01 PDF
01 PDF
1
Introduction
1.1 Introduction
In large facilities where multiple tasks are performed
simultaneously, the management of work is essential to
ensure that these tasks are accomplished safely. Poor
control of work has resulted in many accidents and
fatalities over the years.
According to a study performed by a major oil company, factors relating to
Control of Work have had direct influences on many of their fatal accidents. In
fact, Control of Work factors are the primary causes of fatality after fatalities
related to vehicles and driving. A consistent methodology was used to
investigate the root causes of the fatal accidents, which includes three factors
that relate directly to Control of Work.
The study reviewed fatal industrial accidents over a five-year period and found
that all three factors were highlighted in 30% of the accident investigations. At
least two out of three were present in 71%, while at least one of the three was
a contributory factor in 90% of the accidents.
Since only 10% of the fatal industrial accidents are found to have no
association with the Control of Work, it becomes apparent that a good Control
of Work system is essential to prevent incidents.
Not related to
Control of Work
10%
All 3 elements
1 out of 3 30%
elements
19%
1
CONTROL OF WORK
A robust Control of Work process could have helped in preventing the following
incidents.
Contractors were repairing the grating on the catwalk at the time of the incident.
They were issued a hot work permit although it was known that there were
holes in the roofs of the nearby tanks. Instead of adhering to the ‘absolute spark
control’ requirement stated on the hot work permit, the contractors changed
from oxy-acetylene cutting to air carbon arc gouging, which threw large
amounts of molten metal over a wide area. A spark apparently came into
contact with the flammable atmosphere within the tank through the holes
causing the explosion, which killed one and injured eight others.
(continued )
2
CONTROL OF WORK
There was inadequate control of the Hot Work Permit System that allowed
cutting and welding close to tanks containing flammable atmospheres without
extensive safeguards, such as continuous flammable gas monitoring and
providing flameproof barriers/blankets to contain sparks. Further, no action had
been taken when the hot work permit was denied on two previous occasions
for the repair work. The presence of holes in the roofs of the tanks should have
been recognized as a significant hazard and effectively communicated to the
contractors so that those performing the work could understand the situation
better and prevented actions that compromised their safety.
The company pleaded no contest to criminally negligent homicide for failure
to maintain the spent sulphuric acid storage tank which exploded, killing
one employee.
Aside from the compensation fines to be paid to the victims totalling nearly
$37 million, the company was fined a further $10 million for discharging
pollutants into the nearby river, and negligently releasing sulphuric acid into
the air.
3
CONTROL OF WORK
Investigations found that the immediate cause of the accident was failure of
the Work Permit system to control maintenance and inspection work on the
platform, although it was noted that audit findings never showed a sign that
the permit system was not working well. A Work Permit had been issued to
allow for the maintenance of a condensate standby pump on a hydrocarbon
liquids line. The pump’s discharge pressure relief valve, located out of sight of
the pump, was removed for inspection at the platform workshop, to be
reinstalled at a later date.
When the maintenance work was complete for the day, the maintenance
supervisor returned the Work Permit to the control room. As the process
supervisors and operators were in deep discussion, he left the Work Permit
on the desk without any verbal or written handover. This resulted in vital
information being overlooked and the next shift commencing without knowing
the true conditions of the standby condensate pump. This pump was
subsequently started without the pressure relief valve in place and within
seconds, large quantities of condensate and gas escaped from the blanked
flange fitted to the pipe from where the relief valve had been removed. This
release started the whole chain of catastrophic events.
4
CONTROL OF WORK
For more details on these two and other major incidents, refer to BP Process
Safety Series Integrity Management: Lessons from Past Major Industrial Incidents.
5
CONTROL OF WORK