Академический Документы
Профессиональный Документы
Культура Документы
IDM Engineering
Torridon House
73-75 Regent Quay
Aberdeen
AB11 5AR
United Kingdom
HSE BOOKS
Crown copyright 2002
Applications for reproduction should be made in writing to:
Copyright Unit, Her Majestys Stationery Office,
St Clements House, 2-16 Colegate, Norwich NR3 1BQ
ii
EXECUTIVE SUMMARY
A study has been undertaken on behalf of the HSE by IDM Engineering Ltd, to determine the
credible failure modes and their direct effects as associated with typical single and dual
completion gas lift designs as utilised in the UK North Sea. The study has been undertaken with
the understanding that both wellhead configurations would be analysed under normal operating
conditions. No consideration was given for any installation, workover or abandonment activities
in connection with the wells.
To ensure that a typical wellhead and tree arrangement was modelled, vendor information in the
form of general arrangement drawings and associated information was reviewed from various
manufacturers. A representative single and dual completion model was generated from this
information in conjunction with the expertise associated within the project team.
In order to identify the key components and seal arrangements that required consideration
during the FMECA, the primary gas path was charted for both representative models. Each
model was then broken up into zones to help facilitate the FMECA. Primary, secondary and
tertiary barriers (where appropriate) were then identified.
With the aid of zone specific drawings the FMECA was carried out for each representative
model. The FMECA was carried out up to the side pocket mandrels in the production tubing for
completeness, however, the main focus of the study was above the dual bore upper packer
separating the upper and lower A annulus.
The results of the FMECA for the single and dual completion model are detailed in Appendix F
& E respectively.
Both FMECAs highlighted failure modes with the potential to leak injection gas to the
atmosphere. Further leak sources were identified arising from component/sealing arrangement
failures. These failures could in turn, cause injection gas to leak into the B annulus and C
annulus (single completion only).
iii
iv
CONTENTS
1. OBJECTIVE .............................................................................................................. 1
2. INTRODUCTION ...................................................................................................... 2
2.1. BACKGROUND ................................................................................................2
2.2. GAS LIFT ..........................................................................................................2
2.3. SINGLE AND DUAL COMPLETION GAS LIFT MODELS ..............................3
3. REPRESENTATIVE MODELS................................................................................. 5
3.1. MODEL DESCRIPTION ...................................................................................5
3.2. OPERATING PARAMETERS ..........................................................................6
3.3. MODEL BOUNDARIES ....................................................................................6
3.3.1. Dual Completion Model Boundaries ...................................................6
3.3.2. Single Completion Model Boundaries.................................................7
3.3.3. General Model Boundaries...................................................................7
4. METHODOLOGY ..................................................................................................... 8
4.1. ASSUMPTIONS ................................................................................................8
4.2. APPROACH......................................................................................................8
4.2.1. Representative Model Identification....................................................8
4.2.2. FMECA ....................................................................................................9
5. RESULTS ............................................................................................................... 12
5.1. DUAL COMPLETION FMECA .......................................................................12
5.2. SINGLE COMPLETION FMECA ....................................................................12
6. ACKNOWLEDGEMENTS....................................................................................... 13
7. REFERENCE LIST................................................................................................. 14
8. BIBLIOGRAPHY ..................................................................................................... 16
v
APPENDIX F - SINGLE COMPLETION FMECA RESULTS....................................... 146
vi
1. OBJECTIVE
The objective of this study is to identify the failure modes that can lead to leakage of gas from
representative single and dual completion gas lift wells.
1
2. INTRODUCTION
2.1. BACKGROUND
As part of normal offshore oil and gas operations gas can be injected into the production tubing
of a well to assist in the recovery of the hydrocarbon fluids. A normal feature of this process is
the mass of pressurised hydrocarbon gas that resides in the well annulus. The well annulus
differs from typical topside process plant in that it does not have a means to vent or blowdown
its inventory of gas in an emergency, only to contain the gas within the annulus its self. The
mass of pressurised gas is typically in the range of 0.5 to 12 metric tonnes. The gas represents a
considerable hazard to platform personnel through fire and explosion. Of ultimate interest is the
magnitude of this risk. It must be noted that the hazard is created as a function of injecting gas
into the well annulus. The hazard does not originate directly from the reservoir. Many
continuous gas lift wells, will cease to flow if the supply of compressed gas from topside
compression is lost.
This study has been commissioned to identify typical failure modes associated with typical gas
lift configurations. Ultimately a representative frequency of gas leakage from a typical gas lift
well can be established.
The purpose of this study is to develop a representative single and dual completion gas lift well
and to identify typical failure modes associated with the equipment that is used in the well
configuration.
Results from this report will be used in future studies to identify failure and/or leakage rates for
equipment used in these types of wells.
Artificial lift is a commonly used methodology for enhancing reservoir recovery rates, gas lift
being by far the most utilised technique. The principle of gas lift is to simply supplement the
natural flow process of hydrocarbon fluids by adding additional gas into the produced fluid to
reduce the hydrostatic head component and hence, the back pressure on the formation.
There are essentially two different methods of gas lift, which are utilised offshore to enhance or
stimulate wells to ensure recover well fluids:
Continuous gas lift is essential for wells, which under normal operating conditions would not
flow. This is due to an ageing well which is off plateau, as a result the reservoir pressure having
dropped considerably and/or increased viscosity of the hydrocarbon fluids.
The injection gas is normally supplied in a closed loop system, the gas is fed from the gas
separation, compression and drying (if necessary) process facilities to the well as required.
2
The lift gas is normally injected down the annulus and into the production tubing through the
side pocket mandrels. In certain circumstances, the gas is supplied via annulus tubing into the
lower well annulus and injected into the production tubing string as before.
The other less common concept is the intermittent gas lift system. This is used to produce low
volumes of liquid (<350 stb/d) from wells with low Bottom Hole Flow Pressure (BHFP) (<0.1
psi/ft). In this case, the liquid is produced in slugs by periodically opening a motorized flowline
valve and allowing the gas accumulated in the annulus to suddenly expand through the side
pocket mandrels to surface, bringing the accumulated liquids with it. A standing valve is often
used to prevent the gas from flowing into the formation.
The models used in this study will assume that continuous gas lift is required to maintain the
flow of hydrocarbons under normal operating conditions.
There are four basic configurations of gas lift well used in the UK sector of the North Sea,
principally:
Single Completion
Dual Completion
Single Tree Dual-String Completion
Concentric Completion
In the first, and simpler configuration (Figure 1), gas is routed through a wellhead annular valve
and into the A annulus. The gas passes through the annulus downhole safety valve (DHSV)
located in the dual bore upper packer. The lower packer prevents gas from flowing further down
the annulus. Gas is injected into the production tubing at various depths between upper and
lower packers via the side packer mandrels. In this configuration the A annulus is completely
filled with gas from the tubing hanger to the lower side pocket mandrel. There is a facility for
isolating the upper and lower A annulus by closing the annulus DHSV.
The more complex dual completion (Figure 2) routes the gas through an annulus wing valve
mounted on the Christmas tree, down through the upper and lower master valves, and into the
annulus pipe work via an in line DHSV, to a point directly below the dual bore upper packer.
Gas is injected into the production tubing at various depths between upper and lower packers
via the side pocket mandrels. In this configuration and, under normal operation only the lower
A annulus space between the upper and lower packers is filled with gas. The upper A
annulus contains completion fluid.
(1)
The single tree dual-string completion is essentially a hybrid between the single and dual
completion designs. Similarly to the dual completion, annulus tubing is utilised to inject the gas
into the lower well annulus below the dual bore upper packer. This removes the inventory of gas
that would normally reside under the tubing hanger in a typical single completion design. The
gas itself would still be injected via the A annulus.
(1)(2)
The concentric design, which also uses a single tress essentially, is a modified single
completion design. Lift gas is injected through the tubing spool and down the annulus created
by the addit ional casing string within the production casing.
3
In order to represent the most onerous circumstances offshore, the single and dual completions
models are considered further in this study.
4
3. REPRESENTATIVE MODELS
(7)
It is recognised that there are no standard representations of single or dual completion gas lift
wells. As a consequence there are many configurations in terms of well layout and equipment
design. Despite this, the general function of using gas to reduce the hydrostatic head on the
production tubing and promote a flow of well fluids remains the same. The variations in
configuration and design originate from three key areas.
The representative models for the single and dual completion models were developed from the
review of a variety of general arrangement drawings, taking into account the various
considerations discussed above.
Figure 1 represents a schematic of the single completion considered for this study, the following
features were considered:
Figure 2 represents a schematic of the dual completion considered for this study, the following
features were considered:
None active-wing valves on the tree have been included for both annulus and
production.
A compact wellhead design was considered as opposed to separate tubing spools.
9 5/8 casing is utilised for the production casing with a 7 liner downhole.
A VR plug was modelled in the A annulus to model a particular case where there is
maintenance of an annular valve.
5
Both the annulus and production wing valves and upper master valves are automated
(fail closed), and linked accordingly to the ESD system.
Tie down bolts have been utilised for the tubing hanger to tubing spool.
A dual bore upper packer is utlised to separate the upper and lower annulus.
API standard 6A (seventeenth edition) has been used as the basis in the development of the
representative models.
The primary gas paths for the dual completion and single completion were then determined, key
items providing boundaries for each zone were described using consistent terminology.
(8) to (13)
In order to facilitate the FMECA, the schematic drawings were split down into general
area zones (see glossary) were described by linking these items in pairs (Appendix A & B).
Drawings were then generated for each zone for the dual completion detailing all major
components identified in Appendix A to facilitate the FMECA (Appendix G). Only the
drawings of the major differences between the dual and single models were generated for the
single completion arrangement as a result of duplication of similar components (Appendix H).
It should be noted that all metal to metal, threaded connections and components were
considered but not highlighted on the drawings in the same way as the sealing arrangements
above.
The model considers dry gas composed of 95% Methane and the balance being a combination
of Ethane and Propane. Gas well entry temperature is assumed circa 82C with an entry
pressure of 1500 psi.
The model represents the normal continuous producing condition. Well intervention, work-over,
inspection, test, maintenance operations, and any non-normal well conditions, including
initiating events that do not originate from the well model, do not form part of this study.
6
Annulus assembly up to the side pocket mandrels.
Secondary seal barriers.
Production tubing up to the production wing valve.
The boundaries include some downhole components. This was because all secondary and
tertiary barriers were considered. Failure of some primary barriers downhole, result in annulus
spaces around the wellhead becoming wetted by gas. Subsequent barrier failure can then result
in loss of containment topsides.
7
4. METHODOLOGY
4.1. ASSUMPTIONS
The operator ensures suitable training and supervision (as appropriate) to all individuals
operating on or around the wellhead.
Maintenance brings the equipment into the As Good As New (AGAN) condition.
The requirements of DCR Well examination Legislation are being effectively applied.
The initial suitability of the equipment is correct in terms of its design limits, and
capability to withstand any reasonably foreseeable non-normal events.
All seals and containment components are suitable for typical gas lift tree ratings ie
(3,000, 5,000, 6000 psi etc).
Lockdown bolts are used rather than a lockdown ring for the tubing hanger on both
models.
(6)
The downhole safety valves utilised in the single and dual completions are considered
to be tubing retrievable and not wireline retrievable.
4.2. APPROACH
Initially the primary gas routing was established, from the point at which the gas enters the tree,
to a point where the gas and the well fluids leaves the tree.
8
The primary gas paths for the dual completion and single completion were then determined, key
items was described using a consistent terminology (Section 3).
General area zones were described by linking these items into pairs. In order to ensure that the
FMECA remains focused consideration has to be given to all sources of leakage; therefore there
was a degree of overlap when looking at each zone in turn. This is highlighted in the FMECA
results (Appendix E & F) in italics and ensures that there are no working joints (see glossary).
(14) to (18
Further examination of drawings was then undertaken to describe the primary, secondary
and tertiary barriers (see glossary) as described in Appendix A & B. Once the location of the
key mechanical joints and seals was complete, a description of each joint configuration and type
was made.
(3)(5)
Seal descriptions and details of the following segments are described in Appendix C & D
inclusive.
All elastomeric/polymeric seals were categorised into the following types as a result of sealing
arrangements being very different between manufacturers, even though the type of seal is
similar.
Compression
Parallel
Face
The preparation work was complete and the FMECA could commence.
4.2.2. FMECA
(19)
The FMECA was conducted in general accordance with BS 5760 part 5 (1991). Taking each
zone in turn, the mechanical joints forming the barriers between the well fluids and atmosphere,
(primary, secondary and tertiary) were examined in terms of their configuration, components
and function. Using engineering knowledge and experience, the credible failure modes, their
causes and their effect where discussed and recorded as appropriate.
System This is a defined set of components or an assembly that forms part of the overall gas
lift well. The systems have been broken down and referenced as zones.
9
Sub system - The sub systems are the major component assemblies associated with each
zone. It is the sub systems that are subjected to the FMECA.
Function The function of each sub system is described in terms of its primary or foremost
role. There can be more than one function for each sub system.
Failure This provides an outline as to where the credible failures are likely to occur within
the sub system. This FMECA has focused on the mechanical joints and seal assemblies of the
sub systems. For example bonnet seal failure leads to one consideration as to the ways in
which the seal can fail.
Cause This outlines the most likely reasons leading to failure. There can be several effects
originating from a single cause. In the example of the bonnet seal then as one example, the
bolts may be incorrectly installed.
Effect Provides a description as to what is likely to occur to the mechanical joints and seal
assemblies if the cause manifests itself. In the example of bolts being incorrectly installed, there
may be several effects, depending upon either over tightening or under tightening the bolts.
Symptoms What evidence of the effect will exist? Would the symptom reveal the failure
immediately or over a period of time? Would it be visible or audible to an operator? Or would
the failure remain unrevealed perhaps for many years?
For example where a joint has been incorrectly made perhaps using wrong materia ls or
techniques, then it may remain undetected. The integrity of the joint is not to the design intent
and it may remain as a weak point that we are not aware of until failure occurs (if it occurs at
all).
Mitigation Prior to ranking the probability of occurrence, the normal or usual practices of
design, construction, installation, commissioning and operations need to be considered. Only the
primary mitigating factors are recorded. For example the use of ISO 9001 as a quality assurance
standard requires that many aspects of design, manufacture, inspection and test are considered
and formally managed. This does not guarantee that failures will not occur, but does provide
confidence that the probability of occurrence should be reduced. The integrity and effectiveness
of such standards, systems and procedures has not been considered.
Using a qualitative approach, each failure consequence was ranked in terms of its local effect.
A single barrier primary seal failure that would result in a direct loss of containment is ranked as
a high criticality. Conversely, failure of a primary barrier that results in a secondary barrier
becoming wetted is considered to be less critical. The consequence is ranked at one of five
levels.
5 Full cross sectional area failure of a major barrier (seals or components) leading directly to
loss of containment.
4 Full cross sectional area failure of a minor barrier (seals or components) leading directly to
loss of containment.
3 Major seal failure, leading to loss of primary containment that should be detectable by an
operator or the F&G systems if a subsequent seal fails and containment is lost.
10
2 Part seal failure, leading to a loss of primary containment that is unlikely to be detectable by
an operator or the F&G systems if subsequent seals fail.
1 Minor Seal failure, (perished, weeping) leading to a loss of primary containment that would
wet the secondary barriers or cause a fugitive emission to atmosphere.
Using a qualitative approach, each failure was ranked in terms of its probability of occurrence,
when considering all assumptions of the model. The probability is ranked at one of five levels.
The criticality of each failure mode and effect was then detailed in the criticality section of
Figure 3 in the format consequence.probability. This enables the screening of the less critical
events and sets the seen for any future leak frequency analysis.
11
5. RESULTS
The results of the FMECA for the dual completion model are detailed in Appendix E.
It can be noted that even though the dual completion zone drawings (Appendix G) cover zones
1 to 20, the FMECA only covered down to the side pocket mandrels in the production tubing.
This was carried out for completeness, the study was only concerned with any leakage in above
the dual bore upper packer. The results dictated that even though the original focus was purely
on the leakage of injection gas below the tubing hanger in the upper A annulus. There were
some expected failure modes leading to potential leaks to atmosphere from the xmas tree and
the wellhead configuration. Certain failure modes dictated leakage of injection gas into the B
annulus providing additional potential leak sources to atmosphere.
The results of the FMECA for the single completion model are detailed in Appendix F.
It was noted that even though the equipment was simpler in construction than that of the dual
completion, there were obvious similarities in the designs. As a result of this only the zones,
which were significantly different between the two completion designs, were completed
(Appendix H). Similarly to the dual completion the FMECA only covered down to the side
pocket mandrels in the production tubing, again for completeness. The single completion
pressurises both the upper and lower annulus as a result of injecting directly into the A annulus
under normal operating conditions. The results highlighted that certain components/sealing
arrangements in the dual completion model were secondary barriers, in the single completion
model the same items became primary barriers. The same as the dual completion, there were
some expected failure modes leading to potential leaks to atmosphere from the xmas tree and
the wellhead configuration. Certain failure modes dictated that injection gas could not only leak
into the B annulus but also the C annulus providing additional potential leak sources to
atmosphere.
12
6. ACKNOWLEDGEMENTS
The authors would like to acknowledge the individuals who contributed to this study:
Dr M Croft of The Robert Gordon University, Mr. J Da Costa of Hancoss Ltd. and
Mr H Hopper of Subsea Well Technology Ltd.
13
7. REFERENCE LIST
14
12. WELLHEAD AND XMAS TREE, STANDARD COMPLETION
Cooper Cameron
Drawing No.: SK-177568-01
15
8. BIBLIOGRAPHY
2. BP Exploration, Forties Artificial Lift Project, Shallow Gas Lift Course, 1989.
5. COMPLETION PRODUCTS
Halliburton
Second Edition.
16
14. HIGH ALLOY OCTG, NEW SM SERIES
Sumitomo Metals
17
9. GLOSSARY OF TERMS
Term Description
Primary Barrier Equipment or sealing arrangement providing
containment, which is in direct contact with either gas
or hydrocarbon fluids, under normal operating
conditions.
Secondary Barrier Equipment or sealing arrangement providing
containment, in the event of a primary barrier failure
under normal operating conditions.
Tertiary Barrier Equipment or sealing arrangement providing
containment, in the event of a primary and secondary
barrie r failure under normal operating conditions.
Zone Each model is broken down into discrete manageable
areas (zones) so that a detailed FMECA can be carried
out.
Working Joint A joint or section, which defines the boundary of a
zone. If the joint or section is not included within the
adjacent zone, the FMECA would have not considered
all permutations.
18
10. FIGURES
CONTENTS
Page
19
Figure 1 Single Completion Gas Lift Well Schematic
20
Figure 2 Dual Completion Gas Lift Well Schematic
21
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
22
APPENDIX A
23
MAJOR COMPONENTS OF THE DUAL COMPLETION MODEL USING A DUAL
BLOCK TREE ARRANGEMENT.
24
Secondary barrier components:
Tree cap
Production casing,
Production casing hanger seal to tubing spool,
Upper annulus tubing spool inner valve,
Upper annulus tubing spool outer valve,
Upper annulus tubing spool monitor and vent assembly,
25
VR plug & tertiary valve(s),
Tubing hanger seal to tubing spool,
Tubing spool downhole chemical injection line,
Tubing spool downhole safety valve control line,
Tubing hanger downhole safety valve control line lower packing gland,
Tubing hanger downhole chemical injection line lower packing gland,
(Possible connection between tubing spool and casing spool.)
B and C casing spool valves and associated equipment form tertiary barriers, and require
primary and secondary failures before being subjected to gas. This would require a triple
jeopardy event to realise a leak to the wellhead areas. These barriers are not considered
further.
Annulus tubing
Annulus bore dual bore upper packer.
26
Production casing hanger seal to the casing spool
B annulus valve & upper annulus spool monitor and vent assembly
VR plug
C annulus
Tertiary valve(s)
Secondary barrier components Not applicable gas already in annulus as function of gas lift.
Production tubing,
Production bore dual bore upper packer
Secondary barrier components Not applicable gas already in annulus as function of gas lift.
Production tubing,
Production downhole safety valve
27
Zone 1.16 1.17
28
Secondary barrier components:
Tree cap
29
APPENDIX B
30
MAJOR COMPONENTS OF THE SINGLE COMPLETION MODEL USING A SINGLE
BLOCK TREE ARRANGEMENT
31
Secondary barrier components:
B Annulus Casing,
B Annulus Tubing Spool Valves,
Upper annulus tubing spool monitor and vent assembly,
B annulus tubing spool to casing hanger seal.
32
Secondary barrier components
33
Zone 2.12 2.13
Tubing hanger,
Production bore,
Production lower master valve.
Tree Cap
34
APPENDIX C
35
SEAL DESCRIPTIONS FOR EACH ZONE - DUAL COMPLETION
3.0 Annulus Upper Master Valve (Fail Closed) Floating Gate (open)
3.1 Bonnet Seal (compression, bolts)
3.2 Stem Seal (parallel, screw cap)
3.3 Grease fitting (compression screw thread)
36
4.4 Back Seat (face, pressure) - ineffective
4.5 Stem seal (grease fitting secondary barrier)
1.0 Annulus Upper Master Valve (Fail Closed) Floating Gate (open)
1.1 Bonnet Seal (compression, bolts)
1.2 Stem Seal (parallel, screw cap)
1.3 Grease fitting (compression screw thread)
37
1.0 Annulus Lower Master Valve (Manual) Floating Gate (open)
1.1 Bonnet Seal (compression, bolts)
1.2 Stem Seal (parallel, screw cap)
1.3 Grease fitting (compression screw thread)
6.0 Tubing spool downhole chemical injection point packing gland & tertiary outer block
assembly
6.1 Packing Gland (tertiary seal - outer block assembly seal (compression, bolts), Gland to
Line Seal)
6.2 Gland to Tubing Spool Seal
8.0 Tubing spool downhole safety valve control packing gland & tertiary outlet block
assembly
8.1 Packing Gland (tertiary seal - outer block assembly seal (compression, bolts), Gland to
Line Seal)
8.2 Gland to Tubing Spool Seal
10.0 Tubing hanger downhole safety valve control line upper packing gland
10.1 Tubing hanger downhole safety valve control line upper packing gland (compression,
screw)
38
11.0 Tubing hanger downhole chemical injection line upper packing gland
11.1 Tubing hanger downhole chemical injection point upper packing gland (compression,
screw)
Production casing,
Production casing hanger seal to tubing spool,
Upper annulus tubing spool inner valve,
Upper annulus tubing spool outer valve,
Upper annulus tubing spool monitor and vent assembly,
VR plug & tertiary valve(s),
Tubing hanger seal to tubing spool,
Tubing spool downhole chemical injection line,
Tubing spool downhole safety valve control line,
Tubing hanger downhole safety valve control line lower packing gland,
Tubing hanger downhole chemical injection line lower packing gland,
(Possible connection between tubing spool and casing spool).
B and C casing spool valves and associated equipment form tertiary barriers, and require
primary and secondary failures before being subjected to gas. This would require a triple
jeopardy event to realise a leak to the wellhead areas. These barriers are not considered further.
5.0 Upper annulus tubing spool inner valve (Manual) (open) well producing, open
valves to take a sample
5.1 Ring Gasket (compression, bolts)
39
5.2 Bonnet Seal (compression, bolts)
5.3 Stem Seal (parallel, screw cap)
5.4 Grease fitting (compression, screw thread)
11.0 Tubing hanger downhole safety valve control line lower packing gland
11.1 Tubing hanger downhole safety valve control line lower packing gland (compression,
screw)
12.0 Tubing hanger downhole chemical injection line lower packing gland
12.1 Tubing hanger downhole chemical injection point lower packing gland (compression,
screw)
40
1.0 Annulus downhole safety valve (ADHSV Fail Closed) - (open)
1.1 Premium tapered tubing connection
1.2 Valve body
1.3 Valve piston/control line seal
Annulus tubing,
Annulus bore dual bore upper packer,
Tubing spool downhole chemical injection line,
Dual bore upper packer chemical injection line upper packing gland.
4.0 Dual bore upper packer chemical injection line upper packing gland
4.1 Dual bore upper packer chemical injection point upper packing gland (compression,
screw)
41
2.2 Premium Tapered Tubing Connection
2.3 Production casing
Production tubing,
Production bore dual bore upper packer.
42
2.2 Premium Tapered Tubing Connection
Production tubing,
Production downhole safety valve.
43
2.0 Production tubing and nipples
2.1 Production Tubing
2.2 Production Tubing Nipples
2.3 Premium Tapered Tubing Connection
44
Tubing spool downhole safety valve control packing gland & tertiary outlet block
assembly,
Tubing spool to tubing hanger seal,
Tubing hanger downhole safety valve control line upper packing gland,
Tubing hanger downhole chemical injection point upper packing gland,
Tubing spool downhole safety valve control line.
6.0 Tubing spool downhole chemical injection line packing gland & tertiary outer block
assembly
6.1 Packing Gland (tertiary seal - outer block assembly seal (compression, bolts), Gland to
Line Seal)
6.2 Gland to Tubing Spool Seal
8.0 Tubing spool downhole safety valve control packing gland & tertiary outlet block
assembly
8.1 Packing Gland (tertiary seal - outer block assembly seal (compression, bolts), Gland to
Line Seal)
8.2 Gland to Tubing Spool Seal
10.0 Tubing hanger downhole safety valve control line upper packing gland
10.1 Tubing hanger downhole safety valve control upper packing gland (compression,
screw)
11.0 Tubing hanger downhole chemical injection line upper packing gland
11.1 Tubing hanger downhole chemical injection point upper packing gland (compression,
screw)
45
1.3 Grease fitting (compression screw thread)
3.0 Production upper master valve (Fail Closed) Floating Gate (open)
3.1 Bonnet Seal (compression, bolts)
3.2 Stem Seal (parallel, screw cap)
3.3 Grease fitting (compression screw thread)
3.0 Production Upper Master Valve (Fail Closed) Floating Gate (open)
3.1 Bonnet Seal (compression, bolts)
3.2 Stem Seal (parallel, screw cap)
3.3 Grease fitting (compression screw thread)
46
6.3 Bonnet Seal (compression, bolts)
6.4 Back Seat (face, pressure) - ineffective
6.5 Stem seal (grease fitting secondary barrier)
Tree cap.
47
APPENDIX D
48
SEAL DESCRIPTIONS FOR EACH ZONE - SINGLE COMPLETION
3.0 Tubing Spool Side Valve (Fail Closed) Floating Gate (open)
3.1 Bonnet Seal (compression, bolts)
3.2 Stem Seal (parallel, screw cap)
3.3 Grease fitting (compression screw thread)
1.0 Tubing Spool Side Valve (Fail Closed) Floating Gate (open)
1.1 Bonnet Seal (compression, bolts)
1.2 Stem Seal (parallel, screw cap)
1.3 Grease fitting (compression screw thread)
49
4.0 Production tubing to tubing hanger seal
4.1 Premium Threaded Connection
7.0 Tubing hanger downhole safety valve control line lower packing gland (x2)
7.1 Tubing hanger downhole safety valve control line lower packing gland (compression,
screw)
8.0 Tubing hanger downhole chemical injection line lower packing gland
8.1 Tubing hanger downhole chemical injection line lower packing gland (compression,
screw)
12.0 Tubing spool side valve (Manual) (open) well producing, open valves to take a
sample
12.1 Ring Gasket (compression, bolts)
12.2 Bonnet Seal (compression, bolts)
12.3 Stem Seal (parallel, screw cap)
12.4 Grease fitting (compression, screw thread)
50
15.0 Tubing hanger downhole safety valve control line upper packing gland
15.1 Tubing hanger downhole safety valve control line upper packing gland (compression,
screw)
16.0 Tubing hanger downhole chemical injection line upper packing gland
16.1 Tubing hanger downhole chemical injection point upper packing gland (compression,
screw)
18.0 Tubing hanger downhole safety valve control packing gland & tertiary block assembly
18.1 Packing Gland (tertiary seal - outer block assembly seal (compression, bolts), Gland to
Line Seal)
18.2 Gland to Tubing Spool Seal
19.0 Tubing hanger downhole chemical injection packing gland & tertiary block assembly
19.1 Packing Gland (tertiary seal - outer block assembly seal (compression, bolts), Gland to
Line Seal)
19.2 Gland to Tubing Spool Seal
B Annulus Casing,
B Annulus Tubing Spool Valves,
Upper annulus tubing spool monitor and vent assembly,
B annulus tubing spool to casing hanger seal.
51
4.0 Intermediate Casing B Annulus
4.1 Intermediate Casing
4.2 Premium Tapered Tubing Connection
5.0 B Annulus Tubing Spool Valves (Manual) (open) well producing, open valves to take
a sample
5.1 Ring Gasket (compression, bolts)
5.2 Bonnet Seal (compression, bolts)
5.3 Stem Seal (parallel, screw cap)
5.4 Grease fitting (compression, screw thread)
1.0 Annulus downhole safety valve in the dual bore packer (Fail Closed) - (open)
1.1 Valve Body
1.2 Valve piston / control line seal (parallel)
1.3 Premium Tapered Tubing Connection
52
Secondary barrier components
53
Zone 2.9 2.10
54
2.0 Tubing hanger
2.1 Tubing Hanger Body
2.2 Premium Tapered Tubing Connection
Tubing hanger,
Production bore,
Production lower master valve.
6.0 Tubing spool downhole chemical injection point packing gland & tertiary outer block
assembly
6.1 Packing Gland (tertiary seal - outer block assembly seal (compression, bolts), Gland to
Line Seal)
6.2 Gland to Tubing Spool Seal
55
7.0 Tubing hanger tie down bolts and seals
7.1 Bolt Seals (Compression, screw)
8.0 Tubing spool downhole safety valve control packing gland & tertiary outlet block
assembly
8.1 Packing Gland (tertia ry seal - outer block assembly seal (compression, bolts), Gland to
Line Seal)
8.2 Gland to Tubing Spool Seal
10.0 Tubing hanger downhole safety valve control line upper packing gland
10.1 Tubing hanger downhole safety valve control line upper packing gland (compression,
screw)
11.0 Tubing hanger downhole chemical injection point upper packing gland
11.1 Tubing hanger downhole chemical injection point upper packing gland (compression,
screw)
3.0 Production upper master valve (Fail Closed) Floating Gate (open)
3.1 Bonnet Seal (compression, bolts)
3.2 Stem Seal (parallel, screw cap)
3.3 Grease fitting (compression screw thread)
56
SWAB valve,
Chemical injection valve
Production wing valve
Production non-active wing valve.
3.0 Production Upper Master Valve (Fail Closed) Floating Gate (open)
3.1 Bonnet Seal (compression, bolts)
3.2 Stem Seal (parallel, screw cap)
3.3 Grease fitting (compression screw thread)
Tree cap
57
APPENDIX E
58
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Designers and
Material specification of manufacturers to have
To contain the gas
seal incompatible with ISO quality systems in
1. Gas Check Valve - within the tree on loss of Bonnet seal leakage Seal incorrectly Gradually leaking over
Zone 1.1 to 1.2 body causing place. Offshore 2.2
Primary Barrier pressurisation in the (metal to metal joint) specified time
differential cell to be supervisors checks and
upstream pipework.
setup. balances i.e. permit to
work system etc.
Designers and
Dimensions, chemical
manufacturers to have
To contain the gas and mechanical
ISO quality systems in
1. Gas Check Valve - within the tree on loss of Bonnet seal leakage Wrong seal taken from properties similar to
Zone 1.1 to 1.2 N one place. Offshore 2.2
Primary Barrier pressurisation in the (metal to metal joint) stores actual specification,
supervisors checks and
upstream pipework. therefore no immediate
balances i.e. permit to
effect.
work system etc.
Employ competent
individuals and
appropriate supervision
To contain the gas
is available.
1. Gas Check Valve - within the tree on loss of Bonnet seal leakage Seal incorrectly
Zone 1.1 to 1.2 Effective seal not made Gas leak around seal 2.1
Primary Barrier pressurisation in the (metal to metal joint) installed
upstream pipework.
Pressure tested after
envelope broken.
Designers and
manufacturers to have
To contain the gas
Bolts installed ISO quality systems in
1. Gas Check Valve - within the tree on loss of Bonnet seal leakage
Zone 1.1 to 1.2 incorrectly - incorrect Joint integrity reduced None. place. Offshore 3.2
Primary Barrier pressurisation in the (metal to metal joint)
grade of bolt fitted supervisors checks and
upstream pipework.
balances i.e. permit to
work system etc.
59
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Employ competent
individuals and
To contain the gas
Bolts installed appropriate supervision
1. Gas Check Valve - within the tree on loss of Bonnet seal leakage Instantaneous leak from
Zone 1.1 to 1.2 incorrectly - bonnet Joint integrity reduced is available. 2.3
Primary Barrier pressurisation in the (metal to metal joint) bonnet
under tensioned
upstream pipework.
Pressure tested after
envelope broken.
Designers and
Dimensions, chemical
manufacturers to have
To contain the gas and mechanical
ISO quality systems in
1. Gas Check Valve - within the tree on loss of Failure of Ring Gasket Wrong seal taken from properties similar to
Zone 1.1 to 1.2 None place. Offshore 2.2
Primary Barrier pressurisation in the Seal stores actual specification,
supervisors checks and
upstream pipework. therefore no immediate
balances i.e. permit to
effect.
work system etc.
Designers and
Material specification of manufacturers to have
To contain the gas
seal incompatible with ISO quality systems in
1. Gas Check Valve - within the tree on loss of Failure of Ring Gasket Seal incorrectly Gradually increasing
Zone 1.1 to 1.2 body causing place. Offshore 2.2
Primary Barrier pressurisation in the Seal specified leak over time.
differential cell to be supervisors checks and
upstream pipework.
setup. balances i.e. permit to
work system etc.
60
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Employ competent
individuals and
appropriate supervision
To contain the gas
is available.
1. Gas Check Valve - within the tree on loss of Failure of Ring Gasket Seal incorrectly
Zone 1.1 to 1.2 Effective seal not made Gas leakage around seal 2.1
Primary Barrier pressurisation in the Seal installed
upstream pipework.
Pressure tested after
envelope broken.
Designers and
manufacturers to have
To contain the gas
Bolts installed ISO quality systems in
1. Gas Check Valve - within the tree on loss of Failure of Ring Gasket
Zone 1.1 to 1.2 incorrectly - incorrect Joint integrity reduced None place. Offshore 3.2
Primary Barrier pressurisation in the Seal
grade of bolt fitted supervisors checks and
upstream pipework.
balances i.e. permit to
work system etc.
Employ competent
individuals and
To contain the gas
Bolts installed appropriate supervision
1. Gas Check Valve - within the tree on loss of Failure of Ring Gasket Instantaneous leak from
Zone 1.1 to 1.2 incorrectly - bonnet Joint integrity reduced is available. 2.3
Primary Barrier pressurisation in the Seal bonnet
under tensioned
upstream pipework.
Pressure tested after
envelope broken.
61
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Designers and
Dimensions, chemical
manufacturers to have
To contain the gas and mechanical
ISO quality systems in
2. Connecting Pipework within the tree on loss of Failure of Ring Gasket Wrong seal taken from properties similar to
Zone 1.1 to 1.2 None place. Offshore 2.2
- Primary Barrier pressurisation in the Seal stores actual specification,
supervisors checks and
upstream pipework. therefore no immediate
balances i.e. permit to
effect.
work system etc.
Designers and
Material specification of manufacturers to have
To contain the gas
seal incompatible with ISO quality systems in
2. Connecting Pipework within the tree on loss of Failure of Ring Gasket Seal incorrectly Gradually increasing
Zone 1.1 to 1.2 body causing place. Offshore 2.2
- Primary Barrier pressurisation in the Seal specified leak over time.
differential cell to be supervisors checks and
upstream pipework.
setup. balances i.e. permit to
work system etc.
Employ competent
individuals and
appropriate supervision
To contain the gas
is available.
2. Connecting Pipework within the tree on loss of Failure of Ring Gasket Seal incorrectly
Zone 1.1 to 1.2 Effective seal not made Gas leakage around seal 2.1
- Primary Barrier pressurisation in the Seal installed
upstream pipework.
Pressure tested after
envelope broken.
62
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Designers and
manufacturers to have
To contain the gas
Bolts installed ISO quality systems in
2. Connecting Pipework within the tree on loss of Failure of Ring Gasket
Zone 1.1 to 1.2 incorrectly - incorrect Joint integrity reduced None place. Offshore 3.2
- Primary Barrier pressurisation in the Seal
grade of bolt fitted supervisors checks and
upstream pipework.
balances i.e. permit to
work system etc.
Employ competent
individuals and
To contain the gas
Bolts installed appropriate supervision
2. Connecting Pipework within the tree on loss of Failure of Ring Gasket Instantaneous leak from
Zone 1.1 to 1.2 incorrectly - bonnet Joint integrity reduced is available. 2.3
- Primary Barrier pressurisation in the Seal bonnet
under tensioned
upstream pipework.
Pressure tested after
envelope broken.
Designers and
To contain the gas
Material specification of manufacturers to have
within the tree on loss of
seal incompatible with ISO quality systems in
3. Annulus Wing Valve pressurisation in the Bonnet seal leakage Seal incorrectly Gradually leaking over
Zone 1.1 to 1.2 body causing place. Offshore 2.2
- Primary Barrier upstream pipework and (metal to metal joint) specified time
differential cell to be supervisors checks and
or on activation of
setup. balances i.e. permit to
platform ESD
work system etc.
Designers and
To contain the gas Dimensions, chemical
manufacturers to have
within the tree on loss of and mechanical
ISO quality systems in
3. Annulus Wing Valve pressurisation in the Bonnet seal leakage Wrong seal taken from properties similar to
Zone 1.1 to 1.2 None place. Offshore 2.2
- Primary Barrier upstream pipework and (metal to metal joint) stores actual specification,
supervisors checks and
or on activation of therefore no immediate
balances i.e. permit to
platform ESD effect.
work system etc.
63
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Employ competent
individuals and
To contain the gas
appropriate supervision
within the tree on loss of
is available.
3. Annulus Wing Valve pressurisation in the Bonnet seal leakage Seal incorrectly
Zone 1.1 to 1.2 Effective seal not made Gas leak around seal 2.1
- Primary Barrier upstream pipework and (metal to metal joint) installed
or on activation of
platform ESD
Pressure tested after
envelope broken.
Designers and
To contain the gas
manufacturers to have
within the tree on loss of
Bolts installed ISO quality systems in
3. Annulus Wing Valve pressurisation in the Bonnet seal leakage
Zone 1.1 to 1.2 incorrectly - incorrect Joint integrity reduced None. place. Offshore 3.2
- Primary Barrier upstream pipework and (metal to metal joint)
grade of bolt fitted supervisors checks and
or on activation of
balances i.e. permit to
platform ESD
work system etc.
Employ competent
To contain the gas
individuals and
within the tree on loss of
Bolts installed appropriate supervision
3. Annulus Wing Valve pressurisation in the Bonnet seal leakage Instantaneous leak from
Zone 1.1 to 1.2 incorrectly - bonnet Joint integrity reduced is available. 2.3
- Primary Barrier upstream pipework and (metal to metal joint) bonnet
under tensioned
or on activation of
Pressure tested after
platform ESD
envelope broken.
64
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Designers and
To contain the gas
Material specification of manufacturers to have
within the tree on loss of
seal incompatible with ISO quality systems in
1. Annulus Wing Valve pressurisation in the Seal incorrectly Gradually leaking over
Zone 1.2 to 1.3 Bonnet Seal Leakage body causing place. Offshore 2.2
- Primary Barrier upstream pipework and specified time
differential cell to be supervisors checks and
or on activation of
setup. balances i.e. permit to
platform ESD
work system etc.
Designers and
To contain the gas Dimensions, chemical
manufacturers to have
within the tree on loss of and mechanical
ISO quality systems in
1. Annulus Wing Valve pressurisation in the Wrong seal taken from properties similar to
Zone 1.2 to 1.3 Bonnet Seal Leakage None place. Offshore 2.2
- Primary Barrier upstream pipework and stores actual specification,
supervisors checks and
or on activation of therefore no immediate
balances i.e. permit to
platform ESD effect.
work system etc.
65
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Employ competent
individuals and
To contain the gas
appropriate supervision
within the tree on loss of
is available.
1. Annulus Wing Valve pressurisation in the Seal incorrectly
Zone 1.2 to 1.3 Bonnet Seal Leakage Effective seal not made Gas leak around seal 2.1
- Primary Barrier upstream pipework and installed
or on activation of
platform ESD
Pressure tested after
envelope broken.
Designers and
To contain the gas
manufacturers to have
within the tree on loss of
Bolts installed ISO quality systems in
1. Annulus Wing Valve pressurisation in the
Zone 1.2 to 1.3 Bonnet Seal Leakage incorrectly - incorrect Joint integrity reduced None. place. Offshore 3.2
- Primary Barrier upstream pipework and
grade of bolt fitted supervisors checks and
or on activation of
balances i.e. permit to
platform ESD
work system etc.
Employ competent
To contain the gas
individuals and
within the tree on loss of
Bolts installed appropriate supervision
1. Annulus Wing Valve pressurisation in the Instantaneous leak from
Zone 1.2 to 1.3 Bonnet Seal Leakage incorrectly - bonnet Joint integrity reduced is available. 2.3
- Primary Barrier upstream pipework and bonnet
under tensioned
or on activation of
Pressure tested after
platform ESD
envelope broken.
66
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Slag
Designers and
inclusion/laminations,
2. Annulus Bore - To maintain annulus Stress raisers and crack manufacturers to have
Zone 1.2 to 1.3 Tree block failure Manufacturing defect cold laps and other 1.2
Primary Barrier pressure integrity initiators ISO quality systems in
geometric imperfections
place.
in the forged block.
67
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Designers and
To contain the gas
Material specification of manufacturers to have
within the tree on loss of
3. Annulus Upper seal incompatible with ISO quality systems in
pressurisation in the Seal incorrectly Gradually leaking over
Zone 1.2 to 1.3 Master Valve - Primary Bonnet Seal Leakage body causing place. Offshore 2.2
upstream pipework and specified time
Barrier differential cell to be supervisors checks and
or on activation of
setup. balances i.e. permit to
platform ESD
work system etc.
Designers and
To contain the gas Dimensions, chemical
manufacturers to have
within the tree on loss of and mechanical
3. Annulus Upper ISO quality systems in
pressurisation in the Wrong seal taken from properties similar to
Zone 1.2 to 1.3 Master Valve - Primary Bonnet Seal Leakage None place. Offshore 2.2
upstream pipework and stores actual specification,
Barrier supervisors checks and
or on activation of therefore no immediate
balances i.e. permit to
platform ESD effect.
work system etc.
Employ competent
individuals and
To contain the gas
appropriate supervision
within the tree on loss of
3. Annulus Upper is available.
pressurisation in the Seal incorrectly
Zone 1.2 to 1.3 Master Valve - Primary Bonnet Seal Leakage Effective seal not made Gas leak around seal 2.1
upstream pipework and installed
Barrier
or on activation of
platform ESD
Pressure tested after
envelope broken.
68
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Designers and
To contain the gas
manufacturers to have
within the tree on loss of
3. Annulus Upper Bolts installed ISO quality systems in
pressurisation in the
Zone 1.2 to 1.3 Master Valve - Primary Bonnet Seal Leakage incorrectly - incorrect Joint integrity reduced None. place. Offshore 3.2
upstream pipework and
Barrier grade of bolt fitted supervisors checks and
or on activation of
balances i.e. permit to
platform ESD
work system etc.
Employ competent
To contain the gas
individuals and
within the tree on loss of
3. Annulus Upper Bolts installed appropriate supervision
pressurisation in the Instantaneous leak from
Zone 1.2 to 1.3 Master Valve - Primary Bonnet Seal Leakage incorrectly - bonnet Joint integrity reduced is available. 2.3
upstream pipework and bonnet
Barrier under tensioned
or on activation of
Pressure tested after
platform ESD
envelope broken.
69
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Pressure testing at
manufactures to ensure
integrity of gate/seat.
Provides isolation of
Maintenance and
annulus from tree cap
4. Annulus SWAB Poor seal between gate Gate/seat scored or Gas passing into upper Pressurised gas under inspection by
Zone 1.2 to 1.3 other than under any 1.5
Valve - Primary Barrier and seat damaged bore under tree cap tree cap manufacturer including
well intervention
periodic testing
conditions
offshore.
Designers and
Provides isolation of Material specification of manufacturers to have
annulus from tree cap seal incompatible with ISO quality systems in
4. Annulus SWAB Poor seal between seat Seal incorrectly Gradually leaking over
Zone 1.2 to 1.3 other than under any body causing place. Offshore 1.1
Valve - Primary Barrier seal and valve body specified time
well intervention differential cell to be supervisors checks and
conditions setup. balances i.e. permit to
work system etc.
Designers and
Dimensions, chemical
Provides isolation of manufacturers to have
and mechanical
annulus from tree cap ISO quality systems in
4. Annulus SWAB Poor seal between seat Wrong seal taken from properties similar to Gradually increasing
Zone 1.2 to 1.3 other than under any place. Offshore 1.2
Valve - Primary Barrier seal and valve body stores actual specification, leak over time.
well intervention supervisors checks and
therefore no immediate
conditions balances i.e. permit to
effect.
work system etc.
70
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Provides isolation of
Tree has been operating
annulus from tree cap
4. Annulus SWAB Poor seal between seat Seal incorrectly Seal incorrectly in excess of 6 months,
Zone 1.2 to 1.3 other than under any None. 1.2
Valve - Primary Barrier seal and valve body specified specified in design initial teething problems
well intervention
have been ironed out.
conditions
Employ competent
individuals and
Provides isolation of appropriate supervision
annulus from tree cap is available.
4. Annulus SWAB Poor seal between seat Seal incorrectly
Zone 1.2 to 1.3 other than under any Effective seal not made Gas leak around seal 1.1
Valve - Primary Barrier seal and valve body installed
well intervention
conditions
Pressure tested after
envelope broken.
Designers and
Provides isolation of Material specification of manufacturers to have
annulus from tree cap seal incompatible with ISO quality systems in
4. Annulus SWAB Bonnet seal leakage Seal incorrectly Gradually leaking over
Zone 1.2 to 1.3 other than under any body causing place. Offshore 2.2
Valve - Primary Barrier (metal to metal joint) specified time
well intervention differential cell to be supervisors checks and
conditions setup. balances i.e. permit to
work system etc.
Designers and
Dimensions, chemical
Provides isolation of manufacturers to have
and mechanical
annulus from tree cap ISO quality systems in
4. Annulus SWAB Bonnet seal leakage Wrong seal taken from properties similar to
Zone 1.2 to 1.3 other than under any None place. Offshore 2.2
Valve - Primary Barrier (metal to metal joint) stores actual specification,
well intervention supervisors checks and
therefore no immediate
conditions balances i.e. permit to
effect.
work system etc.
Provides isolation of
Tree has been operating
annulus from tree cap
4. Annulus SWAB Bonnet seal leakage Seal incorrectly Seal incorrectly in excess of 6 months,
Zone 1.2 to 1.3 other than under any None. 2.2
Valve - Primary Barrier (metal to metal joint) specified specified in design initial teething problems
well intervention
have been ironed out.
conditions
Employ competent
individuals and
Provides isolation of appropriate supervision
annulus from tree cap is available.
4. Annulus SWAB Bonnet seal leakage Seal incorrectly
Zone 1.2 to 1.3 other than under any Effective seal not made Gas leak around seal 2.1
Valve - Primary Barrier (metal to metal joint) installed
well intervention
conditions
Pressure tested after
envelope broken.
71
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Provides isolation of
Employ competent
annulus from tree cap Bolts installed
4. Annulus SWAB Bonnet seal leakage Sealing arrangement individuals and
Zone 1.2 to 1.3 other than under any incorrectly - bolts Joint integrity reduced 3.3
Valve - Primary Barrier (metal to metal joint) unevenly energised appropriate supervision
well intervention unevenly tensioned
is available.
conditions
Designers and
Provides isolation of manufacturers to have
annulus from tree cap Bolts installed ISO quality systems in
4. Annulus SWAB Bonnet seal leakage
Zone 1.2 to 1.3 other than under any incorrectly - incorrect Joint integrity reduced None. place. Offshore 3.2
Valve - Primary Barrier (metal to metal joint)
well intervention grade of bolt fitted supervisors checks and
conditions balances i.e. permit to
work system etc.
Provides isolation of
Employ competent
annulus from tree cap Bolts installed
4. Annulus SWAB Bonnet seal leakage Seal distortion leading to individuals and
Zone 1.2 to 1.3 other than under any incorrectly - bonnet over Joint integrity reduced 2.3
Valve - Primary Barrier (metal to metal joint) progressive leakage. appropriate supervision
well intervention tensioned
is available.
conditions
Employ competent
Provides isolation of individuals and
annulus from tree cap Bolts installed appropriate supervision
4. Annulus SWAB Bonnet seal leakage Instantaneous leak from
Zone 1.2 to 1.3 other than under any incorrectly - bonnet Joint integrity reduced is available. 2.3
Valve - Primary Barrier (metal to metal joint) bonnet
well intervention under tensioned
conditions Pressure tested after
envelope broken.
72
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Cartridge nose seal Employ competent
To provide a controlled
5. Chemical Injection failure, annulus gas Cartridge not fully Gas leakage around individuals and
Zone 1.2 to 1.3 entry point for chemical None. 1.1
Valve - Primary Barrier leakage past cartridge tightened cartridge walls appropriate supervision
injection
wall is available.
Designers and
Material specification of manufacturers to have
To provide a controlled seal incompatible with ISO quality systems in
5. Chemical Injection Seal incorrectly Gradually leaking over
Zone 1.2 to 1.3 entry point for chemical Failure of bonnet seal body causing place. Offshore 2.2
Valve - Primary Barrier specified time
injection differential cell to be supervisors checks and
setup. balances i.e. permit to
work system etc.
Designers and
Dimensions, chemical
manufacturers to have
and mechanical
To provide a controlled ISO quality systems in
5. Chemical Injection Wrong seal taken from properties similar to
Zone 1.2 to 1.3 entry point for chemical Failure of bonnet seal None place. Offshore 2.2
Valve - Primary Barrier stores actual specification,
injection supervisors checks and
therefore no immediate
balances i.e. permit to
effect.
work system etc.
Employ competent
individuals and
appropriate supervision
To provide a controlled is available.
5. Chemical Injection Seal incorrectly
Zone 1.2 to 1.3 entry point for chemical Failure of bonnet seal Effective seal not made Gas leak around seal 2.1
Valve - Primary Barrier installed
injection
73
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Designers and
manufacturers to have
To provide a controlled Bolts installed ISO quality systems in
5. Chemical Injection
Zone 1.2 to 1.3 entry point for chemical Failure of bonnet seal incorrectly - incorrect Joint integrity reduced None. place. Offshore 3.2
Valve - Primary Barrier
injection grade of bolt fitted supervisors checks and
balances i.e. permit to
work system etc.
Employ competent
To provide a controlled Bolts installed
5. Chemical Injection Seal distortion leading to individuals and
Zone 1.2 to 1.3 entry point for chemical Failure of bonnet seal incorrectly - bonnet over Joint integrity reduced 2.3
Valve - Primary Barrier progressive leakage. appropriate supervision
injection tensioned
is available.
Employ competent
individuals and
To provide a controlled Bolts installed appropriate supervision
5. Chemical Injection Instantaneous leak from
Zone 1.2 to 1.3 entry point for chemical Failure of bonnet seal incorrectly - bonnet Joint integrity reduced is available. 2.3
Valve - Primary Barrier bonnet
injection under tensioned
Pressure tested after
envelope broken.
Designers and
Dimensions, chemical
manufacturers to have
and mechanical
To provide a controlled ISO quality systems in
5. Chemical Injection Failure of Ring Gasket Wrong seal taken from properties similar to
Zone 1.2 to 1.3 entry point for chemical None place. Offshore 2.2
Valve - Primary Barrier Seal stores actual specification,
injection supervisors checks and
therefore no immediate
balances i.e. permit to
effect.
work system etc.
74
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Designers and
Material specification of manufacturers to have
To provide a controlled seal incompatible with ISO quality systems in
5. Chemical Injection Failure of Ring Gasket Seal incorrectly Gradually increasing
Zone 1.2 to 1.3 entry point for chemical body causing place. Offshore 2.2
Valve - Primary Barrier Seal specified leak over time.
injection differential cell to be supervisors checks and
setup. balances i.e. permit to
work system etc.
Employ competent
individuals and
appropriate supervision
To provide a controlled is available.
5. Chemical Injection Failure of Ring Gasket Seal incorrectly
Zone 1.2 to 1.3 entry point for chemical Effective seal not made Gas leakage around seal 2.1
Valve - Primary Barrier Seal installed
injection
Designers and
manufacturers to have
To provide a controlled Bolts installed ISO quality systems in
5. Chemical Injection Failure of Ring Gasket
Zone 1.2 to 1.3 entry point for chemical incorrectly - incorrect Joint integrity reduced None place. Offshore 3.2
Valve - Primary Barrier Seal
injection grade of bolt fitted supervisors checks and
balances i.e. permit to
work system etc.
Employ competent
To provide a controlled Bolts installed
5. Chemical Injection Failure of Ring Gasket Seal distortion leading to individuals and
Zone 1.2 to 1.3 entry point for chemical incorrectly - bonnet over Joint integrity reduced 2.3
Valve - Primary Barrier Seal progressive leakage. appropriate supervision
injection tensioned
is available.
75
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Employ competent
individuals and
To provide a controlled Bolts installed appropriate supervision
5. Chemical Injection Failure of Ring Gasket Instantaneous leak from
Zone 1.2 to 1.3 entry point for chemical incorrectly - bonnet Joint integrity reduced is available. 2.3
Valve - Primary Barrier Seal bonnet
injection under tensioned
Pressure tested after
envelope broken.
Perform maintenance
To provide a controlled and inspection in
5. Chemical Injection Gas leaks from handle
Zone 1.2 to 1.3 entry point for chemical Stem seal leakage Wear and Tear Loss of full seal accordance with 2.4
Valve - Primary Barrier assembly
injection manufacturers
requirements.
Perform maintenance
To provide a controlled and inspection in
5. Chemical Injection Gas leaks from handle
Zone 1.2 to 1.3 entry point for chemical Stem seal leakage Packing not set correctlyLoss of full seal accordance with 2.4
Valve - Primary Barrier assembly
injection manufacturers
requirements.
Perform maintenance
To provide a controlled and inspection in
5. Chemical Injection Gas leaks from handle
Zone 1.2 to 1.3 entry point for chemical Stem seal leakage Wrong packing fitted Loss of full seal accordance with 2.4
Valve - Primary Barrier assembly
injection manufacturers
requirements.
Pressure testing at
manufactures to ensure
integrity of gate/seat.
Maintenance and
6. Annulus non-active To provide a facility for
Poor seal between gate Gate/seat scored or Gas passing into upper Pressurised gas under inspection by
Zone 1.2 to 1.3 wing valve - Primary injecting kill fluid into 1.5
and seat damaged bore under tree cap tree cap manufacturer including
Barrier the annulus.
periodic testing
offshore.
76
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Designers and
Material specification of manufacturers to have
6. Annulus non-active To provide a facility for seal incompatible with ISO quality systems in
Poor seal between seat Seal incorrectly Gradually leaking over
Zone 1.2 to 1.3 wing valve - Primary injecting kill fluid into body causing place. Offshore 1.1
seal and valve body specified time
Barrier the annulus. differential cell to be supervisors checks and
setup. balances i.e. permit to
work system etc.
Designers and
Dimensions, chemical
manufacturers to have
and mechanical
6. Annulus non-active To provide a facility for ISO quality systems in
Poor seal between seat Wrong seal taken from properties similar to Gradually increasing
Zone 1.2 to 1.3 wing valve - Primary injecting kill fluid into place. Offshore 1.2
seal and valve body stores actual specification, leak over time.
Barrier the annulus. supervisors checks and
therefore no immediate
balances i.e. permit to
effect.
work system etc.
Employ competent
individuals and
appropriate supervision
6. Annulus non-active To provide a facility for is available.
Poor seal between seat Seal incorrectly
Zone 1.2 to 1.3 wing valve - Primary injecting kill fluid into Effective seal not made Gas leak around seal 1.1
seal and valve body installed
Barrier the annulus.
Designers and
Material specification of manufacturers to have
6. Annulus non-active To provide a facility for seal incompatible with ISO quality systems in
Bonnet seal leakage Seal incorrectly Gradually leaking over
Zone 1.2 to 1.3 wing valve - Primary injecting kill fluid into body causing place. Offshore 2.2
(metal to metal joint) specified time
Barrier the annulus. differential cell to be supervisors checks and
setup. balances i.e. permit to
work system etc.
Designers and
Dimensions, chemical
manufacturers to have
and mechanical
6. Annulus non-active To provide a facility for ISO quality systems in
Bonnet seal leakage Wrong seal taken from properties similar to
Zone 1.2 to 1.3 wing valve - Primary injecting kill fluid into None place. Offshore 2.2
(metal to metal joint) stores actual specification,
Barrier the annulus. supervisors checks and
therefore no immediate
balances i.e. permit to
effect.
work system etc.
77
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Employ competent
individuals and
appropriate supervision
6. Annulus non-active To provide a facility for is available.
Bonnet seal leakage Seal incorrectly
Zone 1.2 to 1.3 wing valve - Primary injecting kill fluid into Effective seal not made Gas leak around seal 2.1
(metal to metal joint) installed
Barrier the annulus.
Designers and
manufacturers to have
6. Annulus non-active To provide a facility for Bolts installed ISO quality systems in
Bonnet seal leakage
Zone 1.2 to 1.3 wing valve - Primary injecting kill fluid into incorrectly - incorrect Joint integrity reduced None. place. Offshore 3.2
(metal to metal joint)
Barrier the annulus. grade of bolt fitted supervisors checks and
balances i.e. permit to
work system etc.
Employ competent
6. Annulus non-active To provide a facility for Bolts installed
Bonnet seal leakage Seal distortion leading to individuals and
Zone 1.2 to 1.3 wing valve - Primary injecting kill fluid into incorrectly - bonnet over Joint integrity reduced 2.3
(metal to metal joint) progressive leakage. appropriate supervision
Barrier the annulus. tensioned
is available.
Employ competent
individuals and
6. Annulus non-active To provide a facility for Bolts installed appropriate supervision
Bonnet seal leakage Instantaneous leak from
Zone 1.2 to 1.3 wing valve - Primary injecting kill fluid into incorrectly - bonnet Joint integrity reduced is available. 2.3
(metal to metal joint) bonnet
Barrier the annulus. under tensioned
Pressure tested after
envelope broken.
Perform maintenance
6. Annulus non-active To provide a facility for and inspection in
Gas leaks from handle
Zone 1.2 to 1.3 wing valve - Primary injecting kill fluid into Stem seal leakage Wear and Tear Loss of full seal accordance with 2.4
assembly
Barrier the annulus. manufacturers
requirements.
78
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Perform maintenance
6. Annulus non-active To provide a facility for and inspection in
Gas leaks from handle
Zone 1.2 to 1.3 wing valve - Primary injecting kill fluid into Stem seal leakage Packing not set correctlyLoss of full seal accordance with 2.4
assembly
Barrier the annulus. manufacturers
requirements.
Perform maintenance
6. Annulus non-active To provide a facility for and inspection in
Gas leaks from handle
Zone 1.2 to 1.3 wing valve - Primary injecting kill fluid into Stem seal leakage Wrong packing fitted Loss of full seal accordance with 2.4
assembly
Barrier the annulus. manufacturers
requirements.
6. Annulus non-active To provide a facility for Catastrophic failure of Appropriate support for
Failure of Ring Gasket Excessive vibration on
Zone 1.2 to 1.3 wing valve - Primary injecting kill fluid into Fatigue failure of bolts one or more bolts after a piping as per pipe stress 3.3
Seal pipework
Barrier the annulus. period of time. analysis.
6. Annulus non-active To provide a facility for Thermal/mechanical Catastrophic failure of Appropriate piping
Failure of Ring Gasket Displacement from
Zone 1.2 to 1.3 wing valve - Primary injecting kill fluid into gradients induce fatigue one or more bolts after a design as per pipe stress 3.3
Seal normal relative position
Barrier the annulus. on bolts period of time. analysis.
Designers and
Dimensions, chemical
manufacturers to have
and mechanical
6. Annulus non-active To provide a facility for ISO quality systems in
Failure of Ring Gasket Wrong seal taken from properties similar to
Zone 1.2 to 1.3 wing valve - Primary injecting kill fluid into None place. Offshore 2.2
Seal stores actual specification,
Barrier the annulus. supervisors checks and
therefore no immediate
balances i.e. permit to
effect.
work system etc.
Designers and
Material specification of manufacturers to have
6. Annulus non-active To provide a facility for seal incompatible with ISO quality systems in
Failure of Ring Gasket Seal incorrectly Gradually increasing
Zone 1.2 to 1.3 wing valve - Primary injecting kill fluid into body causing place. Offshore 2.2
Seal specified leak over time.
Barrier the annulus. differential cell to be supervisors checks and
setup. balances i.e. permit to
work system etc.
79
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Employ competent
individuals and
appropriate supervision
6. Annulus non-active To provide a facility for is available.
Failure of Ring Gasket Seal incorrectly
Zone 1.2 to 1.3 wing valve - Primary injecting kill fluid into Effective seal not made Gas leakage around seal 2.1
Seal installed
Barrier the annulus.
Designers and
manufacturers to have
6. Annulus non-active To provide a facility for Bolts installed ISO quality systems in
Failure of Ring Gasket
Zone 1.2 to 1.3 wing valve - Primary injecting kill fluid into incorrectly - incorrect Joint integrity reduced None place. Offshore 3.2
Seal
Barrier the annulus. grade of bolt fitted supervisors checks and
balances i.e. permit to
work system etc.
Employ competent
6. Annulus non-active To provide a facility for Bolts installed
Failure of Ring Gasket Seal distortion leading to individuals and
Zone 1.2 to 1.3 wing valve - Primary injecting kill fluid into incorrectly - bonnet over Joint integrity reduced 2.3
Seal progressive leakage. appropriate supervision
Barrier the annulus. tensioned
is available.
Employ competent
individuals and
6. Annulus non-active To provide a facility for Bolts installed appropriate supervision
Failure of Ring Gasket Instantaneous leak from
Zone 1.2 to 1.3 wing valve - Primary injecting kill fluid into incorrectly - bonnet Joint integrity reduced is available. 2.3
Seal bonnet
Barrier the annulus. under tensioned
Pressure tested after
envelope broken.
On failure of primary
To provide a removable barrier (gate on SWAB)
Possible detection by
7. Tree Cap - Secondary secondary barrier to all tree cap seals are Bolts loosen off in
Zone 1.2 to 1.3 Partial leakage of gas Gas release plant operators and/or 2.3
Barrier allow well intervention primary barriers. Tree service
F&G system
activities Cap Annulus Bore Seal
passing.
On failure of primary
To provide a removable barrier (gate on SWAB)
Catastrophic failure of Appropriate support for
7. Tree Cap - Secondary secondary barrier to all tree cap seals are Excessive vibration on
Zone 1.2 to 1.3 Fatigue of bolts one or more bolts after a piping as per pipe stress 3.3
Barrier allow well intervention primary barriers. Tree pipework
period of time. analysis.
activities Cap Annulus Bore Seal
passing.
80
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
On failure of primary
To provide a removable barrier (gate on SWAB)
Thermal/mechanical Catastrophic failure of Appropriate piping
7. Tree Cap - Secondary secondary barrier to all tree cap seals are Displacement from
Zone 1.2 to 1.3 gradients induce fatigue one or more bolts after a design as per pipe stress 3.3
Barrier allow well intervention primary barriers. Tree normal relative position
on bolts period of time. analysis.
activities Cap Annulus Bore Seal
passing.
Designers and
On failure of primary Dimensions, chemical
manufacturers to have
To provide a removable barrier (gate on SWAB) and mechanical
ISO quality systems in
7. Tree Cap - Secondary secondary barrier to all tree cap seals are Wrong seal taken from properties similar to
Zone 1.2 to 1.3 None place. Offshore 2.2
Barrier allow well intervention primary barriers. Tree stores actual specification,
supervisors checks and
activities Cap Annulus Bore Seal therefore no immediate
balances i.e. permit to
passing. effect.
work system etc.
Designers and
On failure of primary
Material specification of manufacturers to have
To provide a removable barrier (gate on SWAB)
seal incompatible with ISO quality systems in
7. Tree Cap - Secondary secondary barrier to all tree cap seals are Seal incorrectly Gradually increasing
Zone 1.2 to 1.3 body causing place. Offshore 2.2
Barrier allow well intervention primary barriers. Tree specified leak over time.
differential cell to be supervisors checks and
activities Cap Annulus Bore Seal
setup. balances i.e. permit to
passing.
work system etc.
On failure of primary
To provide a removable barrier (gate on SWAB) Tree has been operating
7. Tree Cap - Secondary secondary barrier to all tree cap seals are Seal incorrectly Seal incorrectly in excess of 6 months,
Zone 1.2 to 1.3 None 2.2
Barrier allow well intervention primary barriers. Tree specified specified in design initial teething problems
activities Cap Annulus Bore Seal have been ironed out.
passing.
Employ competent
individuals and
On failure of primary
appropriate supervision
To provide a removable barrier (gate on SWAB)
is available.
7. Tree Cap - Secondary secondary barrier to all tree cap seals are Seal incorrectly
Zone 1.2 to 1.3 Effective seal not made Gas leakage around seal 2.1
Barrier allow well intervention primary barriers. Tree installed
activities Cap Annulus Bore Seal
passing.
Pressure tested after
envelope broken.
On failure of primary
To provide a removable barrier (gate on SWAB) Employ competent
Bolts installed
7. Tree Cap - Secondary secondary barrier to all tree cap seals are Sealing arrangement individuals and
Zone 1.2 to 1.3 incorrectly - bolts Joint integrity reduced 3.3
Barrier allow well intervention primary barriers. Tree unevenly energised appropriate supervision
unevenly tensioned
activities Cap Annulus Bore Seal is available.
passing.
81
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Designers and
On failure of primary
manufacturers to have
To provide a removable barrier (gate on SWAB)
Bolts installed ISO quality systems in
7. Tree Cap - Secondary secondary barrier to all tree cap seals are
Zone 1.2 to 1.3 incorrectly - incorrect Joint integrity reduced None place. Offshore 3.2
Barrier allow well intervention primary barriers. Tree
grade of bolt fitted supervisors checks and
activities Cap Annulus Bore Seal
balances i.e. permit to
passing.
work system etc.
On failure of primary
To provide a removable barrier (gate on SWAB) Employ competent
Bolts installed
7. Tree Cap - Secondary secondary barrier to all tree cap seals are Seal distortion leading to individuals and
Zone 1.2 to 1.3 incorrectly - bonnet over Joint integrity reduced 2.3
Barrier allow well intervention primary barriers. Tree progressive leakage. appropriate supervision
tensioned
activities Cap Annulus Bore Seal is available.
passing.
Employ competent
On failure of primary
individuals and
To provide a removable barrier (gate on SWAB)
Bolts installed appropriate supervision
7. Tree Cap - Secondary secondary barrier to all tree cap seals are Instantaneous leak from
Zone 1.2 to 1.3 incorrectly - bonnet Joint integrity reduced is available. 2.3
Barrier allow well intervention primary barriers. Tree bonnet
under tensioned
activities Cap Annulus Bore Seal
Pressure tested after
passing.
envelope broken.
On failure of primary
To provide a removable barrier (gate on SWAB)
Possible detection by
7. Tree Cap - Secondary secondary barrier to all tree cap seals are Bolts loosen off in
Zone 1.2 to 1.3 Partial leakage of gas Gas release plant operators and/or 2.3
Barrier allow well intervention primary barriers. Tree service
F&G system
activities Cap Bonnet Seal
passing.
On failure of primary
To provide a removable barrier (gate on SWAB)
Catastrophic failure of Appropriate support for
7. Tree Cap - Secondary secondary barrier to all tree cap seals are Excessive vibration on
Zone 1.2 to 1.3 Fatigue of bolts one or more bolts after a piping as per pipe stress 3.3
Barrier allow well intervention primary barriers. Tree pipework
period of time. analysis.
activities Cap Bonnet Seal
passing.
On failure of primary
To provide a removable barrier (gate on SWAB)
Thermal/mechanical Catastrophic failure of Appropriate piping
7. Tree Cap - Secondary secondary barrier to all tree cap seals are Displacement from
Zone 1.2 to 1.3 gradients induce fatigue one or more bolts after a design as per pipe stress 3.3
Barrier allow well intervention primary barriers. Tree normal relative position
on bolts period of time. analysis.
activities Cap Bonnet Seal
passing.
82
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Designers and
On failure of primary Dimensions, chemical
manufacturers to have
To provide a removable barrier (gate on SWAB) and mechanical
ISO quality systems in
7. Tree Cap - Secondary secondary barrier to all tree cap seals are Wrong seal taken from properties similar to
Zone 1.2 to 1.3 None place. Offshore 2.2
Barrier allow well intervention primary barriers. Tree stores actual specification,
supervisors checks and
activities Cap Bonnet Seal therefore no immediate
balances i.e. permit to
passing. effect.
work system etc.
Designers and
On failure of primary
Material specification of manufacturers to have
To provide a removable barrier (gate on SWAB)
seal incompatible with ISO quality systems in
7. Tree Cap - Secondary secondary barrier to all tree cap seals are Seal incorrectly Gradually increasing
Zone 1.2 to 1.3 body causing place. Offshore 2.2
Barrier allow well intervention primary barriers. Tree specified leak over time.
differential cell to be supervisors checks and
activities Cap Bonnet Seal
setup. balances i.e. permit to
passing.
work system etc.
On failure of primary
To provide a removable barrier (gate on SWAB) Tree has been operating
7. Tree Cap - Secondary secondary barrier to all tree cap seals are Seal incorrectly Seal incorrectly in excess of 6 months,
Zone 1.2 to 1.3 None 2.2
Barrier allow well intervention primary barriers. Tree specified specified in design initial teething problems
activities Cap Bonnet Seal have been ironed out.
passing.
Employ competent
individuals and
On failure of primary
appropriate supervision
To provide a removable barrier (gate on SWAB)
is available.
7. Tree Cap - Secondary secondary barrier to all tree cap seals are Seal incorrectly
Zone 1.2 to 1.3 Effective seal not made Gas leakage around seal 2.1
Barrier allow well intervention primary barriers. Tree installed
activities Cap Bonnet Seal
passing.
Pressure tested after
envelope broken.
On failure of primary
To provide a removable barrier (gate on SWAB) Employ competent
Bolts installed
7. Tree Cap - Secondary secondary barrier to all tree cap seals are Sealing arrangement individuals and
Zone 1.2 to 1.3 incorrectly - bolts Joint integrity reduced 3.3
Barrier allow well intervention primary barriers. Tree unevenly energised appropriate supervision
unevenly tensioned
activities Cap Bonnet Seal is available.
passing.
Designers and
On failure of primary
manufacturers to have
To provide a removable barrier (gate on SWAB)
Bolts installed ISO quality systems in
7. Tree Cap - Secondary secondary barrier to all tree cap seals are
Zone 1.2 to 1.3 incorrectly - incorrect Joint integrity reduced None place. Offshore 3.2
Barrier allow well intervention primary barriers. Tree
grade of bolt fitted supervisors checks and
activities Cap Bonnet Seal
balances i.e. permit to
passing.
work system etc.
83
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
On failure of primary
To provide a removable barrier (gate on SWAB) Employ competent
Bolts installed
7. Tree Cap - Secondary secondary barrier to all tree cap seals are Seal distortion leading to individuals and
Zone 1.2 to 1.3 incorrectly - bonnet over Joint integrity reduced 2.3
Barrier allow well intervention primary barriers. Tree progressive leakage. appropriate supervision
tensioned
activities Cap Bonnet Seal is available.
passing.
Employ competent
On failure of primary
individuals and
To provide a removable barrier (gate on SWAB)
Bolts installed appropriate supervision
7. Tree Cap - Secondary secondary barrier to all tree cap seals are Instantaneous leak from
Zone 1.2 to 1.3 incorrectly - bonnet Joint integrity reduced is available. 2.3
Barrier allow well intervention primary barriers. Tree bonnet
under tensioned
activities Cap Bonnet Seal
Pressure tested after
passing.
envelope broken.
Careful installation of
On failure of primary tree cap.
To provide a removable
barrier (gate on SWAB) Scoring and/or nipping
7. Tree Cap - Secondary secondary barrier to Damage of o-ring on Gas leakage from the
Zone 1.2 to 1.3 all tree cap seals are of o-ring breaking down 2.4
Barrier allow well intervention installation of cap tree cap retainer ring.
primary barriers. Tree seal integrity
activities
Cap Plug Seal passing. Pressure test of tree cap
on tree assembly.
Inspect and dress
polished bore prior to
On failure of primary
To provide a removable installation.
barrier (gate on SWAB) Damage to polished
7. Tree Cap - Secondary secondary barrier to Gas leakage from the
Zone 1.2 to 1.3 all tree cap seals are bore on installation of Scoring of polished bore 2.3
Barrier allow well intervention tree cap retainer ring.
primary barriers. Tree tree cap
activities
Cap Plug Seal passing.
Pressure test of tree cap
on tree assembly.
Designers and
manufacturers to have
ISO quality systems in
On failure of primary place. Offshore
To provide a removable
barrier (gate on SWAB) supervisors checks and
7. Tree Cap - Secondary secondary barrier to Gas leakage from the
Zone 1.2 to 1.3 all tree cap seals are Incorrect o-ring used Inadequate seal balances. 2.2
Barrier allow well intervention tree cap retainer ring.
primary barriers. Tree
activities
Cap Plug Seal passing.
84
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Designers and
manufacturers to have
ISO quality systems in
On failure of primary place. Offshore
To provide a removable Gradual deteriation of
barrier (gate on SWAB) supervisors checks and
7. Tree Cap - Secondary secondary barrier to Ageing of o-ring prior seal, causing increasing Gas leakage from the
Zone 1.2 to 1.3 all tree cap seals are balances. 2.2
Barrier allow well intervention to installation leakage over a period of tree cap retainer ring.
primary barriers. Tree
activities time
Cap Plug Seal passing.
No visible symptoms.
On failure of primary
Reduced thread to Designers and
To provide a removable barrier (gate on SWAB)
thread contact surface manufacturers to have
7. Tree Cap - Secondary secondary barrier to all tree cap seals are Thread cut out of
Zone 1.2 to 1.3 (seal maintained by Degraded mechanical ISO quality systems in 3.3
Barrier allow well intervention primary barriers. Test tolerance
excessive PTFE for joint, since joint relies place. Offshore
activities Valve-Tree Cap crewed
example) more on excessive supervisors checks and
seal interface passing.
sealant than intimate balances.
thread contact.
On failure of primary
Designers and
To provide a removable barrier (gate on SWAB) Component will only
manufacturers to have
7. Tree Cap - Secondary secondary barrier to all tree cap seals are Thread cut out of Either male or female mate for a proportion of
Zone 1.2 to 1.3 ISO quality systems in 3.3
Barrier allow well intervention primary barriers. Test tolerance threads are cut oversize the threads (rather than
place. Offshore
activities Valve-Tree Cap crewed full length engagement)
supervisors checks and
seal interface passing.
balances.
85
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Joint difficult to make
up.
Leaking joint
86
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Designers and
To contain the gas
Material specification of manufacturers to have
within the tree on loss of
1. Annulus Upper seal incompatible with ISO quality systems in
pressurisation in the Seal incorrectly Gradually leaking over
Zone 1.3 to 1.4 Master Valve - Primary Bonnet Seal Leakage body causing place. Offshore 2.2
upstream pipework and specified time
Barrier differential cell to be supervisors checks and
or on activation of
setup. balances i.e. permit to
platform ESD
work system etc.
Designers and
To contain the gas Dimensions, chemical
manufacturers to have
within the tree on loss of and mechanical
1. Annulus Upper ISO quality systems in
pressurisation in the Wrong seal taken from properties similar to
Zone 1.3 to 1.4 Master Valve - Primary Bonnet Seal Leakage None place. Offshore 2.2
upstream pipework and stores actual specification,
Barrier supervisors checks and
or on activation of therefore no immediate
balances i.e. permit to
platform ESD effect.
work system etc.
Employ competent
individuals and
To contain the gas
appropriate supervision
within the tree on loss of
1. Annulus Upper is available.
pressurisation in the Seal incorrectly
Zone 1.3 to 1.4 Master Valve - Primary Bonnet Seal Leakage Effective seal not made Gas leak around seal 2.1
upstream pipework and installed
Barrier
or on activation of
platform ESD
Pressure tested after
envelope broken.
87
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Designers and
To contain the gas
manufacturers to have
within the tree on loss of
1. Annulus Upper Bolts installed ISO quality systems in
pressurisation in the
Zone 1.3 to 1.4 Master Valve - Primary Bonnet Seal Leakage incorrectly - incorrect Joint integrity reduced None. place. Offshore 3.2
upstream pipework and
Barrier grade of bolt fitted supervisors checks and
or on activation of
balances i.e. permit to
platform ESD
work system etc.
Employ competent
To contain the gas
individuals and
within the tree on loss of
1. Annulus Upper Bolts installed appropriate supervision
pressurisation in the Instantaneous leak from
Zone 1.3 to 1.4 Master Valve - Primary Bonnet Seal Leakage incorrectly - bonnet Joint integrity reduced is available. 2.3
upstream pipework and bonnet
Barrier under tensioned
or on activation of
Pressure tested after
platform ESD
envelope broken.
88
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Slag
Designers and
inclusion/laminations,
2. Annulus Bore - To maintain annulus Stress raisers and crack manufacturers to have
Zone 1.3 to 1.4 Tree block failure Manufacturing defect cold laps and other 1.2
Primary Barrier pressure integrity initiators ISO quality systems in
geometric imperfections
place.
in the forged block.
Designers and
Material specification of manufacturers to have
To contain the gas
3. Annulus Lower seal incompatible with ISO quality systems in
within the tree on loss of Seal incorrectly Gradually leaking over
Zone 1.3 to 1.4 Master Valve - Primary Bonnet Seal Leakage body causing place. Offshore 2.2
pressurisation in the specified time
Barrier differential cell to be supervisors checks and
upstream pipework
setup. balances i.e. permit to
work system etc.
Designers and
Dimensions, chemical
manufacturers to have
To contain the gas and mechanical
3. Annulus Lower ISO quality systems in
within the tree on loss of Wrong seal taken from properties similar to
Zone 1.3 to 1.4 Master Valve - Primary Bonnet Seal Leakage None place. Offshore 2.2
pressurisation in the stores actual specification,
Barrier supervisors checks and
upstream pipework therefore no immediate
balances i.e. permit to
effect.
work system etc.
89
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Employ competent
individuals and
appropriate supervision
To contain the gas
3. Annulus Lower is available.
within the tree on loss of Seal incorrectly
Zone 1.3 to 1.4 Master Valve - Primary Bonnet Seal Leakage Effective seal not made Gas leak around seal 2.1
pressurisation in the installed
Barrier
upstream pipework
Pressure tested after
envelope broken.
Designers and
manufacturers to have
To contain the gas
3. Annulus Lower Bolts installed ISO quality systems in
within the tree on loss of
Zone 1.3 to 1.4 Master Valve - Primary Bonnet Seal Leakage incorrectly - incorrect Joint integrity reduced None. place. Offshore 3.2
pressurisation in the
Barrier grade of bolt fitted supervisors checks and
upstream pipework
balances i.e. permit to
work system etc.
Employ competent
individuals and
To contain the gas
3. Annulus Lower Bolts installed appropriate supervision
within the tree on loss of Instantaneous leak from
Zone 1.3 to 1.4 Master Valve - Primary Bonnet Seal Leakage incorrectly - bonnet Joint integrity reduced is available. 2.3
pressurisation in the bonnet
Barrier under tensioned
upstream pipework
Pressure tested after
envelope broken.
Perform maintenance
To contain the gas
3. Annulus Lower and inspection in
within the tree on loss of Gas leaks from handle
Zone 1.3 to 1.4 Master Valve - Primary Stem Seal Leak Wear and Tear Loss of full seal accordance with 2.4
pressurisation in the assembly
Barrier manufacturers
upstream pipework
requirements.
Perform maintenance
To contain the gas
3. Annulus Lower and inspection in
within the tree on loss of Gas leaks from handle
Zone 1.3 to 1.4 Master Valve - Primary Stem Seal Leak Packing not set correctlyLoss of full seal accordance with 2.4
pressurisation in the assembly
Barrier manufacturers
upstream pipework
requirements.
90
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Perform maintenance
To contain the gas
3. Annulus Lower and inspection in
within the tree on loss of Gas leaks from handle
Zone 1.3 to 1.4 Master Valve - Primary Stem Seal Leak Wrong packing fitted Loss of full seal accordance with 2.4
pressurisation in the assembly
Barrier manufacturers
upstream pipework
requirements.
Designers and
Material specification of manufacturers to have
To contain the gas
1. Annulus Lower seal incompatible with ISO quality systems in
within the tree on loss of Seal incorrectly Gradually leaking over
Zone 1.4 to 1.5 Master Valve - Primary Bonnet Seal Leakage body causing place. Offshore 2.2
pressurisation in the specified time
Barrier differential cell to be supervisors checks and
upstream pipework
setup. balances i.e. permit to
work system etc.
Designers and
Dimensions, chemical
manufacturers to have
To contain the gas and mechanical
1. Annulus Lower ISO quality systems in
within the tree on loss of Wrong seal taken from properties similar to
Zone 1.4 to 1.5 Master Valve - Primary Bonnet Seal Leakage None place. Offshore 2.2
pressurisation in the stores actual specification,
Barrier supervisors checks and
upstream pipework therefore no immediate
balances i.e. permit to
effect.
work system etc.
Employ competent
individuals and
appropriate supervision
To contain the gas
1. Annulus Lower is available.
within the tree on loss of Seal incorrectly
Zone 1.4 to 1.5 Master Valve - Primary Bonnet Seal Leakage Effective seal not made Gas leak around seal 2.1
pressurisation in the installed
Barrier
upstream pipework
Pressure tested after
envelope broken.
91
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Designers and
manufacturers to have
To contain the gas
1. Annulus Lower Bolts installed ISO quality systems in
within the tree on loss of
Zone 1.4 to 1.5 Master Valve - Primary Bonnet Seal Leakage incorrectly - incorrect Joint integrity reduced None. place. Offshore 3.2
pressurisation in the
Barrier grade of bolt fitted supervisors checks and
upstream pipework
balances i.e. permit to
work system etc.
Employ competent
individuals and
To contain the gas
1. Annulus Lower Bolts installed appropriate supervision
within the tree on loss of Instantaneous leak from
Zone 1.4 to 1.5 Master Valve - Primary Bonnet Seal Leakage incorrectly - bonnet Joint integrity reduced is available. 2.3
pressurisation in the bonnet
Barrier under tensioned
upstream pipework
Pressure tested after
envelope broken.
Perform maintenance
To contain the gas
1. Annulus Lower and inspection in
within the tree on loss of Gas leaks from handle
Zone 1.4 to 1.5 Master Valve - Primary Stem Seal Leak Wear and Tear Loss of full seal accordance with 2.4
pressurisation in the assembly
Barrier manufacturers
upstream pipework
requirements.
Perform maintenance
To contain the gas
1. Annulus Lower and inspection in
within the tree on loss of Packing not set Gas leaks from handle
Zone 1.4 to 1.5 Master Valve - Primary Stem Seal Leak Loss of full seal accordance with 2.4
pressurisation in the correctly assembly
Barrier manufacturers
upstream pipework
requirements.
Perform maintenance
To contain the gas
1. Annulus Lower and inspection in
within the tree on loss of Gas leaks from handle
Zone 1.4 to 1.5 Master Valve - Primary Stem Seal Leak Wrong packing fitted Loss of full seal accordance with 2.4
pressurisation in the assembly
Barrier manufacturers
upstream pipework
requirements.
92
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Slag
Designers and
inclusion/laminations,
2. Annulus Bore - To maintain annulus Stress raisers and crack manufacturers to have
Zone 1.4 to 1.5 Tree block failure Manufacturing defect cold laps and other 1.2
Primary Barrier pressure integrity initiators ISO quality systems in
geometric imperfections
place.
in the forged block.
Confirmed by pressure
testing and established
installation procedures.
During installation of Leakage into xmas Potential leakage from
2. Annulus Bore - To maintain annulus Annulus bore sleeve
Zone 1.4 to 1.5 tree the seals become tree/upper tubing hanger tied own bolts or tree 2.3
Primary Barrier pressure integrity seal failure
damaged cavity body gasket.
Competent individuals
and appropriate
supervision
Confirmed by pressure
testing and established
installation procedures.
Due to incorrect Leakage into xmas Potential leakage from
2. Annulus Bore - To maintain annulus Annulus bore sleeve
Zone 1.4 to 1.5 installation seals fail to tree/upper tubing hanger tied own bolts or tree 2.3
Primary Barrier pressure integrity seal failure
energise cavity body gasket.
Competent individuals
and appropriate
supervision
Slag
Designers and
To provide a continuous inclusion/laminations,
3. Annulus bore tubing Stress raisers and crack manufacturers to have
Zone 1.4 to 1.5 bore between the tree Annulus bore failure Manufacturing defect cold laps and other 1.1
hanger - Primary Barrier initiators ISO quality systems in
and the annulus tubing geometric imperfections
place.
in the forged block.
93
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Leakage of gas past
threaded connection
consequently Instrument monitor
pressurising the upper A facility on upper A
annulus. annulus.
Failure due to threads
To provide a sealed
3. Annulus bore tubing Failure of seal (metal to being out with
Zone 1.4 to 1.5 mechanical joint Ineffective seal 2.2
hanger - Primary Barrier metal) manufacturing
between components
tolerances
Additional loading on Pressure in upper A
the dual bore upper annulus monitored by
packer (hydrostatic plant operators.
head, weight of tubing
and gas lift pressure)
94
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Leakage of gas past
threaded connection
consequently Instrument monitor
pressurising the upper A facility on upper A
annulus. annulus.
To provide a sealed
3. Annulus bore tubing Failure of seal (metal to Excessive loading on Seal integrity reduced or
Zone 1.4 to 1.5 mechanical joint 2.2
hanger - Primary Barrier metal) seal arrangement failed
between components
Additional loading on Pressure in upper A
the dual bore upper annulus monitored by
packer (hydrostatic plant operators.
head, weight of tubing
and gas lift pressure)
4. Tubing spool to tree Provide seal between Thermal/mechanical Catastrophic failure of Appropriate piping
Leakage of gas around Displacement from
Zone 1.4 to 1.5 outer flange seal - the tree and the spool gradients induce fatigue one or more bolts after a design as per pipe stress 2.3
seal normal relative position
Secondary Barrier interface on bolts period of time. analysis.
95
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Designers and
Dimensions, chemical
manufacturers to have
and mechanical
4. Tubing spool to tree Provide seal between ISO quality systems in
Leakage of gas around Wrong seal taken from properties similar to
Zone 1.4 to 1.5 outer flange seal - the tree and the spool None place. Offshore 1.2
seal stores actual specification,
Secondary Barrier interface supervisors checks and
therefore no immediate
balances i.e. permit to
effect.
work system etc.
Designers and
Material specification of manufacturers to have
4. Tubing spool to tree Provide seal between seal incompatible with ISO quality systems in
Leakage of gas around Seal incorrectly Gradually increasing
Zone 1.4 to 1.5 outer flange seal - the tree and the spool body causing place. Offshore 1.2
seal specified leak over time.
Secondary Barrier interface differential cell to be supervisors checks and
setup. balances i.e. permit to
work system etc.
Employ competent
individuals and
appropriate supervision
4. Tubing spool to tree Provide seal between is available.
Leakage of gas around Seal incorrectly
Zone 1.4 to 1.5 outer flange seal - the tree and the spool Effective seal not made Gas leakage around seal 1.1
seal installed
Secondary Barrier interface
96
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Designers and
6. Tubing spool manufacturers to have
downhole chemical ISO quality systems in
injection line packing place. Offshore
To provide a seal Gradual deteriation of
gland - Secondary supervisors checks and
between the chemical seal, causing increasing Leakage around seal
Zone 1.4 to 1.5 Barrier Leakage around seal Ageing of seal balances. 2.2
injection line and the leakage over a period of increasing over time.
gland bore time
Outer block assembly -
Tertiary Barrier
Pressure test of
complete assembly.
6. Tubing spool Employ competent
downhole chemical individuals and
injection line packing appropriate supervision
To provide a seal
gland - Secondary is available.
between the chemical Seal incorrectly
Zone 1.4 to 1.5 Barrier Leakage around seal Effective seal not made Gas leakage around seal 1.1
injection line and the installed
gland bore
Outer block assembly -
Tertiary Barrier Pressure tested after
envelope broken.
6. Tubing spool
downhole chemical Designers and
Dimensions, chemical
injection line packing manufacturers to have
To provide a seal and mechanical
gland - Secondary ISO quality systems in
between the chemical Wrong seal taken from properties similar to
Zone 1.4 to 1.5 Barrier Leakage around seal None place. Offshore 1.2
injection line and the stores actual specification,
supervisors checks and
gland bore therefore no immediate
Outer block assembly - balances i.e. permit to
effect.
Tertiary Barrier work system etc.
6. Tubing spool
downhole chemical Designers and
injection line packing Material specification of manufacturers to have
To provide a seal
gland - Secondary seal incompatible with ISO quality systems in
between the chemical Seal incorrectly Gradually increasing
Zone 1.4 to 1.5 Barrier Leakage around seal body causing place. Offshore 1.2
injection line and the specified leak over time.
differential cell to be supervisors checks and
gland bore
Outer block assembly - setup. balances i.e. permit to
Tertiary Barrier work system etc.
6. Tubing spool
downhole chemical
injection line packing
To provide a seal Tree has been operating
gland - Secondary
between the chemical Seal incorrectly Seal incorrectly in excess of 6 months,
Zone 1.4 to 1.5 Barrier Leakage around seal None 1.2
injection line and the specified specified in design initial teething problems
gland bore have been ironed out.
Outer block assembly -
Tertiary Barrier
97
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
6. Tubing spool Employ competent
downhole chemical individuals and
injection line packing appropriate supervision
gland - Secondary To provide a seal is available.
Seal incorrectly
Zone 1.4 to 1.5 Barrier between the gland body Leakage around seal Effective seal not made Gas leakage around seal 1.1
installed
and the tubing spool
Outer block assembly -
Tertiary Barrier Pressure tested after
envelope broken.
6. Tubing spool
downhole chemical Designers and
Dimensions, chemical
injection line packing manufacturers to have
and mechanical
gland - Secondary To provide a seal ISO quality systems in
Wrong seal taken from properties similar to
Zone 1.4 to 1.5 Barrier between the gland body Leakage around seal None place. Offshore 1.2
stores actual specification,
and the tubing spool supervisors checks and
therefore no immediate
Outer block assembly - balances i.e. permit to
effect.
Tertiary Barrier work system etc.
6. Tubing spool
downhole chemical Designers and
injection line packing Material specification of manufacturers to have
gland - Secondary To provide a seal seal incompatible with ISO quality systems in
Seal incorrectly Gradually increasing
Zone 1.4 to 1.5 Barrier between the gland body Leakage around seal body causing place. Offshore 1.2
specified leak over time.
and the tubing spool differential cell to be supervisors checks and
Outer block assembly - setup. balances i.e. permit to
Tertiary Barrier work system etc.
6. Tubing spool
downhole chemical
injection line packing
Tree has been operating
gland - Secondary To provide a seal
Seal incorrectly Seal incorrectly in excess of 6 months,
Zone 1.4 to 1.5 Barrier between the gland body Leakage around seal None 1.2
specified specified in design initial teething problems
and the tubing spool
have been ironed out.
Outer block assembly -
Tertiary Barrier
Designers and
6. Tubing spool manufacturers to have
downhole chemical ISO quality systems in
injection line packing place. Offshore
Gradual deteriation of
gland - Secondary To provide a seal supervisors checks and
seal, causing increasing Leakage around seal
Zone 1.4 to 1.5 Barrier between the gland body Leakage around seal Ageing of seal balances. 2.2
leakage over a period of increasing over time.
and the tubing spool
time
Outer block assembly -
Tertiary Barrier
Pressure test of
complete assembly.
98
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Designers and
manufacturers to have
ISO quality systems in
Leakage around seal
place. Offshore
To provide a secondary Gradual deteriation of increasing over time.
7. Tubing hanger tie supervisors checks and
barrier between the seal, causing increasing
Zone 1.4 to 1.5 down bolts and seals - Leakage around seal Ageing of seal balances. 2.2
casing spool and the tie leakage over a period of Casing hanger may drop
Secondary Barrier
down bolts time as a result of seal
deteriation.
Pressure test of
complete assembly.
Designers and
manufacturers to have
8. Tubing spool ISO quality systems in
downhole safety valve place. Offshore
To provide a seal Gradual deteriation of
control packing gland - supervisors checks and
between the DHSV seal, causing increasing Leakage around seal
Zone 1.4 to 1.5 Secondary Barrier Leakage around seal Ageing of seal balances. 2.2
control line and the leakage over a period of increasing over time.
gland bore time
Outlet block assembly -
Tertiary Barrier
Pressure test of
complete assembly.
8. Tubing spool
downhole safety valve
To provide a seal Tree has been operating
control packing gland -
between the DHSV Seal incorrectly Seal incorrectly in excess of 6 months,
Zone 1.4 to 1.5 Secondary Barrier Leakage around seal None 1.2
control line and the specified specified in design initial teething problems
gland bore have been ironed out.
Outlet block assembly -
Tertiary Barrier
99
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Employ competent
8. Tubing spool individuals and
downhole safety valve appropriate supervision
To provide a seal
control packing gland - is available.
between the DHSV Seal incorrectly
Zone 1.4 to 1.5 Secondary Barrier Leakage around seal Effective seal not made Gas leakage around seal 1.1
control line and the installed
gland bore
Outlet block assembly -
Tertiary Barrier Pressure tested after
envelope broken.
Designers and
manufacturers to have
8. Tubing spool ISO quality systems in
downhole safety valve place. Offshore
Gradual deteriation of
control packing gland - To provide a seal supervisors checks and
seal, causing increasing Leakage around seal
Zone 1.4 to 1.5 Secondary Barrier between the gland body Leakage around seal Ageing of seal balances. 2.2
leakage over a period of increasing over time.
and the tubing spool
time
Outlet block assembly -
Tertiary Barrier
Pressure test of
complete assembly.
8. Tubing spool
downhole safety valve
Tree has been operating
control packing gland - To provide a seal
Seal incorrectly Seal incorrectly in excess of 6 months,
Zone 1.4 to 1.5 Secondary Barrier between the gland body Leakage around seal None 1.2
specified specified in design initial teething problems
and the tubing spool
have been ironed out.
Outlet block assembly -
Tertiary Barrier
100
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Employ competent
8. Tubing spool individuals and
downhole safety valve appropriate supervision
control packing gland - To provide a seal is available.
Seal incorrectly
Zone 1.4 to 1.5 Secondary Barrier between the gland body Leakage around seal Effective seal not made Gas leakage around seal 1.1
installed
and the tubing spool
Outlet block assembly -
Tertiary Barrier Pressure tested after
envelope broken.
Pressure build up in the Instrument monitor
upper A annulus. facility on upper A
annulus.
9. Tubing spool to To provide a seal
Over a period of time
Zone 1.4 to 1.5 tubing hanger seal - between the tubing Leakage around seal Seal loses energisation 1.3
seal has compressed
Secondary Barrier hanger and tubing spool Tertiary barriers
provided by annular Pressure in upper A
valves, VR plug and annulus monitored by
instrumentation fittings plant operators.
Employ competent
individuals and
appropriate supervision
9. Tubing spool to To provide a seal is available.
Seal incorrectly
Zone 1.4 to 1.5 tubing hanger seal - between the tubing Leakage around seal Effective seal not made Gas leakage around seal 1.1
installed
Secondary Barrier hanger and tubing spool
Designers and
Dimensions, chemical
manufacturers to have
and mechanical
9. Tubing spool to To provide a seal ISO quality systems in
Wrong seal taken from properties similar to
Zone 1.4 to 1.5 tubing hanger seal - between the tubing Leakage around seal None place. Offshore 1.2
stores actual specification,
Secondary Barrier hanger and tubing spool supervisors checks and
therefore no immediate
balances i.e. permit to
effect.
work system etc.
Designers and
Material specification of manufacturers to have
9. Tubing spool to To provide a seal seal incompatible with ISO quality systems in
Seal incorrectly Gradually increasing
Zone 1.4 to 1.5 tubing hanger seal - between the tubing Leakage around seal body causing place. Offshore 1.2
specified leak over time.
Secondary Barrier hanger and tubing spool differential cell to be supervisors checks and
setup. balances i.e. permit to
work system etc.
101
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Designers and
manufacturers to have
ISO quality systems in
place. Offshore
Gradual deteriation of
9. Tubing spool to To provide a seal supervisors checks and
seal, causing increasing Leakage around seal
Zone 1.4 to 1.5 tubing hanger seal - between the tubing Leakage around seal Ageing of seal balances. 2.2
leakage over a period of increasing over time.
Secondary Barrier hanger and tubing spool
time
Pressure test of
complete assembly.
Use of go/no go gauges
during manufacture.
No visible symptoms.
102
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Joint difficult to make
up.
Leaking joint
Pressure build up in the Instrument monitor
upper A annulus. facility on upper A
Loss of integrity of
10. Tubing hanger annulus.
Provide a seal between packing gland
downhole safety valve
the DHSV control line compression fitting Leakage of gas into
Zone 1.4 to 1.5 control line upper Incorrect joint make-up 1.3
and the tubing hanger causing trapped pressure upper A annulus
packing gland - Tertiary barriers
body to leak into upper
Secondary Barrier provided by annular Pressure in upper A
annulus
valves, VR plug and annulus monitored by
instrumentation fittings plant operators.
Use of go/no go gauges
during manufacture.
No visible symptoms.
103
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Use of go/no go gauges
during manufacture.
Leaking joint
Pressure build up in the Instrument monitor
upper A annulus. facility on upper A
Loss of integrity of
11. Tubing hanger annulus.
Provide a seal between packing gland
downhole chemical
the Chemical Injection compression fitting Leakage of gas into
Zone 1.4 to 1.5 injection line upper Incorrect joint make-up 1.3
line and the tubing causing trapped pressure upper A annulus
packing gland - Tertiary barriers
hanger body to leak into upper
Secondary Barrier provided by annular Pressure in upper A
annulus
valves, VR plug and annulus monitored by
instrumentation fittings plant operators.
104
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Pump Labouring
(audible)
Regular checks of pump
pressure injection rates
by plant operators.
12. Tubing spool Provide a conduit for Rupture of down hole Pressurisation of void Significant reduction or
downhole safety valve the hydraulic fluid for safety valve control line Pipework damaged between tree and tubing cessation of dosing rate
Zone 1.4 to 1.5 1.2
control line - Secondary control of the down hole - between tubing spool during installation spool with hydraulic of chemicals.
Barrier safety valves and tree cavity fluid.
Competent fitters and
appropriate installation
procedures.
Potential leakage from
ring gasket and tie down
bolts.
Slag
To provide a continuous Designers and
1. Annulus bore tubing inclusion/laminations,
bore between the tubing Stress raisers and crack manufacturers to have
Zone 1.5 to 1.6 hanger - Primary Annulus bore failure Manufacturing defect cold laps and other 1.1
hanger and the annulus initiators ISO quality systems in
Barrier geometric imperfections
tubing place.
in the forged block.
105
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Leakage of gas past
threaded connection
consequently Instrument monitor
pressurising the upper A facility on upper A
annulus. annulus.
1. Annulus bore tubing To provide a sealed
Failure of seal (metal to Insufficient make up
Zone 1.5 to 1.6 hanger - Primary mechanical joint Ineffective seal 2.2
metal) torque
Barrier between components
Additional loading on Pressure in upper A
the dual bore upper annulus monitored by
packer (hydrostatic plant operators.
head, weight of tubing
and gas lift pressure)
106
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Leakage of gas past
threaded connection
consequently Instrument monitor
pressurising the upper A facility on upper A
annulus. annulus.
1. Annulus bore tubing To provide a sealed
Failure of threaded Joint integrity reduced
Zone 1.5 to 1.6 hanger - Primary mechanical joint Shearing of threads 2.2
connection or failed
Barrier between components
Additional loading on Pressure in upper A
the dual bore upper annulus monitored by
packer (hydrostatic plant operators.
head, weight of tubing
and gas lift pressure)
Designers and
2. Annulus tubing & Provide location and
Nipple body integrity Stress raisers and crack manufacturers to have
Zone 1.5 to 1.6 annulus tubing nipples - hang-off for well Manufacturing defect 2.2
failure initiators Additional loading on ISO quality systems in
Primary Barrier intervention equipment
the dual bore upper place.
packer (hydrostatic
head, weight of tubing
and gas lift pressure)
107
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Leakage of gas past
threaded connection
consequently Instrument monitor
pressurising the upper A facility on upper A
annulus. annulus.
2. Annulus tubing & To provide a sealed
Failure of seal (metal to
Zone 1.5 to 1.6 annulus tubing nipples - mechanical joint Galling on seal face Ineffective seal 2.2
metal)
Primary Barrier between components
Additional loading on Pressure in upper A
the dual bore upper annulus monitored by
packer (hydrostatic plant operators.
head, weight of tubing
and gas lift pressure)
108
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Leakage of gas past
threaded connection
consequently Instrument monitor
pressurising the upper A facility on upper A
annulus. annulus.
2. Annulus tubing & To provide a sealed
Failure of threaded Jumping out or
Zone 1.5 to 1.6 annulus tubing nipples - mechanical joint Joint opens 2.2
connection 'unzipping' of the thread
Primary Barrier between components
Additional loading on Pressure in upper A
the dual bore upper annulus monitored by
packer (hydrostatic plant operators.
head, weight of tubing
and gas lift pressure)
109
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Gas lift pressure leakage
into the B annulus,
consequently annular
valves on B annulus
To protect the formation
become primary barrier.
3. Production casing - to the top of the pay Production casing split
Zone 1.5 to 1.6 Incorrect casing design Casing could part Correct casing design 3.3
Secondary Barrier zone and the 9 5/8" or parted
casing
B annulus is rated to a
lower pressure than the
A annulus.
Gas lift pressure leakage
into the B annulus,
consequently annular
valves on B annulus
become primary barrier.
Design and
manufacturers quality
assurance in accordance
13% Cr steels with ISO and
To protect the formation B annulus is rated to a
Embrittlement during vulnerable to temper equivalent.
3. Production casing - to the top of the pay Production casing split lower pressure than the
Zone 1.5 to 1.6 manufacturing process Embrittlement under 2.3
Secondary Barrier zone and the 9 5/8" or parted A annulus.
(high alloy steels) incorrect welding and
casing
heat treatment regimes.
Plant operators would
monitor annulus
Loss of ductility
pressure.
resulting in a greater
sensitivity to cracking
under normal well
conditions (thermal
loading).
Leakage of gas past
threaded connection
consequently Instrument monitor
pressurising the upper A facility on upper A
annulus. annulus.
Failure due to threads
To provide a sealed
3. Production casing - Failure of seal (metal to being out with
Zone 1.5 to 1.6 mechanical joint Ineffective seal 2.2
Secondary Barrier metal) manufacturing
between components
tolerances
Additional loading on Pressure in upper A
the dual bore upper annulus monitored by
packer (hydrostatic plant operators.
head, weight of tubing
and gas lift pressure)
110
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Leakage of gas past
threaded connection
consequently Instrument monitor
pressurising the upper A facility on upper A
annulus. annulus.
To provide a sealed
3. Production casing - Failure of seal (metal to
Zone 1.5 to 1.6 mechanical joint Galling on seal face Ineffective seal 2.2
Secondary Barrier metal)
between components
Additional loading on Pressure in upper A
the dual bore upper annulus monitored by
packer (hydrostatic plant operators.
head, weight of tubing
and gas lift pressure)
111
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Leakage of gas past
threaded connection
consequently Instrument monitor
pressurising the upper A facility on upper A
annulus. annulus.
To provide a sealed
3. Production casing - Failure of threaded Jumping out or
Zone 1.5 to 1.6 mechanical joint Joint opens 2.2
Secondary Barrier connection 'unzipping' of the thread
between components
Additional loading on Pressure in upper A
the dual bore upper annulus monitored by
packer (hydrostatic plant operators.
head, weight of tubing
and gas lift pressure)
112
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Designers and
Dimensions, chemical
manufacturers to have
4. Production casing and mechanical
To provide a seal ISO quality systems in
hanger seal to tubing Wrong seal taken from properties similar to
Zone 1.5 to 1.6 between the casing Leakage around seal None place. Offshore 1.2
spool - Secondary stores actual specification,
hanger and casing spool supervisors checks and
Barrier therefore no immediate
balances i.e. permit to
effect.
work system etc.
Designers and
Material specification of manufacturers to have
4. Production casing
To provide a seal seal incompatible with ISO quality systems in
hanger seal to tubing Seal incorrectly Gradually increasing
Zone 1.5 to 1.6 between the casing Leakage around seal body causing place. Offshore 1.2
spool - Secondary specified leak over time.
hanger and casing spool differential cell to be supervisors checks and
Barrier
setup. balances i.e. permit to
work system etc.
Designers and
manufacturers to have
ISO quality systems in
Leakage around seal
place. Offshore
4. Production casing Gradual deteriation of increasing over time
To provide a seal supervisors checks and
hanger seal to tubing seal, causing increasing
Zone 1.5 to 1.6 between the casing Leakage around seal Ageing of seal balances. 2.2
spool - Secondary leakage over a period of Casing hanger may drop
hanger and casing spool
Barrier time as a result of seal
deteriation.
Pressure test of
complete assembly.
Designers and
To provide a facility to Material specification of manufacturers to have
5. Upper annulus tubing
isolate the A,B or C Bonnet seal leakage seal incompatible with ISO quality systems in
spool inner and outer Seal incorrectly Gradually leaking over
Zone 1.5 to 1.6 annulus and with (metal to metal joint) - 2 body causing place. Offshore 2.2
valves - Secondary specified time
instrumentation monitor valves differential cell to be supervisors checks and
Barrier
annular pressures setup. balances i.e. permit to
work system etc.
113
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Designers and
Dimensions, chemical
To provide a facility to manufacturers to have
5. Upper annulus tubing and mechanical
isolate the A,B or C Bonnet seal leakage ISO quality systems in
spool inner and outer Wrong seal taken from properties similar to
Zone 1.5 to 1.6 annulus and with (metal to metal joint) - 2 None place. Offshore 2.2
valves - Secondary stores actual specification,
instrumentation monitor valves supervisors checks and
Barrier therefore no immediate
annular pressures balances i.e. permit to
effect.
work system etc.
To provide a facility to
5. Upper annulus tubing Tree has been operating
isolate the A,B or C Bonnet seal leakage
spool inner and outer Seal incorrectly Seal incorrectly in excess of 6 months,
Zone 1.5 to 1.6 annulus and with (metal to metal joint) - 2 None. 2.2
valves - Secondary specified specified in design initial teething problems
instrumentation monitor valves
Barrier have been ironed out.
annular pressures
Employ competent
individuals and
To provide a facility to appropriate supervision
5. Upper annulus tubing
isolate the A,B or C Bonnet seal leakage is available.
spool inner and outer Seal incorrectly
Zone 1.5 to 1.6 annulus and with (metal to metal joint) - 2 Effective seal not made Gas leak around seal 2.1
valves - Secondary installed
instrumentation monitor valves
Barrier
annular pressures
Pressure tested after
envelope broken.
To provide a facility to
5. Upper annulus tubing Employ competent
isolate the A,B or C Bonnet seal leakage Bolts installed
spool inner and outer Sealing arrangement individuals and
Zone 1.5 to 1.6 annulus and with (metal to metal joint) - 2 incorrectly - bolts Joint integrity reduced 3.3
valves - Secondary unevenly energised appropriate supervision
instrumentation monitor valves unevenly tensioned
Barrier is available.
annular pressures
Designers and
To provide a facility to manufacturers to have
5. Upper annulus tubing
isolate the A,B or C Bonnet seal leakage Bolts installed ISO quality systems in
spool inner and outer
Zone 1.5 to 1.6 annulus and with (metal to metal joint) - 2 incorrectly - incorrect Joint integrity reduced None. place. Offshore 3.2
valves - Secondary
instrumentation monitor valves grade of bolt fitted supervisors checks and
Barrier
annular pressures balances i.e. permit to
work system etc.
To provide a facility to
5. Upper annulus tubing Employ competent
isolate the A,B or C Bonnet seal leakage Bolts installed
spool inner and outer Seal distortion leading to individuals and
Zone 1.5 to 1.6 annulus and with (metal to metal joint) - 2 incorrectly - bonnet over Joint integrity reduced 2.3
valves - Secondary progressive leakage. appropriate supervision
instrumentation monitor valves tensioned
Barrier is available.
annular pressures
114
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Employ competent
To provide a facility to individuals and
5. Upper annulus tubing
isolate the A,B or C Bonnet seal leakage Bolts installed appropriate supervision
spool inner and outer Instantaneous leak from
Zone 1.5 to 1.6 annulus and with (metal to metal joint) - 2 incorrectly - bonnet Joint integrity reduced is available. 2.3
valves - Secondary bonnet
instrumentation monitor valves under tensioned
Barrier
annular pressures Pressure tested after
envelope broken.
To provide a facility to
5. Upper annulus tubing
isolate the A,B or C Fitter backs off
spool inner and outer Audible evidence of gas
Zone 1.5 to 1.6 annulus and with Grease fitting Leakage assembly rather than Partial leak Using competent fitters 3.3
valves - Secondary release
instrumentation monitor just the cap
Barrier
annular pressures
6. Upper annulus tubing To provide a facility for Cartridge nose seal Employ competent
spool monitor and vent pressure monitoring failure, annulus gas Cartridge not fully Gas leakage around individuals and
Zone 1.5 to 1.6 None. 1.1
assembly - Secondary equipment to be linked leakage past cartridge tightened cartridge walls appropriate supervision
Barrier to the A annulus wall is available.
115
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Designers and
Material specification of manufacturers to have
6. Upper annulus tubing To provide a facility for
seal incompatible with ISO quality systems in
spool monitor and vent pressure monitoring Seal incorrectly Gradually leaking over
Zone 1.5 to 1.6 Failure of bonnet seal body causing place. Offshore 2.2
assembly - Secondary equipment to be linked specified time
differential cell to be supervisors checks and
Barrier to the A annulus
setup. balances i.e. permit to
work system etc.
Designers and
Dimensions, chemical
manufacturers to have
6. Upper annulus tubing To provide a facility for and mechanical
ISO quality systems in
spool monitor and vent pressure monitoring Wrong seal taken from properties similar to
Zone 1.5 to 1.6 Failure of bonnet seal None place. Offshore 2.2
assembly - Secondary equipment to be linked stores actual specification,
supervisors checks and
Barrier to the A annulus therefore no immediate
balances i.e. permit to
effect.
work system etc.
6. Upper annulus tubing To provide a facility for Tree has been operating
spool monitor and vent pressure monitoring Seal incorrectly Seal incorrectly in excess of 6 months,
Zone 1.5 to 1.6 Failure of bonnet seal None. 2.2
assembly - Secondary equipment to be linked specified specified in design initial teething problems
Barrier to the A annulus have been ironed out.
Employ competent
individuals and
appropriate supervision
6. Upper annulus tubing To provide a facility for
is available.
spool monitor and vent pressure monitoring Seal incorrectly
Zone 1.5 to 1.6 Failure of bonnet seal Effective seal not made Gas leak around seal 2.1
assembly - Secondary equipment to be linked installed
Barrier to the A annulus
Pressure tested after
envelope broken.
Designers and
manufacturers to have
6. Upper annulus tubing To provide a facility for
Bolts installed ISO quality systems in
spool monitor and vent pressure monitoring
Zone 1.5 to 1.6 Failure of bonnet seal incorrectly - incorrect Joint integrity reduced None. place. Offshore 3.2
assembly - Secondary equipment to be linked
grade of bolt fitted supervisors checks and
Barrier to the A annulus
balances i.e. permit to
work system etc.
116
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Employ competent
individuals and
6. Upper annulus tubing To provide a facility for
Bolts installed appropriate supervision
spool monitor and vent pressure monitoring Instantaneous leak from
Zone 1.5 to 1.6 Failure of bonnet seal incorrectly - bonnet Joint integrity reduced is available. 2.3
assembly - Secondary equipment to be linked bonnet
under tensioned
Barrier to the A annulus
Pressure tested after
envelope broken.
Designers and
Dimensions, chemical
manufacturers to have
6. Upper annulus tubing To provide a facility for and mechanical
ISO quality systems in
spool monitor and vent pressure monitoring Failure of Ring Gasket Wrong seal taken from properties similar to
Zone 1.5 to 1.6 None place. Offshore 2.2
assembly - Secondary equipment to be linked Seal stores actual specification,
supervisors checks and
Barrier to the A annulus therefore no immediate
balances i.e. permit to
effect.
work system etc.
Designers and
Material specification of manufacturers to have
6. Upper annulus tubing To provide a facility for
seal incompatible with ISO quality systems in
spool monitor and vent pressure monitoring Failure of Ring Gasket Seal incorrectly Gradually increasing
Zone 1.5 to 1.6 body causing place. Offshore 2.2
assembly - Secondary equipment to be linked Seal specified leak over time.
differential cell to be supervisors checks and
Barrier to the A annulus
setup. balances i.e. permit to
work system etc.
117
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
6. Upper annulus tubing To provide a facility for Tree has been operating
spool monitor and vent pressure monitoring Failure of Ring Gasket Seal incorrectly Seal incorrectly in excess of 6 months,
Zone 1.5 to 1.6 None 2.2
assembly - Secondary equipment to be linked Seal specified specified in design initial teething problems
Barrier to the A annulus have been ironed out.
Employ competent
individuals and
appropriate supervision
6. Upper annulus tubing To provide a facility for
is available.
spool monitor and vent pressure monitoring Failure of Ring Gasket Seal incorrectly
Zone 1.5 to 1.6 Effective seal not made Gas leakage around seal 2.1
assembly - Secondary equipment to be linked Seal installed
Barrier to the A annulus
Pressure tested after
envelope broken.
Designers and
manufacturers to have
6. Upper annulus tubing To provide a facility for
Bolts installed ISO quality systems in
spool monitor and vent pressure monitoring Failure of Ring Gasket
Zone 1.5 to 1.6 incorrectly - incorrect Joint integrity reduced None place. Offshore 3.2
assembly - Secondary equipment to be linked Seal
grade of bolt fitted supervisors checks and
Barrier to the A annulus
balances i.e. permit to
work system etc.
Employ competent
individuals and
6. Upper annulus tubing To provide a facility for
Bolts installed appropriate supervision
spool monitor and vent pressure monitoring Failure of Ring Gasket Instantaneous leak from
Zone 1.5 to 1.6 incorrectly - bonnet Joint integrity reduced is available. 2.3
assembly - Secondary equipment to be linked Seal bonnet
under tensioned
Barrier to the A annulus
Pressure tested after
envelope broken.
Perform maintenance
6. Upper annulus tubing To provide a facility for
and inspection in
spool monitor and vent pressure monitoring Gas leaks from handle
Zone 1.5 to 1.6 Stem seal leakage Wear and Tear Loss of full seal accordance with 2.4
assembly - Secondary equipment to be linked assembly
manufacturers
Barrier to the A annulus
requirements.
118
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Perform maintenance
6. Upper annulus tubing To provide a facility for
and inspection in
spool monitor and vent pressure monitoring Gas leaks from handle
Zone 1.5 to 1.6 Stem seal leakage Packing not set correctlyLoss of full seal accordance with 2.4
assembly - Secondary equipment to be linked assembly
manufacturers
Barrier to the A annulus
requirements.
Perform maintenance
6. Upper annulus tubing To provide a facility for
and inspection in
spool monitor and vent pressure monitoring Gas leaks from handle
Zone 1.5 to 1.6 Stem seal leakage Wrong packing fitted Loss of full seal accordance with 2.4
assembly - Secondary equipment to be linked assembly
manufacturers
Barrier to the A annulus
requirements.
Leakage of gas into the
inner annular valve.
Correct torque applied
to VR plug in
Provides isolation in accordance with the
7. VR plug - Secondary
A,B or C annulus to manufacturers
Barrier VR plugs are generally
Zone 1.5 to 1.6 carry out maintenance Nose seal failure Debris on seal face Seal not seated correctly specification. 1.1
used for maintenance
on annular valves and
Tertiary valve(s) when one of the annular
fittings.
valves requires to be
removed and an
Use of competent fitters
additional isolation is
required.
Leakage from upper A
annulus into inner
annular valve.
Provides isolation in
7. VR plug - Secondary
A,B or C annulus to
Barrier Failure of threaded Misalignment during Threads crossed causing
Zone 1.5 to 1.6 carry out maintenance VR plugs are generally Use of competent fitters.1.3
connection installation loss of integrity of joint
on annular valves and used for maintenance
Tertiary valve(s)
fittings. when one of the annular
valves requires to be
removed and an
additional isolation is
required.
Leakage from upper A
annulus into inner
annular valve.
Provides isolation in
7. VR plug - Secondary
A,B or C annulus to Galling of threads due
Barrier Failure of threaded
Zone 1.5 to 1.6 carry out maintenance to debris on threaded Loss of integrity of joint VR plugs are generally Use of competent fitters.1.3
connection
on annular valves and connections used for maintenance
Tertiary valve(s)
fittings. when one of the annular
valves requires to be
removed and an
additional isolation is
required.
119
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Designers and
manufacturers to have
ISO quality systems in
place. Offshore
Gradual deteriation of
8. Tubing hanger seal to To provide a seal supervisors checks and
seal, causing increasing Leakage around seal
Zone 1.5 to 1.6 tubing spool - between the tubing Leakage around seal Ageing of seal balances. 2.2
leakage over a period of increasing over time.
Secondary Barrier hanger and tubing spool
time
Pressure test of
complete assembly.
Designers and
Dimensions, chemical
manufacturers to have
and mechanical
8. Tubing hanger seal to To provide a seal ISO quality systems in
Wrong seal taken from properties similar to
Zone 1.5 to 1.6 tubing spool - between the tubing Leakage around seal None place. Offshore 1.2
stores actual specification,
Secondary Barrier hanger and tubing spool supervisors checks and
therefore no immediate
balances i.e. permit to
effect.
work system etc.
Designers and
Material specification of manufacturers to have
8. Tubing hanger seal to To provide a seal seal incompatible with ISO quality systems in
Seal incorrectly Gradually increasing
Zone 1.5 to 1.6 tubing spool - between the tubing Leakage around seal body causing place. Offshore 1.2
specified leak over time.
Secondary Barrier hanger and tubing spool differential cell to be supervisors checks and
setup. balances i.e. permit to
work system etc.
Employ competent
individuals and
appropriate supervision
8. Tubing hanger seal to To provide a seal is available.
Seal incorrectly
Zone 1.5 to 1.6 tubing spool - between the tubing Leakage around seal Effective seal not made Gas leakage around seal 1.1
installed
Secondary Barrier hanger and tubing spool
120
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Pressure build up in the
Instrument monitor
B annulus.
facility on B annulus.
8. Tubing hanger seal to To provide a seal
Over a period of time
Zone 1.5 to 1.6 tubing spool - between the tubing Leakage around seal Seal loses energisation 3.3
seal has compressed
Secondary Barrier hanger and tubing spool Secondary barriers
Pressure in B annulus
provided by annular
monitored by plant
valves and
operators.
instrumentation fittings
Regular checks of pump
Pump Labouring
pressure and injection
(audible) - increased
rates by plant operators.
9. Tubing spool Pressurisation of void injection rate
Provide a conduit for Rupture of chemical
downhole chemical Pipework damaged between tubing hanger
Zone 1.5 to 1.6 chemical injection into injection line - below 1.2
injection line - during installation and the dual bore upper
production bore tubing hanger
Secondary Barrier packer with chemicals.
Competent fitters and
Significant increase of
appropriate installation
dosing rate of chemicals.
procedures.
Regular checks of pump
pressure and injection
Pressurisation of void rates by plant operators.
10. Tubing spool Provide a conduit for
Rupture of down hole between tubing hanger Pump Labouring
downhole safety valve the hydraulic fluid for Pipework damaged
Zone 1.5 to 1.6 safety valve control line and the dual bore upper (audible) - increased 1.2
control line - Secondary control of the down hole during installation
- below tubing hanger packer with hydraulic injection rate
Barrier safety valves
fluid. Competent fitters and
appropriate installation
procedures.
Use of go/no go gauges
during manufacture.
121
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Use of go/no go gauges
during manufacture.
Loss of integrity of
packing gland body
11. Tubing hanger thread causing trapped Designers and
Provide a seal between Component will only
downhole safety valve pressure to leak into manufacturers to have
the DHSV control line Thread cut out of Either male or female mate for a proportion of
Zone 1.5 to 1.6 control line lower cavity between tree and ISO quality systems in 3.3
and the tubing hanger tolerance threads are cut oversize the threads (rather than
packing gland - tubing hanger. place. Offshore
body full length engagement)
Secondary Barrier supervisors checks and
On coincident failure of balances.
upper packing gland.
Loss of integrity of
Use of competent fitters
packing gland body
Excessive torque and effective
11. Tubing hanger thread causing trapped
Provide a seal between required to install. supervision.
downhole safety valve pressure to leak into
the DHSV control line Improperly mated
Zone 1.5 to 1.6 control line lower cavity between tree and Damaged threads 1.3
and the tubing hanger threads
packing gland - tubing hanger.
body
Secondary Barrier
Fitting improperly Suitable pressure
On coincident failure of
aligned. testing.
upper packing gland.
Leaking joint
122
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Loss of integrity of
packing gland body
12. Tubing hanger thread causing trapped Designers and
Provide a seal between Component will only
downhole chemical pressure to leak into manufacturers to have
the Chemical Injection Thread cut out of Either male or female mate for a proportion of
Zone 1.5 to 1.6 injection line lower cavity between tubing ISO quality systems in 3.3
line and the tubing tolerance threads are cut oversize the threads (rather than
packing gland - hanger and tree. place. Offshore
hanger body full length engagement)
Secondary Barrier supervisors checks and
On coincident failure of balances.
upper packing gland.
123
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Excessive torque
Loss of integrity of required to install.
Use of competent fitters
packing gland body
and effective
12. Tubing hanger thread causing trapped
Provide a seal between supervision.
downhole chemical pressure to leak into
the Chemical Injection
Zone 1.5 to 1.6 injection line lower cavity between tubing Cross threads Ineffective seal Fitting improperly 1.3
line and the tubing
packing gland - hanger and tree. aligned.
hanger body
Secondary Barrier
Suitable pressure
On coincident failure of
testing.
upper packing gland.
Leaking joint.
Joint difficult to make
up.
Loss of integrity of
Use of competent fitters
packing gland body
Excessive torque and effective
12. Tubing hanger thread causing trapped
Provide a seal between required to install. supervision.
downhole chemical pressure to leak into
the Chemical Injection Improperly mated
Zone 1.5 to 1.6 injection line lower cavity between tubing Damaged threads 1.3
line and the tubing threads
packing gland - hanger and tree.
hanger body
Secondary Barrier
Fitting improperly Suitable pressure
On coincident failure of
aligned. testing.
upper packing gland.
Leaking joint
124
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Leakage of gas into the
upper A annulus.
Designers and
1. Annulus tubing & Provide location and
Nipple body integrity Stress raisers and crack manufacturers to have
Zone 1.6 to 1.7 annulus tubing nipples - hang-off for well Manufacturing defect 2.2
failure initiators Additional loading on ISO quality systems in
Primary Barrier intervention equipment
the dual bore upper place.
packer (hydrostatic
head, weight of tubing
and gas lift pressure)
125
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Leakage of gas past
threaded connection
consequently Instrument monitor
pressurising the upper A facility on upper A
annulus. annulus.
1. Annulus tubing & To provide a sealed
Failure of seal (metal to Insufficient make up
Zone 1.6 to 1.7 annulus tubing nipples - mechanical joint Ineffective seal 2.2
metal) torque
Primary Barrier between components
Additional loading on Pressure in upper A
the dual bore upper annulus monitored by
packer (hydrostatic plant operators.
head, weight of tubing
and gas lift pressure)
126
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Leakage of gas past
threaded connection
consequently Instrument monitor
pressurising the upper A facility on upper A
annulus. annulus.
1. Annulus tubing & To provide a sealed
Failure of threaded Joint integrity reduced
Zone 1.6 to 1.7 annulus tubing nipples - mechanical joint Shearing of threads 2.2
connection or failed
Primary Barrier between components
Additional loading on Pressure in upper A
the dual bore upper annulus monitored by
packer (hydrostatic plant operators.
head, weight of tubing
and gas lift pressure)
127
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Leakage of gas past
threaded connection
consequently Instrument monitor
pressurising the upper A facility on upper A
annulus. annulus.
To provide addition
2. Annulus downhole
barrier between lower Failure of seal (metal to Insufficient make up
Zone 1.6 to 1.7 safety valve - Primary Ineffective seal 2.2
annulus and metal) torque
Barrier
tree/wellhead
Additional loading on Pressure in upper A
the dual bore upper annulus monitored by
packer (hydrostatic plant operators.
head, weight of tubing
and gas lift pressure)
128
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Leakage of gas past
threaded connection
consequently Instrument monitor
pressurising the upper A facility on upper A
annulus. annulus.
To provide addition
2. Annulus downhole
barrier between lower Failure of threaded Joint integrity reduced
Zone 1.6 to 1.7 safety valve - Primary Shearing of threads 2.2
annulus and connection or failed
Barrier
tree/wellhead
Additional loading on Pressure in upper A
the dual bore upper annulus monitored by
packer (hydrostatic plant operators.
head, weight of tubing
and gas lift pressure)
Correct specification of
seals.
Gas leakage into upper
A annulus.
To provide addition
2. Annulus downhole Failure of two radially
barrier between lower Failure of housing DHSV housing loses
Zone 1.6 to 1.7 safety valve - Primary successive seals of the Manufacturers and 1.1
annulus and sealing arrangement integrity
Barrier component interface designers have a
tree/wellhead
A Annular valves suitable quality
become tertiary barriers. assurance system in
accordance with ISO or
equivalent.
Gas leakage into upper
A annulus.
Correct specification of
To provide addition seals.
2. Annulus downhole Failure of two radially
barrier between lower Failure of control line Leakage into the A Flapper closes if control
Zone 1.6 to 1.7 safety valve - Primary successive seals of the 2.1
annulus and housing annulus line ruptures
Barrier component interface
tree/wellhead
Periodic testing
A Annular valves
become tertiary barriers.
Leakage of gas past
threaded connection
consequently Instrument monitor
pressurising the upper A facility on upper A
annulus. annulus.
To provide addition Failure due to threads
1. Annulus downhole
barrier between lower Failure of seal (metal to being out with
Zone 1.7 to 1.8 safety valve - Primary Ineffective seal 2.2
annulus and metal) manufacturing
Barrier
tree/wellhead tolerances
Additional loading on Pressure in upper A
the dual bore upper annulus monitored by
packer (hydrostatic plant operators.
head, weight of tubing
and gas lift pressure)
129
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Leakage of gas past
threaded connection
consequently Instrument monitor
pressurising the upper A facility on upper A
annulus. annulus.
To provide addition
1. Annulus downhole
barrier between lower Failure of seal (metal to
Zone 1.7 to 1.8 safety valve - Primary Galling on seal face Ineffective seal 2.2
annulus and metal)
Barrier
tree/wellhead
Additional loading on Pressure in upper A
the dual bore upper annulus monitored by
packer (hydrostatic plant operators.
head, weight of tubing
and gas lift pressure)
130
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Leakage of gas past
threaded connection
consequently Instrument monitor
pressurising the upper A facility on upper A
annulus. annulus.
To provide addition
1. Annulus downhole
barrier between lower Failure of seal (metal to Jumping out or
Zone 1.7 to 1.8 safety valve - Primary Joint opens 2.2
annulus and metal) 'unzipping' of the thread
Barrier
tree/wellhead
Additional loading on Pressure in upper A
the dual bore upper annulus monitored by
packer (hydrostatic plant operators.
head, weight of tubing
and gas lift pressure)
131
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Leakage of gas into the
upper A annulus.
132
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Leakage of gas past
threaded connection
consequently Instrument monitor
pressurising the upper A facility on upper A
annulus. annulus.
To provide a sealed
2. Annulus Tubing - Failure of seal (metal to Insufficient make up
Zone 1.7 to 1.8 mechanical joint Ineffective seal 2.2
Primary Barrier metal) torque
between components
Additional loading on Pressure in upper A
the dual bore upper annulus monitored by
packer (hydrostatic plant operators.
head, weight of tubing
and gas lift pressure)
133
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Leakage of gas past
threaded connection
consequently Instrument monitor
pressurising the upper A facility on upper A
annulus. annulus.
To provide a sealed
2. Annulus Tubing - Failure of threaded Joint integrity reduced
Zone 1.7 to 1.8 mechanical joint Shearing of threads 2.2
Primary Barrier connection or failed
between components
Additional loading on Pressure in upper A
the dual bore upper annulus monitored by
packer (hydrostatic plant operators.
head, weight of tubing
and gas lift pressure)
134
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Leakage of gas past
threaded connection
consequently Instrument monitor
pressurising the upper A facility on upper A
annulus. annulus.
To provide a sealed
1. Annulus Tubing - Failure of seal (metal to
Zone 1.8 to 1.9 mechanical joint Galling on seal face Ineffective seal 2.2
Primary Barrier metal)
between components
Additional loading on Pressure in upper A
the dual bore upper annulus monitored by
packer (hydrostatic plant operators.
head, weight of tubing
and gas lift pressure)
135
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Leakage of gas past
threaded connection
consequently Instrument monitor
pressurising the upper A facility on upper A
annulus. annulus.
To provide a sealed
1. Annulus Tubing - Failure of threaded Jumping out or
Zone 1.8 to 1.9 mechanical joint Joint opens 2.2
Primary Barrier connection 'unzipping' of the thread
between components
Additional loading on Pressure in upper A
the dual bore upper annulus monitored by
packer (hydrostatic plant operators.
head, weight of tubing
and gas lift pressure)
136
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Periodic checks of upper
A annulus pressure.
Dual upper bore packer
2. Annulus bore dual Deteriation of the Gas passing from lower
provides isolation Failure of the tubing Upper A annulus
Zone 1.8 to 1.9 bore upper packer - annulus upper bore annulus to upper 2.2
between the upper and annulus to packer seal pressurise with gas.
Primary Barrier tubing stab seal annulus
lower annulus Pressure testing when
packer was originally
installed.
Dual upper bore packer Expansion and Tubing stab to be
2. Annulus bore dual
provides isolation Failure of the tubing Design working loads Additional tensile loads contraction of annulus designed for all
Zone 1.8 to 1.9 bore upper packer - 2.3
between the upper and annulus to packer seal are exceeded imposed on packer tubing in the absence of reasonably foreseeable
Primary Barrier
lower annulus a slip joint. events.
Pump Labouring
(audible)
Regular checks of pump
pressure injection rates
by plant operators.
Rupture of chemical
3. Downhole chemical Provide a conduit for
injection line - between Pipework damaged Pressurisation of upper a Significant reduction or
Zone 1.8 to 1.9 injection line - chemical injection into 1.2
tubing hanger and dual during installation annulus with chemicals cessation of dosing rate
Secondary Barrier production bore
bore upper packer of chemicals.
Competent fitters and
appropriate installation
procedures.
A annulus pressure
increase.
Use of go/no go gauges
Loss of integrity of during manufacture.
packing gland body
thread causing trapped No visible symptoms.
pressure to leak up
4. Dual bore packer against the lower Reduced thread to Designers and
Provide a seal between
downhole chemical chemical injection line thread contact surface manufacturers to have
the Chemical Injection Thread cut out of
Zone 1.8 to 1.9 injection line upper packing gland. (seal maintained by Degraded mechanical ISO quality systems in 3.3
line and the dual bore tolerance
packing gland - excessive PTFE for joint, since joint relies place. Offshore
upper packer body
Secondary Barrier Coincident failure of example) more on excessive supervisors checks and
lower chemical injection sealant than intimate balances.
line packing gland in thread contact.
order to leak into lower
annulus.
Use of competent fitters
137
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Use of go/no go gauges
Loss of integrity of during manufacture.
packing gland body
thread causing trapped
pressure to leak up
4. Dual bore packer against the lower Designers and
Provide a seal between Component will only
downhole chemical chemical injection line manufacturers to have
the Chemical Injection Thread cut out of Either male or female mate for a proportion of
Zone 1.8 to 1.9 injection line upper packing gland. ISO quality systems in 3.3
line and the dual bore tolerance threads are cut oversize the threads (rather than
packing gland - place. Offshore
upper packer body full length engagement)
Secondary Barrier Coincident failure of supervisors checks and
lower chemical injection balances.
line packing gland in
order to leak into lower
annulus.
Use of competent fitters
Loss of integrity of
packing gland body Excessive torque
thread causing trapped required to install.
Use of competent fitters
pressure to leak up
and effective
4. Dual bore packer against the lower
Provide a seal between supervision.
downhole chemical chemical injection line
the Chemical Injection
Zone 1.8 to 1.9 injection line upper packing gland. Cross threads Ineffective seal Fitting improperly 1.3
line and the dual bore
packing gland - aligned.
upper packer body
Secondary Barrier Coincident failure of
Suitable pressure
lower chemical injection
testing.
line packing gland in
order to leak into lower Leaking joint.
annulus.
138
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Periodic checks of
upper A annulus
pressure.
Dual upper bore packer
1. Annulus bore dual Gas passing from lower
provides isolation Failure of the packer Upper A annulus
Zone 1.9 to 1.11 bore upper packer - Incorrectly set annulus to upper 2.2
between the upper and sealing element pressurise with gas.
Primary Barrier annulus
lower annulus
Pressure testing when
packer was originally
installed.
Periodic checks of
upper A annulus
pressure.
Dual upper bore packer
1. Annulus bore dual Gas passing from lower
provides isolation Failure of the packer Deteriation of the Upper A annulus
Zone 1.9 to 1.11 bore upper packer - annulus to upper 2.2
between the upper and sealing element packer sealing element pressurise with gas.
Primary Barrier annulus
lower annulus
Pressure testing when
packer was originally
installed.
Dual upper bore packer Expansion and
1. Annulus bore dual Packer to be designed
provides isolation Failure of the packer Design working loads Additional tensile loads contraction of annulus
Zone 1.9 to 1.11 bore upper packer - for all reasonably 2.3
between the upper and sealing element are exceeded imposed on packer tubing in the absence of
Primary Barrier foreseeable events.
lower annulus a slip joint.
Periodic checks of
upper A annulus
Dual upper bore packer
1. Annulus bore dual Deteriation of the Gas passing from lower pressure.
provides isolation Failure of the tubing Upper A annulus
Zone 1.9 to 1.11 bore upper packer - annulus upper bore annulus to upper 2.2
between the upper and annulus to packer seal pressurise with gas.
Primary Barrier tubing stab seal annulus Pressure testing when
lower annulus
packer was originally
installed.
139
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Dual upper bore packer Expansion and Tubing stab to be
1. Annulus bore dual
provides isolation Failure of the tubing Design working loads Additional tensile loads contraction of annulus designed for all
Zone 1.9 to 1.11 bore upper packer - 2.3
between the upper and annulus to packer seal are exceeded imposed on packer tubing in the absence of reasonably foreseeable
Primary Barrier
lower annulus a slip joint. events.
Degradation of
Produce corrosion Optimisation of material
components over time.
To provide a conduit for products which are a design and selection
2. Lower well annulus
the gas to be injected Lower annulus casing Corrosion (where water source of debris and can
Zone 1.9 to 1.11 (9 5/8") - Primary 1.3
into the production split or parted is present) under certain situations
Barrier
string apply a pressure to
This less applicable to
mating surfaces Injection of inhibitors
13% Cr Alloys.
Deep pits and cavities. Optimisation of material
design and selection
To provide a conduit for
2. Lower well annulus
the gas to be injected Lower annulus casing Corrosion (where water
Zone 1.9 to 1.11 (9 5/8") - Primary Localised corrosion 4.3
into the production split or parted is present) If equipment is left for
Barrier
string an extended period of Good corrosion
time full wall management strategy
perforation can occur. and execution.
Gas lift pressure leakage
into the B annulus,
consequently annular
valves on B annulus
To provide a conduit for
2. Lower well annulus become primary barrier.
the gas to be injected Lower annulus casing
Zone 1.9 to 1.11 (9 5/8") - Primary Incorrect casing design Casing could part Correct casing design 3.3
into the production split or parted
Barrier
string
B annulus is rated to a
lower pressure than the
A annulus.
Gas lift pressure leakage
into the B annulus,
consequently annular
valves on B annulus
become primary barrier.
Design and
manufacturers quality
assurance in accordance
13% Cr steels with ISO and
To provide a conduit for B annulus is rated to a
2. Lower well annulus Embrittlement during vulnerable to temper equivalent.
the gas to be injected Lower annulus casing lower pressure than the
Zone 1.9 to 1.11 (9 5/8") - Primary manufacturing process Embrittlement under 2.3
into the production split or parted A annulus.
Barrier (high alloy steels) incorrect welding and
string
heat treatment regimes.
Plant operators would
monitor annulus
Loss of ductility
pressure.
resulting in a greater
sensitivity to cracking
under normal well
conditions (thermal
loading).
140
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Leakage of gas past
threaded connection
consequently Instrument monitor
pressurising the upper A facility on upper A
annulus. annulus.
Failure due to threads
2. Lower well annulus To provide a sealed
Failure of seal (metal to being out with
Zone 1.9 to 1.11 (9 5/8") - Primary mechanical joint Ineffective seal 2.2
metal) manufacturing
Barrier between components
tolerances
Additional loading on Pressure in upper A
the dual bore upper annulus monitored by
packer (hydrostatic plant operators.
head, weight of tubing
and gas lift pressure)
141
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Leakage of gas past
threaded connection
consequently Instrument monitor
pressurising the upper A facility on upper A
annulus. annulus.
2. Lower well annulus To provide a sealed
Failure of seal (metal to Excessive loading on Seal integrity reduced or
Zone 1.9 to 1.11 (9 5/8") - Primary mechanical joint 2.2
metal) seal arrangement failed
Barrier between components
Additional loading on Pressure in upper A
the dual bore upper annulus monitored by
packer (hydrostatic plant operators.
head, weight of tubing
and gas lift pressure)
142
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Manufacturers and
Gas lift is not effective,
designers quality
if well is reliant on gas
assurance scheme in
lift well may not flow.
accordance with ISO or
To provide a means of equivalent.
3. Side Pocket Mandrels Orifice valve fails to Orifice valve seized - Gas is not injected into
Zone 1.9 to 1.11 injecting gas into the 1.2
(SPM) - Primary Barrier open on demand closed the production string
bore string
Lower A annulus is
pressurised beyond
Orifice valves checked
normal operating
before installation in
conditions.
well.
Chemical injection line
Chemical injection
subject to back pressure
pipework and fittings
from injection gas under
should be designed and
normal chemical
constructed for all
injection activities.
reasonably foreseeable
Chemical injection
Provide a conduit to events.
4. Chemical Injection Chemical injection line Operational loads pressure will increase.
Zone 1.9 to 1.11 inject chemicals into the Line could split 2.3
Line rupture exceeded
production tubing
Chemical injection
Chemical injection line
pressure should be
pressurised with
monitored by competent
injection gas when not
individuals.
injecting chemicals.
Combination of
vibration and tension in
line due to slippage of
Provide a conduit to supports.
4. Chemical Injection Chemical injection line Operational loads Correct supporting
Zone 1.9 to 1.11 inject chemicals into the Fatigue 2.3
Line rupture exceeded arrangement.
production tubing
143
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Joint leakage at either
dual bore upper packer
or connection to
production tubing.
Chemical injection
pipework and fittings
should be designed and
Chemical injection line constructed for all
subject to back pressure reasonably foreseeable
Provide a conduit to from injection gas under events.
4. Chemical Injection Chemical injection line Operational loads
Zone 1.9 to 1.11 inject chemicals into the Incorrect installation normal chemical 2.3
Line rupture exceeded
production tubing injection activities.
Chemical injection
pressure will increase. Chemical injection
pressure should be
monitored by competent
individuals.
Chemical injection line
pressurised with
injection gas when not
injecting chemicals.
Due to residual liquids
from previous
operations.
144
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Upper chemical
injection line seal to
Periodic checks of upper
dual bore upper packer
A annulus pressure.
takes lower A annulus
Lower seal between
Provide a conduit to Deteriation of the lower Gas passing from lower pressure. Coincidental
4. Chemical Injection chemical injection line
Zone 1.9 to 1.11 inject chemicals into the chemical injection line annulus to upper failure of upper 2.2
Line and dual bore upper
production tubing seal annulus chemical injection line
packer Pressure testing when
seal to dual bore upper
packer was originally
packer to upper A
installed.
annulus pressurise with
gas.
145
APPENDIX F
146
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Designers and
To contain the gas Material specification manufacturers to have
within the A annulus of Bonnet seal leakage of seal incompatible ISO quality systems in
1. Gas Check Valve - Seal incorrectly Gradually leaking over
Zone 2.1 to 2.2 the wellhead on loss of with body causing place. Offshore 2.2
Primary Barrier (metal to metal joint) specified time supervisors checks and
pressurisation in the differential cell to be
upstream pipework. setup. balances i.e. permit to
work system etc.
Designers and
Dimensions, chemical
To contain the gas manufacturers to have
and mechanical
within the A annulus of ISO quality systems in
1. Gas Check Valve - Bonnet seal leakage Wrong seal taken from properties similar to place. Offshore
Zone 2.1 to 2.2 the wellhead on loss of actual specification, None 2.2
Primary Barrier (metal to metal joint) stores
pressurisation in the supervisors checks and
therefore no immediate
upstream pipework. balances i.e. permit to
effect.
work system etc.
Employ competent
individuals and
To contain the gas appropriate supervision
within the A annulus of is available.
1. Gas Check Valve - Bonnet seal leakage Seal incorrectly
Zone 2.1 to 2.2 the wellhead on loss of (metal to metal joint) Effective seal not made Gas leak around seal 2.1
Primary Barrier installed
pressurisation in the
upstream pipework.
Pressure tested after
envelope broken.
147
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Designers and
To contain the gas manufacturers to have
within the A annulus of Bonnet seal leakage Bolts installed ISO quality systems in
1. Gas Check Valve -
Zone 2.1 to 2.2 the wellhead on loss of incorrectly - incorrect Joint integrity reduced None. place. Offshore 3.2
Primary Barrier (metal to metal joint) supervisors checks and
pressurisation in the grade of bolt fitted
upstream pipework. balances i.e. permit to
work system etc.
Employ competent
To contain the gas individuals and
within the A annulus of Bolts installed appropriate supervision
1. Gas Check Valve - Bonnet seal leakage Instantaneous leak from
Zone 2.1 to 2.2 the wellhead on loss of (metal to metal joint) incorrectly - bonnet Joint integrity reduced is available. 2.3
Primary Barrier bonnet
pressurisation in the under tensioned
upstream pipework. Pressure tested after
envelope broken.
148
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Designers and
Dimensions, chemical
To contain the gas manufacturers to have
and mechanical
within the A annulus of ISO quality systems in
1. Gas Check Valve - Failure of Ring Gasket Wrong seal taken from properties similar to
Zone 2.1 to 2.2 the wellhead on loss of None place. Offshore 2.2
Primary Barrier Seal stores actual specification,
pressurisation in the supervisors checks and
therefore no immediate
upstream pipework. balances i.e. permit to
effect.
work system etc.
Designers and
To contain the gas Material specification manufacturers to have
within the A annulus of of seal incompatible ISO quality systems in
1. Gas Check Valve - Failure of Ring Gasket Seal incorrectly Gradually increasing
Zone 2.1 to 2.2 the wellhead on loss of Seal with body causing place. Offshore 2.2
Primary Barrier specified leak over time.
pressurisation in the differential cell to be supervisors checks and
upstream pipework. setup. balances i.e. permit to
work syst em etc.
Employ competent
individuals and
To contain the gas appropriate supervision
within the A annulus of is available.
1. Gas Check Valve - Failure of Ring Gasket Seal incorrectly Gas leakage around
Zone 2.1 to 2.2 the wellhead on loss of Effective seal not made 2.1
Primary Barrier Seal installed seal
pressurisation in the
upstream pipework.
Pressure tested after
envelope broken.
149
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Designers and
To contain the gas manufacturers to have
within the A annulus of Bolts installed ISO quality systems in
1. Gas Check Valve - Failure of Ring Gasket
Zone 2.1 to 2.2 the wellhead on loss of incorrectly - incorrect Joint integrity reduced None place. Offshore 3.2
Primary Barrier Seal
pressurisation in the grade of bolt fitted supervisors checks and
upstream pipework. balances i.e. permit to
work system etc.
Employ competent
To contain the gas individuals and
1. Gas Check Valve - within the A annulus of Failure of Ring Gasket Bolts installed Instantaneous leak from
appropriate supervision
Zone 2.1 to 2.2 the wellhead on loss of incorrectly - bonnet Joint integrity reduced is available. 2.3
Primary Barrier Seal bonnet
pressurisation in the under tensioned
upstream pipework. Pressure tested after
envelope broken.
150
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Designers and
Dimensions, chemical
To contain the gas manufacturers to have
and mechanical
2. Connecting within the A annulus of ISO quality systems in
Failure of Ring Gasket Wrong seal taken from properties similar to
Zone 2.1 to 2.2 Pipework - Primary the wellhead on loss of Seal None place. Offshore 2.2
stores actual specification,
Barrier pressurisation in the supervisors checks and
therefore no immediate
upstream pipework. balances i.e. permit to
effect.
work system etc.
Designers and
To contain the gas Material specification manufact urers to have
2. Connecting within the A annulus of Failure of Ring Gasket Seal incorrectly of seal incompatible ISO quality systems in
Gradually increasing
Zone 2.1 to 2.2 Pipework - Primary the wellhead on loss of with body causing place. Offshore 2.2
Seal specified leak over time. supervisors checks and
Barrier pressurisation in the differential cell to be
upstream pipework. setup. balances i.e. permit to
work system etc.
151
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Employ competent
individuals and
To contain the gas appropriate supervision
2. Connect ing within the A annulus of Failure of Ring Gasket Seal incorrectly is available.
Gas leakage around
Zone 2.1 to 2.2 Pipework - Primary the wellhead on loss of Effective seal not made 2.1
Seal installed seal
Barrier pressurisation in the
upstream pipework.
Pressure tested after
envelope broken.
Designers and
To contain the gas manufacturers to have
2. Connecting within the A annulus of Bolts installed ISO quality systems in
Failure of Ring Gasket
Zone 2.1 to 2.2 Pipework - Primary the wellhead on loss of Seal incorrectly - incorrect Joint integrity reduced None place. Offshore 3.2
Barrier pressurisation in the grade of bolt fitted supervisors checks and
upstream pipework. balances i.e. permit to
work system etc.
Employ competent
To contain the gas individuals and
2. Connecting within the A annulus of Bolts installed appropriate supervision
Failure of Ring Gasket Instantaneous leak from is available.
Zone 2.1 to 2.2 Pipework - Primary the wellhead on loss of incorrectly - bonnet Joint integrity reduced 2.3
Seal bonnet
Barrier pressurisation in the under tensioned
upstream pipework. Pressure tested after
envelope broken.
152
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Employ competent
To contain the gas individuals and
within the A annulus of appropriate supervision
the wellhead on loss of is available.
3. Tubing Spool Side Bonnet seal leakage Seal incorrectly
Zone 2.1 to 2.2 pressurisation in the Effective seal not made Gas leak around seal 2.1
Valve - Primary Barrier (metal to metal joint) installed
upstream pipework and
or on activation of
platform ESD Pressure tested after
envelope broken.
153
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
154
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
155
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
156
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Employ competent
To contain the gas individuals and
within the A annulus of appropriate supervision
1. Tubing Spool Side the wellhead on loss of is available.
Seal incorrectly
Zone 2.2 to 2.3 Valve - Primary pressurisation in the Bonnet Seal Leakage Effective seal not made Gas leak around seal 2.1
upstream pipework and installed
Barrier
or on activation of
platform ESD Pressure tested after
envelope broken.
157
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
158
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Employ competent
individuals and
appropriate supervision
2. Tubing spool to To provide a seal is available.
Seal incorrectly Gas leakage around
Zone 2.2 to 2.3 tubing hanger seal - between the tubing Leakage around seal Effective seal not made 1.1
installed seal
Primary Barrier hanger and tubing spool
159
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Designers and
Dimensions, chemical
manufacturers to have
and mechanical
2. Tubing spool to To provide a seal ISO quality systems in
Wrong seal taken from properties similar to
Zone 2.2 to 2.3 tubing hanger seal - between the tubing Leakage around seal None place. Offshore 1.2
stores actual specification,
Primary Barrier hanger and tubing spool supervisors checks and
therefore no immediate
balances i.e. permit to
effect.
work system etc.
Designers and
Material specification manufacturers to have
2. Tubing spool to To provide a seal of seal incompatible ISO quality systems in
Seal incorrectly Gradually increasing place. Offshore
Zone 2.2 to 2.3 tubing hanger seal - between the tubing Leakage around seal with body causing 1.2
specified leak over time.
Primary Barrier hanger and tubing spool differential cell to be supervisors checks and
setup. balances i.e. permit to
work system etc.
Designers and
manufacturers to have
ISO quality systems in
place. Offshore
Gradual determination
2. Tubing spool to To provide a seal supervisors checks and
of seal, causing Leakage around seal
Zone 2.2 to 2.3 tubing hanger seal - between the tubing Leakage around seal Ageing of seal balances. 2.2
increasing leakage over increasing over time.
Primary Barrier hanger and tubing spool
a period of time
Pressure test of
complete assembly.
160
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Pressure build up in the
B annulus.
Instrument monitor
facility on B annulus.
3. Tubing spool to To provide a seal Over a period of time Secondary barriers
Seal fails to remain
Zone 2.2 to 2.3 Casing Hanger Seal - between the casing Leakage around seal seal is permanently provided by tie down 3.3
energised
Primary Barrier hanger and casing spool deformed bolt arrangement,
Pressure in B annulus
chemical injection
monitored by plant
point, downhole safety
operators.
valve point, tubing
hanger to casing spool
seal.
Employ competent
individuals and
appropriate supervision
3. Tubing spool to To provide a seal is available.
Seal incorrectly Gas leakage around
Zone 2.2 to 2.3 Casing Hanger Seal - between the casing Leakage around seal Effective seal not made 1.1
installed seal
Primary Barrier hanger and casing spool
Designers and
Dimensions, chemical
manufacturers to have
and mechanical
3. Tubing spool to To provide a seal ISO quality systems in
Wrong seal taken from properties similar to
Zone 2.2 to 2.3 Casing Hanger Seal - between the casing Leakage around seal None place. Offshore 1.2
stores actual specification,
Primary Barrier hanger and casing spool supervisors checks and
therefore no immediate
balances i.e. permit to
effect.
work system etc.
Designers and
Material specification manufacturers to have
3. Tubing spool to To provide a seal of seal incompatible ISO quality systems in
Seal incorrectly Gradually increasing
Zone 2.2 to 2.3 Casing Hanger Seal - between the casing Leakage around seal with body causing place. Offshore 1.2
specified leak over time.
Primary Barrier hanger and casing spool differential cell to be supervisors checks and
setup. balances i.e. permit to
work system etc.
161
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Designers and
manufacturers to have
ISO quality systems in
Leakage around seal
place. Offshore
Gradual determination increasing over time.
3. Tubing spool to To provide a seal supervisors checks and
of seal, causing
Zone 2.2 to 2.3 Casing Hanger Seal - between the casing Leakage around seal Ageing of seal balances. 2.2
increasing leakage over Casing hanger may
Primary Barrier hanger and casing spool
a period of time drop as a result of seal
determination.
Pressure test of
complete assembly.
162
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
163
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
164
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Slag
To provide containment inclusion/laminations, Designers and
5. Upper Well annulus - for hydrocarbon gas to Stress raisers and crack cold laps and other manufacturers to have
Zone 2.2 to 2.3 Primary Barrier be injected into Casing Spool failure Manufacturing defect initiators ISO quality systems in 1.2
geometric
production bore imperfections in the place.
forged block.
165
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
166
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
167
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Slag
To provide a inclusion/laminations, Designers and
6. Tubing hanger body continuous bore Stress raisers and crack cold laps and other manufacturers to have
Zone 2.2 to 2.3 - Primary Barrier between the tree and Production bore failure Manufacturing defect initiators ISO quality systems in 1.1
geometric
the production tubing imperfections in the place.
forged block.
168
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Loss of integrity of
Excessive torque
packing gland body
required to install.
thread causing trapped Use of competent fitters
pressure to leak up to and effective
7. Tubing hanger supervision.
Provide a seal between upper packing gland.
downhole safety valve
the DHSV control line
Zone 2.2 to 2.3 control line lower Cross threads Ineffective seal Fitting improperly 1.3
and the tubing hanger Coincident failure of
packing gland (x2) - aligned.
body upper packing gland
Primary Barrier Suitable pressure
would lead to trapped
pressure leaking into testing.
cavity between tubing
Leaking joint.
hanger and tree.
Leaking joint
169
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
170
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Loss of integrity of
Excessive torque
packing gland body
required to install.
thread causing trapped Use of competent fitters
pressure to leak up to and effective
8. Tubing hanger supervision.
Provide a seal between upper packing gland.
downhole chemical
the Chemical Injection
Zone 2.2 to 2.3 injection line lower Cross threads Ineffective seal Fitting improperly 1.3
line and the tubing Coincident failure of
packing gland - aligned.
hanger body upper packing gland
Primary Barrier Suitable pressure
would lead to trapped
pressure leaking into testing.
cavity between tubing
Leaking joint.
hanger and tree.
Leaking joint
171
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Regular checks of
Pump Labouring
pump pressure and
(audible) - increased
injection rates by plant
Pressurisation of void injection rate
9. Tubing spool operators.
Provide a conduit for Rupture of chemical between the tubing
downhole chemical Pipework damaged
Zone 2.2 to 2.3 chemical injection into injection line - below hanger and the dual 1.2
injection line - Primary during installation
production bore tubing hanger bore upper packer with
Barrier Significant increase of
chemicals.
Competent fitters and
dosing rate of
appropriate installation
chemicals.
procedures.
Regular checks of
pump pressure and
injection rates by plant
Pressurisation of void
10. Tubing spool Provide a conduit for operators.
Rupture of down hole between the tubing Pump Labouring
downhole safety valve hydraulic fluid for Pipework damaged
Zone 2.2 to 2.3 safety valve control line hanger and the dual (audible) - increased 1.2
control line - Primary control of the down during installation
- below tubing hanger bore upper packer with injection rate
Barrier hole safety valves
hydraulic fluid
Competent fitters and
appropriate installation
procedures.
172
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
173
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Designers and
To provide a facility to
Material specification manufact urers to have
isolate the A,B or C
12. Annulus Tubing of seal incompatible ISO quality systems in
annulus and with Bonnet seal leakage Seal incorrectly Gradually leaking over
Zone 2.2 to 2.3 Spool Valves - Primary with body causing place. Offshore 2.2
instrumentation (metal to metal joint) specified time
Barrier differential cell to be supervisors checks and
monitor annular
setup. balances i.e. permit to
pressures
work system etc.
174
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Designers and
To provide a facility to Dimensions, chemical
manufacturers to have
isolate the A,B or C and mechanical
12. Annulus Tubing ISO quality systems in
annulus and with Bonnet seal leakage Wrong seal taken from properties similar to
Zone 2.2 to 2.3 Spool Valves - Primary instrumentation None place. Offshore 2.2
(metal to metal joint) stores actual specification,
Barrier supervisors checks and
monitor annular therefore no immediate
balances i.e. permit to
pressures effect.
work system etc.
To provide a facility to
Tree has been operating
isolate the A,B or C
12. Annulus Tubing in excess of 6 months,
annulus and with Bonnet seal leakage Seal incorrectly Seal incorrectly
Zone 2.2 to 2.3 Spool Valves - Primary None. initial teething 2.2
instrumentation (metal to metal joint) specified specified in design
Barrier problems have been
monitor annular
ironed out.
pressures
Employ competent
individuals and
To provide a facility to
isolate the A,B or C appropriate supervision
12. Annulus Tubing is available.
annulus and with Bonnet seal leakage Seal incorrectly
Zone 2.2 to 2.3 Spool Valves - Primary Effective seal not made Gas leak around seal 2.1
instrumentation (metal to metal joint) installed
Barrier monitor annular
pressures
Pressure tested after
envelope broken.
To provide a facility to
isolate the A,B or C Employ competent
12. Annulus Tubing Bolts installed
Bonnet seal leakage Sealing arrangement individuals and
Zone 2.2 to 2.3 Spool Valves - Primary annulus and with incorrectly - bolts Joint integrity reduced unevenly energised 3.3
instrumentation (metal to metal joint) appropriate supervision
Barrier unevenly tensioned
monitor annular is available.
pressures
Designers and
To provide a facility to
manufacturers to have
isolate the A,B or C
12. Annulus Tubing Bolts installed ISO quality systems in
annulus and with Bonnet seal leakage
Zone 2.2 to 2.3 Spool Valves - Primary instrumentation incorrectly - incorrect Joint integrity reduced None. place. Offshore 3.2
(metal to metal joint)
Barrier grade of bolt fitted supervisors checks and
monitor annular
balances i.e. permit to
pressures
work system etc.
175
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
To provide a facility to
isolate the A,B or C Employ competent
12. Annulus Tubing Bolts installed
annulus and with Bonnet seal leakage Seal distortion leading individuals and
Zone 2.2 to 2.3 Spool Valves - Primary incorrectly - bonnet Joint integrity reduced 2.3
instrumentation (metal to metal joint) to progressive leakage. appropriate supervision
Barrier over tensioned
monitor annular is available.
pressures
Employ competent
To provide a facility to
individuals and
isolate the A,B or C
12. Annulus Tubing Bolts installed appropriate supervision
annulus and with Bonnet seal leakage Instantaneous leak from
Zone 2.2 to 2.3 Spool Valves - Primary incorrectly - bonnet Joint integrity reduced is available. 2.3
instrumentation (metal to metal joint) bonnet
Barrier under tensioned
monitor annular
Pressure tested after
pressures
envelope broken.
To provide a facility to
Perform maintenance
isolate the A,B or C
12. Annulus Tubing and inspection in
Gas leaks from handle
Zone 2.2 to 2.3 Spool Valves - Primary annulus and with Stem Seal Leak Wear and Tear Loss of full seal accordance with 2.4
instrumentat ion assembly
Barrier manufacturers
monitor annular
requirements.
pressures
To provide a facility to
Perform maintenance
12. Annulus Tubing isolate the A,B or C
annulus and with Packing not set Gas leaks from handle and inspection in
Zone 2.2 to 2.3 Spool Valves - Primary Stem Seal Leak Loss of full seal accordance with 2.4
instrumentation correctly assembly
Barrier manufacturers
monitor annular
requirements.
pressures
To provide a facility to
Perform maintenance
isolate the A,B or C
12. Annulus Tubing and inspection in
annulus and with Gas leaks from handle
Zone 2.2 to 2.3 Spool Valves - Primary Stem Seal Leak Wrong packing fitted Loss of full seal accordance with 2.4
instrumentation assembly
Barrier manufacturers
monitor annular
requirements.
pressures
176
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
To provide a facility to
12. Annulus Tubing isolate the A,B or C Fitter backs off
annulus and with Audible evidence of
Zone 2.2 to 2.3 Spool Valves - Primary Grease fitting Leakage assembly rather than Partial leak Using competent fitters 3.3
instrumentation gas release
Barrier just the cap
monitor annular
pressures
To provide a facility to
Removal or backing off
isolate the A,B or C
12. Annulus Tubing of plug during routine
annulus and with Audible evidence of
Zone 2.2 to 2.3 Spool Valves - Primary Grease fitting Leakage greasing/lubricating Partial leak Using competent fitters 3.3
instrumentation gas release
Barrier removes inner check
monitor annular
valve
pressures
13. Upper annulus To provide a facility for Cartridge nose seal Employ competent
tubing spool monitor pressure monitoring failure, annulus gas Cartridge not fully Gas leakage around individuals and
Zone 2.2 to 2.3 None. 1.1
and vent assembly - equipment to be linked leakage past cartridge tightened cartridge walls appropriate supervision
Primary Barrier to the A annulus wall is available.
Designers and
Material specification manufacturers to have
13. Upper annulus To provide a facility for
of seal incompatible ISO quality systems in
tubing spool monitor pressure monitoring Seal incorrectly Gradually leaking over
Zone 2.2 to 2.3 Failure of bonnet seal with body causing place. Offshore 2.2
and vent assembly - equipment to be linked specified time
differential cell to be supervisors checks and
Primary Barrier to the A annulus
setup. balances i.e. permit to
work system etc.
Designers and
Dimensions, chemical
manufacturers to have
13. Upper annulus To provide a facility for and mechanical
ISO quality systems in
tubing spool monitor pressure monitoring Wrong seal taken from properties similar to
Zone 2.2 to 2.3 Failure of bonnet seal None place. Offshore 2.2
and vent assembly - equipment to be linked stores actual specification,
supervisors checks and
Primary Barrier to the A annulus therefore no immediate
balances i.e. permit to
effect.
work system etc.
177
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Employ competent
individuals and
appropriate supervision
13. Upper annulus To provide a facility for
is available.
tubing spool monitor pressure monitoring Seal incorrectly
Zone 2.2 to 2.3 Failure of bonnet seal Effective seal not made Gas leak around seal 2.1
and vent assembly - equipment to be linked installed
Primary Barrier to the A annulus
Pressure tested after
envelope broken.
Designers and
manufacturers to have
13. Upper annulus To provide a facility for ISO quality systems in
Bolts installed
tubing spool monitor pressure monitoring place. Offshore
Zone 2.2 to 2.3 Failure of bonnet seal incorrectly - incorrect Joint integrity reduced None. 3.2
and vent assembly - equipment to be linked
grade of bolt fitted supervisors checks and
Primary Barrier to the A annulus
balances i.e. permit to
work system etc.
178
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Employ competent
individuals and
13. Upper annulus To provide a facility for
Bolts installed appropriate supervision
tubing spool monitor pressure monitoring Instantaneous leak from
Zone 2.2 to 2.3 Failure of bonnet seal incorrectly - bonnet Joint integrity reduced is available. 2.3
and vent assembly - equipment to be linked bonnet
under tensioned
Primary Barrier to the A annulus
Pressure tested after
envelope broken.
Designers and
Dimensions, chemical
manufacturers to have
13. Upper annulus To provide a facility for and mechanical
ISO quality systems in
tubing spool monitor pressure monitoring Failure of Ring Gasket Wrong seal taken from properties similar to place. Offshore
Zone 2.2 to 2.3 actual specification, None 2.2
and vent assembly - equipment to be linked Seal stores
supervisors checks and
Primary Barrier to the A annulus therefore no immediate
balances i.e. permit to
effect.
work system etc.
179
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Designers and
Material specification manufacturers to have
13. Upper annulus To provide a facility for
of seal incompatible ISO quality systems in
tubing spool monitor pressure monitoring Failure of Ring Gasket Seal incorrectly Gradually increasing
Zone 2.2 to 2.3 with body causing place. Offshore 2.2
and vent assembly - equipment to be linked Seal specified leak over time. supervisors checks and
differential cell to be
Primary Barrier to the A annulus
setup. balances i.e. permit to
work system etc.
Employ competent
individuals and
appropriate supervision
13. Upper annulus To provide a facility for is available.
tubing spool monitor pressure monitoring Failure of Ring Gasket Seal incorrectly Gas leakage around
Zone 2.2 to 2.3 Effective seal not made 2.1
and vent assembly - equipment to be linked Seal installed seal
Primary Barrier to the A annulus
Pressure tested after
envelope broken.
Designers and
manufacturers to have
13. Upper annulus To provide a facility for ISO quality systems in
Bolts installed
tubing spool monitor pressure monitoring Failure of Ring Gasket
Zone 2.2 to 2.3 incorrectly - incorrect Joint integrity reduced None place. Offshore 3.2
and vent assembly - equipment to be linked Seal
grade of bolt fitted supervisors checks and
Primary Barrier to the A annulus balances i.e. permit to
work system etc.
180
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Employ competent
individuals and
13. Upper annulus To provide a facility for
Bolts installed appropriate supervision
tubing spool monitor pressure monitoring Failure of Ring Gasket Instantaneous leak from
Zone 2.2 to 2.3 incorrectly - bonnet Joint integrity reduced is available. 2.3
and vent assembly - equipment to be linked Seal bonnet
under tensioned
Primary Barrier to the A annulus
Pressure tested after
envelope broken.
Perform maintenance
13. Upper annulus To provide a facility for
and inspection in
tubing spool monitor pressure monitoring Gas leaks from handle
Zone 2.2 to 2.3 accordance with
and vent assembly - equipment to be linked Stem seal leakage Wear and Tear Loss of full seal assembly 2.4
manufacturers
Primary Barrier to the A annulus
requirements.
Perform maintenance
13. Upper annulus To provide a facility for
and inspection in
tubing spool monitor pressure monitoring Packing not set Gas leaks from handle
Zone 2.2 to 2.3 accordance with
and vent assembly - equipment to be linked Stem seal leakage correctly Loss of full seal assembly 2.4
manufacturers
Primary Barrier to the A annulus
requirements.
Perform maintenance
13. Upper annulus To provide a facility for
and inspection in
tubing spool monitor pressure monitoring Gas leaks from handle
Zone 2.2 to 2.3 accordance with
and vent assembly - equipment to be linked Stem seal leakage Wrong packing fitted Loss of full seal assembly 2.4
manufacturers
Primary Barrier to the A annulus
requirements.
Designers and
manufacturers to have
ISO quality systems in
Leakage around seal place. Offshore
To provide a secondary Gradual determination increasing over time.
14. Tubing hanger tie supervisors checks and
barrier between the of seal, causing
Zone 2.2 to 2.3 down bolts and seals - balances.
casing spool and the tie Leakage around seal Ageing of seal increasing leakage over Casing hanger may 2.2
Secondary Barrier
down bolts a period of time drop as a result of seal
determination.
Pressure test of
complete assembly.
181
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Loss of integrity of
packing gland body
15. Tubing hanger thread causing trapped Designers and
Provide a seal between pressure to leak into Component will only manufacturers to have
downhole safety valve
the DHSV control line Thread cut out of Either male or female mate for a proportion of ISO quality systems in
Zone 2.2 to 2.3 control line upper cavity between tubing 3.3
and the tubing hanger tolerance threads are cut oversize the threads (rather than
packing gland - hanger and tree. place. Offshore
body full length engagement)
Secondary Barrier supervisors checks and
On coincident failure of balances.
lower packing gland.
Excessive torque
Loss of integrity of required to install.
Use of competent fitters
packing gland body
and effective
15. Tubing hanger thread causing trapped
Provide a seal between supervision.
downhole safety valve pressure to leak into
the DHSV control line
Zone 2.2 to 2.3 control line upper Fitting improperly
and the tubing hanger cavity between tubing Cross threads Ineffective seal 1.3
packing gland - hanger and tree. aligned.
body
Secondary Barrier
Suitable pressure
On coincident failure of
testing.
lower packing gland.
Leaking joint.
182
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Joint difficult to make
up.
Loss of integrity of
Use of competent fitters
packing gland body
15. Tubing hanger Excessive torque and effective
Provide a seal between thread causing trapped required to install. supervision.
downhole safety valve pressure to leak into Improperly mated
the DHSV control line
Zone 2.2 to 2.3 control line upper cavity between tubing Damaged threads 1.3
and the tubing hanger threads
packing gland - hanger and tree.
body
Secondary Barrier
Fitting improperly Suitable pressure
On coincident failure of
aligned. testing.
lower packing gland.
Leaking joint
183
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Loss of integrity of
packing gland body
16. Tubing hanger thread causing trapped Designers and
Provide a seal between pressure to leak into Component will only manufacturers to have
downhole chemical
the Chemical Injection Thread cut out of Either male or female mate for a proportion of ISO quality systems in
Zone 2.2 to 2.3 injection line up per cavity between tubing 3.3
line and the tubing tolerance threads are cut oversize the threads (rather than
packing gland - hanger and tree. place. Offshore
hanger body full length engagement)
Secondary Barrier supervisors checks and
On coincident failure of balances.
lower packing gland.
Excessive torque
Loss of integrity of required to install.
Use of competent fitters
packing gland body
and effective
16. Tubing hanger thread causing trapped
Provide a seal bet ween supervision.
downhole chemical pressure to leak into
the Chemical Injection
Zone 2.2 to 2.3 injection line upper cavity between tubing Cross threads Ineffective seal Fitting improperly 1.3
line and the tubing
packing gland - hanger and tree. aligned.
hanger body
Secondary Barrier
Suitable pressure
On coincident failure of
testing.
lower packing gland.
Leaking joint.
184
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Joint difficult to make
up.
Loss of integrity of
Use of competent fitters
packing gland body
16. Tubing hanger Excessive torque and effective
Provide a seal between thread causing trapped required to install. supervision.
downhole chemical pressure to leak into Improperly mated
the Chemical Injection
Zone 2.2 to 2.3 injection line upper cavity between tubing Damaged threads 1.3
line and the tubing threads
packing gland - hanger and tree.
hanger body
Secondary Barrier
Fitting improperly Suitable pressure
On coincident failure of
aligned. testing.
lower packing gland.
Leaking joint
17. Tubing spool to tree Provide seal between Thermal/mechanical Catastrophic failure of Appropriate piping
Leakage of gas around Displacement from
Zone 2.2 to 2.3 outer flange seal - the tree and the spool gradients induce fatigue one or more bolts after design as per pipe stress 2.3
seal normal relative position
Secondary Barrier interface on bolts a period of time. analysis.
185
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Designers and
Dimensions, chemical
manufacturers to have
and mechanical
17. Tubing spool to tree Provide seal between ISO quality systems in
Leakage of gas around Wrong seal taken from properties similar to
Zone 2.2 to 2.3 outer flange seal - the tree and the spool None place. Offshore 1.2
seal stores actual specification,
Secondary Barrier interface supervisors checks and
therefore no immediate
balances i.e. permit to
effect.
work system etc.
Designers and
Material specification manufacturers to have
17. Tubing spool to tree Provide seal between of seal incompatible ISO quality systems in
Leakage of gas around Seal incorrectly Gradually increasing place. Offshore
Zone 2.2 to 2.3 outer flange seal - the tree and the spool with body causing 1.2
seal specified leak over time.
Secondary Barrier interface differential cell to be supervisors checks and
setup. balances i.e. permit to
work system etc.
Employ competent
individuals and
appropriate supervision
17. Tubing spool to tree Provide seal between is available.
Leakage of gas around Seal incorrectly Gas leakage around
Zone 2.2 to 2.3 outer flange seal - the tree and the spool Effectiv e seal not made 1.1
seal installed seal
Secondary Barrier interface
Designers and
manufacturers to have
18. Tubing spool ISO quality systems in
downhole safety valve place. Offshore
To provide a seal Gradual determination
control packing gland - between the DHSV supervisors checks and
of seal, causing Leakage around seal
Zone 2.2 to 2.3 Secondary Barrier Leakage around seal Ageing of seal balances. 2.2
control line and the increasing leakage over increasing over time.
gland bore a period of time
Outlet block assembly -
Tertiary Barrier
Pressure test of
complete assembly.
186
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Employ competent
18. Tubing spool individuals and
downhole safety valve appropriate supervision
control packing gland - To provide a seal is available.
Secondary Barrier between the DHSV Seal incorrectly Gas leakage around
Zone 2.2 to 2.3 Leakage around seal Effective seal not made 1.1
control line and the installed seal
gland bore
Outlet block assembly -
Tertiary Barrier Pressure tested after
envelope broken.
187
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Designers and
manufacturers to have
18. Tubing spool ISO quality systems in
downhole safety valve place. Offshore
Gradual determination
control packing gland - To provide a seal Leakage around seal
supervisors checks and
of seal, causing
Zone 2.2 to 2.3 Secondary Barrier between the gland body Leakage around seal Ageing of seal balances. 2.2
increasing leakage over increasing over time.
and the tubing spool
a period of time
Outlet block assembly -
Tertiary Barrier
Pressure test of
complete assembly .
188
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Employ competent
18. Tubing spool individuals and
downhole safety valve appropriat e supervision
control packing gland - To provide a seal is available.
Seal incorrectly Gas leakage around
Zone 2.2 to 2.3 Secondary Barrier between the gland body Leakage around seal Effective seal not made 1.1
installed seal
and the tubing spool
Outlet block assembly -
Tertiary Barrier Pressure tested after
envelope broken.
Designers and
19. Tubing spool
manufacturers to have
downhole chemical
ISO quality systems in
injection line packing
place. Offshore
gland - Secondary To provide a seal Gradual determination
supervisors checks and
Barrier between the chemical of seal, causing Leakage around seal
Zone 2.2 to 2.3 Leakage around seal Ageing of seal balances. 2.2
injection line and the increasing leakage over increasing over time.
Outer block assembly - gland bore a period of time
Tertiary Barrier
Pressure test of
complete assembly.
19. Tubing spool
Employ competent
downhole chemical
individuals and
injection line packing
appropriate supervision
gland - Secondary To provide a seal
is available.
Barrier between the chemical Seal incorrectly Gas leakage around
Zone 2.2 to 2.3 Leakage around seal Effective seal not made 1.1
injection line and the installed seal
Outer block assembly - gland bore
Tertiary Barrier
Pressure tested after
envelope broken.
189
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
19. Tubing spool
downhole chemical Designers and
injection line packing
Material specification manufacturers to have
gland - Secondary To provide a seal
of seal incompatible ISO quality systems in
Barrier between the chemical Leakage around seal Seal incorrectly Gradually increasing
Zone 2.2 to 2.3 with body causing place. Offshore 1.2
injection line and the specified leak over time. supervisors checks and
differential cell to be
Outer block assembly - gland bore
setup. balances i.e. permit to
Tertiary Barrier
work system etc.
190
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
19. Tubing spool
downhole chemical Designers and
injection line packing
Material specification manufacturers to have
gland - Secondary
To provide a seal of seal incompatible ISO quality systems in
Barrier Seal incorrectly Gradually increasing
Zone 2.2 to 2.3 between the gland body Leakage around seal with body causing place. Offshore 1.2
specified leak over time. supervisors checks and
and the tubing spool differential cell to be
Outer block assembly -
setup. balances i.e. permit to
Tertiary Barrier
work system etc.
Designers and
19. Tubing spool
manufacturers to have
downhole chemical
ISO quality systems in
injection line packing
place. Offshore
gland - Secondary Gradual determination
To provide a seal supervisors checks and
Barrier of seal, causing Leakage around seal
Zone 2.2 to 2.3 between the gland body Leakage around seal Ageing of seal balances. 2.2
increasing leakage over increasing over time.
and the tubing spool
Outer block assembly - a period of time
Tertiary Barrier
Pressure test of
complete assembly.
Pump Labouring
(audible)
Regular checks of
pump pressure injection
rates by plant operators.
20. Tubing spool Rupture of chemical Pressurisation of void Significant reduction or
Provide a conduit for
Zone 2.2 to 2.3 downhole chemical injection line - between Pipework damaged between the tree and cessation of dosing rate 1.2
chemical injection into
injection line - tubing spool and tree during installation tubing spool with of chemicals.
production bore
Secondary Barrier cavity chemicals.
Competent fitters and
appropriate installation
procedures.
Potential leakage from
ring gasket and tie
down bolts.
191
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Regular checks of
pump pressure and
injection rates by plant
21. Tubing spool Provide a conduit for Rupture of down hole Pressurisation of void operators.
Pump Labouring
Zone 2.2 to 2.3 downhole safety valve hydraulic fluid for safety valve control line Pipework damaged between the tree and 1.2
(audible) - increased
control line - Secondary control of the down - between tubing spool during installation tubing spool with
injection rate
Barrier hole safety valves and tree cavity hydraulic fluid
Competent fitters and
appropriate installation
procedures.
Slag
To provide containment inclusion/laminations, Designers and
1. Upper Well annulus - for hydrocarbon gas to Stress raisers and crackcold laps and other manufacturers to have
Zone 2.3 to 2.4 Primary Barrier be injected into Casing Spool failure Manufacturing defect initiators geometric ISO quality systems in 1.2
production bore imperfections in the place.
forged block.
192
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
193
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
194
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Correct specification of
seals.
Upper A annulus
already pressurised Correct specification of
with gas, therefore seals.
2. Annulus downhole Failure of two radially
To provide addition Failure of control line Leakage into the A pressure of gas
Zone 2.3 to 2.4 safety valve - Primary successive seals of the 2.1
barrier in A annulus housing annulus potentially higher than
Barrier component interface hydrocarbon fluid
inhibiting the leak into Periodic testing
the upper A annulus.
196
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
197
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Optimisation of
Deep pits and cavities.
material design and
selection
To give additional
4. B Annulus Casing - protection to the Production casing split Corrosion (where water
Zone 2.3 to 2.4 Localised corrosion 4.3
secondary barrier formation to the top of or parted is present) If equipment is left for
the pay zone. an extended period of
Good corrosion
time full wall
management strategy
perforation can occur.
and execution.
Gas lift pressure
leakage into the C
annulus, consequently
annular valves on C
To give additional annulus become
4. B Annulus Casing - protection to the Production casing split primary barrier.
Zone 2.3 to 2.4 secondary barrier formation to the top of or parted Incorrect casing design Casing could part Correct casing design 3.3
the pay zone.
C annulus is rated to a
lower pressure than the
B annulus.
198
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Gas lift pressure
Design and
leakage into the C
manufacturers quality
annulus, consequently
assurance in accordance
annular valves on C
Precipitation of with ISO and
To give additional annulus become
Embrittlement during Chromium Carbides equivalent.
4. B Annulus Casing - protection to the Production casing split primary barrier.
Zone 2.3 to 2.4 manufacturing process under incorrect welding 2.3
secondary barrier formation to the top of or parted
(high alloy steels) and heat treatment
the pay zone.
regimes.
Plant operators would
C annulus is rated to a
monitor annulus
lower pressure than the
pressure.
B annulus.
199
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Gas lift pressure
leakage into the C
Instrument monitor
annulus, consequently
annular valves on C facility on B & C
annulus become annulus.
To provide a sealed
4. B Annulus Casing - Failure of seal (metal toInsufficient make up primary barrier.
Zone 2.3 to 2.4 mechanical joint Ineffective seal 2.2
secondary barrier metal) torque
between components
Pressure in B and C
annulus monitored by
C annulus is rated to a
lower pressure than the plant operators.
B annulus.
200
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Gas lift pressure
leakage into the C
Instrument monitor
annulus, consequently
annular valves on C facility on B & C
annulus become annulus.
To provide a sealed
4. B Annulus Casing - Failure of threaded Joint integrity reduced primary barrier.
Zone 2.3 to 2.4 mechanical joint Shearing of threads 2.2
secondary barrier connection or failed
between components
Pressure in B and C
annulus monitored by
C annulus is rated to a
lower pressure than the plant operators.
B annulus.
Designers and
To provide a facility to
Material specification manufacturers to have
isolate the B annulus
5. B Annulus Tubing of seal incompatible ISO quality systems in
and with Bonnet seal leakage Seal incorrectly Gradually leaking over
Zone 2.3 to 2.4 Spool Valves - with body causing place. Offshore 2.2
instrumentation (metal to metal joint) specified time
Secondary Barrier differential cell to be supervisors checks and
monitor annular
setup. balances i.e. permit to
pressures
work system etc.
Designers and
To provide a facility to Dimensions, chemical
manufacturers to have
isolate the B annulus and mechanical
5. B Annulus Tubing ISO quality systems in
and with Bonnet seal leakage Wrong seal taken from properties similar to
Zone 2.3 to 2.4 Spool Valves - None place. Offshore 2.2
instrumentation (metal to metal joint) stores actual specification,
Secondary Barrier supervisors checks and
monitor annular therefore no immediate
balances i.e. permit to
pressures effect.
work system etc.
To provide a facility to
Tree has been operating
isolate the B annulus
5. B Annulus Tubing in excess of 6 months,
and with Bonnet seal leakage Seal incorrectly Seal incorrectly
Zone 2.3 to 2.4 Spool Valves - None. initial teething 2.2
instrumentation (metal to metal joint) specified specified in design
Secondary Barrier problems have been
monitor annular
ironed out.
pressures
201
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Employ competent
To provide a facility to individuals and
appropriate supervision
isolate the B annulus
5. B Annulus Tubing is available.
and with Bonnet seal leakage Seal incorrectly
Zone 2.3 to 2.4 Spool Valves - Effective seal not made Gas leak around seal 2.1
instrumentation (metal to metal joint) installed
Secondary Barrier monitor annular
pressures
Pressure tested after
envelope broken.
To provide a facility to
isolate the B annulus Employ competent
5. B Annulus Tubing Bolts installed
and with Bonnet seal leakage Sealing arrangement individuals and
Zone 2.3 to 2.4 Spool Valves - incorrectly - bolts Joint integrity reduced unevenly energised
instrumentation (metal to metal joint) appropriate supervision 3.3
Secondary Barrier unevenly tensioned
monitor annular is available.
pressures
Designers and
To provide a facility to
manufacturers to have
isolate the B annulus
5. B Annulus Tubing Bolts installed ISO quality systems in
and with Bonnet seal leakage
Zone 2.3 to 2.4 Spool Valves - incorrectly - incorrect Joint integrity reduced None. place. Offshore 3.2
instrumentation (metal to metal joint)
Secondary Barrier grade of bolt fitted supervisors checks and
monitor annular
balances i.e. permit to
pressures
work system etc.
To provide a facility to
isolate the B annulus Employ competent
5. B Annulus Tubing Bolts installed
and with Bonnet seal leakage Seal distortion leading individuals and
Zone 2.3 to 2.4 Spool Valves - incorrectly - bonnet Joint integrity reduced to progressive leakage. 2.3
instrumentation (metal to metal joint) appropriate supervision
Secondary Barrier over tensioned
monitor annular is available.
pressures
Employ competent
To provide a facility to
individuals and
isolate the B annulus
5. B Annulus Tubing Bolts installed appropriate supervision
and with Bonnet seal leakage Instantaneous leak from is available.
Zone 2.3 to 2.4 Spool Valves - instrumentation incorrectly - bonnet Joint integrity reduced 2.3
(metal to metal joint) bonnet
Secondary Barrier under tensioned
monitor annular
Pressure tested after
pressures
envelope broken.
202
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
To provide a facility to
Perform maintenance
5. B Annulus Tubing isolate the B annulus
and with Gas leaks from handle and inspection in
Zone 2.3 to 2.4 Spool Valves - Stem Seal Leak Wear and Tear Loss of full seal accordance with 2.4
instrumentation assembly
Secondary Barrier manufacturers
monitor annular
requirements.
pressures
To provide a facility to
Perform maintenance
isolate the B annulus
5. B Annulus Tubing and in spection in
and with Packing not set Gas leaks from handle
Zone 2.3 to 2.4 Spool Valves - Stem Seal Leak Loss of full seal accordance with 2.4
instrumentation correctly assembly
Secondary Barrier manufacturers
monitor annular
requirements.
pressures
To provide a facility to
Perform maintenance
isolate the B annulus
5. B Annulus Tubing and inspection in
and with Gas leaks from handle
Zone 2.3 to 2.4 Spool Valves - Stem Seal Leak Wrong packing fitted Loss of full seal accordance with 2.4
instrumentation assembly
Secondary Barrier manufacturers
monitor annular
requirements.
pressures
To provide a facility to
isolat e the B annulus
5. B Annulus Tubing Fitter backs off
and with Audible evidence of
Zone 2.3 to 2.4 Spool Valves - Grease fitting Leakage assembly rather than Partial leak Using competent fitters 3.3
instrumentation gas release
Secondary Barrier just the cap
monitor annular
pressures
To provide a facility to
Removal or backing off
isolate the B annulus
5. B Annulus Tubing of plug during routine
and with Audible evidence of
Zone 2.3 to 2.4 Spool Valves - Grease fitting Leakage greasing/lubricating Partial leak Using competent fitters 3.3
instrumentation gas release
Secondary Barrier removes inner check
monitor annular
valve
pressures
6. Upper annulus tubing To provide a facility for Cartridge nose seal Employ competent
spool monitor and vent pressure monitoring failure, annulus gas Cartridge not fully Gas leakage around individuals and
Zone 2.3 to 2.4 None. 1.1
assembly - Secondary equipment to be linked leakage past cartridge tightened cartridge walls appropriate supervision
Barrier to the B annulus wall is available.
203
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Designers and
Material specification manufacturers to have
6. Upper annulus tubing To provide a facility for
of seal incompatible ISO quality systems in
spool monitor and vent pressure monitoring Seal incorrectly Gradually leaking over
Zone 2.3 to 2.4 Failure of bonnet seal with body causing place. Offshore 2.2
assembly - Secondary equipment to be linked specified time supervisors checks and
differential cell to be
Barrier to the B annulus
setup. balances i.e. permit to
work system etc.
Designers and
Dimensions, chemical
manufacturers to have
6. Upper annulus tubing To provide a facility for and mechanical
ISO quality systems in
spool monitor and vent pressure monitoring Wrong seal taken from properties similar to place. Offshore
Zone 2.3 to 2.4 Failure of bonnet seal actual specification, None 2.2
assembly - Secondary equipment to be linked stores
supervisors checks and
Barrier to the B annulus therefore no immediate
balances i.e. permit to
effect.
work system etc.
Employ competent
individuals and
appropriate supervision
6. Upper annulus tubing To provide a facility for
is available.
spool monitor and vent pressure monitoring Seal incorrectly
Zone 2.3 to 2.4 Failure of bonnet seal Effective seal not made Gas leak around seal 2.1
assembly - Secondary equipment to be linked installed
Barrier to the B annulus
Pressure tested after
envelope broken.
204
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Designers and
manufacturers to have
6. Upper annulus tubing To provide a facility for
Bolts installed ISO quality systems in
Zone 2.3 to 2.4 spool monitor and vent pressure monitoring Failure of bonnet seal incorrectly - incorrect Joint integrity reduced None. place. Offshore 3.2
assembly - Secondary equipment to be linked supervisors checks and
grade of bolt fitted
Barrier to the B annulus
balances i.e. permit to
work system etc.
Employ competent
individuals and
6. Upper annulus tubing To provide a facility for appropriat e supervision
Bolts installed
spool monitor and vent pressure monitoring Instantaneous leak from is available.
Zone 2.3 to 2.4 Failure of bonnet seal incorrectly - bonnet Joint integrity reduced 2.3
assembly - Secondary equipment to be linked bonnet
under tensioned
Barrier to the B annulus
Pressure tested after
envelope broken.
205
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Designers and
Dimensions, chemical
manufacturers to have
6. Upper annulus tubing To provide a facility for and mechanical
ISO quality systems in
spool monitor and vent pressure monitoring Failure of Ring Gasket Wrong seal taken from properties similar to
Zone 2.3 to 2.4 None place. Offshore 2.2
assembly - Secondary equipment to be linked Seal stores actual specification,
supervisors checks and
Barrier to the B annulus therefore no immediate
balances i.e. permit to
effect.
work system etc.
Designers and
Material specification manufacturers to have
6. Upper annulus tubing To provide a facility for ISO quality systems in
of seal incompatible
spool monitor and vent pressure monitoring Failure of Ring Gasket Seal incorrectly Gradually increasing place. Offshore
Zone 2.3 to 2.4 with body causing 2.2
assembly - Secondary equipment to be linked Seal specified leak over time.
differential cell to be supervisors checks and
Barrier to the B annulus
setup. balances i.e. permit to
work system etc.
Employ competent
individuals and
appropriate supervision
6. Upper annulus tubing To provide a facility for
is available.
spool monitor and vent pressure monitoring Failure of Ring Gasket Seal incorrectly Gas leakage around
Zone 2.3 to 2.4 Effective seal not made 2.1
assembly - Secondary equipment to be linked Seal installed seal
Barrier to the B annulus
Pressure tested after
envelope broken.
206
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Designers and
manufacturers to have
6. Upper annulus tubing To provide a facility for
Bolts installed ISO quality systems in
spool monitor and vent pressure monitoring Failure of Ring Gasket
Zone 2.3 to 2.4 incorrectly - incorrect Joint integrity reduced None place. Offshore 3.2
assembly - Secondary equipment to be linked Seal supervisors checks and
grade of bolt fitted
Barrier to the B annulus
balances i.e. permit to
work system etc.
Employ competent
individuals and
6. Upper annulus tubing To provide a facility for appropriate supervision
Bolts installed
spool monitor and vent pressure monitoring Failure of Ring Gasket Instantaneous leak from is available.
Zone 2.3 to 2.4 incorrectly - bonnet Joint integrity reduced 2.3
assembly - Secondary equipment to be linked Seal bonnet
under tensioned
Barrier to the B annulus
Pressure tested after
envelope broken.
Perform maintenance
6. Upper annulus tubing To provide a facility for
and inspection in
spool monitor and vent pressure monitoring Gas leaks from handle
Zone 2.3 to 2.4 accordance with
assembly - Secondary equipment to be linked Stem seal leakage Wear and Tear Loss of full seal assembly 2.4
manufacturers
Barrier to the B annulus
requirements.
207
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Employ competent
individuals and
appropriate supervision
7. B annulus tubing To provide a seal is available.
Seal incorrectly Gas leakage around
Zone 2.3 to 2.4 spool to casing hanger between the casing Leakage around seal Effective seal not made 1.1
installed seal
seal - Primary Barrier hanger and casing spool
Designers and
Dimensions, chemical
manufacturers to have
and mechanical
7. B annulus tubing To provide a seal ISO quality systems in
Wrong seal taken from properties similar to place. Offshore
Zone 2.3 to 2.4 spool to casing hanger between the casing Leakage around seal actual specification, None 1.2
stores
seal - Primary Barrier hanger and casing spool supervisors checks and
therefore no immediate
balances i.e. permit to
effect.
work system etc.
Designers and
Material specification manufacturers to have
7. B annulus tubing To provide a seal of seal incompatible ISO quality systems in
Seal incorrectly Gradually increasing
Zone 2.3 to 2.4 spool to casing hanger between the casing Leakage around seal with body causing place. Offshore 1.2
specified leak over time.
seal - Primary Barrier hanger and casing spool differential cell to be supervisors checks and
setup. balances i.e. permit to
work system etc.
Designers and
manufacturers to have
ISO quality systems in
Leakage around seal
place. Offshore
Gradual determination increasing over time.
7. B annulus tubing To provide a seal supervisors checks and
of seal, causing
Zone 2.3 to 2.4 spool to casing hanger between the casing Leakage around seal Ageing of seal balances. 2.2
increasing leakage over Casing hanger may
seal - Primary Barrier hanger and casing spool
a period of time drop as a result of seal
determination.
Pressure test of
complete assembly.
208
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Correct specification of
seals.
209
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Upper A annulus
already pressurised Correct specification of
with gas, therefore seals.
1. Annulus downhole Failure of two radially
To provide addition Failure of control line Leakage into the A pressure of gas
Zone 2.4 to 2.6 safety valve - Primary successive seals of the 2.1
barrier in A annulus housing annulus potentially higher than
Barrier component interface
hydrocarbon fluid
inhibiting the leak into Periodic testing
the upper A annulus.
Periodic checks of
upper A annulus
pressure.
Dual upper bore packer No credible effect, gas
2. Annulus bore dual
provides isolation Failure of the packer already present in both
Zone 2.4 to 2.6 bore upper packer - Incorrectly set None. 2.2
between the upper and sealing element upper and lower A
Primary Barrier
lower annulus annulus.
Pressure testing when
packer was originally
installed.
Periodic checks of
upper A annulus
pressure.
Dual upper bore packer No credible effect, gas
2. Annulus bore dual
provides isolation Failure of the packer Determination of the already present in both
Zone 2.4 to 2.6 bore upper packer -
between the upper and sealing element packer sealing element None. upper and lower A 2.2
Primary Barrier
lower annulus annulus.
Pressure testing when
packer was originally
installed.
Periodic checks of
upper A annulus
pressure.
Dual upper bore packer No credible effect, gas
2. Annulus bore dual Determination of the
provides isolation Failure of the tubing already present in both
Zone 2.4 to 2.6 bore upper packer - annulus upper bore None. 2.2
between the upper and annulus to packer seal upper and lower A
Primary Barrier tubing stab seal
lower annulus annulus.
Pressure testing when
packer was originally
installed.
Produce corrosion Degradation of Optimisation of
products which are a components over time. material design and
To provide a conduit
3. Lower well annulus source of debris and selection
for the gas to be Lower annulus casing Corrosion (where water
Zone 2.4 to 2.6 (9 5/8") - Primary can under certain 1.3
injected into the split or parted is present)
Barrier situations apply a
production string
pressure to mating This less applicable to
surfaces 13% Cr Alloys. Injection of inhibitors
210
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Optimisation of
Deep pits and cavities.
material design and
selection
To provide a conduit
3. Lower well annulus
for the gas to be Lower annulus casing Corrosion (where water
Zone 2.4 to 2.6 (9 5 /8") - Primary Localised corrosion 4.3
injected into the split or parted is present) If equipment is left for
Barrier
production string an extended period of
Good corrosion
time full wall
management strategy
perforation can occur.
and execution.
Gas lift pressure
leakage into the B
annulus, consequently
annular valves on B
To provide a conduit annulus become
3. Lower well annulus
for the gas to be Lower annulus casing primary barrier.
Zone 2.4 to 2.6 (9 5/8") - Primary Incorrect casing design Casing could part Correct casing design 3.3
injected into the split or parted
Barrier
production string
B annulus is rated to a
lower pressure than the
A annulus.
211
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
212
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
213
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Manufacturers and
designers quality
assurance scheme in
accordance with ISO or
4. Side Pocket To provide a means of Gas is not injected at Gas lift is not effective, equivalent.
Orifice valve fails to
Zone 2.4 to 2.6 Mandrels (SPM) - injecting gas into the Incorrect set pressure the right level in the if well is reliant on gas 1.2
open on demand
Primary Barrier bore string production string lift well may not flow.
Chemical injection
Chemical injection line
pressure should be
pressurised with
monitored by
injection gas when not
competent individuals.
injecting chemicals.
Combination of
vibration and tension in
line due to slippage of
5. Chemical Injection Provide a conduit to supports.
Chemical injection line Operational loads Correct supporting
Zone 2.4 to 2.6 Line primary barrier inject chemicals into Fatigue 2.3
rupture exceeded arrangement.
the production tubing
214
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
215
SYSTEM SUB-SYSTEM FUNCTION FAILURE CAUSE EFFECT SYMPTOMS MITIGATION CRITICALITY
Upper chemical
injection line seal to Periodic checks of
dual bore upper packer upper A annulus
takes lower A annulus pressure.
Lower seal between
5. Chemical Injection Provide a conduit to Determination of the Gas passing from lower pressure. Coincidental
Zone 2.4 to 2.6 chemical injection line 2.2
Line primary barrier inject chemicals into lower chemical annulus to upper failure of upper
and dual bore upper
the production tubing injection line seal annulus chemical injection line
packer
seal to dual bore upper Pressure testing when
packer to upper A packer was originally
annulus pressurise with installed.
gas.
Failure of upper
chemical injection line
seal to dual bore upper
packer to upper A Periodic checks of
annulus pressurise with upper A annulus
gas. pressure.
Upper seal between
5. Chemical Injection Provide a conduit to Determination of the Gas passing from lower
chemical injection line
Zone 2.4 to 2.6 Line primary barrier inject chemicals into upper chemical annulus to upper 2.2
and dual bore upper
the production tubing injection line seal annulus
packer Failure of lower Pressure testing when
chemical injection line packer was originally
seal to dual bore upper installed.
packer to upper A
annulus pressurise with
gas.
216
APPENDIX G
217
Engi
neer
Engi
neer
Engi
neer
Engi
neer
Engi
neer
Engi
neer
Engi
neer
Engi
neer
Engi
neer
Engi
neer
Engi
neer
Engi
neer
Engi
neer
Engi
neer
Engi
neer
Engi
neer
Engi
neer
Engi
neer
Engi
neer
Engi
neer
Engi
neer
APPENDIX H
239
Engi
neer
Engi
neer
Engi
neer
Engi
neer
Engi
neer
Engi
neer
Engi
neer
OTO 2001/061