How to conduct safety drills for offshore platforms?

At-a-Glance: Practical framework to plan, execute, and verify offshore safety drills that prove emergency readiness without creating new risk or undue production impact. Focus is on mustering, ESD, fire/gas, evacuation, and response team performance.

I. Objective Definition and Key KPIs

• I.1 Objective: Validate crew readiness, systems integrity, and decision-making under simulated emergencies (fire, gas, H2S, loss of containment, man-overboard, helideck incident, abandon) while maintaining HSE control and asset integrity.
• I.2 Success Criteria: Demonstrated safe, timely muster and response; critical equipment functions on demand; accurate accountability; well-coordinated communications and command.
• I.3 Primary KPIs:
  • 1.1 Total muster time, T_must (min)
  • 1.2 Accountability within target, Acc%(=X min)
  • 1.3 ESD actuation response time (s) and logic correctness
  • 1.4 Firewater start time (s), header pressure (bar), flow (m³/h)
  • 1.5 Gas/H2S detection alarm latency (s) and coverage (%)
  • 1.6 PA/GA availability (%) and intelligibility (STI or equivalent)
  • 1.7 TEMPSC readiness (engine start success, lowering/embark times)
  • 1.8 Communication checks pass rate (%) across UHF/PA/GA/satcom
  • 1.9 Drill participation rate (%) and competency compliance (%)
  • 1.10 Incidents/near misses during drill (count)
  • 1.11 Production impact (boe deferred) and emissions from flaring (t CO2e)

II. Critical Parameters and Target Ranges

II.A Key Drill Performance Calculations

• 2.1 Muster time:

  \( T_{\text{must}} = t_{\text{last accounted}} - t_{\text{alarm}} \)

• 2.2 Accountability within target:

  \( \text{Acc\%}(\leq T) = \dfrac{N_{\text{accounted}}(t \leq T)}{\text{POB}} \times 100\% \)

• 2.3 Egress time estimate by path segment:

  \( T_{\text{egress}} = \sum_i \dfrac{L_i}{v_i} + \sum_j \tau_j \)

  Where \(L_i\) = path length segment, \(v_i\) = effective speed (crowd-adjusted), \(\tau_j\) = door/stair dwell times.

• 2.4 Firewater demand and hydraulics:

  \( Q_{\text{total}} = \sum Q_{\text{mon}} + \sum Q_{\text{hose}} \)

  Hazen–Williams (metric): \( \Delta P = 4.52 \dfrac{L\,Q^{1.85}}{C^{1.85} d^{4.87}} \)

• 2.5 Foam application:

  \( \dot{V}_{\text{foam soln}} = A \times r \)

  Where \(A\) = hazard area, \(r\) = application density (L/min/m²) by hazard class.

• 2.6 System availability:

  \( \text{Availability} = \dfrac{\text{Uptime}}{\text{Total Time}} \times 100\% \)

III. Step-by-Step Procedure / Workflow / Checklist

III.A Planning and Controls (Pre-Drill)

• 3.1 Define scope and scenario
  • 3.1.1 Select drill type: GAM/muster, fire, gas/H2S, ESD logic, MOB, helideck incident, TEMPSC/abandon, spill, medevac.
  • 3.1.2 Set measurable objectives: T_must = 10 min, diesel fire pump start = 45 s, Acc%(=5 min) = 90%, etc.
  • 3.1.3 Establish boundaries: “simulate not stimulate” for process trips where risk is high; use bypasses under MOC.
• 3.2 Approvals and notifications
  • 3.2.1 OIM approval; notify onshore emergency support, marine/aviation coordination, and regulators if required.
  • 3.2.2 Issue Drill Permit and JSA; define SIMOPS constraints (lifting/hot work paused, PTW review).
• 3.3 Readiness checks
  • 3.3.1 Weather/sea state window suitable for deck activities and lifeboat lowering (if planned).
  • 3.3.2 Medical coverage on standby; rescue boat ready if MOB scenario.
  • 3.3.3 Validate PA/GA, radios, timekeeping, RFID/QR muster devices, and accountability boards.
  • 3.3.4 System line-ups: fire pumps in auto, foam tank levels, hydrants/nozzles inspected, ESD key-switch positions verified.
  • 3.3.5 Place trained observers/data loggers with stop authority at high-risk points (stairs, helideck, lifeboats).
• 3.4 Briefing
  • 3.4.1 Pre-drill toolbox talk: scenario, signals, safe actions, muster locations, no-go areas, and accountability method.
  • 3.4.2 Confirm team roles: OIM (gold command), CRO, Fire Team Lead, Muster Checkers, First Aiders, HLO, Lifeboat Coxswains.
  • 3.4.3 Clarify “injects” to test decision-making (blocked stair, injured person, comms failure) without increasing risk.

III.B Execution Runbooks (During Drill)

• 3.5 General Alarm & Muster (GAM)
  • 3.5.1 CRO initiates GA and event logging; PA/GA message gives clear instruction to muster.
  • 3.5.2 Personnel stop work, make worksite safe, proceed via primary/secondary routes to muster points.
  • 3.5.3 Muster Checkers record arrivals via RFID/QR/manual; report rolling counts to Control Room each minute.
  • 3.5.4 OIM confirms POB vs accounted; triggers search teams for any missing after 5–7 min.
  • 3.5.5 Verify TR sealing/pressurization if simulated gas hazard; confirm HVAC actions.
• 3.6 Fire Scenario (e.g., module pump fire)
  • 3.6.1 CRO simulates detector trip or uses test key; verify FACP annunciations and ESD as per cause/effect.
  • 3.6.2 Firewater auto-start; measure start time, header pressure/flow; foam proportioner test on return loop if available.
  • 3.6.3 Fire Team don PPE/SCBA, pull hose to designated hydrant; dry-nozzle pattern checks; no live agent discharge unless planned.
  • 3.6.4 Boundary cooling and equipment isolation simulated; confirm comms with OIM and permit suspension.
  • 3.6.5 Critique nozzle handling, span-of-control, and line management; record timings.
• 3.7 Gas/H2S Scenario
  • 3.7.1 Trigger gas detection; verify alarms (L1/L2), HVAC shutdown, dampers, TR positive pressure.
  • 3.7.2 Personnel don escape sets if H2S; non-essential personnel to TR; essential crew maintain critical functions.
  • 3.7.3 Confirm ESD level logic (process depressurization simulation if risk-assessed).
• 3.8 Abandon Platform / TEMPSC
  • 3.8.1 OIM orders “prepare to abandon”; coxswains start TEMPSC engines, unlatch gripes, lower to embarkation deck.
  • 3.8.2 Controlled embark drill: headcount per boat, seatbelts, comms check; no water launch unless authorized and conditions suitable.
  • 3.8.3 Time engine start, embark, and ready-to-launch milestones; verify survival equipment inventory.
• 3.9 Man Overboard (MOB) and Helideck Incident (optional rotations)
  • 3.9.1 MOB: throw line, spotter assignment, FRC readiness; simulate recovery and first aid.
  • 3.9.2 Helideck: HLO-led response, foam line-out, casualty handling, rotor brake hazards reinforcement.

III.C Recovery and Learning (Post-Drill)

• 3.10 Stand-down and system reset
  • 3.10.1 Confirm all personnel accounted; announce all-clear; reset overrides with two-person verification.
  • 3.10.2 Reinstate PTW/SIMOPS; equipment walkdown to confirm normal status.
• 3.11 Debrief and documentation
  • 3.11.1 Hot debrief by teams; collect timings, comms logs, observer notes, photos.
  • 3.11.2 Record KPIs; issue actions with owners/due dates; update training matrix and competency records.
  • 3.11.3 Share findings to fleet/onshore to propagate learnings.

IV. Risk & Mitigation (HSE, Reliability, Redundancy)

• IV.1 Personnel injury during drills
  • 4.1.1 Mitigation: JSA, controlled pace on stairs, spotters at pinch points, no running; limit muster density per area.
• IV.2 Inadvertent trips or isolation
  • 4.2.1 Mitigation: Use simulator modes/test keys; documented bypasses under MOC; independent verifier in control room.
• IV.3 Firewater equipment damage
  • 4.3.1 Mitigation: Open hydrants slowly; pressure relief line to test header; verify hose condition before pressurization.
• IV.4 Lifeboat hazards
  • 4.4.1 Mitigation: Prefer dry drills; wet launch only with favorable conditions and certified coxswain; tag lines and fall prevention in place.
• IV.5 Production/emissions impact
  • 4.5.1 Mitigation: Simulate depressurization; schedule during low-rate windows; flare minimization plan.
• IV.6 Communication failure
  • 4.6.1 Mitigation: Backup channels (secondary PA/GA amps, handhelds), radio checks pre-drill, satcom redundancy.
• IV.7 SIMOPS conflicts
  • 4.7.1 Mitigation: Freeze high-risk work; coordinate with marine/aviation; clear permit register before alarm.
• IV.8 Environmental exposure
  • 4.8.1 Mitigation: Heat/cold stress controls, hydration, rotation of teams, max drill duration limits.

V. Optimization Levers (Analytics, Maintenance, Debottlenecking)

• V.1 Data-driven improvements
  • 5.1.1 Use RFID/QR for real-time accountability curves and bottleneck identification along routes.
  • 5.1.2 Time-synchronize CCTV and control room historian to map event sequences and human-system interactions.
  • 5.1.3 Build a “Drill Readiness Index” combining KPIs to track trend and set targets per crew/shift.
• V.2 Debottleneck egress and muster
  • 5.2.1 Rebalance muster assignments; add signage/lighting; widen or re-route around pinch points where feasible.
  • 5.2.2 Stage escape sets and radios at critical nodes; implement one-way stairwell flow during drills.
• V.3 Reliability of critical systems
  • 5.3.1 CMMS-driven PM: weekly diesel fire pump auto-start test; monthly full-flow; quarterly foam proportioner test.
  • 5.3.2 Proof-test ESD valves per SIF SIL intervals; verify partial-stroke test analytics and stroke times.
  • 5.3.3 PA/GA failover tests; record amp health, battery autonomy, STI intelligibility sampling.
• V.4 Training and human factors
  • 5.4.1 Rotate scenarios, include night/low-visibility; vary injects to prevent rote response.
  • 5.4.2 Short micro-drills (radio checks, door drills) between major drills to sustain competency.
  • 5.4.3 Simplify procedures, pocket cards, and laminated cause/effect maps at control room and muster points.
• V.5 Digital simulation
  • 5.5.1 Evacuation models to test route capacity and TR endurance; iterate signage/assignments before physical drills.

VI. Verification & Monitoring Plan (What to Measure, How Often)

VI.A Drill Cadence

VI.B Data Capture & Review

• 6.1 Measurements per drill
  • 6.1.1 Timestamps: alarm, 50%/90%/100% accounted, fire pump start/pressure = setpoint, ESD actions, TR pressurization.
  • 6.1.2 Counts: POB, missing at 5/8/10 min, radio check failures, equipment failures, near misses.
  • 6.1.3 System metrics: header pressure/flow, foam %, detector alarm times, valve stroke durations.
• 6.2 Analysis and feedback loop
  • 6.2.1 Plot accountability curves; identify late-arrival patterns by workgroup/location.
  • 6.2.2 Compare to targets; compute Availability and Acc% using formulas in Section II.A.
  • 6.2.3 Issue corrective actions; verify closure and re-test on next drill.
• 6.3 Reporting
  • 6.3.1 Monthly dashboard to OIM and onshore; quarterly management review; retain evidence for audits.