Canada Oil and Gas Installations Regulations (SOR/96-118)

18 (1) Every installation shall have an emergency shutdown system that is capable of shutting down and isolating all potential sources of ignition and sources of flammable liquids or gases.

(2) An emergency shutdown system shall be designed and installed so that when activated it causes

• (a) an audible and visual signal that indicates the cause of its activation and the identity of the equipment that has been shut down and isolated to be given in the appropriate control point; and

• (b) an audible alarm to be sounded through the general alarm system required by section 34 unless the alarm is overridden by the control point operator.

(3) In the case of a production installation, an emergency shutdown system shall be designed to ensure

• (a) that there are at least two levels of shutdown; and

• (b) subject to subsection (13), that the following will occur within the time and in the sequence set out in the operations manual:

  • (i) the shutdown of all production facilities and associated test facilities,

  • (ii) the closure of all surface inlet manifold safety valves and production riser safety valves,

  • (iii) the closure of all Christmas tree safety valves and all downhole safety valves, and

  • (iv) the shutdown of all utilities except the equipment listed in subsection 12(1).

(4) In the case of a production installation, manual operation of an emergency shutdown system shall be in accordance with American Petroleum Institute RP 14C, Recommended Practice for Analysis, Design, Installation and Testing of Basic Surface Safety Systems for Offshore Production Platforms.

(5) In the case of a drilling installation, an emergency shutdown system shall be designed to ensure

• (a) the shutdown within the time and in the sequence set out in the operations manual of all utilities, except the equipment listed in subsection 12(1); and

• (b) that shutdown is possible from at least two strategic locations.

(6) The emergency shutdown system shall be designed to permit the selective shutdown of the ventilation systems required by section 10, except the fans necessary for supplying combustion air to prime movers for the production of electrical power.

(7) At least one of the controls of the emergency shutdown system shall be located outside hazardous areas.

(8) After an emergency shutdown, the emergency shutdown system shall stay in a locked-out condition until it is manually reset.

(9) The emergency shutdown system shall be connected to a source of power in such a way that, in the event of a failure of the primary source of power, there is automatic changeover to an emergency source of power and audible and visual alarms indicating that failure are given at the appropriate control point.

(10) Where a hydraulic or pneumatic accumulator is used to operate any part of the emergency system, the accumulator shall

• (a) be located as close as is practicable to the part that it is designed to operate, except where that part is part of a subsea production system; and

• (b) have capacity for at least three operations.

(11) In the event of a failure of the accumulator referred to in subsection (10), the shutdown valves shall revert to a fail-safe mode.

(12) All cables and pneumatic and hydraulic power lines that are part of the emergency shutdown system shall

• (a) in the case of cables and power lines that are exposed to the risk of mechanical or fire damage, be protected

  • (i) by metal channels or casings, or

  • (ii) by being enclosed in a steel conduit or an equivalent covering; and

• (b) as far as practicable, be segregated or routed away from the process and utility control systems so that any damage to those systems does not affect the shutdown system.

(13) In the case of a production installation, on activation of the emergency shutdown system, the surface-controlled subsurface safety valve shall close in not more than two minutes after the Christmas tree safety valve has closed, except where a longer delay is justified by the mechanical or production characteristics of the well.