Revision Description Prepared by Date
0 New Document J TH
1 Revision 1 FAV, WNN
2 Revision 2 AT, FAV

MANAGEMENT SYSTEM
Level : 2

Systems
Page : 4 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
CONTENTS
Section Description Page
1.0 Purpose 6
2.0 Scope 6
3.0 References 6
4.0 Definitions and Abbreviations 7
5.0 Roles and Responsibilities 10
6.0 Description of the Process and or Activity 13
6.1 Objective 13
6.2 Flow 14
6.2.1 Performing authority 14
6.2.2 Review by Area Authority 14
6.2.3 Authorization by Site Controller 14
6.2.4 Permit Control 14
6.2.5 Gas Testing 14
6.2.6 Permit Issue 15
6.2.7 Permit Acceptance 15
6.2.8 Continuation of Work (Re-issuing) Work Permits 15
6.2.9 Closeout 15
6.2.10 Permit Control 15
6.3 Observations 16
6.4 Work Requiring a Permit 16
6.4.1 Hot Work Activities 16
6.4.2 Cold Work Activities 17
Figure 1 - Flowchart for Stages of Completing Work Permit (English) 20
Figure 2 - Flowchart for Stages of Completing Work Permit (Bahasa) 21
6.5 Work Permits 22
6.6 Work Permit Types 22
6.6.1 Hot Work Permit (Red / White in color) 22
6.6.2 Cold Work Permit (Blue / White in color) 22
6.6.3 Confined Space Entry Permit (Green / White in colour ) 23
6.6.4 Formal Procedures ( White ) 24
6.6.5 Non Permitted Work 25
6.6.6 Excavation / Ground Disturbance 25
6.6.7 Temporary Defeats 25
MANAGEMENT SYSTEM
Level : 2

Systems
Page : 5 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
6.7 Work Permit Requirements 26
6.7.1 General Description (Section 1) 26
6.7.2 Task Risk Assessment (Section 2a & 2b) 27
6.7.3 Cross Referenced certificates (Section 3) 27
6.7.4 Authorization (Section 4) 27
6.7.5 Permit Registry (Section 5) 27
6.7.6 Gas Test Requirements (Section 6) 27
6.7.7 Worksite Visit 27
6.7.8 Issuing the Work Permit (Section 7 a) 27
6.7.9 Permit Acceptance (Section 7 b) 28
6.7.10 Continuation of Work (Section 8 ) 28
6.7.11 Closeout Permit to Work (Section 9a & 9b) 28
6.7.12 Registry of Permit Completion (Section 10 ) 28
6.8 Tag System 28
6.9 Depressurizing/Draining/Purging 28
6.10 Isolation of Equipment for Inspection and Maintenance 29
6.10.1 Isolation of Electrical Equipment 29
6.10.2 Mechanical Isolations 30
6.10.3 Deviation To Mandatory Isolation Requirements 31
6.11 Auditing and Monitoring 31
7.0 Appendix 32
APPENDIX:
APPENDIX A Procedure For task Risk Assessment Level 1 and Level 2 33
APPENDIX B Lockout / Tag out Permit Requirements 54
APPENDIX C Hot Work Permit Requirements 65
APPENDIX D Hot Work Permit Form / Planned Isolation Sheet / Habitat Checklist 72
APPENDIX E Policy for Welding Offshore 76
APPENDIX F Cold Work Permit Requirements 77
APPENDIX G Cold Work Permit Form / Planned Isolation Sheet 80
APPENDIX H Confined Space Entry Permit Requirements 82
APPENDIX I
Confined Space Entry Permit Form / Planned Isolation Sheet / Safety
Checklist / Vessel Entry Standby Duties
88
APPENDIX J Formal Procedure Form 94
APPENDIX K Guidelines for use of Temporary Defeats 95
APPENDIX L Excavation Check-list 102
APPENDIX M Monitoring & Audit Check Sheet 104
MANAGEMENT SYSTEM
Level : 2

Systems
Page : 6 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
1.0 Purpose
1.1 This document has been produced to provide guidelines in the preparation and operation of
"Permit to Work" Systems. It is intended to provide sufficient guidelines to ensure a
consistent approach within all operating areas of CNOOC SES Ltd, to avoid confusion by
personnel and contractors working on different Company sites and facilities.
1.2 Permit to Work Systems are intended to maintain a high level of safety by reducing the
chances of misunderstandings when Non-Routine, Formal Procedure (SOP) and Non Permit
to work activities are to be carried out.
1.3 However, a "Permit to Work" System is only part of the overall safe work system. An effective
safe environment can only be achieved through systematic planning, risk assessment,
communication, coordination, training, checking, and implementing precautions, monitoring
of the worksite, and inspection on completion of work.

2.0 Scope
2.1 This procedure contains mandatory requirements for all facilities operated by CNOOC SES
Ltd. as a rule:
"must" or shall indicates a mandatory course of action
"should" indicates a preferred course of action
"may" indicates a possible course of action.
2.2 This procedure has been developed for control of Non-Routine, Formal Procedure and Non
Permit work in all CNOOC SES Ltd hydrocarbon-processing facilities. These guidelines are
the Company Standard.
2.3 It is strongly recommended that, for non-hydrocarbon processing facilities the Line Manager
responsible for the site reviews these guidelines and adopts relevant sections, as
appropriate, to the hazards in the workplace.
2.4 At a more complex and hazardous site (e.g. marine vessel) where work control is required,
this procedure must be followed.
2.5 For construction sites permit procedures are required as per this procedure.
2.6 For sites involved in the commissioning of equipment for hydrocarbon processing facilities it
is recommended that the Permit to work system adopted be in compliance with this
procedure.

3.0 References
3.1 A Guide to the Principles and Operation of Permit to Work Procedures - Oil Industry Advisory
Committee 1986
MANAGEMENT SYSTEM
Level : 2

Systems
Page : 7 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
3.2 Exposure Standards for Atmospheric Contaminants in the Occupational Environment Work
safe Australia Standard, 1990, Aust. Govt. Publishing Service pp80 -126
3.3 Isolation of Process Plant - Planning, Execution and Recording - Offshore Safety Division
Safety Notice 08/91
3.4 Safe Working in a Confined Space - Australian Standard 2865
3.5 API RP 500 Recommended Practice for Classification of Locations for Electrical
Installations at Petroleum Facilities Classified as Class I, Division 1 and Division 2

4.0 Definitions and Abbreviations
4.1 COMPANY CNOOC SES Ltd, hereafter referred to as COMPANY.
4.2 Permit to Work:
Is understood as such, a written document by which the person responsible of an area or
equipment grants authorisation to another group or to its own self, to perform work under
certain conditions or that a non-routine job may be carried out under stated precautions.
4.3 Confined Space
Confined space means any enclosed or partially enclosed space where there is some risk of
reduced oxygen supply or accumulation of toxic, flammable or explosive material or where
means of entry or exit are limited and are not meant to be permanently occupied by a
person. Examples of confined spaces include excavations, process vessel, storage tank,
turbine enclosure, pit, sewers, etc.
Note: Entry into confined space includes not only complete body entry, but also when a head
is inserted into the confined space.
4.4 Classified Zones:
Classified Zones are areas in which explosive atmospheres could build up ( Flammable or
combustible substances are considered substances capable of building up explosive
atmospheres unless the contrary has been proven). This classified zones will be define in
accordance with effective regulation or appropriate international regulation.
4.5 Site Controllers Supervisor
Is the authorized Supervisor for a defined area. This is generally, but not necessarily, the
Operations Supervisor (i.e. Senior Operator, Production Shift Supervisor, Drilling Supervisor,
Offshore Services Supervisor, Chief Engineer on a vessel, and other supervisor as
necessary).
Hot Work/ Confined Space Entry Permits will have a requirement for review and
authorisation (Counter Signature) at a higher level in the organisation than Cold Work
Permits Heads of Operations.

MANAGEMENT SYSTEM
Level : 2

Systems
Page : 8 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
4.6 Area Authority Operators
The Area Authority is the person in charge of a specific work area or installation. In absence
of a supervisor, the Area Authority with the proper authority could act as a supervisor.
4.7 Performing authority
The person applies for the Permit whos responsible for the planning and execution of the
job, or the person who will carry out the job.
4.8 Authorised Gas Tester ( AGT )
This term is used to describe a person who is trained to perform gas tests, required by the
Site Controller and is authorised by the Company to confirm the hot work is safe refer to the
gas test result.
4.9 Critical Safety Systems
Critical safety systems include, but are not limited to, flare and relief systems, emergency
shutdown systems, UPS system, fire and gas detection, critical communication systems and
protection systems.
4.10 Electrical Certificate
This certificate confirms that the electrical equipment has been isolated in preparation for
issuing the Permit.
4.11 Excavation Checklist
All Excavations and Ground Disturbance requires a permit to work, if the task requires hand
held tools it requires Cold Work for mechanical machines it requires a Hot Work permit.
The Permit and Excavation Checklist is issued to control the work.
4.12 Gas Testing
Gas Testing is mandatory on hot work permits and on cold work permits where required. It is
included on the Work Permit form, and refers to the checking of an area, or that a confined
space contains a safe atmosphere for breathing and free of flammable and toxic vapours.
4.13 Ionising/Radiation Certificate
States that a technical expert has granted permission to use a radioactive source and that
any related extra precaution has been taken.
4.14 Isolation Permit
Isolation permit will be issued where it is required to shutdown systems/trains, or repair major
equipment, or work involving multiple disciplines or jobs. This procedure shall be produced to
carry out the primary isolation of the unit. All Permits subsequently raised must be listed on
the primary isolation permit. On completion of each permit, the relevant section of the
primary isolation permit must be signed off. The equipment shall not be de-isolated until all
permits listed are signed off completely. The de-isolation of equipment will be carried out
under a new permit.
MANAGEMENT SYSTEM
Level : 2

Systems
Page : 9 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
4.15 Non-routine Work
Non-routine work includes all activities that are not daily or weekly operations of the facility,
plant, installation, terminal, laboratory, tanker, vessel, rig, etc.
Work Permits are required for all non-routine work. Work Permits must be required for the
following activities;
Work related to removing or installing equipment or devices from or into energized or
pressurized systems.
Entry into a confined space.
Hot work in any area.
Any work which directly affect critical safety systems.
Any construction work overhauls or repairs on systems/equipment in operational areas.
All work being carried out by contractors in operational areas.
Activities involving radioactive sources such as non-destructive testing.
Activities being carried out when a known hazard exists. i.e.
Crane Operations when:
Lifting over live process equipment.
Working on live gas lines.
Lifting the heavy object or equipment.
This list is not exhaustive and it is ultimately up to the Site Controller to determine if other
non-routine work requires a Work Permit.
4.16 Formal Procedure / Standard Operating Procedure Work
Regular daily activities that will not interrupt in any way normal process operations.
4.17 Non Permit Work
Work that Requires no Permit to Work or Standard Operating Procedure.
4.18 Technical Expert
A person authorised by the company to issue specific certificates such as Electrical or
Excavation Certificates. This person shall be a competent person.
4.19 Hot Work Area Classifications
Classification of hot work areas is divided into several parts as follows;
1. Hazardous Areas.
A Hazardous Area is classified as any area in which either under normal conditions
(Class 1 - Division 1 API RP 500) or abnormal conditions (Class 1 Division 2 API RP
500) such as hydrocarbon leakage, containing gas and vapour in a sufficient amount that
can cause an explosion, such as the following;
a) Drilling Rig and Work over Barge during activity on the platform.
b) Installations with well head and production process
MANAGEMENT SYSTEM
Level : 2

Systems
Page : 10 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
c) Oil Tanker
d) Hazardous areas on Pabelokan Island covering the following areas;
- Gas Plant
- Gas Electric Generator
- Fuel Storage Bunker and Depot
- Flammable Chemical Storage Area
- Paint Storage area
- Sludge Storage/Pressurised Vessels.
2. Restricted Areas
Restricted Area is any area outside the Hazardous area covering a boundary of 50
meters.
3. Non-Hazardous Areas
Non-Hazardous Area is any area outside the 50 meter Restricted or Hazardous Areas.
Classification of Hot Operational areas is needed to render an efficient and effecti ve
use of manpower by prioritising work on safety factors.

5.0 Roles and Responsibilities
5.1 President
President is responsible to:
5.1.1 Approve this procedure.
5.1.2 Monitor the implementation of this procedure.
5.2 VP Exploitation
VP Exploitation is responsible for:
5.2.1 Ensuring that the PTW process is applied at sites within area of responsibility.
5.2.2 Approve Permit To Work for hot work conducted at critical area beyond Class 1 Div 1
and Class 1 Div 2 area (FSO, Engine Room, Gas Well Head, and Confined Space)
5.3 Department Managers
Department Managers are responsible for:
5.3.1 Ensuring that the PTW process is applied at sites within their area of responsibility.
5.3.2 Make sure periodic review and audits of the PTW system.
5.3.3 Approve Permit To Work for hot work conducted at Class 1 Div 1 and Class 1 Div 2
area (refer to API RP 500).
5.4 Heads of Operations (HOs)
Heads of Operations are responsible for:
5.4.1 Ensuring that the PTW process is applied at sites within their area of responsibility.
5.4.2 Conduct periodic review and audits of the PTW system.
MANAGEMENT SYSTEM
Level : 2

Systems
Page : 11 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
5.4.3 Counter Sign Hot Work (Naked Flame) and Confined Space Entry Permits.
5.4.4 Authorising the Site Controllers, Area Authorities, Performing Authorities, Isolating
authorities and Authorised Gas Testers as competent to carry out their duties, as
described in this document, and ensuring that a controlled log of all authorised
personnel is maintained.
5.4.5 Ensure that all company and contractor personnel are trained in all aspects of the
PTW System.
5.4.6 Ensure that some action already taken to mitigate the risk rose by conflict activity.
5.5 Site Controllers (SC)
Site Controllers are responsible for the Day to Day operation of the PTW process
within their area of responsibility.
5.5.1 Authorisation of all categories of work permits.
5.5.2 Periodically review and audit the PTW system.
5.5.3 To ensure that all workers at his location are aware of the activities taking place and
of the precautions to be observed.
5.5.4 To ensure that any work that requires a Standard Operating Procedure or a J ob
Safety Analysis is attached to the Permit to Work.
5.5.5 Approves all level 2 Task Risk Assessments.
5.5.6 Ensure that all company and contractor personnel are trained in all aspects of the
Permit to Work System.
5.5.7 Ensure that the PTW document is properly maintained
5.5.8 Site controllers must make sure that displayed copies of all the active Permits are
maintained by permit control to avoid conflicts.
5.5.9 Providing the culture to STOP the job if anyone feels unsafe.
5.5.10 If gas testing is required, ensure that a qualified gas tester monitors the gas levels as
required on the permit and enters all readings on the gas register page of the permit
form.
5.5.11 Ensure that adequate handovers take place at shift change, crew change or any
other change out of AAs, PAs.
5.5.12 Ensure that some action already taken to mitigate the risk rose by conflict activity.
5.6 Area Authority (AA)
Area Authorities are responsible for:
5.6.1 Work closely and communicate with the Performing Authorities when planning
permits, to ensure that the appropriate hazards and controls have been identified for
the task.
MANAGEMENT SYSTEM
Level : 2

Systems
Page : 12 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
5.6.2 Ensure that safe conditions are present for the Performing Authority to carry on with
the work as specified in the permit.
5.6.3 Ensure that the appropriate level of task risk assessment has been carried out for
the task (level 1 or level 2)
5.6.4 Ensure that all the appropriate control measures have been put in place prior to the
permit being issued, confirming that the performing authority fully understands the
scope of work and that other members of the work have been fully briefed via a
Toolbox talk.
5.6.5 To ensure work site inspections are carried out before, during and after the task is
complete.
5.6.6 Issues the Permit to Work to the Performing Authority.
5.6.8 If energy isolations are required, these measures must be described in the isolation
sheet of the permit to work form.
5.6.9 Closeout the Permit to Work after inspection of the work area to ensure that the work
area is in a safe condition.
5.6.10 Ensure that all permits issued are under his supervision, and that there is no conflict
between permits.
5.6.11 To conduct frequent inspections to ensure that safety recommendations are being
observed during the work process. If deviations from recommended safety
recommendations are noted, the work should be stop immediately until corrective
actions are taken.
5.6.12 For special case due to location constraint, the authorization and responsibility of AA
can be handled by SC. Example: Diving activities, the AA from BUs Dept and the
diving vessel under control PGF. For this matter the good communication and
agreement between BUs and PGF must be launched before conducting the job.
5.7 Performing authority (PA)
5.7.1 Conduct a work site inspection before applying for the Permit, to ensure that work
locations, equipment or tools comply with the necessary safety measures to do the
work.
5.7.2 Identify if the task requires a Standard Operating Procedure (SOP)
5.7.3 Requests the work permit with clear description of the work to be conducted and list
all the tools to be used on each part of the work.
5.7.4 Complete a Task Risk Assessment level 1, Identify the hazards and control
measures for the job. If necessary, seek advice from the Area Authority and the
Head of Field Safety.
MANAGEMENT SYSTEM
Level : 2

Systems
Page : 13 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
5.7.5 Participate in any Level 2 Task Risk Assessments.
5.7.6 To conduct a Toolbox Talk with all employees involved in the task to take place, to
check SOPs and J SAs if required and to emphasize all possible risks and
preventive measures to be taken, and record it in the PTW form.
5.7.8 Instruct all the personnel involved in the work (including contractors) about the risks
and precautions and necessary controls to be observed.
5.7.9 Ensure that the work only starts after the work permit is authorized and issued.
5.7.10 Make sure control measures remain in place during the permit validity.
5.7.11 Stop work immediately if unsafe conditions are present and immediately inform the
Area Authority for further actions.
5.7.12 Keep the work site clean, clear and safe at all times.
5.7.13 Along with the Area Operator/Area Authority close the Work Permit after work is
complete and after inspecting the work area to ensure that is clean, safe and free of
any equipment used during the work.
5.7.14 To have a copy of the Permit to Work displayed at a visible place at the job site.
Note: A Performing Authority and the Area Authority cannot be the same person
on a Permit (Each task must have separate PAs and AAs)
5.8 Authorised Gas Tester (AGT)
5.8.1 Conduct all necessary gas tests before requesting the Permit to Work
5.8.2 Conduct as many tests as necessary as specified on the permit while work is in
progress.
5.8.3 Confirm the hot work is safe refer to the gas test result.
5.9 Contractors
To perform all work in accordance with the Company Permit to Work System.
5.10 Permit to Work Controllers
PTW controllers are required to operate, monitor and control the permit system
5.10.1 Act as the focal point for all matters relating to permit Issue and Control.
5.10.2 Maintain the permit registers.
5.10.3 Maintain the permit audit register.
5.10.4 Maintain Task Risk Assessment register.
5.10.5 Conduct periodic audit of PTW system.
5.10.6 Attend work planning and scheduling meetings.
5.10.7 Communicate with site controllers and area authorities.

MANAGEMENT SYSTEM
Level : 2

Systems
Page : 14 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
6.0 Description of the Process and or Activity
6.1 Objecti ve
The objective of the Permit to Work System is to:
6.1.1 Ensure proper authorisation of non-routine work.
6.1.2 To ensure that all non-routine work is coordinated and controlled.
6.1.3 To make clear to the persons carrying out such work, the exact scope of the work,
the hazards involved, the precautions required and the time in which the job can be
carried out.
6.1.4 To ensure the person responsible for the work area is aware of all the work being
carried out in that area.
6.1.5 To provide a record of the work carried out, precautions taken, and the checks
completed.
6.1.6 To provide a formal hand-back procedure to ensure that that area of the plant, which
has been affected by the work, is in a safe condition.
6.2 Flow
6.2.1 Performing authority
The Performing authority will fill out (Sections 1 & 2) of the Permit to Work form
after visiting the worksite, every effort must be made to visit the location of the
work but due to logistic problems ( Remote locations its not always possible to
do a worksite visit).
The Performing authority will answer all concerning issues and pointing out any
special recommendations if applicable. This will be done after he has inspected
all safety measures required on the Permit.
6.2.2 Review by Area Authority
The Performing authority will present the Permit to Work request to the Area
Authority for review. The Area Authority will check the Task Risk Assessment in
section 2 and the safety controls identified for that work and will highlight any
additional requirements such as additional Gas Test requirements to the Work
Permit. The Area Authority then presents it to the Site controller for authorisation.
6.2.3 Authorization by Site Controller
The Site Controller will view all the safety measures identified and may request
additional safety measures, etc. The Site Controller then signs to authorise the
permit (Section 5), this does not mean the work can start.

MANAGEMENT SYSTEM
Level : 2

Systems
Page : 15 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
6.2.4 Permit Control
Once the permit has been authorised by the Site Controller it will be taken to permit
control office to be registered and signed by the permit controller where the permit is
given its unique number (section 5).
The Work Permits must be registered as completed (Section 10) with the permit
office at the end of its life which is one day only.
The Work permits are considered records of the Safety Management System
A copy of all Work Permits will be filed using the filing system of the field or
installation.
When Work permits are associated to the occurrence of an incident or accident,
the filing time of the work permit will be the regulated by the accident
investigation procedure, or regulated by the Legal Department.
6.2.5 Gas Testing
If a gas test is required it must be completed before the Task can be started the
authorised gas tester will record the results and sign the permit in (section 6).
6.2.6 Permit Issue
Once the Permit to Work has been approved and registered the Area Authority will
check the worksite and review the Permit with the Performing Authority he will then
sign (section 7a) and issue the permit to the Performing Authority.
6.2.7 Permit Acceptance
The Performing Authority (person carrying out the work) also signs the permit
(Section 7b) after checking all the controls are in place. The Performing Authority
must conduct a Toolbox Talk before the work starts to ensure his team understand
all of the requirements as stated on the permit and record it in the PTW form. All the
team members must sign the reverse side of the permit to confirm the toolbox talk.
The original copy of the work permit must be displayed at the work site controlled by
the Performing Authority.
6.2.8 Continuation of Work (Re-issuing) Work Permits
The work permit is only valid for one day (24hrs)
Permits shall be re-issued by the Area Authority if any of the following have occurred
(Section 8):
Gas Leak
Any Emergency Situation
Any time after the permit has been invalidated by the Supervisor
Shift change.

MANAGEMENT SYSTEM
Level : 2

Systems
Page : 16 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
6.2.9 Closeout
The Performing Authority will sign the Work Permit (Section 9a) to say the work is
Complete or Incomplete and left in the following condition, and that the work site is
clean, clear and safe.
The Area Authority will inspect the work site and only when he is satisfied will he
closeout the work permit by signing (Section 9b)
A Permit will lose validity if the conditions established for the Work Permit have
changed.
Work that is suspended by emergency situation or other, PA and AA shall secure
the working area by using appropriate equipment before leaving it.
6.3 Observations
6.3.1 Work Permits will be filled out in sequence (As per Flowchart in Figure 1), not
starting a new step before finishing the previous one.
6.3.2 The Field Safety Supervisor should act only as an advisor; he does not have specific
responsibilities in this procedure.
6.4 Work Requiring a Permit
6.4.1 Hot Work Activities
Work involving open flames or any other spark, heat producing activities.

Electrical Welding.

Electrical induction pre-heating, stress relieving or use of high temperature thermal calibrators,
except in authorized workshops and laboratories.

Use of portable grinders electrically powered.

Use of portable grinders air powered.

Use of flare guns (offshore only).

Dry grit/shot blasting in Hazardous Areas.

Hot Tapping Operations

Hot/Odd Bolting

Use of heat shrink blowers and electric power tools in Hazardous Zones.

Use of battery operated cameras in Hazardous Area.
Use of non-appropriately rated Explosion proof equipment in Hazardous Areas.
MANAGEMENT SYSTEM
Level : 2

Systems
Page : 17 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.

Opening electrical junction boxes in Hazardous Area where the terminals are exposed to
atmosphere.

Use of air or hydraulic-powered tools including needle guns capable of generating a spark
mechanically (excluding torque wrenches) in Hazardous Areas.

Work involving explosives requiring radio silence.

Work involving explosives not requiring radio silence (radio safe equipment)

Use of cartridge operated fixed tools (i.e. Hilti type guns) in Hazardous Areas.

Operation of inadequately protected internal combustion engines in Hazardous Areas (onshore
locations only). (These type of units not allowed offshore)

6.4.2 Cold Work Acti vities
Well Services Operations.

Working on equipment and vessels contaminated with NORM scale.

Working with radioactive sources.

Working with liquid nitrogen.

Working with mineral wool type fibre.

Handling or use of hazardous substances not specifically referenced under other headings.

High pressure water jetting or wet grit blasting.

Ultra high pressure (UHP) water cutting.

Spray Painting

Removal of handrails, gratings, hatches and fixed ladders.

Dry grit/shot blasting Non - Hazardous Areas.

By-passing or obstructing fire and gas detection systems, e.g. flammable gas detection, H2S
detection, fire detection and UPS system.

Work that may obstruct fire control or protection arrangements, e.g., deluge, sprinkler systems, Fire
Monitors, hose reel stations, fixed fire fighting foam systems, fire pumps, fire main, gaseous
systems (Halon/CO
2
).
MANAGEMENT SYSTEM
Level : 2

Systems
Page : 18 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.

Work obstructing facilities provided for the refuge, protection, escape and evacuation of personnel
(lifeboats, life rafts, or other LSA), access/evacuation routes, emergency/escape lights, personal
safety equipment, helicopter support systems, means of escape to sea and rescue facilities.

By-passing or obstructing process safety and protection Devices e.g. manual Push ESD buttons,
safety devices such as: HLHH, PSV, reservoir isolation (Well surface and sub surface valves),
depressurisation (blow down) relief systems, open hazardous drains and open non-hazardous
drains. This includes any bypass or removal from service of pressure and level protection devices.

Work affecting the internal or external critical communications systems of the installation, e.g.
mandatory communications, operational communications, and navigation aids. Any work associated
with the Rosemount DCS Peerway and Allen Bradley Data Highway network systems.

Construction, maintenance, overhaul and repair work in operational areas involving breaching the
containment of systems or equipment containing produced hydrocarbons or other high
pressure/high temperature/flammable fluids, e.g. oil, gas, chemical injection, glycol, etc.

Work over side or where there is a danger of falling into the sea.

Hydrostatic pressure testing of facilities or equipment.

Nitrogen/Gas leak or pressure testing of facilities or equipment.

Work in confined spaces, tanks or vessels.

Use of certified personnel work baskets.

Diving operations.

Pigging operations.

Installing/Retrieving corrosion coupon

Working with hot water

Working at height/Scaffolding

Rig skidding (offshore installations only).

Lifting/rigging operations in areas which require special controls, or where the lift has the potential
to cause damage to systems or equipment.

Mobile crane operations in hazardous areas (onshore locations only).

Lifeboat maintenance or launching for training.
MANAGEMENT SYSTEM
Level : 2

Systems
Page : 19 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.

Use of cartridge operated tools in (Hilti type guns) Non-Hazardous Zones.

Electrical work resulting in the non-availability of:
- Emergency generators/switchboards
- UPS Electrical supplies to Electrical Equipment.
- Electrical supplies to accommodation units.

Work in areas that breach systems known to contain H
2
S and or Benzenes.

Other work specified by the Heads of Operations or Site Controllers requiring special controls.

MANAGEMENT SYSTEM
Level : 2

Systems
Page : 20 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
Figure 1. Flowchart of Process and or Acti vity a Work Permit (English)

MANAGEMENT SYSTEM
Level : 2

Systems
Page : 21 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
Figure 2. Flowchart Process and or Acti vity a Work Permit (Bahasa)

MANAGEMENT SYSTEM
Level : 2

Systems
Page : 22 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
6.5 Work Permits
6.5.1 A Work Permit is a signed statement by an authorised person that a non-routine job
may be carried out under stated precautions.
6.5.2 In an attempt to standardise precautions, the following Work Permits must be used
on operational facilities.
6.5.3 All Non Routine work will be listed for each type of permit in the permit office.
6.6 Work Permit Types
6.6.1 Hot Work (Naked Flame / Spark Potential) RED
Hot work naked flame Permits are required for:
Naked Flames (Welding, Flame Cutting).
Electrical Welding.
Electrical induction pre-heating, stress relieving or the use of high temperature
thermal calibrators (Above 200

c) except in authorised workshops.
Use of portable grinders (Air or electrically powered)
Abrasive wheels.
Use of flare guns.
Use of heat shrink blowers in Hazardous Areas.
Use of equipment or work on pipe work or vessels contaminated or potentially
contaminated with pyrophoric scale.
Hot work spark potential
Dry grit/shot blasting in hazardous areas.
Needle gunning / chipping hammers in hazards areas.
Pneumatic chisels in hazards areas.
Use of battery operated cameras in hazards areas.
Use of non-appropriately rated equipment in hazards areas.
Opening live electrical junction boxes in hazardous
Use of air or hydraulically powered tools generating a spark.
Use of cartridge operated fixing tools (Hilti Guns) in hazards areas.
Operation of protected portable diesel engines not tied into the fire and gas
systems in hazardous and non-hazardous areas.
Refer to Appendix C for HOT WORK PERMIT requirements.
6.6.2 Cold Work Permit BLUE
Cold Work Permits are required for activities where the tools and procedures used
do not involve any source of ignition or potential spark.

MANAGEMENT SYSTEM
Level : 2

Systems
Page : 23 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
Cold work Permits are required for:
Well services.
Working on vessels/equipment contaminated with Low Specific Activity (LSA)
scale/Naturally Occurring Radioactive Materials (NORM)
Working with radioactive sources.
Working with asbestos or mineral fibre products.
Excavation or ground disturbance.
High pressure water jetting or wet grit blasting.
Painting / Spray painting.
Removal of handrails, grating, hatches and fixed ladders.
Use of lasers.
Construction, maintenance, overhauls and repair work in operational areas
involving breaking containment of hydrocarbon systems.
Spading and de-spading of systems under pressure or which contain flammable
substances.
Sampling of hydrocarbon products by any means other than an approved
sample point.
Refer to Appendix C for COLD WORK PERMIT requirements.
6.6.3 Confined Space Entry GREEN
A Permit for Confined Space Entry shall be raised when it is necessary for personnel
to enter confined spaces and live hydrocarbon lines:
It can only be issued to an Authorised Gas Tester.
A level 2 TRA is Mandatory.
Provision is made for gas tests in Section 8, including continuation on the
reverse side of the confined space entry permit
It does not permit any form of work, only visual inspection and gas testing.
It must be authorised by the Site Controller
It must be countersigned by Head of Operations.
It must be issued by Area Authority
Rescue plan shall be formulated
Drill for the rescue plan shall be conducted
Permit for Confined Space Entry involves the following Activities.
Declaring that the confined space is positively isolated so that the Authorised
Gas tester can enter, subject to any special conditions.
Authorising entry by the authorised Gas Tester.
MANAGEMENT SYSTEM
Level : 2

Systems
Page : 24 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
Recording the gas test and re-test results.
Declaring the confined space safe for entry.
Specifying whether or not Breathing Apparatus is required.
Written communication between the Authorised Gas Tester and the Area
Authority.
6.6.4 Formal Procedure WHITE
Certain activities do not normally need to be covered by a permit. Competent people
using Approved Standard Operating Procedures (SOP) may carry out these tasks.
Where situations change then it is important that these procedures are reviewed and
updated accordingly. Formal Procedures are authorised by Heads of Operations and
are reviewed annually.
A formal Procedure is valid for 1 shift (12 hours).
A Formal Procedure Application form is used to request this work-scope.
The registers of valid Formal procedures is held by Heads of Operations and
accessed by Site Controllers and Area Authorities.
These activities may include the following Operations carried out in accordance with
Installation procedures covering the following unless otherwise agreed.
MECHANICAL / MAINTENANCE PROCEDURES
Operating Pedestal Crane
Launching of Survival Capsule
PRODUCTION / PROCESS PROCEDURES
Oil In Water Measurement
Hazardous and Toxic Waste (B3) Handling & Disposal to PPLI
Personnel Boat Transfer
Lifting Operation using Hands Free Radios
Lab Sampling.
Safety Equipment checks.
General housekeeping.
Carpentry work by approved contractors.
Vibration monitoring work.
Flow line tracing.
Routine operations tasks i.e. Start / Stop pumps, Filter changes etc.
Work preparation (this does not include scaffolding).

MANAGEMENT SYSTEM
Level : 2

Systems
Page : 25 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
6.6.5 Work not requiring a Permit or Formal Procedure ( Non Permitted Work )
Certain activities do not normally need to be covered by a Permit or a Formal
Procedure.
Operations covering the following:
Production plant operations.
Crane Operations where the activity is out of activities.
Drilling Operations.
Helideck Operations
The use of the following tools and equipment inside accommodation areas,
workshops, control rooms and other non-hazardous modules protected by fire and
gas detection equipment.
Battery operated cameras without flash.
Visual inspection of areas (except Confined space Entry and Rope Access ).
Operation of equipment for approved training purposes
The handling and use of non-hazardous materials.
Work of a cold nature
Welding J ob, Machining, Fitting, Turning and Calibration work in workshops and non-
hazardous areas.
6.6.6 Excavations / Ground Disturbance
A Permit to Work must be used in workplaces where excavations or ground
disturbance may occur, and to all company and contractor personnel with potential
for exposure to hazards resulting from excavation in their workplaces, including:
Cold Work permits are used for excavation using Hand Tools
Hot Work (Spark Potential) is used for excavations using Mechanical Machinery.
All areas where excavating equipment is used; and
All areas where processes associated with excavation are undertaken.
Excavation work may range from shallow trenching and simple foundation
excavation to large bell hole excavations for welding tie-in where the risk of serious
injury is very significant.
6.6.7 Temporary Defeats
A Temporary Defeat occurs when a protective device or equipment (see examples
following) is bypassed, disabled, or fails AND the protected equipment or facility is to
remain in service.

MANAGEMENT SYSTEM
Level : 2

Systems
Page : 26 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
A temporary defeat may be necessary to:
Carry out maintenance, drilling or construction work;
Undertake operations tasks, such as equipment start-up and shutdown, control
of process upsets, etc.
Continue to operate the facility when a protective device or equipment has failed.
Refer to Appendix K for full Guidelines on the use of Temporary Defeats
6.7 Work Permit Requirements
The Work Permits must contain the following:
General description of the job.
A checklist of the precautions required to carry out the job. This includes checklists that
define precautions required to be completed before starting the job, and a checklist of
safety precautions to be taken when carrying out the job.
A section for validity of the Permit.
A section for issuing the Permit to Work and hand-back of the equipment on completion
of work.
A section for renewal and hand-over of the Work Permit is required.
In order to assist in the isolation of equipment and the completion of other checks
required for the Permit, signed statements or CERTIFICATES are used to complement
the Work Permit.
For the sake of consistency, and to minimise confusion by personnel and subcontractors
dealing with various operating facilities under CNOOC SES Ltd control, work permits must
be laid out to contain the following sections:
6.7.1 General Description (Section 1)
This section is filled in by the applicant and should contain the following information,
as a minimum:
Applicants Name, Function, Company
Direct Supervisor Name & Signature
Equipment Description, Number
Location
Date
Description of work to be carried out
Period of time for which the Permit will be valid
Number of personnel required
Tools to be used.

MANAGEMENT SYSTEM
Level : 2

Systems
Page : 27 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
6.7.2 Task Risk Assessment (Section 2a & b)
This section is completed by the Performing Authority and where required by the
Area Authority. This section comprises of a number of sub-sections.
Refer to section 7.2 of this Procedure.
Requirements for Job
This section describes the precautions to be taken before the Permit to Work is
issued,
Including relevant isolation certificates,
A checklist of other safety precautions that may be required,
The period of time for which the Permit will be valid, and
A section for any other relevant signatures such as Plant Inspection, overlapping
responsibility, relevant engineer, etc.
Checklist of Safety Precautions to be taken on the Job
This section describes the precautions to be undertaken by the person carrying out
the work.
6.7.3 Cross Referenced Certificates (Section 3)
Supporting documents and certificates such as regulation, TRA, SOP, MSDS, the
previous PTW, and others will be recorded to this section. PA and AA will record and
re-check it.
6.7.4 Authorization ( Section 4 )
Provision must be made for the signature of the Site Controller who, by signing,
approves that the work, as defined on the Permit, can be carried out safely as long
as the precautions defined in the relevant sections of the permit are followed.
6.7.5 Permit Registry ( Section 5 )
This section is used for permit control; all permits will be registered by permit control
and given a unique number.
6.7.6 Gas Test Requirements ( Section 6 )
This section is included on the Hot Work Permit to allow the requirements with
regard to Gas Tests to be defined.
6.7.7 Worksite Visit
This certifies that the precautions specified by the Performing Authority have been
carried out and that it is safe to commence work after permit issue.
6.7.8 Issuing the Work Permit ( Section 7a )
After clearly explaining the safety precautions to the Performing Authority, and in the
case of work involving the removal of pipe work or Hot Work Permits directing the
Performing Authority to the worksite, the Area Authority should sign the Permit.
MANAGEMENT SYSTEM
Level : 2

Systems
Page : 28 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
6.7.9 Permit Acceptance ( Section 7b )
6.7.10 Continuation of Work ( Section 8 )
Once the permit has been issued it only has 12 hours validity, but can be re-issued
for the next 12 hours shift. The maximum validity is 24 hours.
6.7.11 Closeout Permit to Work ( Completion of Work ) ( Section 9a & 9b )
The Performing Authority, after completing the work described on the Permit,
checks that the site is clean and safe and signs off the Permit.
If for any reason the work is suspended or not completed, details are described.
The Area Authority accepts the hand-back of equipment, verifies that the work
has been completed and that the site is clean and safe, and then signs the
Permit. On the completion of all related Permits, the system is de-isolated.
On completion of the de-isolation, after signing the Certificates and removing all
tags, the Area Authority should sign that all work associated with the Permit is
complete and the system is safe to put back on line.
6.7.12 Registry of Permit Completion ( Section 10 )
This section is used to control the closeout and completion of the permit, all permits
will be registered as closed and kept in the permit office for auditing.
In addition to the above sections, the Permits must also include:
A section for the authorisation of override, inhibition or isolation of critical safety
systems.
A section for recording all related Work Permits.
6.8 Tag System
In order to standardise on the type of tags used at the various facilities under CNOOC SES
Ltd control, to avoid confusion by personnel and subcontractors working at different facilities,
all personnel shall follow LOTO flowchart and requirement in Appendix B: Lockout/Tag out
Permit Requirements.
6.9 Depressurising/Draining/Purging
6.9.1 Production Operations, which require Depressurising, Draining and Purging, must be
controlled by the Permit to Work System.
6.9.2 Before breaking any flanges, equipment shall first be depressurised and drained to
atmospheric.
6.9.3 Pressure via the oil contaminated drain system.
6.9.4 It is essential that isolation/purging procedures are developed that include the
checking of valve tightness and that trapping of liquid between valves, or at low
points, is avoided after checking valve tightness.
MANAGEMENT SYSTEM
Level : 2

Systems
Page : 29 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
6.9.5 Purging of hydrocarbon equipment should be carried out typically by pressurising the
system up to approximately 500 kPa and piston purging at least three times.
6.9.6 Purging, when carried out, must be checked for efficiency at several locations at the
extremes of the system before accepting the system is gas-free.
6.10 Isolation of Equipment for Inspection or Maintenance
The main hazard when working on equipment which is to be isolated is that isolation from a
source of energy or hazardous fluid may be overlooked and the source then activated.
Therefore, the Work Permit will control all work requiring the breaking into of pipe work or
equipment System. Up to date piping and instrumentation diagrams must be used to
construct a written procedure for every piece of equipment that needs to be isolated. The
Planned Isolation Sheet must be used for isolation and attached to the permit.
This procedure must describe; the sequence of isolation, the confirmation of valve tightness,
what connections should be disconnected, the purging and draining requirements, and how
to ensure that all relevant equipment is tagged before starting to open equipment for
installation of blinds/spades. The procedure should include a spade list, clearly defining all
spading points.
Before the isolation is accepted the Responsible Supervisor should verify that the completion
of the isolation is in accordance with that specified on the permit. In the event that the
isolation requires more than one Work Permit then the Permits and associated isolation
records should be formally cross-referenced to eliminate conflict between the different work
activities.
Below is an outline of the minimum mandatory isolation requirements:
6.10.1 Isolation of Electrical Equipment
All electrical isolations of equipment will be carried out by authorised officers and
take the form of a double indemnity break from the source of electrical supply.
This isolation procedure entails:
Identifying, in the field, all relevant equipment/s and their respective Remote
Control Unit/s (RCU).
Once this has been done the RCU's selector switch is hasp-held in the "off"
position.
At the substation, the isolation switch on the motor starter cubicle is switched off
and the cubicle racked out to the isolated position; (if the switchgear does not
allow racking out, then the main fuses shall be withdrawn) and the main cubicle
isolator locked off and "Danger" tagged.
MANAGEMENT SYSTEM
Level : 2

Systems
Page : 30 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
Verification of the isolation then takes place by trying to start the item of
equipment in the field using the RCU. When isolation is proven, the RCU switch
is hasp-held in the "off" position and "Danger" tagged.
6.10.2 Mechanical Isolations
Isolation of Moving Machinery
Both flow and return currents of the electrical steam, hydraulic or other source of
energy to moving machinery must be isolated. Alternatively, the moving
machinery must be isolated from its drive unit and secured immobile.
Isolation of Process Equipment
To prevent possible inflow of gases, liquids and sometimes solids, isolation in
accordance with the following guidelines is required:
If the unit or system, as a whole, has been shutdown, depressurised and is
toxic gas and Hydrocarbon free, no additional isolation is required to carry
out normal maintenance work. The requirement for positive isolation by a
spade or removed line work for vessel entry is a mandatory requirement.
Refer Appendix 1.
If a system, unit or piece of equipment is to be isolated from gas system
containing gas of ANSI Class 900 rating and above or, liquid system
containing ANSI Class 600 rating and above, then the following minimum
requirements apply:
Minor Work - Double block or double block and bleed is required.
Major Work - Double block or double block and bleed in combination
with spade or blind.
If a system unit or piece of equipment is to be isolated from gas system
containing gas of ANSI Class 600 or below, or LIQUID system containing
ANSI Class 300 or below, then the following minimum requirements apply:
Minor Work - Double block or double block and bleed is required.
Major Work - Double block or double block and bleed in combination
with spade or blind.
If a system unit or piece of equipment is to be isolated from gas system
containing gas of ANSI Class 600 or below, or LIQUID system containing
ANSI Class 300 or below, then the following minimum requirements apply:
Minor Work - Single leak tight closed valve
Major Work - Single leak tight valve plus a spade or blind.

MANAGEMENT SYSTEM
Level : 2

Systems
Page : 31 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
Well Head Isolation
In principle, when working on a well, positive double isolation must be applied.
This may include block valves, tubing plugs, wellhead plug, blow out preventers
or hydrostatic barriers.
A double block and bleed system shall consist of two separate valves with a
bleed connection in between. (Double sealing valves with vents are considered a
single isolation).
When Actuated valves are to be used for isolating purposes for protection of
personnel, all motive power of the valve has to be physically disconnected from
the actuator. Relying on a switch is not adequate.
In the case of hydraulically operated valves, positive isolation of the hydraulic
fluid must be demonstrable.
6.10.3 Deviation to Mandatory Isolation Requirements
Deviations will not normally be acceptable. In "extreme" circumstances where
deviations to the above minimum isolation requirements are necessary and
deemed acceptable, these deviations must be documented as exceptions in the
facilities detailed Permit to Work procedure.
All deviations to the above philosophy must be supported by a detailed
procedure for the isolation, which has been subjected to a job safety analysis.
Deviation to the mandatory isolation requirements and, in particular, the
alternative documented procedures must be approved by the Divisional Manager
responsible for the asset during the execution/operational phase.
6.11 Auditing and Monitoring
6.11.1 Each Company Asset shall:
Undertake internal audits of the operation of the Risk Assessment process as
part of the Safe System of Work at each site
Maintain an Audit Register, To be in the permit office and maintained by permit
control
Have in place a system for tracking recommendations
Use of a Standard Audit Checklist is recommended
The mandatory frequency of Audit is as follows :
Permit controller 3 permits per week
Supervisor & Head 1 permit per week
Site Managers 1 permit per 2 months
6.11.2 Permit to Work and Risk Assessment audits should be a cross section of ongoing
activities.
MANAGEMENT SYSTEM
Level : 2

Systems
Page : 32 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
6.11.3 PTW audit shall be carried out by one group (choose one supervisor weekly) or one
person basis on weekly, results and recommendation shall be reported after all
monitoring and auditing activities to provide improvements on fault finding; four
audits on weekly basis, at least two audits of form 2 and one audit of form 1.
6.11.4 PTW audit shall refer to Appendix M Monitoring and Audit Check Sheet.
6.11.5 Site Manager shall carry out regular internal reviews of the findings of Permit to Work
and Risk Assessment Audits, to endure that any critical failings in the system, or its
manner of implementation.
6.11.6 The company QHSE Department as part of their annual audit schedule will conduct
PTW and TRA audits.
6.11.7 Such audits should examine a cross section of at least 20 Permit per field.
6.11.8 These audits should examine the auditing completed by installation staff, and
detailed review of Risk Assessments, to check compliance with this procedure.
6.11.9 The result of the annual audit shall be discussed and studied with Management to
see if any change proposals are required.

7.0 Appendix

MANAGEMENT SYSTEM
Level : 2

Systems
Page : 33 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.

APPENDIX A: PROCEDURE FOR TASK RISK ASSESSMENT LEVEL 1 AND LEVEL 2

1.0 INTRODUCTION

1.1 Purpose

It is a requirement of the Permit to Work procedure employed within CNOOC SES Ltd. that a Task Risk
Assessment is carried out before any permits are issued.
The Purpose of this procedure is to describe the Task Risk Assessment process employed by CNOOC
SES Ltd. in support of the permit to Work system.
It is a requirement that the Hazards associated with CNOOC SES Ltd. Activities are identified and that
the Risks are assessed and managed.

1.2 Definitions

This procedure is written in sufficient detail that it would be able to be applied consistently at all sites.
There may still be the requirement for some local rules covering site-specific logistical/administrative
arrangement for some local rules covering site-specific logistical/administrative arrangement and local
variations in responsibilities to reflect differences in organisational arrangements. These local rules
should not deviate from the core process within this document. Any form of deviation from this procedure,
including but not limited to local rules, shall be requested and authorised by site management.

1.3 Scope

The scope cover defined activities of Company and Contractors at all Company sites and installations

Company Management Sites/Installations
A permit to work system with supporting Task Risk Assessment process is employed at all Company
managed sites where hydrocarbons are processed or handled, and at any other site directly managed by
the Company.

When a 3
rd
party/contractors visits a site/installation the Task Risk Assessment process must be followed
as normal.

Third Party Managed Sites/Installations
On sites managed by third party, e.g., a contracted drilling rig, the contractors permit to work and Risk
Assessment system may be used provided that they have similar features and ensures identification of
hazards and control as effectively as the Task Risk Assessment procedure and must be agreed by
CNOOC SES Ltd. Company representative.

1.4 Document Review

This document will be reviewed on an annual basis when users from the sites will have an opportunity to
propose change to the existing processes and procedures. The document Technical Authority will be
responsible for coordinating this review.

1.5 Specific Cross Reference

These Task Risk Assessment procedures shall, where appropriate, be used in conjunction with CNOOC
Procedures referenced below.
MANAGEMENT SYSTEM
Level : 2

Systems
Page : 34 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.

Document Number Title of Procedure
HSEGP-018 Incident Investigation, NC, Corrective and Preventive Action
HSEGP-001 HSE Risk Management
HSEGP-006 Competence, Training, and Awareness
HSEGP-020 Audit

1.6 Language Facilitation

Due to the various languages spoken at site, there is a necessity to assist all with an ease of
understanding. Therefore, the development and use of information tools are available.

2.0 DEFINITION & ABBREVIATIONS

Controls: Steps taken to reduce either the probability or consequences, or both of a particular risk.
Hazard: Steps taken to reduce HARM to humans injury or loss of life, damage to the environment,
damage to material assets, reputation or a combination of these.
Hazardous
Effect:
The result when a hazard is realised. The Consequences of a Hazard.
Inhibition: The isolation of the executive action of protective system. Where practicable, this should not
prevent the operation of the visual / audible warning system.
Isolation: Process Isolation involves the closing and locking of valves. This may include
depressurising, flushing and purging, e.g. single valve isolations
Positive Isolation involves the disconnection of plant, equipment and systems from
sources of motive power, liquids and gases
Electrical Isolation The secure, disconnection and separation of a circuit, or item of
equipment, from every source of electrical energy. This may involve electrical,
instrument and communication isolations
Long Term Isolation An isolation that remains in place after permit cancellation,
and recorded as Long Term
Isolation
Certificate
Register:
A Regis maintained in the permit office identifying the status of all isolation Certificates by
permit control-referenced to individual permits
Permit: An Authorising document approved by management, specifying the required precautions
and conditions under which potentially hazardous or interacting activities can take place
Permit Display
Board:
A board used to display the status of active and suspended permits
Permit Register: A register maintained in the permit office identifying the status of all permits
Probability: The chance of occurrence of an event. Probability can be expressed as a likelihood,
frequency, class, rank, etc.
Risk: A combination of the likelihood of a hazardous event and the severity of the possible
consequences of that hazardous event
Risk
Assessment:
The overall process of risk analysis and risk evaluation
Risk Evaluation: The process to support management decision as to acceptability or risk reduction
requirements by comparing the estimated risk against relevant criteria.

MANAGEMENT SYSTEM
Level : 2

Systems
Page : 35 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
3.0 ROLES AND RESPONSIBILITIES

3.1 Department Managers

The Business Manager is responsible for:
Ensuring that the TRA Process is applied at sites within their area of responsibility
Periodic internal reviews and / or audit of the operations of TRA

3.2 Head of Operation

The Head of Operations are responsible for:
Ensuring that the TRA Process is applied at sites within their area of responsibility
Review and approve TRA (Task Risk Assessment) level 2 before authorising the permits to work

3.3 Site Controllers (SC)

Site Controllers are responsible for:
Appointing individuals to act as TRA leaders to facilitate the TRA process
Reviewing all level two Task Risk Assessment before authorising the permits to work

Note: It is the responsibility of the Site Controllers (SC) to request a higher level of Risk Assessment
should they consider that risk have not been fully addressed.

3.4 Area Authority (AA)

Area Authorities are responsible for:
Determining the level of Risk Assessment required to support any Permit to work application
Organising and practicing in the Risk Assessment process
Ensuring that personnel are trained in the Task Risk Assessment process

3.5 Performing Authority (PA)

Performing Authorities are responsible for taking part the Risk Assessment process and communicating
the output form the risk Assessment process to the personnel who will be doing the work (Toolbox Talks).

3.6 TRA Team Leader

The main responsibilities of the TRA Team Leader are to:
Lead the team in performing a level 2 Risk Assessment
Ensuring the team understands the assessment process
Take responsibility for maintaining the quality of the TRA
Ensuring that the assessment team includes personnel with all the necessary experiences,
knowledge and competence for the task involved
Ensure that the TRA includes a worksite visit
Ensure that all members of the TRA team have a full opportunity to contribute and that the details of
the assessment are agreed by all team members
Ensure that the details of the assessment are accurately recorded

3.7 Individual TRA Member

The responsibilities of individual team members are to :
Actively practice in the TRA process
Help identify hazards and control measure to reduce the likelihood of an incident/accident occurring
MANAGEMENT SYSTEM
Level : 2

Systems
Page : 36 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
Ensure they agree with the overall TRA before approval, that risk have been reduce to as low as
reasonably practicable

3.8 People Carrying Out The Work

The responsibility of the people carrying out the work are to :
Understand the hazards, risk and controls associated with the task
Participate and contribute in the Toolbox Talk
Actively monitor the worksite and surroundings for changes
Stop the job at any time of they are concerned about safety

4.0 COMPETENCY, TRAINING AND AWARENESS

4.1 General

All personnel involved in the use of the Risk Assessment process shall be trained and proven to be
competent.
The sites Controllers and/or Line Supervisor shall ensure that the personnel involved in the activity have
the correct competencies through records or requesting individuals to produce relevant certification.

4.2 Levels of Training

The level trainings are:

First time users: TRA Team Member and TRA Team Leader requires one day classroom based
training. This also requires a practical and written assessment to demonstrate that the trainee
understands the Task Assessment procedure.

For all Company Employee : Prior to any involvement with the PTW and Risk Assessment system all
employees shall receive awareness training to ensure that they understand the importance of PTW and
how it effects them in the working environment.

Note: The Toolbox Talk is an essential part of the Risk Assessment Process. All users of PTW system
should contribute at this point. Additional information can be found section 6.10 of this document.

4.3 Records

Records of attendance and competency will be field for future reference / verification by Senior
Management.

5.0 RISK ASSESSMENT LEVELS

5.1 General

The process of Task Risk Assessment (TRA) is a method for systematically examining an individual work
assignment (task), to identify the hazards, evaluate the risks and specify appropriate controls.
There are two levels of risk assessment defined within the process :

Level 1
Level 1 is a board overview of the task by a Competent Person (CP) or persons typically the Team
leader, Performing Authority (PA) and Area Authority (AA), to identify any significant hazards
involved and appropriate control measure which require to be in place to allow the job to proceed.

MANAGEMENT SYSTEM
Level : 2

Systems
Page : 37 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
Level 2
Level 2 is a formal quantitative assessment, which is required only when the CP(s) judge that there
are greater hazards or complexities associated with the task, which requires a more rigorous level of
assessment. A team of minimum 3 personnel carries out this assessment

All Risk Assessment require input form those who will be doing the work. In addition, some Level 2 Risk
Assessment may require the input of expertise from outside the normal site/installation team.

Previously carried out L2 Risk Assessment (L2RA) can used for repeat tasks.

Note: Whenever a previous L2RA is re-used it is critical that the details of the TRA are reviewed to
ensure the scope of the task is still relevant, conditions have not changed and that the hazards
and control measure are still appropriate.
All the new information must be entered at the top of the TRA sheet and signed by all the relevant
personnel.

5.2 Level 1 Risk Assessment Guidance Notes

A level 1 Risk Assessment is based on section 1 and 2 of the permit. The Permit Form provides the
prompt list and structured approach for this level for Risk Assessment. Different Permit have different
prompt list in section 2.

A level 1 Risk Assessment involves a review of the task by the PA in consultation with another competent
person (CP) (normally the PA, Team leader or AA) to identify the hazards associated with the task and
appropriate control measures required to manage these hazards. The PAs in using their technical
competence and task information form section 1 selects the hazards from a list.

The PA then uses the controls listed in section 2 of the Permit to show how the work will be controlled.

These hazards and controls are selected from a list from the permit, although the PA should not be
constrained by this and must use his judgement and expertise to identify any further hazards or controls
there is space on the permit to add additional hazard and controls.

The CP must decide whether the risk can be controlled adequately by the proposed means, taking into
account the controls required any relevant local procedure and the competence of the person in charge.
If the CP is nit completely assured that the risk will adequately controlled any these measures and feels a
more rigorous assessment is required, they must inform the person in charge of the work and request a
level 2 Risk Assessment. This requirement should ideally be identified at the earliest opportunity. The
Area Authority or Site Controller can direct that a level 2 Risk Assessment shall be undertaken at any
time. Earliest communication of the task requirement and discussion about it will identify the level of Risk
Assessment process to be conducted.

The Area Authority will review with the PA Section 1 and 2 of the permit along with any other
documentation J SAs / SOPs.

They should visit the worksite to confirm all hazards have been identified and controlled but due to
logistical problems with remote platforms this is not always possible.

Note: Discussing the job with workforce involved is an important part of this process (Toolbox Talks).

5.3 Level 2 Risk Assessment Guidance Notes

A level 2 Risk Assessment must be carried out at any stage in the process where the PA, AA, a member
of management or any other personnel believes that significant risks exist which will not be adequately
MANAGEMENT SYSTEM
Level : 2

Systems
Page : 38 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
controlled without a more rigorous assessment and the application of additional controls. This
requirement should ideally be identified when the planning for the task is first initiated.

The reasons for a Level 2 Risk Assessment might include, for example :
The task is new and unfamiliar
It is physically impossible to comply fully with the standards in a relevant local procedure or other
recognised source of guidance
Previously used controls may not be reasonably practicable in this case
The task is complex and/or has potential impact on other activities

The decision on when a Level 2 Risk Assessment is required for a task is somewhat subjective and will
depend on the people involved but the following rules should be applied to ensure a consistent level of
assessment is being carried out across the organisation.
A Level 2 Risk Assessment is mandatory for any described in Table 1 and is advised in Table 2.

5.3.1 Normal Level 2 Risk Assessment

Task identified in this section require a normal Level 2 TRA to be performed. In the event a particular task
is not listed but the Task has a significant risk (s) then a Line Supervisor should be consulted. Some sites
may have specific activities unique to that site which they deem as mandatory Level 2 tasks. A Level 2
Risk Assessment must always be undertaken for any job, which requires :

Table 1 Mandatory Level 2 Risk Assessment

Confined Space Entry
Work on Flare Systems
Plugging/sealing
Hot / Odd Bolting
Working with asbestos
Working at heights without scaffold or structure
When minimum standards of Energy Isolation
cannot be achieved
Unconventional access (e.g., abseiling, crane
basket)
Proof Test (initial hydro test where no design
pressure exists)
Pneumatic test (as alternative to hydro test, up
to 110% of design pressure)
Non-routine venting/draining/cleaning of
equipment containing hazardous chemicals
Task which are unfamiliar, or which involve
unfamiliar methods or technologies
Heavy Lifts
Diving Operations
Simultaneous Operations (SIMOPs)
Use of Explosives
Lifts over live process pipelines or process
plant
Task involving Ground Disturbance
(Excavations)
Where there is a significant potential for injury
to people outside the site boundary
Hot work within 15m radius of hydrocarbons
When the any approved procedures cannot be
followed
Task that may have specific hazards
associated with Energy Isolation
Tasks which are judged to be unusually
complex (e.g., due to the number of steps or
interfaces)

Table 2 Advisory Level 2 Risk Assessment

Any activities involving potential exposure to H2S
Where multiple protective devices are removed or inhibited from a system
New activities being carried out for the first time and/or involving personnel or vendors new to the site
Where an element of emergency equipment is being removed from service (e.g., pump
removal/maintenance)

MANAGEMENT SYSTEM
Level : 2

Systems
Page : 39 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
CNOOC SES Ltd. Has Standard Operating Procedures (SOPs) and J ob Safety Analysis (J SAs) in place
covering standard precautions for some of these activities. They can act in support of the assessment
and adequately cover most of the required control measures.
A level 2 Risk Assessment is carried out against check lists (see page 17 Risk Assessment Check Lists).
The flow-path that should be followed is provided in Appendix A.

5.3.2 Isolation Risk Assessment

When an Energy Isolation-Process does not meet the standard as stipulated in this procedure, a L2RA is
required. The risk assessment should only be on the isolation element of the task, and not the work task
element.

Examples of when an Isolation Risk Assessment (IRA) is required are :
Sufficient number of valves are not available to achieve the level of isolation required
There is an integrity issue (e.g., leaking) of part of an isolation
An alternative means of isolation must be resourced, i.e. stopple bag, ice-plug
If an isolation requires a risk assessment, the procedure would be :
Create a team as per L2RA procedure (Mandatory Level 2 Risk Assessment)
Complete TRA level two sheet
The TRA Worksheet should identify controls to allow a safe and suitable isolation
Authorise IRA register held by Permit Control
Assign controls, and put in-place

An Isolation Risk Assessment is valid indefinitely; however it has to be revalidated after 7 days by the site
Controller.

5.4 Level 2 Risk Assessment Team

The objective of the Level 2 Risk Assessment is to assemble a team of persons with intimate knowledge
and expertise of the task and in a structured way, examine all the hazards associated with that task, and
then devise a set of controls which will ensure an acceptable level of risk is achieved. Where necessary,
expertise from elsewhere an acceptable level of risk is achieved. Where necessary, expertise from
elsewhere (e.g., specialist vendors/contractors) may also be brought into the assessment process.

Where large jobs or shutdowns are planned, work should be undertaken early on to identify potential task
requiring Level 2 Risk Assessments in order to allow adequate time for the assessment to be undertaken

The Level 2 Assessment Team should be made up of a minimum of three persons and consist of
persons having intimate knowledge and experience of the task or equipment to be used. There should
also be fully competent TRA Leader capable pf acting as facilitator and leader of the assessment
process.

The TRA Team Leader should make arrangements for the team to work as a group. It is important to
ensure, for example, that there is adequate space for examination of drawings and that sufficient time is
allocated to allow a rational decision to be reached.

It should not normally require more than a team of five persons to carry out an assessment.

The objective of a Level 2 Risk Assessment is to use local knowledge and specialist knowledge in a
structured way in order to achieve ALARP for any residual risk.

The Risk Assessment team should include :
The Area Authorities for the areas in which the task will carried out
The performing Authority
MANAGEMENT SYSTEM
Level : 2

Systems
Page : 40 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
The person who will undertake the task, if not Performing Authority
A specialist from inside or external to the operation as required
A HSE specialist who is responsible for ensuring that the Risk Assessment is carried out in
accordance with this procedure and for recording the results
Note: a L2RA Team requires at least three members

MANAGEMENT SYSTEM
Level : 2

Systems
Page : 41 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
6.0 THE STAGES OF RISK ASSESSMENT

6.1 Risk Assessment Flow Chart

L1 RA L2 RA

NO

NO NO

YES
YES

NO NO

YES YES

NO NO

YES

TASKIDENTIFIED COPYEXISTINGRAISAVAILABLE
DISCUSS TASK WITH TEAM LEADER
VISIT J OB SITE WITH LEADER IDENTIFY
ALL TASK HAZARDS
VISIT J OB SITE WITH L2 RA TEAM
IDENTITY ALL TASK HAZARD HAZARDS
USE HAZARD ID CHECKLIST COMPLETE THE
PERMIT HAZARD IDENTIFICATION AND
ENTER CONTROLS
RA FRONT SHEET COMPLETED, - TASK
DETAILS, TEAM DATE, etc.
RA EORK COMPLETED (OR REVIEWED) FOR SUB-
TASK, HAZARD, HAZARD EFFECT, EXISTING
CONTROLS, INITIAL RISK, CONTROL MEASURES,
RESPONSIBLE PERSONS, RESIDUAL RISK AND
ALARP STATUS
SUBMIT PERMIT TO AA FOR REVIEW AND
ARRANGE SITE VISIT IDENTIFYALL
PERMIT SUBMITEDFOROIM/SC
AUTHOROSATIONS
L2 RA
REQUIRED
IS ALL HAZARDING
IDENTIFIED AND
CONTROLLED, WITH
CORRECT LEVEL OF
RISK ASSESSMENT?
HAVE ALL HAZARD
HOW BEEN
IDENTIFIED?
PERMIT AND RA FRONT AND WORKSHEETS
SUBMITTED TO OIM/SC FOR
AUTHORISATION
PERMIT AND L1RA
APPROVED?
CONSIDE
R L2 RA
PERMIT AND L2RA
APPROVED?
AA ISSUES PERMIT AFTER FACE-TO-FACE DISCUSION WITH PA
AT TOOLBOXTALK, ANYMORE
HAZARDS ORCONTROLSIDENTIFIED?
IS TASK L1 OR L2
LEVEL
WORKCOMPLETEDASPERPTW&RA. WORKMUST STOPIFNEWCONDITIONSINTRODUCENEWHAZARDS,
ONCECOMPLETE, RASTORED(IFL2), ANDLESSONSLEARNEDREPERTEDTOAAANDTEAMLEADER
MANAGEMENT SYSTEM
Level : 2

Systems
Page : 42 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
6.2 Define the Task to be assessed

The task description detail must provide information on Who, What, Why, How and When the task will be
performed. As the task becomes more complex the level of detail and supportive documentation required
will increase. The level of information provided must take into account all people taking part in the task.

The Task Risk Assessment team must first ensure that they fully understand the task and its implications.
The overall task may need breaking into steps to facilitate carrying out the Task Risk Assessment. When
defining the task, think about such aspects as provided below:
Item Issues to Consider
1. System boundaries
What is the system being worked on? The extent of equipment
hardware, or software affected by the activity. Will the work be
carried out on isolated or un-isolated systems? Where are the
isolations, or interfaces with other systems?
2. Area or space boundaries
What area is affected by the activity?
What area could be could be affected in an accident?
3. Work activities included
What do you have to do? What might be the effect of doing it?
Think about isolations, inhibits, etc.
4. People Affected
People; in the team, working nearby, who might be passing by,
working on related activities and working on connected systems.
5. Time and duration of work
Will the task take one hour or multiple shifts?
Will the work be done during the day or night or both?
6. Tools and equipment to be
used
Does the activity require hand tools, power tools, ladders, lifting
equipment, etc? Task-specific PPE
7. Interfaces with adjacent work
fronts
How will your work affect other work going on at the same time?
How will other work affect you?

6.2.1 L1 TRA Specific

For a L1 Task Risk Assessment, the Task Description is recorded in box 1.

6.2.2 L2RA Specific

The L2 TRA Sheet should be completed as far as possible. The sections that should be completed are :

INSTALLATION / SITE
DEPARTEMENT/SYSTEM/LOCATION
complete for relevant option
PERMIT No if know at this point. If not,
complete when PTW is initiated
TASK DESCRIPTION be as explicit as possible,
for clarify and future use
DATE the date risk assessment took place
REFERANCES AND OTHER RELEVANT
INFORMATION enter all relevant information
TRA Ref No If registered, enter number here.
This will use when Risk Assessments are being
stored for future use. Site specific rules will dictate
how this is administrated
RISK ASSESSMENT TEAM enter names and
positions. No signatures required

MANAGEMENT SYSTEM
Level : 2

Systems
Page : 43 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012

This procedure is classified as uncontrolled when printed. Prior to reference of a printed copy, please check the uncontrolled version of the procedure on CNOOC SES Ltd. Database in order to
ensure that the relevant section is at the correct use number

SES Ltd.
L2RA Form:

MANAGEMENT SYSTEM
Level : 2

Systems
Page : 44 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
6.3 Identify the Hazards

A visit to the work site is MANDATORY in order to assess the layout of the area, site conditions and
adjacent plant and activities. Once the members are all familiar with the scope of the task to be carried
out, the team should list all the significant hazards in Column 1 on the TRA worksheet. For a L1 TRA
these are identified on the permit.

Checklists are supplied as a guide for reference purpose only. They should not be considered as being
comprehensive. A TRA team then discuss and brainstorm, with the team leader making sure that each
member is given adequate opportunity to express their views is vital to maintain a systematic approach to
using these checklists.

Hazard Checklist General
Failing from height Mental Stress Noise
Manual Handling Cold/Heat Vibration
Lifting operations Ionising Radiation Pressure
Failing object Inert gas Biological agents
Noise Chemical hazard Welding/cutting
Lighting Flammable gas Power tools
Fume/dust Flammable liquid Static Electricity
Weather Hand tools Work on safety systems
Collision Ignition Transport by see/air
Hand tools Fire Storage
Machinery Explosion Water jetting
Asphyxiation Structural damage Grit blasting
Electricity Personal injury Potential for ignition
Loss of containment from nearby
system
Barriers/access restrictions Loss of containment from system
being worked on

Hazard Checklist - Isolations
Type of valves and reliability H
2
S
Size of pipe work Wax
Integrity testing Sand
Reverse flow LSA Scale
Pressure build-up Hydrates
Migration from other systems Foaming
Inventory behind isolations Blockage
Duration of isolation Trapped pressure
Adequacy or pipe supports Nature of fluid
Fail position of ESD valves/blow down valves Temperature stability of system and adjacent
systems
Contingency in the event of failure of isolations Pressure stability of system and adjacent systems
Environmental impact of spills or emissions

Hazard Checklist Breaking Containment
Note : This checklist should be used in conjunction with Hazard Checklist Isolations
Electrical risk of using portable tools Chemical reactions with cleaning materials
Hazardous substances trapped around bends,
behind baffles, linings etc.
Flammable or toxic vapours arising from sludge in
vessel
Trapped pressure Chemical reactions with cleaning materials
Environment impact of spills or emissions Residual pressure
LSA Scale Residual heat
MANAGEMENT SYSTEM
Level : 2

Systems
Page : 45 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
Pyrophoric scale Liquids remaining from flushing
Asbestos gaskets Inert atmospheres
Chemical hazards

6.4 Identify the Hazard Effects

Note: recording of the Hazard effects is only recorded on L2RA. However the hazards effects should be
considered on any type of Risk Assessment.

The Team must then identify the Hazard Effects, which will be entered in Column 2 on the L2RA Work-
Sheet. Hazard effects are the worst credible possible outcome of the hazard. As guidance, the team can
refer to CNOOC SES Ltd. Risk Matrix in the appendices. The Team should be as explicit as possible in
the Hazard Effect details. It is important to consider property damage and environment impact and not
just personal injury.

Examples are shown below :

SUB-TASK ACTIVITY /
DESCRIBTION
HAZARD

EFFECT
Move temporary oil decanting
hoses in utilities area to new
storage cupboard
Slipping/tripping hazard
Dropped object
Sprain, graze
Broken foot bone
Decant methanol from temporary
skid on deck to new storage tank,
use of temporary hoses
Flammable (insible flame) and
Toxic by inhalation & swallowing
Burns
Fatality

Welding of new earthing point in
live operational area
Fire / explosion in hydrocarbon
area
Multi fatality
Long term plant shut down

The table below be used to determine the hazard effect, rated A F.

Hazard Checklist Vessel Entry
Residual gases/Vapours Noise, general
Sludge which may give rise to vapours/gases when
disturbed
Communication difficulties within the vessel or with
the standby man
LSA / NORM scale Adequacy of lighting within the vessel
Adequacy of ventilation Temperature effects
Need for air movers during entry Oxygen enrichment
Location of rescue kits Oxygen deficiency
Standby man communication with the CCR Frequency of gas testing
Ingress of cases/vapours from other nearby
activities or systems
Use of mechanical tools/power tools/electrical
equipment
Competency of stand man Disposal of vessel cleanings
Slip hazards within the vessel or at the point of
entry
Noise when within the vessel
Lonising radiation; nucleonic instrumentation Visibility within the vessel
Danger of failing into vessel boots or sumps
MANAGEMENT SYSTEM
Level : 2

Systems
Page : 46 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.

Potential
Severity
People
Assets/
Production
Environment Reputation

H
A
Z
A
R
D

E
F
F
E
C
T
F No Injury No damage No effect No Impact
E
Slight Injury
(FAC, MTC)
Slight Damage
(<$10,000 & no
disruption to
operation)
Slight Effect
(within fence, no
exceedance)
Slight Impact
( public
awareness)
D
Minor Injury
(Lt I 4 days or
less, RWC)
Minor Damage
(<$100,000 & brief
disruption)
Minor Effect
(temporary
Contamination /
single
exceedance)
Limited Impact
(local
public/media)
C
Major Injury
(LTI, PPD >4
days)
Local Damage
(<$500,000 &
partial shutdown)
Local Effect
(recoverable
environment
loss/repeated
exceedance)
Considerable
Impact
(region/state
public/medical)
B

Single
Fatality

Major Damage
(<$10,000,000 &
partial operation
loss
Major effect
(serve damage
recoverable /
extended
exceedance)
National Impact
(extensive
adverse media)
A Multiple Fatality
Extensi ve
Damage
(>$10,000,000 &
substantial
operation loss)
Massi ve Effect
(widespread,
chronic effects /
content high
exceedance)
International
Impact
(extensive
adverse media)

6.5 Existing Control Measures

Note : Existing Control measure are valid for both L1RA and L2 RA

When doing a risk assessment, it is normal to assume that no controls are in place. For many tasks,
some controls may be known before the risk assessment, and it is not realistic to think of the work being
done without these controls (e.g. a energy isolation). So, if experience or normal industry or trade
standards dictate, it may be valid to assume that certain controls are in place, provided that.
They are stated in Column 3 L2TRA Work-Sheet
They are demonstrated as part of the task definition (e.g. planned isolations must have appropriate
isolation certificate and marked-up as P&Ids); and
The controls are confirmed to be in place prior to the work being carried out

Controls that may be included in the definition of the task include :
Procedure, operating guides, etc. (supported by a valid risk assessment):
Energy isolations (including P&Ids)
Entry certificate
Scaffolding request; and
MANAGEMENT SYSTEM
Level : 2

Systems
Page : 47 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
Other risk assessment such as, manual handling, LSA/NORM scale

Work permit are used for recording the controls for individual work tasks, for controlling the interface
between work activities and to gain the correct approvals to start a job. However, a work permit itself is
not a control for an individual work task and should therefore nit be included the task definition.

6.6 Evaluate the Risk

Note : recording of the Risk value is only recorded on a L2 TRA. However the risk factors should be
discussed for a L1 TRA.
The worst credible severity of the hazard effects, should anything go wrong
The probability of the hazard being realised and resulting in the specified hazard effect

It is important to consider property damage and environment impact and not just personal injury.

Probability Guidelines (P) as per the Risk Matrix

The initial hazard effect and probability are defined based on the hazard and probability matrix shown
below.
The hazard effect (E) and probability (P) are then used to determine the risk , using the risk matrix
provided. The E, P & R values are written in column 4 of TRA worksheet.
The initial assessment of risk is to be determined on the basis that no specific control measure exists.
This is in order that the full risk potential may be recognised. The effectiveness of the assessment will
depend entirely on the teams ability to identify and evaluate all significant hazards associated with the
task.

The team should also consider the possible of the interaction of different hazards, including those related
to:
Location Attention should focus on the proximity to other plant or equipment, e.g., air intakes, shut
down systems, control points, vents, drains, sample points and ignition sources
Critical Activities critical activities included isolation, flushing inerting, confined space entry; work
at height, hot work, lifting, use of power tools, temporary power and air supplies, pressure testing,
radiography
Simultaneous Activities Simultaneous activities should be investigated both within the task itself
and with other unrelated activities talking place nearby

MANAGEMENT SYSTEM
Level : 2

Systems
Page : 48 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.

6.7 Determine the Additional Controls Required

Note : recording of the Additional Controls is only completed on a L2 TRA. Recording of Controls for a
TRA is in section 2 of the permit.

Once the initial Assessment of Risk is complete, the team must work systematically through the list of
Hazards and specify all the Additional Control Measures needed to mitigate each associated Risk. These
are recorded in column 5 of the TRA worksheet.

Note : Controls, which prevent the hazard being realised, should be used preference to controls that
reduce the effect of a hazard.

The hierarchy of controls is applied in the following order:
1. Eliminate
2. Reduce (substitution, Engineering, Segregation)
3. Manager or Administration (reduce exposure, Procedures)
4. PPE This must be the last control applied, remember that with PPE you are inside the
hazard zone

MANAGEMENT SYSTEM
Level : 2

Systems
Page : 49 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
Risk Hierarchy Example:

Examples
Elimination / Prohibition Use of mechanical device instead of manual
handling
Maximum stacking height
Unauthorised personnel
Prohibit smoking, jewellery, mobile phones
Substitution Solvent-based paint with water-based paint
Dusty powders with pastilles or pellets
Electric hand tools with compressed air
Reduction in size or weight of item
Engineering Controls Local exhaust ventilation for e.g. :
- Welding
- Soldering
- Grinding
Mechanical or electrical isolations
Lighting
Enclosure, e.g.:
- Sealable containers
- Noise enclosures for turbines or pumps
Segregation Barrier or guard
Separate storage areas
Physical isolations (spade, lock-off)
Access controls
Reduction in Personnel or Time Exposure J ob or shift rotation
Breaks
Hazardous work carried out at low activity
periods such as nights or weekends
Dispense dilute chemical
Increase airflow through work area
Automated feed process instead of manual
Personal Protective Equipment Gloves
Goggles
Face mask
Boots
Respiratory protective equipment
Chemical suits or gauntlets
Safety harness or inertia reel

Wherever possible, measure higher in the hierarchy should be used, providing they are reasonably
practicable, and emphasis should be placed upon control at source. A combination of measures will
usually be necessary in order to reduce the level of Risk As Low As Reasonably Practicable (ALARP). It
should also be considered that when specifying controls, any associated risk that they bring with them
needs to be assessed and controlled.

Typical Control Measures can be placed in the following categories

MANAGEMENT SYSTEM
Level : 2

Systems
Page : 50 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.

Control Measure Typical Examples
1. Physical Removal of fuses; insert spade or blank flange in pipe work; Lock off valve; Erect
mechanical barrier; Use looked enclosure; Keep people at a distance (E.g., signs,
warning tape); Eliminate or substitute toxic substances; Substitute noisy
machinery; Use mechanical handling
2. Procedural Test for pressure build-up or leaks; Examination of flushing fluid; Test for
hazardous chemicals in liquid, Solid or gaseous from; Procedure for control of
simultaneous or adjacent work; Prohibition of hot work; Equipment lock-out;
Develop contingency plan
3. Human Use of independent specialist personnel; Regular constant monitoring of the Task;
Use of method statements / detailed procedures; Clear introductions and warning
to workforce; Clear definitions of roles and responsibilities during the Task;
Adequate supervision; of roles and competency of personnel for the activity
4. Time Limit duration of the Task or time of day when the activity occurs; Use time-saving
measures such as hot-bolting, good work-site preparation and planning for the
movement of materials, tools
5.a.Contingency
(Control)
Emergency shutdown, deluge and blow-down systems, reduction of inventory
Control Measure Typical Examples
5.b.Contingency
(Mitigation)
Temporary refuge, emergency response, fire/ blast wall, water curtain, provision of
PPE, rescue equipment

6.8 Allocating Responsibilities for Control Actions

Note: Recording of the Responsibilities is completed on a L2 TRA Column 6. Responsibilities for control
actions are not recorded on a L1 TRA, but can be identified in a method statement or procedure.

Once the control measures have been identified, they should be allocated to an individual who is
responsible for that control. Example Gas testing would be the Authorised Gas Tester ( AGT ) Where
possible identify the role to a specific individual.

Column 6 is also for recording the Priority of the actions.

6.9 Residual Risk Assessment

Note: This is completed on a L2RA Column 7. Risk re-evaluations are nit recorded on a L1RA (permit).

The team must then re-evaluate the risk for all those hazards for which controls have been determined.
The new risk level should be determined and the team should consider whether the risk is now as low as
reasonably practicable (ALARP). Column 8 should identified with a Y to confirm the Risk Analysis
Team has agreed ALARP.

If the risk is not ALARP, the review team must decide what further safeguards need to be put in place.
The agreed residual HE x P and R are recorded in Column 7 of the TRA Worksheet.

The team must finally decide on the acceptability of the overall remaining risk for the task. Individual
hazards with a medium risk may be acceptable provided the overall risk of the task is considered low. If
the team decides that even with the controls in place, there are too many hazards, which still have a
medium risk, this must be recorded and the task in its present from must be abandoned.

MANAGEMENT SYSTEM
Level : 2

Systems
Page : 51 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
The higher the perceived risk for any particular hazard, the greater should be the number and/or quality
of independent controls, which the team specify as necessary. Consideration should also be given to the
possibility of cumulative effects from the interaction of several different hazards.

If the team considers that there are insufficient independent controls available, or that the controls are
likely to be ineffective against any particular risk, that risk must be judged to be unacceptable, and the
team leader must record this decision. The task must then be abandoned or referred to higher
management.

The team may also conclude that because of the complexity or degree of the risks involved, a more
detailed engineering assessment is needed. In this case, the task must be suspended until the
assessment is available.

As a final check, the team should ask itself the following questions about the proposed task :

Have all necessary control measures been fully and effectively identified?
Is there a need for engineering change to eliminate or reduce risk?
Is there a need to shutdown the plant or process?
Is the residual risk rating acceptable?

Only at this point can the team judge whether ALARP has been achieved.

6.10 Implementation of Control Measures

Note: recording of the control implementation is completed on a L2 TRA Column 5 implementation of
controls is not recorded on a L1 TRA.

There are two types of control measures that will be identified from either the level 1 or Level 2 TRA
process:
Perquisite control are which must be in place prior to the job starting
Supplementary controls are those which have to be applied during the job

The perquisite control measures must be implemented prior to the job going live. This includes any
training and/or special briefing of the PA and work party according to an agreed plan of action.

The supplementary controls, which will be applied during the job, must be understood fully PA and the
work party before work commences.

The Area Authority must satisfy himself that Competent Persons have been allocated the work; the
required controls are in place, any additional paperwork complete, and that all the individual risk are
reduced to ALARP.

6.11 Toolbox Talks

Note: Toolbox talks will be carried out for all tasks, whether they are L1RA or L2RA.

This is the process of transferring the methodology and controls to the people who carry out the work. It
is vital that all persons involved in working on a particular activity are fully aware of the details of the TRA
and al the hazards and controls associated with the job. Some of them may have been directly involved
in the TRA but others may not have been. This is particularly true of large jobs (e.g. construction) where
the PA who is probably the Construction Supervisor will have been directly involved in the TRA the rest of
the work party probably have not.

MANAGEMENT SYSTEM
Level : 2

Systems
Page : 52 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
A Toolbox talk is a vital part of the process to ensure that the TRA and its associated documents are
reviewed prior to the star of the job and are fully understood by all persons involved in the task.

Particular emphasis should be placed on those residual risks with a higher rating. It is also an opportunity
for those involved in the work to raise any further concerns about the job and to identify any hazards not
picked up in the TRA process.

Note : If anyone at this stage identifies some additional hazard that have not been properly assessed or
thinks the control measure are inadequate, then the job should not proceed until the TRA has been re-
evaluated and appropriate controls identified to ensure the job is ALARP.

Keys to success of this step are :
Communication of the, the hazards and what must be done to control them to every person
involved in the task
Language is critical, especially in complex technical tasks
The toolbox talk is held prior to work starting
Everyone understand everything discussed
Everyone has opportunity to voice concerns
Minutes of the toolbox talks must be recorded in PTW form.

Some example topics to cover as part of the Toolbox Talk are :

Issue Notes
The current weather
conditions
Weather
Sea State
The work party Competence and experience
Familiarity with the installation and the system
being worked on
Anyone fatigue or distracted
The worksite Access
Awkward working position
Temperature/humidity
Lighting
The current state of the
plant and equipment
Physical condition of plant and equipment
Current operation status of plant and
equipment
The current adjacent
work sites
Can this job affect other work sites
Can other work sites affects this job
The pre-defined
precautions and
controls
Are they as per written instructions, risk
assessments, PTW, etc.

7.0 MANAGEMENT OF RISK

7.1 Approval

On completion of any level2 Task Risk Assessment, it must be reviewed and signed by the Site
Controller (SC) before he approves the associated Permit(s) to work.

The level 2 TRA must be attached to the permit application for the job. Should the Site Controller (SC)
feel that the task presents risks beyond his level of accountability, he must refer to his Manager for
MANAGEMENT SYSTEM
Level : 2

Systems
Page : 53 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
guidance, and of necessary a request for a more sophisticated analysis of the risks and mitigation than
can be provided by using HSEGP.001 HSE Risk Management

7.2 Recording the Risk Assessment

Where a task is likely to be repeated, a record of the Risk Assessment should, at the permit issues
discretion, be retained for future reference. In any event Risk Assessments, which include hazards to the
health of those, undertaking the task must be attached to the permit(s) for the job and retained for 12
months.

Where a Risk Assessment from is being re-used, it must be fully reviewed and all new information clearly
identified.

MANAGEMENT SYSTEM
Level : 2

Systems
Page : 54 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
APPENDIX B: LOCKOUT / TAGOUT PERMIT REQUIREMENTS

1.0 PURPOSE

All employees will be protected from injuries caused by unexpected energizing or start up of machines
or equipment, or release of stored energy during service, repair, maintenance, operation, and associated
activities. This policy establishes minimum performance requirements for the control of such potentially
hazardous conditions. Locking out and tagging out energy isolating devices, and otherwise disabling
machines or equipment to prevent unexpected energizing, start-up or release of stored energy will
accomplish this.
Normal production operations are not covered by this policy. Repairing and/or maintaining equipment
during normal production operations are covered by this policy only if:
A. An employee is required to remove or bypass a guard or other safety device; or
B. An employee is required to place any part of his or her body into an area on a machine or piece
of equipment where work is actually performed upon the material being processed (point of
operation) or where an associated danger zone exists during a machine operating cycle.

2.0 RESPONSIBILITY
2.1. Supervi sor
2.1.1. Maintains awareness of all aspects of the lockout/tagout policy.
2.1.2 Ensures that all employees under their supervision understand the requirements for
compliance with this policy and are made aware of the lockout/tagout procedure and
are issued appropriate locks/tags.
2.1.3 Conducts a periodic inspection of the energy control procedure at least annually to
ensure that the procedure and the requirements of this policy are being followed.
2.1.4 Certifies that the periodic inspections have been performed.
2.2. Employee
2.2.1 Maintains awareness of all aspects of the lockout/tagout policy and complies with all
procedures.
2.3. QHSE
2.3.1 Provides necessary employee training for lockout/tagout procedures.
2.3.2 Conducts periodic inspections of work sites to ensure compliance with
lockout/tagout procedures.
2.3.3 Provides guidance regarding the applicability of the lockout/tagout policy.
2.3.4 Approves/disapproves exceptions of the lockout/tagout policy.
3.0 DEFINITIONS
Affected employee . An Employee whose job requires him to operate or use a machine or equipment
on which servicing is being performed under lockout or tagout, or whose job requires him to work in an
area in which such servicing or maintenance is being performed.
MANAGEMENT SYSTEM
Level : 2

Systems
Page : 55 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
Authorized employee . A person who locks out or tags out machines or equipment in order to perform
service or maintenance on that machine or equipment. An affected employee becomes an authorized
employee when that employees duties include performing servicing or maintenance covered under this
section.
Capable of being locked out . An energy isolating devise is capable of being locked out if it has a
hasp or other means of attachment to which or through which, a lock can be affixed, or has a locking
mechanism built into it.
Energized . Connected to an energy source or containing residual or stored energy.
Energy isolating device. A mechanical device that physically prevents the transmission or release of
energy, including but not limited to the following:
A manually operated electrical circuit breaker
A disconnect switch
A line valve
A block; and any similar device used to block or isolate energy
Note: Push buttons, selector switches and other control circuit control devices are NOT energy
isolating devices.
Energy Source . Any source of electrical, mechanical, hydraulic, pneumatic, chemical, thermal or
other energy.
Lockout . The placement of a lockout device on an energy isolating device, in accordance with the
established procedure, ensuring that the energy isolating device and the equipment being controlled
cannot be operated until the lockout device is removed.
Lockout device . A device that utilices positive means such as a lock, to hold an energy isolating
device in the safe position and prevent the energizing of a machine or equipment. Included are blank
flanges and bolted slip blinds.
Normal production operations . The utilization of a machine or equipment to perform its intended
production function.
Servicing and/or maintenance . Workplace activities such as constructing, installing, setting up,
adjusting, modifying, and maintaining and/or servicing machines or equipment. These activities include
lubrication, cleaning or unjamming of machines, making adjustments or tool changes, where the
employee may be exposed to the unexpected energization or start-up of the equipment or release of
hazardous energy.
Setting up . Any work performed to prepare a machine or equipment to perform its normal production
operation
Tagout . The placement of a tagout device on an energy isolating device, in accordance with an
established procedure, to indicate that the energy isolating device and equipment being controlled may
not be operated until the tagout device is removed.
MANAGEMENT SYSTEM
Level : 2

Systems
Page : 56 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
Tagout devi ce . A prominent warning device, such as a tag and a means of attachment, which can be
securely fastened to an energy isolating device in accordance to an established procedure, to indicate
that the energy isolating device and equipment being controlled may not be operated until the tagout
device is removed. All the tags shall be have a unique number.
4.0 ENERGY ISOLATION PERMIT FORM AND ISOLATION ENERGY LOG
Energy Isolation Permit Form and Energy Isolation Form as found below shall be used for LOTO system.
MANAGEMENT SYSTEM
Level : 2

Systems
Page : 57 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.

MANAGEMENT SYSTEM
Level : 2

Systems
Page : 58 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.

MANAGEMENT SYSTEM
Level : 2

Systems
Page : 59 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.

5.0 PROTECTIVE MATERIALS AND HARDWARE
5.1 Locks, tags, chains, wedges, key blocks, adapter pins, self-locking fasteners or other isolation
hardware shall be utilized for securing or blocking machines or equipment from energy sources.
5.2 Lock out and tag out devices shall be the only authorized device (s) used for lock/tag out of
energy devices and shall not be used for other purposes. Each lock out device shall be colour
coded to indicate type of trade or craft. Locks shall have two keys and no two key configurations
shall be the same.
5.3 Locks shall be colour coded in order to identify the trade of the person (s) working on a machine
or equipment. Within the CNOOC SES Ltd. organization, the following trades have been
assigned a corresponding identification color code for isolation locks:
Production Black
Mechanic Blue
Electrical / BU Yellow
Instruments Green
Power / PGF Red
5.4 Tag out devices, including their means of attachment, shall be substantial enough to prevent
inadvertent or accidental removal. Attachment means shall be a one-piece, nylon cable tie which
MANAGEMENT SYSTEM
Level : 2

Systems
Page : 60 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
shall be non-reusable, self- locking and non-releasable with a minimum unlocking strength of no
less than 50 pounds. Proper tags are shown in Appendix B.
5.5 If an energy isolating device is capable of being locked out, then locks shall be utilize unless, can
be demonstrated that the utilization of tags will provide a level of safety equivalent to that
obtained by using a lock.
5.6 When using tags instead of locks to isolate energy devices, additional means shall be taken to
provide full employee protection and the same level of safety as that obtained with locks.
5.7 These additional means shall includes measures such as the removal of an isolating circuit
element (fuse) blocking of a controlling switch, inadvertent energisation.
5.8 Tags are essentially warning devices affixed to energy isolation devices and do not provide the
physical restrain on those devices that is provided by a lock.
6.0 SHUTDOWN PROCEDURE
There are six essential steps to be followed as a procedure to shutdown a machine or equipment
previous to initiate any maintenance or repair activities. These steps are:
Preparation for Shutdown
Machine or Equipment Shutdown
Machine or Equipment Isolation
Application of Locks and Tags
Control
Verification of isolation

6.1 Preparation for Shutdown

An initial survey shall be made to determine which switches, valves, or other energy isolating devices
apply to the equipment being locked out. More than one energy source (electrical, mechanical, hydraulic,
pneumatic, chemical, thermal, or others) may be involved. The employees shall clear any questionable
identification of sources with their supervisors. Before lockout commences, job authorization should be
obtained from the supervisor. Notify all affected employees that a lock out is required and the
reason therefore.

6.2 Machine or Equipment Shutdown

If the equipment is operating, shut it down by the normal stopping procedure (depress stop button, open
toggle switch, etc.). Disconnect switches should never be pulled while under load, because of the
possibility of arcing or even explosion. Personnel knowledgeable of equipment operation should be
involved with shut down or re-start procedures.

6.3 Machine or Equipment Isolation

Isolate all energy sources (electrical, mechanical, pneumatic, hydraulic, thermal and others) from the
machine or equipment where maintenance or repairs are to commence. Forms of isolation could include
the removal of fuses, removal of valve handles, etc.

MANAGEMENT SYSTEM
Level : 2

Systems
Page : 61 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
6.4 Application of Locks and Tags

Lockout and tag the energy isolating device with an assigned individual lock, even though someone may
have locked the control before you. You will not be protected unless you put your own padlock on it. For
some equipment it may be necessary to construct attachments to which locks can be applied. An
example is a common hasp to cover an operating button. Tags shall be attached to the energy isolating
device(s) and to the normal operating control and shall be attached in such a manner as to preclude
operation.

6.5 Control

Stored energy, such as that in capacitors, springs, elevated machine members, rotating flywheels,
hydraulic systems, and air, gas, steam, or water pressure, etc., must also be dissipated, disconnected, or
restrained by methods such as grounding, repositioning, blocking, bleeding-down, etc. Pulling fuses is
not a substitute for locking out. A pulled fuse is no guarantee the circuit is dead, and even if it were dead,
theres nothing to stop someone from unthinkingly replacing the fuse.

6.6 Verification of Isolation

After ensuring that no personnel can be exposed and as a check on having disconnected the energy
sources, operate the push button or other normal operating controls to make certain the equipment will
not operate. If theres a possibility of re-accumulation of stored energy to a hazardous level, verification
of isolation shall be continued until the maintenance or repair is completed, or until the possibility of such
accumulation no longer exists.
CAUTION: Return operating controls to neutral position after the test. A check of system activation (e.g.
use of voltmeter for electrical circuits) should be performed to assure isolation. The equipment is now
locked out.

7.0 REMOVAL AND RE-ENERGIZING PROCEDURE

7.1 Restore

Before lockout or tagout devices are removed, re-store the work area to ensure that all tools and
nonessential items have been removed. Ensure that machine or equipment components are back in
place and secured. Re-install all safety features such as equipment safe guards. Check work area to
ensure that all employees are in the clear.

7.2 Inform

Notify affected employees that lockout/tagout devices will be removed. Make sure all employees are in
safe positions.

7.3 Remove all Locks and Tags

Each lockout/Tagout devices shall be removed from each energy isolating device by the employee who
applied the device.

After all Lockout/Tagout devices have been removed, notify all affected personnel that the devices have
been removed.

Re-start equipment, the energy isolating devices may be opened or closed, i.e., circuit breakers, to
restore energy to equipment. Make sure to follow the appropriate starting up procedures of each
equipment.

MANAGEMENT SYSTEM
Level : 2

Systems
Page : 62 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
8.0 LOCKOUT/TAGOUT INTERRUPTION (TESTING OF ENERGIZED EQUIPMENT)

In situations where the energy isolating device(s) is locked/tagged and there is a need for testing or
positioning of the equipment/process, the following sequence shall apply:

1. Clear equipment/process of tools and materials.

2. Clear personnel.

3. Clear the control of locks/tags according to established procedure.

4. Proceed with test, etc.

5. De-energize all systems and re-lock/re-tag the controls to continue the work.

9.0 PROCEDURE INVOLVING MORE THAN ONE PERSON

In the preceding steps, if more than one individual is required to lock out equipment, each shall place a
personal lock and tag on the group lockout device when he/she begins work, and shall remove those
devices when he/she stops working on the machine or equipment. The supervisor, with the knowledge of
the crew, may lock out equipment for the whole crew. In such cases, it shall be the responsibility of the
supervisor to carry out all steps of the lockout procedure and inform the crew when it is safe to work on
the equipment. Additionally, the supervisor shall not remove a crew lock until it has been verified that all
individuals are clear.

10.0 SHIFT CHANGE COORDINATION

Supervisors shall ensure the continuity of lockout/tagout protection during shift or personnel changes.
Each worker shall be responsible for removing his own padlock and tag at the completion of his shift. If
work is to cease until the following day the supervisor shall place his personal padlock and tag on the
equipment and the workers shall remove their padlocks and tags. When work resumes the workers shall
affix his personal lock and tag to the equipment and the supervisor shall remove his lock and tag.

11.0 CONDITIONS FOR PADLOCK REMOVAL BY THE HOP OR SUPERVISOR

Lockout/tag out devices shall be removed only by the owner of the device except in the following
situations:

1. Owner incapacity by illness, etc.
2. Owner no longer works for the Company
3. Owner is on flex leave or leave and cannot be reached by telephone. If the owner is reached and
the situation warrants then he/she will be required to come to work and remove the padlock.

If the HOP or supervisor determines that circumstances warrant the removal of a lockout/tagout device,
every effort must be made to contact the owner of the device. After the above conditions have been met
the HOP or supervisor, may remove the device in the presence of a HSE Supervisor.

A padlock shall not be cut but may be removed by changing the core of the lock.

MANAGEMENT SYSTEM
Level : 2

Systems
Page : 63 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
12.0 LOTO FLOW CHART

MANAGEMENT SYSTEM
Level : 2

Systems
Page : 64 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
MANAGEMENT SYSTEM
Level : 2

Systems
Page : 65 of 109

Status New Revision 1
Revision 0 1
Effective Date 01/05/2010 13/06/2012

SES Ltd.
APPENDIX C: HOT WORK PERMIT REQUIREMENT

1.0 PURPOSE

This procedure is aimed at obtaining compliance with CNOOC SES Ltd and International Standards for
the control and issue of Hot Work permits and shall be implemented in conjunction with Indonesian
statutory regulations such as SNI No.13-6910-2002 and K3LL and appropriate QHSE procedures such
as 3001-P-06-I-001-G-08/26, Integral Protection Requirements. It is intended as a supplement and not a
replacement to such regulations, standards and procedures. The Permit and related forms are contained
in HSEF.030.rev 01, HOT WORK PERMIT, and HIDE/HABITAT SAFETY CHECKLIST.

2.0 SCOPE / APPLICATION

It applies to the issue of all Hot Work permits at COMPANY locations and is intended to obtain a
uniformity of control and issue so as to identify where improvements are required. Its principals includes
requirements for CONTRACTORS and their SUB-CONTRACTORS or AGENTS (see Integral
Document, section A) where an absence of their own procedure could compromise safety. Individual
permit types are covered separately.

3.0 DEFINITION

A Hot Work Permit is one, which controls each work area that can produce electric arc, fire sparks or
open fire either performed onshore or offshore, as in the following works:
a) Welding
b) Acetylene Torch
c) Open fire.
d) Use of Electrical Equipment
e) Grinding
f) Soldering equipment
g) Install grounding system by cad weld.

Hot Work Area Classifications

Classification of hot work areas is divided into several parts as follows:

3.1 Hazardous Areas

A Hazardous Area is classified as any area in which either under normal conditions (Class 1 - Division 1
API RP 500) or abnormal conditions (Class 1 Division 2 API RP 500) such as hydrocarbon leakage,
containing gas and vapour in a sufficient amount that can cause an explosion, such as the following;
a) Drilling Rig and Work Over Barge during activity on the platform.
b) Installations with well head and production process
c) Oil Tanker
d) Hazardous areas on Pabelokan Island covering the following areas;
- Gas Plant
- Gas Electric Generator
- Fuel Storage Bunker and Depot
- Flammable Chemical Storage Area
- Paint Storage area
- Sludge Storage/Pressurised Vessels.

MANAGEMENT SYSTEM
Level : 2

Systems
Page : 66 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
3.2 Restricted Areas

Restricted Area is any area outside the Hazardous area covering a boundary of 50 meters.

3.3 Non-Hazardous Areas

Non-Hazardous Area is any area outside the 50 meters Restricted or Hazardous Areas.

Classification of Hot Operational areas is needed to render an efficient and effective use of
manpower by prioritising work on safety factors.

An employee includes all workers, supervisors, managers, executives and consultants of the Company
its Contractors or his Sub-Contractors and Agents.

A Contractor is taken to include his Sub-Contractors and Agents.

A Competent person is one who has appropriate practical and theoretical knowledge and experience of
operations and procedures and is able to examine / inspect the equipment and work area so as to detect
defects or weaknesses and to assess their importance in relation to the safety of continued operations.

4.0 RESPONSIBILITIES

4.1 CNOOC SES Ltd Senior Management / Site Controllers is responsible for ensuring that this
procedure is uniformly applied and that all Permits to Work are authorised and controlled.

4.2 It is the responsibility of each employee to follow this procedure and any guidance notes
developed to compliment it.

4.3 It is the responsibility of Area Authority to ensure that all Permits to Work are current and valid
and that a copy is prominently displayed at the worksite.

4.4 Department Managers and Company Senior Representative at locations are responsible for
the Health and Safety of themselves and their subordinates and contractors and for ensuring
these requirements are enforced. They are further responsible for ensuring the competency of
Competent persons under their control and for ensuring that only competent persons issue such
permits.

4.5 It is the responsibility of the CONTRACTOR to ensure that, he, his Sub-Contractors or Agents
comply with the requirements herein and to comply with any Indonesian legislative requirements.

5.0 PROCEDURE

5.1 General Requirements

5.1.1 Work Permits (Hot Work), max validity 24 hours / two 12 hour shifts

5.1.1.1 Written permits to work are reserved for when the potential for risk is high, where the
precautions needed are complicated and where the activities of separate groups have to
be coordinated so as to ensure safety.

5.1.1.2 Before starting work, the Area Authority shall ensure that the workplace and the
equipment receive an inspection to be assured that the work shall be executed under
safe conditions. This shall be documented and reported to the field HSE Supervisor. An
MANAGEMENT SYSTEM
Level : 2

Systems
Page : 67 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
inspection is also required on completion of the work to establish that the site has been
returned to its safe working condition. Further documented inspections shall be required
if there is a change in the circumstances of the work-site or scope of the job during its
execution, and also when it is necessary to extend or re-issue a permit.

5.1.1.3 The definitions and concepts related to: the certification, of hot work and the duration of
permits validity, as well as other related to these aspects, can be found in the front of this
procedure.

5.1.1.4 The Area Authority will assess the risks involved and control measures required for the
job to be done and will then complete and sign the permit authorizing the work to
proceed under controlled conditions as specified on the permit. No one shall be allowed
to authorize a permit for work they will perform themselves or be directly involved in.

5.1.1.5 The amount of permits to work allowed to be in operation at any one time at a location
shall be established by the locations Area Authority or company representative based on
the complexity of the tasks, safety equipment to hand and the assessed risks involved in
each case.

5.1.1.6 No permit may be issued until such a time as a risk assessment has been completed
and a Safe Operating Procedure or Safe System of Work established and its principles
introduced and training documented.

5.1.1.7 Every equipment operated by using battery such as camera on hazardous area shall use
Hot Work Permit with TRA Level 1.

5.1.2 Competence

5.1.2.1 To achieve the most efficient operational activity while paying attention to safety matters,
CNOOC SES Ltd appointed Senior Supervisors either at Pabelokan, on Production
Platforms, Processing Platforms, Storage Tankers, Barge and Drilling Rigs, or other
facilities can issue Work Permits. Work Permits can be given based on the Supervisors
decision as an effort to minimize hazard to the workers, environments and/or equipment.

5.1.2.2 Depending on the location of the work the Head of Operations of that area must counter
sign all Hot Work Permits.
a) Head of Pabelokan
b) Head of Production South
c) Head of Production Central
d) Head of Production North
e) Head of Maintenance
f) Head of Power
g) Head of Gas Plant
h) Marine Superintendent
i) CNOOC Drilling Barge/Rig Company Rep.
j) CNOOC Construction Barge Company Rep.

5.2 Process

5.2.1 Before any hot work is started a work permit (CNOOC SES Ltd Form HSEF.030.001)
shall be obtained and counter signed by the authorized personnel as contained in
5.1.2.2 above in compliance with the following stipulations:
MANAGEMENT SYSTEM
Level : 2

Systems
Page : 68 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
a) The authorized person shall ensure that the work procedures and part of the permit form
be filled completely. He shall complete details on the Hot Work permit and confirm
availability of a safe operation area and facility for Hot Work equipment.
b) Survey to ensure a safe condition shall be performed using a calibrated gas detector by
a qualified and experienced Gas Tester. The maximum allowed gas concentration at
any time will be 20% LEL.
c) When conditions in the work place are stated as safe, the Area Authority can issue the
permit. The Hot Work Permit is valid after signing by an area Authority appointed by
CNOOC SES Ltd as in the responsibility matrix.
d) CNOOC SES Ltd Form HSEF.030.001, form shall be filled in 3 (three) copies, with the
following distribution:
Original : Worksite ( Performing Authority)
First Copy : Area Authority
Second Copy : Permit Office
e) Estimated finishing time to complete the work shall be stated on the permit form,
however a Permit to Work is only valid for that shift, at the end of the shift it must be
revalidated for the next shift this can only happen once.
f) When the hot work is not completed by the expiry time of the permit, the authorized
person shall issue a new permit after ensuring that all stages as listed previous are
repeated.
g) Every hot work must be controlled by one safety personnel and each Safety personnel is
not allowed to control more than one hot work at the same time.
h) The presence of supervisor for the duration of the work is required. If a supervisor leaves
the work area, the work must be suspended until proper supervision is available and the
area is re-inspected.

5.2.2 Project Leaders

The Project leader is the party who issues the Work Order (WO) for implementing hot work.
He is in charge of:
a) Preparing work procedures in the implementation of the Hot Work.
b) Preparing Hot Work Permit (CNOOC SES Ltd. Form HSEF.030.ver 001).
c) Obtaining permits from all parties/personnel concerned.
d) Be present in the operation area at the onset of hot work.
e) Ensure and guarantee a safe and clean work area before leaving.

5.2.3 Area Authority

Area Authority shall:

a) Inspects the work place/area and surrounding area in a radius of 50 meters, including
other areas for the possible occurrence of sparks or hot exposure.
b) Ensures all equipment and the area have been prepared accordingly and is ready for
the implementation of safe hot work.
MANAGEMENT SYSTEM
Level : 2

Systems
Page : 69 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
c) Together with firewatcher performs inspection with gas detector equipment to trace the
possibility of gas leakage and perform testing and inspection on conditions of
flammable/explosive materials or other hazards at periods throughout the life of the
permit. The maximum allowed gas concentration at any time will be 20% LEL.
d) Ensures that pipes and equipment to be moved or stored have been identified and
marked accordingly.
e) Inspects the precise condition and placement of each fire extinguisher and other safety
equipment.
f) Shows the hot work attendant the nearest communication and safety equipment.
g) Rechecks the check-list on the Hot Work Permit Form.
h) Ensures that the Hot Work Permit is valid for the operation area, and is signed off by an
authorized person, and copies are distributed in accordance with CNOOC SES Ltd
Form HSEF.030.ver 001
i) Ensures that all production equipment is in good condition. Periodically, performs gas
inspection using gas detector equipment to anticipate the possibility of hazardous gas
leakage.
j) Discontinues work when changing to unsafe condition such as when an alarm sounds
or an emergency is announced via the Public address system.
k) Whenever work is discontinued, the operation area shall be rechecked before work may
resume.
5.2.4 Site Controller

Site Controller shall:
a) Ensures that the operation facilities will not be interrupted by the hot work activity.
b) Whenever shut down of the operation facilities is necessary during the implementation
of the hot work, the supervisor shall get permission from his superior.
c) Ensures all parties in the Hot Work permit process know and perform the work/duties
accordingly. After inspecting the workplace, he shall sign the Hot Work permit, thereby
authorising the Permit to Work (CNOOC SES Ltd Form HSEF.030.ver 001).
5.2.5 Hot Work Performing Authority

Hot Work Performing Authority shall:

a) Read, understand and follow the requirements as recorded in the work order.

b) Keep the Hot Work permit in the operation area until completion of the work.

c) Inform other personnel about every specific preventive measure or requirements
related to an ongoing work.

d) Know the nearest telephone or radio communication and able to use it in case of
emergency.

e) Understand and know how to use fire extinguishers, first aid kits, and the safest
methods to escape in case of an emergency.

MANAGEMENT SYSTEM
Level : 2

Systems
Page : 70 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
f) Prevent and minimize fire sparks in their work area during welding, grinding, or other
electrical works with the potential of causing fire.
g) Always alert to critical condition in their operation area, and be prepared to discontinue
work when condition changed unsafe. On continuing the work approval have to be
given by the area production operator and fire-watcher.

h) Inform the permit office about every Hot Work Permit which is still in effect.

i) Immediately check the location/operation area after completion of the work to ensure
the area is returned to a safe condition.

5.2.6 Fire Watch Attendant

The Fire Watch Attendant shall:

a) Understand and adhere to a list of specific requirements as described in the Hot Work
permit.

b) Check the operation area and the surrounding area within a radius of 10 meters of the
operation area, including area beyond the separating wall for any possibility of hot
exposure or fire sparks which may cause fire.

c) Trained in the using the available fire extinguisher and understand how to activate the
existing alarm system.

d) Fire Watch must also be trained on the use of gas detectors.

e) Inform the hot work attendant in case of sparks possibly causing fire and anticipate the
situation to avoid fire or explosion happening.

f) Sound the alarm when help is needed and extinguish any small fire caused by sparks.

g) Shall always be present in the operation area from the start of the Hot Work activity up to
30 minutes after the work is finished to ensure the area can be left without danger.

h) The number of Fire Watch Attendant shall be in accordance with the type of work.

5.2.7 Safety Supervisor

The Safety Supervisor:

a) Shall perform a separate evaluation of the working area and shall ensure that all permit
requirements are being complied with in regards to welding, firing, grinding on any pipe
or operating equipment and Hot Work in confined vessels/space. In the implementation
of this type of Hot Work detailed work procedure and agreement are required.

b) Discuss the risks associated with the work with personnel the involved in the work.

c) Give guidance to the Fire Watch attendant and Production operator regarding safety
precautions or actions prior to carrying out Hot Work. Where Hot Work on critical
equipment is to take place, the field Safety Supervisor shall be available at the
location.

MANAGEMENT SYSTEM
Level : 2

Systems
Page : 71 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
5.3 Audit

5.3.1 This procedure and its associated forms, reporting and any guidance notes and the
implementation of improvements identified by investigation, shall be subject to regular
audit to establish and ensure its effectiveness.

6.0 REFERENCES

3001-P-06-I-001-G-08/26, Integral Protection Requirements.
HSEF.030.ver 001, HOT WORK PERMIT
PLANNED ISOLATION SHEET FORM
HIDE/HABITAT SAFETY CHECKLIST FORM
SNI No.13-6910-2002, Standard for safe Conduct of Onshore and Offshore Drilling Operations in
Indonesia.
OSHA Regulations (Standards for Atmospheric Testing)-1910.146 Appendix B.

MANAGEMENT SYSTEM
Level : 2

Systems
Page : 72 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
APPENDIX D: HOT WORK PERMIT FORM/PLANNED ISOLATION SHEET/HABITAT CHECKLIST

HOT WORK PERMIT FORM / FORMULIR IJIN KERJA PANAS
MANAGEMENT SYSTEM
Level : 2

Systems
Page : 73 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
HOT WORK PLANNED ISOLATION SHEET / LEMBAR RENCANA ISOLASI KERJA PANAS

DETAILS OF
ISOLATIONS
URAIAN
PENGISOLASIAN
STATUS
TAG NO.
NOMOR TAG
ISOLATED BY
ISOLASI OLEH
DE-ISOLATED BY
DE-ISOLASI OLEH

MANAGEMENT SYSTEM
Level : 2

Systems
Page : 74 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
HABITAT SAFETY CHECKLISTS / DAFTAR PERIKSA KESELAMATAN KERJA DI DAERAH
PENGELASAN
PERINTAH-PERINTAH / INSTRUCTIONS:

PILIH ITEM-ITEM YG AKAN DITERAPKAN DENGAN MEMBERI TANDA X PADA KOTAK Y ATAU T.
SELECT ITEMS APPLICABLE BY PLACING A X IN THE Y OR N CROSS-BOX
AJUKAN UNTUK DAPAT PERSETUJUAN DARI PENANGGUNG JAWAB LAPANGAN / SUPERVISOR
PADA IJIN KERJA PANAS.
SUBMIT FOR APPROVAL TO THE AREA AUTHORITY / SUPERVISOR WITH THE HOT WORK PERMIT.
DAFTAR PERIKSA BERLAKU SELAMA PEKERJAAN BERHUBUNGAN DENGAN IJIN KERJA PANAS.
CHECKLIST IS VALID FOR DURATION OF THE RELEVANT HOT WORK PERMIT.
PENANGGUNG JAWAB PELAKSANA HARUS MELAKSANAKAN SEMUA ITEM YG SUDAH
DITENTUKAN SEBELUM IJIN KERJA DIKELUARKAN.
THE PERFORMING AUTHORITY SHALL INITIAL ALL ITEMS SPECIFIED PRIOR TO PERMIT ISSUE.
LAMPIRKAN SALINAN DARI SEMUA DAFTAR PERIKSA PADA PEKERJAAN YANG BERHUBUNGAN
DENGAN IJIN KERJA PANAS.
ATTACH COPIES OF ALL CHECKLISTS TO COPIES OF THE RELEVANT HOT WORK PERMIT.
HAL-HAL YANG AKAN DITERAPKAN TERUTAMA SEBELUM PELAKSANAAN PEKERJAAN
ITEMS TO BE ACTIONED PRIOR TO COMMENCEMENT OF WORK
Y T/N PARAF/INITIAL

GAS DIUKUR DI LUAR DAERAH PENGELASAN DAN DI TEMPAT UDARA MASUK.
GAS MONITOR OUTSIDE HABITAT AND AT AIR INTAKE.

FIRE HOSE BERISI DN BERTEKANAN.
FIRE HOSE RUN AND PRESSURISED.

ATUR DAERAH KERJA ALAT MONITOR GAS APABILA PENUNJUKAN PENGUKURAN
MELEBIHI BATAS TERTINGGI.
PORTABLE MONITORS SET UP IF INSUFFICIENT DELUGE COVERAGE.

ALAT PEMADAM API RINGAN ADA DI DALAM & DI LUAR (TEPUNG KIMIA KERING).
PORTABLE FIRE EXTINGUISHERS INSIDE AND OUT (DRY CHEM).

SELIMUT API ADA DI SEKITAR DAERAH PENGELASAN.
FIRE BLANKETS AROUND WELD ZONE.

MESIN LAS BERADA DI DALAM DAERAH PENGELASAN.
WELDING MACHINE SITED HABITAT

TRANSFORMER PENURUN TEGANGAN BERADA DI DALAM DAERAH PENGELASAN.
STEP DOWN TRANSFORMER SITED INSIDE HABITAT

KABEL-KABEL PERLENGKAPAN LAS TIDAK TERDAPAT SAMBUNGAN-SAMBUNGAN.
WELDING CABLES CONTINOUOUS RUN (NO CONNECTIONS).

PERKAKAS & PERALATAN KERJA BERADA DI DAERAH KERJA & SUDAH DIPERIKSA.
WORK TOOLS AND EQUIPMENT AT SITE ASSEMBLED AND CHECKED.

HANYA MENGGUNAKAN LAMPU TEGANGAN RENDAH.
LOW VOLTAGE LIGHTING ONLY.

GROUNDING MESIN LAS DIIKAT PADA POTONGAN LOGAM DI DLM DAERAH
PENGELASAN.
WELDING CABLE EARHT CLAMP ATTACHED TO WORK PIECE HABITAT.

RUTE UNTUK MENYELAMATKAN DIRI SUDAH DIKENALI.
ESCAPE ROUTES IDENTIFIED.

DI TEMPAT KERJA, DAERAH PENGELASAN DIJAGA DENGAN BAIK.
HABITAT WELL SECURED AT WORKSITE.

PERIKSA APAKAH TERDAPAT PERTENTANGAN DENGAN PEKERJAAN LAIN.
CHECK FOR CLASH WITH OTHER WORK.

MANAGEMENT SYSTEM
Level : 2

Systems
Page : 75 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.

SALURAN PEMBUANGAN AIR KOTOR, PEMBUANGAN LIMBAH, VENTILASI DITUTUP.
SEWERS, DRAINS AND VENTS CLOSED.

HAL-HAL YANG HARUS DITAATI DENGAN BENAR SELAMA PELAKSANAAN PEKERJAAN
ITEMS TO BE STRICTLY ADHERED TO FOR DURATION OF WORK
Y T/N
SIGN/PARAF

BERHENTI BEKERJA APABILA ADA PERUBAHAN KONDISI ATAU BAHAYA YANG LAIN
STOP WORK IN CASES OF CHANGED CONDITIONS OR OTHER HAZARDS
BERITAHU RUANG KONTROL SEBELUMPELAKSANAAN KERJA PANAS
NOTIFY CONTROL ROOMBEFORE COMMENCEMENT OF HOT WORK
PENJAGA DI LUAR HARUS SELALU BERHUBUNGAN DENGAN RUANG KONTROL DENGAN MENGGUNAKAN
RADIO
ASSISTANT OUTSIDE WITH RADIO - IN RADIO CONTACT WITH CONTROL ROOM
KURUNG SEMUA PERCIKAN API & KILAT PENGELASAN DALAMDAERAH PENGELASAN
CONTAIN ALL SPARKS / WELD FLASHES WITHIN THE HABITAT
BERITAHU RUANG KONTROL SETELAH KERJA PANAS SELESAI
NOTIFY CONTROL ROOMON COMPLETION OF HOT WORK
TERANGI DAERAH KERJA DAN MATIKAN SUMBER GAS
LIGHT UP AND EXTINGUISH GAS TORCHES INSIDE

MANAGEMENT SYSTEM
Level : 2

Systems
Page : 76 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
APPENDIX E: POLICY FOR WELDING OFFSHORE

As a measure to reduce unnecessary welding on offshore installations, the following must be complied
with before recommending a welding job:

1. Supervisors should consider alternative solutions such as pre-fabrication, the use of bolts or clamps,
the use of different materials, changes in designs, etc. as first options.

2. If welding is deemed to be absolutely necessary in critical area and/or equipment, it will have to be
justified as the only option for the job, the person in charge of the installation (Supervisors, Heads of
Operations etc) shall get approval from Manager or VP Exploitation of his intentions before
authorizing a Hot Work Permit for an offshore welding.

3. In cases when welding may be the only option in a classified hazardous area; the following must be
complied with, no exceptions:

3.1 The person in charge of the installation will select a TRA Team leader to lead a team from all
concerned parties to conduct a TRA Level 2 a minimum of three persons required. This will be to
determine the level of risk (High, Medium, Low) and insure that any risks noted can be properly
controlled.
3.2 A written recommendation from the evaluation team should be presented to the concerned
Managers and Senior Heads including a copy of the Task Risk Assessment prior commencing
the job, if time allows.
3.3 In high risk situations, a partial or total shut down should be considered as a condition before
starting the work.
3.4 Hot work conducted at Class 1 Div 1 and Class 1 Div 2 area (refer to API RP 500) must be
approved by Department Manager and Managers involved if the hot work is executed in SIMOP.
3.5 In addition for point 3.4 where hot work conducted in very critical area; FSO, Engine Room, Gas
Well Head, and Confined Space, the permit must be approved by VP Exploitation.
3.6 Hot Work Permit must be filled out daily in accordance with Permit to Work Procedures. The
Permit validity is only one day. Every time there is a crew change, a new permit must be opened
prior to reinitiating work. Supervisors must enter time of inspection and sign on Work Permit.
3.7 A daily safety meeting must be conducted with all concerned personnel where both J SA and
SOP must be reviewed in detail.
3.8 The presence of a supervisor for the duration of the work is required. If a supervisor leaves the
work area, the work must be suspended until proper supervision is available and the area is re-
inspected. The responsible supervisors should be: Production, Maintenance or Safety
supervisors from the Production end, Drilling & Work over supervisors from Drilling and
Constructions and Electrical Supervisors from PGF.
3.9 A fire watch must be ready and standing by at all times.
3.10 If any deviations from the approved permit are noted or if any unsafe conditions develop at any
time, the work will be stopped immediately and the permit becomes invalid until such time those
corrections are implemented and a new permit issued. Any person has the authority to stop work
in progress if unsafe conditions are noted.

No welding will be permitted within 50 meters of a classified area of a production location and very critical
areas; FSO, Engine Room, Gas Well Head, and Confined Space as mentioned in point 3.5 unless items
3.1 to 3.10 are fully complied.
MANAGEMENT SYSTEM
Level : 2

Systems
Page : 77 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
APPENDIX F: COLD WORK PERMIT REQUIREMENTS

1.0 PURPOSE

the control and issue of Cold Work permits and shall be implemented in conjunction with Indonesian
statutory regulations such as SNI No.13-6910-2002 and K3LL and appropriate QHSE procedures such
as 3001-P-06-I-001-G-08/26, Integral Protection Requirements. It is intended as a supplement and not a
replacement to such regulations, standards and procedures.

2.0 APPLICATION/SCOPE

It applies to the issue of all Cold Work Permits at CNOOC SES Ltd (COMPANY) locations and is
intended to obtain a uniformity of control and issue so as to identify where improvements are required.
Its principals includes requirements for CONTRACTORS and their SUB-CONTRACTORS or AGENTS
(see Integral Document, section A) where an absence of their own procedure could compromise safety.
Individual permit types are covered separately.

3.0 DEFINITION

Cold Work Permits are required for any and all non-routine work.
Examples of non-routine work are listed below:
Work below the cellar deck, outside walkways such as chipping, painting, or other non-routine work.
Work over open sea such as fitting lamp bulbs or aviation lights that can cause workers to fall into the
sea.
Work from a suspended position on a platform or barge such as installing electric wires or other work
supporting production.
Work on the flare boom.
Radiography.
Removing safety valves.
Performing hydrostatic test for pipes / riser.
Performing NDT inspection for production pipes.
Performing platform facility inspection.

4.0 RESPONSIBILITY

4.1 CNOOC SES Ltd Senior Management / Site Controllers is responsible for ensuring that this
procedure is uniformly applied and that all Permits to Work are authorised and controlled.

4.2 It is the responsibility of each employee to follow this procedure and any guidance notes
developed to compliment it.

4.3 It is the responsibility of Area Authority and Safety Inspectors (COMPANY and
CONTRACTORS) to ensure that all Permits to Work are current and valid and that a copy is
prominently displayed at the worksite.

4.4 Department Managers and Company Senior Representati ve at locations are responsible for
the Health and Safety of themselves and their subordinates and contractors and for ensuring
these requirements are enforced. They are further responsible for ensuring the competency of
Competent persons under their control and for ensuring that only competent persons issue such
permits.

4.5 It is the responsibility of the CONTRACTOR to ensure that, he, his Sub-Contractors or Agents
comply with the requirements herein and to comply with any Indonesian legislative requirements.
MANAGEMENT SYSTEM
Level : 2

Systems
Page : 78 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
5.0 GENERAL REQUIREMENTS

5.1 Permit Issue (Form HSEF.031.ver 01)

Cold work permit shall be issued by :

The Area Authority working on the platform where the cold work is to be performed.
The Permit can only be issued to the Performing Authorities after receiving confirmation on the
availability of appropriate safety equipment.

When the work permit involves the use of toxic/noxious substances such as certain chemical
substances, additional protective measures shall be provided such as special equipment,
protective clothing, mask, or flushing procedures to perform the work safely.

6.0 PROCEDURE

6.1 Initial Preparation

a). On duty Area Authority will issue a Cold Work permit after ensuring that the work
description and safety equipment are appropriate to perform the work safely.

b). Prior to starting, the Performing Authority involved shall conduct a discussion with Area
Authority who will take precautionary measures in case of an abnormal condition.

c). After fulfilling the requirements Area Authority can issue a permit.

d). Upon the work completion Area Authority will recheck cleanliness of Cold Work area,
such as dirty rags, used hand cloves, etc. which can cause danger and pollution.

6.2 Work Completion

Immediately upon completion of the work or when the cold work permit expires, the Area
Authority on duty and the parties concerned shall check each location.

When the Area Authority is satisfied that the work has been completed and the work site has
been left in a safe, clean and tidy state, the Cold Work permit form can be completed and signed
off.

The Area Authority will report to Site Controller that the work in their area has been completed
safely and the area is clean.

The Area Authority shall check the area where the work was performed to ensure it has been
returned to a safe and clean condition.

When oil leaks or pollution, gas leakage or any alarm sounds all work shall be discontinued
immediately. Permit shall be revalidated by the Area Authority following any alarm, prior to re-
commencement of work.

Every worker is responsible for performing their work safely and to reduce the risks to himself,
others, the environment or company assets.
Upon completion, respective Area Authorities shall document all reports.

MANAGEMENT SYSTEM
Level : 2

Systems
Page : 79 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
6.3 Cancellation of Cold Work Permit

The Cancellation of a Cold Work Permit can be performed by the Area Authority, Head of
Production or the Safety Representative when;

There has been an alarm on the facility and the cause has not been adequately identified
There has been a serious gas leak, and the vapours are in such a concentration as to
cause harm to the workers.
There is a visible lack of safety equipment.
There is no clear work procedure
There is an indication that current work procedure may cause damage to equipment, the
environment or the installation.
Contractor who is carrying out the work are not adhering to the Company safety
regulations.
Contractor who is carrying out the work are not trained, thus endangering the safety of
equipment, fellow workers or the environment.

MANAGEMENT SYSTEM
Level : 2

Systems
Page : 80 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
APPENDIX G: COLD WORK PERMIT FORM / PLANNED ISOLATION SHEET

COLD WORK PERMIT / FORMULIR IJIN KERJA DINGIN
MANAGEMENT SYSTEM
Level : 2

Systems
Page : 81 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
COLD WORK PLANNED ISOLATION SHEET / LEMBAR RENCANA ISOLASI KERJA DINGIN

DETAILS OF
ISOLATIONS
URAIAN
PENGISOLASIAN
STATUS
TAG NO.
NOMOR TAG
ISOLATED BY
ISOLASI OLEH
DE-ISOLATED BY
DE-ISOLASI OLEH

MANAGEMENT SYSTEM
Level : 2

Systems
Page : 82 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
APPENDIX H: CONFINED SPACE ENTRY PERMIT REQUIREMENTS

1.0 OBJECTIVE

Confined Space Entry requires a Mandatory Level 2 Task Risk Assessment

the control and issue Of Confined Space Entry permits and shall be implemented in conjunction with
Indonesian statutory regulations such as SNI No.13-6910-2002 and K3LL and appropriate QHSE
procedures such as 3001-P-06-I-001-G-08/26, Integral Protection Requirements. It is intended as a
supplement and not a replacement to such regulations, standards and procedures. The Permit and
related forms are contained in HSEF.032.001, CONFINED SPACE ENTRY PERMIT.

2.0 APPLICATION/SCOPE

It applies to the issue of all Confined Space Entry Permits at COMPANY locations and is intended to
obtain a uniformity of control and issue so as to identify where improvements are required. Its principals
includes requirements for CONTRACTORS and their SUB-CONTRACTORS or AGENTS (see Integral
Document, section A) where an absence of their own procedure could compromise safety. Individual
permit types are covered separately.

3.0 DEFINITION

Confined space is a workspace that fulfils any of the following criteria:

A space with only one entry and exit.
A space that has difficult or limited access
An unventilated space or a space with limited ventilation and which requires additional or
forced ventilation.
A space, vessel or object that contains or has contained hazardous substances
An excavation, which has a depth of more than 1.5 metres.

Examples of confined spaces include, but are not limited to:

Tanks, Water vessels, fuel tanks and other unspecified spaces that fulfil specification of a tank.
Drums, Cylinders and / or with a particular diameter to be modified.
Boiler / heater.
AC Ducting.
Mud storage containers for drilling process.
Other limited and closed places (Septic Tank in Pabelokan Island).
Used paint/chemical or other containers.
Excavations and drains

4.0 GENERAL REQUIREMENTS

The following requirements apply specifically to confined space entry (see definition).

Entry into a confined space for any purpose should only be considered when all reasonably practical
steps have been taken to deal with the problem via alternative means.

MANAGEMENT SYSTEM
Level : 2

Systems
Page : 83 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
A Confined Space Entry Permit must cover any entry into a confined space. The Entry Permit must have
a written procedure for isolation and purging procedures, describing each step required, and a Spading
List.

Adequate supervision of the work is required, particularly checking all isolation points before starting, re-
starting and finishing the job.

4.1 Isolation

Any confined work area that cannot be positively isolated from the possible release of hazardous
substances must be treated as if the area actually contained them. All valves must be closed and
tagged on lines leading to the confined work area. All lines leading to and from the confined
space, including displacement legs, must be blinded with line-rated spades or blinds at the first
flange available. As an alternative to spades/blinds, the first section of pipe work connecting to
the confined space may be removed.

All electrical, steam, hydraulic or other sources of energy to moving machinery within the
confined space must be isolated. Alternatively, moving machinery must be isolated from its drive
unit.

4.2 Cleaning and Purging

A Cold Work Permit is required for all Cleaning and Purging acti vities.

The confined space must be drained, purged, and cleaned. The extent of these procedures
depends on the nature of the material in the space, decomposition or other chemical reactions
that may affect the atmosphere, the level of residue and amount of scale build-up on the inside
walls, the configuration of the space, and the size and location of manholes, hatches, and vents.

A confined space that has been used to store liquids, chemicals, or food must be purged of all
sediment, sludge, or residue. Even small amounts of material can create lethal quantities of
hazardous gases or vapours in a confined space. These steps should be followed:

1. Empty the vessel and drain or pump out remaining sludge and residue.
2. Flush the vessel, if possible by completely filling and draining the container.
3. Purge the vessel further with steam, if available, or an inert gas (Nitrogen), after it has
been flushed. The environment inside the vessel should be tested at this point to
determine the effectiveness of the purging at various locations.
4. It may be necessary to repeat flushing or hose-down walls and floors to remove sludge.

4.3 Ventilate the Space

Any confined space, regardless of its contents, must be ventilated to eliminate oxygen deficiency
and accumulated combustibles or toxic substances. The space must be sufficiently ventilated
until a safe atmosphere is confirmed, containing no less than 19.5% and no more than
23.0% oxygen, 0 (zero) LEL combustibles and toxic substance levels not exceeding their
respecti ve threshold limits.

4.4 Entry Conditions when Gas-Free

A confined space can be certified as being ready for entry only after completing the isolation,
draining and purging procedure, and insuring that it is adequately ventilated and verified as
having a safe atmosphere.
MANAGEMENT SYSTEM
Level : 2

Systems
Page : 84 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.

Whenever a person is in the confined space another attendant must be outside, whose duty it is
to observe the person inside the confined space. This attendant must be trained in the use, and
be supplied with compressed air breathing apparatus, a lifeline (where applicable), a means of
communicating with others and an entry board which clearly states time of entry and exit of all
personnel. The attendant must be clearly instructed to communicate any difficulties observed
before entering to perform a rescue.

Before entry and as long as any person is in the confined space, adequate ventilation must be
provided.

Whenever possible, additional manholes, access covers and outlets should be removed to
improve natural draught of air.

The first gas test before entry into a confined space must be carried out by an Authorised Gas
Tester.

4.5 Entry Conditions when Not Gas-Free

If the confined space cannot be completely gas freed, entry may still be permitted subject to
stringent precautions which are outlined below. All previously described procedures are still
essential.

After all REASONABLY PRACTICABLE steps have failed to gas free the confined space, the
decision must be taken by the DPAA as to whether or not a person should be authorised to
enter.

An explosimeter test, oxygen test and, where applicable, a Drager tube test must be carried out
to determine the degree of risk before entry is made. Details of the test must be entered on the
Work Permit by the Responsible Supervisor.

Entry must only be made by persons trained in the use of and wearing suitable breathing
apparatus and where reasonably practicable, a lifeline. An observer must be on duty outside the
confined area. This attendant must be supplied with, and capable of using, compressed air
breathing apparatus and must be capable of pulling out the person should the need arise. The
observer must also be provided with a means of communication with others and a BA control
board, which clearly states:

* The names of all personnel in the confined area
* The time of entry of all personnel
* The volume of air/pressure
* The expected time of exit of all personnel.

The attendant must be clearly instructed to communicate any difficulties observed before
entering the space to perform a rescue.

Persons in charge of plants on either side of the confined space should be advised of the nature
of the work in hand. They will then be aware of the need to suspend routine activities, which
could be harmful to the persons in the confined space or immediately warn them of any
emergency conditions, which would place them in hazard.

MANAGEMENT SYSTEM
Level : 2

Systems
Page : 85 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
Sufficient internal fittings must always be removed from inside the confined space to enable:
Adequate access for the person inside the confined space to get to the place of work and
adequate working space.

The attendant to keep the person under observation, whenever possible. In
circumstances where this is not possible, reliable and approved telecommunication
equipment must be incorporated with the breathing apparatus to allow continuous verbal
contact between the person in the confined space and the attendant at all times.

All personnel selected for entering or acting as attendants at confined spaces should be
physically and mentally fit. They must have received adequate training and be competent
in the use of the equipment involved.

Whenever persons are being employed in a confined space, regular visits by the plant
Area Authority, or other nominated and responsible person must be made to inspect and
ensure that the requirements of the Work Permit are being complied with, and that a
satisfactory standard is being maintained.

Safety or Supervisor personnel shall regularly perform gas tests during the work and
continuously monitor the condition inside the confined space.

Performing Authority shall arrange the work schedule in confined space to ensure that
personnel are rotated out of the confined space on a regular basis.

Air circulation shall be maintained during the work. An Electric blower (air mover) must
be electrically grounded and must have the correct hazard zone class for work area (i.e.
zone 1 class 1 division 2)

5.0 PERMIT (FORM HSEF.032.VER 01)

A permit is required for entry into a confined or closed space which is hazardous in nature due to toxic
vapours or where the oxygen content is such that it will not support life, where there is the possibility of
fire/explosion, or any other general space that fulfils any of the requirements as set down in section 3.0.

a) The Head of Operations in charge of the operation area and the Site Controller shall only
be allowed to approve the permit.
b) The Area Authority is responsible for preparing the work equipment and safety
equipment which are included in the SOP.
c) The permit is valid for a particular area only and is in effect for a maximum 12-hour
period.
d) Prior to the issue of the Permit and during the life of the permit, Safety personnel shall
check the work area, for gas leaks, levels of Oxygen and harmful gases, the standby
equipment, Sops or other hazardous substances. The general requirements as per
section 4.0 shall be followed at all times.

6.0 MATTERS TO BE RECOGNIZED

Before starting work a work procedure shall be prepared and a pre-entry Toolbox Talk shall be held by
the authorized personnel in charge. All workers involved shall attend the briefing. The possible risk
involved in the work and the measures to overcome the risks need to be understood by all workers.

The following have to be recognized for the task implementation:

MANAGEMENT SYSTEM
Level : 2

Systems
Page : 86 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
6.1 Pre-entry preparation.

The Vessel shall be isolated in compliance with the oil field work standard. Disconnect all pipes
to the vessel. Ensure that all skillet are blinded and in compliance with the Standard Energy
Isolation.

i. Ensure that all Pneumatic, Hydraulic, Thermal, Electric, Mechanic systems have been
isolated and tagged.

ii. Testing of the work location prior to entering shall include toxic, flammable gas, oxygen
level and other hazardous conditions. The test shall be recorded and applied to determine
the required preventive measures.

iii. Both the Area Authority and Safety Personnel shall perform a pre-entry work procedure
check. The site Controller shall be responsible for all work changes.

iv. In case of changes to working conditions, the issued permit shall be cancelled.

v. On the continuation of work the work permit shall be renewed.

vi. Entry into the vessel / confined space shall be minimally performed by two workers.

vii. When the work has been completed, the supervisor in charge is responsible for inspecting
the work place.

viii. The vessel shall be in a clean condition and free from any debris or other items that may
cause damage to the production process upon restart.

ix. When all work is completed and the vessel has been restored to original condition, the
supervisor in charge can sign off the work permit.

x. All reports shall be documented.

6.2 Changes to Work Permit

Conditions, which may cause changes to work permit, are as follows:

In case the alarm sounds, or where a gas leak has been detected, work shall be discontinued.
Workers in the tank shall immediately be evacuated to a predetermined safe area.
In case of an abnormal condition when physical changes occur in the tank due to internal
temperature.
In the case where forced ventilation is out of order or where the lighting stops working

7.0 OSHA Regulations (Standards for Atmospheric Testing)-1910.146 App B.

Atmospheric testing is required for two distinct purposes:

Evaluation of the hazards of the permit space and verification that acceptable entry conditions for entry
into that space exist.

1. Evaluation Testing. The atmosphere of a confined space should be analysed using
equipment of sufficient sensitivity and specificity to identify and evaluate any hazardous
atmospheres that may exist or arise, so that appropriate permit entry procedures can be
MANAGEMENT SYSTEM
Level : 2

Systems
Page : 87 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
developed and acceptable entry conditions stipulated for that space. Evaluation and
interpretation of these data, and development of the entry procedure, should be done by,
or reviewed by, a technically qualified professional (e.g., OSHA consultation service, or
certified industrial hygienist, registered safety engineer, certified safety professional,
certified marine chemist, etc.) based on evaluation of all serious hazards.

2. Verification testing. The atmosphere of a permit space which may contain a hazardous
atmosphere should be tested for residues of all contaminants identified by evaluation
testing using permit specified equipment to determine that residual concentrations at the
time of testing and entry are within the range of acceptable entry conditions. Results of
testing (i.e., actual concentration, etc.) should be recorded on the permit in the space
provided adjacent to the stipulated acceptable entry condition.
3. Duration of testing. Measurement of values for each atmospheric parameter should be
made for at least the minimum response time of the test instrument specified by the
manufacturer.

4. Testing stratified atmospheres. When monitoring for entries involving a descent into
atmospheres that may be stratified, the atmospheric envelope should be tested a
distance of approximately 4 feet (1.22 m) in the direction of travel and to each side. If a
sampling probe is used, the entrants rate of progress should be slowed to accommodate
the sampling speed and detector response.

5. Order to testing. A test for oxygen is performed first because most combustible gas
meters are oxygen dependent and will not provide reliable readings in an oxygen
deficient atmosphere. Combustible gases are tested for next because the threat of fire
or explosion is both more immediate and more life threatening, in most cases, than
exposure to toxic gases and vapours. If tests for toxic gases and vapours are
necessary, they are performed last.

MANAGEMENT SYSTEM
Level : 2

Systems
Page : 88 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
APPENDIX I: CONFINED SPACE PERMIT FORM / PLANNED ISOLATION SHEET / SAFETY CHECKLIST / VESSEL ENTRY STANDBY DUTIES
CONFINED SPACE ENTRY FORM / FORMULIR IJIN MASUK RUANG TERBATAS
MANAGEMENT SYSTEM
Level : 2

Systems
Page : 89 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
CONFINED SPACE ENTRY PLANNED ISOLATION SHEET / LEMBAR RENCANA ISOLASI MASUK
RUANG TERBATAS
DETAILS OF
ISOLATIONS
URAIAN
PENGISOLASIAN
STATUS
TAG NO.
NOMOR TAG
ISOLATED BY
ISOLASI OLEH
DE-ISOLATED BY
DE-ISOLASI OLEH

MANAGEMENT SYSTEM
Level : 2

Systems
Page : 90 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
IJIN KERJA MASUK RUANG TERTUTUP (GAS) / CONFINED SPACE ENTRY PERMIT
DAFTAR PERIKSA KESELAMATAN KERJA / SAFETY CHECKLIST

PERINTAH-PERINTAH / INSTRUCTIONS:

1. PILIH ITEM-ITEM YANG AKAN DITERAPKAN DENGAN MEMAKAI TANDA X PADA KOTAK Y
ATAU N / SELECT ITEMS APPLICABLE BY PLACING A X IN THE Y OR N CROSS-BOX

2. AJUKAN UNTUK MENDAPATKAN PERSETUJUAN DARI PENANGGUNG JAWAB LAPANGAN DALAM
MENGURUS SURAT IJIN KERJA PANAS / SUBMIT FOR APPROVAL TO THE AREA AUTHORITY /
SUPERVISOR WITH THE VESSEL ENTRY/GAS WORK PERMIT.

3. DAFTAR PERIKSA BERLAKU SELAMA JANGKA WAKTU YANG RELEVAN TERHADAP SURAT IJIN
KERJA PANAS / CHECKLIST IS VALID FOR DURATION OF THE RELEVANT WORK PERMIT.

4. PENANGGUNG JAWAB PELAKSANA DIHARUSKAN MELAKSANAKAN SEMUA ITEM SEBELUM
IJIN KERJA DIKELUARKAN / THE PERFORMING AUTHORITY SHALL INITIAL ALL ITEMS
SPECIFIED PRIOR TO PERMIT ISSUE.

5. LAMPIRKAN SALINAN DARI SEMUA DAFTAR PERIKSA YANG BERHUBUNGAN DENGAN IJIN
KERJA PANAS / ATTACH COPIES OF ALL CHECKLISTS TO COPIES OF THE RELEVANT HOT
WORK PERMIT.

ITEM-ITEM YANG AKAN DITERAPKAN TERUTAMA SEBELUM PELAKSANAAN PEKERJAAN /
ITEMS TO BE ACTIONED PRIOR TO COMMENCEMENT OF WORK
Y N
PARAF /
INITIAL

PENGUKURAN GAS DI TEMPAT KERJA.
GAS MONITOR LOCATED AT WORKSITE.

PERKAKAS DAN PERALATAN KERJA BERADA DI DAERAH KERJA DAN
TELAH DIPERIKSA.
WORK TOOLS AND EQUIPMENT AT SITE ASSEMBLED AND CHECKED.

HANYA MENGGUNAKAN LAMPU DENGAN TEGANGAN RENDAH.
LOW VOLTAGE LIGHTING ONLY.

JALUR-JALUR UNTUK PENYELAMATAN DARURAT SUDAH DIKENALI.
ESCAPE ROUTES IDENTIFIED.

PERIKSA APAKAH ADA PERTENTANGAN DENGAN PEKERJAAN LAINNYA.
CHECK FOR CONFLICT WITH OTHER WORK.

SOP / PROSEDUR TERTULIS SUDAH ADA DI TANGAN.
WRITEN PROCEDURE/SOP ON HAND FOR THE JOB.

PERALATAN SCBA SIAP & TERUJI SATU UNIT UNTUK MASUK, DUA UNIT
DISIAPKAN DI LUAR. SCBA SETS READY AND TESTED ONE FOR ENTRY,
TWO FOR OUTSIDE.

PERSONEL TELAH DILATIH DALAM PENGGUNAAN SCBA DAN PIRANTINYA.
PERSONNEL TRAINED IN USE OF SCBA AND INSTRUMENTS.

ALAT PELINDUNG PERORANGAN ADA DI TEMPAT KERJA DAN SUDAH
TERUJI.
PERSONAL SAFETY WEARS ASSEMBLED AND TESTED.

SABUK PENGAMAN DIPAKAI.
SAFETY HARNESSES TO BE WORN.

MANAGEMENT SYSTEM
Level : 2

Systems
Page : 91 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.

LIFELINE ADA DI TEMPAT KERJA DAN TELAH DIPERIKSA.
LIFELINES ASSEMBLED AND CHECKED.

KOMANDO LANGSUNG APABILA TERJADI KEADAAN DARURAT SUDAH
DISUSUN.
EMERGENCY FORWARD COMMAND POST SET UP.

ITEM-ITEM HARUS DITAATI DENGAN BENAR SELAMA PELAKSANAAN PEKERJAAN

Y N
PARAF/
INITIAL

BERHENTI KERJA APABILA ADA PERUBAHAN KONDISI ATAU BAHAYA-
BAHAYA LAIN.
STOP WORK IN CASES OF CHANGED CONDITIONS OR OTHER HAZARDS.

PETUGAS PENGONTROL BA AGAR SELALU BERHUBUNGAN DENGAN
RUANG KONTROL DENGAN MENGGUNAKAN RADIO TANGAN / BA
CONTROLLER OUTSIDE WITH RADIO - IN RADIO CONTACT WITH
CONTROL ROOM.

BERITAHU RUANG KONTROL PADA SAAT PERSONEL MULAI MASUK
RUANG TERTUTUP.
NOTIFY CONTROL ROOM PRIOR TO ENTRY.

BERITAHU RUANG KONTROL PADA SAAT SEMUA PERSONEL TELAH
MASUK RUANG. TERTUTUP/ NOTIFY CONTROL ROOM ON COMPLETION
OF ENTRY.

JAGA VENTILASI UDARA AGAR BERJALAN SECARA TERUS MENERUS.
MAINTAIN CONTINUOUS VENTILATION.

MANAGEMENT SYSTEM
Level : 2

Systems
Page : 92 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
IJIN KERJA MASUK RUANG TERTUTUP (GAS) / ENTRY (GAS) WORK

TUGAS-TUGAS PERSONEL STANDBY PADA PEKERJAAN MASUK RUANG TERTUTUP /
VESSEL ENTRY STANDBY DUTIES

ITEM-ITEM YANG HARUS DITAATI DENGAN BENAR SELAMA PELAKSANAAN PEKERJAAN /

Pekerjaan-pekerjaan Normal / Normal Duties:

1.

2.

3.

4.

5.

6.

7.

8.

9.

10.

11.

Periksa peralatan SCBA yang siap pakai, termasuk pengujian tinggi/rendah tekanan, uji peluit dan
keandalan perlengkapan maskernya.Letakkan peralatan SCBA tersebut dekat pintu masuk dalam
posisi yang aman / Check the standby SCBA equipment, including the High/Low Pressure Test,
whistle and the ability to obtain proper face seal with the mask. Leave the set on standby near the
point of entry in a secure accessible position.

Periksa semua jalan dan jalan untuk penyelamatan darurat agar dipahami dan dijaga tetap lancar
sepanjang waktu / Check all access and escape routes are identified and kept clear at all times.

Pastikan ijin kerja masuk ruang tertutup dan daftar periksa terlihat di tempat kerja dan semua
keadaan aman telah terpenuhi / Ensure the Vessel Entry Work Permit and Checklist are displayed
at the worksite and that all conditions set have been complied with.

Pastikan semua personel yang masuk atau telah berada di ruang tertutup telah dicatat nama dan
waktu pada saat masuk ruang tersebut / Ensure that personnel entering or exiting the confined
space record their name and the time on the Vessel Entry Board.

Periksa keadaan dan status peralatan keselamatan apa saja yang sedang dipakai oleh personel
yang masuk ruang tertutup / Check the condition and status of any safety equipment being worn
by personnel entering the confined space.

Pelihara hubungan dengan personel yang sedang melaksanakan tugas masuk ruang tertutup dan
waspada terhadap perubahan kondisi-kondisi lingkungan di dalam dan di luar / Maintain contact
with personnel performing Entry Work and be alert to changing internal and external
environmental conditions.

Beritahu Operator ketika personel telah masuk dalam ruang tertutup dan ketika kondisi ruang
dalam keadaan bersih / Notify the Operator when personnel have entered the confined space and
when the space is cleared.

Pelihara komunikasi dengan Operator dengan menggunakan radio tangan, laksanakan pengujian
radio untuk selang waktu sesering mungkin / Maintain communications with Operator using a
hand held radio, perform a radio check at frequent intervals.

Beritahu Operator, Supervisor atau Supervisor senior tatkala ada masalah apapun yang terjadi /
Alert Operator, Senior Supervisor or Supervisor of any impending problems.

Apabila menggunakan Sistim Saluran Udara untuk pernafasan, monitor aliran udara, pengatur
aliran (regulator) dan pastikan bahwa selang aliran udara tidak terlilit atau kusut / If an Airline
Breathing System is being used, monitor air supplies, regulators and ensure that the air supply
hose does not become tangled or kinked.

MANAGEMENT SYSTEM
Level : 2

Systems
Page : 93 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.

12.

13.

14.

15.

16.

17.

Personel yang masuk ruang tertutup harus dijaga setiap saat kecuali ada penjaga pengganti.
Apabila harus ditinggalkan, pastikan semua personel telah keluar dari ruang tertutup / Stay in
attendance at all times unless relieved. If it is necessary to leave, ensure that all personnel exit the
confined space first.

Inspek kondisi tempat kerja terhadap kehadiran zat mudah terbakar dan berbahaya terutama
pada permulaan pekerjaan, termasuk permulaan pekerjaan setelah istirahat / Inspect Worksite for
flammable and hazardous conditions prior to job commencement, including the commencement of
work after breaks.

Pastikan tempat kerja telah dikosongkan dan aman terhadap kaitannya dengan alarm platform,
waktu pekerja sedang istirahat dan prgantian regu kerja / Ensure worksite is evacuated and made
safe in cases of Platform Alarm, Work Breaks and Shift Changes.

Pelihara kecakapan dalam penggunaan peralatan keselamatan dan BA serta familiar dengan
prosedur-prosedur keadaan darurat / Maintain competence in the use of rescue equipment and
breathing apparatus and be familiar with emergency procedures.

Periksa alat detektor gas mengenai: isi battrey, pengujian alarm, kalibrasi dan kondisi tempat
kerja.
Check gas detector for battery charge, alarm test, calibration and site location.

Jika tidak menggunakan detektor gas kontinue, laksanakan pemeriksaan konsentrasi gas secara
teratur pada pintu-pintu keluar ruang tertutup dan pada peralatan proses yang berdekatan / When
a continuous gas detector is not in use, perform gas concentration checks at periodic intervals at
the vessel outlets and in the adjacent process equipment.

Pada kondisi darurat, mungkinkan untuk memutus semua saluran daya listrik dan dapatkan
tempat kerja selalu aman / In the event of an Emergency, be able to isolate All power supplies and
make worksite safe.

Daya tanggap terhadap kondisi darurat dari dalam / Response to An Internal Emergency

1.

2.

3.

Cari bantuan dengan segera dengan memberitahu Operator tentang keadaan darurat secara
lengkap dan waspada terhadap personel di sekitarnya / Seek help immediately by notifying the
Operator of the emergency details and alerting personnel in the vicinity.

Operator akan memobilisasi bantuan darurat dan personel / The Operator will mobilise Emergency
Services and Personnel.

Kenakan/pakailah BA dan laksanakan uji tinggi dan rendah tekanannya & bantu sesuai dengan
keperluan atau sesuai arahan dari Ketua Regu Keadaan Darurat / Worn breathing apparatus and
perform high and low pressure tests. Assist as required or directed by the Emergency Team
Leader.

MANAGEMENT SYSTEM
Level : 2

Systems
Page : 94 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
APPENDIX J: FORMAL PROCEDURE FORM

FORMAL PROCEDURE (Standard Operating Procedure)
Standard Operating Procedure (SOP) No. :
Prosedur Operasi Standar (POS) No. :
Description :
Keterangan :
Area/Location :
Lokasi :
I request that work becarried out under the following SOP and that
I have reviewed the SOP to ensurethat it is appropriatefor the task.
Sayamemohon pekerjaan dilaksanakan dengan POS berikut dan
sayatelah mengkaji ulang kesesuaian POS tersebut.
Signed:
The following control measures, which arein addition to thosespecified on the SOP, require to be put in place:
Kontrol berikut yang merupakan tambahan dari kontrol dalamPOS, perlu dilakukan:
Date:
Time: .
Number :
REQUEST
ADDITIONAL CONTROL MEASURES
GAS TESTING
Area Authority / Penanggung jawab Lapangan:
I declare that this SOP is appropriate for theproposed task and that all hazards and controls have been identified. It is now safefor this
SOP to be carried out.
Sayamenyatakan bahwaPOS ini sudah sesuai dengan tugas yang diajukan dan semuaresiko dan kontrol telah diketahui. POS ini
sekarang sudah aman untuk dilaksanakan.
Performing Authority / Penanggung jawab Pelaksana:
I understand the details of this SOP and the associated hazards and controls. I accept responsibility for the work detailed on the SOP.
I will notify theAA on completion of thework
Sayamemahami detil-detil dari POS ini dan resiko dan kontrol yang berhubungan dengannya. Sayamenerimatanggung jawab untuk
pekerjaan yang dijelaskan dalamPOS. Saya akan memberi tahu AA pada saat tugas berakhir.
Signed / Tanda tangan:. Date / Tanggal : Time / Jam:
ISSUE
Performing Authority / Penanggung jawab Pelaksana:
The work being carried out under this SOP is now complete, all personnel have been withdrawn, and the worksite has been left in a safe
and tidy condition
Pekerjaan yang dilakukan dengan POS ini sudah selesai, semuapekerjasudah ditarik kembali dan tempat kerjaditinggalkan dalam
keadaan aman dan rapi.
Area Authority / Penanggung jawab Lapangan:
The work for which this SOP was issued is now complete. All plant and equipment affected by the work has been left in asafe and tidy
condition and normal operations may/may not resume. TheSOP is now cancelled. The Permit Register has been updated.
Pekerjaan yang dilakukan dengan POS ini sudah selesai. Semuatempat dan peralatan yang berhubungan dengan pekerjaan itu telah
ditinggalkan dalamkeadaan aman dan rapih dan pekerjaan rutin dapat/tidak dapat dilanjutkan. POS ini sekarang dibatalkan. Register
Persetujuan telah dirubah kembali.
CANCELLATION
Date/Time / Tanggal/Jam O2 % LEL Toxic / beracun Other / Lain-lain
Performing Authority / Penanggung jawab Pelaksana
MANAGEMENT SYSTEM
Level : 2

Systems
Page : 95 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.

APPENDIX K: GUIDELINES FOR USE OF TEMPORARY DEFEAT

1.0 OBJECTIVE

To ensure a safe working environment during the Temporary Defeat of protective devices and
equipment. This objective is achieved by:
1. Obtaining appropriate approvals (commensurate with the risk);
2. Implementing alternative measures / controls and communicating these to those affected;
3. Maintaining a record of Temporary Defeats and stewarding them to the appropriate
approvals level;
4. Reinstating Temporary Defeats in a timely manner.

2.0 IMPLEMENTATION

A Temporary Defeat occurs when a protective device or equipment (see examples following) is
bypassed, disabled, or fails AND the protected equipment or facility is to remain in service.

A temporary defeat may be necessary to:
1. carry out maintenance, drilling or construction work;
2. undertake operations tasks, such as equipment start-up and shutdown, control of process
upsets, etc.
3. continue to operate the facility when a protective device or equipment has failed.

3.0 CRITICAL PROTECTIVE DEVICES AND EQUIPMENT

Some examples are:
1. Emergency shutdown valves
2. Deluge systems
3. Fire or gas horns, bells or sirens
4. CFTs (Critical Function Tests)/PFTs (Planned Function test)
5. Fire or gas detectors, Fire or gas display/annunciator panels
6. Fire pumps, water bores, fire system piping and valves
7. Flare loop seals
8. PLC and DCS shutdowns
9. Limit Switches eg. crane limits, drill rig crown saver, loading arm slew.
10. Process shutdowns (LLSD, HPSD, HTSD, PSHH, TSHH, etc)
11. PSVs and rupture discs where no redundancy exists
12. Surface and Sub Surface Safety Valves and controls
13. Vacuum breakers
14. Vibration monitors (limits/shutdowns)
15. Blow out preventers & their control systems
16. Kick detection instruments
17. Corrosion Inhibitors Systems
18. Bunding and containment

4.0 PLANNING

When planning to defeat Protecti ve Equipment, the following should be considered:
1. Protective equipment which will be defeated,
2. Method required to defeat the protective equipment,
3. Expected duration of the defeat(s),
4. Determine the alternative (mitigative / preventative) controls required,
5. Approval required.
MANAGEMENT SYSTEM
Level : 2

Systems
Page : 96 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
5.0 METHODS

Methods of defeat may include but are not restricted to the following:
1. Control room or MCC keyed bypasses
2. Disconnecting the shutdown signal source
3. Hard wired electrical bridges
4. Manual override of solenoid trips
5. Removal or isolation of sensing devices
6. Test/run/bypass switches
7. PSV and rupture disc isolation valves
8. Open bypass valves around critical control valves
9. Isolating the power source to critical valve actuators, ie electricity, air or gas
10. Isolating power, air or fuel to fire pumps
11. All other fire system isolations
12. Capping or defeating (fusible type) SSVs (offshore)
13. PLC and DCS shutdown (internal and external) bypass switches
14. Raising or lowering critical shutdown settings
15. Isolating sensing points for process shutdown devices

6.0 RULES

Planned Temporary Defeats should be deferred, or equipment shutdown, if an adequate level of safety
cannot be provided and maintained, as determined by the PIC. The following is a list of some but not
limited to instances when Temporary Defeats should be deferred;

1. When CFT testing is to occur during planned shutdowns, the CFT testing must be scheduled
so that Fire and Gas panels are in service while breaking flanges, conducting hot work or
repressuring equipment.
2. 2. During start-up or shutdown several protective devices may need to be defeated in order
to avoid logic conflicts. The minimum number of temporary defeats should be implemented.
3. NOTE: Engineering requests should be raised to design out these type of situations.
4. 3. Every effort should be made to expedite the work or repair and return the protective
device or equipment to service.
5. 4. Critical defeats must be communicated to all affected personnel.
6. 5. If the equipment normally protected by the device is to remain in service, then
appropriate alternative (mitigative / preventative) controls must be implemented.

This may include:
Closely monitoring process trends,
Continuous surveillance by a competent person,
Reliance on alternative protective devices or detectors in close proximity.

7.0 TEMPORARY DEFEAT PROCEDURES

The following procedures must be used when Temporary Defeats are applied.

7.1 Maintenance, Drilling or Construction Groups

1. An approved cold work permit is required before protective devices or equipment can be
defeated. Form HSEF.056 must be completed and attached to the Work Permit.
2. All relevant temporary defeats must be recorded on the Isolations and Temporary Defeat
Record.
MANAGEMENT SYSTEM
Level : 2

Systems
Page : 97 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
3. An exception to the above is when routine CFT/PFT tests are performed. The
maintenance work order number may be cross-referenced to the permit and a copy
of the work order listing of CFTs / PFTs attached to the permit.
4. The Isolation and Temporary Defeat Record (listing temporary defeats) is attached to the
temporary defeat board, and must not be removed until all temporary defeats have been
removed.
5. If additional temporary defeats are required during the job, they must be added to the
Isolations and Temporary Defeat Record.
6. When a temporary defeat will extend beyond the current shift, details must be entered in
the handover notes for both the Equipment Operator and the Production Supervisor.
7. Sites are to maintain an appropriate log for weekly stewardship.
8. The Equipment Operator will notify the Production Supervisor when a temporary defeat
has been returned to normal.

7.2 Fault Finding

When fault finding electrical control systems and various defeats will be applied, eg hard
wired bridges, disconnections, software defeats, etc., then the specific defeats need not be
listed on the permit. However, the permit must make reference to the possible application of
various defeats. The technician shall ensure that the above is documented on the Isolations
and Temporary defeat Record and attached to the temporary defeat board.

The technician must not leave the job while such defeats are in place unless the equipment is
not in service, is shutdown or has constant surveillance.

7.3 Operations

Where it is necessary for the Equipment Operator to apply temporary defeats while
controlling process upsets or during start up or shutdown of equipment or due to failure of
protective devices then:

All Operations temporary defeats must be recorded on the temporary defeat whiteboard
located in control rooms. Information should be recorded as soon as practicable following the
defeat, and must include the following details:
Date and time
Device or equipment defeated
Name of the person who implemented the defeat
Name of the person who approved the defeat
DO NOT OPERATE tag number (if applicable)
Alternative controls in place
Temporary defeat details must remain on the whiteboard until the defeat is removed.
Sites are to maintain an appropriate log for weekly stewardship.

7.4 Approvals and Review

All temporary defeats permits must be issued by the Head of Production and the supervisor via
approval of the HSEF #054, before implementation.

If the Supervisor deems it necessary to obtain a higher level of approval because of the
magnitude or duration of a proposed defeat (eg. ESD system failure resulting in the shutdown of
the facility or section of plant), a risk assessment will be conducted and the Managers approval
will be obtained prior to approving the defeat.

MANAGEMENT SYSTEM
Level : 2

Systems
Page : 98 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
The Head of Production must review and issue a written approval for temporary defeats that
extend beyond one week.

Approval must be renewed each week.

7.5 Head of Production Unavailable

When the Head of Production is unavailable, temporary defeats necessary for process reasons
can be implemented by the supervisor, without the prior approval of the Head of Production.
These will be communicated to the Head of Production as soon as practicable.
However, prior approval is required if an ESD system needs to be defeated.

7.6 Checklists

Site/facility checklists shall be completed each week and as soon as practical following a facility
shutdown to ensure that any defeats implemented to facilitate start-up are returned to service.
This is to ensure that any temporary defeats have not been overlooked, compromising the
integrity of the facility.

These checklists are to be filed with the permits for the day and kept for 3 months.

7.7 Equipment Unserviceable

Equipment unserviceable is equipment that is currently required for operation of the facility but is
not available due to failure or preventative maintenance.

Equipment unserviceable is to be recorded on the Equipment Unserviceable board.

If a temporary defeat is implemented for protective devices on equipment which has been
removed from service or which is not yet commissioned, then any permits raised should be
attached to the equipment Unserviceable/Isolations record board or file and NOT the Temporary
Defeat board.

This list should also include the action plan and proposed date for return to service and list any
associated protective devices defeated while the equipment is out of service.

The complete list is reviewed and approved weekly by the Supervisor

Any equipment that has been out of service for more than 6 months and is not likely to be
returned to service in the near future must have a field change approval raised to determine any
de-commissioning or mothballing requirements. (This does not include equipment waiting for
materials or manpower).

For pressurized rooms, if all gas detection associated with the room is lost, i.e. detection both in
the air intake and in the room, continuous manual surveillance is to be provided or equipment in
that room is to be shutdown until at least 1 of the detectors is repaired.

Note: this guidance assumes that the air intake is located outside the hazardous areas identified
on the Hazardous Area Classification drawings.

If the air intake is located in a hazardous area, continuous surveillance at the air intake is to be
provided or equipment in the room is to be shutdown if the gas detector in the air intake fails.
MANAGEMENT SYSTEM
Level : 2

Systems
Page : 99 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
For the following conditions, the Supervisor is to be notified as soon as practicable and a
risk assessment is to be performed (except where repairs are being carried out
immediately):

Loss of gas detection in a turbine enclosure (irrespective of the status of detection in air
intakes),
Failure of 2 or more point detectors in a process module,
Failure of 1 or more open path detectors in a wellbay module.

MANAGEMENT SYSTEM
Level : 2

Systems
Page : 100 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
FIGURE 1
A process module in this context is an area of Cellar Deck bounded by firewalls or
splashwalls and the perimeter of the platform, or a Main Deck process skid.
Equipment
Maintenanceof
CFT/PFT Testing
Equipment
Protected by
other systems or
controls
Equipment Operator
Completed From
HSEF054
TEMPORARY
DEFEAT(S)
REQUIRED?
Form signed by
Head of Productio &
Supervisor
Will
continuous
surveillance be
provided?
Will
equipment be
shutdown?
DO NOT
BYPASS
OR DISABLE
Process
Reason?
Start-up
after
Facility
Shutdown
List Temporary
Defeats on back of
permit and attach
Form HSEF054
Attach Copy of
Permit to
Temporary defeat
Board
Initiate Temporary
Defeat(s)
Return temporary
defeats to service as
work is completed
Check all devices
make sure defeats
removed!
Sign of Permit
& Form HSEF 054
J OB
COMPLETED
Process Upsets -
Logged on Temporary
Defeats Board and
Approved by Supervisor and
Head Of Production
Initiate Necessary
Temporary Defeats
Start
Facility/Process
Return Temporary
Defeats to Service
Complete facility post
Start-up checklist
(Temporary Defeats all
returned to service)
Equipment Operator
Yes
Yes
Yes
No No No
Yes
Yes
No
No
Equipment Operator
Equipment Operator
Equipment Operator
Equipment Operator

MANAGEMENT SYSTEM
Level : 2

Systems
Page : 101 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
FIGURE 2

TEMPORARY DEFEATS REQUEST & SIGN ON/OFF FORM
Form No.
HSEF-054
This form is to be completed and signed by all parties prior to any Temporary Defeats of Critical
Safety Equipment being put in place and when the Temporary Defeats have been removed.
Facility: Temporary Defeat No.
Date: Time:
Name of Person Requesting the Defeat:
Position of Person Requesting the Defeat:
Estimated time Defeat will stay in Place:
DO NOT OPERATE Tag No. (if applicable)
Device or Equipment to be Defeated:
Reason for the Defeat:
Alternative Controls in Place or to be put in place:
APPROVALS
PERSON REQUESTING DEFEAT
Name: Date: Time:
SUPERVISOR AUTHORISING DEFEAT
Name: Date: Time:
HOP AUTHORISING DEFEAT
Name: Date: Time:
REMOVAL OF DEFEATS
When the Temporary Defeats have been removed and the equipment declared operational, this form must be signed off and filed
for future reference.
PERSON REMOVING DEFEAT
Name: Date: Time:
SUPERVISOR AUTHORISING REMOVAL OF DEFEAT
Name: Date: Time:
HOP AUTHORISING REMOVAL OF DEFEAT
Name: Date: Time:
MANAGEMENT SYSTEM
Level : 2

Systems
Page : 102 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
APPENDIX L: EXCAVATION CHECKLIST

No Yes
Is there a risk of persons being injured as a result of collapse or failure of any part of the excavation?
Apakah ada resiko orang terluka sebagai hasil roboh atau kegagalan pada pekerjaan penggalian?

Does the depth of the excavation present a risk of injury if a collapse or failure occurs?
Apakah kedalaman penggalian menyebabkan resiko luka/kerugian jika roboh atau kegagalan terjadi?
Does the nature of the work require employees in the excavation to squat or bend down, thereby increasing the risk
of injury in case of collapse?
Apakah sifat pekerjaan memerlukan karyawan penggalian untuk berjongkok atau membungkuk, dengan demikian
terjadi peningkatan resiko luka/kerugian dalam hal roboh?

Does the nature of the soil or strata present a risk of collapse?
Apakah sifat alami lahan atau strata menyajikan suatu resiko roboh?

Are there signs of fractures or faults in the rock or ground?
Adakah tanda tanda retak atau pada batu karang atau tanah?

Is water or moisture likely to affect the stability of the soil?
Apakah air atau embun menungkinkan untuk mempengaruhi stabilitas tanah?

Has rain, water seepage, run off or other sources of water increased the risk of collapse?
Adakah hujan, rembesan air, menjalar atau sumber air lain dapat meningkat resiko roboh?

If there are any static loads within the zone of influence of the excavation (eg. spoil piles), are they set back far
enough so that they will not affect the stability of the excavation?
J ika ada manapun beban statis di dalam zone pengaruh penggalian (misalnya. barang bekas), apakah sudah diatur
jarak yang cukup jauh sedemikian sehingga tidak akan mempengaruhi stabilitas penggalian?

Will there be any dynamic loads within the zone of influence of the excavation? (eg. machinery, trucks, rail lines)
Apakah ada beban dinamis di dalam zone yang mempengaruhi penggalian? (misalnya. mesin, truk, pembatas)

Are there sources of vibration within the zone of influence of the excavation that may cause disturbance to the
excavation? (eg. machinery, blasting)
Adakah sumber getaran di dalam zone yang mengaruhi penggalian yang dapat menyebabkan gangguan kepada
penggalian? (misalnya. permesinan, meledakkan)

Will it be long before the excavation is supported or backfilled?
Akan hal tersebut terjadi sebelum penggalian sebagai pendukung atau backfilled?

Was the ground previously disturbed, thus increasing the risk of collapse?
Apakah landasan yang sebelumnya mengganggu, jadi dapat meningkatkan resiko roboh?

Are there adjacent excavations that may increase the risk of collapse in either the planned excavation or the
existing excavation?
Adakah penggalian bersebelahan yang dapat meningkatkan resiko roboh di dalam penggalian direncanakan yang
manapun atau penggalian yang ada?

If shielding is required is it adequate?
J ika penahan diperlukan apakah hal tersebut sudah cukup memadai?

Is battering required and adequate? Does the angle of repose comply in accordance with HSEGP.024 Trenching
and Excavation.
Apakah menggempur diperlukan dan cukup memadai? Apakah sudut kemiringan mematuhi sesuai. HSEGP.024
Trenching and Excavation.

Is benching required and adequate?
Apakah bangku diperlukan dan cukup memadai?

Are there any other site specific factors which may lead to the collapse of the trench or excavation?
Adakah lokasi lain dengan faktor spesifik yang dapat mendorong kearah roboh parit atau penggalian

Has a safe access/egress been provided for entry and exit of the excavation?
Apakah suatu access yang aman disediakan untuk jalan masuk dan jalan keluar penggalian?

Is the excavation work examined prior to work and at regular intervals?
Apakah pekerjaan penggalian diuji sebelum pekerjaan dan juga pada waktu yang tertentu?

Are inspections conducted by a competent person?
Apakah inspeksi dilakukan oleh orang yang berkompeten?

Has there been any activity that may affect the stability of the excavation? (eg. collapse of any part of the
excavation, water in the trench)
Apakah ada aktivitas yang dapat mempengaruhi stabilitas penggalian? (misalnya. roboh tentang segala bagian
dari penggalian, air di parit)

MANAGEMENT SYSTEM
Level : 2

Systems
Page : 103 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
Control Measures (Tick as appropriate)
Kontrol Ukuran ( Tandai yang sesuai)
Do not allow personnel in the excavation at all.
Pekerjaan penggalian sama sekali tidak diperkenankan

Ensure no person enters the trench until shoring, shielding, benching or battering is implemented as required.
Memastikan tidak seorang pun masuk parit sampai batas tertentu, penghalang, bangku atau menggempur
diterapkan sesuai keiperluan.

Engage competent person to supervise the progress of the excavation work and assess excavation for safety.
Libatkan orang berkompeten untuk pengawasan pekerjaan penggalian dan menilai penggalian untuk
keselamatan.

Reduce loads near the edge of the excavations (machinery, etc).
Kurangi beban dekat tepi penggalian (mesin, dll)

Minimise the length of un-retained trench.
Kurangi panjang penahan parit .

Location of Inspection: Time/Date: / ..
Lokasi inspeksi Waktu/tanggal
Inspected by: Print Name: Signature: ...
Diperiksa oleh Nama Tanda tangan:

Comments or Correcti ve Action required:
Saran-saran atau tindakan perbaikan yang diperlukan
.

.

.

MANAGEMENT SYSTEM
Level : 2

Systems
Page : 104 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
APPENDIX M: MONITORING & AUDIT CHECK SHEET

MONITORING & AUDIT CHECK SHEET
(Form 2-work in progress)
Location..
Permit
Number:
Type of
Permit:
Permit Issuing
Date:
No Subjects Yes No N/A
Permit to Work
1 Is PTW displayed on Site using Permit Plastic Holder?
Is date application stated?
Is requested name stated and signed?
Is equipment ID/Tag number stated clearly?
Is work location described clearly?
2 Is the task description full and clear?
Is Equipment Description defined clearly?
Has PA defined level 1 or level 2 clearly?
Has PA ticked the hazard and control correctly?
Is TRA reference number filled by TRA number?

Is SOP/J SA or other documents number filled in Cross Reference
section?
3 Have the PTW Signed by all signatories?
4 Is TRA conducted?
5 Is TRA document provided?
6 Did AA carry out an inspection prior starting the job?
7 Are warning sign and barricade installed by PA?
8 Has the toolbox meeting conducted?
10 Is Initial Gas test (O2, %LEL, Toxic) carried out?
11 Have PTW signed by Authorized gas tester?
12
Is Repeat Gas Test record behind original form as per
requirement?
Unsafe observation
13 Are the workers wear suitable PPE?
14 Are Tools and Equipment used properly and in good condition?
15 Is position of People in safe condition?
16 Are the workers follow the Procedure?
17 Is the working area arranged properly?
Fire Watch Observation
18 Is firewatcher at site?
19 Is fire watcher understands his duties?
20 Is the working area covered from welding sparks?
21 Is PFE stand by at working area?
Welding Equipment Checklist
MANAGEMENT SYSTEM
Level : 2

Systems
Page : 105 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.

Location..
Permit
Number:
Type of
Permit:
Permit Issuing
Date:
22 Are oxygen and acetylene cylinders placed separately?
23 Are oxygen and acetylene hoses properly routed?
24 Are welding/electrical cables properly routed?
25 Is cylinder turn off key in place?
26 Are cylinder gauges in good condition?
27 Are flash-back arrestors fitted?
28 Is engine arrestor installed?
29 Is grinding machine in good condition?
Confined Space
30 Is the standby man always available in front of manhole?
31 Is blower available and in good condition?
32 Is proper lighting provided and in good condition?
Scaffolding
33 Scaffold in use properly inspected and tagged?
34 Safe access and escape route provided?
Other
35 Energy Isolation /LOTO at the point of isolation?
36
Are there Hydrocarbon lines or electrical channel tray being used
to hang chain blocks?

MANAGEMENT SYSTEM
Level : 2

Systems
Page : 106 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.

Location..

Critical Findings:
1
2
3

4

Immediate Actions:
1
2
3
4
Auditor(s): Date:

Site Controller's action plan to prevent reoccurrence of deficiencies
1
2
3
SC Signature: Date:

Performing Authority's action plan to prevent reoccurrence of deficiencies
1
2
3
PA Signature: Date:
MANAGEMENT SYSTEM
Level : 2

Systems
Page : 107 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.

(Form 1-work has been completed)
Location.
Permit Number: Type of Permit: Permit Issuing Date:

1 Description of work clearly defined?

2
In the view of the Auditor(s), have all the potential hazards
been identified? Have all appropriate controls been identified?
Potential Hazards & Precautions Clearly defined?
3 Location is this the correct location?
4 Equipment Description-clearly defined?
5 Equipment No. - Stated clearly?
6 Performing Authority (name) legible?
7
Approval -- Head of Operations have signed giving his
approval?
8 Preparation boxes -- Completed with either a tick or a cross?
10 Isolation certificate -- Information entered required?
12
Initial gas test (O2, % LEL, Toxic) carried out if required?
Signed by Authorized gas tester? Repeat gas Test?

13 Issue -- time entered for the initial shift?
14 Signed by Area Authority?
15 Acceptance --Signed by Performing Authority?
16 Clearance -- Signed by performing Authority?
17 Cancellation -- Signed by Area Authority?
18 Continuation -- Signed by Area Authority?
19 Suspend/Revalidate -- Signed as required?
20 Register update as required?

MANAGEMENT SYSTEM
Level : 2

Systems
Page : 108 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.

(Form 1-work has been completed)
Location.

Critical Findings:
1
2
3
4
Immediate Actions:
1
2
3
4
Auditor(s): Date:
Site Controller's action plan to prevent reoccurrence of deficiencies
1
2
3
SC Signature: Date:
Performing Authority's action plan to prevent reoccurrence of deficiencies
1
2
3
P.A. Signature: Date:
MANAGEMENT SYSTEM
Level : 2

Systems
Page : 109 of 109

Revision 0 1 2
Effective Date 01/05/2010 10/19/2011 13/06/2012


SES Ltd.
AMENDMENT RECORD SHEET

DATE REV SECTION AMENDMENT DESCRIPTION
06/10/2011 1.0 2.0 Replace Mandatory Requirements to Scope
3.0 Replace Scope to References
5.0 Add VP Operation and Dept. Managers responsibilities
6.0 Replace Objectives to Descriptions of the Process and or Activity
6.1 Add Objective
6.4 Replace old flowcharts to the new work permit flowcharts
7.0 Replace References to Appendix
Appendix A Add Head of Operation roles and responsibilities
Appendix E Add 3.5 and 3.6 to policy
18/05/2012 2.0 All Replace Permit Applicant with Performing Authority
5.7 Add record toolbox talk in PTW form in Performing Authoritys
responsibility
6.11 Replace the site safety officer permit controller
Replace the site controller supervisor & Head
Replace the mandatory frequency of PTW audit
for permit controller 3 permits per week
for site Manager 1 permit per 2 months
Appendix D Replace PTW form with the new hot work PTW HSEF030.rev3
Appendix G Replace PTW form with the new cold work PTW HSEF031.rev3
Appendix I Replace PTW form with the new confined space PTW
HSEF032.rev3
Appendix M Modify the question for Monitoring & Audit Check Sheet Form 2-
work in progress
Remove the question no. 9&11 on the old Monitoring & Audit
Check Sheet form 1 work has been completed

HSEGP11 04s Permit To Work

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

HSEGP11 04s Permit To Work

Uploaded by

Copyright:

Available Formats

QUALITY, HEALTH, SAFETY, AND ENVIRONMENT

You might also like