Page 444 - Offshore Electrical Engineering Manual

P. 444

CHAPTER

Preparation and Use of 2

Performance Standards

This chapter is equally applicable to preparing or reviewing performance standards.
It is a requirement that the duty holder establishes suitable acceptance criteria for
measuring, demonstrating and recording the suitability of Safety and Environmental
Critical Elements (SECEs). The industry has in general adopted the term perfor-
mance standards for these criteria, and unless the duty holder requires a different
approach, engineers should support this terminology.
A performance standard describes the essential requirements that an SECE
must maintain, or provide on demand. It is a statement which can be expressed
in qualitative or quantitative terms of the performance required of a system, item
of equipment or procedure and which is used as the basis for managing the haz-
ard and any events requiring emergency response, through the lifecycle of the
installation.
For a performance standard to be suitable, its monitored criteria should satisfy all
the following conditions:

1. Each performance standard criterion requires measurement of a particular capa-
bility or parameter of the SECE component/system.
2. The measured parameter provides evidence of the ability of the component/sys-
tem to prevent, or limit the effect of, a major accident, based on the findings of
the installation’s safety case.
3. Acceptance criteria/range must be defined clearly for the parameter in question.
4. Each parameter specified must be easily monitored/measured on the installa-
tion or by inspection of maintenance records/logs such that success or failure to
achieve the particular criterion is clearly demonstrated.

Experience indicates that performance standards should be at a level that
sets an objective for the SECE; it should not describe how that objective is to be
achieved, or how it is to be demonstrated (verified) as this is part of the Verification
Scheme. They should be specified for all parts of an SECE that are critical for safe
operation.
The consequence of a performance standard not being met (demonstrated) should
also be considered. If the consequences are such that a major accident cannot result,
or a significant reduction in the effectiveness to detect, control or monitor a major
accident cannot result, then the performance should not be considered as necessary.
It is recommended that this is discussed with the originator and the safety authority
before deletion.

439 440 441 442 443 444 445 446 447 448 449