Saudi Aramco 2616-ENG (03/99)

PMT OPRNS
OSM SAUDI ARABIAN OIL COMPANY

THIS DRAWING AND THE INFORMATION CONTAINED HEREIN ARE THE SOLE PROPERTY OF SAUDI ARAMCO. NO REPRODUCTION IN FULL OR IN PART SHALL BE OBTAINED FROM THIS DOCUMENT WITHOUT THE WRITTEN CONSENT OF ITS OWNER.
AOZ
ENGG CERT

IAD
MSA
ISSUED FOR REVIEW
DESCRIPTION

MITIGATED EVENT FREQUENCY (MEF)

The risk reduction credit against each existing safeguard (protection layer) will be
assigned as per Appendix-I of SAEP-250. The mitigated event frequency is calculated by
multiplying the initiating event frequency by probabilities of all the IPLs failing to do their
intended function. Conditional modifiers/Enabling conditions are also multiplied along with
other IPLs to calculated the final MEF values.
JO/EWO
10-09111-
0002
DATE
09/29/19
NO.
REV

DISCIPLINE
ENGINEER
MSA
09/10/19
DATE:
PROJECT
ENGINEER
IAD
09/10/19
DATE:
CERTIFIED
AOZ
09/10/19
DATE:
CONSTRUCTION
AGENCY

09/10/19
DATE:
OPERATIONS

OSM
RRF CALCULATION
09/10/19
DATE:
Risk Target Frequency for the SIF will be calculated by dividing the mitigated risk with the
CONTROL NUMBER
VERIFICATION

target Risk (identified in step c) to identify the Risk Reduction Factor (RRF) required by the
EDSD

SIF loop.
DATE:
BY:
REVISIONCERTIFICATION

APPROVAL/CERTIFICATION REQUIREMENTS,

SIL/PFD CALCULATION
THIS INDICATES THAT REV. NO.__________
CERTIFICATE

OF THIS DRAWING IS COVERED, FOR ALL

BY DRAWING COMPLETION CERTIFICATE

A

Inverse of RRF (i.e. 1/RRF) will lead to PFD of the SIF, against which SIL will be assigned
_____________________
(DCC) NO. 10-0010-09111-0002

` SIL ASSESSMENT STUDY REPORT DWG.TYPE PLANT NO. INDEX DRAWING NO. SHT.NO. REV.NO.
REVISION

DE BOTTLENECK TANAJIB WATER HANDLING DOC

G80 A TE - 498623 1
WET CRUDE FACILITIES ONSHORE OF A
0
TANAJIB SAUDI ARABIA JO / EWO:
10-09111-0002 5
EDSD/2616-0399.doc
 Saudi Aramco 2616-ENG (03/99)
PMT OPRNS
OSM SAUDI ARABIAN OIL COMPANY

THIS DRAWING AND THE INFORMATION CONTAINED HEREIN ARE THE SOLE PROPERTY OF SAUDI ARAMCO. NO REPRODUCTION IN FULL OR IN PART SHALL BE OBTAINED FROM THIS DOCUMENT WITHOUT THE WRITTEN CONSENT OF ITS OWNER.
AOZ

for the SIF.

ENGG CERT

IAD

1. LOPA WORKSHOP ASSUMPTIONS & CONVENTIONS

MSA

• SIL study is conducted based on

a- the HAZOP findings and risk ranking ranked high in the HAZOP recommendations
&
ISSUED FOR REVIEW

b- the Safety instrumented functions listed in Cause & Effect diagram.

DESCRIPTION

• The facility has been designed and engineered properly based on the Saudi Aramco
design/engineering codes, industry standards and good engineering practices.

• CCPS Approach B & IEC-61511-2016 section 9.3.4 was taken as a basis for the
identification of protection layers.

• SIL study has been conducted for the SIFs which are covered under the scope of this
JO/EWO

project 10-09111-0002
10-09111-
0002

• Permissive & Maintenance Bypasses are not covered in the SIL assessment.
DATE
09/29/19

• All equipment will be well maintained.

NO.
REV

DISCIPLINE • Fall-0009 CONFIGURATION

ENGINEER
MSA
09/10/19 • For SIF-001/SIF-003/SIF-005 consequence analysis; team identified that normally one
DATE:
PROJECT
ENGINEER oil recovery pump is running at a time. There is one pump associated with each CPI
IAD
09/10/19
separator however G80-G-52 can be selected through switch HS-8042A to line up with
DATE:
CERTIFIED any of the three CPI separators when it is required.
AOZ
09/10/19
DATE: • For SIF-002/SIF-004/SIF-006; it was identified that PZV-194 (24” inlet size) is
CONSTRUCTION
AGENCY
adequate enough to mitigate the gas blowby to Produced Water Tank G80-D-24.
09/10/19
DATE:
OPERATIONS
• The SIFs with hand switches and push button (PB) as initiators are considered SIL 1
OSM by default and are not studied during the SIL workshop (in accordance with SAEP-
09/10/19
DATE:
250). All SIFs with SIL-1 needs to be part of SIS System fulfilling the requirements of
CONTROL NUMBER
VERIFICATION

IEC-61511. Such manual initiators in a SIF require operator action that is used for both
EDSD

prevention and mitigation of hazardous events, like total plant shutdown, unit
DATE:
BY:

shutdown, equipment isolation and equipment protection systems shutdown.

REVISIONCERTIFICATION

APPROVAL/CERTIFICATION REQUIREMENTS,
THIS INDICATES THAT REV. NO.__________
CERTIFICATE

OF THIS DRAWING IS COVERED, FOR ALL

BY DRAWING COMPLETION CERTIFICATE

Alarms are considered as an IPL with a PFD of 0.1 provided the operator has clearly
A

•
_____________________
(DCC) NO. 10-0010-09111-0002

understood the alarm, Operator has more than specified time (15 minutes for control

` SIL ASSESSMENT STUDY REPORT DWG.TYPE PLANT NO. INDEX DRAWING NO. SHT.NO. REV.NO.
REVISION

DE BOTTLENECK TANAJIB WATER HANDLING DOC

G80 A TE - 498623 2
WET CRUDE FACILITIES ONSHORE OF A
0
TANAJIB SAUDI ARABIA JO / EWO:
10-09111-0002 5
EDSD/2616-0399.doc
 Saudi Aramco 2616-ENG (03/99)
PMT OPRNS
OSM SAUDI ARABIAN OIL COMPANY

THIS DRAWING AND THE INFORMATION CONTAINED HEREIN ARE THE SOLE PROPERTY OF SAUDI ARAMCO. NO REPRODUCTION IN FULL OR IN PART SHALL BE OBTAINED FROM THIS DOCUMENT WITHOUT THE WRITTEN CONSENT OF ITS OWNER.
AOZ

room alarm ; 30 minutes for field alarms) to respond in order to prevent the demand
ENGG CERT

IAD

occurring on the SIF. Also, this credit shall only be given if the operator is trained and
regularly completes action as drilled exercise, has access to clear written procedures
MSA

and performs actions according to the appropriate procedures and operating.

• Independence between BPCS protection and initiating cause is taken in accordance

with the requirement of IEC-61511-1-2016 section 9.3.3/9.3.4 & 9.3.5
ISSUED FOR REVIEW

As per HAZOP recommendation, Blanketing gas was changed to sweet fuel gas.
DESCRIPTION

•
Team identified that now blanketing gas is not very toxic (sweet gas) however it is still
flammable. Hence consequences related to toxic gas dispersion were not considered
during LOPA analysis.

• As per IEC-61511-2016 section 9.3.4

“If it is not intended that the BPCS conform to the IEC 61511 series, then:
JO/EWO
10-09111-

• no more than one BPCS protection layer shall be claimed for the same
0002

sequence of event leading to the hazardous event when the BPCS is the
DATE
09/29/19

initiating source for the demand on the protection layer; or

NO.
REV

• no more than two BPCS protection layers shall be claimed for the same
DISCIPLINE
ENGINEER
MSA sequence of event leading to the hazardous event when the BPCS is not the
09/10/19
DATE: initiating source of the demand.
PROJECT
ENGINEER
IAD

DATE:
09/10/19 2. PROBABILITY OF OCCUPANCY
CERTIFIED
AOZ
SIL Committee identified that operator will visit the facility after every 2 hours for the
09/10/19
DATE:
CONSTRUCTION duration of 25 minutes. It was agreed that one operator will be present during the visit.
AGENCY

09/10/19 OPERATOR OCCUPANCY

DATE:
OPERATIONS NO. OF ROUNDS 12 TIMES PER DAY
OSM ONE ROUND TIME 25 MINUTES
DATE:
09/10/19 NUMBER OF PEOPLE 1 PEOPLE
CONTROL NUMBER

TOTAL OCCUPANCY 0.208 PER YEAR

VERIFICATION
EDSD

3. RESULTS & FINDINGS

DATE:
BY:

WORKSHEET
REVISIONCERTIFICATION

The SIL workshop results are depicted in the LOPA Worksheets attached in Appendix D
APPROVAL/CERTIFICATION REQUIREMENTS,
THIS INDICATES THAT REV. NO.__________
CERTIFICATE

OF THIS DRAWING IS COVERED, FOR ALL

BY DRAWING COMPLETION CERTIFICATE

A

_____________________
(DCC) NO. 10-0010-09111-0002

` SIL ASSESSMENT STUDY REPORT DWG.TYPE PLANT NO. INDEX DRAWING NO. SHT.NO. REV.NO.
REVISION

DE BOTTLENECK TANAJIB WATER HANDLING DOC

G80 A TE - 498623 3
WET CRUDE FACILITIES ONSHORE OF A
0
TANAJIB SAUDI ARABIA JO / EWO:
10-09111-0002 5
EDSD/2616-0399.doc
 Saudi Aramco 2616-ENG (03/99)
PMT OPRNS
OSM SAUDI ARABIAN OIL COMPANY

THIS DRAWING AND THE INFORMATION CONTAINED HEREIN ARE THE SOLE PROPERTY OF SAUDI ARAMCO. NO REPRODUCTION IN FULL OR IN PART SHALL BE OBTAINED FROM THIS DOCUMENT WITHOUT THE WRITTEN CONSENT OF ITS OWNER.
AOZ

LOPA SUMMARY
The results of the SIL determination /assessment workshop are summarized below:
ENGG CERT

IAD

The following is the list of target SILs for the SIF tags;
MSA

SIF No. Description Target P&ID No. C&E No.

SIL
SIF-001 LALL-1873 TRIPS G80-G- SIL-2
RA-663868.001/NA-
0924/G-52 J55017.003
JB-664036.001

SIF-002 LALL-1879 SHUTDOWN ZV- SIL-2

ISSUED FOR REVIEW

RA-663868.001/NA-
6040 JB-664036.001
DESCRIPTION

J55018.001

POTENTIAL LAHH SHUTDOWNS CPI SIL-2

SIF-A G80-D-0919 INLET ZV
RA-663868.001 JB-664036.001

SIF-003 LALL-1867 TRIPS G80-G- SIL-2

50/G-52 NA-J55017.001/NA-
J55017.003
JB-664036.001

SIF-004 LALL-1869 SHUTDOWN ZV- SIL-2

JO/EWO

NA-J55017.001/NA-
10-09111-

6805 J55018.001
JB-664036.001
0002

POTENTIAL LAHH SHUTDOWNS CPI SIL-2

DATE
09/29/19

SIF-B G80-D-20 INLET ZV

NA-J55017.001 JB-664036.001
NO.
REV

DISCIPLINE
ENGINEER SIF-005 LALL-1870 TRIPS G80-G- SIL-2
MSA 51/G-52 NA-J55017.002/NA-
09/10/19 J55017.003
JB-664036.001
DATE:
PROJECT
ENGINEER
SIF-006 LALL-1872 SHUTDOWN ZV- SIL-2
IAD NA-J55017.002/NA-
09/10/19
6807 J55018.001
JB-664036.001
DATE:
CERTIFIED
AOZ POTENTIAL LAHH SHUTDOWNS CPI SIL-2
09/10/19 SIF-C G80-D-21 INLET ZV
DATE: NA-J55017.002 JB-664036.001
CONSTRUCTION
AGENCY

09/10/19
DATE:
OPERATIONS
Table 1: SIF tags SIL assignment
OSM
09/10/19 Note: As the team developed LOPA scenarios, for some SIF tags there was no protection layer except the SIF
DATE:
being studied, hence a PFD value ‘1’ was entered in the IPL column for the LOPA calculation.
CONTROL NUMBER
VERIFICATION
EDSD

4. RECOMMENDATIONS & ACTIONS

DATE:
BY:

GENERAL
REVISIONCERTIFICATION

APPROVAL/CERTIFICATION REQUIREMENTS,
THIS INDICATES THAT REV. NO.__________
CERTIFICATE

OF THIS DRAWING IS COVERED, FOR ALL

BY DRAWING COMPLETION CERTIFICATE

A

1. POTENTIAL SIF-A/B/C were analyzed as per the HAZOP recommendation. LOPA

_____________________
(DCC) NO. 10-0010-09111-0002

identified that RRF of 230 is required (SIL-2 for Economic consequences) to reach the

` SIL ASSESSMENT STUDY REPORT DWG.TYPE PLANT NO. INDEX DRAWING NO. SHT.NO. REV.NO.
REVISION

DE BOTTLENECK TANAJIB WATER HANDLING DOC

G80 A TE - 498623 4
WET CRUDE FACILITIES ONSHORE OF A
0
TANAJIB SAUDI ARABIA JO / EWO:
10-09111-0002 5
EDSD/2616-0399.doc
 Saudi Aramco 2616-ENG (03/99)
PMT OPRNS
OSM SAUDI ARABIAN OIL COMPANY

THIS DRAWING AND THE INFORMATION CONTAINED HEREIN ARE THE SOLE PROPERTY OF SAUDI ARAMCO. NO REPRODUCTION IN FULL OR IN PART SHALL BE OBTAINED FROM THIS DOCUMENT WITHOUT THE WRITTEN CONSENT OF ITS OWNER.
AOZ

Target consequence frequency. Hence the potential SIF-003 (with SIL-2 rating) shall
ENGG CERT

IAD

be implemented in the design to fill the risk gap.

MSA

2. As per IEC-61511 section 11.2.10; A device used to perform part of a safety

instrumented function shall not be used for basic process control purposes.

3. As per ISA-TR84.00.02 ;Frequently, multiple safety functions are included in a single

ESD logic solver. Generally, the safety function case with the highest SIL requirement
ISSUED FOR REVIEW

will be the case that determines whether the logic solver meets performance
DESCRIPTION

requirements..

4. When the required risk reduction factor (RRF) on LOPA is above 1 but below or equal
to 10 then the interlock may be implemented in BPCS System . However this would
necessitate the use of independent sensor, output relay and separate I/O module
from the original BPCS indication and alarm channel used.
JO/EWO

5. System architecture for each SIF shall be designed in accordance with the
10-09111-
0002

requirements of standards identified in section 6 of this document.

DATE
09/29/19

6. Design contractor to implement segregation requirements identified in Appendix D

notes ; which is required to take credit for specific IPLs.
NO.
REV

DISCIPLINE
ENGINEER
MSA 5. CONCLUSION
09/10/19
DATE:
PROJECT
ENGINEER
The Risk Reduction required for each SIF for the safety of personal; assets /equipment &
IAD

DATE:
09/10/19 environment shall be implemented in the design to meet the required risk target.
CERTIFIED
AOZ
Recommendations shall be implemented as per section 12 of this document.
09/10/19
DATE:
CONSTRUCTION
AGENCY
6. APPENDICES
09/10/19
DATE:
OPERATIONS
Appendix A: Attendance Sheet
OSM Appendix B: Process & Instrumentation Diagrams.
09/10/19
DATE:
Appendix C : SAEP-250
CONTROL NUMBER
VERIFICATION

Appendix D: LOPA Worksheets

EDSD

Appendix E: Cause & Effect

DATE:
BY:
REVISIONCERTIFICATION

APPROVAL/CERTIFICATION REQUIREMENTS,
THIS INDICATES THAT REV. NO.__________
CERTIFICATE

OF THIS DRAWING IS COVERED, FOR ALL

BY DRAWING COMPLETION CERTIFICATE

A

_____________________
(DCC) NO. 10-0010-09111-0002

` SIL ASSESSMENT STUDY REPORT DWG.TYPE PLANT NO. INDEX DRAWING NO. SHT.NO. REV.NO.
REVISION

DE BOTTLENECK TANAJIB WATER HANDLING DOC

G80 A TE - 498623 5
WET CRUDE FACILITIES ONSHORE OF A
0
TANAJIB SAUDI ARABIA JO / EWO:
10-09111-0002 5
EDSD/2616-0399.doc