KINGDOM OF SAUDI ARABIA

MINISTRY OF INTERIOR
HIGH COMMISSION FOR INDUSTRIAL SECURITY

SAFETY AND FIRE PROTECTION DIRECTIVES

FOR INDUSTRIAL F ACILlTIES

SAF-U

Emergency Shut Down, Isolation

and Depressuring

Issue Date: 1216/1431H /26/05/2010

RESTRICTED

AI! Rights reserved to BeIS. Copying or distribution prohibited without written pennission from HCIS
Kingdom of Saudi Arabia
Ministry of Interior
High Commission for Industrial Security ""UI v-)U \,WI 41
Secretariat General .....w\ ;<.;\...)11
SAF-ll Emergency Shut Down, Isolation and Depressuring

TABLE OF CONTENTS

Page
1 Administration
1.1Scope 3
1.2 Application 3
1.3 Conflicts and Deviations 3
2 Definitions 3
3 References 5
4 General Requirements 6
4.1 ESD Design 6
4.2 Depressuring Systems 7
4.3 LPD Storage Facilities 7
4.4 Emergency Isolation Valves 7

Issue Date: 1216/1431H 126/05/2010

RESTRICTED
An Rights reserved to HCIS. Copying or distribution prohibited without written pennission from HCIS
Page 2 of7
Kingdom of Saudi Arabia
Ministry ofInterior ~I..U\o)))
High Commission for Industrial Security "",WI .;,')U \,WI >I
Secretariat General MW\;;.;V~\

SAF-U Emergency Shut Down, Isolation and Depressuring

1. Administration
1.1 Scope
This Directive provides the minimum requirements for companies and establishments
that are subject to the supervision of the High Commission for Industrial Security
(HCIS), Ministry of Interior, for the design, of emergency shut down, isolation, and
depressuring systems for all facilities handling hydrocarbons, potentially toxic materials,
and their products.
1.2 Application
This Directive is applicable to all facilities, including new projects, the expansion of
existing facilities, and upgrades. For application to existing facilities, the Owner shall
assess his facilities against the requirements of these Directives and coordinate with the
General Secretariat of the HCIS to comply with the security, safety, and fire protection
requirements according to these Directives and add to or modifY the existing facilities as
required. Where the General Secretariat of the HCIS has assessed deficiencies in existing
facilities during a survey, comparing the current state ofthe facilities to the requirements
of these Directives, those identified deficiencies shall be corrected by the Owner.
1.3 Conflicts and Deviations
Where implementation of a requirement is unsuitable or impractical, where other
equivalent company or industry Standards and Codes are followed, or where any conflict
exists between this Directive and other company standards and Codes, the deviations
shall be resolved by the General Secretariat of the HCIS. Deviations lower than the
requirements of this Directive shall be listed and submitted in a report of non-compliance,
with justification and rationale for not following the requirement, and approval shall be
received from the General Secretariat of the HCIS prior to implementation. The
documents shall be retained by the company in its permanent engineering files.

2. Definitions
API: American Petroleum Institute, Website: http://api-ec.apLorg/
ANSIIISA: ANSI is American National Standards Institute, Website: Http://api-
ec.api.org/; ISA was formerly known as Instrnment Society of America, now known
simply as ISA. Website: http://www.isa.org/

Issue Date: 121611431H 12610512010

RESTRICTED
All Rights reserved to HCIS. Copying or distribution prohibited without written permission from ReIS
Page 3 of7
Kingdom of Saudi Arabia
Ministry ofInterior ~\..0\;;~(j)
High Commission for Industrial Security ,-",WI ,y)U \,WI '4>1

Secretariat General ;;...W\A.i\...o~\

SAF-ll Emergency Shut Down, Isolation and Depressuring

Depressuring System: A system of valves, piping, actuating devices, and logic used
during an emergency to rapidly and safely reduce pressure in process equipment by
controlJed venting to a remote safe location via a disposal system such as a flare, burnpit,
or storage.
Emergency Isolation Valve: A valve that, in event of fire, rupture, or loss of
containment, can be used to stop the release of flammable or combustible liquids,
combustible gas, or potentially toxic material. An emergency isolation valve can be either
hand-operated or power-operated.
Emergency Shut Down (ESD): A system of valves, piping, sensors, actuating devices,
and logic solvers, and manual operating procedures that takes the process, or specific
equipment in the process, to a safe state, i.e., to shutdown, to iso late, deenergize, and
depressure plant, train, or process unit.
lEC: International Electrotechnical Commission, Website: http://www.iec.org/
HCIS: High Commission for Industrial Security, Ministry ofInterior.
Owner: Person, partnership, or company that has possession of a facility or
establishment.
Plant: Facilities used to manufacture, process, store, transport, or transfer hydrocarbons
or other chemical substances.
Plot Limit: The plot limit is a boundary, within the facility, which surrounds a single
plant unit or function. The plot limit may be physical such as a fence, a wall, the edge of
a road or pipeways, chains and posts or a boundary indicated on an approved plot plan.
Potentially Toxic Material: In the context of this directive, a potentially toxic material
is a liquid, gas, or solid with a total concentration of 5% (volume) or greater of materials
with a Health Hazard rating of "3" or greater listed on the Material Safety Data Sheet
(MSDS).
Shall: Indicates a mandatory requirement.
Shonld: Indicates a recommendation or that which is advised but not required.

Issue Date: 12i61l431H I 26{OS/2010

RESTRICTED
AI! Rights reserved to HCIS. Copying or distribution prohibited without written pennission from HCIS
Page 4 of7
Kingdom of Saudi Arabia
Ministry ofInterior ~UJ\;l))
High Commission for Industrial Security </,~I 0''>U y.JI '4>1
Secretariat General a...W\ ;i.,i\....)tl

SAF-ll Emergency Shnt Down, Isolation and Depressnring

3. References
This directive adopts the latest edition of the references listed.
ANSIIISA Safety Instrumented systems for the Process Industry Sector- Part 1-
S84.00.01 (IEC Framework, Definitions, Systems, Hardware and Software
61511 MOD) Requirements; Part 2- Information; Part 3- Guidancefor the
Determination of the required Safety Integrity Levels - Informative

ANIIISA- Identification of Emergency Shutdown Systems and Controls that are

91.00.01 Critical to Maintaining Safety in Process Industries

APISPEC6D Pipeline Valves

API RP 14J Design and Hazard Analysis for Qffshore Production Facilities

APISTD520 Sizing, Selection, and Installation of Pressure-Relieving Devices in

Refineries

APISTD521 Pressure-Relieving and Depressuring Systems

APISTD2000 Venting Atmospheric and Low-Pressure Storage Tanks

API PUB 2218 Fireproofing Practices in Petroleum and Petrochemical Processing

Plants

API STD 2510 Design and Construction of LPG Installations

API PUB 2510A Fire-Protection Considerations for the Design and Operation of
Liquefied Petroleum Gas (LPG) Storage Facilities

IEC 61511 Functional Safety - Safety Instrumented Systems for the Process
Industry Sector

Issue Date: 1216/1431H 126/05/2010

RESTRICTED
AU Rights reserved to HeIS. Copying or distribution prohibited without written pennission from HCIS
Page 5 of7
Kingdom of Saudi Arabia
Ministry ofinterior ", ~ I. \ 1\ "~I'.
~.,)..)
<
~)))

High Commission for Industrial Security ""L,JI Cr')0 l,lJ1 .y"

Secretariat General 6.,.WI4.iL.\q

SAF-ll Emergency Shut Down, Isolation and Depressuring

ISA-TRB4. 00. 02 Safety Instrumented Functions (SIF) Safety Integrity Level (SIL)
Evacuation Techniques, ParI.' Introduction; Part 2 Determining the
SIL of a SIF via Simplified Equations; Part 3 Determining the SIL of a
SIF via Fault Tree Analysis; Part 4, Determining the SIL of a SIF via
Markov Analysis; Part 5: Determining the PFD of Logic Solvers via
Markov Analysis.

4. General Requirements
4.1 ESD Design
4.1.1 Emergency shut down (ESD), isolation, and depressuring of facility equipment shall be
considered when designing facilities that process, transport, or otherwise handle
combustible, flammable, or potentially toxic materials. Refer to ANSIIISA-91.00.01.
4.1.2 The objective is to prevent release or minimize the amount of material released in case of
an incident due to operational errors, equipment or piping mechanical failures, or fire.
4.1.3 ESD shall be accomplished using a combination of sensors, switches, valves, piping, and
actuating devices to rapidly shutdown equipment, isolate that equipment through the use
of valves, and depressure the equipment when required.
4.1.4 During preliminary design, an assessment shall be done to identify process design
philosophy of the facility and the associated hazards, These shall be used to create an
ESD philosophy for the facility design,
4.1-5 Once the potentially hazardous events for a process are identified, isolation valves shall
be provided within process unit areas to isolate equipment and piping and to limit the
release of materials that might fuel a fire.
4.1.6 The types and location of valves shall depend on a hazard analysis of the system, Design
of the ESD system and its components, including the determination and verification of
safety integrity levels (SIL) for each ESD loop, shall meet ANSI lISA S84.00,01 and
IEe 61511. Refer to IS A-TR84,00.02 for calculation methods, Consideration shall be
given to providing access to valves during a fire or providing systems for automated
closing and opening of the isolation valves when needed.
4.1.7 The impact on individual equipment shall be considered in the design of ESD systems to
avoid damage to equipment when closing of emergency isolation valves.

Issue Date: 12/6/1431H 126/05/2010

RESTRICTED
An Rights reserved to HCIS. Copying or distribution prohibited without written pennission from HeIS
Page 6 of7
Kingdom of Saudi Arabia
Ministry ofInterior ~\J.l\o~l))
High Commission for Industrial Security ifG.,.JI ySU \,WI """
Secretariat General ;;..oWl ;;';\.I>~\

SAF-ll Emergency Shnt Down, Isolation and Depressnring

4.1.8 The resulting ESD design shall be reviewed, approved, and kept as part of the Owner's
permanent plant records. These records shall be readily available for audit by the HCIS
upon request.
4.1.9 Review and revalidation of the ESD system philosophy and design shall be done at least
every five years.
4.2 Depressuring Systems
4.2.1 Pressure relief, emergency depressuring, and flare systems are parts of the overpressure
protection system for piping, tanks, pressure vessels, and other process equipment.
4.2.2 The design of pressure relief and flare systems shall meet API Standards 520 and 521.
4.2.3 For offshore facilities, design shall follow API RP 14J (see SAF-17, Offshore Facilities).
4.3 LPG Storage Facilities
The design of liquefied petroleum gas (LPG) storage facility emergency isolation shall
meet API STD 2510 and PUB 251 OA.
4.4 Emergency Isolation Valves
4.4.1 The placement and design for emergency isolation valves and associated devices,
interlocks, functional requirements, and controls systems shall be reviewed with all other
aspects of facility detail design during a formal process hazard study.
4.4.2 Recommendations of the study shall be implemented in the design.
4.4.3 Design of emergency isolation valves, their actuators (if provided), and any utilities that
power emergency isolation valves shall take the fire-scenario envelope into consideration
per API PUB 2218.
4.4.4 Emergency isolation valves shall be of fire resistant design per API 6D.
4.4.5 Emergency isolation valves shall be provided at the plot limit for piping containing
combustible or potentially toxic fluids crossing from one operating plant unit to another.
Exception to 4.4.5: Flare, depressuring, flare purge gas, fuel gas, industrial drains, sanitary
sewer, and other piping systems that should remain operable during an ESD do not require plot-
limit isolation.

Issue Date: 12/6/1431H 126105/2010

RESTRICTED
All Rights reserved to HCIS. Copying or distribution prohibited without written permission from HCIS
Page 7 of7