NUMERO UNO TRAINING & CONSULTING LLC (NUTC)

ADNOC Onshore
Work Management System (WMS)
Course Notes

For course bookings Contact:

Tel: 02 557 5220

Mob: 050 500 2620

Email: training@nutc.ae

Website: www.nutc.ae

Disclaimer: These are the key notes derived from ADNOC onshore WMS
procedure. This is only for enhancing your learning of Adnoc onshore
WMS training. Any future changes on the procedure, please refer original
ADNOC document.
Work Management system

Work Management System (WMS) is a safety tool to ensure that the work is properly
controlled, coordinated and communicated. It takes a holistic and robust approach to job safety
analysis inclusive of formal risk assessment, energy isolation, permit to work, temporary defeat and
simultaneous operations with an objective of standardizing these practices across ADNOC Group

This document shall be applicable to all ADNOC group companies, employees, contractors, facilities
(including interface areas), activities and services without exception.

Contractors shall be responsible for ensuring that all activities performed within ADNOC operating
facilities in the course of carrying out their contractual requirements are managed in accordance
with the requirements of this document and reported, when applicable, to the contract holder.

Custodianship of WMS frame work and standards

The Principle Custodian, responsible for authorizing all changes to the WMS Framework is the Senior
Vice President, HSE ADNOC Group. The Custodian is responsible for facilitating the development of
the WMS Framework standards, continuous improvement and co-ordination across ADNOC
Group of Companies to ensure effective implementation of the WMS Framework.

Key Components of WMS framework

The WMS is a eight (8) stage process that integrates all five critical processes in WMS i.e. Permit to
Work (PTW), Job Safety Analysis, Energy Isolation, Temporary Defeat and SIMOPS.

WMS Stages

1. Work request and planning

2. Identify & Approve Controls
3. Authorize Work Permits
4. Communicate Controls & Commence Work
5. Dynamic Risk Assessment
6. Work Handover/ Suspension/ Extension
7. Permit Closure & Hand back

Retention period of WMS framework

For paper based system, the original copy of the signed off documentation and all relevant
attachments required as per WMS Standards shall be retained for a minimum period of twelve (12)
months.

For companies utilizing electronic systems, a majority of the approvals and attachments are
automatically archived in the system. However, other hard copies containing wet ink signatures
or information not captured in the electronic system as part of the documentation shall be retained
for a minimum period of twelve (12) months.

WMS Audits

The purpose of audit is to provide information whether the existing practices/ processes
conforms to requirements of WMS elements and are effectively implemented and maintained.
Auditing shall be carried out in such a manner that all aspects of the WMS Standards are covered.
The WMS Standards audit process shall measure the effectiveness of the WMS Standards system
using a three (3) tier audit approach.

Page 1 of 23
Tier 1: Daily Monitoring: Individual permits or other WMS documentation shall be monitored (self-
audit)

Tier 2: Assessment by ADNOC Group Company: Annual audit program to assess the effectiveness
of complete WMS Standards by authorized and competent audit personnel

Tier 3: Independent Assessment: As specified by ADNOC Audit guidelines.

LIMITS OF PTW SIGNATORIES

In normal circumstances, there should be a sensible limit on the maximum number no of Permits to
be administered and authorized by the Area Authority (AA), issued by each/individual Permit Issuer
(PI) and overseen by Performing Authority (PA) on a shift basis.

Management of the Group Company shall ensure the PTW system is properly resourced. Area
Authority (AA) should be provided with sufficient time to check for conflicts, site conditions to
ensure effective implementation of the system. In particular, high hazard or complex tasks will
require a greater degree of monitoring. This should restrict the number of critical permits a single
issuer can manage at any one time.

Each Group Company shall maintain the above table for their respective business (asset
wise). The following are mandatory requirements:

a. The list shall be approved in writing by Asset Owner and endorsed by Corporate HSE. Asset
Owner signature shall state “I approve that the limits of PTW Signatories provide
sufficient time to check for conflicts, site conditions (as a minimum, at start and completion
of tasks, plus intermediate checks as appropriate), to ensure effective implementation of the
system. The system is properly resourced to handle these limits.”
b. The list shall be reviewed and approved on an annual basis.
c. The list shall be readily available at designated areas namely Permit Control Facility, Control
Room, etc.

At the daily PTW meeting, the Area Authority (AA) shall review the current number of Permits with
respect to the PTW limits, prior to accepting new permits. In other circumstances, e.g. during
major shutdowns when Permit requirements are greater, special arrangements for the control
and administration of Permits should be made by providing additional resource for supervision
and co-ordination of permits and agreed with the Asset Owner.

PTW EXEMPT WORK

Certain activities might be exempted from the PTW process. PTW Exempt activities shall meet all the
below mentioned criteria:

 routine activities (including maintenance) conducted on a regular basis; and

 activities which are low risk in nature; and
 single discipline/ trade with no involvement of other disciplines/ parties; and
 are completed in less than a shift; and
 Have no impact on operations.

These tasks can be conducted under standard approved procedures or job safety checklist or
work practices without the issuance of a permit. For PTW exempt work, the Performing Authority
(PA) shall develop a JSA Level 2 i.e. Hazard Management Form (HMF) or Formal Risk Assessment in

Page 2 of 23
line with the approved Standard Operating Procedure (SOP), SMP or Work Instruction for the subject
work activity.

Each Group Company shall maintain an up-to-date list of work activities undertaken in their
respective business which do not require PTW. The following are mandatory requirements:

 The list shall be approved in writing by Asset Owner.

 The list shall be reviewed and approved on an annual basis.
 The list shall be readily available at designated areas namely Permit Control Facility, Control
Room, etc.

Requirements of WMS Permit to work Standard

Types of permits

The ADNOC Permit to Work (PTW) System shall comprise three types of Permits.

Certificates

The PTW System comprises a set of supporting Certificates that shall be attached to the permits as
and when applicable. Certificates are complementary to PTWs and do not, in themselves, authorize
work to be carried out. Certificates are standalone documents which assist in identifying & certifying
controls, pre-requisites and conditions required prior to issue of associated permit(s). Certificates
may be used for preparatory work requirement for the main work permit. For Example: Confined
space entry certificate does not allow any work to be conducted in the confined space without an
associated permit issued.

Page 3 of 23
Types of certificates

Page 4 of 23
Validity of permits

ORIGINALS AND COPIES of Permit

For companies utilizing paper based PTW system, the table below depicts the number of PTW copies
and their designated locations:

Original : The original copy is issued to the Job Performer (JP) and shall be displayed at the place
of work until hand-back, preferably in a protective pocket, to ensure the contents of the
permit are easily visible. In rare occasions, if this is practicable (e.g. at an exposed location), the JP
should retain a copy with him.

First (1st) Copy: First (1st) copy of the permit shall be retained by the Area Authority (AA) post
issuance in the Permit Control Facility or point of issuance (e.g. Operator shelter, satellite office,
etc.). This enables the Area Authority (AA) to check at any time the number, type and location of
the permits issued for any particular shift.

Second (2nd) Copy: Second (2nd) copy of the permit should be retained in the Control Room
in case the Control Room is separate from point of issuance. This copy should be utilized during
the handover to ascertain the location of the work activities.

Electronic PTW Systems

For companies utilizing electronic PTW system and handheld devices, the required signatures shall
be recorded via handheld devices or wet ink signature. In both cases, a printed hard copy shall be
displayed at the worksite during execution.

Page 5 of 23
PERMIT TO WORK PAPER-BASED BACK-UP SYSTEM

In the event the electronic PTW system is unavailable, a paper-based PTW system (known as
PTW Crash Pack) shall be provided as a contingency.

PTW Process

Integrated Work Activity Planning (IWAP) Process

The Integrated Work Activity Planning (IWAP) process shall provide a set of comprehensive rolling
plans which will result in the formation of weekly and daily detailed schedules for execution of the
work requests.

As a minimum the following personnel shall comprise the IWAP Team and conduct the IWAP
planning meeting:

1. Asset Owner or Representative;

2. PTW Coordinator;
3. Planning Representative; and
4. Performing Discipline.

As part of the IWAP process;

 Daily PTW Coordination Meetings will be held to record / register DRAFT permit
 Requirements submitted by Performing Authorities (PA) for upcoming work,
 Monitor the progress of permits in development and to schedule the authorizing and issuing
of upcoming permits.
It is highly recommended to have a dedicated PTW Coordinator who could assist in
facilitation of daily PTW Meeting, maintaining the PTW register, initial screening of
PTW completeness, maintaining the PTW status display, management of Lock Out Tag
Out System, verifying authorization of PTW Signatories, final documentation/close out
and archiving.

Page 6 of 23
Requirements for description of work:

If a permit is required to control the work activity, Performing Authority (PA) shall provide clear and
adequate description about the following aspects on the appropriate permit:

(i) A clear and concise title of work activity to be carried out;

(ii) Linkage to any previous permits (as applicable);
(iii) Linkage to Work Order No. (applicable in case of Maintenance schedules);
(iv) Proposed/Planned start and finish date or duration;
(v) Location of work with clear reference to equipment ID/Tag No.;
(vi) Description of work (including sub tasks/activities);
(vii) Area in which the work will be carried out (Process Area / Restricted Area or Non-
Process Area / Unrestricted Area);
(viii) Applicable H2S Zones or HC Zones;
(ix) Job Performer (JP) details namely Discipline / Department, expected number of people
in the work party and if JP is contractor or not;
(x) Whether the work activity was planned as part of IWAP (Integrated Work Activity
Planning) or not;
(xi) Equipment, material and tools to be used for executing the work including potential
sources or ignition (i.e. Cranes, trucks, non-intrinsic equipment, hazardous products or
materials involved, etc.);
(xii) Documents supporting the work activity such as Method Statement, Procedures,
Checklists, Drawings, etc.;

Initial Job Analysis:

(i) If the work scope requires control using the PTW System or is the work pre-authorized
to be exempted from the PTW System
(ii) The need for JSA (level 1 or level 2) or Formal Risk Assessment i.e. a higher level or
special risk assessments are needed involving specialists;
(iii) The permit type to be raised;
(iv) Identification of the nature of the work activity to be carried out;
(v) Required supporting certificates and/or any specialist signatories (interface authorities);
(vi) Draw on any lessons learnt from previous / similar jobs or incidents.

Adequate lead time shall be allowed for development of permits (including drafting, identification of
controls, worksite controls and necessary approvals). All permits shall be submitted by PA at least
one (1) day prior to the planned commencement of work excluding emergency work.

Output / Permit Status

The following are output of the “Work Request and Planning” step:

1. Comprehensive IWAP plan with Initial Job Analysis assigned to the work activity and
identification of associated worksite controls requirements;
2. A draft permit signed by Performing Authority (PA) adequately describing the work to
be conducted including details of tools, equipment, material, Job Performer (JP), etc.;
3. Draft certificates as applicable;
4. Recommended approach for Formal Risk Assessment (Refer to JSA standard); and
5. Permit Status: Draft.

Page 7 of 23
IDENTIFY & APPROVE CONTROLS

A draft permit signed by the Performing Authority (PA)

Identification and Approval of Controls Process

This section details the process of identifying controls necessary to reduce the risk level to ALARP.
The request to conduct a Formal Risk Assessment shall be initiated by Performing Authority (PA)
based on the IWAP conclusion if required.

Identity Controls:

All work activities shall require a JSA.

For Critical and Hot Work Permits, a JSA Level 2 comprising of Hazard Management Form (HMF) as a
minimum or Formal Risk Assessment shall be required to identify the appropriate controls. The HMF
shall be attached to the permit by the Performing Authority (PA). For General Work Permits, a JSA
Level 1 comprising of Standard Hazard Controls Form (SHCF) shall be required to identify the
appropriate controls. Performing Authority (PA) shall identify the applicable hazard and controls and
attach to the permit form.

As part of the controls identification process, the AA shall review and update the following aspects
of the permit pack:

(i) Requirement of additional Certificates I.e. Isolations, Temp. Defeat, Atmospheric

Test, Vehicle Entry, Radiography, Confined Space Entry, Road Closure, etc.;
(ii) Appropriateness of attachments to the permit i.e. JSA, Lifting Plan, Rescue Plan, P&IDs,
Journey Management Plan, etc.;
(iii) On-site HSE precautions and PPEs required to safely execute the Work;
(iv) Associated Permit No. (as applicable);
(v) Road closure or remote working requirements;
(vi) Any potential SIMOPS
(vii) Any special precautions required (if applicable); and
(viii) Requirement for counter-signatures from Permit Endorsers (PE) i.e. other affected
Permit Issuers, fire chief, etc.
(ix) Other generic hazards and controls are identified in form of ‘Standard Hazards and
Control Form’ and it shall also be attached along with the permit form.

Note 1: For all critical and hot work permits, Area Authority (AA) shall validate that all details in the
permit and associated documents are clear and valid to proceed further for endorsements and AAA
approval.

Note 2: The AA shall indicate the Performing Authority (PA) worksite presence requirements as
applicable and specify the details using the ‘special precautions’ section on the permit forms.

Note 3: Please note that AAA approval may be exempted for Hot Work Permits in Non - Process /
Unrestricted areas.

Endorsement:

If applicable, the Permit Endorser(s) shall sign the permit to accept the following responsibility: “I
have reviewed the work scope and the controls identified to mitigate interface / concurrent
activities agree that the work described may be carried out during the proposed period.”

Page 8 of 23
Approve Controls:

Controls identified as part of Hot Work Permits and Critical Work Permits require approval prior to
authorization by the Asset Approval Authority (AAA) who shall be accountable for approving
that the identified controls are adequate to reduce risk to ALARP. Once all controls are identified, a
number of checks / quality assurance shall be required to be satisfied that the Job Safety Analysis
(JSA) has been carried out comprehensively.

The checks shall include but not limited to:

(i) Review of the work scope description for completeness;

(ii) Review of the identified control measures ensuring that the JSA and selection of controls
consider hierarchy of controls to demonstrate ALARP;
(iii) Assurance that all work interfaces are adequately identified and SIMOPS and
communications protocols defined;
(iv) Review lessons learned from previous similar jobs or incidents and ensuring the
application of any learning.

Note 1: AAA approval (applicable to Critical Work and Hot Work Permit) shall be subjected to time
validity. If the permit is not issued within the approved timeframe, approval from AAA shall
be required again. The approval is valid for a maximum of seven (7) calendar days i.e. the permits
shall be issued within 7 calendar days. The AAA reserves the right to decrease the approved
validity as deemed appropriate.

Note 2: For all general permits, Area Authority (AA) shall validate that all details in the permit and
associated documents are clear and valid, review and approve the identified controls and authorize
the Permit Pack before it proceeds further for endorsement and Issue. If the Permit is not issued on
the planned start date, it shall be reverted back to the Area Authority for validation, approval and
authorization.

The AAA shall sign the Critical and Hot Work permit to accept the following responsibility: “I have
reviewed the permit and the attachments and confirm that the described controls are adequate to
manage the risks associated with the work”.

Output / Permit Status

(i) Permit signed by Permit Endorsers (if applicable) and AAA (for Critical and Hot Work
Permit only) with appropriate attachments (worksite controls such as energy isolations,
temporary defeats, SIMOPS interfaces, other Certificates and attachments); and
(ii) Critical and Hot Work Permit Status: Approved.

WORKSITE CONTROLS IMPLEMENTATION

Inputs

Complete and approved permit pack identifying all necessary worksite controls (energy
isolations, temporary defeats, SIMOP interfaces, other Certificates and attachments etc.).

Worksite Controls Implementation Process

The process for implementation of the controls as per the Permit requirements shall be overseen
through the Daily PTW Coordination Meetings. Attendees of the daily permit coordination meeting
may include but are not limited to:

Page 9 of 23
 (i) Asset Owner or Delegate / Representative (Area Authority);
(ii) Asset Maintenance and Reliability;
(iii) PTW Coordinator;
(iv) Asset Approval Authority (AAA);
(v) Permit Issuer (PI);
(vi) HSE Representative; and
(vii) Other stake holders (Contractor Supervisors, SIMOPS Coordinators).

COMMUNICATE CONTROLS & COMMENCE WORK

Atmospheric Testing, Clearance to Work and Tool Box Talk

(a) Atmospheric Testing

Atmospheric tests, where required by the permit, shall be carried out as appropriate to
cover all activities within the designated area.
(b) Clearance to Work:
The Job Performer (JP) shall contact the Permit Issuer (PI) for a joint on-site walk
through to discuss additional worksite hazards thereby ensuring worksite is safe to
commence work.
(c) Permit Acceptance and Tool Box Talk (TBT): The Job Performer (JP) shall sign the permit and
accept the worksite. The JP shall adhere to all the worksite requirements as described in the
permit and associated documents.
Note: Due to operational consideration, the Job Performer (JP) could change during the
course of the work activity. However, the new JP shall sign for the above statement and
obtain approvals from Area Authority (AA) and Permit Issuer (PI). This shall be done using
the re-validation section of the permit form.
The JP shall communicate via a Tool Box Talk (TBT) or equivalent process all the relevant
hazards and precautions / safe work measures to be taken to the work party. The
communication shall be recorded as a part of Tool Box Talk (TBT). The TBT discussion
shall also focus on applicable ADNOC Life Saving Rules (LSR)
The work party shall be advised of and understand: (i) The work content and how it will be
carried out; (ii) The potential hazards and controls required; (iii) The work environment and
the problems it causes / controls required; (iv) Any emergency actions that may be
necessary should problems arise; and(v) Work party responsibilities.

DYNAMIC RISK ASSESSMENT

Inputs
Live Permit
Dynamic Risk Assessment Process
Once the job commences, it is important to monitor the worksite for any changes that might
prevent the job from being completed safely. Dynamic Risk Assessment is defined as the
continuous process of identifying hazards and assessing risks arising due changing
circumstances of an operational environment followed by taking action to eliminate or
reduce risk.
(a) Supervision
Job Performer (JP) is in charge of the safe execution of the work and shall ensure the
following aspects during the execution of work activity:

Page 10 of 23
 (i) All work party members shall follow the HSE precautions and check conditions at
regular intervals; (ii) Effectiveness of the controls is maintained during execution of the
work and JP and / or PI shall conduct periodic checks as applicable(iii) Risks shall be re-
assessed when there is a change in conditions; and(iv) SIMOPs protocols are followed
and work is suspended if required under as per SIMOPs protocols or as requested
by Area Authority (AA).
(b) Stopping the Job : Every individual has an obligation to STOP THE JOB if deemed unsafe.
It shall be made clear to all personnel, especially during Toolbox Talks (TBT), that
when such issues arise the expectation is that the individual or work team will stop
work and reassess the situation and JP makes it clear to all work party or work team that
they shall be fully supported when taking action to stop the job. Relevant PI and
AA shall be advised about the worksite conditions.

(c) Personnel who are directly not involved in the job execution, it is recommended to
approach the Job Performer (JP) or the person supervising the job at the work site and
responsible Permit Issuer (PI) to discuss unsafe conditions.
(d) If there are changes in situational hazards assessed by the AA as affecting the safety of
the work, the AA should suspend / cancel the permit.

Cancellation Rules:

When work is left under a suspended permit, the integrity of safety systems and security of any
isolation could pose a threat, such that the plant should not be assumed to be safe for normal or
other use. In certain circumstances it may be appropriate to cancel the permit and to change
isolation status to “Extended Period Isolation”. In the case of emergencies, it is likely that time will
not allow formal suspension of permits by way of their return to a central control/co-ordination
point hence post-emergency actions should include a full re-assessment of work conducted in
the affected area to ensure that conditions have not altered as a result of the emergency and
that the permit remains valid. The above should be done in consultation with Area Authority (AA).

WORK HANDOVER / SUSPENSION / EXTENSION

Re-validation / Suspension / Extension Rules

(a) Re-validation Rules:

If the work activity requires shift change, effective handover between incoming and
outgoing personnel at shift handover and crew change is critical to ensure continuity is
maintained to prevent adverse impacts on safety.
The following shift handover rules shall be applicable:
Revalidation of Permits: Post a shift-change, work shall only commence after re-validation of
the following on the permit:
1. Area Authority (AA) shall confirm that all Worksite Controls are still in place and
effective as per the requirements of the permit. AA shall also specify the time duration
of permit validity to carry out the work if shorter than one shift.
2. Permit Issuer (PI) shall confirm that he has checked worksite controls specified on the
permit, demonstrated Zero Energy & informed on-site emergency instructions to JP and
confirms work site is safe to commence work.
3. Job Performer (JP) shall confirm that he accepts the worksite as safe to commence work
and will communicate the hazards, permit controls and conditions to work party via a
Tool Box Talk.

Page 11 of 23
Shift Handover: At a minimum, effective handover shall be provided by the following roles:

1. Area Authority (AA) 2. Permit Issuer (PI) 3. Job Performer (JP)

Logbook Records: The shift handover logbooks shall have a formal record of all relevant
information pertaining to permits and associated worksite preparations/de-isolations.

Permit Status Display: At all times, the current status of permits on the facility shall be available in
the Control Room / Permit Control Facility (PCF) / designated area.

(b) Suspension Rules:

A permit shall be automatically suspended and all work shall cease if any of the following
occur: (i) An emergency alarm is activated at the worksite (except when testing alarm
systems) or an emergency call is issued by Operations;
Adequate rescue resources are no longer available for restricted/confined space entry or
any other work scopes requiring a fall protection or other rescue plan;
If severe weather conditions occur requiring all work permits to be suspended; and
End of every work shift, if the time extension is not approved by incoming AA.

Work shall require suspension under direction of the Area Authority (AA)/ Permit Issuer (PI)
when: (i) A hazardous change in atmospheric conditions is identified; (ii) The conditions of
the Permit are not being followed; (iii) The work scope changes; (iv) There is conflict with
another scope of work; Conducting a Sanction To Test (STT). Please refer to WMS Standard:
Energy Isolation for details of STT; and(vi) Any other conditions where AA assesses the
conditions as unsafe to continue work.
(c) Time Extensions Rules:
(d) In certain circumstances, time extension might be required for completing the work activity.
The following conditions shall apply:
(i) The PTW shall be extended by the incoming Area Authority (AA) and Permit Issuer (PI) in
the revalidation section of permit; (ii) The maximum duration allowed for extension of a
PTW shall be four (4) hours equating to a total continuous work duration of 16 hours; and
Job and worksite conditions have not changed and continue to meet the requirements of
the PTW.

Job Safety analysis

As an operator of Oil and Gas assets and associated facilities, ADNOC has a general duty to take all
measures necessary to prevent major accidents and to limit their consequences for human health
and the environment. To comply with this duty, it is required to adopt a structured and systematic
approach for proactively identifying the hazards associated with a work, qualitatively assessing
the risk and determining appropriate control measures.

Purpose

The purpose of this document is to establish mandatory requirements for conducting Job Safety
Analysis prior to commencement of work (using ADNOC PTW system) in areas under control of
ADNOC and its group companies. Job Safety Analysis is a key element of the Work Management
System Framework to ensure that any work activities conducted are properly controlled coordinated
and communicated.

Page 12 of 23
Scope

This document shall be applicable to all ADNOC group companies, employees, contractors,
facilities (including interface areas), activities and services without exception.

KEY ELEMENTS OF JOB SAFETY ANALYSIS (JSA)

The ADNOC Job Safety Analysis process is described in a 3-step process which is pictorially depicted
below along-with a brief summary.

1. Identify and describe work

a. To enable a robust Job Safety Analysis process, a clear and complete
statement of the work scope (method statement/ detailed work description)
should be available outlining how the work is to be carried out and approved by
relevant authorities. This step shall include clearly defining and documenting
sufficient information about the nature and scope of work and any special tools
involved, to facilitate an appropriate Job Safety Analysis (JSA) and ensure that the
controls necessary to reduce the risks to ALARP can be properly identified.
The description of work scope should include: (i) Activity description (including sub
tasks/activities); (ii) The location of the work and other affected areas; (iii) The equipment
or system on which the work will take place; (iv) The proposed timing of the work; (v)
Equipment, materials, tools and vehicles to be used; (vi) Hazardous products or materials
that are involved; (vii) Description of who will complete the work and what competency is
required; and (viii) Any required transfer of work and responsibilities from one Group to
another.

Sufficient information about the nature and scope of work and special tools involved
facilitates the identification of: (i) Work area hazards; (ii) Equipment hazards; (iii) Activity
hazards; (iv) Conflicting work hazards (SIMOPS & Cumulative risk); and (v) Additional
complexity factors.
Complexity factors which might introduce additional risks or compound existing risks
include: (i) Simultaneous operations that could impact on the work; (ii) Safety critical
equipment affected or safety critical devices likely required to be inhibited or defeated; (iii)
Worksite conditions; (iv) Environment; (v) Isolation procedures; (vi) Emergency response
systems effected or equipment likely to impair emergency response access; (vii) Road
closures required; (viii) Extended length of time to complete the work; (ix) Large number of
trades or individual work tasks involved; and (x) Jobs involving transfer of work and
responsibilities from one group to another.

2. Assess hazards and controls

a. The PTW standard identifies three Permit pathways based on the nature of activity
associated with the work scope. They are respectively Hot Work, Critical Work and
General Work permits. The type of permit also determines the level of JSA required.
Within the Integrated Work Activity Planning (IWAP) process, the Work
Categorization Chart is used as a decision tool for determining the appropriate
type of Permit to Work which, given the work scope description, must be
followed. The choice of Permit path also determines the level of JSA required.
LEVELS OF JSA
JSA Levels Permit Type

Page 13 of 23
 Level 1 – Standard Hazard Control Form General Work Permit
(SHCF)
Level 2 – Hazard Management Form Critical or Hot Work Permit
(HMF)

(a) JSA Level 1: Standard Hazard and Control Form (SHCF)

For General Work permits, SHCF (Appendix 3) shall be utilized to identify hazards and
controls. This SHCF assists to manage hazards for the proposed work.
The SHCF shall be attached to the permit by the Performing Authority (PA). In addition
to PTW details, the PA shall identify the following on SHCF: (i) Personal Protective
Equipment (PPE) requirements; (ii) Applicable Life Saving Rules (LSRs); (iii) Applicable
hazards (aligned with the work scope) and required controls.

Controls in SHCF can also be marked as pre-requisite by Area Authority (AA)

which allows verification of implemented controls prior to permit authorization. Such
attachments detailing the required controls shall then be reviewed by the Area
Authority (AA) prior to permit authorization. Prior to issuance of the permit, the Permit
Issuer (PI) shall confirm that all controls (including pre- requisite controls) as per the
requirements of the permit and JSA are in place and effective.

(b) JSA Level 2: Hazard Management Form (HMF)

For Critical and Hot Work permits, SHCF (Appendix 3) and Hazard Management Form
(HMF – Appendix 4) shall be utilized. In addition to PTW details, the PA shall identify
the following on HMF: (i) Major work steps; (ii) Applicable hazards (aligned with the
work scope) and its location; (iii) Required controls.

(c) Formal Risk Assessment

For a work activity or a work scope, the IWAP team determines whether a Formal Risk
Assessment shall be required.
3. Agree and approve controls

In this element, a competent authority is required to approve the adequacy of the

specified control measures as meeting the principles of ALARP, i.e. to reduce the risks
of the hazards to the level considered “As Low As Reasonably Practicable”(ALARP). For
Critical and Hot Work permits, the controls are approved by Asset Approval Authority (AAA).
For General permits, the controls are approved by Area Authority (AA).

UPDATE STANDARD LIBRARY

All JSAs are subject to periodic review to ensure they are still applicable, valid and up-to
date. The frequency of the review cycle is described in the table below.

Type Review Frequency

Formal Risk Every 1year

Assessment

Level 2: SCHF + HMF Every 2 years

Page 14 of 23
Note: Upon completion of a new JSA or enhancements to the existing JSA, the standard library shall
be updated only post approval from Asset Owner Rep.

Simops(simultaneous operations standard)

INTRODUCTION

Simultaneous Operations (SIMOPS) are activities that take place at the same time and meet the
following conditions:

(i) Activities that are located in the same area; and

(ii) (ii) Activities that could directly or indirectly potentially affect the safe performance of
the another activity (e.g. Breaking Containment and Hot Work)

PURPOSE

The purpose of this standard is to provide a framework to identify potential hazards and threats
associated with concurrent operations, to evaluate the associated risks and to establish means and
ways to control the operations such that the combined /cumulative risks of concurrent
activities/operations are managed to a level meeting the principles of ALARP. The application of this
document is intended to provide:

(i)A basis for safe performance of simultaneous operations; (ii) A common approach to routine
SIMOPS across all ADNOC facilities; (iii) A consistent approach to the planning and execution of non-
routine SIMOPS across ADNOC facilities; and(iv) Identification of combinations of work activities
that cannot be performed at the same time (prohibited simultaneous operations).

This standard should be read and used in close conjunction with WMS Standard: Permit to Work
noting that SIMOPS management is closely linked with the Permit to Work system but, in
itself, is not a standalone system. An authorized PTW is to be fully completed before any
potentially hazardous work is started and, if SIMOPS are involved, a Job Safety Analysis (JSA) is
required to define the SIMOPS related controls for the permitted work

SCOPE

The requirements of this standard shall be applicable to all ADNOC group companies,
employees, contractors, facilities (including interface areas), activities and services without
exception.

SIMOPS Coordinator (SC)

SC is an essential role when simultaneous operations are involved or where the concurrent activities
involve work groups or disciplines with separate HSE Management Systems. The SC role is a
temporary role where the person is appointed for the duration of the concurrent operations. SC
shall be a competent person appointed by the Asset Owner. Any activity, whether essential or
not, should be stopped when the level of risk exceeds the maximum acceptable level or when
the operations are disrupted, with the exception of activities related to restoring safe conditions. An
authorized and competent appointed SC should have the experience to make such judgements.
During normal operations, the Area Authority (AA) shall be the SIMOPS Coordinator. The
responsibilities and competencies defined for SIMOPS Coordinator in the Section 6: Roles and
Responsibilities shall be applicable for Area Authority to be appointed as SIMOPS coordinator.
Responsibilities of SC are;

Page 15 of 23
  Confirming controls are effectively implemented as per SIMOPS Management Plan /
applicable MOPOs and Bridging or interface Documents
 Validating effectiveness of controls;
 Conducting a pre-operations site Hazard Assessment identifying
 Situation specific risk mitigation actions required;
 Participate in daily planning (IWAP) meetings;
 Deciding upon activity priorities in the event of conflict using the SIMOPS tools such as
MOPO matrix and Restriction tables;
 Familiarizing involved personnel with tasks to be performed and with response measures to
personnel;
 Participate in daily planning (IWAP) meetings;
 Enforcing Permit to Work System and signing as Permit Endorsers;
 Overseeing accurate handover procedures for working areas and equipment.

TYPES OF SIMOPS / MOPO MATRIX

Separate matrices may be constructed for the below several categories of concurrent activities
deemed as SIMOPS:

A SIMOPS matrix will identify “Routine” combinations, i.e. previously encountered and fully risk
assessed concurrent operational activities or situations. Where a combination has not been
previously encountered or risk- assessed and therefore the controls for mitigating the SIMOPS risks
have not been identified, this will be classified as “Non-Routine SIMOPS”.

The SIMOPS Matrix is designed as a reference tool, not as a stand-alone tool and must be used in
conjunction with the SIMOPS Restrictions Tables.

SIMOPS RESTRICTIONS TABLES

The SIMOPS Matrix Decision Tree providesshould be utilized at several occasions in the PTW process
to ascertain SIMOPS. The decision tree facilitates the planning/ scheduling SIMOPs activities during
daily PTW meeting (IWAP), permit authorization by Area Authority, permit issuance by Permit Issuer
(PI) and revalidation of the permits.

POST COMPLETION PHASE

Upon completion of the operations involving SIMOPS, it is recommended to conduct an After

Action Review (AAR) which shall be initiated by the Asset Owner Rep. The feedback obtained in such
a review would include:

 Review of any incidents and near misses to identify lessons to be learnt for safer execution;
 Identifying improvements to the effectiveness of the SIMOPS Management Process;
 Inputs for required periodic reviews of SIMOPS Management Standard; and
 Any interim actions requiring an urgent documented Management of Change.

ROUTINE SIMOPS

Page 16 of 23
Each Group Company shall identify the Routine SIMOPS applicable within their respective business
and document the same via use of SIMOPS matrix or otherwise termed Manuals of Permitted
Operations (MOPO) matrix and Restrictions Table.

The following requirements shall be applicable: (i) The MOPO Matrix / Restriction Table shall be
approved by Asset Owner; (ii) The MOPO Matrix / Restriction Table shall be reviewed and
approved in case of any changes / modifications; and(iii) The approved MOPO Matrix /
Restriction Table shall be readily available in the Permit Control Facility /Control Room or other
designated area.

Temporary Defeat Standard HSECES

IDENTIFICATION OF HSE CRITICAL EQUIPMENT AND SYSTEMS (HSECES)
HSECES is defined as parts of an installation and such of its structures, plant equipment and
systems (including computer programmes) or any part thereof, the failure of which cause or
contribute substantially to; or a purpose of which is to prevent or limit the effect of a major
accident or any accident with severe or catastrophic consequences (as per ADNOC RAM).
INTRODUCTION
A Temporary Defeat or bypass occurs when a HSE Critical Equipment and System (HSECES) is
taken out of service (isolated or shut down) while the equipment or facility being protected
remains in service.
PURPOSE
The purpose of the Temporary Defeat of HSECES Standard is to provide instruction on the
evaluation and mitigation of risk for all occurrences where HSE Critical Equipment &
Systems (HSECES) are temporarily defeated, and to ensure that any such bypasses of
HSECES are authorized, applied, monitored and removed in a correct and controlled
manner.
DURATION OF DEFEATS
All Temporary Defeat shall indicate the maximum time frame allowed for temporary
equipment safeguard bypasses to be in place. As a business rule, as soon as the task is
completed, the HSECES shall be placed back in service.
In certain circumstances, the duration required might be more than 72 hours, it will also
trigger the process of Downgraded Situations (DGS) and the Group Companies shall ensure
that appropriate controls are identified to mitigate the risks.
APPLYING DEFEATS TO HSECES
Only the minimum number of HSECES or systems that can be adequately monitored shall be taken
out of service within the same zone and, as soon as the task is completed, the safety device or
devices shall be placed back in service.

Page 17 of 23
Approval of Controls
The implementation of a defeat on an HSECES requires review and approval at an
appropriate level and notification to all personnel affected by the change. The approval
authority shall be selected according to the impact the defeat has over the plant i.e.
the magnitude of defeat. For example, if the defeat of a HSECES has the potential to
impact several function locations of the plant, its magnitude shall be high and therefore, the
approval authority shall be VP / SVP according to the duration.

The Area Authority (AA) shall ensure that the Temporary Defeat Certificate is valid in accordance
with the requested timeframe and not expired

CATEGORIES OF DEFEAT

(a) Process Defeats: Any process-related bypass required / enacted by the DCS operator during
start-up / shut down (unless specifically designed for start-up or shut-down or controlled by
OEM (Original Equipment Manufacturer) approved Standard Operating Procedure, during
process upset or in the course of handling emergency conditions. The DCS (Distributed
Control System) Supervisor is the Certificate Applicant for process defeat. This role will
initiate the Certificate for such a process defeat, e.g. start-up/shutdown requirements,
stroke check requirements, process upset requirements.
(b) Maintenance Defeats: Any bypass related to enabling the undertaking of corrective or
preventive maintenance. The following are typical means employed as temporary override
devices on instrumented functions: (i) Maintenance Override Switch (MOS) - installed by
design for the purpose of testing and maintenance; (ii) Force: An imposed healthy signal
within an Instrumented Protective System; (iii) Mechanical (Hardware force) - physical
override (examples include wire bridges, pneumatic bypasses, physical removal of protective
device such as a minimum stop); and (IV) Wire jumper. Maintenance / Instrument /
Automation Supervisors shall act as the Performing Authority (PA) and Certificate Applicant
for a defeat request and initiate the certificate as Defeat Authority (DA).

Page 18 of 23
Defeat Performer (DP)

A Defeat Performer (DP) has the overall responsibility for implementation of Defeat Plan for
respective discipline. Defeat Performer (DP) shall be competent with detailed knowledge of facilities
in an asset. They are specifically responsible for:

s per the approved Defeat Risk Assessment)

can be i -
relevant records are updated periodically and that the records are informative and detailed.

WMS Frame Work

INTRODUCTION
Work Management System (WMS) is a safety tool to ensure that the work is properly
controlled, coordinated and communicated. It takes a holistic and robust approach to job safety
analysis inclusive of formal risk assessment, energy isolation, permit to work, temporary defeat and
simultaneous operations with an objective of standardizing these practices across ADNOC Group
Companies.

Purpose
ADNOC Work Management System (WMS) framework describes the key aspects and requirements
to facilitate harmonization and integration of HSE critical processes that include Job Safety Analysis,
Permit To Work, Energy Isolation, Temporary Defeat, and SIMOPS across all ADNOC Group
Companies.

Scope
This document shall be applicable to all ADNOC group companies, employees, contractors,
facilities (including interface areas), activities and services without exception. Contractors shall be
responsible for ensuring that all activities performed within ADNOC operating facilities in the
course of carrying out their contractual requirements are managed in accordance with the
requirements of this document and reported, when applicable, to the contract holder.

Each Group Company shall maintain an up-to-date and approved list of the personnel
authorized as signatories in the PTW System. The following rules shall apply:

(i) The list shall be approved in writing by Asset Owner;

(ii) The list shall be reviewed and approved on an annual basis;
(iii) The list shall be up to date;
(iv) The approved list shall be readily available in the designated areas namely Permit
Control Facility /Control Room or other designated area.

DEVIATION MANAGEMENT:

(a) Application of WMS Standard Deviations and Approvals:

Page 19 of 23
 Asset Owner shall request deviations from the WMS Standards along with the Risk
Assessment, in writing, to the Group Company Corporate HSE Vice President (Or Head) for
review. Group Company Corporate HSE VP shall accordingly endorse the request for
deviation and share it with ADNOC Group HSE for their review. Deviations from WMS
Standards shall be approved by SVP HSE, ADNOC Group. The Asset Owner may cancel
deviations when no longer required and update the addendum in the standard accordingly.

DOCUMENT RETENTION:
For paper based system, the original copy of the signed off documentation and all relevant
attachments required as per WMS Standards shall be retained for a minimum period of
twelve (12) months.
For companies utilizing electronic systems, a majority of the approvals and attachments are
automatically archived in the system. However, other hard copies containing wet ink
signatures or information not captured in the electronic system as part of the
documentation shall be retained for a minimum period of twelve (12) months.

When requested the signed off copies should be made available for auditing and monitoring
purposes. If any documentation and all relevant attachments required as per WMS
Standards form part of an investigation for any reason, the related documents shall
remain in archive for the duration of the investigation.

TRAINING AND COMPETENCY ASSURANCE:

Asset Owner (or his delegate) shall be responsible to authorize and appoint competent WMS
Signatories once the personnel have successfully completed relevant training. The training
shall be followed by a formal written and practical assessment relevant to the role of the
WMS Signatory.

ENERGY ISOLATION STANDARD

Energy Isolation is the process of establishing a secure break in the energy supply to
ensure that inadvertent reconnection is not possible. Effective energy isolation ensures that
equipment remains safely isolated for the duration of any work activity and prevents
accidental re-pressuring or re-energizing of equipment before personnel have ceased work
and equipment integrity has been restored.

PURPOSE
The purpose of this document is to ensure that a well-defined process for
containment of energy is implemented across all ADNOC Group Companies ensuring that a
safe working environment is achieved by providing management control over the various
hazardous work activities. This standard provides a detailed description of the Safe Isolation
/ De-Isolation and guidelines on Lock Out - Tag out Processes for use on all ADNOC
Operational Facilities.

SCOPE
The requirements of this document shall be applicable to all ADNOC group
companies, employees, contractors, facilities (including interface areas), activities, services
and products with without exception.

Page 20 of 23
 ENERGY ISOLATION PROCESS
Energy Isolation (a 9 step process) is an integral part of Work Management System. This
standard shall be used and read in conjunction with the WMS Standard: Permit to Work and
other WMS standards.

WORK REQUEST & PLANNING

Work requests for activities to be conducted.

The IWAP Team shall review the scope of work requests received and identify whether
isolations are required for safe execution of work. The IWAP team shall also identify if
Formal Risk Assessment is required for the isolations.

Defining scope of isolations:

If the work activity requires isolations to be in place, the scope of isolations shall be defined
which includes: (i) System / Equipment to be isolated; (ii) Location of isolation; (iii) Reason
for isolation; and (iv) Properties of hazardous materials involved (toxicity, pressure,
temperature, line size).

In order to ensure the effective implementation of Energy Isolation process, it is

recommended to assign a PTW Coordinator role in who would assist in facilitation of daily
PTW Meeting, maintaining the Energy Isolation Register and Extended Period Isolation
Register, maintaining the PTW and Isolation status display boards, management of Lock
Out Tag Out (LOTO) System, verifying authorization of Isolation Signatories, assisting Asset
Owner and other personnel. The Performing Authority (PA) shall attach the applicable draft
Isolation Certificate along with the permit pack.

Page 21 of 23
 Types of Isolation Certificates
Requirements for isolations shall be reviewed in the IWAP meeting and, on
the basis of the decision outcomes, advice will be given as to the types of Isolation
Certificates to be used.

(i) Process / Mechanical / Instrument and Control Isolation Certificate; and

(ii) Electrical Isolation Certificate.
OUTPUT / CERTIFICATE STATUS
The following are output of the “Work Request and Planning” step: (i) Identification
for the need and type of energy isolation; (ii) Draft Energy Isolation Certificate (as
applicable);
IDENTIFY & APPROVE CONTROLS
INPUTS
(i) Identification for the need and type of energy isolation;
(ii) Draft Energy Isolation Certificate (as applicable);
IDENTIFICATION AND APPROVAL OF CONTROLS PROCESS
The process entails identifying the hazards and risks associated with isolation, determining
the required Baseline Isolations ensuring Minimum Isolation Standards are met, followed by
a formal authorization on the Energy Isolation Certificate. As a part of PTW process and
permit pack validation, AA (or delegate) shall ensure that appropriate isolation
certificates have been identified for the work scope. AA shall then direct the isolation
requirements to the concerned Isolating Authorities (ISA).
Hazard Identification and JSA:
The JSA should cover all stages of the isolation activity as follows:
(i) Preparatory work for the isolation – including depressurization and release of
stored energy, draining/venting, purging and washing out;
(ii) Installation/removal and proving of the isolation;
(iii) The integrity of the isolation during intrusive work, and the compatibility of any
nearby work or operations on shared systems; and
(iv) Requirements for testing and reinstatement of plant (e.g. Pressure/leak testing,
purging, controlled re-pressurization/re-filling).
In all cases, the highest reasonably-practicable standard of isolation shall be applied.
Mechanical isolation shall always be used for work involving:
(i) Confined space entry; and
(ii) Naked flame/spark potential hot work on hazardous areas.
All isolations shall meet the requirements of Baseline Isolation Standards, Minimum Isolation
Standards and Hierarchy of Controls

Page 22 of 23
 Baseline Isolation Standards: A baseline standard is determined by use of Hazard Factor
Assessment (HFA) tool and is an input to the isolation selection process. Additional isolation
controls should always be applied as applicable.

Minimum Isolation Standard: The list provides the minimum isolation method that shall be
applied for any particular isolation.

Hierarchy of Controls: The principle of “hierarchy of controls” shall always be applied when
undertaking the JSA since this will result in a set of isolation controls which meets the principles
of ALARP. The use of the “hierarchy of controls” (as applied to isolations) would indicate
the use of physical disconnection wherever reasonably practicable.

Energy Isolation Certificates

Isolation / de-isolation requirements will be documented in an Energy Isolation Certificates (ICs)

with all necessary supporting documentation and information attached. Isolation Certificates
(ICs) are used as an integral part of the WMS system and support a safe isolation standard by
documenting the status of specified isolations and where the isolation work required is not
detailed on the PTW itself. IC documentation includes the following key elements:

(i) Full description of the types of isolation (i.e. electrical, mechanical/process,

instrumentation, inhibits/overrides, etc.) required;
(ii) Marked up drawings of the isolation points and detailing the isolation
requirements as designed to assist Isolation Authorities (ISA) identify isolation
points in the planning and execution of the isolation. This information might be in the
form of Process & Instrumentation Diagrams (P&IDs) and/or Electrical Single Line
Diagrams (SLDs);
(iii) Unique identification name/number for all isolation points together with the
requirements for the marking of lines/equipment to aid correct identification of break
in;
(iv) Method of isolation of a particular isolation point (i.e. valve, vent, drain, blind, spool,
bleed, fuses, disconnect cable, etc.) and description of both the Isolated State (e.g. valve
closed, blind Installed, breaker Racked Out) and the De-Isolated State (e.g. valve
Open, blind Removed, breaker Racked in);

Page 23 of 23