DNV-DSS-315: Verification of Onshore LNG and Gas Facilities

DNV SERVICE SPECIFICATION

The electronic p

DNV-DSS-315

Verification of Onshore LNG and Gas Facilities

OCTOBER 2010

This document has been amended since the main revision (October 2010), most recently in April 2012. See “Changes” on page 3.

DET NORSKE VERITAS AS

df version of this document found through http://www.dnv.com is the officially binding version

FOREWORD

DET NORSKE VERITAS (DNV) is an autonomous and independent foundation with the objectives of safeguarding life,property and the environment, at sea and onshore. DNV undertakes classification, certification, and other verification andconsultancy services relating to quality of ships, offshore units and installations, and onshore industries worldwide, andcarries out research in relation to these functions.

DNV service documents consist of amongst other the following types of documents:— Service Specifications. Procedual requirements.— Standards. Technical requirements.— Recommended Practices. Guidance.

The Standards and Recommended Practices are offered within the following areas:A) Qualification, Quality and Safety MethodologyB) Materials TechnologyC) StructuresD) SystemsE) Special FacilitiesF) Pipelines and RisersG) Asset OperationH) Marine OperationsJ) Cleaner EnergyO) Subsea Systems

© Det Norske Veritas AS October 2010

Any comments may be sent by e-mail to [email protected] subscription orders or information about subscription terms, please use [email protected] Typesetting (Adobe Frame Maker) by Det Norske Veritas

This service document has been prepared based on available knowledge, technology and/or information at the time of issuance of this document, and is believed to reflect the best ofcontemporary technology. The use of this document by others than DNV is at the user's sole risk. DNV does not accept any liability or responsibility for loss or damages resulting fromany use of this document.

Amended April 2012 DNV Service Specification DNV-DSS-315, October 2010see note on front cover Changes –

CHANGES

BackgroundThe experience gained from past projects specific to onshore LNG and Gas installations is incorporated in thisService Specification.

IntroductionThe suit of inter-related DNV-OSS documents consist of a general description of the verification systematics(DNV-OSS-300) and object specific documents. This DNV-OSS-315 offers the reader the application of thecommon framework and overview of processes in risk verification, to process facilities.This Service Specification:

— Introduces a levelled description of verification involvement during all phases of an asset's life. — Facilitates a categorisation into risk levels High, Medium and Low, assisting in an evaluation of the risk

level. — Assists in planning the verification through the making of a Verification Plan, and describes the DNV

documentation of the process throughout.— Provides an international standard allowing transparent and predictable verification scope, as well as

defining terminology for verification involvement.

Changes Two new DNV service document types have been introduced as from October 2010 to be used for services thatare not limited to offshore and/or not to be considered as DNV Rules for classification of Ships or HSLC/NSC.The documents have been named; DNV Service Specifications (DSS) and DNV Standards (DS).This service specification; DSS-315: “Verification of Onshore LNG and Gas Facilities” replaces the previousversion of the document with short name; DNV-OSS-315. There are no changes in content, only how thedocument is referred to, as OSS now will be used for Service Specifications intended for Offshore use.

• Amendments April 2012

— The restricted use legal clause has been deleted from the front page.

• Amendments October 2011

— A restricted use legal clause has been added on the front page.


DNV Service Specification DNV-DSS-315, October 2010 Amended April 2012 – Contents see note on front cover

CONTENTS

Sec. 1 General ............................................................................................................................................... 6

A. General ............................................................................................................................................................................ 6A 100 Introduction........................................................................................................................................................... 6A 200 Objectives ............................................................................................................................................................. 6A 300 Scope of application for verification..................................................................................................................... 6A 400 Structure of this document ................................................................................................................................... 7

B. Risk Based Verification .................................................................................................................................................. 7B 100 General.................................................................................................................................................................. 7B 200 Verification’s Role in Hazard Management ......................................................................................................... 7B 300 Risk-based Verification Planning ......................................................................................................................... 7B 400 Certificate of Conformity...................................................................................................................................... 8

C. Definitions and Abbreviations ........................................................................................................................................ 9C 100 General.................................................................................................................................................................. 9C 200 Abbreviations........................................................................................................................................................ 9C 300 Verbal forms ......................................................................................................................................................... 9C 400 Definitions ............................................................................................................................................................ 9

D. References ..................................................................................................................................................................... 11D 100 List of Internal References.................................................................................................................................. 11D 200 List of External References................................................................................................................................. 11D 300 List of Technical Specifications.......................................................................................................................... 11

Sec. 2 Principles of Risk Based Verification ............................................................................................. 12

A. Purpose of Section ........................................................................................................................................................ 12A 100 Objectives ........................................................................................................................................................... 12

B. Verification Principles .................................................................................................................................................. 12B 100 Purpose of Verification ....................................................................................................................................... 12B 200 Verification as a Complementary Activity ......................................................................................................... 12B 300 Risk-based Levels of Verification ...................................................................................................................... 12

C. Selection of Level of Verification................................................................................................................................. 13C 100 Selection Factors................................................................................................................................................. 13C 200 Overall Verification Objective............................................................................................................................ 15C 300 Assessment of Risk ............................................................................................................................................. 15C 400 Technical Innovation and Contractor Experience............................................................................................... 15C 500 Quality Management Systems ............................................................................................................................ 15

D. Communications ........................................................................................................................................................... 15D 100 Notification of Verification Level ...................................................................................................................... 15D 200 Obligations.......................................................................................................................................................... 16

Sec. 3 Service Overview .............................................................................................................................. 17

A. General .......................................................................................................................................................................... 17A 100 Objectives ........................................................................................................................................................... 17

B. Service Process ............................................................................................................................................................. 17B 100 General Principles............................................................................................................................................... 17B 200 Simplified verification planning ......................................................................................................................... 17B 300 Selection of level of verification......................................................................................................................... 18B 400 Codes, standards and reference documents ........................................................................................................ 18

C. Project Initiation............................................................................................................................................................ 18C 100 Verification during conceptual design ................................................................................................................ 18

D. Project Execution .......................................................................................................................................................... 18D 100 General................................................................................................................................................................ 18D 200 Verification of overall project management ....................................................................................................... 19D 300 Verification during design .................................................................................................................................. 19D 400 Verification during construction ......................................................................................................................... 20

E. Verification Documents ................................................................................................................................................ 23E 100 General................................................................................................................................................................ 23


Amended April 2012 DNV Service Specification DNV-DSS-315, October 2010see note on front cover Contents –

App. A Selection of Verification Level ........................................................................................................ 24

A. General .......................................................................................................................................................................... 24A 100 General principles ............................................................................................................................................... 24

B. Trigger Questions.......................................................................................................................................................... 24B 100 Overall project objective and goals..................................................................................................................... 24B 200 Assessment of risk .............................................................................................................................................. 24B 300 Technical innovation........................................................................................................................................... 25B 400 Contractors’ experience ...................................................................................................................................... 25B 500 Quality management systems ............................................................................................................................. 25

App. B Generic Detailed Verification Scopes of Work Tables ................................................................. 26

A. Purpose.......................................................................................................................................................................... 26A 100 Introduction......................................................................................................................................................... 26

B. Critical Elements........................................................................................................................................................... 26B 100 Critical Elements and Components..................................................................................................................... 26

App. C Examples of Verification Documents ............................................................................................. 69

A. Verification Documents ................................................................................................................................................ 69A 100 Validity of verification documents ..................................................................................................................... 69A 200 Statement of Compliance ................................................................................................................................... 69A 300 Verification Reports............................................................................................................................................ 69A 400 Verification Comments ...................................................................................................................................... 69A 500 Audit report......................................................................................................................................................... 69A 600 Survey Reports.................................................................................................................................................... 70

B. Use of quality management systems ............................................................................................................................. 70B 100 General................................................................................................................................................................ 70B 200 Quality plans ....................................................................................................................................................... 70B 300 Inspection and test plans ..................................................................................................................................... 71B 400 Review of quality management programme....................................................................................................... 71

C. Document forms............................................................................................................................................................ 71C 100 Introduction......................................................................................................................................................... 71C 200 Statement of Compliance.................................................................................................................................... 73C 300 Verification comments sheet............................................................................................................................... 74C 400 Survey report....................................................................................................................................................... 75


DNV Service Specification DNV-DSS-315, October 2010 Amended April 2012 – Sec.1 see note on front cover

SECTION 1GENERAL

A. General

A 100 Introduction101 This Service Specification (DNV-DSS-315) gives the criteria for and guidance on verification of theintegrity (safety, environmental and reliability) of parts of onshore LNG (both import and export) and gasreceiving facilities during various phases of new developments and modifications.102 This document is an object-specific Service Specification conforming to the philosophy defined in thetop level document DNV-OSS-300 Risk Based Verification.

A 200 Objectives201 The objectives of this specification are to:

— describe DNV’s verification services for onshore LNG and gas receiving facilities during design,construction, and commissioning,

— provide guidance for the Client and other parties for the selection of the level of involvement of thosecarrying out verification activities, whether quantitatively as a result of a quantitative risk assessment orqualitatively by simple trigger questions.

— provide a common platform for defining and manage the scope and extent of verification activities.

A 300 Scope of application for verification301 This specification may be adopted for the verification of parts of onshore liquefied natural gas and gasreceiving facilities during the project development phase starting from detailed design up to and includingcommissioning and start-up.302 The LNG and gas facilities covered in this specification comprise the following critical systems:

— support structures and foundations— non-cryogenic critical vessels, piping and equipment— cryogenic critical vessels, piping and equipment (including transfer piping)— LNG storage tanks— open hazardous drains— pressure relief systems— ignition prevention and control systems— emergency shutdown system— blowdown system— fire and gas detection system— fire and blast protection— emergency power supply— escape and evacuation means— emergency communication systems— environmental control.

which are applied in various configurations and tailored to each particular project’s specific requirements. The specification does not cover the following:

— Jetty, Mooring and Marine related facilities (with the exception of the shore based transfer systems andassociated safety equipment. Jetty structures are covered by DNV-OSS-304).

— the import and export pipelines within plant battery limits (this is covered under DNV-OSS-301)

303 Compliance to CE Marking Directives such as Pressure Equipment Directive (PED/97/23/EC),Machinery Equipment Directive 98/37/EC and Explosion Proof Devices ATEX 94/9/EC which are applicablein the European Community are not covered in this specification.304 This DSS describes the principle of a levelled verification involvement, where the extent of verificationinvolvement is linked to the risks associated with part or all of the facility.305 The primary scope of DNV’s verification work is the verification of the integrity of gas facilities and thesafety of its personnel and those in close proximity to it. Other aspects, such as the verification of theenvironmental safety of the facility, or its ability to meet the Client’s business objectives, may be included inDNV’s scope of work if desired by the Client.306 Statutory verification (or certification) of onshore gas facilities to the requirements of NationalAuthorities is not included specifically in the scope of application of this DSS. Such verification (orcertification) shall be governed by the regulations of the relevant Authority. However, if detailed procedures


Amended April 2012 DNV Service Specification DNV-DSS-315, October 2010see note on front cover Sec.1 –

are not given by these Authorities, this DSS shall be used by DNV as a guideline for its work.

A 400 Structure of this document This document consists of three sections and 3 appendices:

— Section 1 explains the relationship between this document and DNV’s overall risk-based verificationprocess.

— Section 2 explains the principles of DNV’s verification process with its risk-based levels of involvement,and how the level of involvement for a particular project is defined.

— Section 3 describes the verification process and the activities for each of the project phases.— Appendix A gives guidance on the selection of verification level, preferably as the result from a quantitative

risk assessment or alternatively, qualitatively as a result of the posing of trigger questions.— Appendix B gives a generic detailed scope of work tables for all phases and all levels of involvement. These

tables are the basis for the development of project-specific scopes of work tables.— Appendix C gives example verification documents and describes the documents issued during and as a

result of the verification process. The use of quality management systems is addressed here also.

B. Risk Based Verification

B 100 General101 This DSS describes the principles of verification of the safety and integrity of natural gas facilities forall phases.The risk based verification concept is described in DNV-OSS-300 and visualized in Figure 1 overleaf.102 The Verification Plan is the pivot element, with the Asset Specification, Risk Assessment and Definitionof Involvement Level as input and the Verification Execution being the implementation.

B 200 Verification’s Role in Hazard Management201 Major Accident Hazards are identified in a safety assessment by an analysis of the risks to the facility’spersonnel using suitable definitions of such accidents.202 Critical Elements are those parts of the facilities and such parts of the facilities (both hardware andsoftware), or any part thereof:

— the failure of which could cause or contribute substantially to; or— a purpose of which is to prevent; or limit— the effect of a major accident and/or impact on project specific objectives.

203 Performance requirements are statements which can be expressed in qualitative or quantitative terms, ofthe performance required of a system, item of equipment, person or procedure, and which is used as the basisfor managing the risk– e.g. planning, measuring, control or audit – through the lifecycle of the facilities. It canbe:

— a criterion or a standard of performance with which assessed performance may be compared— an availability/reliability standard; a probability that an HSE or Business Critical system will be available

for its required function under a defined load— an endurance period: a period of time over which an HSE or Business Critical function is stated to remain

functional under a defined load— an impairment criterion/threshold: a specified condition, which defines impairment of an HSE or Business

Critical function.

204 Verification Plan is a document describing the process and activities required for verifying that allCritical Elements meet project objectives. This will form the scope of work for the Verifier.205 Verification is the process whereby DNV as an independent and competent party assesses that a CriticalElement will be, has been, and will continue to be suitable to meet project performance requirements.A graphical representation of this process is shown in Figure 1.

B 300 Risk-based Verification Planning301 The selection of the level of verification shall depend on the level of risk a particular item adds to theoverall risk to the facility. The planning can be simplified or detailed. This is further described in DNV-OSS-300.302 This Service Specification addresses both approaches as input into the preparation of a verification plan.

Guidance note:Risk can be evaluated based on safety, environmental impact, business, schedule, public relations, reputation or othercriteria set by the Client.



The generic scopes of work tables are generated based on safety and integrity risks. Where other risks, such asenvironment or business, are required by the Client to be considered during the verification process, the principles setout in this document may be used to modify the generic scopes of work tables given in Appendix C.

---e-n-d---of---G-u-i-d-a-n-c-e---n-o-t-e---

303 In view of the complexity of many gas facilities, DNV recommends strongly that the verification levelbe derived from the results of risk assessments of the facility.

Guidance note:

Only for simple natural gas facilities, with consequently lower levels of risk would DNV consider that simplifiedverification planning using the trigger questions and generic Verification scope set out in Appendices A and B to bejustifiable.

For novel technology for which there are no applicable standards to verify against, Technology Qualificationaccording to procedures as defined in "DNV-RP-A203 Qualification Procedures for new Technology" can be used asinput for Verification.


Figure 1 DNV risk based verification Flow-Chart

B 400 Certificate of Conformity

401 A Certificate of Conformity may be issued by DNV to confirm compliance according to the scope ofwork. An example is given in Appendix C.

402 The DNV Certificate of Conformity confirms that, after performing verification according to a DNVdefined scope of work, DNV has found the natural gas facility to conform to a given DNV Standard oracceptable international standards.

403 Usually DNV performs the complete scope of work for all phases. However, in some circumstances,DNV may accept external Independent Review Certificates, for example for pressure vessels. This shall bereflected in the text of the Certificate.

404 A Statement of Compliance is issued in all other instances where Certificate of Conformity is notapplicable. See Appendix C for further details.

Asset Specification includ ing overa ll company ac ceptance criteria,

perform ance requirem ents and verification ob jectives

R isk Assessm ent inc luding identification of hazards and

ranking of hazards based on risk evaluation

D efinition of Verification Involve ment inc lud ing deta iling of acceptance criteria , and

performance requirements

Verification P lan includ ing list o f verification activ ities

Verification Execution inc luding reporting of com pliance or

non-compliance

Asset Planned

A sset C om pleted



C. Definitions and Abbreviations

C 100 General101 Relevant definitions in EN 1473:2007 also apply to this DSS.

C 200 Abbreviations

ALARP = As Low as Reasonably PracticableC&E = Cause and EffectCFD = Computational Fluid DynamicsD&ID = Ducting and Instrumentation DiagramEC = European CommunityESD = Emergency Shutdown SystemESDV = Emergency Shutdown ValveESSA = Emergency Systems Survivability AnalysisFERA = Fire and Explosion Risk AnalysisFGS = Fire and Gas SystemHAZID = Hazard Identification (Assessment)HAZOP = Hazard Operability (Study)HVAC = Heating, Ventilation and Air ConditioningHIPPS = High Integrity Pressure Protection SystemICS = Integrated Control SystemLNG = Liquefied Natural GasMPQT = Manufacturing Procedure Qualification TestingMPS = Manufacturing Procedure SpecificationNDT = Non-Destructive TestingOSS = (Offshore) Service SpecificationPCS = Process Control SystemPFD = Process Flow DiagramPFP = Passive Fire ProtectionPSD = Process Shutdown SystemQRA = Quantitative Risk AnalysisRAM = Reliability Availability MaintainabilitySIL = Safety Integrity LevelUPS = Uninterruptible Power SupplyVAR = Verification Activity ReportWPS = Welding Procedure SpecificationWPQR = Welding Procedure Qualification Record

C 300 Verbal forms301 “Shall”: Indicates requirements strictly to be followed in order to conform to this DSS and from whichno deviation is permitted. 302 “Should”: Indicates that among several possibilities, one is recommended as particularly suitable,without mentioning or excluding others, or that a certain course of action is preferred but not necessarilyrequired. Other possibilities may be applied subject to agreement.303 “May”: Verbal form used to indicate a course of action permissible within the limits of the DSS.

C 400 Definitions401 Client: DNV’s contractual partner. It may be the purchaser, the owner or the contractor. 402 Construction phase: All phases during construction, including fabrication, installation, testing and pre-commissioning, up until the installation or system is mechanically complete and safe to receive and/or exportgas or LNG. In relation to onshore facilities, this include both onsite and offsite fabrication, site assembly andintegration, tie-in, pressure testing, pre-commissioning and repair.403 Commissioning phase: Activities after pre-commissioning when gas or LNG are introduced into theinstallation up until the complete installation is rendered safe and operable for intended operations.404 Critical Element: Parts of an installation which prevent, control or mitigate identified major hazards andthe failure of which could cause or contribute substantially to impairment of the defined safety objectives.Safety Critical Elements represent the barriers which prevent, control or mitigate the major accident scenarios.405 Critical Equipment: Item of equipment or component or assembly the failure of which could cause orcontribute substantially to impairment of the defined safety objectives.406 Design: All related engineering to design of the onshore facilities, including structural supports, pressurecontainment, safety systems, as well as material and corrosion aspects.407 Design phase: An initial phase that takes a systematic approach to the production of specifications,



drawings and other documents to ensure that the onshore installation meets specified requirements (includingdesign reviews to ensure that design output is verified against design input requirements).

408 Fabrication: Activities related to the assembly of objects with a defined purpose. In relation to theonshore facilities, fabrication typically refers to the process of assembly or transformation of e.g. plates,profiles and pipes etc into production equipment and facilities. These may be built fully on-site or built offsitein parts and transferred to site for assembly or integration.

409 Hazard: A deviation (departure from the design and operating intention) which could cause damage, injuryor other form of loss (Chemical Industries Association HAZOP Guide).

410 HAZID (HAZard Identification): A technique for the identification of all significant hazards associatedwith the particular activity under consideration. (ISO-31010 Risk Management - Risk AssessmentTechniques).

411 HAZOP (HAZard OPerability study): The application of a formal systematic critical examination to theprocess and engineering intentions of new or existing facilities to assess the hazard potential of mal-operation ormal-function of individual items of equipment and their consequential effects on the facility as a whole (ChemicalIndustries Association HAZOP Guide).

412 Manufacture: Making of articles or materials, often in bulk. In relation to onshore facilities, this typicallyrefers to activities for the production of various components under contracts from one or more contractor orsupplier.

413 Major Hazard: A deviation (departure from the design and operating intention) which could causeunacceptable damage, injury or other form of loss.

414 Onshore Gas facilities: Onshore process plants for regasification of LNG or receiving, treatment and/orliquefaction of natural gas

415 Operations (phase): The phase when the gas facilities are being used for the purpose for which it wasdesigned.

416 Performance Requirement: A description (qualitative or quantitative statement) of the essentialrequirements to be met, maintained or provide on demand by a system or item of equipment in order for it tosatisfactorily fulfil its purpose.

417 Risk: The qualitative or quantitative likelihood of an accident or unplanned event occurring, consideredin conjunction with the potential consequences of such a failure. In quantitative terms, risk is the quantifiedprobability of a defined failure mode times its quantified consequence.

Guidance note:

Risk is not only related to physical failure modes, but also to operational errors, human errors and so on. For somerisks the functional failures or physical failure modes contributes less than 20% while more than 80% of the riskrelates to other devices.


418 Risk Reduction Measures: Those measures taken to reduce the risks to the operation of onshore facilitiesand to the health and safety of personnel associated with it or in its vicinity by:

— reduction in the probability of failure— mitigation of the consequences of failure.

Guidance note:

The usual order of preference of risk reduction measures is:

— inherent safety— prevention— detection— control— mitigation— emergency response.


419 Project Objectives: The safety, integrity and business goals for the design, construction, operation anddecommissioning of the gas facilities including acceptance criteria for the level of risk acceptable to the Client.

420 Safety Objectives: The safety goals in terms of functionality, reliability/availability and survivability forthe design, construction and operation of the natural gas facility including acceptance criteria for the level ofrisk acceptable to the Client.



421 Statement of Compliance: A statement or report signed by a qualified party affirming that, at the time ofassessment, the defined onshore installation phase, or collection of activities, met the requirements stated bythe Client.422 Verification: An examination to confirm that an activity, a product or a service is in accordance withspecified requirements.

Guidance note:The examination shall be based on information, which can be proved true, based on facts obtained throughobservation, measurement, test or other means. It should be noted that there is a distinct difference between verification and certification.The scope of work for verification is ultimately decided by the customer, while the scope of work for certification isultimately decided by DNV (or the national authorities when DNV issues certificates on their behalf).ISO 8402: 1994 definition: Verification: Confirmation by examination and provision of objective evidence thatspecified requirements have been fulfilled.


423 Verification Plan: A plan which defines the scope of the work (sow) for verification. It includes;verification objectives, elements to be verified, performance requirements, level of involvement by party andtype of verification activity. (ref. DNV-OSS-300 Sec.2 C)

D. References

D 100 List of Internal References

— DNV-OSS-300 Risk Based Verification, 2004, Det Norske Veritas— DNV-OSS-301 Certification and Verification of Pipelines, 2000, Det Norske Veritas— DNV-OSS-304 Risk Based Verification of Offshore Structures, 2006, Det Norske Veritas— DNV-OSS-307 Verification of Process Facilities, 2004, Det Norske Veritas— DNV-OSS-309 Verification, Certification and Classification of gas export and receiving terminals, 2009,

Det Norske Veritas— DNV-RP-A203 Qualification Procedures for New Technology

D 200 List of External References

— A Guide to Hazard and Operability Studies, 1979, Chemical Industries Association Limited, London— ISO 8402 Quality – Vocabulary, 1994, International Organization for Standardization, Geneva— BS 4778 Quality Vocabulary, Part 2 Quality Concepts and Related Definitions, 1991, British Standards

Institute, London— EN 45011 General Criteria for Certification Bodies Operating Product Certification, 1998, European

Committee for Standardization, Brussels

D 300 List of Technical SpecificationsRelevant technical specifications which can be used as references are given in Appendix B.The main standards for LNG facilities addressed in this document are:

— EN1473 Installation and equipment for liquefied natural gas - Design of Onshore Installations— NFPA 59A Standard for Production, Storage and handling of Liquefied Natural Gas.



SECTION 2PRINCIPLES OF RISK BASED VERIFICATION

A. Purpose of Section

A 100 Objectives

101 The objectives of this section are to provide:

— an introduction to the principles of verification the safety and integrity of onshore LNG and gas receivingfacilities

— an introduction to the principles of risk-based levels of verification activity and — guidance on the selection of levels of verification.

B. Verification Principles

B 100 Purpose of Verification

101 Verification constitutes a systematic and independent examination of the various phases in the life of anatural gas facility to determine whether it has sufficient integrity to meet its safety objectives.

102 Verification activities are expected to identify errors or failures or non-compliance to agreedperformance requirements in the safety and integrity-related work associated with the natural gas facility andto contribute to reducing the risks to its operation and to the health and safety of personnel associated with itor in its vicinity.

103 Verification is primarily focused on integrity and human safety, but business risk (cost and schedule)may be addressed also if required by the Client.

B 200 Verification as a Complementary Activity

201 Verification shall be complementary to routine design, construction and operations activities and not asubstitute for them. Therefore, although verification will take into account the work, and the assurance of thatwork, carried out by the Client and its contractors, it is possible that verification will duplicate some work thathas been carried out previously by other parties involved in the natural gas facility.

202 The verification plan shall be developed and implemented in such a way as to minimise additional work,and cost, to maximise its effectiveness. The development of the verification plan shall depend on the findingsfrom the examination of quality management systems, the examination of documents and the examination ofproject activities.

B 300 Risk-based Levels of Verification

301 To achieve a DNV Certificate of Conformity for a natural gas facility a verification of the activitiesdescribed by the scope of work defined within this DSS first shall take place.

302 The level of verification activity is differentiated according to the overall risk to the facility and toindividual parts of it. If the risk to the facility (or a particular part) is higher, the level of verificationinvolvement is higher. Conversely, if the risk to the facility (or a particular part) is lower, the level ofverification activities can be reduced, without any reduction in their effectiveness.

303 The extent of verification of gas facilities is categorised into Low, Medium and High. A summary of thelevels of involvement is given in Table 2-1.

304 It is the prerogative of the Client of the natural gas facility to decide the level of verification. Theselection should consider the factors given in Sec.2 C. The selection of the most suitable verification level maybe guided by using the information gained from a Quantitative Risk Assessment, or alternatively qualitativelyby trigger questions, as described in Appendix A. Further guidance is provided in DNV-OSS-300 Risk BasedVerification.

305 Where DNV is issuing the Certificate of Conformity for the facility, DNV will decide on the appropriatescope and use the same type of questions to evaluate the suitability of the selected level.

306 Different levels of verification can be chosen for different phases of the natural gas facility’s design,construction or commissioning, or even within the same phase if necessary. For example, the design of aparticular component or unit may be innovative and considered high risk whereas the construction andinstallation methods are well-known and considered low risk. The converse might be true also.

307 The level of verification can be reduced or increased during a phase if the originally chosen level isconsidered too rigorous or too lenient, as new information on the risks to the natural gas facility becomesavailable.



308 Verification should be planned in close co-operation with the Client and each of its contractors, toprovide a scope of work that is tailor-made to the schedule of each production process or activity, i.e. to makethe verification activities, surveillance and hold points, an integrated activity and not a delaying activity.

Guidance note:Many contractors have adequate quality control systems and quality control departments, with competent personnelto perform, for example, inspection at pressure vessel manufacturers.In that case, not all verification work need be done by DNV personnel. Where applicable, the various inspections maybe carried out by competent persons other than DNV personnel.In that situation DNV’s verification activities may comprise:

— reviewing the competence of the contractor’s personnel— auditing their working methods and their performance of that work— reviewing the documents produced by them.


309 Verification will direct greatest effort at those elements of the natural gas facility whose failure orreduced performance will have the most significant impact on safety and integrity. 310 The degree of confidence placed in a certificate by its users depends on their degree of confidence in theverification carried out. Therefore, the level of verification will be stated on the Certificate of Conformity forthe facility.311 If more than one verification level has been used for a phase, then the lowest level will be reported onthe facility’s certificate, and the additional verification activities will be identified and described in theverification report.

C. Selection of Level of Verification

C 100 Selection Factors101 The selection of the level of verification shall depend on the criticality of each of the elements that havean impact on the management of hazards and associated risk levels of the facility. This is illustrated by Figure1 below.102 The contribution of each element shall be judged qualitatively and/or quantitatively and shall use, wherepossible, quantified risk assessment data to provide a justifiable basis for any decisions made.103 Selection factors are the:

— overall safety objectives for the facility— assessment of the risks associated with the facility and the measures taken to reduce these risks— degree of technical innovation in the facility— experience of the contractors in carrying out similar work— quality management systems of the Client and its contractors.



Figure 1 Selection of the Required Level of Verification

Table 2-1 Levels of Verification - Summary of InvolvementLevel Description of involvement Guidance for application on the level of involvement

Low — Review of general principles and production systems during design, construction and commissioning

— Review of principal design documents, construction and commissioning procedures and qualification reports

— Site attendance only during system testing— Less comprehensive involvement than level

Medium

— Proven facility designs with relatively harmless contents and/or installed in benign environmental conditions

— Established design; manufacturing and installation by experienced contractors

— Low consequences of failure from a safety point of view (or environmental or commercial, if required)

— Relaxed to normal completion scheduleMedium

— Review of general principles and production systems during design, construction and commissioning

— Detailed review of principal and other selected design documents with support of simplified independent analyses

— Detailed review of construction and commissioning procedures

— Full time attendance during (procedure) qualification and review of the resulting reports

— Audit-based or intermittent presence at site

— Facilities in moderate or well-controlled environmental conditions

— Facilities with a moderate degree of novelty— Medium consequences of failure from a safety

point of view, (or environmental or commercial, if required

— Ordinary completion schedule

High — Review of general principles and production systems during design, construction and commissioning

— Detailed review of most design documents with support of simplified and advanced independent analyses

— Detailed review of construction and commissioning procedures

— Full-time attendance during (procedure) qualification and review of the resulting reports

— Full time presence at site for most activities— More comprehensive involvement than level

Medium

— Facilities with a high degree of novelty or large leaps in technology

— Extreme environmental conditions— Inexperienced contractors or exceptionally tight

completion schedule— Very high consequences of failure from a safety

point of view (or environmental or commercial, if required

Note:High, Medium Low Verification Involvement refers to the degree or intensity of verification involvement.

Completion schedules affect verification involvement in an indirect but important way. The effect of a tight completion schedule is pressure on the project team to take less time to carry out the various tasks. Tight completion schedules are more prone to run late, thus adding more pressure on the project team. Problems which have been encountered in this situation in the past have included:

— design reviews not carried out— incomplete welding— non-destructive testing incomplete— missing structural members— commissioning incomplete.

Consequence of Failure

Probability of Failure

Low

High

High

IInnccrreeaassiinnggRRiisskk

MMEEDDIIUUMM

HHIIGGHH

LLOOWW



C 200 Overall Verification Objective

201 An overall verification objective covering all phases of the natural gas facility from design to operationshall be defined by the Client. The objective should address the main integrity goals as well as establishingacceptance criteria for the level of risk acceptable to the Client. Depending on the facility and its location, therisk could be measured in terms of human injuries as well as environmental, political and economicconsequences.

C 300 Assessment of Risk

301 A systematic review should be carried out to identify and evaluate the probabilities and consequences offailures in the natural gas facility. The extent of the review shall reflect the criticality of the facility, the plannedoperation and previous experience with similar facilities. This review shall identify the risk to the operation ofthe facility and to the health and safety of personnel associated with it or in its vicinity.

Once the risks have been identified, their extent can be reduced to a level as low as reasonably practicable bymeans of one or both of:

— reduction in the probability of failure,— mitigation of the consequences of failure.

302 The result of the systematic review of these risks is measured against the safety objectives and used inthe selection of the appropriate verification activity level.

The result of the systematic review of these risks is measured against the safety objectives and used in theselection of the appropriate verification activity level.

C 400 Technical Innovation and Contractor Experience

401 The degree of technical innovation in the natural gas facility system shall be considered. Risks to thefacility are likely to be greater for a facility with a high degree of technical innovation than with a facilitydesigned, manufactured and installed to well-known criteria in well-known locations.

Similarly, the degree of risk to the facility should be considered where contractors are inexperienced or thework schedule is tight.

402 Factors to be considered in the selection of the appropriate verification level include:

— degree of difficulty in achieving technical requirements— knowledge of similar facilities— knowledge of contractors’ general experience— knowledge of contractors’ experience in similar work.

C 500 Quality Management Systems

501 Adequate quality management systems shall be implemented to ensure that gross errors in the work forfacility design, construction and operations are limited.

502 Factors to be considered when evaluating the adequacy of the quality management system include:

— whether or not an ISO 9001 or equivalent certified system is in place— results from external audits— results from internal audits— experience with contractors’ previous work— project work-force familiarity with the quality management system, e.g. has there been a rapid expansion

of the work force or are all parties of a joint venture familiar with the same system.

D. Communications

D 100 Notification of Verification Level

101 An assessment of the required level of verification for a project should be made by the Client beforepreparing tender documents for design and construction activities. The Client can then specify this level inInvitations to Tender. This will give contractors clear guidance and reference when estimating the extent andcost of efforts associated with verification activities.

102 The required level of verification can be assessed by the Client using this DSS. However, if the Clientrequires the Contractor to carry out this assessment as part of his response to an Invitation to Tender the Clientshould provide the necessary information to enable the Contractor to carry out this work. This informationshould include overall safety objectives for the natural gas facility as well as particulars, such as temperatures,pressures, contents and environmental criteria, commonly contained in a design brief.



D 200 Obligations201 To achieve the purpose and benefits of verification the involved parties shall be mutually obliged to shareand act upon all relevant information pertaining to the verification scope.202 The Client shall be obliged to:

— Inform DNV about the basis for selecting the level of verification and the investigations and assumptionsmade in this context.

— Give DNV full access to all information concerning the verification scope for the natural gas facility andensure that clauses to this effect are included in contracts for parties acting on behalf of the Client andparties providing products, processes and services covered by the verification scope. If information isproprietary and not available, exclusion from verification shall be mutually agreed with DNV.

— Ensure that DNV is involved in the handling of deviations from specified requirements within theverification scope.

— Act upon information provided by DNV with respect to events or circumstances that may jeopardise thesafety or integrity of the facility and/or the purpose and benefit of verification.

— Ensure that the Safety Objective established for the facility is known and pursued by parties acting onbehalf of the Client and parties providing products, processes and services covered by the verificationscope.

203 Second parties shall be obliged to:

— Perform their assigned tasks in accordance with the safety objectives established for the project.— Provide the Client and DNV with all relevant information pertaining to the verification scope.

204 DNV will be obliged to:

— Inform the Client if, in the opinion of DNV, the basis for selecting the level of verification or theassumptions made in this respect are found to be in error or assessed incorrectly.

— Inform the Client of events or circumstances that, in the opinion of DNV, may jeopardise the safety orintegrity of the facility and/or the purpose and benefit of verification.

— Effectively perform all verification work and adjust the level of involvement according to the actualperformance of parties providing products, processes and services covered by the verification scope.



SECTION 3SERVICE OVERVIEW

A. General

A 100 Objectives101 The objectives of this section are to provide:

— an overview of the verification activities — details of DNV’s verification services for onshore LNG and Gas facilities during design, construction and

commissioning phases.

B. Service Process

B 100 General Principles101 The description of the process of DNV’s verification of LNG and gas receiving onshore facilities is basedon distinct project phases and the recognition of key milestones.102 Verification performed by DNV normally progresses through one or more of these project phases andmay include all or selected aspects of the project. Prior to commencement of work, the scope shall be definedin terms of the facilities to be verified (battery limits to be specified), applicable codes and standards andperformance requirements, the agreed verification levels and phases to be covered in the Verification Plan. 103 Credit may be given in the Verification Plan, in terms of reduction in the Verification scope, forcompliance to National regulations for example EC Pressure Equipment, Machinery Directive and ATEXDirectives certified by a Notified Body. This is relevant for projects in the European Union in which the ECDirectives are applicable.104 The risk based verification process is described in relation to the normal project phases:Project initiation:

— conceptual design.

Project Execution:

— project Management— detail design— construction— manufacturing of process facilities— manufacturing and fabrication of process facilities components and assemblies— site assembly and integration— project completion (pre-commissioning)— commissioning— issue of as-built and as-installed documentation,— issue of operation manuals.

B 200 Simplified verification planning201 The steps in the simplified verification planning are as follows:

— Use trigger questions to assess the overall risk level of the project (or manageable elements thereof). — Evaluate the risk against the relevant project acceptance criteria (often this can be directly tied to the

Client’s core values, objectives or a sub-set of these) and decide whether the general verificationinvolvement shall be Low, Medium or High.

— Use the example detailed scope of work tables in Appendix B to make a first draft of a Verification Plan.— Generate the project specific Verification Plan by including a project specific engineering judgment or risk

analysis to adjust the table to suit the project.— Perform the verification execution according to the Verification Plan, making revision to the plan if and

when necessary.— Report the verification.

202 The trigger questions are included in Appendix A.203 Generic scopes of work for verification are suggested at the three levels of verification:

— low (L)— medium (M)



— high (H).

These are given in the tables in this section.

204 Project specific detailed scope of work descriptions should be made identifying all relevant activities tobe verified. Examples of the level of detail are given in Appendix B.

205 It is the tables in this Sec.3 that give the principle difference between the levels of verificationinvolvement. The detailed example tables in Appendix B are to be treated as examples only. They shall not beused without a project specific confirmation of their completeness based on an assessment of the prioritisedrisks.

206 The project specific scope of work definition, derived from the tables in Appendix B (or similar), shallbe part of the final DNV verification report.

B 300 Selection of level of verification

301 The selection of the level of verification for the simplified verification planning is facilitated by thetrigger questions included in Appendix A.

B 400 Codes, standards and reference documents

401 The verification process described in this DNV-DSS is not tailored to a specific technical standard, codeor reference document.

402 It is recommended to use internationally recognised codes or standards. Where combinations ofstandards and external criteria are used the exact terms of reference and documents to be issued shall be agreedat the beginning of the project and formally defined in the contract.

403 It is strongly recommended not to mix standards due to the possible differences in safety philosophies.The use of European standards (EN) is required for compliance to EC directives.

Guidance note:

Most standards are a coherent collection of requirements for all the relevant aspects of a process system. Theseaspects, e.g. load and resistance, are normally among themselves adjusted to give an overall acceptable safety level.To pick requirements from different standards can then easily result in unpredictable (low) levels of safety and non-uniform level of safety.


C. Project Initiation

C 100 Verification during conceptual design

101 Verification during the conceptual and or feasibility studies of a project and in the early stages of aproject can reduce the need for verification during the design and construction phases, and can reduce costsduring the long term operation, inspection and maintenance phases.

D. Project Execution

D 100 General

101 All design, construction and commissioning aspects, relevant to an onshore LNG and Gas Facility, shallbe covered by a verification process.

102 In this specification the split in the scope of work between design and construction is made between setsof performance requirements developed during design and a description of the steps necessary to satisfy thespecification (procedures) showing how construction verification activities will be implemented.

Table 3-1 Scope of work for initial verification plan Verification activity Level

L M HReview of the project conceptual designReview of initial design x x xReview of environmental aspects x xReview of project schedule risks x xReview of business risk x x



Guidance note:The split between design and construction phases may vary, but it is useful to spend some time on the definition toreduce interface problems later.


D 200 Verification of overall project management

201 Verification of the overall project management is the examination of the means of controlling the entireonshore LNG and Gas Facilities development project, or the phase for which verification is undertaken.

202 This verification should confirm that the necessary controls are in place to ensure adequate informationflow across the various interfaces. It is especially important where separate contractors have been employedfor different phases of the project such as design and installation.

203 Typically, the documentation produced is expected to be in line with ISO 9000 requirements.

204 The verification of the overall project management quality system and documentation is optional. Thereviews and audits should typically be performed if an extensive verification of a project is performed, whilemay be omitted for smaller sub-phase verifications.

D 300 Verification during design

301 Design verification is the examination of the assumptions, methods and results of the design process andis performed at the specified level of verification to ensure that the specified requirements of the onshorefacilities will be achieved.

302 Design verification should consist of one, or more, of the following:

— review of specifications for design (asset specifications)— review of design reports and drawings— review of technology qualification program and associated results (for new technology)— performing independent calculations— audit of project quality management system— review of specifications for construction, installation and operations, resulting from design.

303 The documents that shall be produced in the project should as a minimum satisfy the requirements of theselected code applicable for the project.

304 Definition of scope of work for verification of design should follow Table 3-3.

Table 3-2 Scope of work for verification of overall project management Verification activity Level

L M HReview of the project management process by:Review of project quality management documentation. x x x

Audit of project quality management system x xReview of sub-contractor control x xReview of interface controls x xReview of methods of information flow including document control x x

Table 3-3 Scope of work for verification of design Verification activity Level

L M HReview of specifications for design by:— Review of the design basis with emphasis on the design criteria x x xReview of design reports and drawings by:Review of the main documentation to ensure that the main load conditions have been accounted for in design, that the governing conditions are identified, and that the chosen design philosophies are in accordance with specified codes and standards

x x x

Evaluation of the main methods used and spot checks of the input data and the calculation results x x

Detailed review of main design reports xPerforming independent calculations by:Check of pressure containment or overall integrity x x xSimplified independent analysis and calculation(s) performed by spot checks x xAdvanced independent analysis and calculation(s) performed by spot checks x



Guidance note:Design verification activities may be split up between Basic Design and Detailed Design, or other sub-phases,depending on type of contract.


D 400 Verification during construction

401 The construction phase comprises procurement, fabrication, manufacturing, sub-unit and unit integrationtesting, assembly, erection and commissioning. An important element is to ensure that the contractual designrequirements are incorporated in the purchase documentation, and that correct materials, joining and corrosioncontrol, have been applied, and that pressure rating, capacity and function are meeting the requirements as perapproved specifications and procedures. It is imperative that relevant preparations for this is started as early aspossible, e.g. by the appointment of a vendor supply verification co-ordinator.

402 Verification during construction is carried out by means of full time attendance, audits, inspection or spotchecks of the work, as appropriate, in sufficient detail to ensure that the specified requirements of the facilitywill be achieved.

403 Verification of these activities relates not only to the contractor’s work but also to the monitoring of thiswork carried out by others.

404 Construction verification should consist of one, or some, of the following:

— reviewing the construction process— reviewing construction procedures— reviewing qualification process— surveillance during construction activities— reviewing final documentation.

405 The documents that should be produced in the project and submitted for review prior to start up aretypically:

— Manufacturing Procedure Specification (MPS)— manufacturing procedures and method statements, including test requirements, test procedures and

acceptance criteria, repairs, personnel qualification records etc.— material specifications and data sheets— quality plans including Inspection and Test Plans (ITP)— Welding Procedure Specifications (WPS) and Welding Procedure Qualification Record (WPQR)— NDT procedures— Manufacturing Procedure Qualification Test (MPQT) results.— manufacturer’s and fabricator’s quality system manual.

406 The “as-built” documentation to be submitted after manufacturing should include but not be limited to:

— manufacturing procedures including test requirements and acceptance criteria, repairs, personnelqualification records etc.

— Material certificates— production test records (visual, NDT, test samples, dimensional, heat treatment etc.)— hydrostatic test report— FAT (Final Acceptance Test) report— commissioning report.— as-built drawings— relevant statistics of chemical composition, mechanical properties and dimensions for the deliveries.— relevant logs.

407 Definition of scope of work for verification of construction should follow Table 3-4 for manufacturingand fabrication of critical (high-risk) components, Table 3-5 for manufacturing and fabrication of componentsnot considered critical, Table 3-6 for verification of site construction and Tables 3-7 and 3-8 for final testing,pre-commissioning and completion.

Review of specifications for construction and operation by:

Spot check of critical aspects x x xReview of main specifications x xThorough review of main specifications xReview of specific operational challenges (e.g. flow assurance etc.)general principles x x xReview of main documents supported by simplified analyses x x



Guidance note:Materials may be ordered with certificates of varying degrees of independent 3rd party verification (e.g. 3.2 accordingto EN 10204). This can this be integrated in the overall verification activities, so as not to duplicate work.


Table 3-4 Scope of work for verification of manufacturing and fabrication of critical equipment

Verification activity LevelL M H

Review of the manufacturing and fabrication processReview of manufacturing and fabrication management systems x x xAudit of the quality management system x xReview of manufacturing and fabrication proceduresReview manufacturing, fabrication and inspection procedures for confirmation of compliance with the manufacturing specification x x x

Review method statements x xReview of qualification processReview the Manufacturing Procedure Specification, (MPS), Manufacturing Procedure Qualification Test (MPQT), as applicable x x x

Full time attendance during MPQT, as applicable, or first day production x xSurveillance during manufacturing and fabrication activitiesVisit-based attendance during testing, to ensure, based on spot checks, that the delivered products have been produced in accordance with the manufacturing specification x x x

Visit-based or full-time attendance during manufacturing and fabrication to ensure, based on spot checks, that the delivered products have been produced in accordance with the manufacturing specification

x x

Full-time attendance during manufacturing and fabrication to ensure, based on spot checks, that the delivered products have been produced in accordance with the manufacturing specification x

Review of final documentation x x x

Table 3-5 Scope of work for verification of manufacturing and fabrication of non-critical componentsVerification activity Level

L M HReview of the manufacturing & fabrication process— Review of manufacturing and fabrication management systems x xReview of manufacturing & fabrication procedures— Review manufacturing, fabrication and inspection procedures for confirmation of compliance

with the manufacturing specification x x

Review of qualification process— Review the Manufacturing Procedure Specification, (MPS), Manufacturing Procedure

Qualification Test (MPQT), if applicable x x x

— Full time attendance during MPQT, if applicable, or first day production xSurveillance during manufacturing and fabrication activities— Visit-based attendance during testing, to ensure, based on spot checks, that the delivered

products have been produced in accordance with the manufacturing specification x x

— Visit-based attendance during manufacturing and fabrication to ensure, based on spot checks, that the delivered products have been produced in accordance with the manufacturing specification

x

Review of final documentation x x x



Table 3-6 Scope of work for verification of site constructionVerification activity Level

L M HReview of the construction processReview of construction management systems x x xAudit of the quality management system x xReview of construction proceduresSpot check of construction procedures, including erection procedures x x xFor critical operations (identified from the FMEA and HAZOP studies or QRA) review the method statements x x

Review of qualification processFor critical operations, review the qualification process, e.g.- welding- non-destructive testing- site heat treatment

x x x

Full time attendance during qualification tests x xSurveillance during construction activitiesVisit-based attendance during start of each critical operation x x xFull time attendance during each critical operation x xFull time attendance for all construction operations xReview of final documentation x x x

Table 3-7 Scope of work for verification of site commissioning and start-upVerification activity Level

L M HReview of the commissioning processReview of commissioning management systems x x xAudit of the quality management system x xReview of commissioning proceduresSpot check of commissioning procedures x x xFor critical operations (identified from the FMEA and HAZOP studies or QRA) review the method statements x x

Surveillance during commissioning activitiesVisit-based attendance during start of each critical operation x x xFull time attendance during each critical operation x xFull time attendance for all commissioning operations xReview of final documentation x x x

Table 3-8 Scope of work for verification of final testing for operation, including as-built survey and project completion

Verification activity LevelL M H

Review of proceduresReview of the procedures for commissioning tests to ensure that the procedure adequately covers the system in accordance with the design requirements x x x

Surveillance during testing and completion activitiesFull time attendance during commissioning x xFull time attendance during specific tests testing and audit based attendance during ongoing testing

x

Review of test results x x xReview of final documentationSpot check of as-built documentation x x xReview of as-built documentation x



E. Verification Documents

E 100 GeneralThe hierarchy of verification document is given in DNV-OSS-300 Appendix C. The descriptions of the contentof these documents as well as examples of Reporting templates are given in Appendix C to this specification.


DNV Service Specification DNV-DSS-315, October 2010 Amended April 2012 – App.A see note on front cover

APPENDIX A SELECTION OF VERIFICATION LEVEL

A. General

A 100 General principles101 The selection of the level of verification depends on the risk level of each of the elements that have animpact on the management of risks to the asset.102 Verification shall direct greatest effort at those elements of the asset where the risk is highest and whosefailure or reduced performance will have the most significant impact on the project objective and goals, e.g.:

— safety risks— environmental risks— business risks.

103 Suitable selection factors include, but are not limited to, the:

— overall safety and other objectives for the asset— risks associated with the asset and the measures taken to reduce these risks— degree of technical innovation in the asset— experience of the contractors— quality management systems for the Project and its contractors.

104 Due to the diversity of various installation facilities, their contents, their degree of innovation, thegeographic location, etc, it is not possible to give precise guidelines on how to decide what level of verificationis appropriate for each particular LNG and gas receiving onshore facility.105 Therefore, guidance is given as a series of questions that should be answered when deciding theappropriate level of verification for an onshore gas facility. This list is not exhaustive and other questionsshould be added to the list if appropriate for a particular onshore gas facility.106 It must be emphasised that the contribution of each element should be judged qualitatively and/orquantitatively. Wherever possible quantified risk assessment data should be used to provide a justifiable basisfor any decisions made.107 Depending of the stage of the project, the activities may not have taken place yet in which case thequestions can also be posed in another form, i.e. “Is …. planned to be?”

B. Trigger Questions

B 100 Overall project objective and goals

a) Does the overall verification objective address the main project objectives?b) Does the verification objective establish acceptance criteria for the level of risk acceptable to the Client?c) Is this risk (depending on the onshore LNG and gas facility and its location) measured in terms of safety,

as well as environmental, economic and reputation consequences?

B 200 Assessment of risk

a) Has a systematic review been carried out to identify and evaluate the probabilities and consequences offailures in the onshore gas facilities?

b) Has this review judged the contribution of each element qualitatively and or quantitatively and used, wherepossible, quantified risk assessment data to provide a justifiable basis for any decisions made?

c) Does the extent of the review reflect the risk level of the (onsite and offsite) onshore gas installation, theplanned operation and previous experience with similar facilities?

d) Does this review identify the risk to the operation of the onshore gas facilities and to the health and safetyof personnel associated with it or in its vicinity?

e) Has the extent of the identified risks been reduced to a level as low as reasonably practicable by means ofone or both of:

— reduction in the probability of failure?— mitigation of the consequences of failure?

f) Has the result of the systematic review of the risks been measured against the Client’s safety (or other)objective?


Amended April 2012 DNV Service Specification DNV-DSS-315, October 2010see note on front cover App.A –

g) Has the result of this review been used in the selection of the appropriate verification activity level?

B 300 Technical innovation

a) Has the degree of technical innovation in the onshore gas facilities been considered?b) Has it been considered that risks to the onshore gas facilities are likely to be greater with a high degree of

technical innovation than with an onshore gas facility designed, manufactured and installed to well-knowncriteria in well-known locations?

c) Have factors been considered in the selection of the appropriate verification level such as:

— Degree of difficulty in achieving technical requirements.— Knowledge of similar onshore LNG and gas facilities— Effect of the new onshore LNG and gas facility on the surrounding area.

B 400 Contractors’ experience

a) Has the degree of risk to the onshore LNG and gas facilities been considered where design, construction orinstallation contractors are inexperienced?

b) Has the degree of risk been considered where the contractors are experienced but not in similar work?c) Has the degree of risk been considered where the work schedule is tight?

B 500 Quality management systems

a) Have all parties involved in the onshore LNG and gas facilities implemented an adequate qualitymanagement system to ensure that gross errors in the work are limited?

b) Do these parties include the:

— client?— design contractor?— construction contractors?— installation contractor?— operator?

c) Do the factors being considered when evaluating the adequacy of the quality management system include:

— Whether or not an ISO 9000 or equivalent certified system is in place?— Results from external audits?— Results from internal audits?— Experience with contractors’ previous work?— Project work force familiarity with the quality management system?


DNV Service Specification DNV-DSS-315, October 2010 Amended April 2012 – App.B see note on front cover

APPENDIX B GENERIC DETAILED VERIFICATION SCOPES OF WORK TABLES

A. Purpose

A 100 Introduction

101 This appendix gives the format of the generic detailed scope of work tables for onshore LNG and Gasfacilities.

102 The Verification Plan shall be developed based on the tables provided in this Appendix. The Tables shallbe supplemented and updated by input from Project Risk Assessments when developing the Plan.

103 The appropriate level of verification involvement based on the principles outlined in Sec.3, is furtherdefined in the Verification Plan.

104 For gas facilities with aspects or components not covered in this Appendix, similar tables, with the samedegree of detail, shall be developed.

B. Critical Elements

B 100 Critical Elements and Components

101 Based on the results of the HAZID, HAZOP or other risk assessments, gas facilities are likely to havemany or most of the critical elements listed in 104 below.

102 Verification of design is broken down into consideration of these critical elements and components inisolation but the many interactions between them must not be forgotten.

103 Typical Critical Elements for an onshore LNG and gas facilities are shown in Table B-1. These CriticalElements shall be modified to suit a specific facility and the Project Objectives.

Table B-1 Onshore LNG and Gas facilities - Typical Critical Elements and associated componentsFunction Critical Elements Component

Inherent Safety Measures

Layout Area classification

Hydrocarbon Inventory/Leak Source Minimisation All

Hazard Prevention Measures

Offloading and Loading Facilities Integrity

Ship-Shore InterfaceLoading Arms and Transfer FacilitiesLNG Transfer PipelinesJetty and Moorings

Process Facilities Integrity

Support Structures and Foundations Relief Valves and Relief SystemProcess SystemsCryogenic Pressure Vessels, Piping and EquipmentNon-Cryogenic Pressure Vessels, Piping and EquipmentLNG Storage Tanks

Dropped Object and Impact Protection Critical components

Hazard Detection and Control Measures

Control of Ignition

Bunding and DrainsFired Heaters, Hot Surfaces and ExhaustElectrical items (explosion proof rating, electromagnetic compatibility, ingress protection)Lightning Protection, Static and Earthing

Fire and Gas Detection

Smoke and Gas Detection for Site BuildingsFire and Gas Detection - External AreasFire and Gas Detection - Machinery EnclosuresFire and Gas Control System

Control Room Control SystemsHVAC Ventilation System, Fire Dampers pressurised enclosures


Amended April 2012 DNV Service Specification DNV-DSS-315, October 2010see note on front cover App.B –

104 The following Tables P1 to P7, C1 to C4, M1, E1 to E3 and N1 provide a template of verificationactivities which can be used for Verification activity planning. These give generic performance requirementsand verification activities for typical Critical Elements:

— P1 Support Structures and Foundations — P2 Installation Layout— P2 Non-Cryogenic Pressure Vessels and Equipment— P4 Cryogenic Pressure Vessels and Equipment— P5 LNG Tanks— P6 Open Hazardous Drains— P7 Pressure Relief Systems— C1 Ignition Prevention and Control System— C2 Emergency Shutdown System— C3 Blowdown System— C4 Fire and Gas System— M1 Fire and Blast Protection Systems— E1 Emergency Power System Supply— E2 Emergency Escape and Evacuation — E3 Emergency Communications— N1 Environmental Protection

Hazard Mitigation Measures

Active Fire Fighting Systems

Fire Water StorageFirewater PumpsFirewater Distribution Ring mainFirewater and Foam SupplyGaseous Fire Fighting SystemsFire-fighting Vehicles

Blast and Passive Fire Protection Critical componentsBunding and Drainage Closed drains, open drains, tank bunds

Blowdown & Flare System Flare, Blowdown valves, knock-out drum, relief valves

Emergency Shutdown System (ESD)

ESD Control SystemEmergency Shutdown Valves (ESDVs)

Emergency Response Measures

Egress and Evacuation SystemPersonnel Protection, Breathing ApparatusEscape Routes

Emergency Services

Muster AreaEmergency LightingEmergency Power, uninterruptible power supplyEmergency Communications and Alarms

Environmental Protection

Emission and Waste Control Systems Emission and Discharge Controls

Waste Heat Recovery Waste Heat Recovery Units

Table B-1 Onshore LNG and Gas facilities - Typical Critical Elements and associated components Function Critical Elements Component



Table P1 – Support StructuresHSE CRITICAL ELEMENT: STRUCTURAL INTEGRITYSupport Structures

HAZARD MANAGEMENTPrevention Control Mitigation Emergency Environment

OBJECTIVES: The objectives of the Structural Integrity performance requirement are:1) To ensure that foundations will adequate support of surface structures and equipment2) To ensure that surface structures are able to support the weight of the installation facilities and equipment and transfer all operating and environmental loads to the foundations;- support escape routes to allow personnel to escape from the process Installation to the muster areas and then evacuate to a place of safety;- prevent escalation following a major accident by maintaining the integrity of equipment supports; LIMITS and BOUNDARY:Foundations of support structures include the following major items of equipment: a) Slug catcher b) Storage tanks (Condensate, LPG, LNG) c) Major Rotating Equipment d) Buildings (local and central control room), e) Critical Utility Systems (electricity, heating and cooling, fuel gas) f) Flare Stack g) Pipe rack in process areah) Firewater retention pond bund i) Scrubbers j) Columns (distillation, contactors, wash) k) Vaporizersl) Major Heat Exchangers (cold box) m) Condensors n) Stair towers and escape routesRELEVANT SPECIFICATIONSEN1473 Installation and equipment for liquefied natural gas - Design of Onshore InstallationsEN1992 Design of Concrete StructuresEN1993 Design of Steel StructuresEN1994 Design of Composite Steel and Concrete StructuresNFPA 59A Standard for Production, Storage and handling of Liquefied Natural GasEN14620-1, Design and Manufacture of Site Built Vertical Cylindrical Flat bottomed Steel Tanks for the Storage of Refrigerated Liquefied Gases with operating temperatures between 0°C and -165°C – Part 1 General

Performance Requirement Specification

Document Types: Phase Verification Activity

Foundations

Foundations to be designed such that they adequately support the structures under all realistic loading conditions as per code requirements for:

— slug catcher— storage tanks (condensate,

LPG, LNG)— major rotating equipment— buildings— critical utility systems— flare stack— pipe-racks/supports— firewater retention pond

bund— scrubbers— columns— vaporizers— re-condensors— major heat exchangers

(cold box)— stair towers and escape

routes

Guidance: Heat tracing system to prevent frost heave of LNG Tank foundations is a critical system which requires sufficient reliability.

- Basis of Design- Detail design calculations (including computer input/ output if applicable)- Soil or Geotechnical reports- AFC foundation drawings

Design

Confirm by review of civil foundation design that the foundation will adequately support the structure under all realistic loading conditions. Including the following as relevant to the specific foundation design:Review foundation piling design for a given soil condition for the maximum and minimum governing loading cases. Check:

— Resistance to differential settlement— Sliding resistance if relevant— Frost heave of tank foundations to be avoided if

relevant — Seismic/earthquake— Review design of concrete foundation base,

reinforcement requirements and check that the material specified is suitable

— Review foundation construction drawings for compliance with the design

— Design of tank connections to foundation base.

Method StatementsITPMaterial CertificatesConcrete Strength Test Records

Construction

Review construction procedures for piling, pile caps and rafts to confirm compatibility with industry practiceConfirm by audit that the properties and origin of materials for piles, pile caps and rafts (steel, reinforcement, aggregates, concrete mixes) are according to specifications and/or as specified on drawings.Review records and monitor construction to: Confirm that pile layout, position, dimensions and depths are in accordance with design;Confirm by sampling review of test results that strength of concrete piles, pile-caps, rafts meet minimum requirements.



Support Structures

Support against all loading anticipated through the design life of the installation:flare structureprocess equipment pipe-work supportsfirewater retention pond bund

Guidance: Loads include environmental, dead loads, live loads, accidental loads as specified in the risk assessment, seismic and operational loads

Basis of DesignLoad analysisDetail design calculations (including computer input & output if applicable)Drawings

Design

Confirm by review of design basis that all relevant design conditions are being considered, the correct loads have been combined for each load case, and the load combinations and allowable limits conform to the requirements of an applicable and recognised code.Review Mooring Analysis to ensure that the loads for the range of vessels anticipated to berth at the Jetty are considered for design.

Design

Confirm by review of the structural analyses, weight reports and environmental data or by independent analysis that:

— the loads and load cases identified in the design basis for all the design conditions have been correctly incorporated

— the thermal loads induced by the flare radiation have been correctly assessed and included in the load combinations

— in conjunction with the structural drawings that the structural and material properties have been correctly assessed and incorporated

— the response to the applied loads has been correctly assessed and stresses do not exceed the values specified in the code specified in the design basis

— suitable materials have been specified.

Method StatementsITPWPQR and NDT RecordsFabrication Dossiers

ConstructionReview fabrication specification for the support structures to confirm that it is compatible with the relevant industry practice

Construction

Confirm by surveillance that the properties and origin of all materials within this CE are assured and that material properties are at least equivalent to those specified in the fabrication drawings.

Construction

Review records and monitor fabrication to:

— Confirm compliance with the design and fabrication specification with any deviation documented & justified and that dimensions are within tolerances defined in the specification.

— Confirm that welding procedures are in accordance with the fabrication specification.

— Confirm by document review that NDT and inspections are being carried out in accordance with the requirements of the fabrication specification and design requirements.





Support structures for enclosures with critical functions or containing critical equipment or normally occupied by people shall maintain integrity for the time required to complete their safety critical actions under:

(a) fire loading and following a design explosion [as defined in the FERA]. Plastic deformation is acceptable providing integrity is maintained

(b) other accidental events as specified in the design basis or as required in code requirements.

(c) accidental spillage of LNG and cryogenic liquids causing brittle fracture

QRAFERAFire and Blast Structural analysesPFP Specifications

Design

Review the FERA (or other appropriate study) to confirm that fire and blast scenarios and fire and blast loads are appropriate. Confirm that these scenarios have been incorporated into the design basis.

Design

Confirm by review of safety studies that the time required for essential safety equipment to complete safety critical actions has a) been identified; and b) been considered in the design

Design

Confirm by review of the fire and blast structural analyses that the structure is adequate or has adequate PFP to withstand the scenarios identified in the FERA, for the required period, and conforms to the requirements of a recognised code.

DesignConfirm by review of PFP specification and reports (type approval certificates, test reports etc) that PFP specified is adequate and sufficient.

Design

Confirm that support structures and escape ways that maybe exposed to accidental spillage of LNG (if considered a credible event) are protected against brittle failure if failure of such structures can result in escalation. e.g. water curtain, drip trays, thermal protection of steel structures.

Method StatementsITPSpecificationsProduct Certificates

Construction

Confirm by monitoring and review of records that measures to provide protection from blast overpressure, fire (PFP) and LNG spillage have been implemented and conform to the structural drawings.





Table P2 - Installation LayoutHSE CRITICAL ELEMENT: PROCESS CONTAINMENTInstallation Layout


OBJECTIVES: The layout of facilities in the Installation shall:

— Ensure safe working conditions and access for personnel and equipment for operation and maintenance.— Prevent ignition by separation of ignition sources from fuel sources and non hazardous area from hazardous area

(Note: Hazardous area classification is addressed in HSE Critical Element P7 Ignition Prevention and Control).— Minimise the consequence of fire and explosion, in particular with respect to escalation and ease of access for fire

fighting personnel and equipment.LIMITS and BOUNDARY:All equipment and unit layouts within installation battery limits. RELEVANT SPECIFICATIONSNFPA 59AEN1473IP part 15



Fire Zone limits shall be selected such that the consequences of a fire, a flammable gas leak or an explosion corresponding to the credible event likely to occur in the concerned fire zone shall not impact other fire zones to an extent where their integrity could be put at risk.

HAZID StudySafety ConceptImpacted, Restricted Area and Fire Zone Layout

Design

Confirm by review of the scenario’s taken in the HAZID Study that all worst case and fire zone limit defining cases have been correctly selected and modelled as required.

HAZID StudySafety ConceptImpacted, Restricted Area and Fire Zone Layout

Design

Confirm by review of the HAZID Study results against the fire zone layout plots and fire zone safety distance layouts that all appropriate fire zone safety distances have been complied with, unless deviations are noted and approved. Compliance shall be confirmed with respect to the above relevant Project Specifications.

Areas affected permanently by normal operation of the facility or exceptionally by the consequences of an emergency situation caused by a major failure shall be designated as “Restricted Areas” which shall be confined to within the boundaries and control of the Installation.

Guidance: Areas affected permanently implies areas defined by flare and vent dispersion and radiation by Hazardous Area Classification or by legislation.

HAZID/HAZOP StudySafety ConceptImpacted, Restricted Area and Fire Zone LayoutInstallation and Equipment Plot Plans

Design

Confirm by review of the scenarios considered in the HAZID Study that all worst case and restricted area defining cases have been correctly selected and modelled as required.Confirm by review that simultaneous operations (e.g. maintenance activities, truck loading) cannot cause additional unacceptable situations.

HAZID StudySafety ConceptImpacted, Restricted Area and Fire Zone LayoutInstallation and Equipment Plot Plans

Design

Confirm by review that all buildings and equipment located within the Restricted Areas are correctly identified as being suitable for the applicable Restricted Area requirements. Restricted areas extending beyond the Installation boundary shall be adequately addressed through Risk Assessment.The criteria for equipment and buildings design when located inside the restricted areas are provided in the relevant project specifications.



Facility, equipment and building layout shall meet the general requirements of the Client.

Safety ConceptInstallation and equipment Plot Plans

Design

Confirm by review of Installation equipment layouts that minimum spacing requirement with respect to the project requirements are complied with.

Safety ConceptBuilding LayoutsPlot Plans

DesignConfirm by review of building area layouts that general spacing and equipment locations comply with the minimum project requirements.

Working platforms, walkways, stairs, step-ladders, guard-rails and fixed ladders shall meet the safety requirements of the Client and local regulations.

Safety ConceptWorking environmentInstallation and equipment Building LayoutsPlot Plans

Design

Confirm by review of Installation equipment and building area layouts that minimum fixed means of access requirement with respect to the project and regulatory requirements are complied with.

Construction drawings Construction

Review Specification for Fabrication and Construction of the Installation and building area and confirm that it is in compliance with specifications or compatible with industry practice.satisfactory level of inspection and possible measurement will be performed by all parties; fabrication acceptance criteria are in accordance with Specification for Fabrication and InstallationConfirm by review of Installation equipment and buildings that Hazardous layout on site complies with all project requirements.

Table P3 – Non-cryogenic pressure vessels, piping & equipmentHSE CRITICAL ELEMENT: PROCESS CONTAINMENTNon-Cryogenic Pressure Vessels, Piping and Equipment


OBJECTIVES: To provide appropriate and effective pressure containment systems and process equipment that shall eliminate or minimise likelihood of release of hazardous material or loss of containment. LIMITS and BOUNDARY:Pressure vessels, storage tanks, equipment and pipe-work where significant levels of hydrocarbon are present or could be present during normal operations. ‘Significant’ is defined as those vessels, pipe-work or equipment requiring active mitigation in the event of loss of containment.The process installation equipment including pressure vessels heat exchangers and process equipment are those associated with the following systems: Slug-catcher, Pig Launcher / Receivers, Inlet Separator, Gas Conditioning, Gas Compression, Condensate Stabilisation and Storage, LPG Storage, Chemical Storage, Fuel Gas, Produced Water, Closed Drains and Hot Oil System

- Safety Critical Rotating Equipment are as follows: Condensate Pumps, Gas Compressors, Flare Liquid Pumps, Diesel / Hydraulic / Lube Oil Pumps, Methanol Pumps, Produced Water and Closed Drains Pumps.

- The Safety Critical Pressure Vessels are those associated with the following systems: Scrubbers, Gas Coolers, Gas Conditioning (Amine unit, Molecular Sieve unit, Sulphur recovery unit)

- The Safety Critical Tanks are those associated with the following systems: Condensate Storage Tanks, Closed Drains Collection Tank, Methanol Storage & Diesel (large volumes).

- Piping systems refers to all pipe-work, fittings, flanges, manual valves, tubing, flexible hoses, etc. downstream of the inlet isolation valve associated with the following systems:

- Process Gas, Fuel Gas, Relief, Vent and Flare, Diesel, Hydraulic and Lube Oil, Chemicals, Hot-oil Systems, Cooling Medium System, Produced Water and Closed Drains.

Notes: Piping Systems in high-pressure utility systems (e.g. Utility Air) are considered Safety Critical if their failure is likely to damage the hydrocarbon envelope in the immediate vicinity.For the ESD Valves the process containment is covered in C1 Emergency Shutdown Systems





RELEVANT SPECIFICATIONS- project specific documents- Regulatory requirements- International standards

Pressure Vessels:

— ASME VIII— PD5500

Heat Exchangers:

— API 660 Shell and Tube Heat Exchangers for General Refinery Service— API 661 Air Cooled Heat Exchangers for General Refinery Service— API 662 Plate Heat Exchangers for General Refinery Service— ASME VIII— TEMA

Rotating Equipment:

— API 610 Centrifugal Pumps for Petroleum, Petrochemical and Natural Gas Industries— API 611 General Purpose Steam Turbines for Petroleum, Chemical and Gas Industry Services— API 616 Gas Turbines for the Petroleum, Chemical and Gas Service Industries— API 617 Centrifugal Compressors for Petroleum, Chemical and Gas Service Industries— API 618 Reciprocating Compressors for Petroleum, Chemical and Gas Service Industries— API 672 Packaged Integrally Geared Centrifugal Air Compressors for Petroleum, Chemical and Gas Service

Industries

Tanks:

— API 620 Design and Construction of Large, welded, Low pressure storage tanks— API 650 Welded Steel Tanks for Oil Storage

API RP 686 Recommended Practices for Machinery Installation and Installation DesignAPI 2510 Design and Construction of LPG InstallationsPiping Systems: ASME B31.3Relief Systems: API 14CASME B31 Standards of Pressure PipingEN13480 Metallic Industrial Piping





The process facilities shall safely contain all hydrocarbons at the maximum and minimum foreseeable pressures, design temperatures and operating forces.

Design BasisPFDsP&IDSLine List

Design

Confirm by review of process basis of design, PFDs, line lists and P&IDs that specified design conditions are correct for all lines and equipment.

- Materials

P&IDsPiping Class SpecificationMaterial Selection ReportMaterial Specifications

Design

Review material selection and corrosion control philosophies and coating specifications to confirm that piping class is suitable for the worst case conditions, that suitable allowance for internal corrosion is specified and that significant external corrosion is prevented by suitable protective coatings.

- Piping

Stress Analysis ReportsISOsCritical Line List

Design

Review piping design to confirm that:

— the correct design conditions are considered— suitable criteria are set for identifying which

systems/lines require calculations of stresses— the criteria has been correctly applied in accordance

with the appropriate design codes— there is sufficient piping flexibility inherent in the

design.

- Critical Equipment Packages

Supplier DataFAT ReportsManufacturer Dossiers

Procurement

Review of recognised Independent Third Party Certification and design data to confirm that all procured safety critical equipment have been designed, constructed and tested in accordance with a recognised international code or standard.

- Bulk Items Supplier Data Procurement

Review manufacturing records and quality certification to confirm all bulk items (fittings, flanges etc) have been designed and fabricated to a recognised international code or standard.



- Storage Tanks (Non-Cryogenic)

Method StatementsProceduresITPs

Construction

Review Specification for Fabrication, Installation and Testing of the Installation and confirm that it is in compliance with specifications or compatible with industry practice.satisfactory level of inspection will be performed by all parties; fabrication acceptance criteria are in accordance with Specification for Fabrication, Installation and Testing of Piping

Method StatementsITPsWPQRMaterial CertificatesTest PacksCommissioning reports

Construction

Survey to confirm that:

— the equipment nozzles are installed in accordance with design, and any deviations documented and justified

— the piping system is installed in accordance with the design and any deviations have been documented and justified including stress analysis where necessary

— all piping systems are fabricated and pressure tested in accordance with the design, and any deviations documented and justified

— piping spools are installed and that field welds are completed and tested in accordance with the design, and any deviations documented and justified

— hydrocarbon containment systems installed are leak tested and proof tested satisfactorily.

Design BasisDesign ReportsMaterial SpecificationsP&IDs

Design

Confirm by review of design documentation that any hydrocarbon containing storage tanks have been designed in accordance with a recognised code or standard.

Method StatementsITPsWPQRMaterial Certificates

Construction

Confirm by survey that any hydrocarbon containing storage tanks have been fabricated in accordance with the design documentation and fabrication is to the required project specification.

Systems shall be provided with adequate and appropriate safety devices to prevent overpressure or other process deviations which may result in unsafe operation (including exposure to excessive temperatures and fire).

HAZOPHAZIDThermal Relief StudySurge Analysis ReportPSV Data SheetsP&IDs

Design

Confirm by review of P&IDs and HAZOP Study that adequate and appropriate safety devices to prevent overpressure resulting from process upsets (including blocked outlet, excessive temperature or fire exposure) which may result in unsafe operation are specified and comply with specifications.

P&IDsITPsTest Procedures

CommissioningConfirm by inspection that all piping components and safety devices are correctly installed in accordance with P&IDs, correctly calibrated and set points are correct.





Rotating equipment to be provided with adequate seal system to prevent loss of containment of hydrocarbon.

Supplier DataVendor P&IDs

Design

Confirm by review of specifications that rotating equipment has adequate seal systems provided and that appropriate monitoring is provided with necessary executive actions specified.

Commissioning

Confirm by review of commissioning records that rotating equipment have adequate seal systems provided and appropriate monitoring is provided and executive actions are undertaken as specified by design.

All hydrocarbon containment non-cryogenic equipment and piping with the potential to give rise to significant escalation hazards are to withstand the effects of an explosion followed by fire impingement with no loss of containment before the Installation inventory has been reduced to a safe level (blowdown is complete) and personnel have escaped to a place of safety.. Guidance: plastic deformation is acceptable providing there is no loss of integrity and no low cycle fatigue failure.

Safety Studies

Design Review the safety studies to confirm that the proposed fire and explosion loadings are justified.

Design

Confirm by design review of equipment details, layout drawings and details of passive fire protection that specified equipment will survive specified explosion overpressure and fire impingement with no loss of containment in the period while the Installation inventory is being reduced to a safe level (blowdown is complete) and personnel are escaping.

Testing & Commissioning

Confirm by inspection and review of records that any required passive fire protection has been installed as per the design.





Table P4 – Cryogenic vessels, equipment and pipingHSE CRITICAL ELEMENT: PROCESS CONTAINMENTCryogenic Vessels, Equipment and Piping


OBJECTIVES: To provide appropriate and effective cryogenic fluid containment systems and equipment that shall eliminate or minimise likelihood of release of hazardous material or loss of containment. (Cryogenic vessels, storage tanks, equipment and pipe-work where significant levels of LNG are present or could be present during normal operations.)Significant is defined as those vessels, pipe-work or equipment requiring active mitigation in the event of loss of containment.LIMITS and BOUNDARY:LNG Loading ArmsHeat Exchangers (Vaporisers, Re-condensors, shell and tube- plate fin, spiral wound)Process Vessels (Scrubbers, Separators, Columns)Piping and valvesCold BoxesRotating Equipment (Pumps, Turbo compressors and expanders)Refrigerant and liquid Nitrogen StorageNote: LNG Storage Tanks are covered by separate Table P5RELEVANT SPECIFICATIONSEN1160 Installations and equipment for liquefied natural gas – General characteristics of liquefied natural gasEN1474-1 Installation and equipment for liquefied natural gas - Design and testing of loading/unloading armsEN1532 Installation and Equipment for Liquefied Natural Gas – ship to shore interface EN1473 NFPA 59AEN12567 Industrial Valves – Isolating Valves for LNG Specification for suitability and approval verification test(EN1626 Cryogenic Vessels, valves for cryogenic service, EN12300 Cryogenic vessels, cleanliness for cryogenic service, BS6364 Valves for cryogenic service)EN ISO 10497 Testing of valves – Fire type-testing requirementsASME VIII div 2ASME B31.3Pressure Equipment Directive (only applicable in the EU)API520 and API521




Document Types Phase Verification Activity

LNG Loading Facilities

Marine transfer arms Marine transfer arms shall load or unload the LNG and the vapour return in a safe and controlled manner between LNG carrier and the onshore LNG Installation

Design basisHazard studies

Design codeDesign reports (calculations and analysis for all components of marine transfer system)Material specificationDrawingsCritical Equipment list

Design

Confirm by review of design basis and hazard studies that the design philosophy is in compliance with the requirements prescribed in a recognized design standard (EN 1474-1, SIGGTO or relevant code)

Confirm by Technology qualification or for proven design a review of design documentations (reports, design basis, material specifications) that marine transfer arms are designed in accordance with a recognized design standard (EN 1474-1 or relevant code)The review should comprise:

— structural design — pressure containment, including thermal and

hydraulic loads

- swivel joints- valves, connectors - materials, fittings, piping.

— motion envelope— ESD and Safety system, including the ship shore

interface— hydraulic and electric control system— electrical systems, cables— accessories.

Purchase requisitions

Supplier DataFAT ReportsManufacturer DossiersITPs

Procurement

Review of purchase requisitions for compliance with the design basis.Review Specification for Fabrication, Installation and Testing of the Marine transfer arms and confirm that it is in compliance with specifications or compatible with industry practice.Satisfactory level of inspection will be performed by all involved parties; review of recognised Independent Third Party Certification and design data to confirm that the Marine transfer arms have been designed, constructed and tested in accordance with a recognised international code or standard. Monitoring, fabrication, assembly and testing of loading arms for compliance with the design basis.


Construction

Review Specification for Fabrication, Installation and Testing of the Marine transfer arms and confirm that it is in compliance with specifications or compatible with industry practice.satisfactory level of inspection will be performed by all parties; fabrication acceptance criteria are in accordance with Specification for Fabrication, Installation and Testing

ITPsWPQRMaterial CertificatesCommissioning reports

Construction


— the equipment is installed in accordance with design, and any deviations documented and justified.

— all piping is fabricated and pressure tested in accordance with the design, and any deviations documented and justified.

— all safety systems are installed inspected and tested.

Test protocols and acceptances criteriaCommissioning reports

Commissioning

Confirm by review of test protocols and acceptance criteria that these are in accordance with the protocols and acceptance criteria specified in a recognized design standard (EN 1474 -1 or relevant code) Witness SAT in accordance with the relevant design code.



Vaporisers

For all types of vaporizers (water stream open rack/closed, intermediate fluid atmospheric water bath/forced flow condenser vaporizer, submerged combustion and atmospheric vaporizer); systems shall be provided to control the vaporiser’s operational process parameters in a safe and controlled manner.

Supplier data/Data SheetsDesign Code

Design

Confirm by review of design basis and specifications that the design philosophy is in compliance with the requirements prescribed in a recognized design standard (e.g. EN1473)

P&IDsSpecifications

-Methods-HSE-Operation Manuals

Design

Confirm by review of specifications that the vaporiser has appropriate monitoring and executive actions are undertaken as specifiedThe review should comprise:

— Vaporiser gas outlet temperature and water flow rate (open rack type)

— Flow rate and temperature of the water (closed type, forced flow type)

— Water bath temperature and heat supply (atmospheric water bath)

— Intermediate flow rate and LNG temp at outlet (condenser/vaporiser type)

— Bath water temperature and level, gas outlet temperature, extinction of flame, gas detection in incoming air, air fan tripping (submerged combustion type vaporiser),

- ITP- Commissioning reports

Commissioning

Confirm by review of commissioning records that the specific vaporiser has appropriate monitoring and executive actions are undertaken as specified by design.For example with respect to Submerged combustion type vaporisers that the water pH is regularly monitored, safety devices that initiate shutdown are implemented and a program for testing of legionella and a plan to avoid bacterial growth is in place.

The vaporizer shall safely contain all hydrocarbons at the maximum and minimum foreseeable pressures, design temperatures and operating forces.

-Supplier Data-Data Sheets-Procurement specifications

Procurement

Review of purchase requisitions for compliance with the design basis.Review Specification for Fabrication, Installation and Testing of the Vaporiser and confirm that it is in compliance with specifications or compatible with industry practice.Satisfactory level of inspection will be performed by all involved parties; Review of recognised Independent Third Party Certification and design data to confirm that the Vaporiser will be designed, constructed and tested in accordance with a recognised international code or standard.Monitoring fabrication, assembly and testing of loading arms for compliance with the design basis.

-FAT-ITP-Drawings-Material Certificates-WPQR

Design

Review Specification for Fabrication, Installation and Testing of the Vaporiser and confirm that it is in compliance with specifications or compatible with industry practice.Satisfactory level of inspection will be performed by all parties; fabrication acceptance criteria are in accordance with Specification for Fabrication, Installation and Testing

-Fabrication Dossiers Construction


— the equipment is installed in accordance with design, and any deviations documented and justified.

— all piping and components are fabricated and pressure tested in accordance with the design, and any deviations documented and justified.

— all safety systems are installed inspected and tested.





To avoid over-pressure, any vaporiser that could be isolated shall be served with sufficient, adequately sized, relief devices such that the system may not be over-pressured.

See verification activity P7 – Pressure Relief Systems

Cold Boxes

Cold Box are to be designed and fabricated to contain the equipment and provide containment of insulation

-Drawings-Insulation specifications

DesignReview specifications and drawings from supplier covering insulation material and insulation containment

-Material Certificates-Drawings-ITP-FAT-Fabrication dossier

Construction

Review Cold Box fabrication to confirm:

— Verify the identity of the components being installed within the Cold box

— Suitable materials have been used— Compliance with the design and fabrication

specification with any deviation documented and justified and that dimensions are within tolerances defined in the specification

Cold box to be provided with adequate and appropriate safety devises to prevent overpressure within Cold Box enclosure

-Drawings DesignReview Cold Box design to ensure:That appropriate safety relief (e.g. burst disc or vent panels) is installed

-Drawings Construction Verify that appropriate safety relief (e.g. burst disc or vent panels) is installed

Rotating equipment (Pumps and Turbo compressors/expanders)

Rotating equipment are to be according to manufacturers code and requirements and provided with adequate seal system (where relevant) to prevent loss of containment of hydrocarbon.

-Design code-Drawings-Data sheets-Critical Equipment List

Design

Review purchase requisitions for Rotating equipmentReview mechanical interface with connected equipment and supportReview control and safety systemConfirm by review of specifications that rotating equipment has adequate seal systems provided and that appropriate monitoring is provided with necessary executive actions specified

-Material Certificates-Drawings-FAT-Fabrication dossier

Construction

Review Rotating equipment manufacturing dossiers to confirm:

— Specified materials have been used— Compliance with the design and fabrication


— FAT are performed and fulfil project specifications

— Where relevant, CE mark certificates are available

Guidance: DNV CMC procedures to be followed where relevant.

Supplier DataVendor P&IDs Commissioning

Confirm by review of commissioning records that rotating equipment have adequate seal systems provided and appropriate monitoring is provided and executive actions are undertaken as specified by design.

Valves

The cryogenic valves shall safely contain all hydrocarbons at the maximum and minimum foreseeable pressures, design temperatures and operating forces.

Design codeSupplier Data Procurement

Review manufacturing records and quality certification to confirm that the valves have been designed and fabricated to a recognised international code or standard.


Design

Review valve design to confirm that:

— the correct design conditions are considered— the criteria has been correctly applied in

accordance with the appropriate design codes.Relief valves





Thermal relief valves for the protection of equipment, piping and hoses from over-pressure resulting from ambient heat input to blocked in LNG or other light hydrocarbon liquids shall be installed.

Material Specifications

Ensure material compatibility for low temperature application.In addition, see verification activity P7 –Pressure Relief Systems

Re-condensors

The Re-condensors shall safely contain all hydrocarbons at the maximum and minimum foreseeable pressures, design temperatures and operating forces.

Design codeSupplier Data Procurement

Review of recognised Independent Third Party Certification and design data to confirm that the Re-condensors have been designed, constructed and tested in accordance with a recognised international code or standard.

Drawings Design

Review re-condenser design to confirm that:

— the correct design conditions are considered— the criteria has been correctly applied in

accordance with the appropriate design codes.

-Material Certificates-Drawings-FAT-Fabrication dossier(s)

Construction

Review Re-condensors fabrication to confirm:

— Suitable materials have been used— Compliance with the design and fabrication

specification with any deviation documented and justified and that dimensions are within tolerances defined in the specification.

Heat Exchangers

Design SpecificationsDrawings

Design

For Shell and Tube heat exchangers - See verification activity P3 – Non Cryogenic Pressure Vessels and EquipmentFor other Heat exchangers that are not regulated by codes and standards, a process to be developed to ensure the equipment is delivered according to project specifications. Review design basis that the following is considered:

— Suitable materials are specified including cryogenic temperatures

— Design calculations including thermal stresses— Review mechanical interface with connected

equipment and support— Review pressure relief system.

Material certificatesDrawingsFATFabrication Dossier

Construction

Review Heat Exchanger manufacturing dossiers to confirm:

— Specified materials have been used— That compliance with design and fabrication


— FAT are performed and fulfil project specifications

— Where relevant, CE mark certificates are available.

Pressure Vessels (for refrigerants)

Design Specifications Design

See verification activity P3 – Non Cryogenic Pressure Vessels and EquipmentConfirm by review of design basis that all relevant design conditions are being considered:

— Thermal stresses— Mechanical properties at low temperatures.





Piping

The cryogenic process piping facilities shall safely contain all hydrocarbons at the maximum and minimum foreseeable pressures, design temperatures and operating forces.

Material specificationsDesign specificationsIsometric drawings

Design

Check that materials for piping, flanges, fittings and bolting etc are suitable for low temperature applications.Piping flexibility analysis shall take into account large temperature variations and mechanical properties at low temperatures.Check water-hammer effects arising from emergency shutdown of LNG transfer pipeline.Note: See verification activity P3 – Non Cryogenic Pressure Vessels and Equipment

Isometric drawingsITP

Construction

Check that required expansion joints are installed according to project specifications.Survey to confirm cryogenic containing piping installed are leak tested and proof tested as satisfactory.

Guidance: Preference is for pneumatic test if approved by local Authorities

ITP CommissioningConfirm by inspection and review of records that required insulation has been installed as per the design





Table P5 – LNG storage tanksHSE CRITICAL ELEMENT: PROCESS CONTAINMENTLNG Storage Tanks


OBJECTIVES: To provide appropriate and effective cryogenic fluid containment systems and equipment that shall eliminate or minimise likelihood of release of hazardous material or loss of containment.

LIMITS and BOUNDARY:LNG Storage Tanks (does not include tanks covered by the Pressure Equipment Directive – EU)RELEVANT SPECIFICATIONSEN1160 Installations and equipment for liquefied natural gas – General characteristics of liquefied natural gasEN1473 Installation and equipment for liquefied natural gas – Design of onshore installationsEN 14620-1 Design and manufacture of site built, vertical, cylindrical, flat-bottomed steel tanks for the storage of refrigerated, liquefied gases with operating temperatures between 0°C and -165°C – GeneralEN 14620-2 Design and manufacture of site built, vertical, cylindrical, flat-bottomed steel tanks for the storage of refrigerated, liquefied gases with operating temperatures between 0°C and -165°C – Metallic componentsEN 14620-3 Design and manufacture of site built, vertical, cylindrical, flat-bottomed steel tanks for the storage of refrigerated, liquefied gases with operating temperatures between 0°C and -165°C – Concrete componentsEN 14620-4 Design and manufacture of site built, vertical, cylindrical, flat-bottomed steel tanks for the storage of refrigerated, liquefied gases with operating temperatures between 0°C and -165°C – Insulation componentsEN 14620-5 Design and manufacture of site built, vertical, cylindrical, flat-bottomed steel tanks for the storage of refrigerated, liquefied gases with operating temperatures between 0°C and -165°C – Testing, drying, purging, and cool-downAPI Standard 620 Design and construction of Large, Welded, Low-pressure Storage TanksNFPA 59A Standard for the Production, Storage, and Handling of Liquefied Natural Gas (LNG)EN12567 Industrial Valves – Isolating Valves for LNG Specification for suitability and approval verification testEN1626 Cryogenic Vessels, valves for cryogenic serviceEN12300 Cryogenic vessels, cleanliness for cryogenic serviceBS6364 Valves for cryogenic serviceEN ISO 10497 Testing of valves – Fire type-testing requirementsASME Section VIII-DIV 2 Boiler and Pressure Vessel CodePressure Equipment Directive (only applicable in the EU)API 520 Sizing, Selection, and Installation of Pressure - Relieving Devices in RefineriesAPI 521 Guide for Pressure-Relieving and De-pressuring SystemsASME B31.3 Standards of pressure piping – Process piping


Am

ended A

pril 2012

DN

V S

ervice Specificatio

n DN

V-D

SS

-315, Octo

ber 2010

see no

te o

n front cover

Ap

p.B – P

age 4

4

DE

T NO

RS

KE V

ER

ITA

S A

S

ign of the facility and it is also recommended if a major tic and/or probabilistic), hazard identification (external stimation of consequences shall be done in accordance the project.

ings that all relevant design conditions and phases are able limits conform to the requirements of the applicable

e, behaviour at cryogenic temperature if relevant,

ormal loading condition: It shall be checked that

be analysed as an integrated structure (foundation, wall, l element) with due consideration of different d discontinuities. Following aspects shall be checked:

ehaviour at cryogenic and ambient temperatures. Most

nt stages of the structure, friction coefficients for sliding es if this is more criticalpplicable standardsntede related to actual behaviouril-structure interaction (if relevant), damping, response

ination. Check of sloshing and adequacy of freeboard.



The LNG storage tanks shall safely contain all hydrocarbons at the maximum and minimum foreseeable pressures (as defined for this type of tanks), design temperatures, normal and abnormal loading conditions

Site characterization documentation (weather conditions, topography of the ground, site soil conditions and geology, natural (lightning, flooding, earthquakes, tsunamis, etc) and man-made (projectile impact, collisions, etc) hazard potential, etc.Preliminary design documents

Hazard Assessment

Hazard assessment shall be carried out during the desmodification takes place. Methodologies (determinisand internal origin), estimation of probabilities, and eto the applicable and recognised code or standard for

Design basis/specificationsMaterial specificationsDesign reports (including computer input & output if applicable)Test reportsDrawingsConstruction procedures

Design

Confirm by review of design basis, reports, and drawbeing considered and the load combinations and allowand recognised code or standard for the project.Adequacy of following items shall be checked:

— Materials:General for all materials: Strength, fire resistancdurability

— Loads and load combinations for normal and abnfollowing loads are considered:

— Dead and Live Loads— Fire loads— Other hazards

— Structural analysis: Containment structure shall roof, contained liquid, liner (if acting as structuraconstruction stages and corresponding loading an

— Material models and parameters shall reflect bcritical parameter shall be used in design.

— Boundary conditions shall reflect the differeconnections shall be at cryogenic temperatur

— Loads, to be combined in accordance with a— Reliability of analysis tools shall be docume— Analysis simplifications shall be conservativ— Seismic analysis: Methodology, effects of so

spectra reflecting site conditions, load comb

DN

V S

ervice Spe

cification D

NV

-DS

S-315

, Octobe

r 2010

Am

ende

d Ap

ril 2012

Pag

e 45 – App.B

see note on front cover

DE

T NO

RS

KE V

ER

ITA

S A

S

en precast elements (if relevant), connection to , etc), liquid/vapour tightness, embedment loads, design on joints, and wall penetrations shall be checked. Walls ements for liquid/vapour tightness are different for cable. Buckling resistance considering pressure from the be checked.hickness to provide adequate buckling resistance, design heat flux due to firevoid permafrost.frost and to meet boil-off requirements: Secondary containment structure shall be designed for

“elephant’s foot” should be checked for earthquake are used to determine the ultimate strength of a structure

ted and tested for the purpose;g techniques (element type, mesh, material

ld be calibrated against a known case (e.g. from the e failure mechanisms are adequately represented. d. All factors that influence the resistance shall be non-linearity, imperfections, residual stresses,

s should be selected such that the result represents fe way;

ed

ms are according to relevant standards: liquid level d/or switches, temperature indicators and/or switches,

ast following items are according to relevant standards: system, vacuum relief valves, etc.items are according to relevant standards: anti-roll-over

onitor temperature, heating system control, foundation

ding to relevant standards: Cool down piping, filling piping.

— Design:

— Foundation: Covered in a separate checklist.— Wall: Access openings, closure pours betwe

foundation, pre-stressing (losses, anchoragesfor heat flux loadings due to fires, constructishall be designed for missile impact. Requirprimary and secondary containments, if appliinsulation when tank is emptied/heated shall

— Roof: Composite members, liner, sufficient tfor missile impact, and thermal resistance to

— Floor: Heating system shall be designed to a— Insulation: Shall be designed to avoid perma— Special considerations for earthquake design

1) SSE 2) SSE aft and spill, and 3) OBE— Special considerations for steel design: The

loadings. When non-linear analyses methodsthe following shall be considered:

— The software used shall be documen— The finite elements and the modellin

parameters, imperfections etc.) shoudesign code) in order to show that thThe calibration should be documenteaddressed. Such factors are material external pressure etc.;

— The loading sequence in the analysethe conditions to be analysed in a sa

— Detailing:

— Metal components— Liners and coatings— Anchorage details to concrete base, if requir

— Instrumentation: Check that at least following iteindicators and/or switches, pressure indicators andensity indicator.

— Pressure and vacuum protection: Check that at lepressure relief valves, rupture disc, gas injection

— Safety equipment: Check that at least following devices, protection against lightning, sensors to msettlement, leaks.

— Piping: Check that at least following items are accor



Am

ended A

pril 2012

DN

V S

ervice Specificatio

n DN

V-D

SS

-315, Octo

ber 2010

see no

te o

n front cover

Ap

p.B – P

age 4

6

DE

T NO

RS

KE V

ER

ITA

S A

S

nstructions procedures are in compliance with the r standard for the project. LNG storage tanks shall be s shall be duly documented and approved.

systems is performed by relevant/competent parties.cordance with the specification for fabrication,

ign assumptions)

rages, forces, sequence of stressing), if relevant

ording to the requirements of the applicable and esign basis: testing, pneumatic testing, pressure and vacuum testing. tank filling.

hall be kept.

ning to the risk and evaluation of different types of LNG

Construction proceduresSpecification for fabricationInspection and testing plans and reportsDesign basis/specificationsMaterial specificationsDesign reportsDrawingsQualification of welding procedures

Construction

Confirm by review of relevant documentation that corequirements of the applicable and recognised code oinstalled in accordance with design and any deviationConfirm that a satisfactory level of inspection for allConfirm that fabrication acceptance criteria are in acinstallation and testing.Adequacy of following items shall be checked:

— dimensions and tolerances (should be within des— material specification compliance— pre-stressing and post-tensioning systems (ancho— forming and forming removal, if relevant— construction joints, if relevant— embedment’s, if relevant— coatings (liquid/vapour barrier for concrete)— corrosion protection (steel outer tank and roof)— welding qualification— non-destructive testing (NDT) of welds.

Design basis/specificationsDrawingsTesting, commissioning records

Commissioning

Confirm that following operations are performed accrecognised code or standard for the project and the dTesting including: hydrostatic testing, liquid tightnessPurging into service, cool-down operation, and LNGPurging out of service and warm up.Records of all the previously mentioned operations s

Note:If needed during the course of the project and evaluation, DNV has an extensive database containing data, formulae, etc pertaitanks and configurations.




Table P6 – Open hazardous drainsHSE CRITICAL SYSTEM: PROCESS CONTAINMENTOpen Hazardous Drains


OBJECTIVES: To remove hydrocarbon and hazardous spillage from process and utility areas and to prevent the spread of hydrocarbon spilled inventory to adjacent areas. LIMITS and BOUNDARY:Open Hazardous Drains System. RELEVANT SPECIFICATIONSNFPA 59EN1473Drainage Systems


Document Types:

Phase Verification Activity

Open drainage system to remove deluge, rainwater and spills from all open areas where hydrocarbons may be present, terminating either at an open drains tank or the contaminated fire water pond.

Hazardous Drains Design SpecificationsHazardous Drains Dwgs. P&IDsPlot Plans

DesignConfirm by review of the project studies that the hazardous drains system is consistent with the project requirements and fire zone layout philosophy

Design

Review utility P&IDs to confirm that open drains are specified for all open areas where hydrocarbons may be present, and that the drains terminate either at an open drains tank or the contaminated fire water pond.

Design

Review open drain system design to confirm that it is sized to remove spills, deluge water and rainwater from all open areas and drain lines are sloping as specified with no pockets.

P&IDs ConstructionConfirm by survey that the bunds are installed where required and have connections to the open drainage system in accordance with the P&IDs.

Impounding basins shall prevent cryogenic liquid from damaging important equipment, structures or flammable fluids entering the surface water drainage system.An LNG spill within the process and transfer areas shall be confined in the vicinity of or remote from the spill collection area. The spill collection area and the impounding basin shall be connected by open channel(s)

Plot PlansGA DrawingsHazardous Drains Dwgs.

Design

Confirm by survey that impoundment basin(s) are consistent with project requirements. Areas of concern are:

— process areas— vaporization areas— transfer areas for LNG, flammable refrigerants and

flammable liquids— areas immediately surrounding flammable

refrigerant and flammable liquid storage tanks.

DesignReview project documentation that the spill collection area and the impounding basin is connected by open channel(s)

P&IDsPlot Plans Construction

Confirm by survey that the impoundment basins are installed where required and have connections to channels in accordance with the P&IDs/Plot Plans.

Segregate hazardous and non hazardous open and closed drains to prevent migration of vapour between systems.

P&IDs Design

Confirm by review of P&IDs that the design of hazardous and non hazardous open and closed drains prevents the migration of vapour between systems.



Table P7 – Pressure relief systemsHSE CRITICAL ELEMENT: PROCESS CONTAINMENTPressure Relief Systems


OBJECTIVES: The role of relief systems is to protect process systems from over-pressurisation.To reduce to ALARP the probability that a pressure vessel or associated pipe-work will fail under excess pressure owing to pressure control device failure, isolated and “locked in” equipment, overheating or fire impingement. To safely dispose of hydrocarbons released from the process as a result of operation of certain pressure control valves, lifting of relief valves, draining and maintenance depressurisation. LIMITS and BOUNDARY:Relief/ safety valves Relief system network (included in relief system activities) Flare header and flare system are not part of this HSE Critical SystemRELEVANT SPECIFICATIONSAPI RP 520 Sizing, selection and installation of pressure-relieving devices in refineriesAPI 521 Pressuring relieving and de-pressuring systems (equivalent to ISO 23251 Petroleum and natural gas industry – Pressure-relieving and de-pressuring systems

Guidance note: The following specifications can be useful:ISO10418 Petroleum and natural gas industries -- Offshore production installations -- Analysis, design, installation and testing of basic surface process safety systemsAPI 14C Recommended Practice for Analysis, Design, Installation, and Testing of Basic Surface Safety Systems for Offshore Production Platforms


Document Types:


The maximum allowable back pressure and minimum design temperature of the relief system shall be suitable for the highest identified flow rate.

P&IDsRelief System Design BasisRelief Sizing Calcs.

Design

Confirm by review of the relief study and process simulations that the maximum allowable back pressure and minimum design temperature of the relief system shall be suitable for the highest identified flow rate.

The hydrocarbon containing system shall be served with sufficient, adequately sized, relief devices such that the system may not be over-pressured.

P&IDs DesignConfirm by review of P&IDs that sufficient relief devices have been provided such that the system may not be over-pressurised.

Relief Valve Sizing Calcs.Relief Valve Data Sheets

Design

Confirm by review of process calculations and data sheets that PSVs capacity sizing basis and inlet pressure drops are such that they will relieve pressures in excess of system design pressure, with reference to applicable specifications.

Vendor Data Design

Confirm by review of manufacturer’s data sheet and calculations that PSVs have adequate capacity for the required flow rate to ensure that they will relieve pressures in excess of system design pressure and that selection of device is appropriate for the specified conditions (suitable for flow, fluid phase, back pressure, etc.)

ITPs ConstructionConfirm by inspection and review of mechanical completion records that the PSVs are of the correct type and sizing as per the P&IDs/data sheets.

ITPs Construction

Confirm by inspection that inlet pipe-work to relieving devices is located satisfactorily in relation to potential restrictions (e.g. above liquid levels, vessel internals, etc.).

It shall not be possible to simultaneously obstruct all relief routes from any protected equipment to the disposal system (e.g. by locking off both isolation valves at once)

P&IDs Design

Confirm by review of P&IDs that isolation valves for relieving devices are specified as per the project specifications and that no protected equipment may be isolated from the disposal system.

ITPs CommissioningConfirm by sample inspection that all isolation valves for relieving devices are installed as verified in the above activity.



Hydrocarbon liquids shall not be discharged from relieving devices or vents such that they are a hazard to personnel.

P&IDsEquipment Plant LayoutsPiping Isometrics

Design

Confirm by review of all vent locations (atmospheric vent from drums or equipment seals) that they vent to safe location and in the event of liquid carry over will not discharge to areas that may cause a hazard to personnel.

Relief Sizing CalculationsData SheetsP&IDs

Design

Relief drum sizing shall be sufficient to ensure no liquid carry over to the flare system under highest identified flow rate conditions

P&IDsEquipment Plant LayoutsPiping Isometrics

Construction

Confirm by visual inspection that vent locations are in safe locations.



Table C1 - Ignition prevention and control systemHSE CRITICAL ELEMENT: IGNITION CONTROLIgnition Prevention and Control Systems


OBJECTIVES: To reduce to ALARP, the probability that a release of flammable gas will encounter a source of ignition by:

— applying hazardous area classification and specifying the degree of protection required for electrical apparatus to be used in hazardous areas.

— providing adequate ventilation— isolating electric power supplies to apparatus which might provide a source of ignition.— preventing hot surfaces causing ignition.— providing earthing continuity. LIMITS and BOUNDARY:All electrical equipment and instrumentation which must function within a potentially flammable atmosphere; All exposed surfaces;Earthing continuity for all equipment, structures and piping;Fire dampers in all “rated” fire divisions and boundaries.RELEVANT CODES AND SPECIFICATIONSIP Code Part 15 (Area Classification of Petroleum Installations)IEC 60079 -10-1, Classification of Areas – Explosive Gas AtmospheresIEC 60529 Degrees of protection provided by enclosures (IP Code)API RP 500 Recommended Practice for Classification for Electrical Installations at Petroleum FacilitiesISO13732-1 Ergonomics of the thermal environment – Methods for the assessment of human responses to contact with surfaces Part 1:Hot surfacesBuilding Safety RegulationsNon-Hazardous Area VentilationCertified Electrical EquipmentCargo Tank Inert Gas SystemEarthing and Bonding SystemsIgnition Control ComponentsATEX 99/92 (for EU projects only)ATEX 94/9 (for EU projects only)




Document Types:


Areas where potentially hazardous concentrations of flammable gas may occur shall be an electrically classified Hazardous area, in accordance with specifications.

Table of Hazardous SourcesHazardous Area Classification LayoutsHazardous Area Classification Criteria

Design

Review the area classification layouts and associated studies to confirm that:all possible Hazards have been appropriately considered, (including possible migration)the hazardous area drawings correctly account for the actual location of the sources of release the hazardous areas have been appropriately defined and all areas have sufficient ACPH in accordance with the chosen design code. Vent inlets and outlets are correctly located in accordance with code requirements.

Guidance: Design documentation relevant to the review will include but not limited to: Gas release and dispersion study; Schedule of hazardous releases; FERA study; and CFD study as applicable

Hazardous Area Classification LayoutsEquipment Layouts

Construction

Confirm by Survey: the hazardous area drawings correctly account for the actual location of the sources of release vent inlets and outlets are correctly located in accordance with design documents

Mechanical & Electrical equipment installed in areas where an accumulation of accidentally released hazardous flammable gas or vapours can occur shall be appropriate for the area classification.

Hazardous area equipment registerHazardous area layout drawings Equipment Hazardous Area CertificationSchedule of hazardous releases

Design

Confirm by review of appropriate data that electrical and mechanical equipment is correctly certified for the hazardous area in which it is to be located and that a complete Hazardous Area Equipment Register has been developed.

Guidance: Appropriate documentation will include independent third party Hazardous Area Certification, compliance review reports Engineering & Procurement Contractors.

Guidance: For compliance to IP Code Part 15 (Area Classification of Petroleum Installations), all fire and gas detection equipment, ESD Process Field Devices and ESD Driven actuating devices shall be certified for use in a Zone 1, Gas Group IIA temperature class T3 Hazardous Area

Hazardous area equipment registerHazardous area layout drawings ITPs

Construction

Confirm by review of independent third party ATEX or equivalent compliance review reports (Construction Contractors) that instrument & electrical equipment is correctly certified for the hazardous area in which it is installed and it has been installed in accordance with any special conditions of use. Confirm that a complete and accurate as built ATEX Register has been developed (for EU projects).

All externally located Instrument and Electrical equipment is compliant with the project requirements in meeting specifications.

Vendor Data Design

Confirm by review of independent third party Ingress protection compliance review reports (Engineering & Procurement Contractors) that instrument & electrical equipment is correctly certified for the minimum project requirement e.g. IP Rating 56. or NEMA 4/4X.

All equipment shall be isolated on confirmed gas detection. All external electrical equipment that is to remain live shall be suitable for Zone 1 hazardous area use.

Hazardous area equipment registerShutdown Philosophy

Design

Confirm by review of the philosophy that all external electrical equipment that is to remain live following a confirmed gas release is suitable for Zone 1 hazardous area use and that all other equipment is isolated on confirmed gas detection

ITPs CommissioningConfirm by survey and function test that the installed equipment is either appropriate for zone 1 use or isolated on confirmed gas detection.



All structures, equipment and piping shall be suitably earthed to prevent a potential ignition source, by build up of a differential potential between adjacent equipment and/or structures

Earthing philosophy for all production equipment including piping.Frame/structure drawings

Design

Confirm by sample design review that equipment and structures are suitably earthed and comply with requirements of specifications. Review to include but not be limited to:

— electrical earthing specification— electrical earthing drawings— electrical earthing typical detail drawings.

ITPs Construction Confirm by sample survey that the installed equipment and structures are correctly earthed

Surface temperatures of exposed equipment and pipe-work where flammable vapours or gas may accumulate shall be less than the minimum temperature as defined by the hazardous area temperature classification in accordance with specifications.

Guidance: All exposed parts of equipment or surfaces having surface temperatures of more than 70°C or less than -10°C shall be protected to avoid direct contact with personnel.

P&IDsPiping Isometrics

Design

Confirm by design review of the equipment data sheets, piping schedule / list; piping lagging schedule and P&IDs that equipment and pipe-work located where flammable vapours or gas may accumulate shall have exposed surface temperatures lower than the hazardous area temperature classification.

Insulation SpecificationP&IDs

DesignConfirm by review of the insulation specification and P&IDs that appropriate equipment and piping protection is specified and meets specifications.

ITPs Construction

Confirm by survey that all equipment or pipe-work which is expected to have a high surface temperature is correctly lagged such that the exposed surface temperature meets design and specifications.

HVAC systems shall provide positive air pressure within each enclosed area to inhibit gas ingress; a reduction in differential pressure below 50 Pa shall alarm in a normally manned area or agreed for the project.

D&IDs DesignConfirm by review of D&IDs that HVAC is provided to enclosed areas and that it is specified to provide positive air pressure.

F&G Cause and EffectsD&IDs

Design

Review Cause and Effects to confirm that there is an alarm in a normally manned area on reduction of the differential pressure below the threshold pressure.

Guidance: threshold pressure should be 50 Pa.

ITPs Commissioning

Confirm by survey and witness Function tests, that the HVAC systems provides positive air pressure within each enclosed area and that a reduction in differential pressure below the threshold pressure, alarms in a normally manned area.

Guidance: threshold pressure should be 50 Pa.

Fire dampers to close on fire detection and be fail safe on loss of control signal

Safety ConceptVendor DataF&G Detection Criteria

Design

Confirm by review of safety studies and detector specifications that temperature set point specified for each damper is appropriate

Note: all dampers in rated fire divisions and boundaries

ITPs Commissioning

Confirm by sample witness function test, that fire dampers automatically close on fire activation of the frangible bulb / fusible loop or similar and fail safe on loss of control signal

HVAC dampers to close and all HVAC fans to trip within the specified maximum duration of confirmed smoke or gas detection at the ventilation inlet to enclosed areas.

F&G Cause and EffectsVendor DataD&IDs

Design

Review Cause and Effects to confirm that HVAC dampers are specified to close within the specified maximum duration on confirmed detection of smoke or gas at the ventilation inlet

ITPs Commissioning

Confirm by witness function test that the HVAC dampers close and all HVAC fans trip within the specified duration or less on confirmed detection of smoke or gas at the ventilation inlet.


Document Types:




Table C2 - Emergency shutdown systemHSE CRITICAL ELEMENT: SHUTDOWN SYSTEMSEmergency Shutdown System


OBJECTIVES: To provide facilities which detect abnormal conditions and initiate appropriate shutdown and isolation actions to minimise the likelihood of escalation into a major hazardous event and to minimise the duration of any such event.LIMITS and BOUNDARY:ESD System (including field initiation devices and output driven executive action safety function devices)ESD Valves – Incoming and recirculation piping and other ESD valves considered criticalRELEVANT SPECIFICATIONSEN1532 Installation and Equipment for Liquefied Natural Gas – ship to shore interface (move to control and ESD) IEC-61508 Functional safety of electrical/electronic/programmable electronic safety-related systemsIEC 61511 Functional safety - Safety instrumented systems for the process industry sectorANSI/ISA-91.00.01-2001 Identification of Emergency Shutdown Systems and Controls that are Critical to Maintaining Safety in Process IndustriesSIGTTO ESD Systems & Linked Ship/Shore Systems on Liquefied Gas Carriers (for Marine Transfer Facilities)


Document Types:


The ESD System shall continuously monitor all instrumentation and devices associated with the system to provide a systematic means of processing the signals and carrying out necessary automatic alarm and executive actions. The system shall be resistant to single fault failure, and the system as a direct consequence of any single accident or fault shall not be disabled and shall remain capable of identifying the hazard for which it has been provided.

ESD Shutdown PhilosophyESSAESD and F&G Cause and Effect Safety ConceptHAZOPsP&IDs

Design

Confirm by review of the ESD system hierarchy and project Safety Concept that all types of scenarios, associated hazardous conditions and required executive actions have been identified correctly. Initiators and shutdown levels shall be in compliance with project requirements.

Guidance: In the case of LNG facilities, consideration shall be given to combined shutdown operations of LNG vessel during loading/unloading and the shore based facilities.

P&IDsSafety Concept Design

Confirm by review of P&IDs and system architecture that appropriate process and utility inputs are specified for the appropriate hazards identified in the ESD system hierarchy and Safety Concept. Confirm the compliance of process and utility causes for ESD shutdown according to project requirements.

ESD and F&G Cause and EffectsESD Hierarchy Logic

Design

Confirm by review of ESD and F&G Cause & Effect diagrams that the appropriate executive actions are undertaken by the ESD system in response to the detected hazard. Consideration should be taken of the conclusion identified in preceding activities.

ITPs Commissioning

Confirm by witness of function testing that the ESD control system undertakes appropriate executive actions in response to the detected hazard in accordance with the ESD and F&G Cause & Effect diagrams

There shall be means of manually initiating an ESD from a normally manned area.

Ship to Control Schematic ESD Cause & EffectESD pushbutton layout

Design

Confirm by design review of the ESD control system, jetty control panel arrangement drawing and Ship to Control schematic that the means of manually initiating an ESD from a normally manned area has been specified.

ITPs CommissioningConfirm by Survey and function test, that the means of manually initiating an ESD from a normally manned area has been provided

All ESD devices shall move to their safe condition on loss of system output, hydraulic power or instrument air.

P&IDsFunction testing Design

Confirm by design review of ESDV hydraulic & Instrument P&IDs that all ESD devices move to their safe condition (fail safe) on loss of system output or electrical / hydraulic power or instrument air.

ITPs Commissioning

Confirm by witness sample of function tests and review of records that all ESD devices move to their safe condition (fail safe) on loss of system output or electrical / hydraulic power or instrument air.



All ESDVs and actuators shall remain functional following an explosion or under fire conditions for a sufficient time period to perform their intended function.

Vendor dataHAZIDEquipment LayoutsP&IDs

Design

For ESDVs specified on the PIDs, review the safety studies and layouts to confirm that the fire and explosion scenarios which may affect the ESDVs or their actuators have been identified and confirm which ESDVs and actuators will require protection.

Vendor data and calculations Design

Review the design and fabrication data for ESDVs which require protection to ensure that they are suitably protected against relevant hazards

Guidance: Where protection or PFP or other protection is required for either valves or actuators then review vendor drawings, calculations, test data and relevant certificates [including explosion survivability calculations for the actuators] provided by vendor to confirm that the specified protection is suitable and sufficient for the applicable fire and explosion scenarios.

ITPs ConstructionSurvey all ESDVs and actuators to confirm that they are installed in the correct location and protected as required

ESD system cables shall be fire resistant to Specifications. As far as is reasonably practical, ESD system cables shall be protected from mechanical damage.

Safety ConceptCable specificationCable scheduleCable requisition and vendor data

Design

Confirm by review of the cable specification, cable requisition, vendor data sheets and cable schedule that all cables associated with the ESD system are fire resistant.Cable supports / racks shall offer equal rating as a minimum to maintain availability of the system.

Cable specificationCable Certification

Construction

Confirm by sample survey that the cables installed are fire resistant. Cable markings and certification shall be verified as being compliant.Routing of cables shall also confirm they are, as far as is possible, protected from mechanical damage.

ESD panels and associated equipment shall be protected against fire, blast and dropped objects, such that its ability to function is not impaired until ESD is complete.

HAZIDFERAEquipment layouts

Design

Review the safety studies to determine that credible event scenarios which may affect the ESD Panel and associated equipment along with the time required to complete ESD have been clearly identified.

HAZIDFERABuilding structural calculationsJCR, SS and ITR equipment room(s) heat rise studyEquipment layouts

Design

Confirm by documentation review that the ESD panel and associated equipment is protected from the identified credible event scenarios. All aspects of the building design relevant to maintaining the integrity of the ESD system (to fulfil its function in an emergency situation for the required duration) shall be confirmed as being acceptable for the identified hazard conditions.

The ESD System shall have a minimum SIL rating and meet the requirements of the SIL Classification Study.

Guidance: Hazard Studies are used to decide SIL rating

Safety ConceptSIL Assessment StudySIL Classification StudySIL Verification ReportVendor Verification Report

Design

Confirm by review of vendor data and SIL Assessment Study that the ESD System and associated loops are based on a probability of failure on demand as defined in the relevant specifications.

Hydraulic / Pneumatic vent lines from ESDV valve actuators to be located so they are not (as far as practicable) vulnerable to mechanical damage

ITPs Construction

Confirm by Inspection that the Hydraulic / Pneumatic vent lines from ESDV actuators have been located so they are not (as far as practicable) vulnerable to mechanical damage.


Document Types:




Table C3 – Blowdown systemHSE CRITICAL ELEMENT: SHUTDOWN SYSTEMSBlowdown System


OBJECTIVES: To enable rapid depressurisation of the gas inventory so as to minimise the potential for escalation of the initiating event. To reduce the probability that a pressure vessel or associated pipe-work will fail under excess pressure owing to pressure control device failure, isolated and “locked in” equipment, overheating or fire impingement. To safely dispose of hydrocarbons released from the process as a result of operation of certain pressure control valves, lifting of relief valves, opening of emergency blow-down valves and manual purging, draining and maintenance depressurisation.LIMITS and BOUNDARY:Functionality of relief valves / blow-down valves; Knock out drum; HP & LP system Note, hydrocarbon containment of relief, flare and vent lines is covered by the hydrocarbon containment performance requirementRELEVANT SPECIFICATIONSISO 4126 Safety devices for protection against excessive pressureEN 764-7 Pressure equipment Safety systems for unfired pressure equipmentAPI 521/ISO2351 Pressure relieving and de-pressuring systemsAPI520 PT 1&2 Sizing, Selection and Installation of Pressure Relieving Devices in Refineries Sizing and Section and Installation


Document Types:


Inventory shall be blown-down to a sufficiently low pressure within a time period suitable to ensure that no significant escalation of the incident occurs.

Blow down study to incorporate results of FERAHAZOP Report

Design

Confirm by review of the safety studies and HAZOP Report that a suitable blow down time has been derived accounting for, but not limited to, the balance between potential for escalation, PFP requirements and material selection.

Design

Confirm by review of the blow-down study and process simulations that the inventory shall be blown down within a time period suitable to ensure that escalation of the incident does not occur.

Design Confirm by review of the PIDs that isolatable sections are specified in accordance with the blow down requirements

DesignReview blow-down orifice data sheets and sizing calculations and confirm these comply with appropriate codes and process design data.

Commissioning

Confirm by witness of blow-down tests that the process inventory is to blow-down to a sufficiently low pressure within the correct time period, in the correct valve sequence and without exceeding the minimum design temperature

Guidance: This is achieved by a full blow-down from operating pressures then making a comparison of the field data obtained with the process models and calculations developed for the design case to confirm the suitability of the latter. Special consideration is given to blow-down of liquid containers in LNG facilities.

The maximum allowable back pressure and minimum design temperature of the relief system shall be suitable for the highest identified flow rate.

Design of relief systemBlow down study

Design

Confirm by review of the blow-down study and process simulations that the maximum allowable back pressure and minimum design temperature of the relief system shall be suitable for the highest identified flow rate.

Construction

Confirm by review of records that the blow-down valves, blow-down restriction orifice and blow-down/cold vent piping (including sizing and approximate routing) has been installed in accordance with the design.



Blow down will be primarily manually operated and if no operator intervention within the 3 minutes time period then will be automatically initiated on:

- confirmed fire detection in a hazardous area

- confirmed gas detection- signal from the installation

control room- manual push-buttons in

control room.

Cause and Effects Diagrams

Design

Confirm by review of Cause & Effect Diagrams that blow-down shall be primarily manually operated and if no operator intervention within a project specified time period then will be automatically initiated on:

- confirmed fire detection in a hazardous area- confirmed gas detection- signal from the installation control room- manual push-buttons in control room.

Construction

Confirm by witness of test that blow-down is initiated in accordance with the Cause & Effect Diagrams.

The blow down system shall be designed and fabricated such that the risk of significant escalation due to failure to achieve blow down is according to the defined safety objectives.

Guidance: Scenarios to be considered should include the potential for loss of actuating media and / or loss of signal from the ESD System.

Design calculationsP&IDs

DesignReview to confirm that blow-down system has been designed such that the risk of significant escalation due to failure to achieve blow down is ALARP.

P&IDsITP Construction

Confirm by witness test and review of records that blow-down valves function as required by design.

Liquid accumulation shall be prevented in the relief and disposal system such that the route from protected equipment to the flare tip or vent shall not be impaired.

P&IDs Design

Confirm by review P&IDs and piping drawings that all flare, relief and blowdown lines are self draining, and where low points are unavoidable these have an appropriate drain connection with locked open isolation valve.

P&IDs Construction

Confirm by sample inspection and review of records that all flare, relief and blowdown lines are self draining, and where low points are unavoidable these have an appropriate drain connection with locked open isolation valve.

Flare tip or the vent shall be located such that:It limits the risk of an un-ignited release from forming a flammable cloud in areas of the Installation where ignition may occurAn ignited release in the vicinity of the flare or vent does not exceed maximum allowable radiation limits in normally manned areas and on escape routes.

Guidance: Typical allowable limits are:(i) short term heat radiation 6.31 kW/m2(ii) continuous radiation not more than 1.58 kW/m2.

Operating philosophy;Flare tip selectionFlare vendor calculations

Design

Confirm by review of the Flare Design Report and Ventilation Studies that the flare tip positions have been selected such that the risk of an un-ignited gas release resulting in a flammable cloud over the Installation is minimised.

Design

Confirm by review of the Flare Design Report and Flare Radiation Study that the radiation levels as specified in the performance requirement are not exceeded or that protection is provided.

SpecificationsDrawings Construction

Confirm by inspection that the flare tips are located in accordance with the design


Document Types:




Air ingress to the disposal system shall be prevented in order to prevent an explosion hazard in the system.

Flare system designP&IDs

Design

Confirm by review of P&IDs that a gas purge is specified for the flare system, and by review of calculations; confirm it is capable of preventing air ingress into the system.

Design Confirm by review of P&IDs that any valves in the purge gas supply are specified as either ‘locked open’ or ‘normally open’.

DesignConfirm by review of P&IDs that instrumentation is specified to alert the operator in the event of a loss of purge gas (low pressure or low flow)

P&IDs Construction Confirm by review of records that the gas purge system is installed in accordance with the design.

Commissioning reports Commissioning

Confirm by review of commissioning records that the purge system functions in accordance with the design requirements, including means of alerting the operator of loss of purge gas.

Blow-down valves, including those with a time delay specified prior to opening shall remain functional following an explosion and under fire loading for a sufficient time to perform their intended function

Blow-down studyPurchase requisitionsVendor data

Design

By reviewing the blow-down study in conjunction with the P&IDs and the purchase order data, confirm that all BDVs and actuators have sufficient protection measures specified for their intended purpose

Design

Confirm by review of calculations, certification or type test data that all blow-down valve and actuator assemblies will open following the maximum specified blast overpressure and under the appropriate fire loading.

Drawings Construction Confirm by survey that all specified protection measures are correctly provided


Document Types:




Table C4 - Fire and gas detection systemHSE CRITICAL ELEMENT: DETECTION SYSTEMSFire and Gas Detection System


OBJECTIVES: To detect flammable gas releases, fires and smoke in designated areas of the gas installation and initiate the appropriate emergency response. LIMITS and BOUNDARY:All fire and gas detection, logic and outputs to ESD SystemIncludes executive actions driven directly from the F&G systemExcludes: Control devices initiated by the ESD System as a result of outputs from the fire and gas detection system Including High Sensitivity Smoke Detection System in Control and Switch Gear Rooms. RELEVANT SPECIFICATIONSIEC 60331 Tests for electric cables under fire conditionsNFPA 72: National Fire Alarm and Signalling Code


Document Types:


The F&G system shall continually monitor for fire, smoke and flammable gas in all areas of the berth where a risk of flammable gas accumulation may occur (including HVAC inlets and airlocks) and initiate appropriate status and alarm signals. Detectors shall be located, spaced and voted such that a hazardous condition is detected before significant damage or escalation occursAlarm signals shall be relayed to a normally manned area and appropriate actions taken.

F&G Detection LayoutF&G PhilosophyESD and F&G Cause & EffectHAZIDFERA studySchedule of hazardous releases Hazardous area drawings / layouts

Design

Confirm by review of the safety studies that all hazardous conditions which are required to be detected by the fire & gas system have been identified and dimensioned.



Guidance:

— distribute appropriate output signals to the ESD system for implementation of shutdown actions

— Installation and Jetty general alarm (GA) on confirmed fire or gas detection

— fire-pump start on confirmed fire detection in open areas

— Fire and Gas detection placement to be in accordance with project specifications

F&G Detection LayoutsDetector Vendor performance dataSchedule of hazardous releasesHazardous area drawings / layoutsFERA studyGas release and dispersion study

Design

Confirm by design review that the type and location, spacing and voting of detection devices is appropriate to the identified and dimensioned hazardous conditions.Type and location of all detection devices (including MACs, all Fire and Smoke detection (both indoor and outdoor) and hydrocarbon gas detection, including battery room) shall comply with the project requirements

F&G Detection LayoutFire and Gas PhilosophyESD and F&G Cause & Effect

Design

Confirm by review of the Cause and Effect diagrams, in conjunction with the detector layouts that the appropriate executive actions and status / alarm signals are undertaken by the F&G control system in response to the detected hazard.

Guidance: Check interactions with ESD are appropriate and confirm logic for the F&G actions is in compliance with the project requirements.

Design DrawingsITPs

Construction

Confirm by Survey, that the detector coverage as installed meets the intent of the conclusions identified in design. All deviations from the accepted detector layouts to be justified.

Design DrawingsITPs

Commissioning

Confirm by witness function test, that the F&G control system undertakes appropriate executive actions and status / alarm signals in response to the detected hazard in accordance with the Cause & Effect diagrams and within the time periods stipulated by the design [time to closure of ESDVs shall be confirmed through this activity].


Document Types:




Fire and Gas Detector cables shall be fire resistant to project specificationsAs far as is reasonably practical, Fire and Gas Detector cables shall be protected from mechanical damage.


Design

Confirm by review of the cable specification, cable requisition, vendor data sheets and cable schedule that all cables associated with the F&G detectors are fire resistant.Cable supports / racks shall offer equal rating as a minimum to maintain availability of the system.

Cable specificationCable Certification

Construction

Confirm by sample survey that the cables installed are fire resistant. Cable markings and certification shall be verified as being compliant.Routing of cables shall also confirm they are, as far as is possible, protected from mechanical damage.

The Fire and Gas Control System shall have a minimum SIL rating as specified for the Project.

Guidance: Hazard Studies are used to decide SIL rating

Safety ConceptSIL Assessment StudySIL Classification StudySIL Verification ReportVendor Verification Report

Design

Confirm by review of vendor data and SIL Assessment Study that the F&G System and associated loops are based on a probability of failure on demand as defined in IEC-61508 and IEC 61511, and meets Performance requirements.

The F&G system shall be protected against fire, blast and dropped objects, such that its ability to function is not impaired either during a major accident event and/or for a specified minimum duration thereafter.Control System shall include all status monitoring and actions to and from the Control Rooms.

Safety ConceptHAZIDFire & Blast studyBuilding Structural DesignEquipment room(s) heat rise studyEquipment layouts

Design

Confirm by design review that the Fire and Gas Control System is appropriately protected [by location or otherwise].Review to include but not be limited to:

— HAZID— fire & blast study— building structural design— equipment room(s) heat rise study— equipment layouts.

This activity shall, if possible, be combined with similar activities where the protection of the ESD System is assessed.

Table M1 – Fire and blast protection systemsHSE CRITICAL SYSTEM: PROTECTION SYSTEMSFire and Blast Protection Systems


OBJECTIVES: To protect key items of the Installation or structure against fire and explosion, where failure of these items could result in major escalation of an initial event. To provide and aid in fire recovery by provision of equipment and devices allowing application of fire fighting agents for control or extinguishing by automatically or manually controlled methods. LIMITS and BOUNDARY:To cover fighting of fire hazards at the Installation facilities including the following fire protection systems:Passive Fire Protection, Firewater Pumps, Deluge System, Foam and Water System, Water Curtains, Total Gaseous Extinguishing System (if provided for Building protection)RELEVANT SPECIFICATIONSFire-Zone LayoutHazardous Area classificationFire-Water systemsFire Extinguishing systemsPassive Fire ProtectionNFPA 2001NFPA 20 Fire Water Pumps


Document Types:






All hydrocarbon containment equipment and piping with the potential to give rise to significant escalation hazards are to withstand the effects of an explosion followed by fire impingement with no loss of containment before the Installation inventory has been reduced to a safe level (blowdown is complete) and personnel have escaped to a place of safety.

Basis of DesignSafety PhilosophyHAZIDQRA / FERAESSA

Design

Confirm that accident scenarios with the potential to cause escalation have been identified and dimensioned correctly.Review the safety studies to confirm that the proposed fire and explosion loadings are justified

Fire Protection PhilosophyFire System Basis of Design

Design

Review the fire protection philosophy (or similar) to ensure that all the identified accident scenarios are correctly mitigated by an appropriate combination of active and passive fire protection

PFP SpecificationsMaterial CertificatesCalculations application scheduleDesign Drawings

Design

Ensure that correctly dimensioned PFP is specified for equipment and structures as required commensurate with the hazards.

Approved DesignCoating RecordsITP

ConstructionSurvey to ensure that PFP is installed in line with the design.

Fire Protection PhilosophyFire System Basis of Design

Design

Ensure that deluge coverage and rates are appropriately specified for the relevant hazards using appropriate extinguishing medium (water/foam).

Calculations – amount required and storage sizing calcs. Hydraulic analysisP&IDsLayouts & CalculationsMaterial SpecificationsFabrication Specs

Design

Design review to ensure the fire water supply chain supply and distribution is adequate:Sufficient firewater and foam available Firewater pumps sized correctlyFirewater system sized adequatelyFirewater system routed correctly and adequately (proven by hydraulic analysis)Confirm the correct number, location and type of deluge nozzles (or other firewater application systems as specified) Suitable materials and fabrication process specified

Fabrication specificationsCorrosion Protection DO studyISO DrawingsPiping GAsSurge AnalysisP&IDs Fire zone location plot plansEquipment layouts Pipe stress Analysis

Design

Design review to ensure firewater system is designed to survive foreseeable loadings and accidental eventsCorrosionSupply routed to avoid or be protected from dropped objects.Supplied by duplicated feeds from separated isolatable section of firewater ring main.Deluge valve sets located as far as practicable from the fire areas they serveFirewater system suitably design to be capable for withstanding all foreseeable extremes of operating, pressure and temperate (including water hammer and transient effects from surge or water hammer).

Approved Design DocumentationITPs

Construction

Survey to ensure the firewater system is fabricated and installed as specified in the design:PumpsRoutingSections/isolationNozzle layoutFabrication and workmanshipMaterialsDeluge Valve set locationsPipe supportsMechanical completion records

F&G / ESD C&EsF&G / ESD SpecificationsActive Fire Fighting Philosophy

Design

Design review to confirm the correct initiators, for active fire protection systems, are specified and included in the ESD executive actions:F&G/ESD initiationManual initiationFusible loop initiationFail safe initiation (loss of IA or hydraulic pressure)Time from initiation to supply specified in design



ITPs CommissioningSurvey and witness test to ensure firewater/foam is supplied when initiated (check each initiator in every fire zone including fusible loop).

Firewater and Foam Protection LayoutsP&IDs

Commissioning

Survey to confirm the required coverage is achieved in each fire zone.

Visual Inspection Commissioning Test Reports

CommissioningConfirm the firewater is supplied within the time specified in the design.

The reliability / availability of fire water system shall be commensurate with the identified hazards and in accordance with project requirements and fire protection philosophy

Active Fire Protection PhilosophyFire Water System Design Basis

Design

Confirm by review of the Fire Protection philosophy [or other relevant documents] that the hazards have been identified and the appropriate Reliability and Availability has been specified commensurate with the identified hazards.

Design Confirm the reliability and availability of fire water system in accordance with the project requirements.

Specified critical buildings and control rooms normally occupied by personnel shall survive blast loads defined by the project

DALS (design accidental load specification)

DesignConfirm by review of the DALS that critical buildings and control rooms are in accordance with the project requirements.

ITP ConstructionConfirm by visual inspection that construction complies with the requirements of the design

Specified critical building and enclosure boundaries shall prevent passage of Fire & Smoke and maintain an acceptable temperature on the inner surface when subject to fire load exposure for the time specified

Building structural design documentation

DesignConfirm by review of building design that internal boundary rated divisions comply with the project requirements.

ITPs Construction

Confirm by visual inspection that rated divisions comply with the requirements of the design. All penetrations through rated divisions shall maintain the rating of the division certification shall be reviewed for compliance.

Buildings and enclosures shall be protected by total flooding systems where required at concentration levels and flow-rates in accordance with project requirements. The follow up flow shall be sufficient to compensate for leakage.

Building and Enclosure Extinguishing Specifications

Design

Confirm by review that all building areas and enclosures requiring protection have been correctly identified and that the correct extinguishing system has been selected.

Vendor Drawings and Discharge CalculationsEquipment and Building LayoutsSystem SchematicsSystem Logic and Control Drawings

Design

Review area protection plans and vendor data, and confirm that enclosures have been specified to be equipped with an appropriate flooding system as appropriately defined in the project specifications and that total flooding extinguishing systems provided meet the specific discharge requirements (volumes, rates, type, etc.) of each protected area and the system requirements (interlock, discharge alarms, systems control, feedback, 100% back-up, etc…) of the applicable Flooding System Specification

ITP Construction Confirm by survey that the flooding systems have been provided as specified in design.





Table E1 – Emergency power system supplyHSE CRITICAL SYSTEM: EMERGENCY RESPONSEEmergency Power System Supply


OBJECTIVES: To maintain power to the ESD and F&G Systems as well as the telecoms systems that requires power to function in an emergency and to allow the plant to be safely shut down and evacuated. The system shall be from a reliable source of electrical power and shall be available after the identified major hazard events. LIMITS and BOUNDARY:Includes emergency battery power supply for ESD system, FGS system, PA/GA audible and visual alarms and power to all other identified end users which must function under an emergency condition. RELEVANT SPECIFICATIONSCable Specifications (e.g. IEC60331)NFPA 110 Standard for Emergency and Standby Power SystemsEN 50091 Uninterruptable Power Systems


Document Types:


There shall be sufficient emergency battery power supplied to support all safety critical systems for the time required for each system to perform its intended function as noted below.F&G Control system – duration of the event (see guidance)ESD Control System – duration to be determined as long enough to complete all ESD actions (see guidance)PA/GA System – duration of the event

Guidance: 1hr to be considered as minimumFor emergency and escape lighting systems

Guidance: 1hr to be considered as minimum for other Safety Critical Systems – duration required to function correctly.

UPS Load ScheduleLoad CalculationsVendor Battery Calculations

Design

Confirm by design review that the UPS emergency power system type is capable of supplying UPS emergency power to all identified emergency systems for the required durations.

FAT Reports DesignReview FAT Load & Discharge tests to confirm that UPS is of sufficient capacity to supply the specified equipment.

ITPs Commissioning

Confirm by survey and witness test that sufficient UPS capacity for the required duration periods has been provided and that it supports the equipment as required by their normal operations mode.



All emergency power systems are to be protected from fire, blast and accidental events such that the function is not impaired while there is a requirement for emergency power.

Safety ConceptHAZIDFire & Blast studyBuilding Structural DesignTR/Critical equipment room(s) heat rise studyEquipment layouts

Design

Review the design documents (safety studies etc) and layouts to confirm that all scenarios which may affect the emergency power system have been identified.

Design

Confirm by design review that the emergency power systems (UPS) is appropriately protected [by location or otherwise].Review to include but not be limited to:FERAFire & Blast studyTR / SCE equipment room(s) heat rise studyEquipment layouts

Guidance: This activity shall, if possible, be combined with similar activities where the protection of the ESD and FGS Systems are assessed. Main and emergency distribution equipment should be located in separate rooms.

ConstructionConfirm by Survey that the emergency power system is appropriately protected [by location or otherwise]

UPS field cabling to all Safety Critical Systems (as listed above) should be segregated from main power cables and shall be fire resistant according to specifications.


Design

Confirm by review of the cable specification, cable requisition, vendor data sheets and cable schedule that all cables associated with UPS feed to HSE Critical Systems are fire resistant.

Cable specificationCable certification

Construction

Confirm by sample Survey that the cables actually installed are fire resistant. Cable markings and certification to be verified for compliance.


Document Types:




Table E2 – Escape and EvacuationHSE CRITICAL SYSTEM: EMERGENCY RESPONSEEscape and Evacuation


OBJECTIVES: To provide reliable, secure and effective systems for alerting personnel to the existence of an emergency and for communicating additional information to personnel during, or after, a major hazard incident. To provide routes and facilities which personnel can use to move away safely from the effects of a hazardous event in their vicinity and to continue their movement in safety along readily identifiable access routes to the Muster Areas and evacuation points.To provide reliable facilities which allow communication both internally and to external locations in the event of an emergency condition at the facility.To provide rescue of injured personnel LIMITS and BOUNDARY:Emergency LightingEscape routesPersonal protective equipmentRELEVANT SPECIFICATIONSTemporary Refuge/Muster AreaEmergency Lighting and signagePersonal Survival EquipmentEN1838 Lighting applications – Emergency lighting, EN50171 Central Power Supply Systems, EN50172 Emergency Escape Lighting Systems, EN60598-2-22 Luminaries, Particular requirements Luminaries for emergency lighting



At least two unobstructed diverse escape routes shall be provided from all potentially manned working areas to the muster areas. All escape routes shall be provided to ensure that any area can be rapidly and safely evacuated in the event of an emergency. Escape route width and provision shall be as defined in project specifications.

Guidance: Escape routes should be greater than 1m wide.

Safety ConceptBuilding Escape Route Layouts Plant Layouts

Design

Confirm by design review that escape route drawings show two correctly dimensioned escape routes from all normally manned areas and that the escape routes do not run through process areas containing hydrocarbons. Escape route widths and provision shall be confirmed as being compliant with project or national specifications.

Building Escape Route Layouts Plant Layouts

Construction

Survey the primary and secondary escape routes to confirm the actual dimensions meet the specified requirements.

All escape and access routes shall remain clear of obstructions. All escape routes including emergency exit doors to be readily accessible, non-slip, marked and signposted. Markings and signs to be clearly visible if there is loss of artificial lighting outside daylight hours.

Building Escape Route Layouts Plant Layouts

Commissioning

Survey the primary and secondary escape routes to confirm that they are non slip and free from obstruction and that marking, and signposts are acceptable.

Guidance: This only applies to routes to muster areas.



All escape doors shall be of a type that can easily be opened in an emergency situation.

Building Escape Route Layouts Door ScheduleSecurity Door System Spec

Design

Confirm by design review that all escape route doors have been identified correctly and can be easily opened in the event of an emergency

Guidance: e.g. panic bar, fail safe for electrical locking systems, integral key on egress side etc. Escape route doors which normally open outwards should be fitted with panic bars,

Rescue breathing apparatus sets and other equipment necessary shall be located at strategic locations around the facilities to allow prompt rescue of personnel.

Safety ConceptBuilding Escape Route Layouts Installation Safety Equipment Layouts

Design

Review Safety Equipment Layouts to confirm that breathing apparatus is provided in sufficient quantities and at locations appropriate to hazards envisaged.

Emergency lighting shall be provided to permit safe egress during escape and evacuation in the event of loss of normal power, by means of emergency power generation and integral battery backed fluorescent fittings, located on/at:

- main escape and evacuation routes,

- main access points- muster area- first aid station(s)- fire fighting area- stairways and landings.

Building Escape route LayoutsInstallation Safety Equipment LayoutsLighting Layout DrawingsLighting Vendor Data

Design

Confirm by design review that provision of emergency lighting and illumination levels are sufficient to allow safe egress from building and installation locations. Minimum provision and lighting levels shall comply with project or national requirements.

Guidance: Emergency lighting should have a minimum capacity of 30 – 60 minutes

ITPs Commissioning

Survey the escape route lighting by night to confirm the battery endurance period and measure the lux at ground level to ensure the escape routes are sufficiently lit or alternatively the testing of part of the Installation lighting may be extrapolated to other areas based on lighting layouts and analysis.

Table E3 – Emergency CommunicationsHSE CRITICAL SYSTEM: EMERGENCY RESPONSEEmergency Communications


OBJECTIVES: To maintain an uninterrupted and reliable means of indicating alarm and implementing effective communication with personnel working on or around process equipment during a major incident SCE LIMITS and BOUNDARY:Emergency Communication to/from Control RoomPA/GA SystemRELEVANT SPECIFICATIONSProject StandardsISO 7240-19 Fire Detection and alarm systems



Effective communication, both internal and external shall be provided for emergency situations.The systems shall be protected by, location of equipment, spatial diversity and equipment redundancy.Internal and external telecommunications in order to perform the emergency function defined by project requirements shall be confirmed between the Control Room, vessel/s and storage / pumping locations and Muster area

Safety Concept/EERSTelecommunications System PhilosophyTelecommunications Equipment Layouts

Design

Confirm by design review that emergency communication systems equipment shall provide both normal and emergency communications between the emergency response team and the team managing the situation

Telecommunications Schematics / DiagramsTelecommunications Specification

Design

Confirm by design review of telecoms block diagram and specification that the telecommunications systems meets the project requirements in terms of protection, location, diversity and redundancy.



PA/GA system shall provide a means of alerting all personnel to the existence of an emergency situation, provide the means to communicate additional information to personnel during an emergency and shall be capable of operating without impairment for the minimum time required to escape to muster locations and then to evacuate to a place of safety after the start of a major accident. The provision and minimum alarm noise level above local ambient shall be in accordance with project requirements. In areas with greater ambient noise levels, visual alarms shall also be provided.

Guidance: Audible alarms should be provided in all areas with minimum of +6dBA above local ambient and visual alarms in high noise areas (>85 dBA)

Telecommunications Schematics / DiagramsTelecommunications Specification

Design

Review amplifier loading to ensure that the number of speakers on a speaker ring does not exceed the amount which the amplifier can drive,

PA/GA Layouts / Arrangement drawingsSystem architectural drawingsSystem block diagramsSystem specificationNoise study and LayoutsITPs

Commissioning

Confirm by witness test that the GA System provides clear communication between the Control Room and all Installation areas to alert personnel of potential hazardous or emergency conditions. The PA/GA system shall be in accordance with the project requirements. The minimum alarm noise level above local ambient shall meet the project requirements.

Emergency communications equipment shall not be adversely affected by the operation of other devices/equipment in close proximity (electromagnetic compatibility).

Design

Confirm by review of the vendor data pertaining to the GA system that it will not be adversely affected by, nor adversely affect, the operation of nearby equipment.

Guidance: Review of vendor technical file, EC Declarations of Conformity and associated technical file for individual equipment as well as data pertaining to the compatibility of all nearby equipment

Emergency communications equipment shall not create additional hazards during an emergency situation

Design

Confirm by review of the vendor data pertaining to the emergency communication system that it can be operated in situations where a flammable gas mixture is present.

GA control systems to be protected against fire, blast and credible accident events, by location or otherwise, such that its ability to function is not impaired for the time taken to muster after a major accident event.

Design

Confirm by design review that GA Control System shall be protected by location or otherwise, such that its ability to function is not impaired.

Note: Secondary method is hand held radios or fixed intercom system.

PA / GA cables should be located so that they are protected against accidental loads as far as possible and shall be fire resistant to specifications


Design

Confirm by review of the cable specification, cable requisition, vendor data sheets and cable schedule that all cables associated with the PA / GA system are fire resistant.Cable supports / racks shall offer equal rating as a minimum to maintain availability of the system.

Cable specificationCable certification Construction

Confirm by sample survey that the cables installed are fire resistant and are protected against accidental loads as far as possible. Cable markings and certification shall be verified as being compliant.



Table N1 – EnvironmentHSE CRITICAL SYSTEM: ENVIRONMENTEnvironmental Control Systems


OBJECTIVES: To limit the emissions to the air, limit the discharge to water, limit the generation of waste and spill prevention. SCE LIMITS and BOUNDARY:Complete Gas Installation or Process PlantRELEVANT SPECIFICATIONSProject and National RegulationsISO 14001 (environmental management system)Council Directive 96/61/EC (Integrated Pollution Prevention and Control)NORSOK S-003


Document Types:


During the development of the project, technically and financially feasible and cost effective options should be evaluated to reduce or offset project related GHG (Green House Gas) emissions during the design of the project.

Environmental Management System

Design

Review project documentation that takes into account options such as energy efficiency/conservation (e.g. combined heat and power and waste heat recovery) use of alternative energy resources, alterations of project and system design, reduction of VOCs (Volatile Organic Compound) and reduction of gas flaring.

Facilities with the potential to generate e.g. process waste water, sanitary sewage or storm water should incorporate necessary precautions to avoid, minimize and control adverse impacts to health, safety or the environment

Environmental Management SystemProject and national regulations

Design

Review project documentation pertaining to the following:

— discharge to surface water— discharge to Sanitary Sewer Systems— discharge to Storm Water— cooling water discharge.

to ensure that impacts to health, safety and the environment are as low as possible.

Water conservation programs should be implemented in conjunction wit the magnitude and cost of water use.

Environmental Management SystemProject and National Regulations

Design

Confirm by review that measures have been addressed and taken to reduce water consumption e.g.:Water monitoring and managementProcess water recyclingSanitary Water conservation

Plans shall be developed that considers prevention, reduction, reuse, recovery, recycling, removal and disposal of wastes (including hazardous waste) generated during all project phases and modes of operation.

Waste Management PlanNational Regulations

Design

Confirm by review that operations have developed a Waste Management Plan to define categories of all types of waste and plans for treatment, disposal and shipment.

The project to address potential environmental impacts on existing conditions such as surface, groundwater and soils.

Environmental Management System

Design

Review project documentation of existing land conditions, the proximity to ecologically sensitive or protected areas, check if strategies are in place that contribute to improvement of local conditions and evaluate project location alternatives.

Plans shall be developed to minimize or reduce emissions as far as reasonably practicable, resulting from commissioning and testing activities

HSE (Health Safety and Environmental) System Environmental Management System

Construction

Confirm by review of the vendor data pertaining to emissions that they will be according to project or regulatory levels.Review to include but not limited to:Air emissions (SO2, NOx, Particulate Matter (PM), Ozone, Ozone Depleting Substances)Noise and vibration emissions (traffic, turbines, compressors and other major equipment


Amended April 2012 DNV Service Specification DNV-DSS-315, October 2010see note on front cover App.C –

APPENDIX C EXAMPLES OF VERIFICATION DOCUMENTS

A. Verification Documents

A 100 Validity of verification documents101 Verification documents are, in principle, documents confirming that an examination has been carried out,and are valid only at the time of issue.

A 200 Statement of Compliance 201 A Statement of Compliance can be issued on completion of each particular project phase, or natural partthereof, and shall be based on a dedicated verification report.202 A Statement of Compliance shall be issued as a formal statement confirming that verification ofdocuments and or activities, has found that the onshore gas installation, a part thereof, or a verification activity,complies with the requirements applicable for that particular project phase.203 The technical information on a Statement of Compliance shall contain:

— onshore gas installation description and item number, if relevant— application (operational limitations and conditions of use) for which the onshore gas installation is intended— codes and standards with which the onshore installation has been found to comply— level of verification— an appendix containing the accompanying dedicated verification report.

204 A Statement of Compliance shall be signed by the DNV Project Manager.An example of a typical Statement of Compliance is shown at the end of this appendix.

A 300 Verification Reports301 Verification Reports are issued to confirm that the relevant product or service has been completed inaccordance with specified requirements.302 The report shall include information such as:

— product or service description and item number, if relevant— application (operational limitations and conditions of use) for which the product or service is intended— codes and standards with which the product or service has been verified against— safety objectives and performance requirements— clear statement of the conclusion from the verification (does it or does it not meet the specified

requirements)— codes and standards used as reference— documentation on which the verification report is based (documents, drawings, correspondence, including

revision numbers)— project-specific scope of work tables— any comments— identification of any non-conformances.

303 The Verification Report shall always be dated and have two signatures, the originator and the DNVinternal verifier.

A 400 Verification Comments 401 Reviews of documents shall be reported using Verification Comment Sheets (often called VerComs).These documents give details to the client of aspects of onshore installation design and construction that DNV:

— considers do not meet the specified requirements— does not have enough information to make a decision— offers advice based on its own experience.

402 Only in the first two instances does DNV expect a response from the Client or its contractors.403 An example of a typical Verification Comment sheet is shown at the end of this appendix.

A 500 Audit report501 Audit reports are issued to confirm that a company’s quality management system has been reviewed toconfirm compliance (or not) with the nominated standard and project requirements. In addition, the auditreports confirm compliance with the documented procedures and that these procedures are effective.502 Audit reports shall contain information such as whether:


DNV Service Specification DNV-DSS-315, October 2010 Amended April 2012 – App.C see note on front cover

— The company has a documented quality system.— This quality system been certified by an accredited Certification Body for the product (or service) in

question.— The quality system covers the following quality assurance elements adequately for the product:

— organisation— authority and responsibility— job descriptions for key persons— internal quality audits— documentation change control— job instructions and procedures— non-conformance and corrective action.

— There are adequate procedures for activities such as:

— calibration of equipment— material identification and marking— control of special processes such as welding, NDT PWHT— non-conformance identification and handling— inspection status— final inspection.

— The company’s facilities are, in general, considered adequate for the scope of supply.— A quality plan been prepared for the order concerned.— The purchaser or their appointed inspection agency are planned to attend the works.— There are any problem areas identified.

A 600 Survey Reports

601 Survey reports are documentation and recording of attendance activity by DNV.Guidance note:Survey reports are and may be called by different names. Examples are Inspection Release Note, Visit Report,Inspection Certificate, Site Report, etc.


602 A survey report shall contain enough information to identify clearly the product or service that has beenexamined, the operating conditions or specifications to which it has been examined and the conclusion reachedby DNV.

603 The survey report shall be printed on the relevant form and shall contain as much information as possiblein accordance with the standard headings in the form. In addition, the report number shall be shown.

604 An example of a typical Survey Report is shown at the end of this appendix.

B. Use of quality management systems

B 100 General

101 The assurance of onshore gas installation integrity and function requires that gross errors during design,construction and operation be minimised. The likelihood of gross errors shall be reduced in a systematicmanner by the operation of a quality management system adequate for the work being carried out.

102 Quality management systems frequently are documented at three levels:

— The quality manual and related procedures document how the organisation, as a whole, manages the qualityof all its products and services.

— The quality plan documents the specific procedures related to a particular project.— The inspection and test plan documents how the quality control activities for a particular project shall be

carried out and recorded.

B 200 Quality plans

201 The basic function of a quality plan is to be a memory aid in the management of a project. In anorganisation with many quality procedures for a variety of functions the quality plan states those that areapplicable to that particular project. The quality plan acts as a route map through the complexities ofmanagement of the project and highlights those activities relevant to quality management.

202 The project quality plan normally consists of two parts; firstly, a narrative description of the means ofcontrolling the project, and secondly, a tabular description of the inspections and tests to be carried out duringthe work.



203 The quality plan should address:

— organisational details of the project— authorities and responsibilities of key personnel— interfaces between, the client, contractors, sub-contractors and third parties— quality assurance activities placed on sub-contractors— cross references to existing company procedures.

204 The narrative part of the quality plan should include a description of:

— the applicable standards— project organisation and responsibilities— review of the contractual requirements— project planning and progress reporting— procedures for such activities as design control, purchasing, construction, installation, commissioning,

interface control and auditing— procedures for inspection and maintenance as well as normal operation— emergency response issues.

205 Additionally, the narrative part of the plan should describe the documentation requirements. It should bespecified:

— what documents are required— at what stage these documents are required— who is responsible for preparing the documents— relevant parties to whom documents are submitted— how any necessary approvals are acquired— who has originals and who has copies— if copies have to be certified copies— the length of time documents are to be retained and by whom.

B 300 Inspection and test plans

301 The tabular description of the inspections and tests to be carried out during the work is frequently knownas the inspection and test plan.

302 The following items should be checked for inclusion within the inspection and test plan:

— each inspection and test point and its relative location in the production cycle should be shown— the characteristics to be inspected and tested at each point should be identified— the use of sub-contractors should be indicated and details of how the verification of sub-contractor’s quality

shall be carried out should be shown— hold points established by the constructor, the operator or a third party, where witness or review of the

selected inspection or test is required, should be shown.

B 400 Review of quality management programme

401 The contractor’s quality manual shall be reviewed for compliance with ISO 9001 or 9002 as appropriate.The contractor’s operations should be audited to establish compliance with the documented system.

402 If the contractor has a quality system certified by an accredited third party certification body, this maybe taken as evidence of a satisfactory quality system provided the certificate is relevant to the contractor’s scopeof work for the project. However, the last two years’ periodical audit reports shall be reviewed to identify ifany recurring non-conformities have been revealed.

403 Any weaknesses revealed during this audit, or review of periodical audit reports, shall be consideredwhen planning the contractor monitoring activities.

404 Surveillance of the continuing acceptability of the contractor’s quality management system is carried outby observing a selection of audits carried out by the contractor as part of its internal audit system. The auditsto be observed should be selected over the length of the project at suitable intervals and should cover as widea selection of activities as possible.

405 Contractor’s inspection and test plans for the various activities undertaken during their scope of work forthe pipeline shall be reviewed and accepted, if adequate.

C. Document forms

C 100 Introduction

101 The end of this appendix includes example forms for use by DNV in verification.



102 The following forms are included:

a) Statement of Compliance.b) Verification Comments Sheet.c) Survey Report.



C 200 Statement of Compliance



C 300 Verification comments sheet



r

1

C 400 Survey report

If any person suffers loss or damage which is proved to have been caused by any negligent act or omission of Det Norske Veritas, then Det Norske Veritas shall pay compensation to such person for his proved direct loss odamage. However, the compensation shall not exceed an amount equal to ten times the fee charged for the service in question, provided that the maximum compensation shall never exceed USD 2 million.

In this provision "Det Norske Veritas" shall mean the Foundation Det Norske Veritas as well as all its subsidiaries, directors, officers, employees, agents and any other acting on behalf of Det Norske Veritas.

DET NORSKE VERITAS AS, Veritasveien 1, NO-1322 Høvik, Norway, Telephone: +47 67 57 99 00, Telefax: +47 67 57 99 11, Org.No. NO

945 748 931 MVA

Form No.: 40.91a Issue: January 2008 Page 1 of

Folder:

Cert. No.:

DET NORSKE VERITAS

SURVEY REPORT

Client :Order/Project. No. :Item Description :Survey Location :Date: :

SURVEY SCOPE

Verification Activity No.:

Description of Verification Activities:

SUPPORTING DOCUMENTS

Specifications:

Drawings:

VERIFICATION COMMENTS

NON-CONFORMITIES

Report Ends

Signed for Det Norske VeritasSignature:

Name:Title:

Date:


DNV-DSS-315: Verification of Onshore LNG and Gas Facilities

Documents

Transcript of DNV-DSS-315: Verification of Onshore LNG and Gas Facilities