TCVN vietnam standards

TCVN 6767-3 : 2000

Fixed offshore Platforms -

Part 3: Machinery and Process Systems

Hanoi - 2000
Vietnam standards tcvn 6767-3 : 2000

Fixed offshore platforms

Part 3: Machinery and Process Systems

1 Application

This Standard specifies requirements in design, construction and installation of machinery and process
systems on offshore installations.

Technical supervision required by this Standard is to be performed by Vietnam Register (hereinafter

referred as VR).

2 References

TCVN 6767 : 2000 Fixed Offshore Platforms - Electrical Installations

3 General

3.1.1 Apart from requirements of this Standard, design, construction and installation of machinery and
process systems on offshore installations are to comply with existing relevant Standards.

3.2 Plans and particulars

3.2.1 The following particulars are to be submitted:

Specifications of materials, machinery, pressure vessels, valves, fittings and pressure testing, types
of fuel used, thermal insulation and heat tracing.

Specifications of quality assurance and quality control procedures.

Specifications of all anti-pollution equipment.

Specifications of emergency power units and blackstart arrangements.

Specifications and drawings of the flare radiation levels on the platform at normal and maximum
output.

Drawings of equipment location and hazardous areas.

Drawings of drilling, production and utility items including wellhead completions, blow out
preventers,

Detailed design and construction drawings of machinery items such as oil engines, gas engines,
compressors and transmission systems, manlifting appliances and heavy lift equipment.

Drawings of boilers both gas and oil fired.

Drawings of pressure vessels.

Drawings of heat exchangers.

Manufacturers data for pressure relief devices.

Schematics of all process, drilling and utility piping systems, valve and fitting lists, stress, and
thickness calculations.

Schematics of all ventilation systems.

5
tcvn 6767-3 : 2000
Schematics of wellhead completions.

Schematics of sub-sea wells and equipment.

Drawings of diving systems when permanently arranged on the platform.

Schematics of depressurization and drainage systems.

Constructional details of free standing tanks above 1000 litre capacity.

3.2.2 It is recommended that a full hazardous and operability study be carried out on any proposed fixed
offshore installation.

3.3 Installation and commissioning

Installation of equipment is to be carried out under Special Survey. Commissioning trials are to be of
realistic working power and duration to ensure all items are in good working order and function as
intended. Commissioning trials are to include all drilling, production and powered machinery, their
associated systems, alarms and shutdowns. All rotating machinery is to meet the specified performance.
Tests at full rated capacity are to be witnessed for emergency shutdown and depressurizing systems.

4. Machinery

4.1 General

4.1.1 Machinery units are to be built under Special Survey from approved plans and:

(a) The scope of inspection to be carried out at the manufacturer's works by the Surveyors is to be
agreed before the work is commenced.

(b) Where an approved Quality Assurance Scheme is in operation the extent of the inspection is to
be agreed before the work is commenced

4.1.2 The units are to be suitable for their intended purpose and to comply with the Vietnamese
Standards or a recognized Code of Construction. Where appropriate the torsional vibration characteristics
of a machinery system are to be approved when the power output is greater than 110 kW.

4.1.3 Material used in the construction of the machinery units is to be manufactured and tested to a
Vietnamese Standard or an acceptable Code.

4.2 Fire and safety arrangements

4.21 Oil engines, unless protected in accordance with 7.6, or any other equipment which would
constitute a possible source of ignition are not to be situated in hazardous areas.

4.2.2 Where the temperature of an operating medium raises the external surface of any item above
o
200 C the surface is to be insulated. The insulating material is to be impervious to both oil and water
absorption.

4.2.3 For items of machinery where vibration and mechanical damage may reduce the characteristics of
the insulating material, other means of ensuring that the temperature limit of 200oC is not exceeded are to
be used. Details of the insulating material and design of lay up are to be submitted.

4.2.4 For oil engines situated in hazardous areas, see 7.6.

4.2.5 Any machinery item located in a safe area that can have a surface temperature exceeding 200oC,

6
 tcvn 6767-3 : 2000
where personnel contact is possible under normal operating conditions, is to be insulated for personnel
protection.

4.2.6 Oil fuel used to power machinery is to have a closed cup flash point of 60oC and above. In certain
geographical areas fuels with flash points of less than 60oC may be used provided the temperatures of the
spaces where they are used or stored will always be 10oC below the flash point of the fuel or an approved
fire protection and extinction measure.

4.2.7 Specification of fuels used for helicopters is to comply with National Authority Regulations or a
recognized code.

4.2.8 Where machinery units are fuelled by gas the enclosed spaces surrounding the machinery unit are
to be specially ventilated in accordance with Section 8.

4.2.9 Pressurized fuel gas pipes which pass through safe areas are to be a minimum of 5,5 mm thick and
arranged with a minimum number of flanges.

4.2.10 Fuel tanks are not to be situated above machinery items where any spillage of fuel could be
ignited. Where fuel lines pass above machinery items they are to be well protected against mechanical
damage and heat radiation.

4.2.11 Combustion air intakes and exhausts should be led from and to safe areas unless the machinery has
been specially adapted for operation in Zone II hazardous areas..

4.2.12 Where necessary the machinery is to be protected against the effects of failure or malfunction of
the manual or remote control systems. Safe means of access for monitoring and overhauling the machinery
are to be provided.

4.2.13 Oil or gas burning units such as boilers or fired heaters are to be fitted with independent detecting
systems which will operate audible and visual alarms and automatically shut off the fuel supply in the event
of the following as applicable:

- Low liquid level.

- Flame failure.

- Low fluid flow.

4.2.14 All machinery items associated with the drilling and process systems, oil storage tanks and areas
where oil spillages may occur are to be provided with bunds or oil coamings to contain the spread of oil.

4.3 Crankcase safety fittings

4.3.1 In engines and compressors having cylinders exceeding 200 mm bore crankcase relief valves are to
be fitted in accordance with Vietnamese Standards or an acceptable code.

4.3.2 In engines and compressors having cylinders not exceeding 200 mm bore and having a crankcase
gross volume not exceeding 0,6 m3 crankcase relief valves may be omitted.

4.3.3 Vent pipes from engine crankcases are to be led to the open air at a safe location. The pipe
diameter is to be made as small as practicable to reduce the ingress of air in the event of a crankcase
explosion.

4.4 Starting arrangements

7
tcvn 6767-3 : 2000
4.4.1 On manned platforms the emergency generator is to be capable of being readily started in the cold
condition down to a temperature of O0C or the lowest specified 2.8 Trials ambient temperature for which
the installation is approved. Heating arrangements are to be provided to protect the unit against low
temperatures and to ensure ready starting.

4.4.2 Each emergency generator that is arranged to be started automatically is to be equipped with
approved starting devices with a storage energy capability of at least three consecutive starts. A second
source of energy is to be provided for an additional three starts within 30 minutes unless hand (manual)
starting can be demonstrated to be effective.

4.5 Governors

4.5.1 All reciprocating and turbine powered units are to be provided with efficient governors.

4.5.2 For diesel driven electric power generators which have fixed setting governors, the governors are to
control the speed within 5 per cent permanent variation and 10 per cent momentary variation.

4.5.3 For units operating in parallel the permanent speed variation between machinery is to be equal
within a tolerance of 0,5 per cent. The characteristic details of fixed setting governors on turbo-powered
engines are to be submitted.

4.5.4 For generators of 220 kW and above an independent overspeed protective device is to be fitted.

4.6 Filters

4.6.1 Where a filter could become choked and cause disruption to an essential service, the filter is to be
duplicated so that a clean filter can quickly be put into service. The filter must be capable of being cleaned
or replaced without disrupting the essential service. Alternatively proposals to fit automatic by - passes will
be subject to special consideration.

4.7 Noise and vibration

4.7.1 Noise and vibration levels are to comply with Vietnamese Standards or other recognized Codes and
in general:

(a) Sound pressure levels should not exceed 135 dB (linear).

(b) For general working areas a noise level limit of 88 dBA for a 12-hour period should not be
exceeded.

(c) For accommodation working areas a noise limit of 60 dBA should not be exceeded and sleeping
quarters should be 45 dBA or less.

4.7.2 Where noise levels exceed the limit, warning notices are to be posted at the entrances.

4.8 Trials

4.8.1 All machinery-commissioning trials are to demonstrate that the safety devices and associated
alarms function correctly.

4.8.2 The manufacturer is to ensure that the specified machinery ratings will be obtained on the
installation, taking into account the geographical position and the variations in the annual ambient
conditions.

4.9 Plant heating arrangements

8
 tcvn 6767-3 : 2000
4.9.1 For platforms in cold climates or where low temperatures may be expected heat tracing or other
means of maintaining the equipment and process plant in operation is to be provided.

4.9.2 In vessels where flammable fluids are heated, independent controls are to be fitted to the heating
elements so that when the temperature of the fluid rises above a predetermined level, the independent
controller will cut out. The controller must only be capable of being reset manually.

4.9.3 Where the fluid is to be heated above 200'C full details are to be submitted.

4.9.4 Where electrical trace heating elements are provided and fitted with automatic temperature control
an additional independent sensor with manual reset capable of cutting off the heating supply is to be fitted,
see 4.2.12.

4.9.5 Where the elements are self-regulating and are limited to temperatures below 2000C the
independent sensor may be omitted.

5. Pressure vessels and pressure systems

5.1 General

5.1.1 The design and construction of pressure vessels, steam generators, hot water boilers, hydraulic and
pneumatic pressure vessels are to comply with the Vietnamese standards or an acceptable International
Standard or Code.

5.1.2 The design of a pressure vessel is required to be submitted for approval where the system gauge
pressure, in multiplied by the internal volume, in litres exceeds 200.

5.1.3 It should be noted that a fluid is a substance consisting of particles that move freely among
themselves and yield to slight pressure changes. A fluid may be a liquid, vapour or gas or combination of all
of them.

5.1.4 Vessels operating at less than an absolute pressure of 1 kg/cm2 are also to be submitted for
approval.

5.1.5 The pressure vessel design and materials of construction are to be suitable for the environmental
conditions and for any low temperatures encountered either in the geographical areas in which the
installation is placed or as a result of any foreseeable operating condition such as installation
depressurization.

5.2 Design pressure

5.2.1 The design pressure is to be not less than:

(a) The pressure which will exist in the vessel or system when the pressure relieving device starts to
relieve or the set pressure of the pressure relieving device, whichever is the higher.

(b) The maximum pressure which can be attained in service where this pressure is not limited by a
relieving device.

5.2.2 Where pressure parts are of such irregular shape that it is impracticable to design their scantlings
by application of recognized formulae, the acceptability of their construction is to be determined by
hydraulic proof testing and strain gauging or by an agreed alternative method.

5.3 Protective and pressure relief devices

9
tcvn 6767-3 : 2000
5.3.1 Pressure vessels are to be provided with protective devices so that they remain safe under all
foreseeable conditions.

5.3.2 Where pumps or pressure surges are capable of developing pressures exceeding the design
conditions of the system effective means of protection such as pressure relief devices or equivalent are to be
provided.

5.3.3 Pressure relief valves are to be sized such that any accumulation of pressure from any source will
not exceed 110 per cent of the design pressure. For specific fire contingencies where accumulated pressure
could exceed 110 per cent, design proposals will be specially considered.

5.3.4 Bursting discs fitted in place of or in series with safety valves are to be rated to burst at a maximum
pressure not exceeding the design pressure of the vessel at the operating temperature.

5.3.5 Where a bursting disc is fitted downstream of a safety valve, the maximum bursting pressure is
also to be compatible with the pressure rating of the discharge system.

5.3.6 In the case of bursting discs fitted in parallel with relief valves to protect a vessel against rapid
increase of pressure the bursting disc is to be rated to burst at a maximum pressure not exceeding 1,3 times
the design pressure of the vessel at the operating temperature.

5.3.7 Pressure relief devices are to be type tested to establish their discharge capabilities at their
maximum rated design pressures and temperatures in accordance with Vietnamese standards or an approved
code.

5.3.8 Where pressure relief devices can be isolated from the pressure vessel whilst in service there is to
be an alternative independent pressure relief device. The system pressure relief valve set pressure and
bursting disc rupture pressure should be displayed at the respective operating position.

5.3.9 Any isolating valves used in conjunction with pressure relief devices are to be of the full flow type
capable of being locked in the full open position. Where isolating valves are arranged downstream and
upstream of a relief device they are to be interlocked one with another.

5.3.10 Where pressure relief devices are duplicated on the same vessel or system and fitted with isolating
valves they are to be so interlocked as to ensure that before one relief device is isolated the other relief
device is fully open and the required discharge capacity is maintained. The interlocking system is to be
submitted for approval.

5.3.11 The design of the pressure relieving system is to take into account the characteristics of the fluid
handled and any extreme environmental condition recorded for the geographical zone of operation. The vent
and pressure relieving systems are to be self-draining.

5.3.12 The rated discharge capacity of any pressure relief device is to take into account the back pressure
in the vent systems. Where hazardous vapours are discharged directly to the atmosphere the outlets are to be
arranged to vent to a safe location.

5.4 Portable gas cylinders

5.4.1 Portable gas cylinders and other vessels used to transport liquids or gases under pressure are to
comply with an acceptable National or International Standard or Code of Practice.

5.5 Hydraulic test

10
 tcvn 6767-3 : 2000
5.5.1 Every pressure vessel and system is to be hydraulically tested before taken into service.

5.5.2 The hydraulic test may be carried out before erection provided leak tests or other acceptable means
of testing are witnessed upon completion of erection.

5.5.3 Hydraulic tests are to be in accordance with the requirements specified in a Vietnamese standard or
a recognized National Code.

6. Fluid transfer systems

6.1 General

6.1.1 The requirements of this Section apply to the design and construction of piping systems and fittings
forming part of such systems. They are to be in accordance with the Vietnamese standards or a recognized
International Standard or Code of Practice and in general Single Failure Criteria will be used for fault
analyses during the design of the installation.

6.1.2 Methods of fabrication are to take into account any special properties of the material. The design of
the equipment and system is also to take into account the geographical position, temperature ranges and
environmental loads which may occur in operation.

6.1.3 Surge pressures and local temperature variations from systems which have become unstable are to
be considered in the overall design of the systems. Where high local corrosion and erosion is anticipated in
the piping system provision is to be made for thickness monitoring and change out of spool pieces.

6.1.4 Instrumentation gauges are to be capable of being isolated, tested or renewed without recourse to
system shut down.

6.1.5 Every pressure system is to be capable of withstanding the maximum operating pressure. Relief
valves, or other approved means are to be provided for pipe systems downstream of pressure reducing
valves where the pipes are not capable of withstanding the upstream pressure.

6.2 Fire and safety arrangements

4.2.1 Valves and fittings which rely upon elastomeric sealing materials in systems carrying flammable
fluids are to be suitably fire tested to a Vietnamese Standard or an approved Standard or Code.

6.2.2 Fluid transfer systems are to conform throughout to similar standards in design and construction.
All parts of the system are to have similar fire-resistant qualities. Piping systems which are incompatible
from a safety aspect are to be kept entirely separate and distinct.

6.2.3 High-pressure pumps handling flammable substances are to be fitted with double seals in way of
the shafting. Each seal is to be capable of taking the full line pressure. Alternatively where a vent or drain is
provided between the two seals, a lower pressure rating for the outer seal could be accepted.

6.2.4 Drainage is to be provided for all open and enclosed spaces. Safe and hazardous area drainage
systems are to be entirely separate and distinct. Drains from the helicopter deck are to be led directly
overboard

6.2.5 Storage and service tanks for hazardous and hydrocarbon liquids are to be provided with their outlet
valves so arranged that under fire conditions the valves can be closed quickly and easily.

6.2.6 Where the tanks and valves are inside enclosures the valve closing mechanism is to extend outside
the enclosure.

11
tcvn 6767-3 : 2000
6.2.7 Level gauge glasses used in fired and unfired pressure vessels are to be of reflex type and of
fire-resistant glass with means of isolation. Means are to be provided to prevent the discharge of the system
contents in the event of gauge glass failure.

6.2.8 Level gauge glasses used on storage tanks over 1 m3 capacity for flammable or hazardous fluids
are to be of fire resistant glass with means of isolation in the event of gauge glass failure.

6.2.9 All gauge glasses are to be adequately protected against mechanical damage.

6.2.10 A flammable substance is a gas, vapour, liquid, dust or solid that can react continuously with the
oxygen in the atmosphere when ignited by a spark, flame or hot surface and will sustain a fire or cause an
explosion.

6.2.11 A hazardous substance is that which is toxic, acidic, alkaline, or corrosive to persons or substances.

6.2.12 A flame arrester is a device that will prevent the passage of flame in accordance with a specified
performance standard. Its flame arresting properties are based on the principle of quenching.

6.2.13 A flame screen is a device utilizing wire mesh to prevent the passage of unconfined flames in
accordance with a specified performance standard.

6.3 Non-ferrous piping systems

6.3.1 Where it is proposed to use material sensitive to heat, such as aluminium, lead or plastics for piping
systems the details of the design and construction of the pipes together with the results of fire tests are to be
submitted.

6.3.2 Non-metallic materials, except for hoses as shown in Table 1, are not to be used in systems
designed for hydrocarbon or flammable fluids. The details of the pipe support arrangements and provision
for expansion and contraction are to be submitted.

6.3.3 Insulation fitted on non-metallic piping systems is not to be considered when assessing the piping
fire retardant properties.

6.4 Flexible hoses

6.4.1 Where flexible hoses are used the following requirements are to be complied with:

(a) A sample of hose with the service end connectors attached is to be tested in accordance with an
Vietnamese standards or acceptable International Standard or Code of Practice, The tests are also
to include the relevant requirements in Table 1

(b) Kill, choke and jumper hoses are to be capable of maintaining the design working pressure for a
minimum period of 30 minutes whilst subjected to a minimum external temperature of 700'C.

(c) Hydraulic control hoses serving well completion units and blow out preventers are to be capable
of maintaining the design working pressure for a minimum period of 5 minutes whilst subjected
to a minimum external temperature of 7000C.

(d) A test of a prototype hose specimen, including an end fitting, is to be performed to ensure that the
hose meets the relevant fire integrity requirements.

12
 tcvn 6767-3 : 2000
Table 1 Flexible hose requirements

Duty Product Rating Code Burst pressure

Rig loading Toxic, acidic, alkaline, corrosive and - 4 xPlv

flammable fluids, compressed air and gases Acceptable

Water, dry powders and other safe products - Standard or 3 x Plv

Code

Drilling Kill and choke Fire Acceptable 2,5 x Plv

Standard or (see note)
Code
Hydraulic drive, low pressure mud - 4 x Plv

Wash down and drainage As agreed

Production Jumper Fire Acceptable 2,5 x Plv

Standard or (see note)
Code

Sub-sea hydraulic drive and control - 4 x Plv

Power and Oil, water, chemicals, compressed air and - Acceptable 4 x Plv
utility gases, hydraulic fluids Standard or
Code

Note: For working pressure Plv 70MPa the burst pressure ratio is to be agreed.

6.5 Tanks

6.5.1 All tanks are to be suitably vented to safe locations. Tanks containing hazardous or flammable
substances are to be vented to locations such that issuing substances cannot come into contact with hot
surfaces or electrical equipment. Vents from tanks containing flammable substances are to b& provided
with flame screens or flame arresters, see 6.2.13.

6.5.2 All tanks are to be provided with vents or overflow pipes. The size and arrangement of the vent or
overflow pipe is to be so designed that the tank cannot be subjected to overpressure whilst being filled to
overflowing. The cross-sectional area of the vent or overflow pipe is to be not less than 1,25 times the cross-
sectional area of the filling pipe. The vent pipe internal diameter is to be not less than 40 mm.

6.5.3 Free standing storage tanks of more than 1 m' capacity containing hazardous or flammable
substances are to be designed and tested in accordance with a recognized standard. For guidance the panel
height, h, should not exceed twice the panel breadth, b, i.e.h 2b.

6.5.4 Overflow piping from oil storage and service tanks of more than 1m3 capacity is to be led directly
to a designated tank or caisson.

6.5.5 Helicopter fuel tanks are to be sited in the open and protected from high levels of solar and flare
radiation. Bunds are to be fitted and have a capacity equal to 110 per cent of the volume of the largest tank

13
tcvn 6767-3 : 2000
located within the bund. The fuel tank outlet is to have a stop valve. Where a flexible hose is used to join
the fuel system to the tank, the hose connection is to be of the quick self-closing type.

6.6 Compressed air

6.6.1 Discharge pipes from air compressors are to be led direct to the air receivers and provision is to be
made to remove the entrained oil and water from the air.

6.6.2 Instrument control air is to be dehumidified and filtered.

6.6.3 Where an air receiver supplies air to systems required to control, operate and protect the
installation under normal and emergency conditions, both the pressure and quantity of air is to be capable of
being maintained for these services.

6.6.4 Where general service plant air is supplied from the same source as the control, operation and
emergency air then means are to be provided to automatically isolate the general service plant air in the
event of low air pressure in the supply receiver.

6.6.5 Stop valves on compressed gas or air receiver outlets are to be of the slow opening type so that
shock loads are not transmitted into the piping systems when the valves are opened.

4.6.6 Fluid systems are to be protected by suitable non – return devices so that unintentional reverse flow
cannot occur. Where compressed air or steam is used to atomize a fluid, the pipe systems are to be protected
against reverse flow from any of the fluids such as in boiler oil burning systems and well bore fluid burning
systems.

4.6.7 Turbo-compressors are to be provided with automatic surge control devices.

7. Drilling and process systems

7.1 General

7.1.1 The drilling equipment and process systems are to be designed and manufactured in accordance
with a Vietnamese standard or acceptable International Standard or Code.

7.1.2 When drilling and process equipment is to be manufactured under Special Survey, it is to be
constructed in accordance with the Rules and Approved Plans. The scope of the survey to be carried out at
the manufacturer's works is to be agreed by VR before the work is commenced. Where an approved Quality
Assurance Scheme is in operation, this will be reflected in the extent of the survey required.

7.1.3 Material used in sour crude piping systems is to conform to the Vietnamese standards or
Recognized Code.

7.2 Drilling systems

7.2.1 Diverter vent lines are to be arranged to discharge through straight steel pipes whenever possible.
The open ends of the discharge pipes are to be led to safe locations. Where bends cannot be avoided, the
diverter lines are to be firmly anchored. The design of the bends will be the subject of special consideration.

7.2.2 Any valves in the diverter vent lines are to be of the full opening type and open automatically when
the diverter is closed.

7.2.3 The well-head lines are to be arranged so that pumping through the kill and choke lines can be
carried out whilst simultaneously flowing back through the wellhead choke valves.

14
 tcvn 6767-3 : 2000
7.2.4 Well completion units are to be fitted with a permanent kill connection to the high-pressure mud
system.

7.2.5 All flexible hoses used during the drilling operations are to be of an approved type. Transfer, mud,
hydraulic and pneumatic hoses liable to heavy external wear are to be specially protected.

7.2.6 Where oil is added to the drilling mud system, provision is to be made to limit the spread of oil on
the installation and to prevent the discharge of oily residues into the sea. De - oilers and oil monitoring
equipment are to be provided.

7.2.7 To prevent oil pollution of the surrounding areas from any system where oil may be present
de-oilers and suitably alarmed oil monitoring equipment are to be provided in the discharges

7.2.8 Ventilation in the area of the mud tanks is to be specially considered to Ensure proper dilution of
any dangerous gases.

7.2.9 Where oil is used in the mud system the tanks are to be provided with special ventilating
arrangements. For open systems the maximum oil density in the air above the tanks is not to exceed 5
mg/m3

7.2.10 Where sour oil or gas is found at least 5 self-contained sets of compressed air breathing
apparatuses are to be provided at the drill floor and in addition to those required elsewhere in the Rules for
fire-fighting purposes The compressed air is to be of breathable quality complying with an Vietnamese
standard or recognized Standard.

7.2.11 Where drilling and related operations are carried out below the conductor casing a blow out
preventer and diverter system is to be installed.

7.2.12 The blow out preventer is to be capable of being activated from the drill floor and at least one other
location remote from the well

7.2.13 Materials used in castings, forgings and fabricated items for well-head equipment-such as blow out
preventers, well-head completion units, pipes and headers subject to full field pressure are to have suitable
Charpy V-notch impact properties. Charpy impact tests are to be carried out at the specified minimum
design temperature on which the design of the installation is based or lower as specified. See also other
Parts of the Rules.

7.3 Man lifting and personnel transfer equipment

7.3.1 Man lifting and personnel transfer machinery is to comply with the following requirements:

(a) The means of stopping or braking the machinery is to be duplicated.

(b) One brake is to be manually operated, and the second brake is to be automatic in operation.

(c) Speed control or braking systems are to be progressive in operation.

(d) Operating safety factors for machinery items based on safe working load, are to comply with the
Vietnamese standards or Recognized Code.

(e) Inspection and testing is to comply with a Vietnamese standard or an acceptable Rule for Lifting
Appliances in a Marine Environment.

7.4 Process systems

15
tcvn 6767-3 : 2000
7.4.1 The process system is to be located in its own designated area and is to be separate from any
accommodation and utility area.

7.4.2 The process system is to be protected against fire, mechanical damage, erosion and corrosion.
Corrosion coupons or test spool pieces are to he. designed into the various systems. The spool pieces are to
be fitted in such a manner as to be easily removed or renewed.

7.4.3 Process control rooms are to have two means of access. One means of access is to be from outside
the process area.

7.4.4 Unless otherwise approved the discharge from pressure relief devices and low-pressure vents are to
be led to a closed venting system.

7.4.5 Open and closed hazardous drain systems are to be entirely separate and distinct from open and
closed safe drain systems.

7.4.6 Process system, flammable and hazardous chemical drains which may be pressurized in normal
service are to be led to a closed drain system.

7.4.7 Ventilation of the process area is to comply with the requirements of Section 8.

7.4.8 When the products of the process system are exported into the sub-sea pipe line, the installation
export line and sub-sea pipe line are to be capable of being isolated from each other by at least two valves.

7.4.9 Audible and visual alarms are to be provided for main oil line pumps in the event of:

(a) Low flow.

(b) High temperature.

(c) High pressure.

7.4.10 Gas compressors are to be protected as in 7.4.9 and include protection for:

(a) Low suction pressure.

(b) Surge pressures.

7.4.11 Gas compressors and export pumps are to be provided with protective controls and pressure sensors
that are duplicated such that single instrument failure or routine testing in service will not require an
installation shut down.

7.4.12 Pressure vessel wash out connections are to be fitted with non-return valves in addition to the
normal shut-off valves.

7.4.13 Where the process system depends upon the utility services for its operation such as:

(a) Instrument control air,

(b) Salt water cooling,

(c) Fresh water cooling or

(d) Hydraulic or pneumatic power,

An alternative source of supply is to be provided if single failure in the utility supply system could cause an
unacceptable operating condition to arise.

7.4.14 Filters used in water or gas injection systems are to be duplicated to permit the filters to be cleaned

16
 tcvn 6767-3 : 2000
without interrupting the pumping system if the loss of the injection system could cause an unacceptable
operating condition to arise.

7.4.15 Where gas or water is reinjected into the reservoir the arrangements and protective devices on the
machinery and pumping systems are to be similar to the production well arrangements.

7.5 Flaring, depressurizing and heat radiation

7.5.1 All installations where hydrocarbon liquids or gases are processed are to be capable of being
depressurized.

7.5.2 Where flare systems are installed the design is to ensure a clean continuous flame. Make-up gas is
to be injected into the vent system in an even and controlled manner to maintain steady flaring conditions.

7.5.3 The flare gases are to be capable of being ignited and extinguished by the operators from a remote
position.

7.5.4 The flare system is to be capable of controlling excess gas pressures caused when emergency
depressurization takes place under conditions of fire on the installation.

7.5.5 The process venting system is to be led to a liquid separator before entering the vent or flare stack.
Any entrained liquids are to be removed in the separator or knock-out drum for separate disposal.

7.5.6 Where temperatures below minus 29oC may be expected in the vent lines during depressurization
the material of the valves and pipe lines is to be specially considered and to have Charpy V impact values of
27 Joules at the lowest operational design temperature.

7.5.7 Under emergency depressurization conditions, the pressure in the pressure vessels and pipelines is
to be reduced from the initial condition to half the maximum allowable working pressure. Other
depressurization rates may be specially considered depending on the design parameters involved.

7.5.8 For normal operating conditions the levels of thermal radiation at manned or operational positions
is not to exceed 1,9 kW/m2 in calm conditions. Higher levels of thermal radiation may be accepted in
temperate climates after field tests have been carried out and the results submitted for consideration.

7.5.9 Solar radiation which may affect the levels of exposure is to be taken into account in the design of
the platform. Under emergency flaring conditions the thermal radiation level at the muster stations is not to
exceed 4,7 kW.

7.5.10 Consideration is to be given to the effects of flame radiation levels upon items of machinery and
equipment in exposed locations. Items to be considered should include:

(a) Structural members of the flare boom.

(b) Handrails.

(c) Tanks containing combustible and volatile fluids.

(d) Gas cylinders.

(e) Helidecks and parked helicopters.

(f) Lighting equipment.

(g) Communications equipment.

(h) Cable trays.

17
tcvn 6767-3 : 2000
(j) Life saving equipment.

(k) Cranes, hoist lines and pulleys.

7.5.11 Thermal radiation readings from selected positions together with surface temperature readings of
exposed machinery items are also to be recorded and submitted for approval.

7.5.12 Where cold venting is provided the arrangements are to minimize:

(a) Accumulation of toxic and flammable fumes.

(b) Ignition from outside sources.

(c) Flash-back upon ignition of the vent gases.

7.5.13 In the event of the cold vent gases becoming ignited the flame should be capable of being
extinguished from the platform by a suitable inert gas.

7.6 Protected oil engines for hazardous areas

7.6.1 Oil engines which are required to operate in Zone II hazardous areas on offshore installations are to
comply with the requirements of 7.6.2 to 7.6.23, where the Vietnamese standards which differ from these
requirements, it may also be accepted provided an equivalent standard of protection is achieved.

7.6.2 The air induction system is to be provided with a shut-off valve located between the engine air inlet
filter and the flame arrester. The valve is to be capable of being closed manually. The valve is also to be
capable of being automatically closed by the engine overspeed device and it is recommended that the
induction air valve and engine fuel supply should automatically close by a signal from a local gas sensor.

7.6.3 An approved corrosion resistant flame arrester constructed and tested to the Vietnamese standards
or a recognized standard is to be provided in the induction system. The flame arrester is to be as close to the
engine as possible with good access for inspection and overhaul.

7.6.4 Joints used in the induction and exhaust systems are to be either open joints or closed joints
constructed in accordance with Fig. 1
Flamepath gap (mm)

0,4
Non permitted dimensions
0,3
0,2
Permitted dimensions
0,1

0 0 10 20 30 40 50

Flamepath length (mm)

Fig.1. Relationship between length and gap for flamepaths

7.6.5 An open joint will allow the free passage of gas but will not allow the passage of flame. A flame
arrester is a particular type of open joint considered separately by testing.

7.6.6 A closed joint will not allow the passage of either gas or flame under normal or test conditions. The

18
 tcvn 6767-3 : 2000
minimum joint width is to be not less than 9 mm in accordance with Fig. 1.

7.6.7 An approved corrosion resistant flame arrester is to be provided in the exhaust system. The flame
arrester is to be constructed and tested to the Vietnamese standards or a recognized standard. The flame
arrester is to be fitted as close to the engine as possible with good access for inspection and replacement.
The flame arrester can be omitted if the exhaust terminates in a safe area.

7.6.8 A spark arrester is to be fitted in the exhaust system downstream of the flame arrester. The spark
arrester is to be constructed and tested to a recognized standard.

7.6.9 It is recommended that a back pressure indicator is fitted to the exhaust manifold to provide prior
warning of exhaust flame arrester fouling.

7.6.10 The engine crankcase breather pipe is to be fitted with a flame arrester. For engines in enclosed
Zone II areas the breather pipe is to be led to the open atmosphere, The breather pipe is not to be led to the
engine induction system.

7.6.11 The engine crankcase is to operate at a small positive pressure.

7.6.12 With the engine at full power and temperature stabilized no surface temperature on the engine or
exhaust system is to exceed 200oC.

7.6.13 Ventilation fan blades and belts are to be of the anti-static type. The combination of materials for
fan impellers and the housings are to be non-sparking under both normal and fault conditions.

7.6.14 Engine starting systems are not to introduce a source of ignition external to the engine. The system
is to have appropriate safe type certification, or to be capable of being demonstrated as being of a safe type
by appropriate testing.

7.6.15 The engine is not to be capable of running in reverse.

7.6.16 Fuel supply is to be capable of being shut off manually and automatically in the event of:

(a) Overspeeding.

(b) High exhaust temperature, see 7.6.17.

(c) High cooling water temperature.

(d) Low lubricating oil pressure.

7.6.17 The high exhaust temperature sensor is to be located upstream of the exhaust flame arrester. The
high exhaust temperature sensor and engine shut-down on high exhaust temperature can be omitted if the
exhaust pipe terminates in a safe area.

7.6.18 Basic operating instructions should be permanently attached to the unit giving details of stop, start
and emergency procedures.

7.6.19 Where an engine is fitted inside any enclosure the following requirements are to be complied with
as applicable:

(a) Where an engine is located inside an enclosed Zone II hazardous area, the space is to be
independently ventilated at a recommended minimum rate of 20 air changes per hour whilst the
engine is running and 12 air changes per hour when stopped.

(b) Where an engine is located inside an enclosed acoustic hood on the 'Open Deck', the hood is to

19
tcvn 6767-3 : 2000
be ventilated at a recommended minimum rate of 12 air changes per hour before start up.

7.6.20 A hydraulic proof test at a gauge pressure of 0,5 MPa or 1,5 times the explosion pressure in
accordance with 7.6.21 is to be witnessed on the induction and exhaust systems without showing signs of
leakage.

7.6.21 For engines of 370 kW and above the induction and exhaust systems are to be explosion tested to
the Vietnamese standards or a recognized standard without showing signs of damage or flame transmission
to the atmosphere. The maximum explosion pressure is to be recorded and used in the hydraulic proof test
in 7.6.20.

7.6.22 Complete engine units and driven components are to be examined and tested at the manufacturer's
works or other suitable works before being put into service. Thereafter, the complete unit is to be examined
annually and the original certificate endorsed or as otherwise agreed to ensure a permanent written record
of survey. It is recommended that time clocks of the non-resetting type be fitted to the engine.

7.6.23 Where an engine manufacturer carries out satisfactory type tests on an engine or series of engines
and subsequently provides conversion kits for similar engines, proof tests can be waived. However, each
converted engine is to be shop tested in accordance with 7.6.22.

8. Heating, ventilation and air conditioning (HVAC)

8.1 Design aspects

8.1.1 In designing HVAC services consideration should be given to the following aspects:

(a) Installation orientation and prevailing wind.

(b) Hazardous area classification and segregation of hazardous areas,

(c) Fire and gas detection and protection systems.

(d) Integrity of fire divisions.

(e) Design criteria regarding external and internal, temperatures, humidities, static pressures, and noise
levels.

(f) Location of HVAC inlets, outlets and air change rates.

(g) Dilution of removal of flammable or toxic fumes.

(h) Removal of excess heat.

(i) Air locks.

(j) Safety philosophy regarding the following: partial shut down, total shut down and initial or black
start arrangements.

8.2 General

8.2.1 All enclosed accommodation, plant, drilling and process spaces are to be power ventilated.

8.2.2 Where enclosed spaces are surrounded by or are adjacent to hazardous areas the power ventilated
system is to have automatic standby capabilities.

8.2.3 Safe area and hazardous area ventilation is to be entirely separate. The ventilation fan inlets and
exhausts are to be arranged so that cross contamination by the effects of the fans, winds or adjacent
building or structures, cannot take place.

20
 tcvn 6767-3 : 2000
8.2.4 The rate of air change is to be in accordance with the Vietnamese standards or Recognized Code
for the stated areas is to be in accordance with Table 2.

Table 2 Rate of air change

Spaces Air changes per hour

Enclosed spaces

Hazardous drilling and process 20 Minimum

Safe drilling and process 12-20

Power generation 12-20

Emergency machinery 8-12

Utility machinery 8-12

Open spaces 6 Minimum

Semi-enclosed with windwalls or similar 8-12

Notes:

1. An enclosed space is:

(a) Any space that cannot achieve an adequate rate of ventilation without mechanical
means.

(b) Any space that is open on one side only.

(c) Any totally enclosed space.

2. A semi-enclosed space is:

(a) A space that is open on two opposing sides.

(b) A space that is fitted with windwalls or other wind and weather obstructions on
two opposing sides.

3. An open space is a space that is open on two opposing sides plus at least one other
surface which can be either a bulk-head, deck or deckhead.

8.2.5 All enclosed ventilated spaces are to have the air change rate verified by instrument recordings.
The recordings are to be made with the installation in the normal functional condition.

8.2.6 Where the drilling, process, utility and power services are arranged in the open and rely on natural
ventilation, the ventilation rate is to be recorded by meter readings taken under calm weather conditions.

8.2.7 The air changes are to be verified with the wind coming from different directions of the compass.
The results are to be submitted for approval.

8.2.8 For machinery items operating in their own particular enclosure or acoustic hood the details are to
be submitted.

8.2.9 Emergency machinery and electrical equipment spaces are to be independently ventilated at the

21
tcvn 6767-3 : 2000
specified rate.

8.2.10 Ventilation fan blades and their enclosures are to be fitted with a brass rubbing strip on the fan
housing or are to be arranged to be non-sparking under both normal and fault conditions.

8.3 Safe areas

8.3.1 Enclosed safe areas are to be pressurized and maintained at a higher pressure than any surrounding
or adjacent hazardous area.

8.3.2 Ventilation inlet ducts to safe areas are to be provided with gas detectors and all inlets are to have
protection against snow or water ingress.

8.3.3 Where the exhausts from the drilling and production safe areas are led to Zone II hazardous areas,
the outlets are to be provided with self closing shutters and gas detectors in the exhaust stream.

8.3.4 Accommodation and utility safe area space exhausts are to be led to safe areas.

8.3.5 When the ventilation system is stopped or has failed, the start-up procedures to be carried out to
ensure the spaces are safe to resume operations are to be indicated in the Operations Manual.

8.4 Hazardous areas

8.4.1 Enclosed hazardous areas are to be maintained at a lower pressure than the surrounding area. A
pressure differential of 5 mm H2O between adjacent areas is considered sufficient.

8.4-2 A differential pressure gauge is to be provided to monitor any loss of differential pressure and in
the event of loss of pressure to activate audible and visual alarms in the central control station.

8.4.3 For drilling and process areas where pockets or stratification of gas may take place additional
means of circulating the air should be considered.

9. Control Engineering Systems

9.1 General

9.1.1 These requirements apply to manned offshore installations. Special consideration will be given to
unmanned offshore installations which are controlled from the shore or from another offshore installation.

9.1.2 In addition to these requirements attention should also be given to any relevant statutory
requirements of other Standards.

9.2 Plans

9.2.1 Plans required by 9.2.2 to 9.2.6 are to be submitted in triplicate.

9.2.2 Where control, alarm and safety systems are intended for machinery or equipment as defined in
9.2.3, the following is to be submitted:

(a) Description of operation with explanatory diagrams.

(b) Line diagram of control circuits.

(c) Test schedules which should include methods of testing and test facilities provided.

9.2.3 Plans for the control, alarm and safety systems of the following are to be submitted:

(a) Utility equipment:

Air compressors.

22
 tcvn 6767-3 : 2000
Electric generating plant.

Evaporating and distilling systems.

Fuel gas processing equipment.

General service plant air and control and instrument air systems.

Heating Ventilation and Air Conditioning (HVAC) systems.

Lifting appliances.

Mechanical refrigeration systems.

Oil fuel transfer and storage (purifiers and oil heaters).

Oily water separators.

Steam raising plant (boilers and their ancillary equipment).

Tempered water systems.

Thermal fluid heaters.

Miscellaneous machinery (where control, alarm and safety systems are called for in other sections of the
Rules).

(b) Process equipment:

Coalescers, skimmers and dehydrators.

Export pumps and compressors.

Gas compressors.

Gas lift systems.

Glycol contactors and regenerators.

Heat exchangers.

HP and LP flare systems.

Process analysers.

Production and test separator vessels.

Sand detection systems.

Scrubbers.

Sphere launching and receiving systems.

Surge, flash and knock out drums.

Water, gas and chemical injection systems.

Well-head, choke and header systems.

Wireline systems.

(c) Drilling equipment:

Blow out preventer stacks and diverter systems.

Cement and barytes storage and handling systems.

23
tcvn 6767-3 : 2000
Choke and kill systems.

Draw works and eddy current brakes.

Mud logging systems.

Mud and cement pumps.

Mud treatment systems.

Rotary table.

Wireline systems.

9.2.4 Alarm systems

Details of the overall alarm system, linking the main control point, subsidiary control points, the Offshore
Installation Manager's (O.I.M.'s) office, the radio room, the accommodation and other areas where duty
personnel may be present, are to be submitted.

9.2.5 Control points

Location and details of control points are to be submitted, e.g. control panels and consoles.

1.2.6 Programmable electronic systems

Details of system block diagram, flow chart, logic or ladder diagram and details of self monitoring
techniques are to be submitted together with details of the software quality assurance plan.

9.3 Safety systems

9.3.1 Fire and gas detection systems

Plans showing the system (s) operation, the type and location of fire and gas detector heads, manual call
points and the fire and gas indicator panels are to be submitted.

9.3.2 Utility, process, drilling (if applicable) and emergency shut down systems. Details of the shut down
philosophy, system logic diagrams, cause and effect matrix diagrams, loop diagrams and description of
operation are to be submitted.

9.3.3 Details of personnel warning systems (public address and platform status indicators) are to be
submitted.

9.4 Alarm and control equipment

9.4.1 Major units of equipment associated with control, alarm and safety systems as defined in 9.2 are to
be surveyed at the manufacturer's works and the inspection and testing is to be to the Surveyor's satisfaction.

9.4.2 Equipment used in control, alarm and safety systems should be suitable for its intended purpose,
and accordingly whenever practicable, be selected from the List of Type Approved Equipment. For fire
detectors, see 9.6.5.7

9.5 Alterations or additions

9.5.1 When an alteration or addition to the approved system(s) is proposed, plans are to be submitted for
approval. Any alterations or additions are to be carried out under survey and the inspection, testing and
installation are to be to the Surveyor's satisfaction.

9.6 Essential features for control, alarm and safety systems

24
 tcvn 6767-3 : 2000
9.6.1 Where it is proposed to install control, alarm and safety systems to the equipment defined in 9.6.3
the applicable features in 9.6.2 to 9.6.8 are to be incorporated in the system design.

9.6.2 Control points for machinery and equipment

9.6.2.1 A system of alarm displays and controls is to be provided which readily ensures satisfactory
supervision and identification of faults in the machinery and equipment. This may be provided at a main
control point or, alternatively at subsidiary control points. In the latter case, a master alarm display is to be
provided at the main control point showing which of the subsidiary control points is indicating a fault
condition.

9.6.2.2 Means of communication are to be provided as applicable between the main control point,
subsidiary control points, the O.I.M.'s office, and drill floor, the tool pusher's office and the accommodation
for operating personnel.

9.6.2.3 Provision is to be made at the main control point and any other subsidiary control point from which
the machinery or equipment may be controlled to indicate which point is in control.

9.6.2.4 Control of machinery, and equipment is to be possible only from one control point at a time.

9.6.2.5 Changeover between control points is to be arranged so that it may only be effected with the
acceptance of the point taking control. The system is to be provided with interlocks or other suitable means
to ensure effective transfer of control.

9.6.3 Alarm systems

9.6.3.1 An alarm system which will provide warning of faults in machinery and equipment is to be
installed. The system is to satisfy the requirements of 9.6.3.2 to 9.6.3.16.

9.6.3.2 Machinery, equipment, safety and control systems faults are to be indicated at the relevant control
points to advise duty personnel of a fault condition. The presence of unrectified faults is to be clearly
indicated at all times.

9.6.3.3 Alarms associated with machinery, equipment, safety and control systems faults are to be clearly
distinguishable from other alarms (e.g. fire, general alarm).

9.6.3.4 Where alarms are displayed as group alarms provision is to be made to identify individual alarms at
the main control point or alternatively at subsidiary control points.

9.6.3.5 All alarms are to be both audible and visual. If arrangements are made to silence audible alarms
they are not to extinguish visual alarms.

9.6.3.6 Acknowledgement of visual alarms is to be clearly indicated.

9.6.3.7 The acknowledgement of alarms at main and subsidiary control points is to be arranged so that the
operator required to take action is aware of the fault.

9.6.3.8 If an alarm has been acknowledged and a second fault occurs prior to the first being rectified,
audible and visual alarms are again to operate.

9.6.3.9 For the detection of transient faults which are subsequently self-correcting, alarms are required to
lock in until accepted.

9.6.3.10 The alarm system is to be arranged with automatic changeover to a standby power supply in the
event of a failure of the normal power supply.

25
tcvn 6767-3 : 2000
9.6.3.11 Failure of the normal power supply to the alarm system is to be indicated, both audibly and
visually as a separate fault alarm.

9.6.3.12 The alarm system should be designed with self-monitoring properties. Insofar as practical, any
fault in the alarm system should cause it to fail to the alarm condition.

9.6.3.13 The alarm system is to be capable of being tested during normal machinery operation.

9.6.3.14 The alarm system is to be designed as far as practicable to function independently of control and
safety systems such that a failure or malfunction in these systems will not prevent the alarm (s) from
operating.

9.6.3.15 Disconnection or manual overriding of any part of the alarm systems should be clearly indicated.

9.6.3.16 When alarm systems are provided with means to adjust their set point, the arrangements are to be
such that the final settings can be readily identified.

9.6.4 Control systems, general requirements

9.6.4.1 Where control systems are provided, the requirements of 9.6.4.2 to 9.6.4.7 are to be satisfied.

9.6.4.2 Control systems for machinery and process operations are to be stable throughout their operating
range.

9.6.4.3 Failure of the power supply to a control system is to operate an audible and visual alarm.

9.6.4.4 Control systems should be designed to 'fail safe'. The characteristics of the 'fail safe' operation are
to be evaluated on the basis not only of the control system and its associated machinery and process
equipment but also the complete installation.

9.6.4.5 The control system is to be designed such that normal operation of the controls cannot induce
detrimental mechanical or thermal overloads in the machinery or process equipment.

9.6.4.6 Remote or automatic controls are to be provided with sufficient instrumentation at the relevant
control points to ensure effective control and indicate that the system is functioning correctly.

9.6.4.7 When control systems are provided with means to adjust their sensitivity or set point, the
arrangements are to be such that the final settings can be readily identified.

9.6.5 Fire and gas detection alarm systems

9.6.5.1 An automatic fire and gas detection system is to be fitted which satisfies the requirements of
9.6.5.2 to 9.6.5.18.

9.6.5.2 A fire and gas detector indicator panel is to be located at the main control point or the fire control
point (if fitted). The panel is to indicate the source of the fire in accordance with arranged fire zones by
means of a visual signal.

9.6.5.3 An audible fire and gas alarm is to be provided having a characteristic tone which distinguishes it
from the alarm system required by 2.3 or any other alarm system. The alarm is to be audible on all parts of
the installation.

9.6.5.4 Facilities are to be provided in the fire and gas detecting system to manually initiate the alarm from
the following locations:

(a) Positions adjacent to entrances to machinery and process equipment compartments.

26
 tcvn 6767-3 : 2000
(b) Accommodation areas.

(c) The O.I.M.'s office.

(d) Control points in machinery and process areas.

(e) The main control point or fire control point (if fitted).

9.6.5.5 The alarm system is to be designed with self-monitoring properties. Power or system failures are to
initiate an audible alarm distinguishable from the fire and gas alarm. This alarm may be incorporated in the
alarm system as required by 2.3.

9.6.5.6 For power supplies, see TCVN 6767 - 4:2000.

9.6.5.7 Detector heads and manual call points are to be Type Approved.

9.6.5.8 Fire detector heads are to be located so that all potential fire outbreak points are guarded. A
combination of detectors is recommended in order that the system will react to all possible fire
characteristics.

9.6.5.9 When fire detectors are provided with means to adjust their sensitivity, the arrangements are to be
such that the set point can be fixed and readily identified.

9.6.5.10 When it is intended that a particular loop or detector is to be temporarily switched off, this state is
to be clearly indicated.

9.6.5.11 The fire detector heads are to be of a type which can be tested and reset without the renewal of any
component. Facilities are to be provided on the fire and gas control panel for functional testing and reset of
the system.

9.6.5.12 Smoke detectors used for the protection of living quarters are to operate before the smoke density
exceeds 12,5 per cent obscuration per metre, but not until the smoke density exceeds 2 per cent obscuration
per metre.

9.65.13 Heat detectors used for the protection of living quarters are to operate before the temperature
exceeds 78oC but not until the temperature exceeds 54oC, when the temperature is raised to those limits at a
rate less than 10C per minute. At higher rates of temperature rise, the heat detector is to operate within
satisfactory temperature limits having regard to the avoidance of detector insensitivity or oversensitivity.

9.6.5.14 The permissible temperature of operation of heat detectors may be increased to 300C above the
maximum deckhead temperature in drying rooms and other living quarters of a normal high ambient
temperature.

9.6.5.15 The maximum spacing of detectors in the living quarters is to be in accordance with Table 3. Other
spacing based upon test data which demonstrate the characteristics of the detectors may be permitted.

Table 3

Maximum distance away

Maximum floor area per Maximum distance apart
Type of detector from bulkheads, in
detector in m2 between centres, in metres
metres
Heat 37 9 4,5

Smoke 74 11 5,5

27
tcvn 6767-3 : 2000
9.6.5.16 Gas detectors are to be selected having regard to the flammable and/or toxic gases likely to be
present in each particular area or compartment and are to be sited having regard to the probable dispersal of
the gas as governed by density, HVAC air flows and possible points of leakage.

9.6.5.17 Means are to be provided so that the sensitivity of gas detectors can be readily tested in their
mounted positions by the injection of span gas or other equivalent method.

9.6.5.18 In addition to the fixed gas detection system two portable gas detectors of each type, together with
any necessary test facilities for checking their accuracy, are to be provided for all anticipated gas hazards
including the following:

Hydrocarbon gas detectors- range 0 to 100 per cent of the Lower explosive limit.

Toxic gas detectors.

Oxygen concentration meters.

9.6.6 Utility and process safety and shutdown systems

9.6.6.1 Where safety systems are provided the requirements of 9.6.6.2 to 9.6.6.11 are to be satisfied.

9.6.6.2 Safety systems are to operate automatically in case of serious faults endangering the machinery or
equipment so that:

(a) Normal operating conditions are restored, e.g. by the starting of standby machinery and equipment,
or

(b) the operation of machinery or the process is temporarily adjusted to the prevailing conditions, e.g.
by reducing output, or

(c) the machinery or process is protected from critical conditions by shutting off the fuel or power
supplies or process flow thereby stopping the machinery or shutting in the process.

9.6.6.3 Safety systems are to be designed as far as practicable to operate independently of control and
alarm systems, such that a failure or malfunction in these systems will not prevent the safety systems from
operating.

9.6.6.4 Safety systems are to be arranged so that cascade operation of safety shut downs due to back up
effects in the process are avoided.

9.6.6.5 Safety systems for different items of the plant are to be arranged so that failure of the safety system
of one part of the plant is not to interfere with the operation of the safety system in another part of the plant.

9.6.6.6 Safety systems should be designed to 'fail safe'. The characteristics of the 'fail safe' operation are to
be evaluated on the basis not only of the safety system and its associated machinery or process, but also the
complete installation.

9.6.6.7 When a safety system is activated, an audible and visual alarm is to be provided to indicate the
cause of the safety action.

9.6.6.8 Safety systems are to be provided with manual reset.

9.6.6.9 Where arrangements are provided for overriding a safety system, they are to be such that
inadvertent operation is prevented. Visual indication is to be given at the relevant control point(s) when a
safety override is operated.

28
 tcvn 6767-3 : 2000
9.6.6.10 Safety systems are to be arranged with automatic changeover to a standby power supply in the
event of a failure of the normal power supply.

9.6.6.11 Failure of the power supply to a safety system is to operate an audible and visual alarm.

9.6.7 Emergency shutdown (E.S.D.) systems

9.6.7.1 An E.S.D. system is to be provided when any process presents a hazard which could affect the
safety of personnel, the overall safety of the installation or the pollution of the environment. The system is
to satisfy the requirements of 9.6.7.2 to 9.6.7.11.

9.6.7.2 The E. S.D. system is to operate on those items of plant defined in 9.2.3 as applicable and is to
incorporate levels of shut down appropriate to the degree of hazard to personnel, plant and the environment.

9.6.7.3 The operation of the E.S.D. system is to be initiated manually. In addition, operation may be
initiated automatically by signals derived from the fire and gas detection system and signals derived from
process and other equipment sensors.

9.6.7.4 Manual E.S.D. actuation points for complete shut down of the installations are to be provided at
suitable locations, e.g. main control point, helicopter decks, emergency evacuation stations.

9.6.7.5 Each manual E.S.D. actuation point around the installation is to be clearly identified.

9.6.7.6 The E.S.D. system is to be arranged with automatic change over to a standby power supply in the
event of failure of the normal power supply.

9.6.7.7 Failure of a power supply to the E.S.D. system is to operate an audible and visual alarm.

9.6.7.8 The E.S.D. system is to be arranged to a 'fail safe' concept. The characteristics of the 'fail safe'
operation are to be evaluated on the basis not only of the E.S.D. system and its associated machinery or
process, but also the complete installation.

9.6.7.9 The E.S.D. system is to be provided with manual reset.

9.6.7.10 Where arrangements are provided for overriding parts of an E.S.D. system they should be such that
inadvertent operation is prevented. Visual indication is to be given at the main control point when an
override is operated.

9.6.7.11 Accumulators for pneumatic and hydraulic systems are to have sufficient capacity to perform one
complete shutdown followed by reset capabilities without the need for recharging the accumulator,

9.6.8 Programmable electronic systems

9.6.8.1 Where control, alarm or safety systems incorporate programmable electronic equipment the
requirements of 9.6.8.2 to 9.6.8.11 are to be satisfied.

9.6.8.2 Control, alarm and safety shut down functions are to be arranged such that a single failure or
malfunction of the electronic equipment will not affect more than one of these functions. This may be
achieved by dedicated equipment for each of these functions within a single system, or by the provision of
standby equipment, or by other suitable means.

9.6.8.3 Where standby equipment is provided the changeover arrangements are to be such as to prevent
malfunctions of the standby electronic system and the machinery under control.

9.6.8.4 The system is to be designed with self-monitoring facilities and any fault causing failure of the

29
tcvn 6767-3 : 2000
system to carry out its intended function is to initiate an audible and -visual alarm. Both operating and
standby equipment (if fitted) is to be monitored.

9.6.8.5 The location of a hardware fault is to be indicated to a level compatible with the equipments
designed repair/replacement policy.

9.6.8.6 The system is to be arranged to operate automatically from an alternative power supply in the event
of a failure of the normal power supply.

9.6.8.7 Failure of any power supply to the system is to initiate an audible and visual alarm.

9.6.8.8 Program and data held in the system are to be protected from corruption by loss of power.

9.6.8.9 Where any part of the program is stored in volatile memory a permanent copy of the program and
the means to reenter it are to be provided.

9.6.8.10 Access for alterations to program or data is to have effective security arrangements.

9.6.8.11 The quality control procedures governing software development, design, modification, replication
and installation are to be in accordance with an acceptable National or International Standard or Code of
Practice.

9.6.9 Personnel warning systems

9.6.9.1 A personnel warning system is to be fitted which satisfies the requirements of 9.6.9.2 to 9.6.9.8

9.6.9.2 A public address (P.A.) system is to be provided which is to be audible in all parts of the
installation- The P.A. microphones are to be located at the main control point and at the fire control point (if
fitted). Additional microphones may be provided at other suitable locations, e.g. in the 0. I. M.'s office.

9.6.9.3 Platform status indicators are to be provided at the following locations:

(a) Entrances to all work spaces.

(b) Entrances to the accommodation.

(c) Recreation area and mess rooms.

(d) Helicopter deck.

(e) The main control point.

(f) The O.I.M.'s office.

(g) The drill floor.

(h) The Tool Pusher's office.

9.6.9.4 Installation status indicator displays are to relate to the hazard potential on the installation from
'normal' conditions to prepare to abandon installation' conditions.

9.6.9.5 The controls for the installation status indicators are to be located at the main control point and at
the fire control point (if fitted). Additional controls may be provided at other suitable locations, e.g. in the
O.I.M.'s office.

9.6.9.6 Fire and gas status indicators may be initiated automatically from the fire and gas detection system
required by 9.6.5.

9.6.9.7 The P.A. and installation status indication systems are to be arranged with automatic changeover to

30
 tcvn 6767-3 : 2000
a standby power supply in the event of a failure of the normal power supply.

9.6.9.8 Failure of the normal power supplies to the P.A. and installation status indicator systems is to be
indicated both audibly and visually as a separate fault alarm.

9.6.10 Drilling safety equipment

9.6.10.1 Blow out preventors and diverters are to be provided.

9.6.10.2 The hydraulic; accumulators for the blow out preventor rams and annulus are to have sufficient
capacity for two closing actions and one resetting action. Closing times are, in general, to be less than 30
seconds. For annular preventors larger than 500 mm (20 in) diameter the closing time is to be less than 45
seconds.

9.6.10.3 The hydraulic pumps are to have sufficient capacity to enable the annular preventor and the
hydraulically operated choke line valve to be closed within 2 minutes without resorting to the hydraulic
accumulators.

9.6.10.4 The hydraulic pumps are to be capable of providing a hydraulic gauge pressure of 14 bar above the
normal charge pressure of the accumulators within 2 minutes.

9.6.10.5 Two independent sources of power are to be provided to drive the hydraulic pumps.

31