1、Security for Offshore Oil andNatural Gas OperationsAPI RECOMMENDED PRACTICE 70FIRST EDITION, MARCH 2003REAFFIRMED, SEPTEMBER 2010Security for Offshore Oil andNatural Gas OperationsUpstream SegmentAPI RECOMMENDED PRACTICE 70FIRST EDITION, MARCH 2003REAFFIRMED, SEPTEMBER 2010SPECIAL NOTESThis document
2、 is intended to offer guidance to members of the petroleum industryengaged in exploration and production operations. Individual companies have assessed theirown security needs and have implemented security measures they consider appropriate.This document is not intended to supplant the measures adop
3、ted by individual companies orto offer commentary regarding the effectiveness of individual operator or contractor efforts.With respect to particular circumstances, local, state and federal laws and regulations shouldbe reviewed.Information concerning security risks and proper precautions with respe
4、ct to particularmaterials and conditions should be obtained from individual companies or the manufactureror supplier of a particular material.API is not undertaking to meet the duties of employers, manufacturers, or suppliers towarn and properly train and equip their employees, and others exposed, c
5、oncerning securityrisks and precautions, nor undertaking their obligation under local, state or federal laws.To the extent this document contains company specic information, such information is tobe considered condential.All rights reserved. No part of this work may be reproduced, stored in a retrie
6、val system, or transmitted by any means, electronic, mechanical, photocopying, recording, or otherwise, without prior written permission from the publisher. Contact the Publisher, API Publishing Services, 1220 L Street, N.W., Washington, D.C. 20005.Copyright 2003 American Petroleum InstituteFOREWORD
7、This recommended practice is under the jurisdiction of the American Petroleum InstituteUpstream Departments Executive Committee on Drilling and Production Operations. It wasdeveloped with assistance from the Offshore Operators Committee, the Gulf Safety Commit-tee, the United States Coast Guard, and
8、 the Minerals Management Service. The goal of thisvoluntary recommended practice is to assist the offshore oil and gas industry in promotingfacility security. THE PUBLICATION DOES NOT, HOWEVER, PURPORT TO BE SOCOMPREHENSIVE AS TO PRESENT ALL OF THE RECOMMENDED OPERATINGPRACTICES THAT CAN AFFECT SECU
9、RITY IN OFFSHORE OIL AND GAS OPERA-TIONS. API publications may be used by anyone desiring to do so. Every effort has been made bythe Institute to assure the accuracy and reliability of the data contained in them; however, theInstitute makes no representation, warranty, or guarantee in connection wit
10、h this publicationand hereby expressly disclaims any liability or responsibility for loss or damage resultingfrom its use or for the violation of any federal, state, or municipal regulation with which thispublication may conict.Suggested revisions are invited and should be submitted to the General M
11、anager,Upstream, American Petroleum Institute, 1220 L Street, N.W., Washington, D.C. 20005.iiiCONTENTSPage1 SCOPE, PURPOSE AND OBJECTIVE. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12 DEFINITIONS. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
12、. . . . . . . . . . . . . . . . . . . 13 RELEVANT OPERATIONAL STANDARDS AND INDUSTRY PRACTICES . . . 14 SECURITY POLICY . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25 SECURITY AWARENESS . . . . . . . . . . . . . . . . . . . . . . . . . . . .
13、. . . . . . . . . . . . . . . . . . 26 SECURITY VULNERABILITY ASSESSMENT (SVA). . . . . . . . . . . . . . . . . . . . . . . 27 SECURITY PLANS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37.1 Security Plan Considerations. . . . . . . . . . .
14、 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37.2 Security Plan Elements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37.3 Security Levels. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
15、 . 37.4 Security Level Actions. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3APPENDIX A VOLUNTARY GULF OF MEXICO COMMUNICATION PROTOCOL . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5APPENDIX B COMPARISON OF HOMELAND SECURITY ADVISORY SYSTEM
16、AND MARITIME SECURITY LEVELS . . . . . . . . . . . . . . . . 7APPENDIX C EXAMPLE SECURITY POLICY . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9APPENDIX D EXAMPLE MODEL SECURITY PLAN . . . . . . . . . . . . . . . . . . . . . . . . 11APPENDIX E SECURITY VULNERABILITY ASSESSMENT (SVA) .
17、. . . . . . . . . . 15Figures1 Comparison of 3-level CG (MARSEC) System with the 5-level Homeland Security Advisory System (HSAC) . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7Tables1 List of Scenarios . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
18、 . . . . . . . 152 Consequence Score . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 153 Vulnerability Score . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 164 Vulnerability and Consequence Matrix .
19、. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 165 Mitigation Determination Worksheet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16v1Security for Offshore Oil and Natural Gas Operations1 Scope, Purpose and ObjectiveThis publication is intended to assist th
20、e offshore oil andnatural gas drilling and producing operators and contractorsin assessing security needs during the performance of oil andnatural gas operations. The offshore oil and natural gas indus-try uses a wide variety of contractors in drilling, production,and construction activities. Contra
21、ctors typically are in one ofthe following categories: drilling, workover, well servicing,construction, electrical, mechanical, transportation, painting,operating, and catering/janitorial.2 Definitions2.1 company security officer (CSO):The CSO isresponsible for the maintenance of the Security Plan.
22、TheCSO shall have access to relevant security information. TheCSO shall determine which information, and by what means,it is communicated. The CSO may delegate duties as neces-sary to assure timely completion of responsibilities. The CSOmay be assigned other duties and responsibilities unrelated tos
23、ecurity. 2.2 contractor:The individual, partnership, rm, or cor-poration that is hired to do a specic job or service, such as aproduction operator, drilling or well servicing contractor or toprovide contract employees to an owner/operator; a contrac-tor is also the individual, partnership, rm, or co
24、rporationretained by the owner or operator to perform other work orprovide supplies or equipment. The term contractor shall alsoinclude subcontractors.2.3 facility: Any articial island, installation, or otherdevice permanently or temporarily attached to the subsoil orseabed of offshore locations, er
25、ected for the purpose ofexploring for, developing, or producing oil, natural gas ormineral resources. This denition includes mobile offshoredrilling units (MODUs), but does not include pipelines ordeepwater ports. 2.4 facility owner/operator: The individual, partner-ship, rm, or corporation having c
26、ontrol or management ofoffshore operations. The owner/operator may be a lessee, des-ignated agent of the lessee(s), or holder of operating rightsunder an operating agreement. 2.5 facility security officer (FSO):The individual thatis responsible for security duties as specied by the owner/operator at
27、 one or more facilities, depending on the number ortypes of facilities a company operates. Where a person acts asthe FSO for more than one facility, it should be clearly identi-ed in the facility security plan for which facilities this personis responsible. The FSO may be a collateral duty provided
28、theperson is fully capable to perform the duties and responsibili-ties required of the FSO.2.6 point of embarkation: The heliport or dock facilityfrom which personnel and materials are shipped to orreceived from the offshore facility.2.7 security vulnerability assessment (SVA):A sec-ondary evaluatio
29、n that examines a facilitys characteristicsand operations to identify potential threats or vulnerabilitiesand existing and prospective security measures and proce-dures designed to protect a facility.2.8 threshold characteristics:Criteria established andpublished by the U.S. Coast Guard for screenin
30、g offshorefacilities. 3 Relevant Operational Standards and Industry PracticesAPI and the oil and gas industry maintain a number ofdesign and operational recommended practices that addressaspects of safety and security in offshore oil and natural gasoperations. While none of these were developed spec
31、icallyfor security reasons, aspects of them are directly applicable.In many cases, prudent safety procedures would also serve toaddress appropriate security precautions. These recom-mended practices provide a starting point for developingguidance on security, if needed, at offshore oil and natural g
32、asoperating facilities.The following list of recommended practices address oper-ational measures: Recommended Practice 2A Planning, Designing, Con-structing Fixed Offshore Platforms. Contains engineer-ing design principles and practices for xed offshoreplatforms including assessment of existing plat
33、forms,and re, blast, and accidental overloading. Recommended Practice 2FPS Planning, Designing,Constructing Floating Production Systems (FPSOs).This recommended practice provides guidelines fordesign, fabrication, installation, inspection and opera-tion of oating production systems. Recommended Prac
34、tice 2T Planning, Designing, andConstructing Tension Leg Platforms (TLPs).Summa-rizes available information and guidance for the design,fabrication and installation of a tension leg platform. Recommended Practice 14B Design, Installation,Repair and Operation of Subsurface Safety Valve Sys-tems. Prov
35、ides guidelines for safe operating practicesof equipment used to prevent accidental release ofhydrocarbons to the environment in the event ofunforeseen circumstances.2 API RECOMMENDEDPRACTICE70 Recommended Practice 14C Analysis, Design, Installa-tion and Testing of Basic Surface Safety Systems onOff
36、shore Production Platforms. Describes processesand systems for emergency well shut-ins on offshoreplatforms. Recommended Practice 14H Installation, Maintenanceand Repair of Surface Safety Valves and UnderwaterSafety Valves Offshore.Provides guidelines for safeoperating practices of equipment used to
37、 prevent acci-dental release of hydrocarbons to the environment inthe event of unforeseen circumstances. Recommended Practice 14J Design and HazardousAnalysis for Offshore Production Platforms.Providesprocedures and guidelines for planning, designing, andarranging offshore production facilities and
38、for per-forming a hazardous operations analysis. Recommended Practice 75 Development of a Safetyand Environmental Management Program for OuterContinental Shelf Operations and Facilities.Provideguidance in preparing safety and environmental man-agement programs for offshore facilities.The following i
39、nformation sources and recommendedpractices address prevention, safety, communications, andemergency response: Recommended Practice 49 Drilling and Well ServicingOperations involving Hydrogen Sulde.Describesresponse plans for wells involving hydrogen sulde. Recommended Practice 54 Occupational Safet
40、y for Oiland Gas Well Drilling and Servicing Operations.Describes emergency response plans for oil and naturalgas well drilling and servicing. Recommended Practice T1 Orientation Program forPersonnel Going Offshore for the First Time. Publication 761Model Risk Management Plan for E 2. The responses
41、that may be considered at various secu-rity alert conditions, including the response to an actualattack, intrusion, or event; 3. Means of mitigating the consequences of an incident, ifany, and; 4. If applicable, any additional security measures identi-ed in the SVA described in Section 6.The plan sh
42、ould be kept condential for security reasons.The plan should be reevaluated and updated periodically. A brief overview of the individual framework elements isprovided in this section, as well as a roadmap to the more spe-cic and detailed description of the individual elements thatcomprise the remain
43、der of this recommended practice.7.2 SECURITY PLAN ELEMENTS In developing a security plan, the facility owner/operatorshould consider several basic elements. This document recognizes the importance of exibility indesigning security plans and provides guidance commensu-rate with this need.It is impor
44、tant to recognize that a security plan could be ahighly integrated and iterative process. 7.2.1 Develop Baseline Security Plan A plan is developed to address awareness, communicationand response actions, as applicable to the most signicantrisks to the facility. The output of the SVA, if conducted,sh
45、ould be included in the formulation of the plan.Minimum Elements to be considered: Management and employee security responsibilities; Communications within the company and with relevantgovernmental authorities; Facility access (personnel, goods and equipment); Restricted area(s), if applicable; Secu
46、rity training and drills; Assessment of security drills and exercises; Handling security sensitive related information (SSI)and security related communications; Audits and inspections; Recordkeeping; Additional measures as determined by the SVA, if con-ducted; and Coordination with Point of Embarkat
47、ion.7.3 SECURITY LEVELS7.4 SECURITY LEVEL ACTIONSFive HSAS levels of escalating threat conditions have beendened. These correspond to the three MARSEC levels. Thefollowing actions may be utilized. Deviations should beexpected. 7.4.1 Threat Level Green (Low)Applies when there is a minimal risk of thr
48、eat activitydirected toward the offshore oil and gas industry. The owner/operator should have a baseline security plan and monitoringof intelligence information in place.1. Security plan reviews and security exercises are con-ducted periodically.2. Security Awareness, Personnel Vigilance and Inciden
49、tReporting Programs ongoing.3. Personnel are advised on the relevant security plan.Selected measures from higher threat levels may be con-sidered for application on a consistent or random basis. Thislevel should be capable of being maintained indenitely.7.4.2 Threat Level Blue (Guarded)The owner/operator should continue to actively monitorintelligence information. In addition to the Level Green mea-sures, the owner/operator should:1. Communicate threat level and specic security infor-mation to appropriate personnel.2. Review plan and commun
