1、Security for Worldwide Offshore Oil and Natural Gas OperationsAPI RECOMMENDED PRACTICE 70IFIRST EDITION, MAY 2004REAFFIRMED, JANUARY 2012Security for Worldwide Offshore Oil and Natural Gas OperationsUpstream SegmentAPI RECOMMENDED PRACTICE 70IFIRST EDITION, MAY 2004REAFFIRMED, JANUARY 2012SPECIAL NO
2、TESThis document is intended to offer guidance to members of the petroleum industryengaged in exploration and production operations. Individual companies have assessed theirown security needs and have implemented security measures they consider appropriate. Thisdocument is not intended to supplant t
3、he measures adopted by individual companies or tooffer commentary regarding the effectiveness of individual operator or contractor efforts.With respect to particular circumstances, local, state and federal laws and regulations shouldbe reviewed.Information concerning security risks and proper precau
4、tions with respect to particularmaterials and conditions should be obtained from individual companies or the manufactureror supplier of a particular material.API is not undertaking to meet the duties of employers, manufacturers, or suppliers towarn and properly train and equip their employees, and o
5、thers exposed, concerning securityrisks and precautions, nor undertaking their obligation under local, state, national or federallaws.To the extent this document contains company specific information, such information is tobe considered confidential.All rights reserved. No part of this work may be r
6、eproduced, stored in a retrieval system, or transmitted by any means, electronic, mechanical, photocopying, recording, or otherwise, without prior written permission from the publisher. Contact the Publisher, API Publishing Services, 1220 L Street, N.W., Washington, D.C. 20005.Copyright 2004 America
7、n Petroleum InstituteFOREWORDThis recommended practice is under the jurisdiction of the American Petroleum InstituteUpstream Departments Executive Committee on Drilling and Production Operations. Thegoal of this voluntary recommended practice is to assist the offshore oil and gas industry inpromotin
8、g security. THE PUBLICATION DOES NOT, HOWEVER, PURPORT TO BE SOCOMPREHENSIVE AS TO PRESENT ALL OF THE RECOMMENDED OPERATINGPRACTICES THAT CAN AFFECT SECURITY IN OFFSHORE OIL AND GAS OPERA-TIONS. API publications may be used by anyone desiring to do so. Every effort has beenmade by the Institute to a
9、ssure the accuracy and reliability of the data contained in them;however, the Institute makes no representation, warranty, or guarantee in connection withthis publication and hereby expressly disclaims any liability or responsibility for loss ordamage resulting from its use or for the violation of a
10、ny national, federal, state, municipal orother regulation with which this publication may conflict. API publications may be used by anyone desiring to do so. Every effort has been made bythe Institute to assure the accuracy and reliability of the data contained in them; however, theInstitute makes n
11、o representation, warranty, or guarantee in connection with this publicationand hereby expressly disclaims any liability or responsibility for loss or damage resultingfrom its use or for the violation of any federal, state, or municipal regulation with which thispublication may conflict.Suggested re
12、visions are invited and should be submitted to API, Standards Department,1220 L Street, NW, Washington, DC 20005iiiCONTENTSPage1 SCOPE, PURPOSE AND OBJECTIVE. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12 DEFINITIONS. . . . . . . . . . . . . . . . . . . . . . . . . . . .
13、 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13 RELEVANT OPERATIONAL STANDARDS AND INDUSTRY PRACTICES . . . 14 SECURITY POLICY . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25 SECURITY AWARENESS . . . . . . . . . . . . . . . . . .
14、 . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26 SECURITY VULNERABILITY ASSESSMENT (SVA). . . . . . . . . . . . . . . . . . . . . . . 27 SECURITY PLANS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37.1 Security Plan Considerations
15、. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37.2 Security Plan Elements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37.3 Security Levels. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
16、. . . . . . . . . . . . 37.4 Security Level Actions. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3APPENDIX I VOLUNTARY COMMUNICATION PROTOCOL . . . . . . . . . . . . . . . . 5APPENDIX II EXAMPLE SECURITY POLICY. . . . . . . . . . . . . . . . . . . . . .
17、. . . . . . . . . 7APPENDIX III EXAMPLE MODEL SECURITY PLAN . . . . . . . . . . . . . . . . . . . . . . . . . 9APPENDIX IV SECURITY VULNERABILITY ASSESSMENT (SVA) . . . . . . . . . . . 13Tables1 List of Scenarios . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
18、 . . . . . . . 132 Consequence Score . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 133 Vulnerability Score . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 144 Vulnerability a contrac-tor is also the
19、 individual, partnership, firm, or corporationretained by the owner or operator to perform other work orprovide supplies or equipment. The term contractor shall alsoinclude subcontractors.2.3 facility:Any artificial island, installation, or otherdevice permanently or temporarily attached to the subs
20、oil orseabed of offshore locations, erected for the purpose ofexploring for, developing, or producing oil, natural gas ormineral resources. This definition includes mobile offshoredrilling units (MODUs).2.4 facility owner/operator: The individual, partner-ship, firm, or corporation having control or
21、 management ofoffshore operations. The owner/operator may be a lessee, des-ignated agent of the lessee(s), or holder of operating rightsunder an operating agreement. 2.5 facility security officer (FSO):The individual thatis responsible for security duties as specified by the owner/operator at one or
22、 more facilities, depending on the number ortypes of facilities a company operates. Where a person acts asthe FSO for more than one facility, it should be clearly identi-fied in the facility security plan for which facilities this personis responsible. The FSO may be a collateral duty provided thepe
23、rson is fully capable to perform the duties and responsibili-ties required of the FSO.2.6 point of embarkation: The heliport or dock facilityfrom which personnel and materials are shipped to orreceived from the offshore facility. Appropriate security mea-sures at these facilities are critical.2.7 se
24、curity vulnerability assessment (SVA):A sec-ondary evaluation that examines a facilitys characteristicsand operations to identify potential threats or vulnerabilitiesand existing and prospective security measures and proce-dures designed to protect a facility. 2.8 threshold characteristics/operating
25、 condi-tions: Criteria established by relevant governmental agen-cies or the facility owner/operator for screening criticaloffshore facilities. This is the primary Facility evaluation. 3 Relevant Operational Standards and Industry PracticesAPI and the oil and gas industry maintain a number ofdesign
26、and operational recommended practices that addressaspects of safety and security in offshore oil and natural gasoperations. While none of these were developed specificallyfor security reasons, aspects of them are directly applicable.In many cases, prudent safety procedures would also serve toaddress
27、 appropriate security precautions. These recom-mended practices provide a starting point for developingguidance on security, if needed, at offshore oil and natural gasoperating facilities.The following list of recommended practices address oper-ational measures: Recommended Practice 2A, Planning, De
28、signing, Con-structing Fixed Offshore Platforms. Contains engineer-ing design principles and practices for fixed offshoreplatforms including assessment of existing platforms,and fire, blast, and accidental overloading. Recommended Practice 2FPS, Planning, Designing,Constructing Floating Production S
29、ystems (FPSOs).This recommended practice provides guidelines fordesign, fabrication, installation, inspection and opera-tion of floating production systems. Recommended Practice 2T, Planning, Designing, andConstructing Tension Leg Platforms (TLPs). Summa-rizes available information and guidance for
30、the design,fabrication and installation of a tension leg platform. Recommended Practice 14B, Design, Installation,Repair and Operation of Subsurface Safety Valve Sys-tems. Provides guidelines for safe operating practicesof equipment used to prevent accidental release ofhydrocarbons to the environmen
31、t in the event ofunforeseen circumstances.2 API RECOMMENDEDPRACTICE70I Recommended Practice 14C, Analysis, Design, Instal-lation and Testing of Basic Surface Safety Systems onOffshore Production Platforms. Describes processesand systems for emergency well shut-ins on offshoreplatforms. Recommended P
32、ractice 14H, Installation, Maintenanceand Repair of Surface Safety Valves and UnderwaterSafety Valves Offshore. Provides guidelines for safeoperating practices of equipment used to prevent acci-dental release of hydrocarbons to the environment inthe event of unforeseen circumstances. Recommended Pra
33、ctice 14J, Design and HazardousAnalysis for Offshore Production Platforms. Providesprocedures and guidelines for planning, designing, andarranging offshore production facilities and for per-forming a hazardous operations analysis. Recommended Practice 75, Development of a Safetyand Environmental Man
34、agement Program for OuterContinental Shelf Operations and Facilities. Provideguidance in preparing safety and environmental man-agement programs for offshore facilities.The following information sources and recommendedpractices address prevention, safety, communications, andemergency response: Recom
35、mended Practice 49, Drilling and Well ServicingOperations involving Hydrogen Sulfide. Describesresponse plans for wells involving hydrogen sulfide. Recommended Practice 54, Occupational Safety for Oiland Gas Well Drilling and Servicing Operations.Describes emergency response plans for oil and natura
36、lgas well drilling and servicing. Recommended Practice T1, Orientation Program forPersonnel Going Offshore for the First Time. 4 Security PolicyEach owner/operator should develop a policy that clearlydefines its security goals and commitments including the pro-tection of personnel, facilities and ot
37、her assets. A sample pol-icy is included in Appendix B.5 Security Awareness5.1With regard to manned facilities, a key step to improv-ing security and preventing an incident is ensuring that allemployees are aware of security issues that could affect theirworking environment. 5.2Facility owners/opera
38、torsand contractors should keepabreast of the latest security alerts and government intelli-gence information and disseminate this information, asappropriate, throughout the organization. Facility owners/operators should evaluate and respond appropriately to thisinformation to safeguard personnel an
39、d assets. 5.3Facility owners/operators should report, as appropriate,suspicious activities and behaviors, attempted incursions, ter-rorist threats, or actual events to the appropriate agencies. SeeAppendix A for an example communications protocol. 5.4Each facility owner/operator should establish cle
40、arcommunication channels and procedures for assessing, pre-paring for, and responding to potential or actual threats.5.5Each facility owner/operator should establish andmaintain effective liaison with local emergency responseagencies and organizations, as appropriate.5.6Each facility owner/operator
41、should be aware of exist-ing security regulations, standards and operating practices asthey relate to their assets.5.7Each facility owner/operator should develop a policyfor control of relevant security sensitive information (SSI).6 Security Vulnerability Assessment (SVA)Prior to conducting the SVA,
42、 the first step should be a char-acterization of the facility or the group of similar facilitiesattributes, e.g. the quantity of oil and/or natural gas produced,the number of personnel on board, proximity to shippinglanes, physical access to the facility, and existing securitymeasures and procedures
43、 already in place, such as at thepoint(s) of embarkation.If a facility meets or exceeds any of the threshold charac-teristics or operating conditions established by the relevantgovernment, or the owner/operator, a SVA may be required.Additionally, a facility may by deemed critical by a particu-lar o
44、wner/operator for a variety of other reasons. Eachowner/operator should not only review the threshold charac-teristics/operating conditions, if applicable, they should alsodetermine if a SVA is warranted based on their own uniquecriteria.If the characterization results reflect appropriate securityme
45、asures are already in place at point of embarkation, a SVAand additional measures may not be warranted. After an initial evaluation to determine which facilities arecritical, a security vulnerability assessment (SVA) should beconducted for all critical facilities. It may only be necessaryto conduct
46、a SVA for those facilities with similar attributes.The SVA is a secondary evaluation that examines a facilitys character-istics and operations to identify potential threats or vulnera-bilities and existing and prospective security measures andprocedures designed to protect a facility.An example meth
47、odology and criteria for conducting anSVA is identified in Appendix D. Other recognized SVAmethodologies may be used and must be documented. SECURITYFORWORLDWIDEOFFSHOREOILANDNATURALGASOPERATIONS37 Security Plans7.1 Security Plan ConsiderationsSecurity planning starts with sound policy and procedure
48、sin place. The facility owner/operator should develop either anowner/operator-wide, multiple-facility or facility-specificsecurity plan. Refer to Appendix C for an example ModelSecurity Plan.The security plan should include the following elements: 1. The measures being taken to detect or deter an at
49、tackor incursion; 2. The responses that may be considered at various secu-rity level conditions, including the response to an actualattack, intrusion, or event, 3. Means of mitigating the consequences of an incident, ifany, and; 4. If applicable, any additional security measures identi-fied in the SVA described in Section 6.The plan should be kept confidential for security reasons.The plan should be reevaluated and updated periodically. A brief overview of the individual framework elements isprovided in this section, as well as a roadmap to the more spe-cific and detailed descr
