2026-03-05T11:14:34+01:00 2026-05-06T16:30:01+02:00 2026-03-05T11:14:34+01:00 2026-03-05T12:03:41+01:00 2026-05-06T16:30:01+02:00 xmp.d uuid:318897ee-e8a4-4abf-8c2c-24cc0acb782a editedScannedDoc 2026-03-05T11:28:01+01:00 Pages:38, 39, 40, 41, 42, 43, 44, 45, 47, 48, 49, 50, 51, 52, 53, 54, 55, 56, 57, 58, 59, 60, 61, 62, 63, 64 application/pdf tetml={filename={D:\drim\repository\projects\drim_78_0\metadata\4\a\4a3eb8f63413167f2737071434854497\4a3eb8f63413167f2737071434854497.tet.xml} elements={annotations=false bookmarks=false destinations=false fields=false javascripts = false} } granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} for offshore substations Classification: Internal Status: Final Expiry date: 1 of 69 granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} Title: Document no: C256-EQ-S-FD-00003 Classification: Internal Safety strategy for offshore substations MFW Baltyk II & MFW Baltyk III Contract no.: Project: MFW Baltyk 11 & MFW Baltyk III Distribution: Expiry date: Status Final Distribution date: 18/03/2022 Rev. no.: 01 Copy no.: Subjects: Context, Hazards, Safety in design, Barrier functions, Performance standards, safety strategies Remarks: Valid from: 18/03/2022 Updated: Responsible publisher: Authority to approvedeviations: Techn. responsible (Organisation unit / Name): Date/Signature: Responsible (Organisation unit/ Name): Wenche Kristin Rettedal/Offshore Substation Structural Lead Recommended (Organisation unit/ Name): Jens Olav Rundsag/Engineering Manager Vigdis Iren Birkedal/SSU Manager Approved by (Organisation unit/ Name): Lars G. Trodal/Facilities Manager Meindert Jan van der Velde/Project Manager Operation Classification: Internal Status: Final Expiry date: Date/Signature: Date/Signature: Date/Signature: 2 of 69 granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} Contents Doc. No. C256-EQ-S-FD-00003 Rev. no. 01 Valid from: 1 Objective and Target group ............................................................................................................................... 5 1.1 Objective................................................................................................................................................................. 5 1.2 Scope...................................................................................................................................................................... 6 1.3 Target group........................................................................................................................................................... 6 2 Context....... .................................. 6 2.1 ...................................................................................................................6 2.2 Facility description offshore substation................................................................................................................. 7 2.3 Metoceandata ....................................................................................................................................................... 8 2.3.1 Wind........................................................................................................................................................................ 9 2.3.2 Waves................................................................................................................................................................... 10 2.3.3 Current.................................................................................................................................................................. 11 2.4 Snow and icing..................................................................................................................................................... 12 2.5 Sea ice.................................................................................................................................................................. 12 2.6 Third party activities nearby the devebp merit................................................................................................... 12 2.7 Applicable rules and regulations ........................................................................................................................ 12 3 Risk management.............................................................................................................................................. 12 3.1 Safety in design principles................................................................................................................................... 12 3.2 Risk tolerance criteria.......................................................................................................................................... 13 3.3 Barrier functions................................................................................................................................................... 16 4 Hazard identification......................................................................................................................................... 18 5 Risk and consequence description................................................................................................................ 18 5.1 Ship collision and vessel bss of position........................................................................................................... 18 5.2 Explosion hazards ............................................................................................................................................... 19 5.3 Fire hazards.......................................................................................................................................................... 19 5.4 Insulation gas (SF6) hazards.............................................................................................................................. 20 5.5 Other hazards ...................................................................................................................................................... 20 6 Offshore substation - Safety strategies......................................................................................................... 22 6.1 Containment (PS 1 ............................................................................................................................................. 22 6.2 Natural ventilation and HVAC (PS 2)................................................................................................................. 23 6.3 Leak detectb n (PS 3).......................................................................................................................................... 24 6.4 Emergency Shutdown system (PS 4)................................................................................................................. 26 6.5 Open Drain system (PS 5).................................................................................................................................. 29 6.6 Ignition source control (PS 6).............................................................................................................................. 31 6.7 Fire detection (PS 7) ........................................................................................................................................... 32 6.8 Active Fire Protection (PS 9).............................................................................................................................. 38 6.9 Passive Fire Protection (PS 10).......................................................................................................................... 40 6.10 Emergency Power and Lightning (PS 11).......................................................................................................... 41 6.11 Process Safety (PS 12)....................................................................................................................................... 44 6.12 Alarm and Communication System for use in Emergency Situations (PS 13) ............................................... 45 Classification: Internal Status: Final Expiry date: 3of69 granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} Safety strategy for offshore substations MFW Battyk II & MFW Battyk III Doc. No. C256-EQ-S-FD-00003 Rev. no. 01 Valid from: 6.13 Escape, Evacuation and Rescue; EER (PS 14)........................................................................................... 47 6.14 Layout Design Principles and Explosion Barriers (PS 15)........................................................................... 54 6.15 Offshore cranes (PS 16A)............................................................................................................................ 56 6.16 Avoidance of vessel collisions (PS 19)........................................................................................................ 58 6.17 Structural integrity (PS 20) .......................................................................................................................... 60 6.18 Human Machine Interface and Alarm Management (PS 22)........................................................................ 62 6.19 Safety & automation system security (PS 23).............................................................................................. 64 7 Additional information............................................................................................................................... 65 7.1 Abbreviations and definitions....................................................................................................................... 65 7.2 Definitions.................................................................................................................................................... 66 7.3 Changes from previous version.................................................................................................................... 66 8 References ................................................................................................................................................. 67 9 Appendices................................................................................................................................................ 68 9.1 Appendix A - Specification for activefire protection systems....................................................................... 68 Classification: Internal Status: Final Expiry date: 4 of 69 granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} Safety strategy for offshore substations MFW Battyk II & MFW Baltyk III 1 Objective and Target group 1.1 Objective Doc. No. C256-EQ-S-FD-00003 Rev. no. 01 Valid from: This document describes the safety strategy for the offshore substation. The safety strategy is input to development of the concept and shall be further detailed during the engineering phase to document conclusions on safety aspects relevant for the development of the offshore substation and interface with the wind farm. The safety strategy describes how risks are to be managed based on the outcome of a systematic identification and evaluation of the hazards and effects which may arise on the specific installation. The aim of developing the specific safety strategy is to identify installation specific philosophies, strategies and requirements. This information shall outline the design principles for layout, configuration, arrangement, the selection and role of safety barriers to manage risk on the installation. Further the safety strategy shall define initial performance requirements and design requirements. In general, requirements in DNV-ST-0145 Offshore Substations shall apply, but this Safety Strategy provides supplementary requirements and clarification of safety barrier strategies applicable to the Baltyk II and Baltyk III Wind project. In case of conflicting requirements, the requirements in this safety strategy shall prevail. The document shall be used as specification for safety related aspects including detection and mitigation hazardous situations and events. This documentshall however not restrict designers in developing the most optimized design. The safety strategy shall be updated by Company during the engineering phases. Contractors who perform design of the OSS shall contribute with input to the strategy document, addressing specifics related to their proposed concept. If solutions chosen / proposed by Contractor conflicts with this document, Company shall be consulted. The safety strategy is structured according to the Company defined barrier systems, with the objective to: • Describe the need for and role of barriers that are established to manage risk related to major accidents. • Visualize the connection between risk and hazard evaluatio ns specific to the offshore substation and the wind farm hazards • Establish adequate understanding of the barriers in orderto make correct decisionsand understand their role. • Form a basis which can be used as a management tool to keep the integrity of the barriers intactduring operation and modifications. The safety strategy is a lifecycle document and shall follow the installations into the operation as documentation of the safety barriers and forfollow-up of the safety barriers. This safety strategy is established forthe project phase intended to suite engineering and construction work. This document describes Company minimum requirements. However, if national authority requirements are stricter these shall prevail. Classification: Internal Status: Final Expiry date: 5 of 69 granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} Safety strategy for offshore substations MFW Baltyk II & MFW Baltyk III 1.2 Scope Doc. No. C256-EQ-S-FD-00003 Rev. no. 01 Valid from: This safety strategy covers the offshore substation (structures, equipment and control of the OSS) and subsea installations within the scour protection area around the jacket. 1.3 Target group Target group for this document is the Company project organization, Company operations organization and project engineering, design Contractors and authorities. Furthermore, the document can be used as supporting documentation to Authority submissions. 2 Context 2.1 Baltyk II and Baltyk III wind project Classification: Internal Status: Final Expiry date: 6 of 69 granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} Safety strategy for offshore substations MFW Baltyk II & MFW Baltyk III 2.2 Facility description offshore substation Doc. No. C256-EQ-S-FD-00003 Rev. no. 01 Valid from: The offshore substation (OSS) will be normally unmanned and visited for inspection and maintenance activities. The control of the substation and the wind farm will be from a permanently manned control room within the maintenance base located onshore. Emergency offshore shelter at OSS shall be designed for 12 persons onboard (PoB) during normal operation. During offshore hook-up and commissioning and planned maintenance operations it should be possible to temporarily support up to 24 PoB when based on the vessel spread used to support the installation and commissioning The OSS will be supported by a jacket structure and is envisaged to be comprised of a cellar/cable deck (lower level), main deck, utility deck and a roof level. Classification: Internal Status: Final Expiry date: 7 of 69 granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} 012345ÿ74814395ÿ28ÿ2783ÿ774147ÿÿ145ÿÿÿÿ ÿÿ )*+ÿ,ÿ'-ÿ ./012ÿ3456ÿ!"#$"%"&"''''(ÿÿ <A=71/0ÿ7*J4*J/8*2ÿ345ÿ*/Aÿ8A*4ÿ8ÿ/+12ÿ/12*,87ÿ1,ÿ,*ÿ84/1,ÿ8ÿ1,30:*,*ÿ8A*ÿ8A*4ÿ84/1,ÿ ÿÿ @A*ÿ<B*4ÿ<42:81,ÿ28Cÿ43ÿDEF7ÿ17ÿ7<018ÿ1,8ÿ8Bÿ7*</4/8*ÿ<B*4ÿ<42:81,ÿ84/1,7GÿHÿ/,2ÿIÿ84/1,ÿ@A*ÿ8Bÿ84/1,7ÿ/4*ÿ ÿ@A*ÿ37A4*ÿ7:K78/81,ÿB10ÿ8=<1/0=ÿ,8/1,ÿ Lÿ@Bÿ<*4/81,/0ÿ84/1,7ÿ LÿH:;101/4=ÿM.ÿ457ÿ Lÿ@4/,7345*4Gÿ0*4Gÿ/,2ÿ7A:,8ÿ4*/84ÿ/4*/ÿ LÿN.ÿO9%ÿ7B18AJ*/4ÿ457Gÿ LÿH:;101/4=ÿJ*,*4/84ÿ Lÿ&14*ÿ7:<<4*771,GÿN.Hÿ/,2ÿK/8*4=ÿ457ÿ LÿMP*4ÿ/4*/Q810*8ÿ45ÿ Lÿ4/,*7ÿ34ÿ5/8*41/0ÿA/,201,Jÿ Lÿ)3ÿB18Aÿ<771K1018=ÿ34ÿN*01ÿA178ÿR5*2*+/ÿ4ÿ7<*1/0ÿ01387Sÿ Lÿ,840Gÿ/:85/81,ÿ/,2ÿ8*0*5ÿ457ÿ LÿT:K01ÿ45ÿ :<ÿ8ÿ!'''ÿ8,7ÿ217<0/*5*,8ÿ@A*ÿ%V.ÿ4ÿ8A*ÿ@.ÿB10ÿ,8ÿ78/=ÿ,,*8*2ÿBA*,ÿ<*47,,*0ÿ/4*ÿ,K/42ÿK:8ÿ0/8*2ÿ1,ÿ 0/,21,Jÿ/4*/7ÿ34ÿ:7*ÿ3ÿ7*4+1*ÿ37A4*ÿ+*77*0ÿR%V.Sÿ/,2ÿB/0Pÿ8ÿB4PÿK412J*ÿ7A/0ÿK*ÿ1,78/0*2ÿ@A*ÿ%V.ÿ71W*ÿ/,ÿK*ÿ ÿI/7*ÿ/7*ÿ34ÿ/*77ÿ8ÿ8A*ÿV%%ÿ17ÿK=ÿ@.ÿ2:41,Jÿ8A*ÿ<*4/81,7ÿ<A/7*ÿ+1/ÿ/*77ÿ0/22*47ÿ345ÿ7*/ÿ0*+*0ÿ9,ÿ/22181,Gÿ LÿU4P7A<ÿ/,2ÿ784/J*ÿ,8/1,*4ÿ 8A*ÿ31*02ÿ/8ÿ/ÿ2178/,*ÿ:8712*ÿ8A*ÿ7/3*8=ÿW,*ÿ @A*ÿV%%ÿB10ÿK*ÿ+1718*2ÿ/<<4;15/8*0=ÿ,*ÿ/ÿ=*/4ÿ34ÿ4:81,*ÿ1,7<*81,ÿ/,2ÿ5/1,8*,/,*ÿ/81+181*7ÿ/,2ÿ*+*4=ÿ8A4**ÿ XYZÿ\]^_`]abÿca^aÿ @A*ÿK*0Bÿ1,345/81,ÿ17ÿ*;84/8*2ÿ345ÿ4*3ÿ =*/47ÿ34ÿ/ÿ<0/,,*2ÿ:8/J*ÿ5/1,8*,/,*ÿ/5</1J,ÿ ÿ Lÿde"#$"f"%T"''''-g'eÿRhHÿ)#'-?"''!ÿ4*+ÿeSÿI/08=Pÿ9ÿ"ÿh*8*/,ÿ*71J,ÿI/717ÿ "#$"f"%T"''''-g'eÿRhHÿ)#'-?"''dÿ4*+ÿeSÿI/08=Pÿ9ÿ"ÿh*8*/,ÿ*71J,ÿI/717ÿ ÿ 0/77131/81,6ÿ9,8*4,/0ÿ ÿ %8/8:76ÿ&1,/0ÿ#;<14=ÿ2/8*6ÿ ÿ ÿ ÿ>ÿ3ÿ!?ÿ granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} 012345ÿ74814395ÿ28ÿ2783ÿ774147ÿÿ145ÿÿÿÿ 145ÿÿ ÿÿ !"#$"%"&"''''(ÿÿ )*+ÿ,ÿ'-ÿ ./012ÿ3456ÿ ÿÿ 0/77131/81,6ÿ9,8*4,/0ÿ %8/8:76ÿ&1,/0ÿ#;<14=ÿ2/8*6ÿ ÿ ÿ ÿ ÿ>ÿ3ÿ!>ÿ ?@A@BÿDEFGÿ H0"=*/4ÿI1,2ÿ47*ÿ-'ÿ5ÿ/J+*ÿ7*/ÿ0*+*0ÿ/4*ÿ7KI,ÿ1,ÿ&1L:4*ÿ(ÿ34ÿM/08=Nÿ9ÿ/,2ÿ31L:4*ÿ(ÿ34ÿM/08=Nÿ9ÿ ÿ ÿ OPQRSTÿVÿWÿXYWZT[Sÿ\P]^ÿS_`Tÿa_Sÿb[YcZdÿeÿ ÿ ÿ ÿ OPQRSTÿfÿWÿXYWZT[Sÿ\P]^ÿS_`Tÿa_Sÿb[YcZdÿeÿ ÿ ÿ • Ail year NORTH 20% Wind speed (m/s) ■ >'29 ■ 36 -2B ■ 24 -26 □ 22-24 □ 20-22 EAST 018-20 O16-1B Q 14 - 16 □ 12-14 □ 10-12 33-10 ■ S-8 ■ 4-8 10% SOUTH NORTH Wind speed in.'s ■ =■*» ■ 26-28 ■ 24-26 ■ ■22-24 020-22 EAST niB.2d 016-18 0'4-16 ■ U-14 □ 10-12 ■ 6-10 •A€S1 granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} Safety strategy for offshore substations MFW Baltyk II & MFW Baltyk III 2.3.2 Waves Doc. No. C256-EQ-S-FD-00003 Rev. no. 01 Valid from: All-year wave rose for Baltyk II and Baltyk III are shown in Figure 5 and Figure 6 respectively. Baltyk III - All year Classification: Internal Status: Final Expiry date: 10 of 69 granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} Safety strategy for offshore substations MFW Baltyk II & MFW Baltyk III 2.3.3 Current Doc. No. C256-EQ-S-FD-00003 Rev. no. 01 Valid from: The current rose at surface for Baltyk Hand Baltyk III are shown in Figure 7 and Figure 8 respectively. Baltyk II - 0 m - All year Current speed (cmls) Figure 7 - Current rose at surface at Baltyk II Baltyk III - 0 m - All year Figure 8 - Current rose at surface at Baltyk III Classification: Internal Status: Final Expiry date: 11 of 69 granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} Safety strategy for offshore substations MFW Baltyk II & MFW Baltyk III 2.4 Snow and icing Doc. No. C256-EQ-S-FD-00003 Rev. no. 01 Valid from: Wet snow may accumulate on surfacesand vertical structures, e.g. communication mast. Atmospheric icing is possible. Estimated ice thickness (data for 50 yrs available) at 100 meters on cylinders and non-rotating structure elements is approx. 30 mm. Specific assessment atmospheric icing on OSS is not performed. Sea spray icing is caused by freezing sea spray. Sea spray icing can be expected up to 25 meters above sea level and with the thickest ice layer of up to 80 mm (100 yrs) between 5-10 meter. There will also be ice accumulation below 5 m but not during extreme storm when large waves will transport heat to the lower region of the structure and the ice is exposed to thermal and mechanical deterioration. These values are equal f 2.5 Sea ice Sea ice can occur at Baltyk II & III and an average ice season is in range of 10-20 days while maximum duration is about 40 days. Expected frequency of occurrence of iceis5times per 50 years. The sea ice thickness at 100 years return period is estimated in ref /C256-EQ-Z-CA-00001_02 1 to be 0,37 m for Baltyk II and 0,40m for Baltyk III. 2.6 Third party activities nearby the development There are fishing activities within both wind farms and along the route for the export power cables. Within the wind farms the type of fishing gear used is bottom nets. There are also fishing vessels passing through the wind farms as there is an area for trawl fishing north of the wind farm areas. There are ship navigation routes both south of and north of the wind farms. AIS data show very low density of ship traffic in the vicinity of the wind farms as per today. When WTGs are present in the future and the sea maps are marked, the ship traffic is expected to be even lower. The OSS is located within the windfarm surrounded by the WTGs. 2.7 Applicable rules and regulations Reference is given to Appendix E of the Contract. 3 Risk management 3.1 Safety in design principles In general, systems that are easy to design, operate and maintain will be safer than more complex designs. This is also valid fordesign of safety systems. In priority it is recommended to develop our plant designs in the following order, ref Figure 9: Classification: Internal Status: Final Expiry date: 12 of 69 granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} Safety strategy for offshore substation Doc. No. C256-EQ-S-FD-00003 BEST 1. Inherent safe design Rev. no. 01 Valid from: Elimination of hazard - design it out Substitution - use something less hazardous 2. Systems as barriers Engineering controls - isolation and guarding Shutdown systems Fail safe principle 3. Manuel procedures Administrative controls - training and work scheduling Design for operation with low complexity 4. Personal Protective Equipment - last resort Figure 9 - Safety in design principles 3.2 Risk tolerance criteria Personnel and asset risk shall meet the risk tolerance criteria provided by s risk matrix shown in Figure 10. The consequence categories are described in Table 1. The interpretation of colours is described in Table 2. Consequence category Safer 1-3 4 5 6 7 8 9 Prob abiity category 1 2 3 4 5 6 7 8 <0.001% (<10* 5 /vr) 0.001-0.01% (10 -10 /vh 0.01-0.1% (10 -10 3 /vrU 0.1-1% (10 3 -10’ 2 /vr) 1-5% 5- 25% 25- 50% >50% Figure 10 - | |t Risk Tolerance Criteria, 9x8 matrix for activities with major accident potential outcome (internal reference R-105890, RM100) Classification: Internal Status: Final Expiry date: 13of69 granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} 012345ÿ74814395ÿ28ÿ2783ÿ774147ÿÿ145ÿÿÿÿ 145ÿÿ ÿÿ !"#$"%"&"''''(ÿÿ )*+ÿ,ÿ'-ÿ ./012ÿ3456ÿ ÿÿ 0/77131/81,6ÿ9,8*4,/0ÿ %8/8:76ÿ&1,/0ÿ#;<14=ÿ2/8*6ÿ ÿ ÿ ÿ ÿ->ÿ3ÿ!?ÿ @ABCDÿFÿGDHIJKLMKNOÿNPÿINOHDQRDOIDÿSKTLAIMUÿIAMDVNJKDHÿSWOMDJOACÿXQRKONJÿJDPDJDOIDÿYZ[\]^]_ÿ Y`FaaUÿ bNOHDQRDOIDÿ bAMDVNJcÿ defgheijÿlemhnlÿmopÿ HAPDMcÿ ÿ XOqKJNOTDOMÿ ÿ -ÿrÿ(ÿsÿt1,4ÿ t*21/0ÿ84*/85*,8uÿ1,v:4=uÿ *+*,8ÿ4ÿw4x"4*0/8*2ÿ 10,*77ÿw18yÿ,**2ÿ34ÿ 84*/85*,8ÿ4ÿw18yÿ 8*5<4/4=ÿy*/08yÿ*3*8ÿ.*4=ÿ01518*2ÿ15</87ÿz4*7818:81,ÿ815*ÿ{ÿ-ÿ5,8y|ÿ,ÿ<<:0/81,7ÿz0/0|uÿ *7=78*57ÿ4ÿ*,+14,5*,8/0=ÿ7*,7181+*ÿ/4*/7ÿ3ÿ0/0ÿ15<48/,*ÿ}/0ÿ 15</8ÿ,ÿ1,21+12:/0ÿ4~/,175ÿ0*+*0ÿ >ÿsÿt2*4/8*ÿ 9,v:4=uÿ*+*,8ÿ4ÿw4x" 4*0/8*2ÿ10,*77ÿ8y/8ÿ4*7:08ÿ1,ÿ 41*3ÿ/7*,*ÿ4ÿ4*78418*2ÿ sÿ7:7818:8*ÿw4xÿ4ÿ75*ÿ 3:,81,/0ÿ15</145*,8ÿ t*21/0=ÿ5/,/~*/0*ÿ %y48ÿ8*45ÿ15</87ÿz4*7818:81,ÿ815*ÿ{-ÿ=*/4|ÿ,ÿ<<:0/81,7ÿz0/0|uÿ *7=78*57ÿ4ÿ*,+14,5*,8/0=ÿ7*,7181+*ÿ/4*/7ÿ3ÿ0/0ÿ15<48/,*ÿ ÿsÿ%*41:7ÿ %*41:7ÿ1,v:4=uÿ*+*,8ÿ4ÿ w4x"4*0/8*2ÿ10,*77ÿw18yÿ /7*,*ÿ345ÿw4xuÿ 4*78418*2ÿw4xÿ4ÿ <*45/,*,8ÿy*/08yÿ*3*87ÿ €1~yÿ0*+*0ÿ3ÿ5*21/0ÿ 84*/85*,8uÿ7*41:7ÿ 3:,81,/0ÿ15</145*,8ÿ ÿ "%y48ÿ8*45ÿ15</87ÿz4*7818:81,ÿ815*ÿ{-ÿ=*/4|ÿ,ÿ<<:0/81,7ÿz,/81,/0ÿ4ÿ 4*~1,/0|uÿ*7=78*57ÿ4ÿ*,+14,5*,8/0=ÿ7*,7181+*ÿ/4*/7ÿ3ÿ,/81,/0ÿ4ÿ 4*~1,/0ÿ15<48/,*ÿ "t*21:5ÿ8*45ÿ15</87ÿz4*7818:81,ÿ815*ÿ-"(ÿ=*/47|ÿ,ÿ<<:0/81,7ÿz0/0|uÿ *7=78*57ÿ4ÿ*,+14,5*,8/0=ÿ7*,7181+*ÿ/4*/7ÿ3ÿ0/0ÿ15<48/,*ÿ !ÿsÿ%*+*4*ÿ -"(ÿ3/8/0181*7ÿ4ÿw4x" 4*0/8*2ÿ10,*77ÿsÿ*;<7:4*ÿ w18yÿ71~,131/,8ÿ013*ÿ 7y48*,1,~ÿ*3*87ÿ ÿ "t*21:5ÿ8*45ÿ15</87ÿz4*7818:81,ÿ815*ÿ-"(ÿ=*/47|ÿ,ÿ<<:0/81,7ÿ z,/81,/0ÿ4ÿ4*~1,/0|uÿ*7=78*57ÿ4ÿ*,+14,5*,8/0=ÿ7*,7181+*ÿ/4*/7ÿ3ÿ ,/81,/0ÿ4ÿ4*~1,/0ÿ15<48/,*ÿ "},~ÿ8*45ÿ15</87ÿz4*7818:81,ÿ815*ÿ("-'ÿ=*/47|ÿ,ÿ<<:0/81,7ÿz0/0|uÿ *7=78*57ÿ4ÿ*,+14,5*,8/0=ÿ7*,7181+*ÿ/4*/7ÿ3ÿ,/81,/0ÿ15<48/,*ÿ �‚ÿsÿt/v4ÿ >"'ÿ3/8/0181*7ÿ4ÿ10,*77sÿ *;<7:4*ÿ/7*7ÿw18yÿ 71~,131/,8ÿ013*ÿ7y48*,1,~ÿ *3*87ÿ/,2sÿ4ÿ0/4~*4ÿ</487ÿ 3ÿ1,78/0/81,sÿ<0/,8sÿ31*ÿ"}/4~*ÿ10ÿ7<10ÿ1,ÿ<<:0/8*2ÿ/4*/ÿ "},~ÿ8*45ÿ15</87ÿz4*7818:81,ÿ815*ÿ("-'ÿ=*/47|ÿ,ÿ<<:0/81,7ÿz,/81,/0ÿ 4ÿ~0/0|uÿ*7=78*57ÿ4ÿ*,+14,5*,8/0=ÿ7*,7181+*ÿ/4*/7ÿ3ÿ~0/0ÿ4ÿ ,/81,/0ÿ15<48/,*ÿ ".*4=ÿ0,~ÿ4ÿ<*45/,*,8ÿ15</87ÿz4*7818:81,ÿ815*ÿƒÿ-'ÿ=*/47|ÿ,ÿ <<:0/81,7ÿz4*~1,/0|uÿ*7=78*57ÿ4ÿ*,+14,5*,8/0=ÿ7*,7181+*ÿ/4*/7ÿ 3ÿ4*~1,/0ÿ15<48/,*ÿ „‚ÿsÿ/8/784<y1ÿ'"''ÿ3/8/0181*7ÿ4ÿ10,*77sÿ *;<7:4*ÿ/7*7ÿw18yÿ 71~,131/,8ÿ013*ÿ7y48*,1,~ÿ *3*87ÿ/,2sÿ4ÿ5/1,ÿ</48ÿ3ÿ 1,78/0/81,sÿ<0/,8sÿ31*ÿ"}/4~*ÿ10ÿ7<10ÿ1,ÿ2*,7*0=ÿ<<:0/8*2ÿ/4*/ÿ ".*4=ÿ0,~ÿ4ÿ<*45/,*,8ÿ15</87ÿz4*7818:81,ÿ815*ÿƒ-'ÿ=*/47|ÿ,ÿ <<:0/81,7ÿz,/81,/0ÿ4ÿ~0/0|uÿ*7=78*57ÿ4ÿ*,+14,5*,8/0=ÿ7*,7181+*ÿ /4*/7ÿ3ÿ~0/0ÿ4ÿ,/81,/0ÿ15<48/,*ÿ ?‚ÿsÿ#;84*5*ÿ t4*ÿ8y/,ÿ''ÿ3/8/0181*7ÿ 10,*77sÿ*;<7:4*ÿ/7*7ÿ w18yÿ71~,131/,8ÿ013*ÿ 7y48*,1,~ÿ*3*87ÿ/,2s4ÿ 077ÿ3ÿ 1,78/0/81,s<0/,8s31*ÿ"}/4~*ÿ/,2ÿ0,~"0/781,~ÿ10ÿ7<10ÿ07*ÿ8ÿ2*,7*0=ÿ<<:0/8*2ÿ7y4*01,*ÿ ÿ ‚ÿ,7*…:*,*ÿ/8*~4=ÿ�uÿ„ÿ/,2ÿ?ÿ/4*ÿ,712*4*2ÿ5/v4ÿ/12*,87ÿ1,ÿ#…:1,4ÿ ÿ granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} strategy for offshore substations Doc. No. C256-EQ-S-FD-00003 Rev. no. 01 Valid from: Table 2 Interpretation of colours in design phase (internal reference R -11452, RM100) Risk level ORANGE YELLOW GREEN Mitigation and sharing of risk Single red risk is generally intolerable and far beyond the Group's risk tolerance criteria. Mitigating actions mustbe implemented as soon as possible. Singleorange risk is generally intolerable, and mitigating actionsmustbe implemented. Mitigating actions shall be identified based on the ALARP (As Low As Reasonably Practicable)/ BAT (Best Available Technology) principle or other applicable principles subject to relevantjurisdiction(s). Risks in the green zone are generally tolerable and actions are normally not required. The following main safety functions are further defined for the OSS: • The main load carrying capacity (structure) shall be intact until the installation has been evacuated (in manned scenarios), which means that there must not be extensive deformation or collapse of the whole or considerable parts ofthe installation before evacuation. • Installation parts with functions that are vital to combat accidents and/or ensure safe shutdown shall be intact until the emergency activity has been completed or the facility has been evacuated. • Mustering areas, evacuation means, and other areas defined as "safe areas" shall be protected so that they remain intact until the facility has been evacuated • At least one escape route for personnel in other areas than the area(s) exposed to the initial accidental event shall be intact until all personnel have escaped to safe area. The annual probability of loss of the main safety functions shall be lower than 1 x 10 4 for each ofthe following accidental loads: • Heat loads (e.g. due to fires in combustible materials such as transformer oil, diesel etc.) • Smoke and toxic loads (e.g. due fires in combustible materials such as transformer oil, diesel etc.) • Exp losion loads (e.g. related to transformer failure) • Impact loads (e.g. collision loads from vessels, dropped object loads from lifting operations, etc.) • Extreme environmental loads, such as o Wind, wave, current o Sea ice o Icing o Earthquake Based on a perceived well known and controllable risk picture, these quantitative criteria may be assumed complied with by using the following minimum design criteria: • Platform structural integrity and robust layout shall secure safe escape from all areas of the platform during an incident, maintaining the main safety functions • The fire protection design shall ensure that a fire or explosion in the equipment is contained and will not lead to escalation to other areas or parts of the electrical system. Segregation of transformers and other critical Classification: Internal Status: Final Expiry date: 15of69 granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} 012345ÿ74814395ÿ28ÿ2783ÿ774147ÿÿ145ÿÿÿÿ ÿÿ )*+ÿ,ÿ'-ÿ ./012ÿ3456ÿ!"#$"%"&"''''(ÿÿ ÿÿBÿCÿ314*"ÿ/,2ÿ*;<071,ÿ/,/0=717ÿ17ÿ4*?:14*2ÿ8ÿ2:5*,8ÿ8@*ÿ2*71D,ÿ/,2ÿCEC)Fÿ*+/0:/81,7ÿ7@/0ÿA*ÿ5/2*ÿ *?:1<5*,8ÿ7@/0ÿA*ÿ*,7:4*2ÿ7ÿ8@/8ÿ/ÿ314*ÿ4ÿ*;<071,ÿ1,ÿ,*ÿ84/,7345*4ÿ2*7ÿ,8ÿ0*/2ÿ8ÿ5<0*8*ÿ077ÿ3ÿ <42:81,ÿ ÿGÿHIJKLMNIOPIÿRSIPTÿU@*ÿ215*,71,1,Dÿ314*ÿ0/2ÿ34ÿ10"310*2ÿ84/,7345*47ÿ/4*ÿ2*8*451,*2ÿA=ÿ8@*ÿ<0ÿ314*ÿ GÿHIJKLMNIOPIÿ]^_ǸLSNKTÿU@*ÿ215*,71,1,Dÿ*;<071,ÿ0/2ÿ34ÿ10"310*2aÿ84/,7345*47ÿ/4*ÿ2*8*451,*2ÿA=ÿ 7:A7*?:*,8ÿ8ÿ/ÿ84/,7345*4ÿ*;<071,ÿ7*,/41ÿV/,ÿ*;<071,ÿW10ÿ4:<8:4*ÿ8@*ÿ84/,7345*4ÿ4*7:081,Dÿ1,ÿ 077ÿ3ÿ84/,7345*4ÿ10ÿ8ÿ8@*ÿ7:4:,21,D7XÿU@*ÿ71Y*ÿ3ÿ8@*ÿ<0ÿ17ÿ2*8*451,*2ÿA=ÿ8@*ÿ71Y*ÿ3ÿ8@*ÿ A:,21,Dÿ4ÿ,8/1,5*,8ÿ/4*/ÿ/,2ÿ/ÿ8=<1/0ÿ@*/8ÿ30:;ÿ/,ÿA*ÿ3ÿ8@*ÿ42*4ÿ3ÿ- 8@*ÿ<0ÿ314*ÿW10ÿA*ÿ2*8*451,*2ÿA=ÿ8@*ÿ*+/<4/81,ÿ4/8*ÿV8=<1/0ÿ /4*/ÿ /,ÿ1,8*4,/0ÿ*0*841/0ÿ/4bÿ0*/21,Dÿ8ÿ/ÿ84/,7345*4ÿ4:<8:4*ÿ4*7:081,Dÿ1,ÿ/,ÿ1D,18*2ÿD/7ÿ0:2ÿV,8/1,1,Dÿ A8@ÿ10ÿ5178ÿ/,2ÿ<=40=717ÿ4*/81,ÿ<42:87XÿU@*ÿ*,*4D=ÿ1,+0+*2ÿV34ÿD/7ÿ0:2ÿ71Y*Xÿ17ÿ2*8*451,*2ÿA=ÿ 'ÿD\5\7Xÿ/,2ÿ8@*ÿ24/1,ÿ/</18=ÿ1,ÿ8@*ÿ 'ÿZ[\5ÿU@*ÿ2:4/81,ÿ3ÿ ÿBÿ]^eIPOPÿkPJelPITÿU@*ÿ1,78/0/81,ÿ17ÿ2*71D,*2ÿ8ÿ/7ÿ51,15:5ÿW18@78/,2ÿ8@*ÿ-''"=*/4ÿ4*8:4,ÿ<*412ÿ7845ÿ BÿcO_JdeÿǸJfLÿgÿhPLLP`LTÿU@*ÿ784:8:4*ÿ7@/0ÿA*ÿ2*71D,*2ÿ8ÿW18@78/,2ÿ/ÿ0171,ÿ345ÿ%i.ÿW18@ÿ217<0/*5*,8ÿ3ÿ !'''ÿ8ÿ/,2ÿ+*77*0ÿ7<**2ÿ51,15:5ÿÿ5\7ÿ/7ÿ<*4ÿ4*?:14*5*,87ÿ1,ÿ."%U"'-j 8@*ÿ14:18ÿA4*/Z*4ÿ815*ÿ/,2ÿ8@*ÿ84/,7345*4ÿ4/81,Dÿ ,2181,7ÿW18@:8ÿ*;<*41*,1,Dÿ/,=ÿ15</145*,8ÿ3ÿ8@*ÿ7/3*8=ÿ3:,81,7ÿ4ÿ1,8*D418=ÿ3ÿ8@*ÿ1,78/0/81,ÿU@*ÿ ÿ 1,78/0/81,ÿ17ÿ:,5/,,*2ÿ1,ÿ*;84*5*ÿW*/8@*4bÿA:8ÿ18ÿ7@/0ÿ/7ÿ51,15:5ÿA*ÿ2*71D,*2ÿ34ÿ/ÿ-'''"=*/4ÿ4*8:4,ÿ<*412ÿ CE%ÿ*+*,8ÿ /,/0=717ÿ7@/0ÿA*ÿ<*4345*2ÿ 93ÿ8@*ÿ/A+*ÿ<1,87ÿ/4*ÿ/2@*4*2ÿ8bÿ3:48@*4ÿ?:/,8131/81,ÿ17ÿ2**5*2ÿ:,,**77/4=ÿi8@*4W17*bÿ,45/0ÿ?:/,818/81+*ÿ417Zÿ mnmÿoJISPIÿMpKdeSNKLÿ ÿ ÿq/41*47ÿ7@/0ÿA*ÿ1,ÿ<0/*ÿ8ÿ<4*+*,8ÿ/ÿ71,D0*ÿ*+*,8ÿ8ÿ2*+*0<1,Dÿ1,8ÿ5/r4ÿ/12*,87ÿCÿ84/2181,/0ÿA/41*4ÿ21/D4/5ÿ 10:784/81,Dÿ8@*ÿ<41,1<0*ÿ3ÿA/41*4ÿ3:,81,7ÿ8ÿ<4*+*,8ÿ:,W/,8*2ÿ*+*,87ÿ/,2ÿ,7*?:*,*7ÿ/4*ÿ7@W,ÿ1,ÿ&1D:4*ÿ--ÿ 0/77131/81,6ÿ9,8*4,/0ÿ ÿ %8/8:76ÿ&1,/0ÿ#;<14=ÿ2/8*6ÿ ÿ ÿ ÿ-!ÿ3ÿ!>ÿ granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} Safety strategy for offshore substations Doc. No. C256-EQ-S-FD-00003 NORMAL FAULT, HAZARD AND OPERATION ACCIDENTSITUATIONS Reduce probability of fault, hazard and accident situations Identify conditions that can lead to fault, hazard and accident situations Reduce possibility of fault, hazard and accident situations developing into unwanted event Rev. no. 01 Valid from: UNWANTED EVENT Limit possible consequence, damage CONSEQUENSES, LOSS, DAMAGE Figure 11 - Barrier diagram indicating barrier functions (shown in red) to prevent unwanted events and consequences Company has, based on systematic review of different hazard and accident scenarios, internal and external requirements, international standards and best practices, established company requirements to barriers for O&G facilities classified as performance requirements and sorted by performance standards (PS). The company performance standards for O&G offshore facilities are provided inTR1055. Relevant performance standard definitions are used in this safety strategy for the OSS in order to provide a comparable basis towards the standardized barrier definitions within the Company, see Table 3. The role and need for barriers according to this structure are provided in chapter 6. Table 3 Performance Standards (PS) for the offshore substation # Barriers # Barriers PS1 Containment PS13 Alarm and Communication System for use in Emergency Situations PS2 Natural ventilation and HVAC PS14 Escape, Evacuation and Rescue (EER) PS3 Leak d etection PS15 Layout Design Principles and Explosion Barriers PS4 Emergency Shut Down (ESD) PS16A Offshore cranes PS5 Open drain PS16B N/A PS6 Ignition source control PS17A N/A PS7 Fire Detection PS17B N/A PS8 N/A PS18 N/A PS9 Active Fire Protection PS19 Avoidance of vessel collisions PS10 Passive Fire Protection PS20 Structural integrity PS11 Emergency Power and Lightning PS22 Human Machine Interface and Alarm Management PS12 Process Safety PS23 Safety & automation system security Classification: Internal Status: Final Expiry date: 17of69 granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} Safety strategy for offshore substations Doc. No. C256-EQ-S-FD-00003 4 Hazard identification Rev. no. 01 Valid from: The following preliminary hazards have been identified (to be evaluated and further detailed in next phase/revision), ref Table 4. Table 4 Hazard identification ■ID Hazard PS Ship collision with Service Operation Vessel (SOV), Crew Transfer Vessel (CTV), fishing vessel or 19, 20 passing merchant vessel 2 SOV loss position causing gangway impact to critical equipment/structures orpersonnel 15, 19 3 Explosion as result of internal arcing fault in oil filed transformers and rupture/release of explosive gas and oil mist 4 Fire in oraround oil filled transformers or shunt reactors. Heat ortoxicsmoke exposure to personnel 5 Fire in electrical systems (short circuit, overload, malfunction of equipment). Heat ortoxicsmoke exposure to personnel 6 Fire in hydrocarbon systems (Hydraulic Oils, diesel engine, etc.). Heat or toxic smoke exposure to personnel 15 5. 7,10, 14, 15 7,10,12, 14,15 5, 7,10, 12, 15 7 Explosion due to explosive atmosphere from battery hydrogen release 2.3,6 8 Oxygen deprivation / asphyxia and greenhouse gas release due to leaks of SF6 from gas-insulated switchgear(GIS)and gas -insulated busbars (GIB), e.g inert gas for fire suppression. 9 Handling / exposure to SF6 decomposition products after internal arc fault. 2 10 Dropped objects 15, 16A 11 Man overboard 14 12 Loss of containment / spills to environment 1, 3 13 Hurricane/ adverse weather 20 14 Accumulation of snow and ice 2 15 Security incidents 15, 23 16 Global structural failure 20 17 Personnel injury due to electricshock 14 18 Personnel injury due to material handling 15 19 Excessive buildup of bird guano 14, 20 5 Risk and consequence description This section provides a description of the risksand consequences related to the hazards identified in section 4. 5.1 Ship collision and vessel loss of position Ship collision with Service Operation Vessel (SOV). Crew Transfer Vessel (CTV). fishing vessel or passing merchant vessel. Collision may happen during vessel approach to transfer people via walk to work bridge, boat landing or for cargo handling. Reason for collision may be operator failure, failure of dynamic position system, vessel steering system or propulsion system, e.g. black-out of machinery. Classification: Internal Status: Final Expiry date: 2,3 18of69 granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} 012345ÿ74814395ÿ28ÿ2783ÿ774147ÿÿ145ÿÿÿÿ ÿÿ )*+ÿ,ÿ'-ÿ ./012ÿ3456ÿ!"#$"%"&"''''(ÿÿ 8F*ÿ,0=ÿ+*77*07ÿ345ÿ8F*ÿ<*4/84ÿ,ÿ8F*ÿ31*02ÿ/,2ÿ/77178/,*ÿ5/=ÿ@*ÿ0*38ÿ8ÿ4/,250=ÿ</771,Aÿ+*77*07ÿ/,2ÿ,/81,/0ÿ 1,H:41*7ÿ/,2ÿ<*47,,*0ÿ1,8ÿE/8*4ÿ5/=ÿ@*ÿ/ÿ4*7:08ÿB.I7C%D.ÿJ51,15:5ÿ3ÿ(ÿB.7ÿ/477ÿ8F*ÿ8Eÿ718*7KÿE10ÿ:7:/0=ÿ@*ÿ ÿÿ ,7*?:*,*7ÿ5/=ÿ@*ÿ2/5/A*ÿ8ÿB.C%D.ÿEF1Fÿ5/=ÿ/3*8ÿ78/@1018=ÿ/,2ÿ30/8/@1018=ÿ3ÿ8F*ÿB.C%D.ÿG*47,,*0ÿ 8F*ÿOOÿ@412A*ÿ17ÿ15</8*2ÿ8ÿ93ÿ077ÿ3ÿ<7181,ÿ:47ÿEF*,ÿ@412A*ÿ17ÿ1,ÿ<7181,ÿ18ÿ/,ÿ@*ÿ417Nÿ8ÿ<*47,,*0ÿ:71,Aÿ8F*ÿ ÿ%D.ÿ077ÿ3ÿ<7181,ÿ/:71,AÿA/,AE/=ÿ15</8ÿ8ÿ4181/0ÿ*?:1<5*,8C784:8:4*7ÿ4ÿ<*47,,*0ÿ M77ÿ3ÿ<7181,ÿ@*34*ÿ8F*ÿA/,AE/=ÿ17ÿ1,ÿ<7181,ÿ5/=ÿ/:7*ÿF18ÿ3ÿ784:8:4*ÿEF1Fÿ5/=ÿ@*ÿ2/5/A*2ÿ98ÿ5/=ÿ@*ÿ417Nÿ8F/8ÿ PQRÿTUVWXYZX[ÿ\]^]_`Yÿ @412A*ÿ4ÿ*,8*41,Aÿ8F*ÿ@412A*ÿ 4*7:*ÿ4A/,1L/81,J7Kÿ 8F*ÿ84/,7345*47ÿM1?:12ÿ0*/N7ÿ345ÿ8F*ÿ84/,7345*4ÿ/,ÿ@*ÿ*;<*8*2ÿ #;<071,ÿ/7ÿ4*7:08ÿ3ÿ1,8*4,/0ÿ/41,Aÿ3/:08ÿ1,ÿ10ÿ310*2ÿ84/,7345*47ÿ/,2ÿ4:<8:4*C4*0*/7*ÿ3ÿ*;<071+*ÿA/7ÿ/,2ÿ10ÿ5178ÿ F=24A*,ÿA/7ÿ0*/27ÿ8ÿ*;<071,ÿ1,712*ÿ8F*ÿ@/8*4=ÿ45ÿ BF*ÿ*;<071,ÿ<4*77:4*ÿ3ÿ8F*ÿ4*0*/7*2ÿA/7ÿ/,2ÿ10ÿ5178ÿF/7ÿ8F*ÿ<8*,81/0ÿ8ÿ1,30:*,*ÿ8F*ÿ@:1021,Aÿ784:8:4*ÿ7:4:,21,Aÿ ÿ#;<071,ÿ2:*ÿ8ÿ*;<071+*ÿ/857<F*4*ÿ345ÿ@/8*4=ÿF=24A*,ÿ4*0*/7*ÿ F/4A1,Aÿ3ÿ@/8*41*7ÿ/,ÿ/:7*ÿ4*0*/7*ÿ3ÿF=24A*,ÿBF*ÿ<8*,81/0ÿ34ÿ4*0*/7*ÿ17ÿ2*<*,2*,8ÿ,ÿ@/8*4=ÿ8=<*ÿ9A,181,ÿ3ÿ PQaÿbZ_cÿ\]^]_`Yÿ &14*ÿ1,ÿ4ÿ/4:,2ÿ10ÿ310*2ÿ84/,7345*47ÿ4ÿ7F:,8ÿ4*/847ÿd*/8ÿ4ÿ8;1ÿ75N*ÿ*;<7:4*ÿ8ÿ<*47,,*0ÿ 70E0=ÿ/,2ÿ8/N*ÿ75*ÿ815*ÿ8ÿ2*+*0<ÿ&/:087ÿ1,ÿF1AF"+08/A*ÿ*?:1<5*,8ÿ/,ÿ@*ÿ2*+*0<1,Aÿ3/78ÿ &14*ÿ5/=ÿ78/48ÿ1,ÿ84/,7345*47ÿ01,Aÿ01?:12ÿJ10Kÿ/7ÿ4*7:08ÿ3ÿ1,8*4,/0ÿ/41,Aÿ3/:08ÿB4/,7345*4ÿ314*7ÿ5/=ÿ@*ÿ54*ÿ4/<12ÿ/,2ÿ ÿ&14*ÿ1,ÿ*0*841/0ÿ7=78*57ÿJ7F48ÿ14:18eÿ+*40/2eÿ5/03:,81,ÿ3ÿ*?:1<5*,8Kÿd*/8ÿ4ÿ8;1ÿ75N*ÿ*;<7:4*ÿ8ÿ<*47,,*0ÿ fÿ314*ÿ5/=ÿ78/48ÿ2:*ÿ8ÿ2*+*0<5*,8ÿ3ÿF1AFÿ8*5<*4/8:4*ÿ1,ÿ5<,*,87eÿ3/:087ÿ4ÿ7F48"14:18ÿ%5*ÿ314*7ÿ5/=ÿ78/48ÿ ÿBF*ÿD%%ÿ17ÿ,31A:4*2ÿ1,ÿ/ÿÿ;ÿ 2*+*0<ÿ?:1N0=eÿ5/1,0=ÿ@*/:7*ÿ3ÿ8F*ÿF1AFÿ+08/A*ÿ/,2ÿ8F/8ÿ8F*ÿ01,Aÿ01?:12ÿ17ÿ1,+0+*2ÿ /,2ÿ345ÿ8F*ÿEF0*ÿE1,2ÿ3/45ÿ E18Fÿ4*2:*2ÿ/</18=ÿ345ÿ8F*ÿ8F*4ÿ<E*4ÿ84/1,ÿ%<4*/2ÿ3ÿ/ÿ314*ÿ,ÿ8F*ÿD%%ÿE10ÿ78<ÿ8F*ÿ<E*4ÿ*;<48ÿ345ÿ8F*ÿD%%ÿ h3ÿi00I7ÿ183ÿ83j43k5ÿ<*4/8*2ÿ345ÿ8F*ÿ,7F4*ÿ,840ÿ*,84*ÿ@=ÿ8F*ÿ%ffÿ7=78*5ÿBF*ÿD%%ÿ5/=ÿF/+*ÿ /*771@1018=ÿ01518/81,7ÿ2*<*,21,Aÿ,ÿE*/8F*4ÿ,2181,7ÿBF17ÿ5/=ÿ/:7*ÿ2*0/=7ÿ1,ÿ*,8*41,Aeÿ1,7<*81,Aÿ/,2ÿ4*813=1,Aÿ 2/5/A*7ÿ/:7*2ÿ@=ÿ*+*,ÿ/ÿ75/0ÿ314*ÿ 'gÿ,31A:4/81,ÿ93ÿ/ÿ314*ÿ17ÿ5/1,8/1,*2ÿE18F1,ÿ,*ÿ84/1,ÿ8F*ÿ<E*4ÿ*;<48ÿ/,ÿ,81,:*ÿ )17Nÿ8ÿ<*47,,*0ÿ17ÿF*/8ÿ4ÿ8;1ÿ75N*ÿEF*,ÿD%%ÿ17ÿ5/,,*2ÿ ÿ&14*ÿ1,ÿF=24/4@,ÿ7=78*57ÿJd=24/:01ÿD107eÿ21*7*0ÿ*,A1,*eÿ*8Kÿ D8F*4ÿ/:7*7ÿ3ÿ314*ÿ/4*ÿ314*ÿ1,ÿ21*7*0ÿ*?:1<5*,8ÿ1,0:21,Aÿ*5*4A*,=ÿA*,*4/847eÿ314*ÿ1,ÿ7F*08*4ÿ/4*/eÿ784/A*ÿ457ÿ*8ÿ ÿ 0/77131/81,6ÿ9,8*4,/0ÿ ÿ %8/8:76ÿ&1,/0ÿ#;<14=ÿ2/8*6ÿ ÿ ÿ ÿ->ÿ3ÿ!>ÿ granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} 012345ÿ74814395ÿ28ÿ2783ÿ774147ÿÿ145ÿÿÿÿ 145ÿÿ ÿÿ !"#$"%"&"''''(ÿÿ )*+ÿ,ÿ'-ÿ ./012ÿ3456ÿ ÿÿ 0/77131/81,6ÿ9,8*4,/0ÿ %8/8:76ÿ&1,/0ÿ#;<14=ÿ2/8*6ÿ ÿ ÿ ÿ ÿ'ÿ3ÿ!>ÿ ?@AÿCDEFGHIJKDÿLHEÿMNOPQÿRHSHTUEÿ V;=W*,ÿ2*<41+/81,ÿXÿ/7<Y=;1/ÿ/,2ÿW4**,Y:7*ÿW/7ÿ4*0*/7*ÿ2:*ÿ8ÿ0*/Z7ÿ3ÿ%&!ÿ345ÿW/7"1,7:0/8*2ÿ7[18YW*/4ÿ\]9%^ÿ/,2ÿ W/7"1,7:0/8*2ÿ_:7_/47ÿ\]9`^ÿ %&!ÿ17ÿ:7*2ÿ/7ÿ/,ÿ1,7:0/81,ÿW/7ÿ1,ÿY1WYÿ+08/W*ÿ7[18Y_/427aÿ_4*/Z*47ÿ/,2ÿ8ÿ7*W4*W/8*ÿ*0*841/0ÿ0*/27ÿ8ÿ/0[ÿ34ÿ0[ÿ 7</1,Wÿ_*8[**,ÿ*0*841/0ÿ0*/27ÿbY*ÿW/7ÿ17ÿ,8ÿY/453:0ÿ8ÿ<*47,,*0ÿ*;*<8ÿ34ÿ8Y*ÿ417Zÿ3ÿ/7<Y=;1/81,ÿ1,ÿ/7*ÿ3ÿ0*/Z7ÿ 1,ÿ07*2ÿ7</*7aÿ_:8ÿ%&!ÿ17ÿ,*ÿ3ÿ8Y*ÿ578ÿ<8*,8ÿW4**,Y:7*ÿW/7*7ÿ[18Yÿ/ÿY1WYÿW0_/0ÿ[/451,Wÿ<8*,81/0ÿ \]cde'''ÿ+7ÿVe-^ÿ ÿf/,201,WÿXÿ*;<7:4*ÿ8ÿ%&!ÿ2*5<7181,ÿ<42:87ÿ/38*4ÿ1,8*4,/0ÿ/4ÿ3/:08ÿ %&!ÿ2*5<7*7ÿ1,8ÿ8;1ÿ<42:87ÿ1,ÿ8Y*ÿ345ÿ3ÿ/ÿ31,*ÿ2:78ÿ13ÿ8Y*ÿ%&!ÿ17ÿ*;<7*2ÿ8ÿY1WYÿ+08/W*ÿ7</4Z7ÿbY17ÿ/,ÿ Y/<<*,ÿ13ÿ8Y*4*ÿ17ÿ/ÿ3/:08ÿ1,ÿ8Y*ÿ*g:1<5*,8ÿ<48*8*2ÿ_=ÿ%&!ÿ4ÿ1,ÿ/7*ÿ3ÿ/ÿ7Y48ÿ14:18ÿ1,ÿ8Y*ÿ*g:1<5*,8ÿbY*ÿ 2*5<7*2ÿ<42:87ÿ7Y:02ÿ_*ÿ,8/1,*2ÿ1,712*ÿ8Y*ÿ*,07:4*ÿ/,2ÿ1,ÿ7:Yÿ/7*ÿ8Y*ÿ0*/,1,Wÿ/,ÿ_*ÿ<*4345*2ÿ1,ÿ/ÿ ,840*2ÿ5/,,*4ÿf[*+*4aÿ8Y*4*ÿ17ÿ,ÿW:/4/,8**ÿ8Y/8ÿ8Y*ÿ*,07:4*ÿ4*71787ÿ8Y*ÿ+*4<4*77:4*ÿ/:7*2ÿ_=ÿ8Y*ÿY1WYÿ +08/W*ÿ7Y48"14:18ÿ/,2ÿ8Y*ÿ2*5<7*2ÿ<42:87ÿ/,ÿ*,8*4ÿ8Y*ÿ45ÿ[Y*4*ÿ8Y*ÿ*g:1<5*,8ÿ17ÿ0/8*2aÿ4ÿ18ÿ/,ÿ_*ÿ 4*0*/7*2ÿ8ÿ8Y*ÿ*,+14,5*,8ÿ13ÿ:7*2ÿ1,ÿ:824ÿ*g:1<5*,8ÿ ?@?ÿhIRiTÿRHSHTUEÿ 4<<*2ÿ_j*87ÿ k/8*41/0ÿY/,201,Wÿ345ÿb.ÿ8ÿV%%ÿ17ÿ<*4345*2ÿ_=ÿ8Y*ÿ2/+18ÿ4/,*ÿ,ÿV%%ÿ4<<*2ÿ0/2ÿ5/=ÿ24<ÿ,8ÿb.ÿk/8*41/0ÿ Y/,201,Wÿ_*8[**,ÿ2*Zÿ0*+*07ÿ,ÿV%%ÿ[10ÿ_*ÿ_=ÿ4/,*ÿ01381,Wÿ_*8[**,ÿ0/=2[,ÿ/4*/7ÿ5/1,0=ÿ/_+*ÿ7*/ÿk/1,ÿ417Zÿ34ÿ 24<<*2ÿ_j*8ÿ,ÿV%%ÿ17ÿ4*0/8*2ÿ8ÿ5/1,8*,/,*ÿ8/7Z7ÿ[Y*,ÿ*g:1<5*,8ÿ17ÿ0138*2ÿ1,8*4,/0=ÿ,ÿ8Y*ÿV%%ÿ k/,ÿ+*4_/42ÿ d*47,,*0ÿ*,8*41,Wÿ345ÿb.ÿ[10ÿ:7*ÿ3/0ÿ/4*78ÿ7=78*5ÿ8ÿ<4*+*,8ÿ8Y*5ÿ345ÿ3/01,Wÿ1,8ÿ7*/ÿ345ÿ8Y*ÿ0/22*4ÿV,_/42ÿ V%%ÿY/,24/107ÿ[10ÿ_*ÿ1,78/0*2ÿ/8ÿ8Y*ÿ<*415*8*4ÿ3ÿ8Y*ÿ1,78/0/81,ÿ<48*81,Wÿ<*47,,*0ÿ345ÿ3/01,Wÿ8ÿ7*/ÿ]/8*7ÿ34ÿccÿ /*77ÿ/4*ÿ1,78/0*2ÿ1,ÿ8Y*ÿY/,24/10ÿ/8ÿ8Y*ÿ_412W*ÿ0/,21,Wÿ/4*/ÿ/,2ÿ7*:4*2ÿ9,ÿ/7*ÿ3ÿ/12*,8ÿ[18Yÿ5/,ÿ+*4_/42ÿ8Y*4*ÿ 17ÿ,ÿ5/,ÿ+*4_/42ÿ_/8ÿ\kV`^ÿ0/8*2ÿ,ÿV%%ÿ8ÿ/77178ÿbY*ÿb.ÿ17ÿ1,ÿ8Y*ÿ31*02ÿ/,2ÿ[10ÿ/8ÿ/7ÿ/ÿkV`ÿ+*77*0ÿ1,ÿ/ÿ5/,ÿ +*4_/42ÿ718:/81,ÿcY*,ÿ%V.ÿ17ÿ1,ÿ8Y*ÿ31*02ÿ8Y*ÿkV`ÿ+*77*0ÿ,ÿ%V.ÿ17ÿ:7*2ÿ ÿl77ÿ3ÿ,8/1,5*,8ÿXÿ7<107ÿ8ÿ*,+14,5*,8ÿ #;84*5*ÿ[*/8Y*4ÿ*+*,8ÿ\7845aÿY:41/,*^ÿ8Y4*/8*,1,Wÿ784:8:4/0ÿ1,8*W418=ÿ/,2ÿ0*/21,Wÿ8ÿ<8*,81/0ÿ5/8*41/0ÿ2/5/W*ÿ/,2ÿ 7<10ÿ8ÿ*,+14,5*,8ÿl1g:12ÿ7<107ÿ/,ÿ_*ÿ84/,7345*4ÿ01,Wÿ10ÿ/,2ÿ21*7*0ÿ]/7ÿ7<107ÿ/,ÿ_*ÿ0*/Z7ÿ3ÿW/7ÿ:7*2ÿ34ÿ *0*841/0ÿ1,7:0/81,aÿ*Wÿ%&!ÿ8=<*ÿW/7ÿ f:41/,*ÿXÿ/2+*47*ÿ[*/8Y*4ÿ V%%ÿ17ÿ:,5/,,*2ÿ1,78/0/81,ÿ/,2ÿ<*47,,*0ÿ7Y/0ÿ,8ÿ_*ÿ<4*7*,8ÿ13ÿ[*/8Y*4ÿ34*/78ÿ<4*2187ÿ_/2ÿ[*/8Y*4ÿ:41,Wÿ <0/,,*2ÿ+17187ÿ18ÿ17ÿ/ÿ<771_1018=ÿ8Y/8ÿ[*/8Y*4ÿ5/=ÿ[47*,ÿ/,2ÿ<4*+*,8ÿb.ÿ345ÿ0*81,Wÿ8Y*ÿ<*47,,*0ÿ9,ÿ7:Yÿ/7*ÿ <*47,,*0ÿ17ÿ0*38ÿ,ÿV%%ÿ:,810ÿ[*/8Y*4ÿ15<4+*7ÿ4ÿ<1Z*2ÿ:<ÿ_=ÿ8Y*4ÿ5*/,7ÿ m:5:0/81,ÿ3ÿ7,[ÿ/,2ÿ1*ÿ bY*4*ÿ17ÿ8Y*ÿ<771_1018=ÿ3ÿ1*ÿ0*81,Wÿ,ÿ/*77ÿ0/22*47aÿ55:,1/81,ÿ8[*4ÿ*8ÿ1,ÿ02ÿ015/8*7ÿ\_8Yÿ/857<Y*41ÿ /,2ÿ7*/ÿ7<4/=ÿ11,W^ÿd8*,81/0ÿ,7*g:*,*7ÿ3ÿ1*ÿ0*81,ÿ/,2ÿ<8*,81/0ÿ24<ÿ3ÿ1*ÿ1,0:2*ÿ*g:1<5*,8ÿ2/5/W*aÿ 1,j:41*7ÿ8ÿ<*47,,*0X8Y142ÿ</481*7ÿ[Yÿ5/=ÿ_*ÿ1,ÿ8Y*ÿ/4*/aÿ177:*7ÿ/*771,WÿV%%ÿ34ÿ5/1,8*,/,*ÿ*8ÿ %*:418=ÿ1,12*,87ÿ V%%ÿ17ÿ/*771_0*ÿ_=ÿ8Y*ÿ_/8ÿ0/,21,Wÿ\0/22*4ÿ345ÿ7*/ÿ0*+*0^ÿ:<ÿ8ÿ/,2ÿ1,0:21,Wÿ8Y*ÿ*0/4ÿ2*Zÿ9,84:2*4ÿ<48*81,ÿ17ÿ 1,78/0*2ÿ/8ÿ*0/4ÿ2*Zÿ8ÿ<4*+*,8ÿ/*77ÿ8ÿ8Y*4ÿ/4*/7ÿ3ÿ8Y*ÿV%%ÿ98ÿ7Y:02ÿ_*ÿ/77:5*2ÿ8Y/8ÿ<*<0*ÿ[Yÿ1,8*,2ÿ8ÿ</77ÿ 8Y*ÿ1,84:2*4ÿ_/41*4ÿ/4*ÿ/:8Y417*2ÿ/7ÿ5<*8*,8ÿ8ÿ</77ÿ18ÿ ]0_/0ÿ784:8:4/0ÿ3/10:4*ÿ granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} 012345ÿ74814395ÿ28ÿ2783ÿ774147ÿÿ145ÿÿÿÿ ÿÿ )*+ÿ,ÿ'-ÿ ./012ÿ3456ÿ!"#$"%"&"''''(ÿÿ /:7*ÿ3/10:4*ÿ/4*6ÿ ÿÿ ?0@/0ÿ784:8:4/0ÿ3/10:4*ÿ17ÿ4*0/8*2ÿ8ÿ5/1,ÿ0/2ÿ@*/41,Aÿ784:8:4*ÿ34ÿ7:@784:8:4*ÿ/,2ÿ8<712*ÿB=<*7ÿ3ÿ3/10:4*7ÿCD1Dÿ/,ÿ ÿ1493ÿ8ÿG87ÿG173Hÿ5ÿ741I45ÿÿ43ÿ748G483J7ÿ93K3485LÿH379ÿ8ÿK14381IÿM8M38437NÿO373ÿ -ÿ%84:8:4*ÿ17ÿ,8ÿ784,Aÿ*,:ADÿ*18D*4ÿ2:*ÿ8ÿ187ÿ71E*Fÿ7D/<*Fÿ4ÿD1*ÿ3ÿ5/8*41/07ÿ/8/784<D1ÿ3/10:4*ÿ/,ÿ:4ÿ TÿU7*ÿ3ÿ2*3*81+*ÿ5/8*41/07ÿU,<4*218/@0*ÿ71,*ÿ8D*ÿ5/8*41/0ÿ5/=ÿD/+*ÿ@**,ÿ15<4<*40=ÿ5/,:3/8:4*2ÿ4ÿ (ÿQ/,:3/8:41,Aÿ*447Fÿ1,0:21,Aÿ15<4<*4ÿ7*0*81,ÿ3ÿ5/8*41/07Fÿ1,4*8ÿ71E1,AFÿ15<4<*4ÿD*/8ÿ84/1,AÿRD*/8ÿ 13ÿ784*77*2ÿ@*=,2ÿ187ÿ4181/0ÿ784*77ÿ0*+*0ÿ ÿX/Pÿ3ÿ,712*4/81,ÿ3ÿ:,*;<*8*2ÿ<4@0*57ÿ#AFÿ7/@8/A*Fÿ,/8:4/0ÿ217/78*47ÿ/,ÿ/07ÿ:4ÿ13ÿ8D7*ÿCDÿ 3/10:4*7ÿ:7:/0=ÿ@*A1,ÿCD*,ÿ4/P7ÿ345ÿ/8ÿ784*77ÿ<1,87ÿ 84*/85*,8SFÿ3/10:4*ÿ8ÿ/2D*4*ÿ8ÿ2*71A,Fÿ4ÿ<4ÿC4P5/,7D1<ÿ/,ÿ:4ÿ/8ÿ/,=ÿ815*ÿ/,2ÿ17ÿ:7:/0=ÿ:,<4*218/@0*ÿ 2/5/A*2ÿ345ÿ<414ÿ:7*ÿRV414ÿ:7*ÿ,8ÿ4*0*+/,8ÿCD*,ÿ,*Cÿ5/,:3/8:4*2ÿ5/8*41/07ÿ/4*ÿ:7*2WSÿ C4Pÿ17ÿ78/48*2ÿ%810ÿ18ÿ/,ÿ@*ÿ1,7<*81,ÿC4Pÿ4ÿ3/10:4*ÿ8ÿ30Cÿ<4*2:4*7ÿCD1Dÿ/:7*ÿ<*47,,*0ÿ8ÿ/12*,8/0=ÿ@*ÿ1,ÿ Y%%ÿ17ÿ5/,,*2ÿ,0=ÿ2:41,Aÿ5/1,8*,/,*ÿ<*4127ÿ/,2ÿ1,7<*81,7ÿCD1Dÿ4*2:*ÿ8D*ÿ*;<7:4*ÿ3ÿ<*47,,*0ÿ1,ÿ/,ÿ*+*,8ÿ3ÿ V*47,,*0ÿ1,Z:4=ÿ2:*ÿ8ÿ*0*841ÿ7DPÿ V4*2:4*7ÿ34ÿC4Pÿ,ÿ*0*841/0ÿ7=78*57ÿ7D/0ÿ@*ÿ1,ÿ<0/*ÿ8ÿ*,7:4*ÿ7=78*57ÿ/4*ÿ170/8*2ÿ/,2ÿ5/2*ÿ+08/A*ÿ34**ÿ@*34*ÿ A0@/0ÿ784:8:4*ÿ3/10:4*ÿ :7*ÿ/,2ÿ5/1,8/1,ÿ8D*ÿ,784:81,ÿ/4*ÿ,8ÿ<4<*40=ÿ84/1,*2ÿ/,2ÿ+*4784*77ÿ8D*ÿ784:8:4*ÿ ,8/8ÿC18Dÿ01+*ÿ*[:1<5*,8ÿBD*ÿ,7*[:*,*ÿ8ÿ<*47,,*0ÿ17ÿ2*<*,2*,8ÿ,ÿ8D*ÿ+08/A*ÿ0*+*0ÿ/,2ÿ4/,A*ÿ345ÿ3/8/018=Fÿ 5/FÿD*/48ÿ/8/PFÿ@:4,7Fÿ81,A01,Aÿ4ÿ<41P01,Aÿ7*,7/81,7ÿ /,ÿ:,7/3*ÿ/4*/ÿR701<<*4=ÿ/,2_4ÿ,8/51,/81,Sÿ/,2_4ÿ471,ÿ V*47,,*0ÿ1,Z:4=ÿ2:*ÿ8ÿ5/8*41/0ÿD/,201,A6ÿ \ÿ5/8*41/0ÿD/,201,Aÿ4*<48ÿ17ÿ8ÿ@*ÿ5/2*ÿ:<ÿ8/P1,Aÿ1,ÿ/:,8ÿ8D*ÿD:5/,ÿ1,8*43/*ÿC18DÿD/,201,Aÿ3ÿ8D*ÿ5/8*41/07ÿ]*4*ÿ ^142ÿA:/,6ÿ ^142ÿ2*8*4*,8ÿ7=78*57ÿ/4*ÿ8ÿ@*ÿ<4+12*2ÿ4*2:1,Aÿ8D*ÿ417Pÿ3ÿ@142ÿA:/,ÿ,8/51,/81,ÿ^142ÿA:/,ÿ@:102ÿ:<ÿ/,ÿ4*7:08ÿ1,ÿ ÿ4/,/A*ÿ17ÿ,**2*2Fÿ8D*ÿ/12ÿ17ÿ8ÿ@*ÿ<4+12*2ÿ34ÿ8D/8ÿ/4*/ÿ 0/77131/81,6ÿ9,8*4,/0ÿ ÿ %8/8:76ÿ&1,/0ÿ#;<14=ÿ2/8*6ÿ ÿ ÿ ÿ-ÿ3ÿ!>ÿ granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} Safety strategy for offshore substations 6 Offshore substation - Safety strategies 6.1 Containment (PS 1) Doc. No. C256-EQ-S-FD-00003 Rev. no. 01 Validfrom: Role and Need for Barrier Reference The containment function shall preventrelease of flammable fluids or harmful fluids Relevant hazards • Transformer oil leaks • Diesel leaks (machinery, storag e and bunkering system) • Hydraulic leaks (e.g. from crane and winch) • Insulation gas (SF6) used on gas insulated electrical equipment Requirements All piping, tanks, valves, connections, pumps, rotating machinery, instruments and other components in systems handling flammable fluids and/or harmful fluids (chemicals, toxic gases, etc.) shall be designed, constructed, maintained and operated with the aim to avoid leaks to occur. Piping and other components shall be tagged and marked to identify fluids and prevent operational errors, (e.g. gas insulated equipment) Casing of oil filled transformers and shunt reactors shall be of robust design. Ref. PS12 for details on transformer safety system requirements. All components and systems shall be designed to enable necessary inspection, testing and correction in compliance with established inspection program. Materials and connections used in piping systems shall as minimum meet the requirements in DNV-ST-0145 Diesel bunkering system. All hoses and connections (hose assemblies) shall comply with TR1803. Classification: Internal Status: Final Expiry date: 22 Of 69 TR1803 Hoses and couplings DNV-ST-0145 Offshore substations - Rules and standards granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} Safety strategy for offshore substations MFWBaltyk II &MFW Battyk III Doc. No. C256-EQ-S-FD-00003 Rev. no. 01 Vaiid from: Role and Need for Barrier Reference Hose reel station: The hose shall be eq dipped with quick release auto close connection on the CTV end. The diesel bunkering system shall have integrity towards the maximum shut-in pressure of the pump at CTV/SOV. Diesel lines between bunded areas of hose reel station and diesel storage tanks shall be welded 6.2 Natural ventilation and HVAC (PS 2) Role and Need for Barrier Reference Natural ventilation shall: • Dilute gas concentrations and reduce the size of flammable gasclouds • Dilute harmful concentrations of smoke or toxic gases • Ensure acceptable working and equipment environment HVAC shall, with respect to accidental events: • Provide smoke ventilation for internal fire conditions if active smoke ventilation philosophy is chosen to facilitate sefe escape from manned areas • Ensure acceptable eq up ment environment • Dilute and remove concentrations of flammable or toxic gas Relevant hazards • Smoke generation from fire in diesel engine or transformer area exposing HVAC inlets to spaces with safety critical functions • Electrical fires within electrical rooms creating toxic atmosphere • Hydrogen gas accumulation in battery rooms resulting in explosive atmosphere • Flammable gas accumulation / oil mist in transformer area in the event of internal arch fault and gas leakage from transforme r casing Requirements: Classification: Internal Status: Final Expiry date: 23 of 69 DNV-ST-0145 Offshore substations granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} Safety strategy for offshore substations| Doc. No. C256-EQ-S-FD-00003 Rev. no. 01 Validfrom: Role and Need for Barrier Reference Transformer area Natural ventilation is the preferred solution for the transformer areas. Battery rooms: Battery rooms shall be provided with sufficient ventilation to maintain non -hazardous status, forced or natural, according to DNV-ST-0145. Ventilation inlets and outlets Ventilation air inlets serving shelter area and emergency equipment rooms shall be located such that they are minimally affected by smoke from on-board incidents. Measures shall be taken to avoid accumulation of ice and snow. Dampers Dampers shall provide quick, reliable and effective means to prevent ingress or spread! ng of gas or smoke. if smoke is detected at ventilation air inlets, the ventilation fan in question shall be stopped and all inlet and outlet dampers closed. Dampers and fans shall be interlocked to avoid abnormal pressure configurations Fire dampers shall be closed automatically by signal from the F&G-systemorby 'fusible link" where specified. 6.3 Leak detection (PS 3) Role and Need for Barrier Reference The leak detection system shall continuously monitor for the presence of flammable or toxic gases, to alert personnel and allow control actions to be initiated manually or automatically to minimize the probability of explosion, fire and acute effects of personnel exposure. Classification: Internal Status: Final Expiry date: 24 Of 69 granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} 012345ÿ74814395ÿ28ÿ2783ÿ774147ÿÿ145ÿÿÿÿ )*+ÿ,ÿ'-ÿ ./012ÿ3456ÿ ÿÿ !"#$"%"&"''''(ÿÿ ÿÿ)0*ÿ/,2ÿ**2ÿ34ÿ?/41*4ÿ @ABACDEFÿHDIDJKLÿ ÿ@AWXYJAZAEFL[ÿ MÿN=24O*,ÿO/7ÿ/:5:0/81,ÿ1,ÿP/8*4=ÿ457ÿ4*7:081,Oÿ1,ÿ*;<071+*ÿ/857<Q*4*ÿ Mÿ%&!ÿR4ÿ8Q*4ÿ1,7:0/81,ÿO/7ÿ8=<*Sÿ0*/Tÿ1,ÿU9%ÿ/4*/ÿ4ÿU9?ÿ4*7:081,Oÿ1,ÿ<8*,81/0ÿ417Tÿ3ÿ/7<Q=;1/81,ÿ MÿV*/Tÿ345ÿ1,*48ÿO/7ÿ784/O*ÿP80*7ÿ4*7:081,Oÿ1,ÿ<8*,81/0ÿ417Tÿ3ÿ/7<Q=;1/81,ÿ )*3*4*,*ÿ ÿ]^_`abÿaccdeÿ Nÿ2*8*81,ÿ7Q/0ÿP*ÿ1,78/0*2ÿ1,ÿP/8*4=ÿ457ÿ13ÿ2/,O*4:7ÿ,*,84/81,7ÿ/,ÿ/:5:0/8*ÿ ÿf,0*77ÿ4*g:14*2ÿP=ÿ0/0ÿ4*O:0/81,hÿNÿ2*8*847ÿ5/=ÿP*ÿ518*2ÿ13ÿP78ÿQ/4O1,OÿR13ÿ/<<01*2Sÿ17ÿ1,8*40T*2ÿi18Qÿ45ÿ+*,810/81,ÿ/,2ÿP/8*41*7ÿ2ÿ,8ÿ*518ÿ NÿO/7ÿ2:41,Oÿ,45/0ÿQ/4O1,Ohÿ4ÿ13ÿ18ÿ/,ÿP*ÿ2:5*,8*2ÿ8Q/8ÿ2/,O*4:7ÿg:/,8181*7ÿ3ÿQ=24O*,ÿ/,,8ÿP*ÿO*,*4/8*2ÿ ÿjklÿaccdeÿ^mnÿjk]ÿ Mÿ%1,O0*ÿNÿ2*8*81,ÿ7Q/0ÿO1+*ÿ/0/45ÿ1,ÿ,7Q4*ÿ*,84/0ÿ,840ÿ45ÿR)Sÿ %&!ÿO/7ÿ2*,718=ÿ17ÿ/<<4;ÿ!ÿ815*7ÿ0/4O*4ÿ8Q/,ÿ/14ÿ/,2ÿ51OQ8ÿP*ÿ/,ÿ/7<Q=;1/8*ÿ93ÿ8Q*ÿg:/,818=ÿ<*4ÿO/7ÿ5</485*,8ÿ17ÿ75/0hÿQi*+*4hÿ18ÿ51OQ8ÿ,8ÿ4*<4*7*,8ÿ Mÿ,3145*2ÿNÿ2*8*81,ÿ1,ÿ8Q*ÿ45ÿ7Q/0ÿ78<ÿP78ÿQ/4O1,Oÿ3ÿP/8*41*7ÿR13ÿ/<<01*2Sÿ /ÿ<*47,,*0ÿQ/o/42ÿ%&!ÿ2*8*81,ÿ5/=ÿ8Q*,ÿP*ÿ518*2ÿi18Qÿ8Q*ÿ30i1,Oÿ<4*,2181,76ÿ ÿ#;8*4,/0ÿ30/7QÿP*/,ÿ7Q/0ÿP*ÿ<4+12*2ÿ/8ÿ24ÿ*,84/,*ÿ8ÿi/4,ÿ<*47,,*0ÿ3ÿ<8*,81/0ÿ%&!ÿ4*0*/7*ÿR:<,ÿ,3145*2ÿ<4*77:4*ÿ24<ÿ1,ÿU9%ÿ5</485*,8Sÿ ÿr4*2:4*ÿ7Q/0ÿP*ÿ1,ÿ<0/*ÿ8ÿ+*,810/8*ÿU9%ÿ45hÿ*OÿP=ÿ<*,1,Oÿ247hÿP*34*ÿ*,84=ÿ1,ÿ/7*ÿ3ÿ2*8*8*2ÿ<4*77:4*ÿ24<ÿ1,ÿU9%ÿ5</485*,8ÿ Mÿ%&!ÿ2*8*81,ÿ17ÿ,8ÿ4*g:14*2ÿP=ÿ2*7ÿ4ÿ4*O:0/81,ÿ Mÿp*<8/P0*ÿ417Tÿ8ÿ<*47,,*0ÿ17ÿ,3145*2ÿP=ÿ%&!ÿ417Tÿ/77*775*,8hÿ,712*41,Oÿ0/=:8hÿ+0:5*hÿ,O*781,ÿ/,2ÿ+*,810/81,ÿ3ÿ8Q*ÿU9%ÿ45q/4*/ÿ Mÿr4*77:4*ÿ5,1841,Oÿ17ÿ1,8*O4/8*2ÿ1,8ÿ8Q*ÿU9%ÿ*g:1<5*,8ÿ ÿ 0/77131/81,6ÿ9,8*4,/0ÿ ÿ %8/8:76ÿ&1,/0ÿ#;<14=ÿ2/8*6ÿ ÿ ÿ ÿ ÿ3ÿ!>ÿ granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} Safety strategy for offshore substations 6.4 Emergency Shutdown system (PS 4) Doc. No. C256-EQ-S-FD-00003 Rev. no. 01 Validfrom: Role and Need for Barrier Reference The purpose of the emergency shutdown system (ESD) is to prevent escalation of abnormal conditions into a major hazardous event and to limit the extent and duration of any such events that do occur. In addition, ESD initiationswill activate (direct or indirect) other safety systems/functions such as HVAC(PS 2), Emergency power and lighting (PS 11), Alarm and communication system for use in emergency situations (PS 13). Relevant hazards Abnormal condition on ONS, OSS or a WTG not detected and controlled by the Protection & Control system, e.g. high hydrogen concentration, smoke or flame detection, ship collision/ship on collision course etc. Abnormal condition / loss of communication situation requiring local manual shutdown at ONS, OSS or WTG to ensure safety of personnel, environment or asset Requirements: A shutdown system, with logic solvers independent from the Protection & Control system, shall be available to perform necessary actions to protect personnel, environment and assets(ONS, OSS and WTGs) from abnormal conditions. A separate Emergency Shutdown System maybe omitted if shutdown actions are included in the F&G logic solver. The shutdown actions may be initiated manually and automatically. Once initiated, actions shal be automatically executed. The shutdown functions shall be arranged in a tree-structured level hierarchy, reflecting different levels of facility or wind farm shutdown. The higher levels in the hierarchy shall initiate lower levels. A signal on a certain level shall not initiate actions on higher ESD levels. Shutdown levels for the OSS shall include: Total substation shutdown (A and B system), including UPS battery trip Total substation shutdown (A and B system) Classification: Internal Status: Final Expiry date: 26 Of 69 DNV-ST-0145 Offshore substations granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} Safety strategy for offshore substations Doc. No. C256-EQ-S-FD-00003 Rev. no. 01 Validfrom: Role and Need for Barrier Reference System shutdown (e.g. A or B system) Equipment shutdown A total shutdown can be required in case of catastrophic criticaity of an incident, e.g. HV transformer explosion situations Ship collision / ship on collision course A system shutdown (e.g. of the A electrical production system) of the ONS or OSS may not have to affect all the other operations (e.g. the B electrical production system). Equipment shutdown is individual stop of a component or subsystem. This is typically local emergency stop buttons and local protection schemes for rotating machinery and mechanical equipment, such as HVAC refrigeration systems and diesel transfer systems. Where relevant, remote equipment emergency shutdown shall be available through ESI SCADA and be available in ESD HMI. A CAP panel with ‘Total shutd own" and “System A” and “System B" shutdown included as minimum shall be located in a strategic location on the OSS. Cascading effects shallbe avoided. This implies that in some situations, a larger part of the facility orwind farm than d irectly affected bythe incident in the first stage should be shut down Depending on the shutdown levels attributed to particular accidental event, ESD actions or their combinations shall include - Shutdown of HV equipment Stop of auxiliary generator Prevent start-up of equipment as required during an emergency situation, e.g. inhibiting the start-up of auxiliary generators during the shutdown of HV system Opening of UPS battery breaker Disconnection of the substation from the grid Start-up of auxiliary supply, load transfer of emergency services from transitional / emergency source of power Activation of diesel shut-off valves Classification: Internal Status: Final Expiry date: 27 Of 69 granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} Safety strategy for offshore substations Doc. No. C256-EQ-S-FD-00003 Rev. no. 01 Validfrom: Role and Need for Barrier Reference Shutdown of power ventilation Stop battery charging Closure of doors and ventilation openings Initiation of aud ible siren signal Any shutdown, spurious or intended, shall require a manual reset from onshore control room after normalization and systems have been confirmed OK to restart (e.g. by system status reporting / CCTV). ESD alarm annunciation Shutdown status shall continuously be available in the control room, and the system shall raise alarms in the control room for operator awareness or actions, considering: - Level of shutdown initiated Shutdown function failure to execute actions upon demand Shutdown function (sensor, logic solver or final element) defect or failure Personnel shall be warned to ensure safe escape and evacuation, ref. PS 13. Upon shutdown (automatic or manual), general alarm shall be automaticaly initiated. An ESD alarm shall be alerted in other strategic locations, i.e. the onshore control room shall alert SOV/CTV upon ESD alarm. Logic solver The logic solver including I/O, logic and communication interfaces, shall comply with prevailing regulations and practices for normal operation, test and emergency situations. The logic solver compliance with the intended use and safety integrity requirements shall be demonstrated, i.e.: Logic solver (firmware, as standard manufacturer provision) compliance with IEC 61508/ IEC 61511 shall be documented and certified /type approved (note: also valid for system software revisions). Use of existing non-certified equipment may be accepted subject to particular safety assessment and “prior use" characteristics. Classification: Internal Status: Final Expiry date: 28 of 69 granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} Safety strategy for offshore substations Doc. No. C256-EQ-S-FD-00003 Rev. no. 01 Validfrom: Role and Need for Barrier Reference Logic solver (hardware and software, according to us er requirements) arrangement and application configuration shall be subject to acceptance b ased on independent verifications. System safety manual shall provide guidance to ap plications and application p rogram devel opment ESD system units (logic solver) shall not be used for non-safety related systems. Logic solver shall include measures that prohbit unauthorized and avoid unintentional changes of system parameters, i.e. key-lock, password or software configuration. 6.5 Open Drain system (PS 5) Role and Need for Barrier Reference The purpose of the open drain system is to provide measures for containment and proper disposal of flammable or environmentally hazardous liquid spills, as well as handling wash -down, rainwater and fire water. The open drain system consists of equipment such as drip trays and bunding, drain pots and liquid seals, piping and pumping arrangement collection and treatment tanks necessary to collect and handle spillage of hydrocarbon liquids, wash down water, fire water and rainwater. Relevant hazards: Release with potential damage to environment or prolonged fire from: • Transformers and shunt reactors with mineral oil • Coolers containing mineral oil • Diesel leaks (machinery, storage and bunkering system) • Hydraulic leaks (e.g. from crane and winch) Requirements Classification: Internal Status: Final Expiry date: 29 Of 69 granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} Safety strategy for offshore substations Doc. No. C256-EQ-S-FD-00003 Rev. no. 01 Valid from: Role and Need for Barrier Reference Open drain systems shal be provided to contain and collect spils and leaks in all areas that have a source of flammable or environmentally hazardous liquid so as to minimize the riskof fires and personnel exposure to hazardous materials and avoid damage to the environment. Tanks and vessels containing flammable or environmental hazardous liquids shall have a bunding covering the tank perimeter to control the spread of spills. There shall be adequate drainage within the bunding. Guidance Dedicated bunding per tank or vessel may be exempted if part of a larger containment area provided with fire protection grati ng (restricting air to burning liquids and extinguish fire) and containment basin. End of guidance Open drain systems shal be designed with adequate slope to control spills Cooler areas Open drain from the external cooler areas shall be connected to the oily water package including tank. Transformer areas: Leak containment criteria: The transformer areas shall be provided with fire protection grating and containment basins with minimum combined capacity forthe largest transformer oil inventory in the area + firewater/foam liquid volumes +10%. The containment basins shall be provided with overflow to sea, such that rainwater can be discharged in all conditions. There shall be means of continuous measuring of hydrocarbon content in the liq uid to stop unwanted release to sea. National / local requirements to the system shall be observed and adhered to. The drain system needs to consider operability in cold climate. The overflow system shall: • control the liquid level in the containment basins such that the leak containment criteria is met • be desig ned such that liquid is removed from a lower section with continuous water phase of the containment basins • have sufficient capacity to handle the heaviest rainfall of 1 -hour duration over a 10-year recurrence period. Classification: Internal Status: Final Expiry date: 30 of 69 granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} Safety strategy for offshore substations Doc. No. C256-EQ-S-FD-00003 Rev. no. 01 Validfrom: Role and Need for Barrier Reference Auxiliary diesel engine skid The auxiliary diesel engine skid and storage shall preferably be self-contained with capacity for the maximum p otential d iesel leak inventory, or alternatively be connected to open drain system on the installation. Hose reel station The hose reel station is envisaged to be in infrequent use and located at low level on the installation. Diesel bunkering will be a manned operation. The hose reel station shall be provided with bunding with capacity to minimum contain possible flowback diesel inventory in piping or hosesand credible pressurized leak before SOV/CTV supply pump is stopped. In case of a diesel leakage, removing the diesel from the bunding will be an operation requiring temporary pump and suitable tote tank to pump the diesel to. Segregation between areas The containment basins for Transformer A and B area shall be separated accord hg to the fire division between the areas. The open drain system shall provide effective means, e.g., liquid seals if relevant, to prevent liquids, vapors and gases to spread to other fire areas via the drain system The drain system, such as drain box and piping, shall not impair the integrity of fire partitions. 6.6 Ignition source control (PS 6) Role and Need for Barrier Reference The ignition probability of flammable liquids and explosive gas atmospheres shall be minimized by rendering the sources of ignition harmless or reducing the likelihood of occurrence of effective ignition sources. Relevant hazards: Hydrogen gas accumulation in battery rooms resulting in explosive atmosphere Electrical fault in transformers or shunt reactors resulting in arc flash and flammable gas and oil mist released to atmosphere Classification: Internal Status: Final Expiry date: 31 of 69 DNV-ST-0145 Offshore substations - Rules and standards granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} Safety strategy for offshore substations Doc. No. C256-EQ-S-FD-00003 Rev. no. 01 Validfrom: Release of flammable diesel oil mist inside diesel engine generator skid exposing hot surfaces Requirements Battery rooms: Battery type shall be VRLA or other similar low hydrogen emission type. Boost charging of batteries shall not be used. Tie HVAC extract fans from battery rooms shall be certified for operation in zone 2. For further control of risk of hydrogen accumulation, it is referred to requirements to battery rooms in PS 2 HVAC and PS 3 Leak Detection. Transformer areas: Barriers to detect and shutdown electrical equipment and transformers upon electrical faults are described in PS 12 Process safety. Natural ventilation is preferred to minimize potential gas clouds, ref. PS 2 HVAC Diesel engine skids Hot surfaces inside generator skids that can potentiallybe exposed to diesel oil leaks shall be thermally insulated, e.g. internal exhaust ducting and turbochargers, 6.7 Fire detection (PS 7) Role and Need for Barrier Reference The fire detection system shall continuously monitor for the presence of a fire to alert personnel and allow control actions to be initiated manually or automatically to minimize the likelihood of fire escalation and probability of personnel exposure. The fire detection system shall, relevant to specific equipment and areas, monitor continuously for the presence of an incipientfire condition to alert personnel and allow control actions to be initiated manually to minimize the probability of afire condition to develop. Relevant hazards: • Electrical fires (e.g. in electrical rooms) • Fires in oil filled transformers (mineral oil) Classification: Internal Status: Final Expiry date: 32 Of 69 EN54 all parts DNV-ST-0145 Offshore substations - Rules and standards IEC 61508 Functional safety of granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} Safety strategy for offshore substations Doc. No. C256-EQ-S-FD-00003 Rev. no. 01 Validfrom: Role and Need for Barrier Reference • Diesel fires (Auxiliary diesel engine, diesel storage & supply) Requirements: Tie fire detection function shall provide reliable and fast detection of a fire by adequate type, number and location of fire detectors and shall ensure timely alarm and initiation of control actions. Sufficient fire detection redundancy shall be implemented to ensure that the fire detection will be maintained if defect fire detectors are not repaired or changed immediately. Possibility for manual reset from onshore control room after normalization and systems have been confirmed OK to restart (e.g. by system status reporthg / CCTV), to disable detectors etc. Detectors shall be provided based on an assessment of fire scenarios within each area considering potential fire sources and characteristics, consequences, area and equipment arrangement and environmental conditions. Design premisesfor determination of fire detection coverage shall apply flame size, smoke characteristics and temperature (heat) rise, established for each area, as basis (sensor number and distribution). Tie basis and assumptions used for detector selection and location shall be documented. Smoke dispersion studies may be performed for verification and optimization of location of d electors . Tie location of smoke detectors shall be confirmed by smoke dispersion tests for actual conditions inside rooms with and without ventilation A mix of standard and high-sensitive smoke detectors shall be given preference for use as general detection in rooms containing P&C panels, automation/instrument/telecom panelsand low voltage distribution boards and switchgears. Access toperform maintenance of detectors shall be planned for and documented. It shall be able to test detectors from deck level, test equipment shall be included as part of special tools. Classification: Internal Status: Final Expiry date: 33of69 electrical/electronic/progr ammable electronic safety -related systems - Part 1: General requirements granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} Safety strategy for offshore substations Doc. No. C256-EQ-S-FD-00003 Rev. no. 01 Validfrom: Role and Need for Barrier Reference Areas requiring fire detection Fire detectors shall be provided in all areas where fires may occur and where ingress of smoke is to be prevented. Fire detector arrangements should be implemented in accordance with the following: Area / Room Detector type Comment Oil filled Transform er area and areas with Flame flammable liquids/gases Utility area withoutf lammable liquids /gases Flame, heat or Detector selection dependentupon fire smoke characteristics Instrumentrooms, Control room, LV electrical Smoke High sensitive type for early warning and rooms (room s containing panels, cubicles, manual shutdown. distribution boards) Standard smoke detectors for automatic HV Electrical rooms Smokeand/or flame actions. Smoke detector suitable forhigh energyfires in addition to high sensitive type. Flame detectors to be evaluated for detection of HV arcs Diesel machinery spaces Flame Rooms containing gas bottles (typically inert Smoke Smoke gas forfire suppression system) Storage room forflamm able m aterials Flame and/or E.g. paintor chemical storage heat Workshops, storage area without flammable Smokeor heat Type of activity to be considered materials HVAC inlets Smoke Confined spaces, e.g. belowfalsefloor, Smoke above ceiling Manual Call Points (MCP) Manual call points shall be located strategically, and in locations such as • Along escape ways • Embarkation areas, such as SOV/CTV landing area, etc. Classification: Internal Status: Final Expiry date: 34 of 69 granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} Safety strategy for offshore substation Doc. No. C256-EQ-S-FD-00003 Rev. no. 01 Validfrom: Role and Need for Barrier Reference • At door (inside) for every exit to outside deck TTie maximum walking distance between two Manual Call Points outdoorshall not exceed 30 meters. Manual Call points shall be protected against inadvertent activation and easily recognized by signs and color coding. Fire detector characteristics and calibration Fire detectors shall be self -monitoring. Detector safety characteristics should be optimized through preferences and ad option of best available technology including provisions of self -diagnostic. —Flame detectors shall comply with actual fire potential and envronment conditions within the relevant area, e.g.: • IR or UV where flame is predominating and according to flame wave radiation characteristic • Sensor range and cone of vision. Based on a typical flame detector characteristic, the distance between flame detectors and targets monitored shall be in accordance with current technology • Sensor direction and angle • Sensitivity to external impact such as arc welding Heat point detectors (electrical) characteristics shall comply with actual fire potential and environmental conditions within the relevant area, e .g.: • Normally limited use, i.e. specific high-risk areas and where other detection principles are not suitable. • Maximum coverage in naturally ventilated area approximate 24 m 2 , maximum distance between sensors 7 m and maximum distance from wall 4.5 m and minimum 0.5 meters away from outside wall or dividing partition. • Maximum coverage in mechanically ventilated area approximate 37 m 2 , maximum distance between sensors 9 m and maximum distance from wall 4.5 m. Smoke detectors characteristics shall comply with actual fire potential and environmental conditions within the relevant area, e.g.: • Optical d etectors used for smoldering fires. • Detectors, e.g., ionic type, suitable for energy intensive smoke generating fires, e.g., fire in high voltage switchgear caused by short circuit. • Smoke detectors mounted in areas such as suspended ceilings and raised floors shall have their location indicated by visible tag-plate. • Early warning sensor specified with higher sensitivity than norm recommendation. Classification: Internal Status: Final Expiry date: 35of69 granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} Safety strategy for offshore substation Doc. No. C256-EQ-S-FD-00003 Rev. no. 01 Validfrom: Role and Need for Barrier Reference • Maximum distance between sensors 11 meters, maximum distance from sensor to bulkhead 5.5 meters and minimum 0.5 meters away from outside wall or dividing partition. Fire detection actions Automatic initiation of actions shall include • ESD (confirmed fire) • HVACand fire damper shutdown, except for areas subject to smoke control (confirmed fire) • Activation of Fire Fig hting Equipment (confirmed fire) • General installation alarm (confirmed fire) • MCP activation shall initiate alarm in central control room. Central control room to verify and initiate further actions and alarm on installation as required Guidance Early smoke detection may be subject to manual initiation of actions only. End of guidance Afire alarm shall be presented in CCRon an OSS layout to easily identify location. Confirmed fire shall be based on voting between two or more fire detectors in alarm. Voting shall indude all fire detectors within a defined area (any type of detectors) and exposed to the same fire scenario. The voting logic shall be arranged such that confirmed fire can be achieved with faulty detectors, and also including inhibited detectors unless safe detector inhibit is achieved by established operating procedures. The following voting prindples should apply (for automatic actions only): Smoke (except areas such as accommodation or offices with manual intervention): • 2ooN detectors to reach specified alarm limit when N> 3 Note: Smoke d etectors are less likely to be used together with other types of fire detectors, and applications that require voting are not common. Smoke detectors covering enclosures and HVAC inlets shall not be voted together with other fire detectors in the same area. Classification: Internal Status: Final Expiry date: 36 Of 69 granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} Doc. No. C256-EQ-S-FD-00003 Rev. no. 01 Valid from: Role and Need for Barrier Reference Flame: • 2ooN detectors to reach specified alarm limit when Ns 3 Heat: • 1ooN detectors to reach specified alarm limit when N£ 2. 1ooN voting with highly reliable heat detectors to be approved by Company Fire detection alarms Detection of fire, failure to execute actions upon demand and system defects shall be presented as alarms in Central Control Room (see also PS 22). F&G system status shall be continuously available in CCR, and the system shall raise alarms in CCR for operator awareness or action, considering: • Detection of fire or activation of Manual Call Point • Failure to execute action upon demand • Function (sensor, logic solver, final element) defect or failure. Status/alarm parameters for each individual fire detector shall be identifiable in the CCR. An F&G alarm condition shall be alerted in other strategic locations, i.e. the onshore control room shall alert SOV/CTV upon F&G alarm. CCTV coverage CCTV cameras shall be installed in order to help the control room operators evaluate appropriate actions following an alarm event on the unmanned substation. Evaluation shall be performed to identify relevant locations, but CCTV cameras shall as minimum be installed with sufficient coverage of transf ormer containment area and high voltage switchgear/ GIS areas Independence The F&G safety related functions shall fulfil their intended role independently of other control -and safety related control systems, Prerequisites to fulfil the independence requirements are: • Logic solver (firmware, as standard manufacturer provision) shall be certified /type approved to relevant standard (i.e. EC 61508). Use of existing non-certified equipment may be accepted subject to particular safety assessment and “prior use” characteristics. • F&G safety related functions shall be realized in addition to and independent of installation basic control systems. • F&G system units (logic solver) shall not be used fornon-safety related systems. Classification: Internal Status: Final Expiry date: 37 of 69 granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} Safety strategy for offshore substations No. C256-EQ-S-FD-00003 Rev. no. 01 Vaiid from: Role and Need for Barrier Reference • F&G sensor loop including accessories (e.g. air supply branch-off and power fuses) shall be separate from other functions, directly connected to F&G system unit. • F&G final element shall be operated directly from F&G system unit unless actions are executed through the ESD system. Possible use of common SAS data network and operator stations are addressed in automation discipline requirements. Same reference will apply to sianal exchanged between dfferent safety s'Mems. 6.8 Active Fire Protection (PS 9) Role and Need for Barrier Reference The main purpose of the firefighting systems is to provide quick and reliable means for firefighting in addition to cooling of equipment and structures. Relevant hazards • Fires in oil filled transformers • Diesel fires (e.g. related to diesel storage or auxiliary generator) • Electrical fires Requirements Active fire protection strategy Fixed fire-fighting systems shall be installed in areas representing afire risk, and particularly for equipment containing signficant quantities of hydrocarbons or other flammable materials. The fire protection strategies shall take into consideration that manual intervention normallyis notavailable at the unmanned substation. Asset protection shall hence be part of the considerations. The following active fire protection strategies are envisaged, but shall be further assessed and developed based on risk assessment: Classification: Internal Status: Final Expiry date: 38 of 69 DNV-GL-ST0145 Offshore substations - Rules and standards NFPA101, Life Safety Code NFPA 850, Recommended Practice forFire Protection for Electric Generating Plants and High Voltage Direct Current Converter Stations granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} Safety strategy for offshore substations Role and Need for Barrier Area /room Active fire protection Oil filled transformers Fixed expanding foam system Diesel engine Water mist room/enclosure Electrical rooms, / Inert gas suppression systaTI instrument rooms (e.g. Argonite, inergen etc.) Doc. No. C256-EQ-S-FD-00003 Rev. no.01 Valid from: Comment In combination with certified fire protection grating solution within bunding around transformers(ref. PS 10). Foam system extinguish and prevent pool fire on top of the fire protection grating. The qualities of the grating prevent fire within the bound underneath the grating. In combination with remote operated or automatic isolation valve on diesel fuel line Fixed CO2 extinguishing systems shall not be used. The active fire protection systems shall have possibility of remote (onshore) and local activation. For automatically initiated systems, a manual release station shall be provided and conveniently located outside the area. The inert gas suppression system shall be one central system with valve-<:ontrolled distribution system to direct the suppression gas to the intended room. The inert gas system shall have 2x100% capacity to provide back-up coverage e.g. l the system is unintentionally released. Refer to Appendix A in this document for specifications for active fire protection systems. Manual fire fighting Fire extinguishers shall be provided in line with the fire assessment of the rooms and areas. The location shall be clearly identified with photo-luminescent sig nag e in addition to all statutory signage. Any outdoor fire extinguisher and emergency equipment shall be located in a cabinet. Classification: Internal Status: Final Expiry date: 39 of 69 Reference IEEE 979 - Guide for Substation Fire Protection NFPA 11 Standard for Low, Medium, and High- Expansion Foam, Chapter 7 Compressed Air Foam Systems NFPA 750 Standard on Water Mist Fire Protection Systems NFPA 2001 Standard for Clean Agent Fire Extinguishing Systems granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} Safety strategy for offshore substations 6.9 Passive Fire Protection (PS 10) Doc. No. C256-EQ-S-FD-00003 Rev. no.01 Valid from: Role and Need for Barrier I Reference Passive fire protection (PFP) shall ensure that relevant structures and equipment components have adequate fire resistance with regard to load I DNV-ST-0145 Offshore bearing properties, integrity and insulation properties during a dimensioning fire, and contribute in reducing the consequences in general. substations Relevant hazards: IEC 60332 Test on • Escalation of fire between equipment (e.g. between adjacent transformers in one area) electrical cables under • Escalation of fire between rooms or areas (e.g. from transformer A to transformer area B or adjacent electrical rooms) fire condlions • Escalation of fire to sa'ety critical elements before the equipment has performed its intended duty in a fire scenario (e.g. UPS or control systems, muster area) I GL0644 Guideline Coat Requirements: All rooms shall have bulkheads with rating A-0 or stricter, acoording to DNV-ST-0145. Bulkheads between Transformer A and B areas and between transformer areas and adjacent spaces shall be H-rated. The fire divisions shall be capable of resisting dimensioning fire and explosion loads. Penetrations, e.g. for ventilation duds, piping, cables, beams as well as doors in fire divisions, shall not reduce the fire and explosion integrity of the divisions . Doors in fire divisions shall be of a self-<:losing type. Load bearing structures/ important elements shall have adequate fire protection to prevent unacceptable deformations or collapse during a dimensioning fire. Ho wever, contractor shall strive to reduce fire insulation to a minimum. Need for fire insulation of structure, piping etc. shall be assessed and justified. Coat back of attachments to main structures: If the contact area including the cross-sectional area inside hollcm sections of an unprotected structural element is equal or larger than 1000 mm 2 per square meter of fireproofed structural elements, the need for coat back must be evaluated. To do this, the Classification: Internal Status: Final Expiry date: 40 of 69 back on Steel Structure granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} Safety strategy for offshore substations Doc. No. C256-EQ-S-FD-00003 Rev. no.01 Valid from: actual structural design and utilization can be compared with the solutions described in GL0644. In most cases coat back can be avoided and it is not expected that the coat back distance in any case needs to be more than 150 mm. Cables for emergency services/sa'ety services required to be operable under fire conditions shall be of a fire-resistant type, especially when they pass through high fire risk areas other than those which they serve. All other cables shall be minimum flame retardant as per IEC 60332. Containment around oil filled transformers shall be provided with certified passive fire-protecting grating (restricting air to the burning liquids and quenching of fire) to minimize risk of long-lasting pool fire, ref. PS 5. 6.10 Emergency Powerand Lightning (PS 11) Role and Need for Barrier The purpose of the Emergency Power and Lighting is to provide the following: - Electrical power when main power generation or supply is being shut down. Emergency electrical power supply for a specific period of time for systems required to be in operation during or after a major hazard incident. Sufficient lighting for evacuation and escape in an emergency situation. Requirements Emergency power supply Two redundant and independent UPS systems with three (3) hours capacity each (2x100%) serving both emergency and non-emergency consumers shall be provided. Each emergency consumer is fed from each of the two UPS systems with local change over to ensure ava ilability of the emergency services for minimum three (3) hours. Classification: Internal Status: Final Expiry date: 41 of 69 Reference DNV-GL-ST0145 Offshore substations EN 1838:2013, Lig hting applications - Emergency lighting C256-EQ-Z-SP-00009 offshore Substation (OSS) granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} Safety strategy for offshore substations Role and Need for Barrier Doc. No. C256-EQ-S-FD-00003 Rev. no.01 Valid from: The available UPS capacity shall, at any time when needed, ensure that sa'ety systems will be kept operational during periods of accidental events, evacuation and escape. Emergency consumers to be supplied by the UPS shall include: • Emergency and escape lighting • Active fire protection (when firefighting equipment is dependent on emergency source of electrical power) • Control and communication systems required in an abnormal situation (incl. HV P&C) • Alarm systems • HV AC systems required to prevent overheating of rooms with sa'ety critical or essential functions. Consumers supplied from the UPS shall also enable personnel to perform corrective actions to restore main power, this includes but not limited to: • Sufficient lighting at key areas • Strategically located sockets Separate UPS system(s) with 96-hour capacity shal be provided for: • navigation lights • aviation warning lights • structure marking Shut down of ventilation shall not cause temperatures above vulnerable components' tolerance within the required operating time of the relevant installation safety systems. Minimum required operating time in this scenario is 30 minutes, to ensure availability of safety critical functions until escape and evacuation is completed. Guidance: Room temperature may exceed the maximum allowed continuous ambient temperature for a short section at the end of the period, provided that lifetime consequence is evaluated and found acce12tabl�e=·�------------------------------------ Classification: Internal Status: Final Expiry date: 42 of 69 Reference Topside Technical Specification granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} Safety strategy for offshore substations Role and Need for Barrier End guidance. Doc. No. C256-EQ-S-FD-00003 Rev. no.01 Valid from: The emergency power system shall be monitored and raise critical status alarms in Control r0001. Emergency lighting: Emergency and escape lighting shall be provided in order to allow escape during emergency situations and provide sufficient I ighting in areas which are manned during such events. This includes Escape routes, muster areas, SOV/CTV access gates, escape chute areas, helicopterwinch area, sea illumination of boat landing and escape-to-sea systems The emergency lighting shall be minimum 30% of the normal lighting level and ensure sufficient illumination for safe work in areas required to be manned during emergency situations. Escape lighting levels shall be minimum 15 lux at high risk task areas and evacuation stations and 1 lux on escape routes. Emergency exit signs shall either have an illuminated or fluorescent type of design . Survivability requirements UPS shall be located in protected area Cables to emerg ency consumers shall be fire resistant Emergency light fixtures without internal batteries, shall be arranged in A and B system, each supplied from separate redundant power sources. Classification: Internal Status: Final Expiry date: 43 of 69 Reference granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} Safety strategy for offshore substations 6.11 Process Safety (PS 12) Role and Need for Barrier Doc. No. C256-EQ-S-FD-00003 Rev. no.01 Valid from: Process safety means of protection, incorporating electrical and mechanical protection devices and safety instrumented functions, shall ensure that the process conditions do not exceed specified process safety limits. The main process for wind farms is understood as generation and transmission of electrical energy. The aim is to control any abnormal process operating condiions to prevent and/or minimize possible accidental events or releases. Typical actions, by means of protection devices include: • Process shutdown by tripping of Circuit Breakers(CBs) • Pressure relief The extent of a shutdown situation will depend on type of abnormality and may vary from shutdown of process sections with minimum effect on the production, to a total shutdcmn. Relevant hazards • Electrical faults resulting in short circuits/ arcing events and subsequent fire or explosion scenarios Requirements: Electrical faults are detected and cleared by protection relays without operator intervention. A SCAD A system will be installed for monitoring and control of the wind farm plant. If abnormal condition is detected in the electrical systems, the operator in onshore central control room shall evaluate and consider appropriate act ions. There will also be automatic acti:> ns based on p redefned levelsAimits. The contro l room shall be manned 24/7. High system reliability shall be ensured by: - Autonomous protection relays will clear any electrical fault in the system . Classification: Internal Status: Final Expiry date: 44 of 69 Reference granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} Safety strategy for offshore subs tations Role and Need for Barrier Doc. No. C256-EQ-S-FD-00003 Rev. no.01 Valid from: - Primary protection relays are backed up by seoondary back up relays if fault is not cleared by primary. Redundant protection relays are as minimum provided for main HV eq uipment and cables (e.g. transformers and export cables). - Relays from different vendors/models All relays onshore and offshore shall be communicating on redundant fiber networks (IEC61850). Transformer and shunt reactor safety (electrical oil fi/led equipment) Each oil filled transformer shall be protected by redundant protection systems aimed to detect internal failures and quench an internal arc by the feeding circuit breaker. As minimum the following shall be provided as part of the short circuit protection: - Buchholz Relay (not redundant detection but redundant tripping) - Differential protection relay Earth Fault protection The Transformers shall be eq upped with a Pressure Release Valve (PRV) to protect the transformer tank in scenarios with gradual pressure build-up and low-energy arching faults (as result of fire exposure, oil filling operation or other maintenance operations or transformer malfunction scenarios). PRV shall be equipped with an external duct to guide the ruptured oil dcmn below the deck grating instead of spreading to the surroundings. The PRV shall be designed to not limit the free flow of oil in any way. 6.12 Alann and Communication System for use in Emergency Situations (PS 13) Role and Need for Barrier GA, Alarm and communication systems for use in emergency sluations shall: • Alert and inform personnel as quickly as possible in the event of a hazardous or emergency situation • Provide two-way communication of information regarding em erg ency events to the Control Room • Allow the co-ordination of rescue, recovery and emergency assistance . Classification: Internal Status: Final Expiry date: 45 of 69 Reference Reference granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} 012345ÿ74814395ÿ28ÿ2783ÿ774147ÿÿ145ÿÿÿÿ )*+ÿ,ÿ'-ÿ ./012ÿ3456ÿ ÿÿ !"#$"%"&"''''(ÿÿ ÿÿ@ABCDEAFAGHIÿ K0ÿ<*47,,*0ÿ,L/42ÿ7M/0ÿ/4=ÿ<*47,/0Nÿ8O"O/=ÿ4/217ÿ7:18/L0*ÿ34ÿ*3*81+*Nÿ1,8*01P1L0*ÿ55:,1/81,ÿQM17ÿ17ÿ1,8*,2*2ÿ8ÿ4*<0/*ÿ8M*ÿ,**2ÿ34ÿ/ÿ 2*21/8*2ÿ<:L01ÿ/224*77ÿRSKTÿ7=78*5ÿ 8ÿ/0/45Vÿ30/7M1,Pÿ01PM87ÿ</481:0/40=ÿO18Mÿ4*7<*8ÿ8ÿ/4*/7ÿO18MÿM1PMÿ,17*ÿ0*+*0ÿ/,2ÿ<771L0*ÿ8;1ÿP/7ÿ ÿX/=:8ÿ/,2ÿ0/81,ÿ3ÿ0:27<*/W*47NÿM4,7Vÿ714*,7ÿ/,2ÿL*07ÿ7M/0ÿL*ÿ4*+1*O*2ÿ2:41,Pÿ2*71P,ÿ/,2ÿ+*4131*2ÿ2:41,Pÿ78/48":<ÿ/,2ÿ<*4/81,ÿQM17ÿ/07ÿ/<<01*7ÿ ÿQM*ÿUKV/0/45ÿ7=78*5Nÿ0:27<*/W*47Nÿ/0/45ÿM4,7Vÿ714*,7NÿL*07ÿ/,2ÿ30/7M1,Pÿ01PM87ÿ7M/0ÿ5<0=ÿO18Mÿ<4*+/101,Pÿ4*P:0/81,7ÿ/,2ÿ<4/81*7ÿ8ÿ*,7:4*ÿ8M/8ÿ ÿ&0/7M1,Pÿ01PM8ÿ7M/0ÿL*ÿ1,78/0*2ÿ1,ÿ/4*/7ÿO18Mÿ,17*ÿ0*+*07ÿ*;**21,PÿY <*47,,*0ÿO10ÿL*ÿ/0*48*2ÿ/,2ÿ1,345*2ÿ1,ÿ8M*ÿ*+*,8ÿ3ÿ/,ÿ*5*4P*,=ÿ718:/81,ÿ ÿQM*ÿ/0/45ÿ7=78*5ÿ7M/0ÿL*ÿ3:0=ÿ4*2:,2/,8ÿR7*</4/8*ÿKÿ7=78*5ÿ/,2ÿZÿ7=78*5Tÿ ÿ[\]^_ÿabcd]\aÿ ÿ2ZKÿ QM*ÿ/0/45ÿ7=78*5ÿ7M/0ÿ217841L:8*ÿ/:21ÿ/0/457Nÿ+17:/0ÿ/0/457ÿ/,2ÿ*5*4P*,=ÿ5*77/P*7Nÿ/,2ÿ7M/0ÿL*ÿ1,8*43/*2ÿO18Mÿ8M*ÿ*5*4P*,=ÿ7M:82O,ÿ/,2ÿ&14*ÿeÿ U/7ÿ7=78*57ÿ34ÿ/0/45ÿ1,<:8ÿ%1P,/0ÿ8=<*7Nÿ+17:/0ÿ04ÿ2*7ÿ/,2ÿ/0/45ÿ8=<*7ÿR*P6ÿP*,*4/0Nÿ5:78*4Nÿ/L/,2,ÿ/,2ÿ8;1Tÿ7M/0ÿL*ÿ/421,Pÿ8ÿ0/0ÿ 4*f:14*5*,87ÿ/,2ÿ<4/81*ÿ ÿg_h^chdijÿik__ldbi]mbkdÿ n1,15:5ÿ8Oÿ5*/,7ÿ3ÿ55:,1/81,ÿ7M/0ÿL*ÿ/+/10/L0*ÿL*8O**,ÿ,7M4*ÿ)ÿ/,2ÿo%%ÿ+1/ÿ4*2:,2/,8ÿ31L*4ÿ55:,1/81,ÿ01,W7ÿR*Pÿ.p&ÿ4/21Nÿ9Sÿ 8*0*<M,=NÿQ#Q)KTÿ ÿKÿ8*0*<M,*ÿ7=78*5ÿ7M/0ÿL*ÿ1,78/0*2ÿ,ÿ8M*ÿo%%ÿ7ÿ8M/8ÿ<*47,,*0ÿ/,ÿ/0*48ÿ8M*ÿ,7M4*ÿ)ÿ ÿgqmh^d]\ÿh_h^chdijÿik__ldbi]mbkdÿ QM*ÿ3/10181*7ÿ7M/0ÿM/+*ÿ,**77/4=ÿ*f:1<5*,8ÿ34ÿ55:,1/81,7ÿO18Mÿ*;8*4,/0ÿ*5*4P*,=ÿ4*7<,7*ÿ4*7:4*7rÿ ÿ 0/77131/81,6ÿ9,8*4,/0ÿ ÿ %8/8:76ÿ&1,/0ÿ#;<14=ÿ2/8*6ÿ ÿ ÿ ÿ>!ÿ3ÿ!?ÿ granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} Safety strategy for offshore substation Doc. No. C256-EQ-S-FD-00003 Rev. no.01 Valid from: Radio system shall also provide marine communication to allow for co-ordination of active fire protection, response to marine pollution and emergency assistance. Equipment for communication shall be powered from dedicated battery supplies and/ or powered from the facility's UPS system. 6.13 Escape, Evacuation and Rescue; EER (PS 14) Role and Need for Barrier Escape and evacuation route and exits In the case of a hazardous incident, the purpose of escape and evacuation routes is to: • Ensure that personnel can leave the area(s) in question by at least one safe route • Enable personnel to sa'ely reach the assigned mustering area from any position on the installation they are likely to occupy (and hence the designated embarkation area). • Enable rescue/medical teams to safely bring injured personnel to areas where medical treatment can be given Temporary refuges and embarkation areas (Muster area) The purpose of refuges embarkation(mustering) areas is to. • Provide sa'e refuge on the installation as long as required for a controlled evacuation to be carried out. • Ensure easy, fast and safe entering of the evacuation systems in question Evacuation systems The purpose of the evacuation system(s) is to ensure safe means of evacuating the maximum POB. Rescue and safety equipment The purpose of rescue and safety equipment is to: • Provide personnel with necessary equipment to ensure safe EER Classification: Internal Status: Final Expiry date: 47 of 69 Reference SOLAS Chapter Ill - Life Saving Appliances and arrangements I DNV-ST-0145 Of fshore Substations CAP 437 Standards for offshore helioopter landing areas ISO 3864 Graphical symbols -Safety colors and safetysigns granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} Safety strategy for offshore substations Role and Need for Barrier Doc. No. C256-EQ-S-FD-00003 Rev. no.01 Valid from: • Ensure that injured personnel are given adequate first aid treatment and a professional follow up, thus minimizing the effects from possible injuries Requirements Escape and evacuation routes and exits Escape routes and muster area shall be provided enabling all personnel to safely leave the affected area(s) in case of a hazardous incident A minimum of two independent escape routes leading from any area to muster area shall be provided. The muster area(s) shall be positioned in lower deck with cbse access to escape chutes, boat landing ladders and SOV gangway connection points. Survival suits shall be stored nearby or at muster areas Escape routes shall preferably be provided on the outside, along the periphery of the installation, and be designed to be passable by position rather than by special protection Escape and evacuation routes leading to a higher or lower level shall be provided by stairways. They shall be located nearly diagonally opposite each other as practicable. Hatches shall not be part of escape routes. Ladders can be used as part of escape routes in areas where the work is of such a nature that only a few persons (3 or less) are in the area on a short time basis when the platform is manned. The length of a stair flight or a ladder shall be as low as possible. The sub station shall be designed for stretcher transport to embarkation points at the lower deck and to helioopter hoist area. It shall be demonstrated in all cases that equipment used for transportation of injured personnel can be turned at corners and in the staircases. Required width of main access/ escape routes shall emphasize easy transport of injured personnel on a stretcher. The dimensions shall minimum be 1 m in width (0.9 m for doors) and 2.3 min height (2050 mm for doors). Classification: Internal Status: Final Expiry date: 48 of 69 Reference ISO 7010 Graphical symb ols - Safety colors and safety signs - Registered safety signs C256-EQ-Z-SP-00009 Offshore Substation (OSS) Topside Technical Specification granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} Safety strategy for offshore subs tations Role and Need for Barrier Doc. No. C256-EQ-S-FD-00003 Rev. no.01 Valid from: There shall be at least two exits to escape routes from areas that are permanently or intermittently manned during inspection or maintenance visits, lead ing in different escape drections and situated as far apart from each other as possible. Internal room arrangement shall be considered for possible blocking of exits follcming an accident Layout shall accommodate that escape from one area to another area with higher risk level is not required. Escape from a HV room may be through another HV room of same or lcmer risk level. All doors shall be constructed so that one person can easily open them from either side. They shall open in the direction of escape without blocking the outside escape route and be self-closing. This requirement should consider the effect of wind (1-year condition). If analysis shows that a door can be used from both directions during escape/evacuation, e.g. due to tV1.0 separate incidents, a sliding door should be used. Doors that are normally locked can be accepted with opening in either direction in such cases. Corridors and dead ends shall not exceed 7 meters unless provided with at least tV1.0 exits, one at each end Survivability of escape routes Escape routes outside the area for the initial event shall be designed and protected so that at least one route of escape is available for the required period of time during a dirnensionng accidental event. Personnel shall be ab le to use the escape routes without being exposed to excessive toxic fumes, smoke nor unacceptable heat loads, hot liquids or falling objects. Signs and markings A sufficient number of safety signs and markings shall be provided to convey necessary information to guide personnel in emergency situations and give clear information regarding directionsAocations of various functions, areas and exits. Classification: Internal Status: Final Expiry date: 49 of 69 Reference granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} Safety strategy for offshore substations Role and Need for Barrier Doc. No. C256-EQ-S-FD-00003 Rev. no.01 Valid from: Safety signs and markings shall conform with regional requirements and with reference to international industry standards, e.g. ISO 3864 and ISO 7010. Signs and markings shall be consistent throughout the plant, and the color code used shall be specific and not used for other purposes. A descriptive text shall be added to the sign if symbols are not easily understood. Text shall however be kept to a minimum. All signs/markings and their supports shall be constructed from robust material; durable and suitable for the intended use, the environmental forces and cleaning methods to which they will be subjected. Escape routes shall have signs/markings showing the preferred direction of escape. Escape and evacuation routes on plated decks shall be provided with a non-skid, oil resistant coating in yellow (RAL 1023), unless local requirements regulate the color coding. On deck grating, two parallel 100 mm wide yellow(RAL 1023 if no other requirements are given) lines shall be painted indicating the width of the escape route. Escape and evacuation routes inside rooms with other floor finish than plated deck or grating, e.g. multipurpose and control room, shall be provided with low level fluorescent arrows showing correct escape direction. Ot her enclosed spaces shall be oonsidered separately. Safety plans shall be strategically located/ posted on the premises with high degree of accessbility. Such a plan shall include: • Locations of safety, rescue and firefighting equipment • Emergency exits, escape and evacuation routes • Evacuation instructions and legends Muster area The muster area is a safe place where personnel normally muster while emergency response are undertaken. Muster area shall be safe by position rather than by protection. Two easily accessible muster areas (primary and secondary) shall be clearly defined and separated from each other as widely as practicable. The muster areas shall be located in protected area at lower deck with easy access to the escape chutes, boat landing ladders and SOV gangway connection points. The muster areas, and the evacuation routes from muster area to the embarkation area in g uestion, shall be arranged and protected in order to ensure the Classification: Internal Status: Final Expiry date: 50 of 69 Reference granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} Safety strategy for offshore substations Role and Need for Barrier Doc. No. C256-EQ-S-FD-00003 Rev. no.01 Valid from: safety of all personnel during the period required for the evac uation process to be completed in an organized and efficient way. The primary Muster Area shall remain unimpaired by excessive toxic fumes, smoke, unacceptable heat load, hot liquids and falling objects for minimum 30 minutes Additional functions for the muster area are to provide first aid, information and communication. The size of the muster areas shall as minimum correspond to N*0.4 m 2 , where N denotes maximum personnel at the substation. Emergency communication systems (e.g. telephone and UHF radios) shall be available at the muster station. At escape chutes waterproof portable VHF shall be available and adapted for use in life rafts. Evacuation systems Prima — method of evacuation is to SOVvia gangway connection orto ClV via the boat landing ladders, i.e. the normal method of getting to and from the installation. Secondary method of evacuation is helicopter winching from up per level of the OSS (medevac or no n-emergency scenario) Tertiary method of evacuation is evacuation to sea by escape chutes with life rafts. Evacuation by SOV SOV will not be permanently connected when personnel are on-board the OSS. The SOV shall be able to react and conna::t with gangway to the OSS within 30 minutes upon request The SOV walk-to-work system shall as minimum be operational for wave heights up to 2.5 m Hs. Classification: Internal Status: Final Expiry date: 51 of 69 Reference granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} Safety strategy for offshore substations Role and Need for Barrier Doc. No. C256-EQ-S-FD-00003 Rev. no.01 Valid from: Weather conditions shall be monitored and personnel onboard the OSS shall be transferred to SOV prior to the critical weather condition is reached. The SOV shall be equipped with fast rescue craft and have emergency medical facility. Evacuation via CTV Minimum two boat landings shall be av ailable for ClV access. Helicopter winching area A helicopter winching area shall be provided on the top deck. The winching area is for emergency scenarios when not requiring immediate evacuation. It is not intended for normal crew transfer nor norrnal goods logistics but may be used in exceptional cases for personnel transfer and/or goods logistics. Desig n and obstacle restrictions and visual aids marking shall be acoording to requirements for helicopter winching areas in CAP 437 and relevant local codes and standards. There shall be no obstructions such as antennas, masts or other equipment preventing helicopter access above the winching area. The maximum helicopter rotor diameter size shall correspond to type of SAR helicopters to be used in Polish waters. Escape chutes with life rafts Escape chutes with life rafts shall be provided on tV1.0 separate locations of the installation arranged such as to maximize av ailabilitywith respect to sea conditions. Each escape chute location shall have capacity for maximum POB. The escape chutes shall comply with air-gap requirements as specified in the OSS Topside Technical Specfication and be located such that they are unimpaired by excessive toxic fumes, smoke, unacceptable heat loads, hot liquids and falling objects for minimum 30 minutes after all reasonably foreseeable incidents begin. The chute system's life rafts and boarding raft shall be lowered together with the chute, and the boarding raft shall automatically inflate. Classification: Internal Status: Final Expiry date: 52 of 69 Reference granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} Safety strategy for offshore substations Role and Need for Barrier Doc. No. C256-EQ-S-FD-00003 Rev. no.01 Valid from: The escape chute system shall be readily available and easy to operate with clear operating instructions located on an appropriate place, e.g. on the wall inside container. Winch for recovery should be fed by main power. Removal of rafts for re-<:ertification shall be possible without affecting the suspension system including lifting wire. Location and arrangement shall ensure easy lifting, installation and removal of the chutes. The evacuation-to-sea-equipment shall be type approved and tested acoording to IMO/SOLAS/LSA , code and national maritime regulatory requirements. Rescue and safety equipment Suits and life jackets Permanent cabinets for storage of survival suits (with floating and thermal protection abilities) shall be located at or close to the primary muster station, corresponding to the maximum POB on the OSS. The survival suit is personal safety equipmen� meaning that each person on the installation shall have their own suit that is brought onboard and temporarily stored in the permanent cabinets. There shall be sufficient space around the cabinets to ensure quick dress up for the maximum number of POB. Additional storage of survival suits correspond ng to the maximum POB shall be available at the muster station. Survival suits shall as a minimum be type approved accordng to IMO/SOLAS/ LSA Code, but additional requirements may come out of the EER analysis. The following applies: • Design should minimize impact to the neck of the wearer in case of jumping from a high level • Be of a color which is easily visible at sea (yellow, orange, etc.) • Have reflecting and/or fluorescent markings to facilitate rescue in the dark Lifebuoys Life buoys shall be installed at regular intervals on lower deck perimeter along the walkway, for guidance see DNV-ST-0145. Safety showers and eyebaths Classification: Internal Status: Final Expiry date: 53 of 69 Reference granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} Safety strategy for offshore substations Role and Need for Barrier Doc. No. C256-EQ-S-FD-00003 Rev. no.01 Valid from: Need for safety showers or eyebaths and strategic locations shall be identified through a separate evaluation considering the chemicals handled and sp illage that may occur or risk for burns orexposure of hot fluids to personnel. Potable water quality shall be used for safety showers and eyebaths First aid kits and equipment An adequate number of first aid kls shall be provided at suitable locations and shall as minimum be provided at the Multipurpose room. The muster station / locker room shall further accommodate storage/space for first aid equipment such as medication, rigged stretcher and defibrillation equipment. Search and rescue equipment Breathing masks/smoke hoods for escape through areas exp osed to toxic fumes or smoke shall be evaluated. Electrical rescue kits shall be available and easily accessible for personnel performing tasks in electrical rooms. 6.14 Layout Design Principles and Explosion Barriers (PS 15) Role and Need for Barrier The layout and arrangement shall reduce the probability and the consequences of accidents through location, separation and orientation of areas, equipment and functions. The explosion barriers shall reduce the consequences of the pressure loads from an ignited cloud of released gas or oil mist to prevent the accident to spread to other areas and/or critical equipment Classification: Internal Status: Final Expiry date: 54 of 69 Reference Reference lR3021 Electrical system design, offshore units DNV-ST-0145 Offshore Substations granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} Safety strategy for offshore substations Role and Need for Barrier Doc. No. C256-EQ-S-FD-00003 Rev. no.01 Valid from: Relevant hazards • Safety critical functions impaired by accidental loads • Security incidents or accidents caused by third party entry to the installation • Explosion e.g. due to fault in oil filled transformers resulting in escalation between equipmentorareas • Asphyxiation risk related to leaks from pressurized bottles (inert gas, SF6, N2) Requirements Areas or equipment of high-risk potential (e.g. oil filled transformer area) shall be segregated by slificient distance or barriers from areas required to be of low risk potential, and from areas containing important safety functions. Incident escalation between areas shall be avoided. Muster and embarkation areas and rooms with safety critical functions shall be located at lower deck level, separated and protected by plated deck towards areas and spaces with higher risk potential which shall be located above (e.g. transformer areas, cooler areas). Physical security Access to boat landing and ladder up to lcmer deck level may be available for third party, but access to deck shall be controlled and locked for third party, e.g. by mariner cage or simiar. The lock design on the mariner cage entrance door must facilitate escape from the platform. Ladder entry and boat landings shall be part of CCTV coverage. All rooms on the installation shall be locked as default. High voltage rooms locked with dedicated keys. High Voltage cabinets locked with pad locks. Ref high voltage (HV) safety rules. Explosion design principles for rooms for major electrical equipment The rooms shall withstand without any damage the highest blast pressure caused by a short circuit. As a general rule it is not necessary to do any calculations to document this requirement for short circuit levels up to the levels listed below (indicated as the maximum symmetrical root mean square (RMS) value of the sub transient fault current): - 11 16,613,3 kV: 40 kA RMS - 690 V: 50 kA RMS Classification: Internal Status: Final Expiry date: 55 of 69 Reference granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} Safety strategy for offshore substations Role and Need for Barrier 400/230 V: 30 kA RMS - Main distribution board; 400/230 V: 10 kA RMS -Sub-distribution board Doc. No. C256-EQ-S-FD-00003 Rev. no.01 Valid from: For higher short circuit levels, the room integrity towards blast pressure caused by a short circuit shall be documented. Explosion design principles - Oil filled transformer areas The am ount of venting available, the degree of blockage and congestion in the area significantly influence the severity of an explosion and shall be optimized to reduce explosion risk. Oil filled transformers should be located in natural ventilated area. Dimensioning explosion loads shall be established and implemented in design for structures and equipment Explosion panels sh all be provided in walls facing sea (if partially enclosed) in order to reduoo explosion load potential. Storage of pressurized bottles (Inert gas, SF!i, N2) Storage of pressurized bottles should be in naturally ventilated area. If gas bottles are stored in enclosed spaces, introducing risk of asphyxiation, adequate ventilation shall be provided, and leak detection evallated. 6.15 Offshore cranes (PS 16A) Role and Need for Barrier The crane barrier shall reduce the probability that errors and hazards will arise during crane operation and reduce the possibility of boom or load fall. Relevant hazards Classification: Internal Status: Final Expiry date: 56 of 69 Reference Reference TR1727 Substitution to TR1727 ver 5, Unmanna::l installations granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} Safety strategy for offshore substations Role and Need for Barrier Doc. No. C256-EQ-S-FD-00003 Rev. no.01 Valid from: • Dropped objects impacting e.g. personnel, critical equipment, ClV or SOV, subsea cables etc. Requirements The offshore crane and davits shall complywith lR1727 Substitution for unmanned installations The likelihood of crane boom or load fall as well as hanging loads hitting personnel or critical equipment shall be reduced as far as practicably possible. Crane coverage and laydown areas shall be arranged to promote safe operations of the cranes and free, unobstructed visibility to lay down and lifting zones for operator of the crane There shall be no lifting zones above unprotected equipment or piping, containing flammable or toxic gasAiquid. Lifting zones to SOV/CTV shall be located such that lifting operations to the SOV/CTV can be done leeward of the predomnant weather conditions. The lifting zones should be located away from cables to or from the OSS if practical. The cable protection system (CPS) shall be capable of handling relevant dropped object loads. The lifting zones shall be defined and available as a lifting map. Deck load limitation chart shall be established. A sign indicating maximum weight and loading rating shall be displayed at each laydown area. The cranes shall be equipped with necessary fire protecti on means, The crane shall be op erable to a safe position in the event of an accident. The davit crane shall be capable and certfied to lower injured personnel to CTV. Swinging load protection shall be implemented on lay down areas as required to prevent impact to critical equipment and critical damage to load bearing structures. This is also relevant in all foreseeable lifting zones from cranes on the OSS and use of SO/ gangway and gangway associated SOV Classification: Internal Status: Final Expiry date: 57 of 69 Reference DNV-ST-0145 Offshore Substations granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} Safety strategy for offshore substations Role and Need for Barrier Doc. No. C256-EQ-S-FD-00003 Rev. no.01 Valid from: associated crane (if equipped). The boat landing, including ladders and platforms, shall be designed with respect to impact / swinging loads from material handling. 6.16 Avoidance of vessel collisions (PS 19) Role and Need for Barrier The Vessel Collision Avoidance System shall reduce the risk of vessel collisions. The surveillance of the sector around the installation may be performed by a central surveillance unit, a local surveillance unit (a unit or vessel responsible for more than one installatim), a dedicated standby vessel or the installation itself. Hazards • Ship collision with infield vessels in transit (powered collision), e.g. Service Operation Vessel (SOV) or Crew Transf er Vessel (ClV), • Ship collision with SOV during approach ("drift on" or "drift otr) • Ship collision whilst in position nextto the OSS ("drift on" or "driftotr) • Collision with fishing vessel or passng merchant vessel Requirements The unmanned OSS will not be equipped with a radar system. The collision avoidance strategy is based on surveillance by ClV/SOVwhen personnel is on the OSS, in combination with requirements to aids to navigational, wind farm layout and procedures for infield vessel movement. The OSS design shall incorporate AIS. CCR shall be able to survey the area around the OSS in all d rections by CClV. Field layout Classification: Internal Status: Final Expiry date: 58 of 69 Reference Reference International Association of Marine Aids to Navigation and Lighthouse Authorities (IALA) Recommendation 0-139, The marking of man-made offshore structures (2013) granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} Safety strategy for offshore substations Role and Need for Barrier Doc. No. C256-EQ-S-FD-00003 Rev. no.01 Valid from: The OSS shall be located minimum 500 meter behind the straight line of wind turbines defining the No1U:1east perimeter of the wind far m (towards parallel navigational route). Wind farm internal transit routes shall allcm infield vessels to pass the OSS with minimum 500 m clearance. SOV requirements (in the event SOV should be used on the windfarms) The SOV shall have minimum DP class 2 design. Operational procedure shall be in place for the SOV to approach and connect to the OSS on the leeward side of the installation with respect to the dominating environmental forces, such that SO/ will drft away from installation if incapable of maintaining target position and/or heading. Aids to navigation (AtoN) The following AtoN measures shall as minimum be implemented on the OSS, each with an availablity of no less than 99.0% (IALA Availability Category 2). • AIS base station • Foghorn • Marking of the substatio n in acoordance international and national requirements. • DP laser reflectors Communication system System shall be in place for communication with vessel on colision course. SOV and CTV shal l be equipped with necessary equipment to get attention from vessel on collision course, e.g.: • Signal lamps with intensity of minimum 1000 candelas • Megaphone with sound intensity of 80 dB Fast rescue craft on the SOV shall be equipped with approved maritime VHF Classification: Internal Status: Final Expiry date: 59 of 69 Reference granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} Safety strategy for offshore substations Role and Need for Barrier Systems for consequence reductbn and evacuation • Ev acuation of personnel • ESD - platform shutdown 6.17 Structural integrity (PS 20) Role and Need for Barrier Doc. No. C256-EQ-S-FD-00003 Rev. no.01 Valid from: Load bearing strucbJre shall withstand all loading situations under normal operation and also ensure structural integrity after a dimensioning accidental event. Main design principles Load bearing structures shall be sufficiently robust to ensure that local damage or f ailure will not result in unacceptable consequences. • Slender, main load bearing structural elements shall be demonstrated to be redundant. • Main load bearing structures shall be designed so that water penetration through outer walls facing the sea cannot lead to loss of main s.tety functions The topside structural integrity shall be documented for all governing conditions and phases during the platform lifetime, i.e. from prefabrication, assembly, weighing, site moves, barge transportation and installation to offshore hook-up, operation and abandonment The jacket and topsides structure shall be designed to withstand the Dimensioning Accidental Loads (DAL) associated with the following Major Accid ent Hazards (MAH) where relev ant: Fire, Explosion, Dropped objects, Extreme Weather and Ship collisions. Recognized models/methods and competent personnel shall be used to determine the corresponding design accidental loads. Classification: Internal Status: Final Expiry date: 60 of 69 Reference Reference DNV-ST-0145 Of fshore substations DNV-RP.C204 Structural design against accidental loads C256-EQ-Z-SP-00012 OSS Substructure Technical Specification granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} Safety strategy for offshore substations Role and Need for Barrier Doc. No. C256-EQ-S-FD-00003 Rev. no.01 Valid from: Dimensioning accidental loads and environmental loads shall not cause the loss of main safety function(s ). Ship collision It is not considered practical to design for impact energies associated with a passing merchant vessel collision. This hazard shall be addressed by preventive measures (ref. PS19). The OSS shall be designed to withstand a collision of a service operation vessel up to 6000t displ acement. For ALS, a ship impact speed of minimum 2.0 mis shall be used with added mass as per requirements in DNV-ST-0145. Energy absorbed by striking vessel may be taken according to DNV-RP-C204. Some structural damage is considered acceptable under the above circumstances provided the overall structural integrity of the platform is not compromised. Collision with vessel superstructure shall be considered in design of the topside. Safety critical equipment or equipment that could cause environmental harm in case of a collision shall not be positioned at the outer faces of the topside. Layout around the OSS gangway landing areas shall prevent SOV DP failure (drive-off/drift-off) with inward movement of the gangway leading to an escalating event, e.g. by causing damage to safety critical equipment. Extreme weather Airgap requirements given in DNV-ST-0145 shall be fulfilled. The topside shall have positive air gap in all conditions, reference is made to the Offshore Substation Substructure technical specification for details. Classification: Internal Status: Final Expiry date: 61 of 69 Reference granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} Safety strategy for offshore substa tions Doc. No. C256-EQ-S-FD-00003 Rev. no.01 Valid from: 6.18 Human Machine Interface and Alarm Management (PS 22) Role and Need for Barrier Human machine interface (HMI) in central control room (CCR) shall provide system information presentation and means for operator interactions. HMI provides the physical interface between systems and facility operator, maintenance technicians and other personnel operating and monitoring the facilities. The HMI shall present safety-related information for all systems, including: • Status of wind turbine generators (start-stop, trip/shutdcmn), substations, transmission system and grid connections • Status of navigational aids on the wind turbine generators and substations • Electrical overview, including status/position of high voltage switches and breakers, local isolations etc • Weather monitoring/forecas� induding lightning, sea state etc • Fire detection on wind turbine generators and in substations • Lo cation of vessels (service operating vessels, ClVs as well as other vessels) • Lo cation of helicopters (where relevant) • Location of personnel • Status of personnel • For offshore structures: External CClV monitoring. Internal CClV monitoring to be considered. Night vision to be consi::lered for external cameras. • Intruder detection for all wind turbine generators, substations • Natural ventilation and heating, ventilation, and air conditioning • Shutdown hierarchy overview and status • Fire & gas overview, e.g .. , per main fire area and/o r fire detecti on area The HMI shall include a main operating interface in CCR and allo w for manual activation of critical safety fundi:>ns. Classification: Internal Status: Final Expiry date: 62 of 69 Reference lR 4031 Automation technology-Offshore wind (HOLD not yet issued) EN 62682 Management of alarms systems for the process industries EEMUA Publication 191 Alarm systems - a guide to design, management and procurement EN ISO 11064 Ergonomic design of control centers Part 1: Principles for the design of control centres granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} Safety strategy for offshore substations Role and Need for Barrier Doc. No. C256-EQ-S-FD-00003 Rev. no.01 Valid from: All systems and HMI designated critical for safety or production shall be designed sudl that easy, fast recovery methods can be employed to regain control of the system. This includes management of software backups and system components as well as documentation to facilitate recovery. The system shall be desg ned for continuous operation, such that system function is maintained at all times. The HMI shall be designed to prevent inadvertent operations due to operatormisperception and unintended actions. EN 62682 and EEMUA 191 shall be used as basis for design of alarm functions. TR1494 and EEMUA Guideline 191 should be used for guidance. Failure to execute safety functions on demand shall initiate an alarm in CCR. The HMI facilities shall indude detailed safety system information such as input and output status, alarms, status of inhibi� override and suppression and safety system fault indication. HMI control functions • Initiate shutdowns (ESD / process level) • ESD level reset • F&G reset (e.g., per fire detection area) • F&G common reset of inhibits and overrides (e.g., per fire detecti::>n area) • ESD common reset of inhibits and overrides • Firefighting release Requirements in EN ISO 11064 "Ergonomi:: design of control centers Part 1: Principles for the design of control centres" shall be adhered to Classification: Internal Status: Final Expiry date: 63 of 69 Reference granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} Safety strategy for offshore substations Doc. No. C256-EQ-S-FD-00003 Rev. no.01 Valid from: 6.19 Safety & automation system security (PS 23) Role and Need for Barrier The Safety- and Automation Systems, including other control and monitoring facilities, shall be protected against threats such as unauthorized access and malware that may be introduced due to external data communication and information exchange, i.e., by application of security measures of the technical networks Barriers shall be installed to prevent intruders to access the topside deck levels of the OSS. CClV surveillance of lower deck/top of jacket where unauthorized personnel may access shall be installed. Classification: Internal Status: Final Expiry date: 64 of 69 Reference lR1658 Information Security of Industrial Automation and Control Systems IEC 62443 Netw ork and system security for industrial-process measurement and control granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} 012345ÿ74814395ÿ28ÿ2783ÿ774147ÿÿ145ÿÿÿÿ 145ÿÿ ÿÿ !"#$"%"&"''''(ÿÿ )*+ÿ,ÿ'-ÿ ./012ÿ3456ÿ ÿÿ 0/77131/81,6ÿ9,8*4,/0ÿ %8/8:76ÿ&1,/0ÿ#;<14=ÿ2/8*6ÿ ÿ ÿ ÿ ÿ! ÿ3ÿ!>ÿ ?ÿABBCDCEFGHÿCFIEJKGDCEFÿ ?LMÿANNJOPCGDCEFQÿGFBÿBOICFCDCEFQÿ R9%ÿ R:85/81ÿ12*,8131/81,ÿ7=78*5ÿ RSR)TÿR7ÿ0Uÿ/7ÿ4*/7,/V0=ÿ<4/81/0ÿW8*45ÿ17ÿ4*0/8*2ÿ8ÿ4*2:1,Xÿ417Yÿ0*+*0Zÿ RS%ÿ R12*,8/0ÿ01518ÿ78/8*ÿ RTÿ 4181/0ÿ/81,ÿ</,*0ÿ )ÿ *,84/0ÿ,840ÿ45ÿ [.ÿ 07*2"14:18ÿ8*0*+171,ÿ [.ÿ 4*Uÿ84/,73*4ÿ+*77*0ÿ .ÿ *8ÿ,47Y*ÿ.*418/7ÿ Tÿ =,/51ÿ<7181,1,Xÿ ##)ÿ #7/<*\ÿ*+/:/81,ÿ/,2ÿ4*7:*ÿ #%ÿ #5*4X*,=ÿ7]:82U,ÿ #%9ÿ #0*841/0ÿ%=78*5ÿ9,34/784:8:4*ÿ &^_ÿ &14*ÿ/,2ÿX/7ÿ _Rÿ _*,*4/0ÿ/0/45ÿ _9%ÿ _/7ÿ1,7:0/8*2ÿ7U18]V/42ÿ _`Tÿ _0V/0"U/451,Xÿ<8*,81/0ÿ ab9ÿ a:5/,"5/]1,*ÿ1,8*43/*ÿ a.Rÿa*/81,X\ÿ+*,810/81,ÿ/,2ÿ/14ÿ,2181,1,Xÿ 9Tÿ 9,8*4,*8ÿT480ÿ 9)ÿ 9,34/"4*2ÿ bTÿ b/,:/0ÿ/0ÿ<1,87ÿ b&`ÿ b47Y/ÿ&/45/ÿ`1/84U/ÿ bcdÿ b/,ÿ+*4V/42ÿV/8ÿ c%ÿ c,7]4*ÿ7:V78/81,ÿ c%%ÿ c37]4*ÿ7:V78/81,ÿ TRÿ T:V01ÿ/224*77ÿ T^ÿ T4*77ÿ/,2ÿ,840ÿ Tcdÿ T*<0*ÿ,ÿV/42ÿ T).ÿ T4*77:4*ÿ4*0*/7*ÿ+/0+*ÿ %R)ÿ %*/4]ÿ/,2ÿ)*7:*ÿ %RRÿ%:<*4+174=ÿ,840ÿ/,2ÿ/8/ÿRe:17181,ÿ %&!ÿ %:03:4ÿa*;/30:412*ÿ %c.ÿ %*4+1*ÿ<*4/81,ÿ+*77*0ÿ [#[)Rÿ[*4*7841/0ÿ[4:,Y*2ÿ)/21ÿ fa&ÿ f084/"]1X]ÿ34*e:*,=ÿ fT%ÿ f,1,8*4:<8*2ÿ<U*4ÿ7:<<0=ÿ f.ÿ f084/+10*8ÿ .a&ÿ .*4=ÿ]1X]ÿ34*e:*,=ÿ .)SRÿ ./0+*ÿ4*X:0/8*2ÿ0*/2g/12ÿ `[_ÿ `1,2ÿ8:4V1,*ÿX*,*4/84ÿ granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} 012345ÿ74814395ÿ28ÿ2783ÿ774147ÿÿ145ÿÿÿÿ 145ÿÿ ÿÿ !"#$"%"&"''''(ÿÿ )*+ÿ,ÿ'-ÿ ./012ÿ3456ÿ ÿÿ 0/77131/81,6ÿ9,8*4,/0ÿ %8/8:76ÿ&1,/0ÿ#;<14=ÿ2/8*6ÿ ÿ ÿ ÿ ÿ!!ÿ3ÿ!>ÿ ÿ?@AÿCDEFGFHFIGJÿ &14*ÿ21+171,ÿ0/77ÿKÿ&14*ÿ4/8*2ÿ<L=71/0ÿ21+171,ÿM*8N**,ÿ8Nÿ314*ÿ/4*/7ÿKÿ21+171,ÿ5/2*ÿ3ÿ,,"5M:781M0*ÿ 5/8*41/07ÿ3:03101,Oÿ8L*ÿ30N1,Oÿ418*41/6ÿ -ÿ18ÿ7L/0ÿM*ÿ7:311*,80=ÿM4/*2ÿ ÿ18ÿ7L/0ÿ<4*+*,8ÿ8L*ÿ<4</O/81,ÿ3ÿ30/5*7ÿ/,2ÿ75P*ÿ34ÿ/ÿ51,15:5ÿ3ÿ,*ÿ L:4ÿ3ÿ8L*ÿ78/,2/421Q*2ÿ314*ÿ8*78ÿ30N1,Oÿ8L*ÿ8*5<*4/8:4*"815*ÿ:4+*ÿ2*31,*2ÿ1,ÿ 9%RÿS(T"-Uÿ (ÿ18ÿ17ÿ2*71O,*2ÿ7ÿ8L/8ÿ8L*ÿ/+*4/O*ÿ8*5<*4/8:4*ÿ/,2ÿ8L*ÿ8*5<*4/8:4*ÿ/8ÿ/,=ÿ 71,O0*ÿ<1,8ÿ,ÿ8L*ÿ:,*;<7*2ÿ712*ÿ2*7ÿ,8ÿ*;**2ÿ-T'ÿ2*O4**7ÿÿ/,2ÿ-S'ÿ 2*O4**7ÿÿ4*7<*81+*0=ÿ/M+*ÿ8L*ÿ1,181/0ÿ8*5<*4/8:4*ÿN18L1,ÿ8L*ÿ815*ÿ015187ÿ78/8*2ÿ M*0N6ÿ0/77ÿK"!'6ÿ!'ÿ51,:8*7ÿ 0/77ÿK"('6ÿ('ÿ51,:8*7ÿ 0/77ÿK"- 6ÿ- ÿ51,:8*7ÿ 0/77ÿK"ÿ'6ÿ'ÿ51,:8*7ÿ &14*ÿ21+171,ÿ0/77ÿVÿ&14*ÿ4/8*2ÿ<L=71/0ÿ21+171,ÿM*8N**,ÿ8Nÿ314*ÿ/4*/7ÿKÿ21+171,ÿ5/2*ÿ3ÿ,,"5M:781M0*ÿ 5/8*41/07ÿ3:03101,Oÿ8L*ÿ30N1,Oÿ418*41/6ÿ -ÿ18ÿ7L/0ÿM*ÿ7:311*,80=ÿM4/*2Uÿ ÿ18ÿ7L/0ÿ<4*+*,8ÿ8L*ÿ<4</O/81,ÿ3ÿ30/5*7ÿ/,2ÿ75P*ÿ34ÿ/ÿ51,15:5ÿ3ÿ8Nÿ L:47ÿ3ÿ8L*ÿ78/,2/421Q*2ÿ314*ÿ8*78ÿ30N1,Oÿ8L*ÿ2*741M*2ÿ815*"ÿ8*5<*4/8:4*ÿ :4+*ÿ2*31,*2ÿ1,ÿ#ÿ-(!("Uÿ (ÿ18ÿ17ÿ2*71O,*2ÿ7ÿ8L/8ÿ8L*ÿ/+*4/O*ÿ8*5<*4/8:4*ÿ/,2ÿ8L*ÿ8*5<*4/8:4*ÿ/8ÿ/,=ÿ 71,O0*ÿ<1,8ÿ,ÿ8L*ÿ:,*;<7*2ÿ712*ÿ2*7ÿ,8ÿ*;**2ÿ-T'ÿ2*O4**7ÿÿ/,2ÿ-S'ÿ 2*O4**7ÿÿ4*7<*81+*0=ÿ/M+*ÿ8L*ÿ1,181/0ÿ8*5<*4/8:4*ÿN18L1,ÿ8L*ÿ815*ÿ015187ÿ78/8*2ÿ M*0N6ÿ0/77ÿV"ÿ-'6ÿ-'ÿ51,:8*7ÿ 0/77ÿV"!'6ÿ!'ÿ51,:8*7ÿ 0/77ÿV"'6ÿ'ÿ51,:8*7ÿ R37L4*ÿ7:M78/81,ÿR37L4*ÿ1,78/0/81,ÿNL1Lÿ4**1+*7ÿ8L*ÿ*0*841/0ÿ<N*4ÿ<42:*2ÿ/8ÿ8L*ÿN1,2ÿ8:4M1,*ÿ O*,*4/847Uÿ84/,7345ÿ8L*ÿ+08/O*ÿ8ÿ/ÿL1OL*4ÿ0*+*0ÿ7:18*2ÿ34ÿ*;<48ÿ8ÿ7L4*ÿ/,2ÿ*;<48ÿ 8L*ÿ<N*4ÿ8ÿ,7L4*ÿ R37L4*ÿN1,23/45ÿ WL*ÿ37L4*ÿ/4*/ÿNL*4*ÿ8L*ÿN1,2ÿ8:4M1,*ÿO*,*4/847ÿ/4*ÿ0/8*2ÿR37L4*ÿ7:M78/81,ÿ17ÿ 0/8*2ÿN18L1,ÿ8L*ÿ37L4*ÿN1,2ÿ3/45ÿ ÿ?@XÿYZ[G\DJÿE]I^ÿ_]D`FIaJÿ`D]JFIGÿ WL17ÿ17ÿ31478ÿ311/0ÿ4*+171,ÿ3ÿ8L*ÿ2:5*,8ÿ ÿ ÿ granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} 012345ÿ74814395ÿ28ÿ2783ÿ774147ÿÿ145ÿÿÿÿ 145ÿÿ ÿÿ !"#$"%"&"''''(ÿÿ )*+ÿ,ÿ'-ÿ ./012ÿ3456ÿ ÿÿ 0/77131/81,6ÿ9,8*4,/0ÿ %8/8:76ÿ&1,/0ÿ#;<14=ÿ2/8*6ÿ ÿ ÿ ÿ ÿ!>ÿ3ÿ!?ÿ @ÿBCDCECFGCHÿ -ÿ."%I"'-J ÿK37L4*ÿ7:M78/81,7ÿ"ÿ):0*7ÿ/,2ÿ78/,2/427ÿ ÿ>J"#$"N"%O"''''-P'JÿQ/08=Rÿ9ÿ"ÿS*8*/,ÿ*71T,ÿQ/717ÿ (ÿ> "#$"N"%O"''''P'JÿQ/08=Rÿ9ÿ"ÿS*8*/,ÿ*71T,ÿQ/717ÿ Jÿ !"#$"N"U"''''-P'ÿ0/4131/81,ÿ3ÿ1*ÿ784*,T8Lÿ*311*,8ÿ34ÿQ/08=Rÿ9ÿVÿ9ÿ ÿI)-' ÿ4*+ÿ?ÿO*4345/,*ÿ%8/,2/427ÿ34ÿ7/3*8=ÿ7=78*57ÿ/,2ÿM/41*47ÿ"ÿ37L4*ÿ !ÿI)-W'(ÿX7*7ÿ/,2ÿ:<01,T7ÿ >ÿ9#ÿ!- 'Wÿ Wÿ9#ÿ!- --ÿ ?ÿ#ÿ Jÿ7*41*7ÿ -'ÿ&OUÿ-'-YÿZ13*ÿ%/3*8=ÿ2*ÿ --ÿ&OUÿW 'Yÿ)*55*,2*2ÿO4/81*ÿ34ÿ&14*ÿO48*81,ÿ34ÿ#0*841ÿ[*,*4/81,TÿO0/,87ÿ/,2ÿX1TLÿ.08/T*ÿ14*8ÿ :4*,8ÿ,+*48*4ÿ%8/81,7ÿ -ÿ9###ÿ?>?ÿ"ÿ[:12*ÿ34ÿ%:M78/81,ÿ&14*ÿO48*81,ÿ -(ÿ&OUÿ--ÿ%8/,2/42ÿ34ÿZ\YÿS*21:5Yÿ/,2ÿX1TL"#;</,71,ÿ&/5YÿL/<8*4ÿ>ÿ5<4*77*2ÿU14ÿ&/5ÿ%=78*57ÿ -Jÿ&OUÿ> 'ÿ%8/,2/42ÿ,ÿ]/8*4ÿS178ÿ&14*ÿO48*81,ÿ%=78*57ÿ - ÿ&OUÿ''-ÿ%8/,2/42ÿ34ÿ0*/,ÿUT*,8ÿ&14*ÿ#;81,T:17L1,Tÿ%=78*57ÿ -!ÿ9#ÿ!'((ÿI*78ÿ,ÿ*0*841/0ÿ/M0*7ÿ:,2*4ÿ314*ÿ,2181,7ÿ ->ÿ[Z'!JJÿ[:12*01,*ÿ/8ÿM/Rÿ,ÿ%8**0ÿ%84:8:4*ÿ -Wÿ#ÿ-W(W6'-(YÿZ1TL81,Tÿ/<<01/81,7ÿ"ÿ#5*4T*,=ÿ01TL81,Tÿ -?ÿ9#!-W 'ÿ 'ÿ%KZU%ÿL/<8*4ÿ9ÿ^ÿZ13*ÿ%/+1,TÿU<<01/,*7ÿ/,2ÿ/4/,T*5*,87ÿ9ÿ -ÿUOÿJ(>ÿ%8/,2/427ÿ34ÿ37L4*ÿL*01<8*4ÿ0/,21,Tÿ/4*/7ÿ ÿ9%Kÿ(W!Jÿ[4/<L1/0ÿ7=5M07ÿ_ÿ%/3*8=ÿ047ÿ/,2ÿ7/3*8=ÿ71T,7ÿ (ÿ9%Kÿ>'-'ÿ[4/<L1/0ÿ7=5M07ÿ_ÿ%/3*8=ÿ047ÿ/,2ÿ7/3*8=ÿ71T,7ÿ^ÿ)*T178*4*2ÿ7/3*8=ÿ71T,7ÿ JÿI)('-ÿ#0*841/0ÿ7=78*5ÿ2*71T,Yÿ37L4*ÿ:,187ÿ ÿI)->>ÿ%:M7818:81,ÿ8ÿI)->>ÿ+*4ÿ Yÿ`,5/,,*2ÿ1,78/0/81,7ÿ !ÿ.")O"'Jÿ%84:8:4/0ÿ2*71T,ÿ/T/1,78ÿ/12*,8/0ÿ0/27ÿ >ÿI)ÿJ'(-ÿU:85/81,ÿ8*L,0T=ÿ"K37L4*ÿ\1,2ÿaXKZÿ,8ÿ=*8ÿ177:*2bÿ Wÿ#ÿ!!WÿS/,/T*5*,8ÿ3ÿ/0/457ÿ7=78*57ÿ34ÿ8L*ÿ<4*77ÿ1,2:7841*7ÿ ?ÿ##S`UÿO:M01/81,ÿ-?-ÿU0/45ÿ7=78*57ÿ"ÿ/ÿT:12*ÿ8ÿ2*71T,Yÿ5/,/T*5*,8ÿ/,2ÿ<4:4*5*,8ÿ ('ÿ#ÿ9%Kÿ--'!Jÿ#4T,51ÿ2*71T,ÿ3ÿ,840ÿ*,8*47ÿO/48ÿ-6ÿO41,1<0*7ÿ34ÿ8L*ÿ2*71T,ÿ3ÿ,840ÿ*,84*7ÿ (-ÿ9#ÿ!- 'Wÿ&:,81,/0ÿ7/3*8=ÿ3ÿ*0*841/0c*0*84,1c<4T4/55/M0*ÿ*0*84,1ÿ7/3*8="4*0/8*2ÿ7=78*57ÿ"ÿO/48ÿ-6ÿ [*,*4/0ÿ4*d:14*5*,87ÿ (ÿ !"#$"N"%O"''''?ÿS&]ÿQ/08=Rÿ9ÿVÿS&]ÿQ/08=Rÿ9ÿK37L4*ÿ%:M78/81,ÿaK%%bÿI<712*ÿI*L,1/0ÿ %<*131/81,ÿ ((ÿ !"#$"N"%O"eeefgÿh00ÿ0748i483ÿj3ii1kÿ0l3i2i14ÿÿ145ÿÿÿÿ145ÿÿ (JÿI)-! Wÿ9,345/81,ÿ%*:418=ÿ3ÿ9,2:7841/0ÿU:85/81,ÿ/,2ÿ,840ÿ%=78*57ÿ ( ÿ9#ÿ!JJ(ÿ*8\4Rÿ/,2ÿ7=78*5ÿ7*:418=ÿ34ÿ1,2:7841/0"<4*77ÿ5*/7:4*5*,8ÿ/,2ÿ,840ÿ ÿ ÿ granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} ÿÿ @ÿBCCDEFGHDIÿ 012345ÿ74814395ÿ28ÿ2783ÿ774147ÿÿ145ÿÿÿÿ ÿÿ )*+ÿ,ÿ'-ÿ ./012ÿ3456ÿ!"#$"%"&"''''(ÿÿ @JKÿBCCDEFGLÿBÿMÿNCDHGOGHPQGREÿORSÿPHQGTDÿOGSDÿCSRQDHQGREÿIUIQDVIÿ WPQDSÿVGIQÿIUIQDVÿ 7:311*,8ÿ2:4/81,ÿ34ÿ314*ÿ7:<<4*771,ÿ/,2ÿ,840ÿ ÿ_<*4/81,^ÿ2*+1*7ÿ7Y/0ÿ1,0:2*ÿZ/8*4ÿ5178ÿ4*0*/71,^ÿ2*+1*7ÿ4ÿ+/0+*7`ÿ217Y/4^*ÿ,8407`ÿ/,2ÿ7Y:82Z,ÿ *[:1<5*,8ÿ,**77/4=ÿ34ÿ7:*773:0ÿ<*4345/,*ÿ3ÿ8Y*ÿ7=78*5ÿ XY*ÿZ/8*4ÿ5178ÿ7=78*57ÿ7Y/0ÿ<4+12*ÿ/ÿ[:1\ÿ/,2ÿ4*01/]0*ÿ217Y/4^*ÿ3ÿZ/8*4ÿ5178ÿ/8ÿ/ÿ7:311*,8ÿ2*,718=ÿ/,2ÿ/8ÿ ÿ#/710=ÿ/*771]0*ÿ5/,:/0ÿ4*0*/7*ÿ3/10181*7ÿ7Y/0ÿ]*ÿ<4+12*2ÿ/8ÿ5/1,ÿ*,84/,*7ÿ8ÿ8Y*ÿ/4*/7ÿ ÿ5</81]0*ÿ5/8*41/07ÿ7Y/0ÿ]*ÿ:7*2ÿ8Y4:^Y:8ÿ8Y*ÿ7=78*5`ÿ*^ÿ,dd0*ÿbÿ217841]:81,ÿ<1<1,^ÿ 7=78*57ÿ ÿXY*ÿZ/8*4ÿ5178ÿ/]1,*8ÿ7Y/0ÿ]*ÿ0/8*2ÿ:8712*ÿ3ÿ8Y*ÿ<48*8*2ÿ7</*ÿ ÿXY*ÿ+*,810/81,ÿa3/,7ÿ/,2b4ÿ2/5<*47cÿ7Y/0ÿ]*ÿ07*2ÿ/,2ÿ8Y*ÿ/4*/ÿ217,,*8*2ÿ]*34*ÿ4*0*/7*ÿ3ÿZ/8*4ÿ5178ÿ <4*77:4*ÿ ÿe3f3173ÿg814ÿ1gÿg379ÿ7fgÿ3ÿÿ1hh8g1h3ÿi4ÿh481h48j7ÿ83hkk3g147lÿ1gm8ÿ45nh1f5ÿ 4/,^*ÿ345ÿ ÿXY*ÿZ/8*4ÿ5178ÿ7\12ÿ1,0:21,^ÿ5<4*77*2ÿ^/7ÿ]80*7ÿ7Y/0ÿ]*ÿ*48131*2ÿ34ÿ8Y*ÿ/8:/0ÿ5/;15:5ÿ<*4/81,^ÿ ?-(ÿsÿ--! ÿtuvwxÿz{|ÿ|}|xv~ÿ 5181^/81,ÿ/8ÿ7:311*,8ÿ,*,84/81,ÿ/,2ÿ/8ÿ7:311*,8ÿ2:4/81,ÿ34ÿ314*ÿ7:<<4*771,ÿ/,2ÿ,840`ÿZY1078ÿ4*8/1,1,^ÿ XY*ÿ1,*48ÿ^/7ÿ314*31^Y81,^ÿ7=78*5ÿ7Y/0ÿ<4+12*ÿ/ÿ[:1\ÿ/,2ÿ4*01/]0*ÿ217Y/4^*ÿ3ÿ^/7*:7ÿ/^*,87ÿ34ÿ314*ÿ ÿ/,ÿ/07ÿ]*ÿ,7:08*2ÿ ÿ:<ÿ8ÿ('ÿ51,:8*7ÿ/7ÿ1,21/8*2ÿ1,ÿ&opÿq 'ÿ2*<*,21,^ÿ,ÿ/<<01/81,ÿ9r_ÿr%b9)6ÿ!!>`ÿq>`ÿ ÿXY*ÿ+*,810/81,ÿa3/,7ÿ/,2b4ÿ2/5<*47cÿ7Y/0ÿ]*ÿ07*2ÿ/,2ÿ8Y*ÿ/4*/ÿ170/8*2ÿ]*34*ÿ4*0*/7*ÿ3ÿ^/7*:7ÿ7=78*57ÿ /,ÿ/857<Y*4*ÿ,,"Y/453:0ÿ8ÿY:5/,7ÿ 8Z/42ÿ1,8*,2*2ÿ45ÿXY*ÿ1,*48ÿ^/7ÿ7=78*5ÿ7Y/0ÿY/+*ÿ;-''ÿ/</18=ÿ8ÿ<4+12*ÿ]/\":<ÿ+*4/^*ÿ13ÿ*^ÿ 1,*48ÿ^/7ÿ7=78*5ÿ17ÿ:,1,8*,81,/0=ÿ4*0*/7*2ÿ ÿ9,*48ÿ^/7ÿ7=78*5ÿ7Y/0ÿ]*ÿ,*ÿ*,84/0ÿ7=78*5ÿZ18Yÿ+/0+*",840*2ÿ217841]:81,ÿ7=78*5ÿ8ÿ214*8ÿ8Y*ÿ7=78*5ÿ ÿXY*ÿ45ÿZY*4*ÿ8Y*ÿ^/7*:7ÿ/^*,8ÿ17ÿ4*0*/7*2ÿ7Y/0ÿ]*ÿ7:311*,80=ÿ81^Y8ÿ8ÿ5/1,8/1,ÿ8Y*ÿ<4*741]*2ÿ ,*,84/81,ÿ34ÿ8Y*ÿ<4*"2*8*451,*2ÿ815*ÿ<*412ÿ3ÿ51,15:5ÿ-'ÿ51,:8*7ÿ ÿ4*7<*8ÿ8ÿ*/7=ÿ4*<0*,17Y5*,8ÿ ÿXY*ÿ5<4*77*2ÿ^/7ÿ]80*7ÿ7Y/0ÿ]*ÿ*48131*2ÿ34ÿ8Y*ÿ/8:/0ÿ5/;15:5ÿ<*4/81,^ÿ<4*77:4*ÿ ÿXY*ÿ^/7ÿ]80*7ÿ7Y/0ÿ]*ÿ0/8*2ÿ:8712*ÿ3ÿ8Y*ÿ<48*8*2ÿ45ÿ/,2ÿ8Y*ÿ0/81,ÿ17ÿ8ÿ]*ÿ/4*3:0=ÿY7*,ÿZ18Yÿ 0/77131/81,6ÿ9,8*4,/0ÿ ÿ %8/8:76ÿ&1,/0ÿ#;<14=ÿ2/8*6ÿ ÿ ÿ ÿ!>ÿ3ÿ!?ÿ granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} 012345ÿ74814395ÿ28ÿ2783ÿ774147ÿÿ145ÿÿÿÿ ÿÿ )*+ÿ,ÿ'-ÿ ./012ÿ3456ÿ!"#$"%"&"''''(ÿÿ ÿÿ 9,ÿ42*4ÿ8ÿ*,/?0*ÿ<*47,,*0ÿ8ÿ*+/:/8*ÿ?*34*ÿ@/7ÿ217A/4@*Bÿ/<<4<41/8*ÿ5*/,7ÿ34ÿC/4,1,@ÿ3ÿ@/7ÿ4*0*/7*ÿ <414ÿ8ÿ4*0*/7*ÿ7A/0ÿ?*ÿ<4+12*2Bÿ1*ÿ0*/40=ÿ+17:/0ÿ/,2ÿ/:21?0*ÿ/0/457ÿ 78/8:7ÿ/,,:,1/81,ÿ,ÿ8A*ÿ:8712*ÿ/8ÿ8A*ÿ45ÿ*,841*7ÿ <*4/81,/0ÿ*311*,=ÿ3ÿ8A*ÿ7=78*5ÿ ÿD0ÿ457ÿ<48*8*2ÿ?=ÿ@/7*:7ÿ/@*,87ÿ7A/0ÿ?*ÿ3:4,17A*2ÿC18Aÿ0*/4ÿ/:21?0*ÿ/,2ÿ+17:/0ÿ5*/,7ÿ34ÿ7=78*5ÿ ÿEA*4*ÿ/<<4<41/8*Bÿ8A*ÿ7=78*5ÿ7A/0ÿ?*ÿ5,184*2ÿ8ÿ*,/?0*ÿ8A*ÿ2*8*81,ÿ3ÿ3/:087ÿCA1Aÿ5/=ÿ/3*8ÿ8A*ÿ 34ÿ/ÿ51,15:5ÿ<4*"2*8*451,*2ÿ815*ÿ<*412ÿ &/5ÿ7=78*5ÿ7A/0ÿ<4+12*ÿ/ÿU:1Vÿ/,2ÿ4*01/?0*ÿ7:<<0=ÿ3ÿ314*31@A81,@ÿ3/57ÿC18Aÿ8A*ÿ4*8ÿ3/5ÿ,*,84/81,ÿ ÿHIJKLÿNOPQÿRSRTKQÿ ÿF48*81,ÿ?=ÿ:7*ÿ3ÿGÿ4ÿ8A*4ÿ,;1:7ÿ/,2ÿ<17,:7ÿ@/7*7ÿ17ÿ,8ÿ/0C*2ÿ ÿDÿ31;*2ÿ7*03",8/1,*2ÿ3/5ÿ7=78*5ÿ7A/0ÿ?*ÿ:7*2ÿ34ÿ84/,7345*4ÿ/4*/7ÿWA*ÿ3/5ÿ7A/0ÿ?*ÿ*;</,71,ÿ8=<*ÿ ÿ&/5ÿ,*,84/8*ÿ7A/0ÿ?*ÿ3ÿ/ÿU:/018=ÿCA1AÿC18A78/,27ÿ34**X1,@ÿ,2181,7ÿ ÿWA*ÿ7*03",8/1,*2ÿ3/5ÿ7=78*5ÿ7A/0ÿ?*ÿ2*71@,*2ÿ8ÿ<*4/8*ÿ1,ÿ34**X1,@ÿ,2181,7ÿ ÿWA*ÿ2*71@,ÿ3ÿ3/5ÿ7=78*57ÿ7A/0ÿ?*ÿ?/7*2ÿ,ÿ4*@,1X*2ÿ1,8*4,/81,/0ÿ78/,2/42Bÿ*@ÿ&FDÿ--ÿ 3/5ÿ7:18/?0*ÿ8ÿ5/1,8/1,ÿ/ÿ<48*81+*ÿ3/5ÿ0/=*4ÿ ÿWA*ÿ3/5ÿ7=78*5ÿ7A/0ÿ?*ÿ4*0*/7*2ÿ:<,ÿ71@,/0ÿ345ÿ8A*ÿ1,784:5*,8*2ÿ314*ÿ/,2ÿ@/7ÿ2*8*81,ÿ7=78*5ÿ/7ÿC*0ÿ/7ÿ ?=ÿ5/,:/0ÿ4*0*/7*ÿ 456ÿ ÿWA*ÿ3/5ÿ7=78*5ÿ7A/0ÿ/7ÿ/ÿ51,15:5ÿA/+*ÿ8A*ÿ30C1,@ÿ5,1841,@ÿC18Aÿ71@,/0ÿ84/,73*4ÿ/,2ÿ/0/457ÿ8ÿ,840ÿ /0/45ÿ8ÿ)ÿ ÿ&/5ÿ4*0*/7*ÿ+/0+*7ÿ7A/0ÿ3/10ÿ1,ÿ0/78ÿ<7181,ÿ:<,ÿ077ÿ3ÿ71@,/0ÿ345ÿ&\]ÿ0@1ÿ7:<<01*2ÿC18Aÿ21/@,7817ÿ Zÿ.0:5*ÿC/8*4[3/5ÿ ZÿF4*77:4*ÿ<4<*0/,8ÿ ZÿD0/45ÿ:<,ÿ4*0*/7*2ÿ7=78*5ÿ 0/77131/81,6ÿ9,8*4,/0ÿ ÿ %8/8:76ÿ&1,/0ÿ#;<14=ÿ2/8*6ÿ ÿ ÿ ÿ!>ÿ3ÿ!>ÿ 0.00 0.00 0.00 0.00 0.49 0.08 0.08 0.77 0.10 0.08 0.50 0.34 0.08 0.19 0.53 0.52 0.18 0.55 0.73 0.08 0.35 0.77 0.06 0.14 0.73 0.71 0.36 0.19 0.49 0.46 0.28 0.42 0.44 0.54 0.85 0.20 0.14 1.00 0.24 0.10 0.09 0.07 0.04 0.06 0.06 0.06 0.05 0.00 0.09 0.09 0.08 0.05 0.04 0.01 0.02 0.07 0.03 0.12 0.08 0.10 0.03