Self-Verification Handbook A4 - May14 V10a - LowRes

For internal use only
GOO
Self-Verification Handbook
Copyright 2014. BP International Ltd. All rights reserved.
BP Guide 100161
Issue 1, May 2014
2014 BP International Ltd.

These materials were prepared by BP International Limited, and its affiliates. BP International Limited, its affiliates and employees
do not:
A. Make any warranty or representation, expressed or implied with respect to the accuracy, completeness or usefulness of the
information contained in these materials, or that the use of any information, apparatus, method or process disclosed in these
materials may not infringe on third-party rights, or
B. Assume any liability with respect to the use of, or for any and all damages resulting from the use of, any information,
apparatus, method or process in these materials.
For internal use only. 2014 BP International Ltd.
Global Operations Organization Self-Verification Handbook
Global Operations Organization
OMS Focus
Areas
2.3 Operating Discipline
Shift Handovers
Locked Valves
Operational Risk Assessments
Overrides
page 5
15
21
4.1 Procedures and practices
Procedures Operations & Maintenance Procedures
27
4.5 Control of Work
Lifting Operations
Permits
Isolations
33
39
47

1
Introduction
Site Managers and Operations Leaders
I believe that the safety performance of our operations is
a true reflection of our leadership.
What we place emphasis on and the personal ownership
we demonstrate, impacts how our teams respond and
operate.
Thats why setting expectations and demonstrating a
personal commitment to conforming to OMS is one of
the key aspects of leadership in a high hazard operating
environment.
This includes demonstrating the right behaviours and
asking the right questions to drive safe, compliant and
reliable operations.
It also includes a continuous effort to self-verify the health
of our operations at our sites and whether the work we
carry out is done in conformance with applicable BP
requirements; this is a requirement of OMS 8.2
Assessment and Audit.
Fawaz (Fuzzy) Bitar

Head of Operations
To further drive rigor and discipline into our

operations, we are requesting Site
Managers to:
Use this handbook to support a
standardised, systematic approach to selfverification in eight key areas of our
operations.
Set clear and consistent expectations
around operational performance.
Commit to personally taking action to
drive improved operational conformance
to OMS 8.2 Assessment and Audit.
Systematically record your findings and
agreements and discuss these with your
teams to understand how we can
improve.
Demonstrate personal commitment to
acting on areas identified for
improvement.
This Global Operations Organization (GOO)

Self-Verification handbook is intended to
assist Site Managers in preparing and
carrying out self-verification in these eight
key areas to underpin safe, compliant and
reliable operations. It has been designed to
help you focus on a few key principles
through tailored question sets and the
expected information to demonstrate
conformance to each line of enquiry. The
handbook applies to all of our GOO onshore
and offshore operated assets. Please note,
to maintain consistency it also aligns to the
Leadership Structured Field Assessment
handbook.
Please actively use the handbook at your
site. Thank you for your commitment to selfverification, and for your continued efforts in
delivering safe, compliant and reliable
operations.
Fuzzy Bitar

2
Strategy
This handbook is designed to assist Site Managers in selfverification of the operation of our facilities. Selfverification is carried out by the Line as part of
conformance with OMS 8.2.
Self-verification forms the first of BPs three lines of
defence, together with Deployed Assurance (second line)
and Audit (third line). Guidance on a simple selfverification process that can be used consistently across
operations is given on page 4 of this handbook.
This handbook is focused on eight key areas that have
been identified, where a failure in a barrier is considered
to have most potential impact in failing to prevent an
incident.
Eight protocols, set out in this handbook have been
developed and GOO operated sites shall use the attached
protocols when conducting self-verification in the
following eight areas.
1. Shift Handovers
5. Procedures
2. Locked Valves
6. Lifting
3. Operational Risk Assessments
7. Permits
4. Overrides
8. Isolations
As a Site Manager self-verification is your opportunity to:

Demonstrate leadership commitment to safe, compliant and reliable operations.
Drive conformance to the standards and requirements in our operations.
Provide rigor and discipline as well as challenge complacency.
Self-assess our operating discipline and operating culture.
Foster continuous improvement in the way we operate.
Self-verification challenges us to demonstrate, in the field and in our control rooms, that we
are conforming to our standards and requirements.
As a Site Manager, you have a key role to play in communicating BPs core values, and
reinforcing BP standards and requirements.
Fuzzy Bitar

3
Process
Self-verification process
Guidance regarding the process for conducting selfverification inspections, including who conducts these is set
out below. Frequency and participants are for the Region to
determine.
The following guidance is intended to assist Regions in their
self-verification:
Site managers (as well as participating in this

self-verification process themselves), also
appoint additional personnel to undertake
these reviews from Team Leader, Supervisor
and Technician populations.
Site Managers also define a set frequency for
conducting the self-verification checks and
define a sample size in each of the eight areas
that is appropriate for the site. Example
calendars can be found in the Appendix.
Those undertaking a self-verification check do
not review samples that include their own
work.
The frequency of each self-verification check is

adjusted where appropriate based on the
activity set for the site and risk profile.
Where self-verification checks identify issues
requiring corrective action, those actions are
recorded together with the relevant
observations.
The performance of the self-verification process
should be a standing agenda item at daily
operations meetings and the monthly leadership
performance meeting. Items for discussion
include:
Performance against schedule.
The observations from each self-verification

check are discussed at one of the daily site
meetings.
Observations and corrective actions.
There is a review with the AOMs and this is

incorporated into one of the existing meetings
in the AOM meeting cadence.
The self-verification process and documentation

will be subject to a performance improvement
cycle (PIC), with the Regions, six months from
implementation.
Close out status of corrective actions.
The frequency of each self-verification check is

scheduled locally to adequately test the
defined monthly sample, while avoiding
overload.

4
OMS Focus Areas
2.3
Operating Discipline
Shift
Handovers

5
2.3 Operating Discipline Shift Handovers 1/3
2.3 Operating Discipline Shift Handovers

Context
Principles
Shift handovers and the communication of operational

status are critical to the safe operations of an asset.
Communications include sharing key safety information
in a manner that enables continuous stable operations
through the shift change over.
1. A written shift handover covers all roles and all major events from the previous shift.
2. The shift handover can be face-to-face at the job site where practical.
3. Safety events, work status, isolation changes, permit status and maintenance status are included in
the shift handover.
4. Operational risk assessments, abnormal situations, and overrides are included in the handover.
No.
Questions / Tasks
Answer
(Y/N/Partly)
Are the requirements for shift handovers documented?

e.g. in approved and up to date procedures.
Areas to test:
Personnel are aware of the documents and can find them.
ii
Are personnel familiar with the content and do they demonstrate

knowledge of requirements applicable to their role in particular?
Areas to test:
Person understands their role in meeting the requirements.
Person can explain the key priorities for the next 24 hours.
iii
Is a written or electronic system in place for recording shift handovers?

Disclaimer: The observations identified during self-verification reflect the high level conclusions made
at the time of the assessment. These conclusions may change upon further review and inquiry.
Observations
Actions

6
Answer
(Y/N/Partly)
No.
Questions / Tasks
iv
Do the records show that team members from the off-going shift are
completing the written or electronic handover properly and the oncoming team members are accepting it?
Areas to test:
The handovers are being physically signed or electronically accepted by
on-coming shift personnel to confirm understanding of facility status.
The records show that all shift members are having a handover from the
equivalent role of the previous shift as well as meeting collectively to review
the facility status.
Any amendments are being signed and dated.
Do the handovers that you have checked cover the minimum

information requirements?
Areas to test:
Check all the minimum information requirements that apply, e.g. safety
events, work status, isolation changes, permit status, maintenance status,
operational risk assessments, abnormal situations, overrides and locked
valves and key business planning
Observations
Actions
Suggested tasks:
Review a sample of handover logs.
Review a sample of the team leaders log books.
Review a sample of the e-Log where used.


7
No.
Questions / Tasks
vi
Are the shift-handovers done with the right personnel in the right
conditions?
Areas to test:
The handovers are occurring face-to-face or by phone where this is not
possible.
The environment is suitable for an effective handover, e.g. there are few
interruptions and easy access to the log books.
Individuals are satisfied with the amount of time allotted to shift handovers.
Test this with more than one person.
The shift supervisor or team leader holds a meeting to jointly agree asset
status and priorities for the shift.
Incoming and outgoing priorities are communicated and recorded.
Answer
(Y/N/Partly)
Observations
Actions
Suggested task:
Sit in on a handover meeting to check the off-going and on-coming teams
are having a structured conversation. Ensure that they are covering all the
relevant points and that these have been discussed and understood.
Area / Shift / Location / Document Reviewed:

Review completed by:
Date:

8
OMS Focus Areas
2.3
Locked Valves
(Managing high/low
pressure interfaces)

9
2.3 Operating Discipline Locked Valves (Managing high/low pressure interfaces) 1/5
2.3 Operating Discipline Locked Valves (Managing high/low pressure interfaces)

Context
Principles
The use of locked valves during normal operation is used to control

critical valve positions for safe operations.
1. A register exists of all locked open-locked closed valves.

2. A program is in place to monitor the status of locked valves.
3. A higher level approval process exists for removing or changing the position of locked valves.
Reference documents
EP SDP 4.5 - 0005
No.
Questions / Tasks
Answer
(Y/N/Partly)
Are the requirements for Locked Valves documented?

Areas to test:
ii

Areas to test:
Individuals understand their role in meeting the requirements.
Individuals understand why locked valves are used, e.g. to control critical
valve positions, high pressure/low pressure interfaces, possible chemical
mixing and reaction or pressure relief valve isolation.
Observations
Actions
Suggested tasks:
Select a sample of technicians to verify that they understand the minimum
requirements for this task.


10
No.
Questions / Tasks
Answer
(Y/N/Partly)
iii
Do the Piping and Instrumentation Diagrams (P&IDs) show the locked

valves?
iv
Is a locked valve register available, accurate, up to date and being used?

Suggested tasks:
Review relevant logs to ensure that regular locked valve confirmation checks
have been signed off at the intervals stated in the documented
requirements.
Select a small sample of out-of-position valves. Confirm that the reference
ICC is still in place or the procedure is still in progress and that the valve
position is correctly recorded in the register and labelled in the field.
Select a small sample of valves from the register and confirm the following
in the field:
Observations
Actions
a)
b)
c)
d)
Each valve is labelled as a locked valve.

The locked valve label is attached to the valve and not the locking device.
Each valves position matches the current position in the register.
The tag number in the field matches the tag number on the register and on
the P&ID.
e) The air or hydraulic supply is locked in the desired position.
f) The key numbers in the field match the numbers on the register.
For the sample selected in question iv, is all the required information
recorded in line with requirements, e.g. tag numbers, signatures, dates,
correct level of approvals and key numbers?
Suggested task:
Confirm that all out-of-position valves in the sample taken reference an ICC
or procedure


11
No.
Questions / Tasks
vi
Are the associated Management of Change (MoCs) and risk

assessments, operating procedures or ICCs available for changes in
locked valve positions?
Areas to test:
Individuals know that removing locks on locked open or locked closed valves
need to be controlled. These valves are operated only in exceptional
circumstances, e.g. at start-up and shut-down for maintenance.
Individuals are also aware that moving these valves should be controlled by
operating procedures, ICC or temporary MoCs and they are required to be
returned to normal operating status as soon as possible and then monitored
to be in place.
An MoC and risk assessment, ICC or approved procedure was completed
for changing a locked valve position. Check that the appropriate person or
people approved and authorised it before the change was implemented.
Answer
(Y/N/Partly)
Observations
Actions
Suggested task:
Select a locked valve where the desired position was changed recently,
either temporarily or permanently. Review the associated risk assessment
for this change. You may find this in the MoC, ICC or approved procedure.
vii
Do the locking mechanisms meet the documented requirements?

Areas to test:
Acceptable forms of locking mechanisms are in place e.g. chain and
padlocks, wire locking loops that require considerable effort to force the
valve from the locked position. Valves are fitted with locking bar or tab to
allow for fitting of a suitable lock if required. Cable ties are not allowed.
Suggested task:
Select a locked valve where the desired position was changed recently,
either temporarily or permanently. Review the locking device in the field.


12
No.
Questions / Tasks
viii
Are the keys for the locked valves managed in a controlled way?
Areas to test:
A key management process is in place.
Keys are managed in a controlled way, that is, they are stored where
indicated and labelled.
Access to keys is controlled in line with requirements, e.g. only certain roles
have access to the keys.
Answer
(Y/N/Partly)
Observations
Actions
Suggested tasks:
Verify with a sample of technicians that they fully understand the process
for managing keys.
Check the physical location where the keys are stored. Verify that it is
secure and managed in line with the requirements.
ix
Are personnel aware of what is required to operate a locked valve?

Areas to test:
Personnel know about the potential impact on connecting systems if a
locked valve position is changed, e.g. on high/low pressure interfaces or if
the locked valve protects more than one system.
Personnel are aware of who is required to approve or authorise the change
in a locked valve position. Examples include needing an MoC to
permanently change a locked valve position or changing the locked valve
position for a long time if the system is out of service.
Personnel are aware when they need higher levels of approval, e.g. they
require a process engineer to review a change in the position of a locked
valve.
Suggested tasks:


13
No.
Questions / Tasks
Are changes to locked valves being appropriately communicated?

Areas to test:
Off-going and on-coming shift teams discuss any changes to locked valve
positions at the shift handover.
Shift handover documentation refers to changes in locked valve positions
Site leadership is tracking locked valves, e.g. the KPIs include the number of
non-conformant locked valves found as a percentage of the valves audited.
Answer
(Y/N/Partly)
Observations
Actions
Suggested tasks:
Select a sample of personnel to verify that they understand the
communication requirements for locked valves.
xi
Is the locked valve status monitored in the field?

Areas to test:
A schedule for structured operator rounds is in place.
The schedule is being followed, e.g. signatures are in place to show that
operators have checked all locked valves.

Date:

14
OMS Focus Areas
2.3
Operational Risk
Assessments
(ORAs)

15
2.3 Operating Discipline Operational Risk Assessments (ORAs) 1/5
2.3 Operating Discipline Operational Risk Assessments (ORAs)

Context
Principles
Operational Risk Assessments detail temporary abnormal

operating conditions. Abnormal operating conditions
represent a potential risk to safe and compliant operations
and need to be managed carefully to prevent incidents.
1.
2.
3.
4.
5.
Reference documents
ORAs are recorded in a register.

ORAs are positively communicated and handed over from shift to shift until they are removed.
Mitigating measures are identified and monitored while ORAs are live.
ORAs are approved by an appropriate level of the organization.
ORAs form a part of the management information and KPIs, and are reviewed regularly by leadership.
SDP EP 4.5-0006
No.
Questions / Tasks
Answer
(Y/N/Partly)
Are the requirements for Operational Risk Assessments documented?

Areas to test:
ii

Areas to test:
Individuals understand why ORAs are used and what they do, e.g. detail
temporary abnormal operating conditions.
Observations
Actions
Suggested task:
iii
Is a list of live ORAs documented and available?

Areas to test:
A register of live ORAs is available, e.g. on the CoW system.


16
No.
iv
Questions / Tasks
Is all the required information recorded in line with requirements,

e.g. tag numbers, signatures, dates and correct level of approvals.
Areas to test:
The ORA is current and reflects the actual site conditions.
The normal and abnormal conditions are clearly stated.
The ORA states the equipment that is faulty and describes the reason for
the abnormal condition.
The ORA considers if it is safe to continue to operate with the abnormal
condition.
The ORAs duration and endpoint are recorded. Check these dates are
accurate and are not overdue.
The ORA is approved by the relevant people in line with requirements.
All the required information is recorded in line with requirements, e.g.
signatures, dates and the correct level of approvals and authorisers.
Answer
(Y/N/Partly)
Observations
Actions
Suggested task:
Select an ORA that has not been self-verified recently by this selfverification process and confirm that the areas tested above are accurate
and complete in their information.


17
No.
Questions / Tasks
Has the risk been adequately understood?

Areas to test:
The risk assessment team was adequate, e.g. it included the relevant
discipline engineer and was led by a trained facilitator.
The hazards are clearly stated in the ORA.
The potential consequences of continued operation are clearly stated in the
ORA.
The ORA is approved at the correct level as per requirements. The
approvers accept the risk of continuing to operate with an abnormal
condition.
The ORA refers to other existing ORAs on the same system, so the
cumulative risk has been considered.
Changes in conditions are in line with the ORA or changes have been
recorded in the ORA.
Any active overrides on the system are recorded and considered in ORA.
A formal documented risk assessment process is in place for extending
ORAs beyond their target date with the justification documented.
Consideration is given to formal MoC for long term ORAs.
Answer
(Y/N/Partly)
Observations
Actions
Suggested task:
Review the list of all the live ORAs in place. Confirm that the cumulative
impact of the ORAs has been considered.


18
No.
vi
Questions / Tasks
Are the agreed controls or mitigation measures in place?

Areas to test:
The controls or mitigation measures set out in the live ORA are in place.
The control or mitigation measures agreed in the sample of ORAs that you
review match what exists in the field and monitoring requirements have
been identified, signed and dated.
All barriers that are cited as providing a mitigation whilst an ORA is in place
are active and maintenance on them is up to date.
Answer
(Y/N/Partly)
Observations
Actions
Suggested task:
Review the list of the agreed controls or mitigation measures in the ORA.
Confirm that they are in place in the field, are operational and are being
maintained in line with their maintenance routine.
vii
Are the live ORAs being monitored and controlled?

Areas to test:
Evidence that the work team has referred any extensions or additions to the
ORA to an appropriate approval authority.
Evidence that any monitoring requirements have been completed and
recorded.
Suggested task:
Select a sample of technicians to verify that they understand the
requirements within the ORA.


19
No.
viii
Questions / Tasks
Is the status of live ORAs being appropriately communicated at shift

handover?
Areas to test:
Off-going and on-coming shift teams discuss any changes to ORA status.
Site leadership is tracking ORAs, for example, the KPIs include the number
and duration of ORAs.

Answer
(Y/N/Partly)
Observations
Actions
Date:

20
OMS Focus Areas
2.3
Overrides

21
2.3 Operating Discipline Overrides 1/5
2.3 Operating Discipline Overrides

Context
Principles
Overrides, sometimes referred to as inhibits, of our Safety Related

Control Loops, Safety Related Alarms (SRAs) and Safety Instrument
Functions (SIFs) represent a potential risk to our operations. To help
ensure safe operations, overrides are minimised and carefully
managed to help reduce the risk of a process safety incident.
1. Safety related control loops, SRAs and SIFs overrides are managed by a Safety Override Risk
Assessment (SORA) process.
2. As part of the SORA process:
Overrides are positively communicated and handed over from shift to shift until they are
removed.
Mitigating measures are identified and monitored while overrides are live.
Overrides are approved by an appropriate level of the organization.
Overrides form a part of the management information and KPIs, and are reviewed regularly by
leadership.
Reference documents
GP 30-47, GP 30-81, GP 48-03, GN 30-813
No.
Questions / Tasks
Answer
(Y/N/Partly)
Are the requirements for the application of Overrides documented?

e.g. in an approved and up to date SORA procedure.
Areas to test
Personnel aware of the documents and know where they can find them.
ii

Areas to test:
Individuals understand that overrides represent a potential risk to our
operations.
Individuals understand that all overrides need to be risk assessed to help
ensure that it is safe to continue operating in an abnormal condition.

Observations
Actions

22
No.
iii
Questions / Tasks
Is a Safety Override Risk Assessment (SORA) available?
Areas to test:
SORA is available and all required information is recorded in it in line with
requirements, for example signatures, dates, duration of override, correct
level of approvals and MoC numbers.
Answer
(Y/N/Partly)
Observations
Actions
Suggested task:
Select an override that has not recently been self-verified or audited. Confirm
the following:
The override is still in place.
The duration of the override has been identified.
Permission was granted to apply the override before it was applied.
The risk assessments associated with the override are available.
The information supplied by the operators and on the override in place on
the Control or Safety System matches the information in the SORA.


23
No.
Questions / Tasks
iv
Has the risk been adequately understood?

Areas to test:
The risk to operations and hazards and controls have been correctly
identified.
The risk assessment team members were competent, e.g. it included the
relevant discipline engineer and was led by a trained facilitator. Approval
levels in line with requirements are in place to confirm that the approvers
accept any increased risk of continuing to operate with an override in place.
The risk assessment refers to any relevant existing overrides on the same
system and subsequent cumulative risk has been considered.
Any assumed changes in conditions whilst the override is in place have
been recorded.
Any live ORAs on the system are recorded and are considered in the risk
assessment.
The SORA appropriately documents the justification and continued risk of
operating with an override beyond its target date (consideration must be
given for formal MoC for long term overrides).
Answer
(Y/N/Partly)
Observations
Actions
Suggested task:
Review a sample of live overrides and inhibits in place. Confirm that the
cumulative impact has been considered.


24
No.
Questions / Tasks
Are the agreed controls and mitigation measures in place?

Areas to test:
Controls and mitigation measures agreed are in place for live overrides.
The controls and mitigation measures agreed in the sample of overrides
reviewed match what exists in the field.
Monitoring requirements have been completed and recorded.
All barriers that are cited as providing a mitigation whilst an override is in
place are active and maintenance on them is up to date.
Answer
(Y/N/Partly)
Observations
Actions
Suggested task:
Review the list of the agreed controls or mitigation measures on the
overrides. Confirm that they are in place in the field, are being completed (if
procedural) or working and are being maintained in line with their
maintenance routine (if active or passive).


25
Answer
(Y/N/Partly)
No.
Questions / Tasks
vi
Are the live overrides being monitored and controlled?

Areas to test:
Extensions or additions have been escalated to the appropriate approval
authority.
A schedule is in place for overrides self-verification checks.
The schedule is being followed, e.g. signatures are in place to show that
operators have checked all overrides.
Non-conformances identified during self-verification checks are reported and
addressed.
vii
Is the status of live overrides being appropriately communicated at shift

handover?
Areas to test:
The off-going and on-coming shift team members discuss override changes.
Where appropriate, determine if an override on a Normally Unmanned
Installation (NUI) or remote site has been adequately communicated to the
main Hub.
Site leadership is tracking overrides, e.g. the KPIs include the number of
overrides and the number that were extended.

Observations
Actions
Date:

26
OMS Focus Areas
4.1
Procedures
and Practices
Operations and
Maintenance
Procedures

27
4.1 Procedures and Practices Operations and Maintenance Procedures 1/5
4.1 Procedures and Practices Operations and Maintenance Procedures

Context
Principles
The use of risk assessed procedures manages the risk of a process

safety incident. Procedures contain proven practice to identify hazards
and controls to provide a safe and consistent method for performing
work.
1. Operations and maintenance procedures are followed as written.

2. Operations and maintenance procedures are reviewed for accuracy on a regular frequency.
3. Operations and maintenance procedures include identification of hazards and controls for work
being done.
4. A process exists for changes to and deviations from procedures.
5. Procedures are risk assessed by persons competent in the task.
Reference documents
Group Guide (GG) 4.1
No.
Questions / Tasks
Are the requirements for Operations and Maintenance procedures

documented? e.g. in approved and up to date procedures.
Areas to test:
Answer
(Y/N/Partly)
Observations
Actions
Suggested task:
Select a procedure / temporary procedure and confirm the following:
It conforms with the standard and format required.
It is easy to understand and be followed.
The frequency and date of review are shown on the procedure as per
requirements.
For the sample taken the documents are within their review/validity period.
ii

Areas to test:
Each person understands their role in meeting the requirements.
Each person understands why procedures are needed and why they are
required to be followed.


28
No.
iii
Questions / Tasks
Is there evidence to show the procedures are being used?

Areas to test:
Records are available to show previously used and signed procedures.
Answer
(Y/N/Partly)
Observations
Actions
Suggested task:
Select some recently carried out procedures and confirm the following:
Each step has been signed and dated where required.
They meet the requirements, e.g. procedures should clearly list:
hazards, controls and warnings for the procedure task steps.
that the right people visited the job site before the procedure started, to
identify any additional hazards such as changing weather.
any additional hazards, initialled by the supervisor.


29
No.
Questions / Tasks
iv
Are new procedures or changes to procedures being risk assessed?

Areas to test:
A representative sample of procedures has been appropriately approved
and risk assessed in line with requirements.
Site-based personnel who are familiar with the task were involved in risk
assessment and developing the procedure.
Changes or updates to procedures and additional identified controls have
been approved and the relevant people have signed the document in line
with requirements.
Changes or updates to procedures have been communicated to the relevant
personnel and everyone affected has signed them to show that they have
read and understood the changes to the procedures in accordance with
their procedure (MoC process).
Answer
(Y/N/Partly)
Observations
Actions
Suggested task:
Review recently issued or changed procedures and confirm the following:
A risk assessment for the change is available.
The relevant people have signed off changes and updates as per the
requirements.


30
No.
Questions / Tasks
Are procedures being maintained appropriately with regards to accuracy

and review date?
Areas to test:
Personnel can verify with an example or show you that they know the
process for raising concerns or proposed changes, e.g. users should stop
and tell supervisors of the concern and provide input to update the
procedures.
The relevant people have approved changes before proceeding.
Comments and updates are red-lined and included for future updates.
Answer
(Y/N/Partly)
Observations
Actions
Suggested task:
Take a random sample of a red lined procedure.
Test that the red-lining update process is working.
Verify that it has been communicated and any training associated with it has
been completed.


31
No.
Questions / Tasks
vi
Is the status of procedures being appropriately communicated at shift

handover?
Areas to test:
Any change to the status of a procedure is communicated at shift handover.
If a procedure extends beyond a shift, shift handover includes clearly
communicating the step the procedure is at and where the oncoming shift
needs to start.
Site leadership is monitoring the quality of how personnel are using
procedures, e.g. KPIs include information such as the number of
procedures used and the number of procedures overdue.

Answer
(Y/N/Partly)
Observations
Actions
Date:

32
OMS Focus Areas
4.5
Control of Work
Lifting
Operations

33
4.5 Control of Work Lifting Operations 1/5
4.5 Control of Work Lifting Operations

Context
Principles
Lifting operations include lifts by cranes and fixed equipment.

Detailed risk assessment of the hazards and controls of lifting
operations are critical to ensuring safe lifts occur without injury
to personnel or process equipment.
1. All lifts are categorised to reflect complexity and risk.

2. All lifts are planned (supported with a documented lift plan) and risk assessed by a competent person.
3. All lifts have a robust review, approval, authorization and endorsement process consistent with lift
category.
4. All personnel engaged in lifting, or the review and approval of lift plans, will be competent to a defined
level/standard.
5. All sites have a system to provide adequate contractor oversight and lifting authority assurance
(technical reviews).
Reference documents
EP SDP 3.2-0002
No.
Questions / Tasks
Answer
(Y/N/Partly)
Are the requirements for Lifting operations documented?

Areas to test:
ii

Areas to test:
Each person understands who the authorised people to carry out lifting
operations are.

Observations
Actions

34
No.
iii
Questions / Tasks
Are lifts being managed appropriately?

Areas to test:
The category of lift has been recorded.
The category of lift is correct.
The risk assessment that the category requires is in place.
Lift plans are available.
The detail of the lift plan matches the lift category, e.g. as the category
increases, the detail of the lift plan increases.
A procedure to follow the movement of the lifting equipment, including
critical clearances, is in place.
Correct levels of approval are in place in line with requirements.
High risk lifts have the appropriate review and approval, e.g. peer review is
completed by the lifting technical authority.
Answer
(Y/N/Partly)
Observations
Actions
Suggested task:
Select one lifting activity that is ongoing on the site or has been recently
completed and check that it conforms to the requirements defined. Examples
include:
All the required checks have been done, for example:
Lifting equipment was inspected (this includes inspection of pad eyes/lifting
lugs etc.). Check the inspection dates of item to be lifted and ensure they are
not overdue.
Conditions are being monitored.
Communication is in place.
The person in charge of the lift was identified.
The area around the lift site is controlled and non-essential personnel are
removed.
The right people have been involved in planning., e.g. lifting experts, the
operations team and those scheduled to perform the lift have been involved
in the risk assessment.
The right people have attended and observe the preparations for a complex
lift to verify that the lifting assessment conditions are being followed.


35
No.
iv
Questions / Tasks
Is the lifting equipment adequate?

Areas to test:
The lift plan includes how adequate the equipment is to safely perform the
operation.
Equipment to do the lift is certified and within its certification period.
A register of lifting equipment is available that includes the list of
quarantined lifting equipment.
The colour coding is appropriate.
The lifting equipment is stored satisfactorily.
All lifting equipment certificates are available and current.
A register of lifting equipment is available. A random sample should match
the register, e.g. tag number, colour code and inspection date.
Records are available to show that the equipment is adequately rated for
the load, e.g. markings, look-up books or calculations are available for all
component parts and load weight.
Answer
(Y/N/Partly)
Observations
Actions
Suggested task:
Select any lifting equipment. Verify that the certification is not overdue and
when last used, it was used for the correct lift category.


36
No.
Questions / Tasks
Are the approved personnel doing lifts?

Areas to test:
Records list those authorised to plan and conduct lifts at all levels.
Records of competency assessments are available, e.g. required personnel
certificates are available.
Personnel involved in this lift are competent in line with requirements.
Certificates for people involved in lifts are available and valid.
Competency and training requirements are defined.
Competency and training records are available for people involved in the lift.

Answer
(Y/N/Partly)
Observations
Actions

37
No.
vi
Questions / Tasks
Is the site properly managing how contractors are overseen and

assured?
Areas to test:
Records show that the region has done a technical review of lifting
contractors within the past 24 months.
These reviews are done by the correct level of personnel, such as the
regional lifting authority or segment lifting authority.

Answer
(Y/N/Partly)
Observations
Actions
Date:

38
OMS Focus Areas
4.5
Control of Work
Permits

39
4.5 Control of Work Permits 1/7
4.5 Control of Work Permits

Context
Principles
The scope of work to be controlled is clear and covered by a

risk assessment. Task, process and worksite hazards have been
identified. Controls are selected and put in place to sufficiently
manage these hazards. All those involved are competent and
understand their responsibilities Everyone is expected to stop
unsafe work.
1. Personnel with a role in CoW are trained and competent to carry out their responsibilities.
2. Task, process and worksite hazards are covered in the CoW risk assessment process (Area and
Performing Authority).
3. Isolation of Energy (e.g. electrical, hydraulic, pneumatic) and process hazards (e.g. pressure,
temperature, and chemicals) are eliminated or controlled (Area and Issuing Authority).
4. Higher risk jobs (e.g. confined space entry, hot work, lifting over live plant, blasting on equipment in
service) require a level 2 risk assessment with an appropriate level of approval (e.g. Site Authority).
5. Tasks are risk assessed with the input and agreement of a representative from the work crew
(Performing Authority).
6. The Performing Authority verifies that all in the work crew understand the task, process and worksite
hazards and associated controls.
Reference documents
GDP 4.5-0001, EDP 4.5-0001, EDP 4.5-0003, EDP 4.5-0004
No.
Questions / Tasks
Answer
(Y/N/Partly)
Are the requirements for Permits documented?

Areas to test:
ii

Areas to test:

Observations
Actions

40
No.
Questions / Tasks
iii
Are the permits completed satisfactorily?

Suggested task:
Select a random sample of permits that are live and confirm the following:
Each permit clearly defines the scope of work and the task description is
full and clear.
The correct permit type is being used in line with requirements.
Each permit identifies the need for written instructions or for a procedure, in
line with requirements.
Each permit identifies the correct location and area.
All isolation plans and certificates are available and drawings are attached.
Each permit records the information required for all occasions in line with
requirements, e.g. signatures, dates, and the correct level of approvals and
authorisers.
All the correct authorisations have been identified and given for each permit,
in line with requirements.

Answer
(Y/N/Partly)
Observations
Actions

41
No.
Questions / Tasks
iv
Does the permit adequately identify the risks and controls?

Suggested task:
From your random sample of permits, confirm the following:
The correct level of risk assessment is being used as per the requirements.
The need for written instruction or procedure has been appropriately
identified as per requirements.
All the potential hazards from the task process and worksite have been
identified.
All appropriate controls have been identified and are in place.
Any required certificates are approved attached such as ICC, ground
disturbance, lifting plan, blasting on live line etc.

Answer
(Y/N/Partly)
Observations
Actions

42
No.
Questions / Tasks
Have all the requirements identified in risk assessments been

completed?
Suggested task:
From the random sample of permits selected confirm the following:
A pre-job site visit been carried out by the Area Authority or delegate
together with the Performing Authority (note PA only for low risk tasks).
All the controls specified have been put in place.
Where personal isolations are included, verify these are in place and meet
BP standards.

Answer
(Y/N/Partly)
Observations
Actions

43
No.
Questions / Tasks
vi
At the job site are the requirements for CoW being met?
Suggested task:
At the site where work is taking place, confirm the following:
The work being done is as stated on the permit.
The correct location has been identified.
The Performing Authority has held a pre-job tool box talk with the work
party.
The work party can show you an adequate level of awareness of the task.
An up-to-date copy of the permit is at the worksite, signed by all members
of the work party.
The work party can show you an adequate level of awareness of the
hazards associated with the task, process and worksite.
The work party can show you an adequate level of awareness of the control
measures required to safely perform the task.
If the work party identified any further hazards or controls associated with
the task, have they stopped the job and consulted with the AA to update
the permit?
All controls that are required to date are in place.
The appropriate gas tests have been carried out and recorded on the
permit.
Work party members know what to do if an incident occurs and understand
the emergency response and rescue plan.
If the permit specifies any PPE, it is being used correctly and is in good
condition.
All safety equipment, including gas detectors, that the risk assessment lists
is available at the worksite.
If the answer to the evidence above is YES, the necessary members of
work party know how to use it.
Any personnel who have joined the work party in addition to the original
members have been briefed to the same level of understanding of the task
and its associated hazards and control measures.

Answer
(Y/N/Partly)
Observations
Actions

44
No.
vii
Questions / Tasks
Are supplementary certificates being used appropriately?

Suggested task:
From your random sample of permits, confirm the following:
All supplementary certificates (e.g. ICC, lifting plans, ground disturbance,
blasting on live line) have been properly cross referenced, completed and
approved.
Any supporting method statements or procedures have been reviewed
before being used and this has been recorded and approved.
The work party can show you they adequately understand any
supplementary certificates, method statements or procedures.
The work party is following the requirements of any supplementary
certificates, method statements or procedures.

Answer
(Y/N/Partly)
Observations
Actions

45
No.
Questions / Tasks
viii
Have permits been returned to issuing authority at end of validity period

or end of job?
Area to test:
A face to face conversation has occurred when the PA returns the permit to
the AA.

Answer
(Y/N/Partly)
Observations
Actions
Date:

46
OMS Focus Areas
4.5
Control of Work
Isolations

47
4.5 Control of Work Isolations 1/5
4.5 Control of Work Isolations

Context
Principles
The correct identification and control of isolations from our

operations hazards, is critical to protecting our people, plant
and environment during control of work.
1. All energy sources, including process safety hazards (e.g. pressure, temperature, chemical exposure)
are identified, isolated and controlled before intervention work commences.
2. Isolation and de-isolation plans are developed for all forms of isolation.
3. Isolation plans are approved by the appropriate authority.
4. Energy isolation and zero energy state is demonstrated to the work crew performing the task prior to
starting the work.
5. Lock out and tag out is used when energy isolation (e.g. electricity, pressure, radiation) is controlled by
valve or electrical breaker.
Reference documents
EP SDP 4.5 0002, GP 44-40
No.
Questions / Tasks
Answer
(Y/N/Partly)
Are the requirements for Isolations documented?

Areas to test:
ii

Areas to test:

Observations
Actions

48
Answer
(Y/N/Partly)
No.
Questions / Tasks
iii
Are the isolation plans and certificates completed satisfactorily?

Suggested task:
Select a random sample of permits that are live and confirm the following:
The scope and plant or system is clearly described and identified.
The reason for the isolation has been fully defined.
The type of isolation has been identified in line with requirements.
An isolation plan is available.
The isolation points are shown on clear and up to date drawing such as
P&ID, electrical line drawings.
Each isolation point has been clearly described.
The number and status of overlapping ICCs are checked.
The design of the isolation meets BP isolation standards.
Details of any temporary earths have been recorded.
Any LO and LC valves have been identified and recorded.
The isolation plan and ICC include all the earths, alarms and trip logic
overrides.
Information on a sample of isolations taken in field matches the information
recorded in the register, e.g. tag numbers, P&IDs on the register match the
field status.
iv
Does the isolation certificate adequately identify the risks and controls?
Suggested task:
From your random sample of ICC confirm the following:
Each isolation point has been signed for and independently verified.
The appropriate level of risk assessment is in place in line with
requirements and has been approved.
Higher level approvals and a level 2 risk assessment are in place if the
integrity of any isolation does not meet BP standards.
Each ICC identifies all the potential hazards.
Each ICC identifies all appropriate controls.

Observations
Actions

49
No.
Questions / Tasks
At the job site are the requirements for the ICC being met?
Suggested task:
At the site where work is taking place, confirm the following:
The Isolations Confirmation Certificate (ICC) reflects the current status.
Zero energy state has been demonstrated to the work crew by the Area
Authority (AA) or Isolating Authority (ISA).
All controls identified are in place.
Electrical energy isolations are locked out and tagged.
Isolation integrity has been verified, e.g. none of the valves at the isolation
points are leaking.
Each isolation point has been identified and labelled.
Each isolation lock number has been recorded, e.g. the lock number in the
field matches the information on the ICC.
Each isolation has been secured to the highest practicable standard, e.g.
chain and lock, tamper-proof isolation methods.
Where it is not possible to secure an isolation point to the highest standard
the AA has taken steps to have this remedied.
The process bleed points for pressure build up (PBU) monitoring have been
labelled.
Any alteration to the isolation has an adequate explanation, and has been
risk assessed and approved in line with requirements.
The procedure that the work party is using has been reviewed and is still
valid.
The monitoring of pressure build up (PBU) is recorded and signed.
Any pressure gauges, transmitters being used for monitoring the integrity of
the isolations are appropriately ranged.

Answer
(Y/N/Partly)
Observations
Actions

50
No.
Questions / Tasks
Answer
(Y/N/Partly)
vi
Is a deviation process in place for isolations that do not meet the BP

standards and does it include an independent risk assessment and
higher level approvals?
vii
Are de-isolations taking place satisfactorily?

Suggested task:
Select ICC where isolations are being re-instated and confirm the following:
Isolations remain tagged until the end of a job.
De-isolation is recorded on the isolation plan and certificate.
De-isolation sequences and plan considers leak testing and sanctioned
tests where required (STT).

Observations
Actions

51
Answer
(Y/N/Partly)
No.
Questions / Tasks
viii
Are the long term isolations (LTI) being reviewed and self-verified within
the periods defined in the requirements?
Areas to test:
Signatures are available to confirm that self-verification checks on LTI are
being completed at the appropriate frequency.
Actions have been put in place to remove as many LTI as practicable.
ix
Is a competency and training process in place for preparing, approving

and implementing isolations?
Areas to test:
Competency and training requirements are defined for Isolating Authorities.
Competency and training records are available for Isolating Authorities.

Observations
Actions
Date:

52
Appendix
Example of calendars

53
Appendix Example of calendars
Appendix 1
The following table provides the frequency for the Self-Verification audit on a four-week cycle
Week 1
Monday
Tuesday
Wednesday
Thursday
Week 2
Friday
Satuirday
Sunday
Shift Handover
Shift Handover
Locked Valves
Locked Valves
ORA
ORA
Inhibits & Overrides
Procedures
Procedures
Lifting
Lifting
Permits
Permits
Isolations
Isolations
Monday
Tuesday
Wednesday
Thursday
Monday
Tuesday
Wednesday
Thursday
Week 3
Monday
Tuesday
Wednesday
Thursday
Satuirday
Sunday
Friday
Satuirday
Sunday
Week 4
Friday
Satuirday
Sunday
Shift Handover
Shift Handover
Locked Valves
Locked Valves
ORA
ORA
Procedures
Procedures
Lifting
Lifting
Permits
Permits
Isolations
Isolations
Friday

54
Appendix 2
Example of a Self-Verification plan
December
MANAGEMENT TEAM WEEKLY SELF VERIFICATION PLAN
Audit not completed

Audit completed
Further details in Greater Plutonio Standing Instruction: ANG-B18-OPS-SIN-110
WCC
WCC
WCC
WCC
WCC
WCC (Completion)
WCC (Routine)
WCC (Routine)
WCC (Routine)
WCC (Routine)
WCC (Routine)
WCC (Routine)
Isolation
Isolation
Isolation
Isolation
Isolation
Isolation
LO/LC (OTL)
HRP / Jobsite Visit
TBT
HRP / Jobsite Visit
TBT
HRP / Jobsite Visit
Isolation LTI
Environmental- 7
Procedures (RGN)
Isolation LTI
Environmental- 8
Procedures (RGN)
SOC
SOC
SOC
SOC
SOC
SOC
Process Safety SOC
Process Safety SOC
Process Safety SOC
Process Safety SOC
Process Safety SOC
Process Safety SOC
GOC pack
Safety Theme
Area Inspection- 1
GOC Pack
LO/LC (OME)
Area Inspection-2
Handover (Rotation)
Audit of Audits
Handover (Shift)
Procedures (SI)
Inhibits / Overrides
CRT
ORA
OIM
Rigging Loft Inspection
DF
OIM
Weekly: Random Days

Security Check
Inhibits / Overrides
OOE
Weekly: Random Nights

Team
Management
Team
Security Check 1
Mar Sup
Security Check 2
Mar Sup
Deep Clean
OIM/Medic
Health & Hygiene
Security Check 3
Mar Sup
Fire Control Rooms
Dep Fwd Ctl
SARA
BOSS Performance
Weekly Audits
Monthly Audits
Medic
OIM
FPSO's Incident
Performance
Today's Date
Observations for:
YTD DAFWC
Safe / Unsafe for:
Last DAFWC

55

56

57

58

59

60

61

Self-Verification Handbook A4 - May14 V10a - LowRes

Transféré par

Informations du document

Titre original

Copyright

Formats disponibles

Partager ce document

Partager ou intégrer le document

Options de partage

Avez-vous trouvé ce document utile ?

Ce contenu est-il inapproprié ?

Droits d'auteur :

Formats disponibles

Self-Verification Handbook A4 - May14 V10a - LowRes

Transféré par

Droits d'auteur :

Formats disponibles

For internal use only

Issue 1, May 2014

2014 BP International Ltd.

For internal use only. 2014 BP International Ltd.

Global Operations Organization Self-Verification Handbook

Global Operations Organization Self-Verification Handbook

Global Operations Organization

2.3 Operating Discipline

4.1 Procedures and practices

Procedures Operations & Maintenance Procedures

4.5 Control of Work

Global Operations Organization Self-Verification Handbook

Global Operations Organization Self-Verification Handbook

Fawaz (Fuzzy) Bitar

To further drive rigor and discipline into our

This Global Operations Organization (GOO)

For internal use only. 2014 BP International Ltd.

Global Operations Organization Self-Verification Handbook

Global Operations Organization Self-Verification Handbook

3. Operational Risk Assessments

As a Site Manager self-verification is your opportunity to:

For internal use only. 2014 BP International Ltd.

Global Operations Organization Self-Verification Handbook

Global Operations Organization Self-Verification Handbook

Site managers (as well as participating in this

The frequency of each self-verification check is

Performance against schedule.

The observations from each self-verification

Observations and corrective actions.

There is a review with the AOMs and this is

The self-verification process and documentation

Close out status of corrective actions.

The frequency of each self-verification check is

For internal use only. 2014 BP International Ltd.

Global Operations Organization Self-Verification Handbook

Global Operations Organization Self-Verification Handbook

Global Operations Organization

OMS Focus Areas

Global Operations Organization Self-Verification Handbook

2.3 Operating Discipline Shift Handovers 1/3

2.3 Operating Discipline Shift Handovers

Shift handovers and the communication of operational

Are the requirements for shift handovers documented?

Are personnel familiar with the content and do they demonstrate

Is a written or electronic system in place for recording shift handovers?

For internal use only. 2014 BP International Ltd.

Global Operations Organization Self-Verification Handbook

2.3 Operating Discipline Shift Handovers 2/3

Do the handovers that you have checked cover the minimum

For internal use only. 2014 BP International Ltd.

Global Operations Organization Self-Verification Handbook

2.3 Operating Discipline Shift Handovers 3/3

Area / Shift / Location / Document Reviewed:

For internal use only. 2014 BP International Ltd.

Review completed by:

Global Operations Organization Self-Verification Handbook

Global Operations Organization Self-Verification Handbook

Global Operations Organization

OMS Focus Areas

Global Operations Organization Self-Verification Handbook

2.3 Operating Discipline Locked Valves (Managing high/low pressure interfaces)

The use of locked valves during normal operation is used to control

1. A register exists of all locked open-locked closed valves.