Doc. Ref.: QSP-FE-03-22 AUGUST 2001 Page 1 SAFOP Guidelines TABLE OF CONTENTS 1 2 INTRODUCTION .......................................................................................................... 5 1.1 SCOPE ...............................................................................................................................5 DEFINITIONS................................................................................................................ 7 2.1 2.2 2.3 2.4 GENERAL...........................................................................................................................7 TECHNICAL........................................................................................................................7 ABBREVIATIONS ...............................................................................................................9 REFERENCES ...................................................................................................................9 3 SAFOP STUDIES GENERAL PRINCIPLES ............................................................... 10 3.1 3.1.1 3.1.2 3.1.3 3.2 3.2.1 3.2.2 3.3 3.3.1 3.3.2 3.3.3 3.3.4 3.3.5 3.4 3.4.1 3.4.2 3.4.3 3.5 3.5.1 3.5.2 3.5.3 3.6 3.6.1 3.7 3.7.1 TYPES OF STUDIES........................................................................................................10 Safety Analysis (SAFAN) ..................................................................................................10 Security and Operability Analysis (SYSOP) ......................................................................10 Operator Task Analysis (OPTAN).....................................................................................10 TIMING OF STUDIES.......................................................................................................10 Initial Study........................................................................................................................10 Final Study ........................................................................................................................10 SAFOP TEAM COMPOSITION ........................................................................................10 General .............................................................................................................................10 Leader ...............................................................................................................................10 Secretary...........................................................................................................................11 Members ...........................................................................................................................11 Training .............................................................................................................................12 STUDY EXECUTION........................................................................................................12 General .............................................................................................................................12 Methods ............................................................................................................................12 Environment......................................................................................................................12 PREPARATIVE WORK ....................................................................................................13 General .............................................................................................................................13 Initial Study........................................................................................................................13 Final Study ........................................................................................................................13 RECORDING ....................................................................................................................13 Worksheets.......................................................................................................................13 FOLLOW-UP ....................................................................................................................13 Recommended Actions.....................................................................................................13 4 SAFETY ANALYSIS (SAFAN) .................................................................................... 15 4.1 4.1.1 4.2 4.3 4.4 4.5 4.5.1 4.5.2 4.5.3 GENERAL.........................................................................................................................15 Study Phases ....................................................................................................................15 STUDY TECHNIQUE........................................................................................................15 PROCEDURE ...................................................................................................................15 RECOMMENDED ACTIONS ............................................................................................16 EXAMPLES.......................................................................................................................16 Safety Analysis (Outside Persons)....................................................................................16 Safety Analysis (Non-Electrical SPDC Staff) ....................................................................17 Safety Analysis (Electrical SPDC Staff) ............................................................................17 Doc. Ref.: QSP-FE-03-22 August 2001 Page 2 5 SYSTEM SECURITY AND OPERABILITY OF PLANT ANALYSIS (SYSOP) ............. 23 5.1 5.1.1 5.2 5.2.1 5.2.2 5.2.3 5.2.4 5.3 5.3.1 5.4 5.5 5.5.1 5.5.2 GENERAL.........................................................................................................................23 Study Phases ....................................................................................................................23 STUDY TECHNIQUE........................................................................................................23 Element Selection .............................................................................................................23 Component Method ..........................................................................................................23 Assessment Point Method ................................................................................................24 Consequences and Results ..............................................................................................24 STUDY PROCEDURE......................................................................................................24 General .............................................................................................................................24 RECOMMENDED ACTIONS ............................................................................................25 EXAMPLES.......................................................................................................................25 Component Method ..........................................................................................................25 Assessment Point Method ................................................................................................26 6 OPERATOR TASK ANALYSIS (OPTAN).................................................................... 38 6.1 6.1.1 6.2 6.3 6.4 6.5 6.5.1 6.5.2 GENERAL.........................................................................................................................38 Study Phases ....................................................................................................................38 STUDY TECHNIQUE........................................................................................................38 STUDY PROCEDURE......................................................................................................39 RECOMMENDATIONS.....................................................................................................39 EXAMPLES.......................................................................................................................40 Control Room Operator Task Analysis .............................................................................40 Field Operator Task Analysis............................................................................................40 APPENDIX 1 – NOTES OF GUIDANCE FOR SAFOP TEAM LEADERS ...................................44 APPENDIX 2 – NOTES OF GUIDANCE FOR SAFOP TEAM SECRETARIES ..........................46 APPENDIX 3 – CONTROL ROOM OPERATOR'S MAIN TASKS QUESTIONNAIRE ............47 APPENDIX 4 – FIELD 0PERATOR'S MAIN TASKS QUESTIONNAIRE.....................................50 7 ENGINEERING STANDARD USER-COMMENT FORM ............................................ 52 Doc. Ref.: QSP-FE-03-22 AUGUST 2001 Page 3 SAFOP Guidelines Figure 1-1 - SAFOP STUDY INPUTS AND RESULTS ..........................................................................6 Figure 3-1 - SAFOP STUDY TEAM COMPOSITION...........................................................................11 Figure 3-2 - SAFOP STUDY SEQUENCE ...........................................................................................14 Figure 4-1 - SAFAN GUIDE WORDS AND PROMPT WORDS ..........................................................18 Figure 4-2 - SAFAN STUDY SEQUENCE............................................................................................19 Figure 5-1 - SYSOP GUIDE WORDS AND PROMPT WORDS ..........................................................27 Figure 5-2 - SYSOP COMPONENT ASSEMBLY METHOD …………………………………………… 28 Figure 5-3 - SYSOP ELEMENT ASSESSMENT POINT STUDY SEQUENCE ...................................29 Figure 5-4 - ELECTRICAL SYSTEM POSSIBLE ELEMENT AND STUDY SEQUENCE ....................30 Figure 5-5 - 33 KV FEEDER CIRCUIT ELEMENT ...............................................................................31 Figure 5-6 - 132 KV AND 33 KV BUSBAR ELEMENTS.......................................................................32 Figure 5-7 - 132/33 20 MVA TRANSFORMER ELEMENT ..................................................................33 Figure 5-8 - OVERHEAD TRANSMISSION LINE ELEMENT. .............................................................34 Figure 5-9 - 132/33 KV TRANSFORMER ELEMENT ASSESSMENT POINTS ..................................35 Figure 6-1 - OPTAN STUDY SEQUENCE ...........................................................................................41 Checksheet SAFETY ANALYSIS (SAFAN)…………………………………………………………………20 Worksheet SAFETY ANALYSIS (SAFAN) ………………………………………………………………….22 Checksheet SYSTEM SECURITY AND OPERABILITY (SYSOP) ……………………………………..36 Worksheet SYSTEM SECURITY AND OPERABILITY (SYSOP) ……………………………………….37 Checksheet OPERATOR TASK ANALYSIS (OPTAN) …………………………………………………..40 Worksheet OPERATOR TASK ANALYSIS (OPTAN) …………………………………………………….42 Doc. Ref.: QSP-FE-03-22 August 2001 Page 4 1 INTRODUCTION This guide describes a series of studies that shall be used during various phases of a major project being engineered to design, install and operate high voltage generation, transmission and distribution electrical installation, within Shell Petroleum Development Company of Nigeria Ltd. (SPDC). These studies are collectively designated as a 'Safety and Operability (SAFOP) Study' and are internationally established for use in the petrochemical industry. Individual studies can be applied to assist in clarifying objectives of the installation, selection of plant and equipment and its use in terms of system security and operability. Additionally, one of the studies helps to identify major hazards to different groups of personnel inherent in construction, commissioning and operation of high voltage electrical systems. 1.1 SCOPE A SAFOP is performed to provide a formal framework for a searching and systematic examination of engineering design in terms of effective operation and safety of personnel, using information provided by SPDC project staff, their Consultants, plant Manufacturers and relevant Government agencies (Federal Ministry of Power and Steel - FMPS and National Electric Power Authority - NEPA) where interface exist. A SAFOP study does not include detailed analysis of design calculations, design data (e.g., checking of protection settings, etc.) stipulated by engineering design Consultants nor any initial review of a Manufacturer's design capabilities (such as test certificates for items of plant, etc.). A SAFOP shall form part of the project work scope for projects which do change the configuration of the SPDC High Voltage power generation and transmission system, or when new loads are connected to the system with a total installed capacity in excess of 1 MVA. In other cases, the SPDC Corporate Discipline Head Electrical may still decide to include a SAFOP study in a project scope, depending on the possible impact on power system integrity and operability. The project RFQ shall mention the requirement for the inclusion of a SAFOP study. Objectives of a SAFOP Study are summarised as to: • • Assess and minimise types of potential hazard presented to personnel in the vicinity of electrical installations. Provide a critical review of both network design and plant to be installed and assess any limitations and their effects on both operability and security of the overall system. Analyse tasks set for operators assess facilities and instructions provided to undertake these tasks and recommend measures to avoid operator error. • It is not the intention of this study guide to duplicate design work provided by SPDC’s Consultants or turnkey Contractors, but it is intended that SAFOP Studies should complement engineering design by providing overall assessments of final design from an operational view point. An overview of inputs to, and results sought from a Safety and Operability Study (SAFOP) is illustrated in FIGURE 1-1. Doc. Ref.: QSP-FE-03-22 AUGUST 2001 Page 5 : QSP-FE-03-22 August 2001 Page 6 . Ref.1 DEFINITIONS GENERAL For the purposes of this document the following definitions shall be used.SAFOP Guidelines ENGINEERING DESIGN Layouts/Schematics Drawings Specifications SAFETY. Doc. OPERATION & MAINTENANCE DOCUMENTATION Manufacturer’s data SPDC HSE regs SPDC ESR’s/ESOP’s Local Electricity Act (CAP 106) Electricity Supply Regulations SAFOP TEAM Technical knowledge Operational Experience SAFETY & OPERABILITY STUDY (SAFOP) (see figure 3) MODIFICATIONS TO DESIGN Layouts and/or plant/equipment components SAFOP DATA FILE ACTION LIST FOR FURTHER DOCUMENTATION Operational and maintenance procedures Design support documentation FINALISE PROJECT DESIGN FIGURE 1-1 SAFOP Study Input and Results 2 2. materials or productrelated services in accordance with the Purchase Order issued by SPDC or its nominated Contractor. manufacture. The party to the contract with the Company who is responsible for providing the design. commissioning and performance guarantee up to the defects liability period as defined in the individual contract. The party responsible for the manufacture of equipment and services to perform the duties specified by the Consultant or Company. Methods of giving visual or graphic information to an operator. The party to the Contract with the Company who is responsible for the construction and other related works specified in the contract.: QSP-FE-03-22 AUGUST 2001 Page 7 . Record attention points which have to be worked out at the Worksheet An item of plant or equipment that when combined with other components forms an ‘Element’. Electrical Safety Operational Procedure are instructions that are issued to supplement the SPDC Electrical Safety Rules. Electrical Safety Rules ref. supply.Shall Should May The Company User The Consultant - The word 'shall' is to be understood as mandatory. On occasion. Ref. -cont. engineering and other related consultation services under the contract. for example in 'turnkey contracts' the contractor may be responsible for design. The Contractor - Manufacturer Vendor/Supplier - Works Work-site - 2. shipment. engineering. testing. Shell Petroleum Development Company of Nigeria Ltd. All means by which an Operator gives instructions or institutes actions. installation. The word 'may' is to be understood as indicating a possible course of action. A party responsible for the supply of equipment. A specified engineer or Consultant who applies these Standards in the execution of SPDC project. A defined place designated by the Company whereat all Works and a Contractor under a Contract shall execute services.: Safety Manual appendix VII Assessment Point Checksheet Component Control Deviation Display ESOP ESR Doc.2 TECHNICAL Assessment points are defined locations within an Element to which a known deviation is assigned.Departure from the normal design function of an Element or Component. All Works to be executed and all services to be rendered by a Contractor under the terms of a Contract. The word 'should' is to be understood as strongly recommended. National Electric Power Authority Operator Task Analysis. Federal Ministry of Power and Steel Hazard and Operability Study. Definition of the design and operating intention of plant or equipment under both normal and abnormal running conditions.SAFOP Guidelines Element Function Guide-word Hazard Information Key Task Keyword Monitor Procedure Major part of an electrical installation that is large enough to be of interest in terms of the study objective.: QSP-FE-03-22 August 2001 Page 8 . To monitor system parameters and automatically initiate disconnection of a circuit under fault conditions. Statement of object and scope of study. Recorded plant data.. Identification of chief task under the three main Operator duties headings. Request for Quotation (project work scope) Safety Analysis. Safety and Operability Study is the application of a series of technical examinations and audits to assess hazard potential to personnel and plan of mistaken operation of a system or malfunction of individual components and consequential effects including operator error. Word chosen to help a study team to identify possible deviations or consequences associated with a selected Guideword. Shell International Exploration and Production B. aid to meet operating aims and a specified series of actions to achieve a given result. Means of aid or support. Supervisory Control and Data Acquisition. Electrical Safety Operational Procedure. Ref. This term may include general operating guidance. knowledge understanding and training. Label or distinctive word used to focus attention of a SAFOP study team on possible Deviations and their consequences. Survey and assess all displays.3 ABBREVIATIONS Electrical Safety Rules.V. Danger to persons or electrical components which could cause injury. Formally recorded results and recommendations obtained during SAFOP study. damage or other form of loss. i. to provide remote system control and data acquisition. Supervisory Control and Data Acquisition. ESR ESOP FMPS HAZOP NEPA OPTAN RFQ SAFAN SCADA SIEP Doc. Prompt-word Protect Resources SAFOP Study - SCADA Study Definition Worksheet - 2.e. Identification of a hazard that may occur in an electrical installation and present danger to personnel or environment. 1. Shell Petroleum Development Company of Nigeria Ltd.SIOP SPDC UKEA VDU 2. Ref. 3.V.1.1 SAFOP STUDIES GENERAL PRINCIPLES TYPES OF STUDIES Three completely different types of studies are necessary to fully meet objectives of a complete SAFOP study and these can be summarised as follows. Doc. 3. SIPM EP 23/5 Safety and Reliability Directorate CISHEC Safety Committee - Guidance on Hazard and Operability (HAZOP) Studies revised edition 1983.4 REFERENCES - Shell International Oil Products B.2 Security and Operability Analysis (SYSOP) A SYSOP reviews briefly standards of overall network design and assesses security of supply provided to different user groups fed from high voltage systems.1 Safety Analysis (SAFAN) A SAFAN examines hazards always present in construction. Guide to Reducing Human Error in Process Operation (UKEA) February 1985 SRD R347 A Guide to Hazard and Operability Studies (1979) - 3 3. United Kingdom Electrical Association. Visual Display Unit. It examines main items of plant and their auxiliaries planned to be installed and consider any limitations found and their effect on system operability. work or even be in the vicinity of overhead lines and substations being engineered under a project. commissioning and operation of high voltage electrical installations and considers them in relation to safety of personnel who are to operate.: QSP-FE-03-22 AUGUST 2001 Page 9 . 3.e. 3. Also he should be able to contribute to discussions and assist the Team Leader in avoiding repetitive discussions of matters that should be settled at other individual study team meetings.1.1 Initial Study This can be implemented on completion of the conceptual design stage. at all meetings of the SAFOP teams to preserve a consistent and effective approach to all phases of a project. 3. Doc.2 TIMING OF STUDIES All three studies can be undertaken with considerable advantage at two distinct phases of an overall project.The Team Leader should not be involved personally in detailed planning or construction of an overall project or in day to day discussions with outside consultants (if used) or Manufacturers.4 Members Preferred or ideal composition for a complete SAFOP study undertaken at both Initial and Final phases of a project should be as detailed in the chart in FIGURE 3-1. as follows.1 SAFOP TEAM COMPOSITION General In general terms. 3. 3.2. as the SYSOP and OPTAN studies are necessarily conducted in terms of jargon familiar only to power engineers. and help clarify project objectives. Consultants.3. all of whom should have equal opportunity to make their contributions to discussions. 3. It considers network design together with plant and ancillary equipment required meeting project intention. Manufacturers.. whenever possible. especially when the team may consist of various levels of staff.3 3. 3. It may however be recognised at this stage that further study is required to complete both SYSOP and OPTAN studies when equipment-manufacturing drawings become available.: QSP-FE-03-22 August 2001 Page 10 . SAFOP study teams should consist of sufficient qualified members to be able to provide knowledge for both technical operational know-how and safety inputs necessary to meet study objectives. at the beginning of phase 1 design with the final review of specification before its approval. as Team Leader should be present.3. turnkey contractors and relevant Government agencies.3 Secretary The person appointed as Team Secretary should be present at all meetings of SAFOP Teams to preserve a uniform method of recording on standard worksheets recommended actions for the SAFOP Data File. through working meetings of teams without undue wastage of time and effort. -cont.2 Final Study This should be implemented as soon as possible following completion of 90% of the design.2.2 Leader The person chosen. Proven ability to chair meetings in a firm but informal manner is desirable. i.3. Ref. It is helpful if the Team Secretary has a sound understanding of electrical power engineering. He should be of sufficient seniority or standing to guide representatives of various SPDC departments.3 Operator Task Analysis (OPTAN) An OPTAN looks at probable tasks to be undertaken by both control room and field operators during normal and abnormal conditions. 3. It assesses usability of equipment to be provided and reviews instructions necessary to prevent human error as far as is reasonably economic and practicable.SAFOP Guidelines 3. all members of SAFOP study teams should attend this presentation so that they may question the Team Leader on their individual roles in the teams. Ref.5 Training The Team leader shall suitably plan training sessions if he feels that these are required. diagrams and relevant data will be available for both Initial and Final phase team studies.SAFOP STUDY TEAM COMPOSITION Preferred membership for these small teams should enable Checksheets/Worksheets to be speedily compiled and avoid unnecessary assumptions and speculation that are time wasting and present problems in understanding Worksheets in the Data File. Figure 3-1 . If possible. The Team Leader will then outline the preparative work (see FIGURE 3-2) that each member should undertake before team meetings. so that he can plan the different team meetings to achieve maximum effective use of members time and effort.It is obviously vital that overall project objectives are clear to the Team Leader and that he is aware of the time scale for the schemes partial or final commissioning.INDIVIDUAL STUDIES INITIAL PHASE Project Engineer Representative from :– Safety Department Custodian Department (Operations/ Field Maintenance) Electrical Engineering Discipline Design Consultants (If used) EPC Contractor (if different from Design consultant) Government representatives (if interface exists) FINAL PHASE Project Engineer Representative from :– Safety Department Custodian Department (Operations/ Field Maintenance) Electrical Engineering Discipline Design Consultants (if used) EPC Contractor/Manufacturer Systems Design Engineer Government representatives (if interface exists) SAFAN * * * * * * * SYSOP * OPTAN * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * Representative to attend. -cont. of a presentation by the Team Leader of both objectives and proposed working methods of the complete SAFOP study.: QSP-FE-03-22 AUGUST 2001 Page 11 . 3.3. the Team Leader should establish at what date design drawings. As with HAZOP and other studies it is desirable for all team members to have comprehensive briefing or training before taking part in a SAFOP study. in the main. Doc. At this presentation. Training sessions should consist. It is essential that both Team Leader and Secretary study this guide and have clear understanding of different working methods described for all three types of individual studies. selecting staff who will undertake Control Room and Field Operator duties. is ideal. Manufacturer(s) shall be able to incorporate any changes for deviations. although it is recognised that there will be some necessary overlapping or cross-checking of individual studies..: QSP-FE-03-22 August 2001 Page 12 .4. Electrical Safety Operational Procedures (ESOP’s) and HSE Standards should be made available to teams in addition to general safety instructions that refer to particular hazards. Again.5. Ref.4 3. at both Initial and the Final phases of the project. but it is perhaps not so rewarding to carry out an OPTAN initial Study until the SYSOP Final Study is complete. 3.5 3. 3. appropriate Doc. it may help in.2 Initial Study At this phase terms of reference are composed. diagrams and all relevant data in a 'frozen’ state. if necessary. Obviously it is difficult to try and identify where operator error is possible when final design of the plant and ancillary equipment is not known. This is firstly to enable the Team Secretary to write and produce copies of his worksheets for the team’s approval at the next days meeting. it is desirable to conduct team meetings in an environment remote from the normal offices of the members to prevent continual interruptions and phone calls causing inevitable distraction. A Conference Room with plenty of space for laying-out drawings. but the approach shown on the flowchart (see FIGURE 3-2) should produce the best result.5. Availability of team members to attend meetings must be considered but it is important not to work as a team for more than five hours at one session. etc.5. so that the team remains fresh and retains its capacity for inquiring in to details of a project with the original thinking necessary to spot anomalies or detect unforeseen hazards. Initial study should be completed in one to two days once team members have mastered working methods.4. teams formed and base data compiled.SAFOP Guidelines 3.1 PREPARATIVE WORK General Preparative work can be classified into two elements: one consisting of data provided by Consultants and Manufacturers and the other undertaken by individual team members.3 Environment Finally. SAFAN and SYSOP studies certainly should be carried out. However. Working procedures are clearly defined before the main study commences. Secondly. 3.4. 3. Engineering design is provided by Consultants and Manufactures in the form of layout drawings. However a final SYSOP study could well take one to three days. SPDC Electrical Safety Rules (ESR’s).2 Methods The number of team meetings should be kept to a minimum consistent with the efficient working of teams. if possible. protection schematics. depending on the size of a project and the amount of major plant and ancillary equipment to be installed. which are not acceptable to the SAFOP Team.1 STUDY EXECUTION General All three individual studies can be conducted independently of the other two. Operating manuals etc. 3.3 Final Study Final study teams should have design drawings. 7 3. for modification to design or a written procedure to cater for a particular situation. together with revision numbers of copy tabled. If an Initial Study is undertaken. 3. Doc. All drawings and diagrams examined at team meetings must be listed on appropriate Worksheets. for example.6. He must ensure that recommended actions are clear and are unambiguous. Worksheets must be clearly identified and marked to indicate whether study is at the initial or final phase of a project. as well as record the SPDC department/EPC Contractor is to discharge the actions.1 RECORDING Worksheets A Team Secretary has the duty to ensure that record of SAFOP study results are produced and written in a consistent and understandable manner. Assumptions that have sometimes to be made at an early design phase can be checked for accuracy when design drawings are in an approved 'frozen' state.6 3.7. in the meantime. the project engineer may have taken steps to improve the situation. Ref.specialists should be able to save a team valuable time by becoming familiar with these before the team's meetings. 3. recorded Worksheets should be an invaluable aid when the Final Study is commenced.: QSP-FE-03-22 AUGUST 2001 Page 13 .1 FOLLOW-UP Recommended Actions Follow-up work undertaken on completion of a SAFOP study will be in the form of recommended actions calling. Recommended actions sometimes will now not be necessary for a particular aspect as. Ref.: QSP-FE-03-22 August 2001 Page 14 .SAFOP Guidelines STUDY STUDY METHOD SAFOP STUDY INPUTS (see figure 1) SAFETY ANALYSIS (SAFAN) HAZARD KEYWORD TECHNICAL AUDIT & EVALUATION OF MAJOR DANGERS & RISK TO PERSONAL SAFETY * ADDITIONAL SAFETY PROCEDURES IDENTIFIED * LAYOUT / PLANT DESIGN CHANGE * ESOPs SYSTEM SECURITY & OPERABILITY ANALYSIS (SYSOP) GUIDEWORD METHOD SECURITY OF SYSTEM & OPERABILITY OF PLANT / EQUIPMENT * DESIGN MODIFICATIONS * ADDITIONAL OPERATION AND MAINTENANCE PROCEDURES IDENTIFIED OPERATOR TASK ANALYSIS (OPTAN) KEY TASK AND YES/NO TECHNIQUE OPERATOR TASK OPERATOR INTERFACE DECISIONS SUPPORTING INFO ACTIONS CONTROL FACS * OPERATOR FACILITIES * TRAINING & SUPPORT * DOCUMENTATION * TASK * DESIGN * ORGANISATION STUDY COMPLETION SAFOP STUDY GUIDE SAFOP STUDY REPORT (Recommendations & action list) SAFOP STUDY DATA FILE Figure 3–2 SAFOP Study Sequence Doc. 1 Study Phases A SAFAN study may be divided into two distinct phases • An initial technical audit undertaken by the study team on conceptual design to examine an overall project in terms of safe operation and safety of personnel. ‘Electrical SPDC Staff and Contractors' (under SPDC Safety Regulations With Entry to Electrical Installations).) A final SAFAN study carried out during the frozen design stage prior to manufacture.2 gives details. a number of 'Keywords' or ‘Guide words’ are used to identify specific types of dangers that an installation can present to various categories of personnel who may be effected by it. with the Keyword 'Electrocution' applied.1. the part chosen could be a section of overhead line. Within these limitations three groups of persons have been identified and classified into: • • • Outside Persons' (not under SPDC Safety Regulations). situations where persons may be exposed to danger be assessed in conjunction with necessary corresponding design information such as plant layout. For each Hazard Keyword chosen. A common checksheet is used for each of the above classifications. • 4. 4. where occurrence or initiation of faults in one location may cause serious Doc. when construction drawings are available. screening.It should be borne in mind that electrical installations operate as complete systems. To further aid the team in its evaluation. for example. Possible dangers that an installation presents to persons vary with degree of access or exposure permitted.4.3 PROCEDURE The team assesses in detail possible situations where persons may be exposed to danger. (Section 3.: QSP-FE-03-22 AUGUST 2001 Page 15 . a list of 'Prompt-words' for each Keyword has been prepared (see FIGURE 4-1 for suggested Key words and Prompt words). but with No Authorised Entry into SPDC Electrical Installations).2 STUDY TECHNIQUE To assist the study team in identifying potential hazards. etc. Team discussions take place to identify all possible situations where danger to each classification of person could arise and will be indicated on the checksheet. The group being examined shall be indicated in the worksheet. 4. Ref. boundary fences. giving detailed layouts of overhead lines and substations. ‘Non-Electrical SPDC Staff and Contractors’ (under SPDC Safety Regulations. -cont. The Team Leader selects a constituent part of the overall installation for detailed study and applies a Hazard Keyword.1 SAFETY ANALYSIS (SAFAN) GENERAL 4. These drawings can be examined now in detail by the study team to determine if project design permits safe operation with adequate safety of personnel. 4.2 Safety Analysis (Non-Electrical SPDC Staff) Non-Electrical SPDC Staff. then the minimum response is to limit consequences of the Hazard as far as practicable. with fault duration of fractions of a second to periods of several minutes. if possible. Study continues until all Hazard Keywords have been applied in turn to each individual constituent part of a complete installation and possible dangerous situations determined for each personnel classification.: QSP-FE-03-22 August 2001 Page 16 .4 RECOMMENDED ACTIONS All situations identified on the checksheet as being potentially dangerous to personnel are recorded on SAFAN Worksheets. For example. Review protection for adequacy.SAFOP Guidelines consequences elsewhere in a system. in the last resort. Person Classification Hazard Keyword Selected Exposure Situation Doc. Consider use of earthed cables. to some extent. High Voltage Conductor on Ground. FIGURE 4-2 illustrates the Safety Analysis study sequence.5 4. Person classification Hazard Keyword Selected Exposure Situation Data Required Assess Recommended Actions Record 4. However. Electrocution.5. depending on protection. Possible Danger. an additional decision needs to be reached as to whether further research or investigation is required to remove or mitigate the Hazard. on operational background and experience of team members. In a large installation it is possible that some constituent parts will recur and. if identical. with actions recommended by the Study Team. a lightning strike on an overhead line may result in flashover of equipment at the nearest substation some distance from the original incident location.1 EXAMPLES Safety Analysis (Outside Persons) Outside Persons (Not under SPDC Safety Regulations). Ref. Electrocution. Fire fighting staff attending fire in substation compound with exposed high voltage conductors. e. together with information used or required for assessment and. at road crossings. if possible. Finally if these cannot be satisfactorily achieved. In the case of minimum response to a defined hazard. Recognition of potential Hazards will depend. on the reactions of the operators. SAFAN CHECK SHEET/WORKSHEET.5. suggest means by which: • • • The causes of the Hazard are removed. Protection Information.g. These recommendations should. alarm and control schemes and. the Prompt-word list in FIGURE 4-1 may be used to stimulate discussion and to aid the team in its assessment. However. any interactions with other parts of the installation may still need to be assessed. Failing this the means to prevent persons being exposed to the Hazard. 4. the SPDC department/EPC Contractor responsible is recorded on the Worksheet by the Team Secretary. Electrical faults can also vary over a considerable time period.. will not require further investigation. Ref.: QSP-FE-03-22 AUGUST 2001 Page 17 . Substation air conditioning. SAFAN CHECK SHEET/WORKSHEET Person Classification Hazard Keyword Selected Exposure Situation Data Required Assessment Recommended Actions - Record - Doc.3 - Existing instructions to fire fighting teams. SAFAN CHECK SHEET/WORKSHEET Safety Analysis (Electrical SPDC Staff) Electrical SPDC Staff and Contractors.5. Check compatibility of air conditioning with fire zones.Check SPDC fire instructions and modify if necessary to direct teams to custodians of electrical substation before entry. Recommend installation of fire detection panel in low fire risk area (local Control Room) with audible alarm. Layout of air conditioning system. Toxicity. Recommended Actions . Possible circulation of smoke and toxic fumes from switchrooms into control and relay room.Data Required - Record 4. Toxicity S. Tension. Ref.SAFOP Guidelines Electrocution Direct Contact Indirect Contact Proximity Induction Step Potential Testing Working Fire Poles Transformers Conductors (Arcing Ground) Fireball (Explosion) DC Arcs Explosion Pressure.: QSP-FE-03-22 August 2001 Page 18 .SAFAN GUIDE WORDS AND PROMPT WORDS Doc. etc. Compression (release of force) Blast Insulators Seepage Gas/Oil Collection Chemical Racking (isolatable Switchgear) Physical Danger Falling (onto/into) Site Construction Work (Fences) Remote Control (Mechanical Devices) Racking (isolatable Switchgear) Mechanical Danger Emergency exits Ladders.F6 (Arc products) H2S Gases Acids Asbestos PVC Chemical Radiation x-rays Radio Active Substances Site Work Excavations Erection Fences Building near Substations/Lines Transformers Switchgear Batteries Cylinders Warnings for remote Switchgear and tapchangers operations Figure 4-1 . RECORD 8. SELECT HAZARD KEYWORD 3. COLLATE DATA 5.: QSP-FE-03-22 AUGUST 2001 Page 19 . PERSON CLASSIFICATION 2.START 1. DEFINE EXPOSURE SITUATION 4. REPEAT STEPS 2 TO 8 FOR ALL HAZARD KEYWORDS 10. RECOMMEND ACTION 7. Ref. CARRY OUT ASSESSMENT 6. REPEAT STEPS 1 TO 9 FOR ALL PERSON CLASSIFICATIONS FINISH Figure 4-2 SAFAN Study Sequence Doc. REPEAT STEPS 3 TO 7 FOR ALL EXPOSURE SITUATIONS 9. SAFOP Guidelines SAFAN Keywords Electrocution Checksheet Promptwords direct contact indirect contact proximity induction step potential testing working site work excavations erection fences building near substations lines poles switch house generators transformers conductors fireball DC arcs dropping tools Outside persons Non-electr.Non-electr. danger -cont. staff Physical danger Keywords Promptwords Outside persons Electrical staff worksheet Doc. staff Electrical staff worksheet Fire Explosion pressure generators tension compression blast insulators seepage gas collection oil collection racking transformers switchgear batteries cylinders excavation enclosures falling site construction remote control racking mech.: QSP-FE-03-22 August 2001 Page 20 . Ref. 6 H2S gases acids asbestos PVC chemical hydrogen CO2 Environmental Freon Radiation X-rays radio active Ergonomics accessible emergency exits Doc.Physical danger rotating equipment.: QSP-FE-03-22 AUGUST 2001 Page 21 . access emergency exits ladders warnings switchgear tapchangers noise temporary supplies Toxicity S.F. Ref. Ref.SAFOP Guidelines Project : SAFETY ANALYSIS(SAFAN) WORKSHEET Stage of Study (INITIAL/FINAL) : Location : Drawings : Sheet ……. Person Classification : Exposure Situations Information Required for Assessment Recommendation Action Type of Hazard(Key Word) Doc..: QSP-FE-03-22 August 2001 Page 22 . of ………. Suggested Elements selected from an electrical system be given in FIGURES 5-4. A system under study should be carefully examined to determine which parts to select as basic Elements.1. complex projects is facilitated by breaking-down projects into a number of discrete Elements for detailed examination. Ref. 5-5. Elements should be small enough to be manageable and large enough to be of interest in terms of study objectives and. Detailed examination of large. 5.SAFOP Guidelines 5 5. 5-6 and 5-8. each Component being a discrete major item of plant or support system. A final study should be conducted at the 'frozen' design stage to study in • detail the security and operability of a system. They are: •An initial study should be conducted out on the conceptual design to help clarify the objectives of the project in terms of overall system security and operability. Doc.This method of assessment requires the selected Element to be broken down into a number of components for detailed examination. be a whole subsystem or unit of a complete system.. FIGURE 5-2 illustrates the SYSOP study sequence for Element assessment.1 STUDY TECHNIQUE Element Selection This stage of study systematically questions engineering design and operation of a project to identify possible limitations and lack of flexibility. For e.1 SYSTEM SECURITY AND OPERABILITY OF PLANT ANALYSIS (SYSOP) GENERAL Study Phases A SYSOP study may be undertaken in two distinct phases. It is possible that an assessed Element will recur many times throughout a complete system and.2.2.1 5. 5. or upon associated Protection or Operational Zones. two transformers in parallel or encroachment of busbar protection into adjacent Elements. if possible. -cont. Guidewords assist a study team in questioning every part of a project design and operation in a manner that ensures systematic examination for deviations affecting security and operability of system plant and equipment. will not require further assessment. with their consequences to operability and security to a system. its plant and equipment.2 5. if identical.g. interaction of individual Elements with each other may have to be assessed. The flowchart in FIGURE 5-3 illustrates this principle.2 Component Method A Guide-word technique is used which is similar to that used in SAFAN studies but with basic Guide-words chosen to emphasise operation and security content of a study.2 gives details). These could be based on Isolation Points for major items of plant. (Section 2. However.: QSP-FE-03-22 August 2001 Page 23 . Locations known as 'Assessment Points' have their positions defined by numbering interconnections between components within an Element. (See FIGURE 5-9). consequences and results arising from deviations.1 STUDY PROCEDURE General A large schematic diagram of an Electrical System under study should be displayed and its general intention explained with regard to overall security and operation.3. Flowchart FIGURE 5-2 illustrates the study sequence for the Component Assessment method.2. the various combinations required to assess these relationships etc. Then the basic Elements of the system are defined. deviations should be noted for future investigation. although their relationship with other Components in the Element may need to be separately assessed. it may be necessary to use Prompt-words to stimulate discussion. The order in which Elements are chosen for review should proceed in a logical manner starting with a relatively simple Element. To help a team to identify possible deviations.3 Assessment Point Method The Guideword 'Protect' requires a different technique as it assesses the consequences of applying a known deviation.: QSP-FE-03-22 August 2001 Page 24 . The relationship of the Elements to each other and to the complete system. while identical Elements. the Team Leader should ensure that all team members understand causes. A list of prompt-words associated with the Guideword 'Protect' is given in FIGURE 4-1. FIGURE 5-1 lists Guidewords with associated prompt-words that can be used to fill in the checksheet. Flowchart FIGURE 5-3 illustrates the Element Assessment Point method study sequence. should be noted and a list prepared. Prompt-words 'will not close' or 'will not trip' could be used. at the distribution end of a system. The flowchart FIGURE 5-2 illustrates the Component method study sequence. -cont. 5. 5. At this early stage in the proceedings.2.4 Consequences and Results Consequences and results obtained from SYSOP studies are recorded on SYSOP worksheets. its function explained and Components/Assessment Points within defined.SAFOP Guidelines Identical Components need be assessed only once. Doc. If a solution cannot be found at the team meeting.3 5. The first Element should be selected for systematic critical review. with explanations given of their function and purpose. The Study Team Leader then selects a Component from within the Element and applies the first Guideword. The team discusses possible deviations arising from application of the Guideword with prompt words to the Component. such as a conductor earth fault or a system overload to various locations within an Element. Ref. and then up through the higher voltages.As Deviations are detected. 5. In the case of the Component and Guideword cited above. and with an inexperienced team. Components and Assessment Points are identified and marked on the system diagram. The study continues until all relevant deviations have been applied to pertinent locations for each selected Element of a complete system.5. Loss of cooler supply. Purpose Location and Cause 'Protect' 132/33kV Transformer To supply power and regulate voltage Short circuit and/or earth fault. Loss of supply as 33kV circuit breaker opens to off. All significant Deviations and Consequences are recorded. Page 25 Doc. For each location the team evaluates all possible consequences and their resultant effects both within and beyond Element boundaries. check cyclic rating of transformer. 5. the team now assesses in detail consequences and results arising from abnormalities in normal running of a system.5 5.SAFOP Guidelines Using Assessment point method in conjunction with the Guideword 'Protect'. Fit cooler failure alarms. Ref.: QSP-FE-03-22 August 2001 . No operation. and where possible remedial actions are recommended by the study tears. together with the team’s recommendations. Transformer. Operate. Located between 132 kV circuit breaker and it’s associated To check protection zones of operations.4 RECOMMENDED ACTIONS The study continues until all relevant Guidewords have been applied to each Component/Assessment Point within the Elements and all Elements have been examined in their relationship to each other and to the complete system.5. Results of this appraisal are recorded. To supply power and regulate voltage. together with the responsible SPDC department. Forced cooling fails to operate. Outage extends to 132 kV Busbar zone protection. together with their location and cause.2 Assessment Point Method Apply Guide-word Selected Element Element Function Deviation Applied Assessment Point current transformers. 5. SYSOP Checksheet/Worksheet 5. on a SYSOP Worksheet. Deviations are applied in turn at chosen locations throughout the Element.load transformer.1 EXAMPLES Component Method Selected Element Element Function Guideword applied Selected Component Prompt-word Deviation Developed Location and Cause Consequence and Result Recommended Action Record 132/33 kV Transformer. SAFOP Guidelines Consequences and ResultsPrompt-word Recommended Action Record - Busbar zone protection isolates adjacent 132 kV Busbar. Doc.: QSP-FE-03-22 August 2001 Page 26 . Loss of 132 kV interconnection Loss of supply. only one transformer installed at substation 'Back-up’ Check that overhead line protection acts as back up in case of bus-zone protection failure. SYSOP Checksheet/Worksheet. Ref. : QSP-FE-03-22 August 2001 Page 27 .SAFOP Guidelines GUIDEWORD Identify PROMPTWORDS Unable to identify Misleading identification (Misidentify) Will not operate Will not open Will not close Will not trip Will not tap Will not isolate No operation cooling Cannot control Incorrect control Disconnector Circuit Breaker Tap Changer Coolers Neutral Switch No indication No alarms No information False display Cannot maintain Isolate Earth Test Clearance Short circuit Earth fault Open circuit Overload Back-up (protection) Temperature Humidity Vibration Noise Lighting Figure 5-1 .SYSOP GUIDE WORDS AND PROMPT WORDS Operate Control Display Maintain Protect Environment Doc. Ref. REPEAT STEPS 3 TO 10 FOR ALL GUIDE WORDS 12.SAFOP Guidelines START EXAMINE OVERALL SECURITY OF ELECTRICAL SYSTEM 1. SELECT COMPONENT AND EXPLAIN FUNCTION 5. Ref.: QSP-FE-03-22 August 2001 Page 28 . RECORD 10. RECOMMEND ACTIONS 9. EVALUATE CONSEQUENCES AND RESULTS 8. REPEAT STEPS 1 TO 11 FOR EACH ELEMENT FINISH Figure 5-2 . EXPLAIN FUNCTION OF COMPLETE ELEMENT 3. APPLY GUIDE WORD 4.SELECT ELEMENT OF COMPLETE SYSTEM 2. REPEAT STEPS 4 TO 9 FOR ALL COMPONENTS 11. EXAMINE LOCATION/CAUSE 7.SYSOP COMPONENT ASSEMBLY METHOD STUDY SEQUENCE Doc. DEVELOP DEVIATION 6. APPLY GUIDE WORD 2. RECORD 10. EVALUATE CONSEQUENCES AND RESULTS 8.: QSP-FE-03-22 August 2001 Page 29 . REPEAT STEPS 5 TO 9 FOR ALL ASSESSMENT POINTS 11. EXAMINE LOCATION/CAUSE 7. RECOMMEND ACTIONS 9. REPEAT STEPS 2 TO 11 FOR EACH ELEMENT FINISH Figure 5-3 . Ref. SELECT ELEMENT OF COMPLETE SYSTEM 3. EXPLAIN FUNCTION OF SELECTED ELEMENT 4.SAFOP Guidelines START EXAMINE OVERALL SECURITY OF ELECTRICAL SYSTEM 1. APPLY DEVIATION 5.SYSOP ELEMENT ASSESSMENT POINT STUDY SEQUENCE Doc. SELECT ASSESSMENT POINT AND EXPLAIN PURPOSE 6. REPEAT STEPS 4 TO 10 FOR ALL DEVIATIONS 12. BUSBAR FINISH Figure 5-4 . BUSBAR 10 5. TRANSFORMER 8 7 4. TRANSMISSION CIRCUIT 9 6. Ref. TRANSFORMER (IN PARALLEL) 3.: QSP-FE-03-22 August 2001 Page 30 . BUSBAR 1.ELECTRICAL SYSTEM POSSIBLE ELEMENT AND STUDY SEQUENCE Doc. DISTRIBUTION CIRCUIT 7 2.SAFOP Guidelines START 1. 10. 12. Protection Circuits 7. Current Transformer 3. Ref. 8.: QSP-FE-03-22 August 2001 Page 31 . Circuit Breaker 2. 9. Voltage Transformers 4. 11. Instrumentation 6. Indication/Control Circuits Batteries/ DC Supplies AC Supplies Gas / Air Supplies Cabling/ Earthing Alternative In feed Conditions Figure 5-5 – 33 kV FEEDER CIRCUIT ELEMENT Doc. SCADA 5.SAFOP Guidelines ELEMENT 33 kV FEEDER CIRCUIT TO GATHERING STATION Components 1. Connector 7.SAFOP Guidelines (A) 132 kV Busbar (B) 33 kV Busbar S A 200 S A 300 A 204 SECTION 2 132kV A 104 S A 3204 C 280 SECTION 2 SECTION 1 C 180 SECTION 1 1250A A 126 A 214 A 210 A 120 A 124 A 114 A 110 C 215 A 214 A 214 C 120 25KA (3 SEC) C 115 C 100 C 300 Components 1. 11. 132kV –33kV Circuit Breaker 3. 10. 14. Instrumentation / Synchronisation Protection Circuits Indication/Control Circuits Batteries/ DC Supplies AC Supplies Gas / Air Supplies Cabling/ Earthing Alternative In feed Conditions Figure 5-6 . Ref. 9.: QSP-FE-03-22 August 2001 page 36 Page 32 . 12. Termination 6.132 kV AND 33 kV BUSBAR ELEMENTS Doc. Busbar 2. 132 kV Disconnector 4. 15. Current Transformer 5. 13. SCADA 8. SAFOP Guidelines 33/11kV. 33kV Circuit Breaker 3. 10. 9. 20MVA TRANSFORMER 133 kV A 114 S A 110 T1 0185 400A S 0180 11kV Components 1. Main Transformer 8. Ref. Neutral Switch Earthing Transformer Earthing Resistor Termination Connector SCADA Instrumentation / Synchronisation 15. 20. 14.33/11 kV 20 MVA TRANSFORMER ELEMENT Doc. 11. 16.: QSP-FE-03-22 August 2001 Page 33 . 12. 18. Current Transformer 5. 17. 13. 19. Circuit Disconnector 2. 33kV-11kV Circuit Breaker 4. Surge Divider 7. Protection Circuits Indication/Control Circuits Batteries/ DC Supplies AC Supplies Gas / Air Supplies Cabling/ Earthing Figure 5-7 . Voltage Transformer 6. 20. 16. 17. Earth Switches 6. Line Traps 7. Connector 11.: QSP-FE-03-22 August 2001 page 36 Page 34 . Doc.OVERHEAD TRANSMISSION LINE ELEMENT. Surge Divider 8. 12. 15. 19. Termination 10. 13. Over Head Line 9. Circuit Breakers 3. Circuit Disconnector 2. 14.SAFOP Guidelines 33 kV BUS A203 A304 A 300 A 303 A200 A204 S A 301 A201 1200A. Current Transformer 4. Voltage Transformer 5. Signalling Equipment SCADA Instrumentation / Synchronisation Protection Circuits Indication/Control Circuits Batteries/ DC Supplies AC Supplies Gas / Air Supplies Cabling/ Earthing Alternative In feed Conditions Figure 5-8 . 18. 25kA(3sec) Components 1. Ref. Ref.: QSP-FE-03-22 August 2001 Page 35 .SAFOP Guidelines ELEMENT ASSESSMENT POINTS 380 V AC G904 T62 T61 T01 2 RT T1 M P 33 kV Figure 5-9 – 33/11 kV TRANSFORMER ELEMENT ASSESSMENT POINTS Doc. : QSP-FE-03-22 August 2001 page 36 . Motors Main Circuit Current Voltage Protecti Indic Control Batter Cabling generator switchb breaker trfs trfs on ation ies oard circuits Keywords Promptwords Identify unable to identify misleading identify Operate will not operate will not open will not close will not trip will not tap will not isolate no cooling Control cannot control incorrect control disconnector circuit breaker tap changer coolers neutral switch Display no indication no alarms no information false display Maintain cannot maintain isolate earth test clearance Protect short circuit earth fault open circuit overload back-up Environm temperature ent humidity vibration noise lighting S. 6 Doc. Ref.F.SAFOP Guidelines SYSOP CHECK SHEET Gasturbine/ Generator Emerg. of ………. Ref.: QSP-FE-03-22 August 2001 Page 37 ..SAFOP Guidelines SYSTEM SECURITY AND OPERABILITY (SYSOP) WORKSHEET Project : Location : Drawings : Element : GUIDEWORD Component/ Assessment Point Element Function: Deviation Location and Causes Stage of Study (INITIAL/FINAL) : Sheet ……. Consequences and Results Recommendation Action Doc. (Chapters 4. or to use wrong working methods. Actions. These are: • • • Normal Operator Duties. System Switching. Major incidents usually occur through combination of minor failures. Operators may develop poor work habits to cope with difficulties. study should concentrate on the system requirements and staffing for Control Room and Field Operator duties. Typical questionnaires to establish main tasks for Control Room and Field Operators are provided in APPENDICES 3 and 4. These habits may be tolerated under normal working conditions but are likely to give rise to serious problems when combined with power plant failure or loss of supply. Make Decisions. 6.0 of this Engineering Guideline. (Subsection 3. are: • • • Monitor/Check. by drawing attention to certain salient points and general problems. Ref. Anything which makes human operator’s work more difficult can lead to mistakes.2 STUDY TECHNIQUE OPTAN methods used by the SAFOP Study Team naturally follow on from SAFAN techniques and SYSOP examination sessions. Doc. one item (such as a VDU display.1.1 OPERATOR TASK ANALYSIS (OPTAN) GENERAL Study Phases An OPTAN study may be divided into two distinct phases. as specific data will not be available at this time.) The final study should take place following SAFAN and SYSOP studies on the 'frozen' design when many Operator tasks will have been identified. To assist the team in its study.SAFOP Guidelines 6 6. possibility of human error should be considerably reduced. However. • The study team should look in detail at tasks required to be undertaken by Control Room and Field Operators. but when considered with other factors (such as heavy workload) may have serious consequences.) Detailed complexity of all Operator actions and decisions makes it unlikely that a complete assessment of every eventuality will be achieved. Abnormal or Emergency Conditions.1 gives details.0 and 5.2. This may lead them to either forget to do something.1 6. analyse Operator predicted response to these tasks. However. and review equipment and instructions provided. which is difficult to read) may seem trivial when considered alone. Each of these duties are further subdivided under headings which attempt to establish a correlation between procedures envisaged and situations considered. For example. These headings. They are: • The initial study may be carried out after the conceptual design stage. Operator tasks in both Control Room and Field are subdivided under three main headings. defined as key tasks.: QSP-FE-03-22 August 2001 Page 38 . Each question is intended. The team should consider decisions Operators make in carrying out every step of their responsibilities. Questions can also provide a framework for analysis of incidents in which human error is involved. a specific operating procedure may need to be adopted or it may be necessary to incur additional expenditure on plant design modifications. When the answer is 'it depends'. Like in SAFAN and SYSOP to assist the study team in its assessment.4 RECOMMENDATIONS When the answer to the question is 'Yes' the likelihood of human error will probably be low and changes to the situations to which the questions relate should not be necessary. To minimise risk of error. 'Have the Operators sufficient experience to perform their duties with a minimum risk of error? Suggested Prompt-words are: • • • • • Training. to be answered by a 'Yes' or a 'No' or by a qualified response 'it depends'. In an well-organised working situation the answers should all be 'Yes'. A 'No' answer to the question reveals a potential for Operator error. Authority. The study continues until the team is satisfied that all relevant Operator tasks have been assessed and results recorded. Doc. These are used to pose key questions. his equipment and instructions to give optimum performance with a minimum of error. 6. Flowchart FIGURE 6-1 illustrates the study sequence for Operator Task Analysis. the information they need to identify and carry out their task. have foreknowledge of required actions. equipment and procedures. are recorded on 'OPTAN' Worksheets.SAFOP Guidelines 6. Ref.: QSP-FE-03-22 August 2001 Page 39 . merit further attention. However. Information. then a Judgement must be made of whether circumstances in which a problem arises.3 STUDY PROCEDURE This part of the study analyses an Operator's anticipated response to his task by assessing the ability of that Operator. after consideration. a list of Prompt-words has been prepared. together with results obtained and recommended actions. and must know what results to expect from any actions taken. These questions are applied in turn to specific Operator duties relating to various items of plant. Questions applied and operator duties assessed. and the relative frequency and level of demand on each of these responsibilities. Operators must understand what is happening. Understanding. Instructions. such expenditure should be carefully evaluated against consequences. 1 Control Room Operator Task Analysis Selected Main Duty Selected Key Task Plant Identified Key Question Applied Abnormal and emergency conditions. Make decisions. OPTAN Checksheet/Worksheet Answer Obtained Action Recommended Record Results - 6.: QSP-FE-03-22 August 2001 Page 40 .. Take action. Major items of plant and equipment. generator Training Understanding Authority Instructions Information Doc.2 Field Operator Task Analysis Selected Main Duty Selected Key Task Plant Identified Key Question Applied System switching. Review Electrical Operational Safety Procedures and Electrical Safety Rules.g.5. Transformer Tap positions. Check security of supply criteria. Review limits of Authority and Responsibility.5 EXAMPLES 6. Has he the UNDERSTANDING and TRAINING to check all relevant plant conditions on site before initiating switching programs. Review Training. Plant loading.5.SAFOP Guidelines 6. Ref. etc? No. Has he the AUTHORITY to switch out or attempt to return to service this item of plant? No. OPTAN Checksheet/Worksheet Answer Obtained Action Recommended Record Results - OPTAN CHECKSHEET Promptwords Plant Equipment Motors Transformer UPS Procedures Thyristor Switching Controls Isolating Authori sation ESR ESR ESR ESR Monitor Generators Emerg. e. Fault on 33 kV overhead line. Define limits of Authority and Responsibility. REPEAT STEPS 3 TO 10 FOR ALL KEY TASKS 12.OPTAN STUDY SEQUENCE Doc. RECOMMEND ACTIONS 8. SELECT KEY TASK 4. REPEAT STEPS 5 TO 8 FOR ALL KEY QUESTIONS 10.: QSP-FE-03-22 August 2001 Page 41 . OBTAIN ANSWER YES/NO/IT DEPENDS 7. SELECT MAIN DUTY 3. APPLY KEY QUESTION 6. IDENTY PLANT / EQUIPMENT PROCEDURES 5. REPEAT STEPS 4 TO 9 FOR ALL ITEMS/ PLANT/ EQUIPMENT/ PROCEDURES 11. SELECT OPERATOR CONTROL ROOM/ FIELD 2. REPEAT STEPS 2 TO 11 FOR ALL MAIN DUTIES FINISH Figure 6-1 . Ref.SAFOP Guidelines START 1. RECORD 9. of ……….SAFOP Guidelines OPERATOR TASK ANALYSIS (OPTAN) WORKSHEET Project : Location : Drawings : Operator Key Task : CONTROL ROOM/ FIELD Plant/ Item Stage of Study (INITIAL/FINAL) : Sheet ……. Operator Duty: NORMAL DUTIES/ SYSTEM SWITCHING/ EMERGENCY OPERATION Knowledge/ Resource YES/ NO Recommendation Action Doc.: QSP-FE-03-22 August 2001 Page 42 .. Ref. . diagrams.4). It should be noted that some technical knowledge and ability to accurately record team decisions is desirable for this role. • • • STUDY EXECUTION • • The SAFOP Guide (Subsection 3. Flip charts and an overhead projector will be useful. a separate briefing by the Team Leader or Team Secretary before attending his first meeting. drawings.3. particularly because of his seniority. design philosophy data. both at the team meetings and afterwards.3. diagrams. A suitable room for team meetings should be arranged that meet the suggested requirements. etc. (SAFOP 3. have the facility of ready access to a word processor unit so that the amendments agreed could be available for the next team meeting and the SAFOP Data File updated. should then be made to all new members of the SAFOP team. This can be avoided by giving the new team entrant a copy of the SAFOP Guide and. • • • • TEAM'S INTRODUCTION TO SAFOP • • • • A copy of the SAFOP Guide should be supplied to all members of the SAFOP study team well before the initial meeting. At this first meeting it should be agreed which documents. And. drawings. The Team Leader must ensure that all members of the team are given an equal opportunity to contribute at team meetings and that one member does not dominate the discussions. and may ask questions to clarify their responsibilities.: QSP-FE-03-22 August 2001 Page 44 .g. this should be agreed before the Team's first meeting. It will be necessary to establish with the various SPDC departments involved who will act as their representatives at both Initial and Final phase studies. if possible.. (SAFOP Subsection 3. having been chosen as Team Leader for a SAFOP study.4. will be circulated to individual members so that they will he able to more easily answer queries on their particular subject or specialisation. It should be remembered that it is most frustrating for team members to sit through a Team Leader's explanation of a SAFOP study each time a new member Joins a working meeting. blank Worksheets should be available for members. possibly on Flip charts or overhead projector slides. preferably by the Team Leader. depending on the style of presentations decided upon.3). It is important to agree with the Project Engineer the date when design philosophy data. Ref.3) throughout the studies. to record the team's recommendations on the study worksheets.. The Team Leader should explain that there would always be some necessary overlap or cross checking of particular aspects of the projects under discussion at the different types of studies.1) suggests a preferred method of working through the individual studies and the amount of time that should be allotted for team meetings. will be available for either the Initial or Final phase study meetings. The scene for the studies should be set so those individual members understand their respective roles.. etc.SAFOP Guidelines APPENDIX 1 – NOTES OF GUIDANCE FOR SAFOP TEAM LEADERS GENERAL • It is essential.4. A presentation. ideally. e. If one of these representatives can act as Team Secretary (SAFOP Subsection 3. FOLLOW-UP • Doc. that the SAFOP Guide is read in its entirety so that its objectives and the different type of studies that are necessary to achieve them are understood for both Initial and Final phases. A plentiful supply of individual study. The Team Secretary must be allowed time. When such queries have been aired the discussions should be curtailed and the query directed to the individual study team that is dealing with the particular subject. : QSP-FE-03-22 August 2001 Page 45 . Ref.SAFOP GUIDELINES • The Team Leader should identify at team meeting which member or department is required to take action on a particular issue. Doc. if necessary attached action list. the Team Leader should be satisfied that after both Initial and Final phase studies are complete that the Team Secretary has produced a comprehensive SAFOP Data File which can have an agreed circulation and. and should ensure that he is given the authority to expect a satisfactory answer at subsequent meetings. • Finally. 3).3. FOLLOW-UP Produce final agreed Worksheets and place in SAFOP Data File. etc. • Only when an action is required of someone is an entry made on the individual study worksheet. Doc.g. • Try to assist the Team Leader in curtailing discussions on specific aspects of the projects at individual studies that should be taking place under a different individual study. and their availability. Ref. e. opportunity should be sought to properly record it at that time. • Date of first meeting for all team members and circulation of date and details. • Booking of 'Conference Room' for meeting. overhead projectors. are availability for presentation at first meeting.4. • Data. (SAFOP Subsection 3. of all documents tabled and there revision numbers on the worksheets. predicted action by a Control Room Operator in a SYSOP team meeting when it is better aired in an OPTAN team meeting). In particular.. • An early meeting with the Team Leader is desirable before the first team meeting so that the following items can be discussed and an action plan agreed • Establish the representatives who will attend team meetings. • Presentation at first meeting – who does what? STUDY EXECUTION • The Team Secretary must record the drawing numbers. • The location. Recommend: The team is agreed and feels strongly that a certain modification or change to the proposed design or policy should be made. that the SAFOP Guide is read in its entirety so that its objectives and the different type of studies that are necessary to achieve them are understood for both Initial and Final phase studies.: QSP-FE-03-22 August 2001 Page 46 . • The words used in 'Recommended Action' or ’Recommendation column' of Check/Worksheet are important and should be agreed by the team at the presentation meeting.4). • The Team Secretary should be firm in establishing the 'Recommended Action' or Recommendation' that the Team Leader has agreed will be recorded on the Worksheets. Consider: The team feels that certain actions or policies should be adopted if the economics allow.. a particular substation or section of overhead line examined. • Copies of blank worksheets for individual members. As a suggestion. must be identified on the worksheets.e. • The Team Secretary should try to encourage the Team Leader to keep team meetings to the fivehour maximum suggested in this Guide (SAFOP Subsection 3. • Copies of SAFOP Guide to be obtained and distributed to members of team.2). • Flip charts. (SAFOP Subsection 3. • Access to word processor unit for typing. (I. drawings and diagrams to be made available by Project Engineer at Initial or final phase study meetings.4. correcting and copying of worksheets. • • Circulate SYSOP Data File (either Initial or Final) to an agreed distribution. if the Team Secretary has taken part in discussion on specific issues.SAFOP Guidelines APPENDIX 2 – NOTES OF GUIDANCE FOR SAFOP TEAM SECRETARIES GENERAL • It is essential that having been chosen as Team Secretary for a SAFOP Study. for instance these could be :Review: The team is unhappy regarding a certain aspect and wants clarification or suggests a 're-think' by department responsible. • • Make Decisions. Monitor or Check Displays Are all displays including VDUs and Mimic Diagrams easily readable with clear identifiable information? Is all relevant information supplied? Is redundant information kept to a minimum? Is there an Alarm List available on VDUs? Is there a 'Banner' area for incoming alarms? Is confusing paging of VDU displays avoided? Are Audio Indicators for various functions easily distinguishable? Are there sufficient VDUs so that all information required at a given time can be displayed simultaneously? Is the operator able to initiate routine logging of specific items of plant in terms of measured values at regular intervals? Is it possible to easily set and alter High and Low Limit Alarms on measured values? Is it possible for an operator to easily adjust setting factor and dead band area on measured values? Is any change of state taking place on the power network displayed regardless of whether relevant substation or plant has been switched to ‘Local’? -cont..Are colour codes and any other such conventions used in displays readily obvious in meaning and easy to learn? Doc. • Take Actions. In the following questions. the word 'Display' refers to all methods of giving information to the operator.g. These are: • Normal Operator Duties (Monitor or Check). Abnormal or Emergency Conditions (e. Ref. which are considered to be the Control Room Operator's Main Tasks.: QSP-FE-03-22 August 2001 Page 47 . the word 'Control' applies to all means by which the operator gives instructions. Loss of Supply.SAFOP GUIDELINES APPENDIX 3 – CONTROL ROOM OPERATOR'S MAIN TASKS QUESTIONNAIRE GENERAL The following questionnaire has been prepared under three pleadings.. CONTROL OPERATOR QUESTIONNAIRE Normal Operator Duties Under normal duties the operator will: Monitor or Check Displays. • Commissioning and System Outages). Plant Remote Operation).g. Plant Failure. • System Switching (e. Can a page of VDU information is easily transferred to hard copy printout on a logging printer (regardless of colour)? Does acceptance of incoming alarm information NOT remove such information from display? Is there adequate monitoring of the SCADA system itself? (Monitoring of SCADA system – indications of on-line computer. Administrative Staff. Senior Authorised Electrical Persons? Is information. etc.e. (Electrical Permits to Work. Field Staff.Are there formal procedures set out such as preparation of switching programs and agreement with field staff over these schedules prior to implementation? Will the safety aspects of system switching be included within the operator's responsibilities such that he formally enters and logs details of documents. -cont. and Regular transmissions over standby routing to substations) i. System Switching All previous questions under Normal Operations are relevant and applicable in the case of system switching. plus the following.: QSP-FE-03-22 August 2001 Page 48 .. Healthy UPS system. Ref. Hot standby/off-line computer. derived from the plant component itself as far as possible? Take Actions Is there adequate 'Tell Back' responses to actions performed. upon which decisions are based concerning plant. is a Watchdog panel provided? Make Decisions Based on information received from the overall monitoring of a system. can operators make decisions related to? • • • • • Changing Transformer Tap Positions? Opening and Closing Circuit Breakers? Generator Output? Overload Conditions on Transformers and OHL Voltage Levels? Can the operator be assisted at arriving at these decisions by having rapid and secure access to communication with Generator Operators. and are these easily understood even by personnel unfamiliar with the system.) application of Circuit Main Earth and implementation of ESR requirements? Doc.SAFOP Guidelines Are colour guns on the VDUs permanently monitored? Can operators initiate regular checks of the SCADA system by routine operation of a dummy circuit breaker at each substation? (Also possibly dummy analogues). such as: • Transformer Tap Changing? • Circuit Breaker Operation? • Reset of Trip Relays? Start and Stop Transformer Cooling Fans? • Can any incorrect selection be easily cancelled prior to final actuate signals being sent? Are there full and adequate procedures laid down. particularly on logging printers.e. sufficiently discriminatory to provide adequate facilities for post fault analysis of power system failures? Can emergency procedures be implemented whether or not an operator knows what is wrong. both as part of this project and in the future. be carried out effectively to plant simulators. say with a single dedicated key action? Is minimal information put into the banner area and full description given in the alarm list AND on the substation display? Does the operator have precise instructions as to his actions on receipt of foreseeable emergency situations arising? Is there adequate emergency lighting available to ensure an operator can still perform his duties at times of loss of main lighting? Is the time-tagging aspect.SAFOP GUIDELINES Abnormal or Emergency Conditions All items discussed under Normal Operation and System Switching are relevant and applicable in the case of Abnormal or Emergency Conditions plus the following: Is full cognisance taken of the need to ensure stress is avoided with the presentation of major emergency alarms (for instance.: QSP-FE-03-22 August 2001 Page 49 . subdued chimes rather than strident bells are favoured as audio indicators)? Are certain Alarms assigned priorities over others? Is Acceptance of incoming alarms achieved easily. Ref.. i. can they be 'symptom' based rather 'than event based? Can commissioning of plant on to the SCADA System. and such commissioning not disrupt the power equipment in any way? Doc. Has the operator performing inspection been made familiar with the plant when it was installed? Has the operator been given a checklist on specific items to be inspected? Has the operator been given instructions on what fault or defect to report immediately? Has the operator been instructed not to leave the ground in substation compounds containing exposed high voltage conductors? Has the operator been instructed not to pursue investigations into 'noises' from ’live gear' without first reporting to the Control Person and agreeing a prudent form of action? Is the operator familiar with the relevant details of the type of construction of the overhead line being inspected? Does the operator have knowledge of interlocks on operating devices of various plants? Does the operator know the significance of local and remote alarms or indications that may occur when he is operating? Does the operator know the significance of transformer tap positions.: QSP-FE-03-22 August 2001 Page 50 . Commissioning and Maintaining Plant. a list of questions is detailed below.Is the substation to be commissioned and then taken under the scope of the ESR? Doc. FIELD OPERATOR QUESTIONNAIRE Normal Operator Duties Under normal operator duties he will: • Perform inspection of substations and overhead lines. -cont. : : : Inspecting substation plant and overhead lines.SAFOP Guidelines APPENDIX 4 – FIELD OPERATOR'S MAIN TASKS QUESTIONNAIRE GENERAL A Field Operator's tasks can be considered under three main headings. Operating Plant on site. Post Fault Reporting and To determine if plant can be easily inspected and operated. and supporting documentation is adequate. • Take immediate action on potentially serious plant conditions. These are: Normal Operator Duties System Switching Abnormal or Emergency Investigations. tap change control modes and circuit loading prior to initiating switching programs? Abnormal or Emergency Conditions Under these headings the operator may be commissioning plant and auxiliaries or dealing with postfault investigations. • Report Main Plant or Auxiliaries requiring attention. Ref. locking-off and earthing both circuit and busbars? • Operation and control of transformer tap changers? • Application of Circuit Main Earths to 132 kV and 33 kV coppers? • Operation of Tap Change Controls? • Operation of Low Voltage Switchboards? Has the operator been trained in the use of correct voltage detectors before applying CME’s to? • Exposed coppers? • Switchgear spouts? Doc. etc.: QSP-FE-03-22 August 2001 Page 51 . etc. and equipment. (temporary barriers in compounds)? Is the operator aware that when performing battery inspections.? Has the operator been told not to climb any structure without safety documentation? Has the operator training. e.g. understanding and instructions to carry out minor tasks on plant. Ref. chains. e.: A tap changer stuck between taps? • A circuit breaker locked out? • Relay flag operations? • Low battery volts? • Low oil levels? • • Buchholz gas alarms. ropes. has the operator been made familiar and received training on: • Operation of 132 kV Disconnector? • Operation of 132 kV Earth Switches? • Operation of 132 kV Circuit Breakers (Local)? • Operation of 33 kV Circuit Breakers (Local) including isolating.SAFOP GUIDELINES Will the substation be subject to the ESR when the last connection is to be made to conductors that can be made alive from the system? Will a Senior Authorised Electrical Person (SAEP) become involved in the protection and voltage pressure testing before the substation is connected to the system? Will SPDC provide technical staff to monitor turnkey contractors' staff when substation is partially commissioned? Has the operator the training and understanding to identify abnormal plant conditions and emergency situations.g. smoking and the presence of naked flames are prohibited in battery rooms or in the vicinity of battery installations? System Switching (Operating Plant) When performing switching operations.: Reset relay flags and indicators? • Test cooling fans? • Reset maximum reading instruments? • Change silica gel breathers? • Have the operator instructions to inspect and check: • Portable earths? • Posts. Send the form to the Document custodian (Corporate Discipline Head Electrical). Standard Details Number: Page number: Title Issue Date: Heading Number: Figure Number: Comments: Suggestions: User’s personal details Name: Ref.: QSP-FE-03-22 August 2001 Page 52 . This lets the custodian ask you about your comments and tell you about the decision. revise at next issue: Accept. The form has spaces for your personal details. ambiguous or could be better in a standard. Ind: Date: Originator Advised: Date: Sign: Advised: Date: Sign: Doc. write your comments and suggestions on this form. issue temporary amendment Comments: Sign: Ref.SAFOP Guidelines 7. Ind: Signature: Date: Phone: Custodian Actions Recd Decision: Date: Reject: Accept. Ref. ENGINEERING STANDARD USER-COMMENT FORM Engineering Standard User-Comment Form If you find something that is incorrect.
Report "Safety and Operability (SAFOP) Study Manual"