02 exhibit i services (3)

8/10/2019 02 Exhibit i Services (3)

1/27


2/27

Vender: OGPE-VSP Page 2 of 27

Provision of Upgrading Emergency Shutdown and Flame Detector on FPU DH01, Block 05.1a, OffshoreVietnam

- The ESD valves will de-energize on electrical, pneumatic or hydraulic failure and

return to their failsafe condition.

There are four classes of safety shutdown provided on the platform:

- Level 1: Emergency Shutdown (ESD): It is initiated by manual operation of an ESD

push button located in various areas on DH-01. An ESD initiates a full platformshutdown:

HP flare KO drum drain valve closes,

LP flare KO drum drain valve (XV14) closes,

Shutdown all process operations. Oil/gas/water separation system depressive

to flare,

All vents to flare open. All ESD valves move to their failsafe positions,

Gas turbines trip and inhibit re-start,

Diesel generators trip and inhibit re-start,

All down hole safety valves close,

All tree and manifold valves close.

Shutdown DH-02 as emergency shutdown DH-02.

The following systems, powered by the UPS, will continue to function:

Fire and gas detection system,

Navigational aids/fog horn system,

Communication system,

Diesel driven fire pumps,

Diesel driven foam pumps,

Emergency lighting

Emergency generator starts

- Level 2: Fire and Gas Shutdown (SSD Surface): It is initiated by signals from the

fire and gas control panel (when two or more coincident detection circuits within the

effected zone have been activated) and shutdowns the hazard effected area. This also

initiates the following:

Shutdown process or other equipment located in the affected area.

Hydrocarbon inventories will be vented from the affected areas.

Non-essential electrical supply in the control room and switchgear roommay be isolated.

Shutdown DH-02 from DH-01

- Level 3: Production Shutdown (PSD): It is initiated automatically by an undesirable

process state occurring within a system, vessel or essential equipment. A PSD

initiates shutdown and blow-down of the Production/Process System:


3/27



Shutdown of all production wells.

Closure of wellhead safety valves (Subsea Tree wing valve).

Shut-in all process streams and separators.

Shut down of produced water and water injection.

Process shutdown DH-02.

In 1994, as part of the modification converting the Deep Sea Pioneer semi-submersible rig to the DaiHung 01 FPU, the ESD and the Flame Detector System was installed for six old wells (1P, 2P, 3P,4P, 4X and 5P). In 2005, a new ESD cabinet was built for five new wells (7X, 8P, 9P, 10P, 12X)based on relay logic technology. In 2007, a ESD for a dual bore well (6P/7P) was extended insidethe new ESD cabinet.As the ESD system and Flame detector system are too old and spare parts are obsoleted, faults occurfluently and downtime increase. Therefore, an modification and upgrading for the ESD system andflame detector system is necessary.

1.3. Scope

This specification covers the minimum requirements for the design, manufacture, inspection andtesting, delivery and installation supervision of the emergency shutdown system and Flame detectorsystem dedicated to the monitoring and control of DH-01 and interfaces with existing ProcessControl System.

1.4. Acronyms and Abbreviations

The following abbreviations are used in this document:

API American Petroleum Institute

AISI American International Standards Institute

BDV Blow-down valve

BS British Standards

CPU Central Processing Unit

ESD Emergency Shutdown

EMI Electro-Magnetic Interference

Ex(d) Explosion Proof

Ex(e) Increased Safety

Ex(i) Intrinsic Safety

F&G Fire and Gas

FD Flame detector

FEED Front End Engineering and Design

FSO Floating Storage and Offloading Vessel

FPU-DH1 Floating Production Unit - Dai Hung 1

HIPPS High Integrity Pressure Protection System

HR Hydraulic Room (Formerly known as CAMCO Room)

IEC International Electrotechnical Commission

IPF Instrument Protected FunctionIS Intrinsically Safe


4/27



ISA Instrument Society of America

ISO International Standards Organization

I/O Input/output

LED Light Emitting Diode

MCC Motor Control Centre

MDB Mid Depth Buoy

MOS Maintenance Override Switch

MV Master Valve

HMI Human Machine Interface

OIS Operator Interface Station

OOS Out of Sequence

PCR Process Control Room (FPU-DH1)PCS Process Control System

PES Programmable Electronic System

PLC Programmable Logic Controller

PLEM Pipeline End Manifold

PSD Process Shutdown

PSHH Pressure Switch High High

PSV Pressure safety Valve

PVEP Petro Vietnam Exploration and Production Company

QRA Quantitative Risk Assessment

RFI Radio Frequency Interference

SCSSV Surface Controlled Subsurface Safety Valve

SDS Shutdown System

SIL Safety Integrity Level

SIS Safety Instrumented System (ESD & F&G)

SPDT Single Pole Double Throw

SSV Surface Safety Valve

SUO Start Up Override

UCP Unit Control Panel

UPS Uninterruptible Power Supply

USD Unit Shutdown

VAC Volts (Alternating Current)

VDC Volts (Direct Current)

VDRL OGPE-VSP Document Requirement List

VDU Visual Display Unit


5/27



XV Shutdown Valve

WHCP Wellhead Control Panel

WHP-DH2 Wellhead Platform - Dai Hung 2

WV Wing Valve

1.5. Definitions

Company PVEP POC

OGPE-VSP OGPE-VSP of Equipment, including Sub-OGPE-VSP(s) appointedby the OGPE-VSP to carry out part or all the work. All Sub-OGPE-

VSPs shall be subject to approval by the Company. All technicalterms and conditions applicable to the OGPE-VSP shall also be

applicable to the Sub-OGPE-VSPs. The OGPE-VSP shall assumeoverall responsibility for the equipment supplied herein.

INSPECTOR The inspector shall mean the person appointed to act on behalf of the

Purchaser in carrying out witness testing of equipment at the OGPE-VSP's or the Sub OGPE-VSPs works

OGPE-VSP Appointed Engineering OGPE-VSP/ Fabricator

MANUFACTURER The Manufacturer for the production of the Goods or any part thereof

SUBCONTRACT "SUBCONTRACT" means any contract, other than this PURCHASEORDER, between the OGPE-VSP and any other party for theperformance of any part of the PURCHASE ORDER.

Integrated System A system including subsystems which are directly connectable andcommunicating together without specific development. Sub-systems

can introduce some limitations to the functionalities of the system

Workstation A basic set which allows one operator to achieve control andmonitoring. In addition some stations can achieve other functions

like Engineering and maintenance functions. A station is made up ofone electronic rack, one keyboard, and one or two screens

1.6. Project References (Mandatory documents)

The SIS specification is an integral part of all mandatory documents including the following: ProjectSpecificationsD50-005 Matrix shutdownD50-006 Matrix shutdown (Cont.)

D50-007 Matrix shutdown (Cont.)

D50E ESD/Annunciator panel extend cabinet.3-DJ-5000s Schematic emergency shutdown system.

1.7. Standards and Codes

As a minimum, all equipment supplied as part of this package shall be designed, manufactured anddelivered in accordance with the relevant section of the national/ international Codes, Standards andRegulations, as listed below. The latest editions of codes and standards, including all addenda,supplements or revisions current at time of order placement, as issued by the following authorities

shall apply:

International Electro technical Commission (IEC)

American Petroleum Institute (API)

Institute Of Electrical and Electronics Engineers (IEEE)


6/27



British Standards Institution (BS)

It is the System OGPE-VSP's responsibility to ensure his own compliance and also that of his sub-suppliers with all the applicable Codes, Standards and Regulations.Particular attention is drawn to the following standards and codes of practice:

IP Codes Of PracticeIn the event of any conflict, the most stringent requirement shall be applied. The order of precedencefor these documents is:

This Specification

General Specification

Codes And Standards

The equipment shall be designed, fabricated and tested in accordance with the latest revision of allrelevant international Codes and Standards including, but not limited to, the standards listed below.In the event of conflict between codes and standards and/or this specification, the matter shall behighlighted for Company's attention/approval.

In addition to ITB and project references as stated Item 1.6 above the design and selection of FPUDH-01 systems shall comply with the applicable sections of the latest editions of the engineeringcodes, standards and references at least but not limited to the list below:Statutory RequirementsTCVN 5315:2001: Vietnamese Standard for floating unitRegulation for classification andfabricationmachinery and process system.International Standards

API RP-14C Recommended Practice for Analysis, Design, Installation, and Testing ofBasic Surface Safety Systems for Offshore Production Platforms

API RP 505 Recommended Practice for Classification of Locations for ElectricalInstallations at Petroleum Facilities Classified as Class I, Zone 0, and Zone 2

API RP 551 Process Measurement InstrumentationAPI RP 552 Transmission SystemsAPI RP 554 Process Instrument and ControlBS EN 61000-6-4 Electromagnetic compatibility (EMC)Part 6-4: Generic standards -

Emission standard for industrial environmentsBS EN 61000-6-2 Electromagnetic compatibility (EMC) - Part 6-2: Generic standards

Immunity for industrial environmentsBS 5308 Part 1 Instrumentation Cable Part 1BS 6883 Industry standard for the Offshore Oil and Gas, Ship Building and Marine

Industries in the UKCSBS 7671 Requirements for electrical installationsIEC 60079 Electrical equipment in hazardous areas

IEC 60331 Tests for Electric Cables under Fire ConditionsIEC 60332 Flame Test On Single Vertical Insulated Wires/CablesIEC 60529 Degrees of protection provided by enclosures (IP Code)IEC 60801 Part 3 EMI and RFI ImmunityIEC 61131 Programmable Logic ControllersIEC 61508 Functional safety of electrical/electronic/programmable electronic safety-

related systemsIEC 61511 Functional safetysafety instrumented systems for the process industry

sectorISA S5.1 Instrumentation Symbols and IdentificationISA 5.3 Graphic Symbols for Distributed Control/ Shared display Instrumentation,

Logic and computer system

ISA S5.4 Graphic Symbols for Distributed ControlISA S18-1 Annunciator Sequences & Specifications
http://en.wikipedia.org/wiki/Programmable_Logic_Controllerhttp://en.wikipedia.org/wiki/Programmable_Logic_Controllerhttp://en.wikipedia.org/wiki/Programmable_Logic_Controller


7/27



1.8. Service Conditi ons

Location: The Dai Hung Field is located offshore south east of Vung Tau, Southern Vietnam.Environmental Conditions:External Conditions:Ambient Temperature: 15 deg C min. to 35 deg C max

Environment: Salt Laden: Salinity 35%oMax. Relative Humidity 100%Wind: 26 m/s (1 minute), 29 m/s (3 sec gust) @10m above mean sea levelIndoor (Process control Room):Air Conditioned Room

Temperature max +31Cnominal+24 Cmin19C

Humidity 50%R.H. non-condensingArea Classification Non hazardous

1.9.

Hazardous Area Classif ication

The PCR shall be non-hazardous (safe area). All control system equipment within the PCR shall besuitable for safe area.The process areas are hazardous with zone 1.The utilities areas are hazardous with zone 2

1.10. Power Supply

The following power supplies and utilities will be available for use by the OGPE-VSP's package

from the Purchaser's supply systems.Electrical Supplies220 V AC (10%), 60 Hz ( 5%) - Non-UPS for lighting and Operator Stations.

24 V DC (10%) for Control System and field instrumentation.1.11. Uni ts of Measurement

The following units of measurement shall be used:

Measured Value Unit Symbol

Flow - mass kilograms/hour kg/hr

Flow - volumetric cubic meters/hour m3/hr

Volume cubic meters m3

Level centimeters / millimeters |m or mm

Pressure - gauge kilopascals (gauge) kPag

Pressure - absolute kiloPascals (absolute) kPaa

Differential Pressure millimeters Water Gauge mmWG

Temperature degrees Celcius C

Length meters / millimeters m, mm

Density kilograms/cubic meter kg/m3

Dynamic Viscosity centipoise CP

Kinematic Viscosity centistokes cSt

Sound Pressure decibels dBA


8/27



2. GENERAL REQUIREMENTS

2.1. Overall Concept

Emergency shutdown system shall be supplied as follow:

Monitor and control six old wells: 1P, 3P, 4P, 4X and 5P.

Monitor and control six new wells: 8P, 9P, 10P and 6P/7P.

Monitor and control 05 shutdown valves from WHP-DH02

Monitor and control shutdown valves on process system.

Flame detector system shall be supplied as follow:

Flame detector transmitters.

The SIS system consisting of ESD and FD hardware shall be combined and supplied as asingle system in order to optimize the space and hardware requirement.

The I/O modules shall be segregated between ESD and FD, however processor can be

combined for both ESD and FD functions.The SIS system shall be interfaced directly with the PCS system so as to enable the operator tomonitor all SIS system data either from PCR.The HMI interface for the ESD system and FD must be separated from the HMI for PCS.

2.2. Environmental Protection

The minimum ingress protection according to IEC 60529 applied for instrumentation equipment

shall be:

IP42: Equipment located inside enclosure hoods or indoors.IP65: All equipment to outdoor weather conditionsThe instrumentation equipment selected, especially the electronic parts and circuit boards shall besuitable for tropical, humid, salt laden, marine saliferous and offshore environment.All field devices exposed to direct sunlight (e.g. instruments on main deck, under inlet manifold),shall be protected with weather protection enclosures or sunshades.

2.3. General requirement

The materials shall be designed and manufactured for operation in marine offshore

condition.

Year of production: Goods must be brand new and unused, manufactured in year

2014 or later.

Main materials (transmitters, controller, I/O modules, power supplies, switches,

cabinets, licenses )shall be manufactured from EU or G7.

Specifications, compositions of all details in bidders datasheets: Fully comply with

described in the order.

Delivery Time: OGPE-VSP to quote the best delivery time applicable in calendar

days. OGPE-VSP should note that based on project schedule, the material

/equipment shall be required on delivery address (PVEP POC Vung Tau base) no

later than 24 calendar weeks from the date of signing contract.

One shipment.


9/27



2.4. Warranty

OGPE-VSP guarantees that the supplied SIS system shall be the highest quality and design standardas set in Manufactures country for that type of equipment and shall meet current technologicalachievements as require, and shall be suitable for normal operation in tropical area conditionregarding environment temperature up to 45 Deg. C, humidity up to 100%.

Warranty period: 18 months from date of delivery or 12 months from date of GOODS beingcommissioned and place in services, whichever comes first.

2.5. Schedule Plan

OGPE-VSP shall submit schedule / execution plan and must follow key milestone:

- Design approved by third party

- Factory Acceptance Test: Procedure

- Completed installation at site: Procedure

-Pre-commissioning at site: Procedure

- Commissioning, Running Test before start up: Procedure

3. SCOPE OF SUPPLY

3.1. Scope of supply

The SIS shall be complete in all respects, including all required ancillary equipment necessary for thesatisfactory operation of the system.OGPE-VSP's proposal for scope of work shall include all hardware, software, fabrication, assembly,

wiring, testing, installation, commission and documentation as per this specification and itsattachments including, but not limited to, the following:

- Design SIS and approved by third party (Lloyd Register, Vietnam Register or

- Gemanischer Lloyd)

- Supply of SIS System consisting of ESD and FD for the FPU DH-01

- Supply 40 Flame detector transmitters compatible with new SIS and operation

temperature up to 75 Celsius degree

- Supply of Engineering System facility for the above system to be located in FPU-

DH1 at PCR.

- Supply of all the necessary software for the SIS system including SER software.

- Configuration SIS compatible with exist PCS, communication data from PCS to SIS

and vice versa, configuration graphic display on SIS and PCS.

- Remove exist SIS on Dai Hung01 FPU at PCR.

- Renew Flame detector supply by OGPE-VSP from various locations on Dai Hung-

01 FPU.

- Installation SIS on Dai Hung01 FPU at PCR.


10/27



- Commissioning and hand over.

3.2. I nput - Output summary

3.2.1. Input - Output license request

Input/ Output AI DI AO DO

5 Old Wells 0 25 0 60

4 New Wells 0 20 0 48

Process DH-01 30 60 0 52

WHP-DH02 12 12 0 2

Flame Detector 46 0 0 16

Heat detector 0 20 0 0

Smoke detector 0 86 0 0

Gas detector 130 0 0 0

Manual Alarm call point 0 35 0 0

Deluge system 0 9 0 9

Halon system 0 16 0 8

HVAC system 0 0 0 14

Sprinkler system 0 2 0 0

Sub-Total 218 285 0 209

Spare 20% 40 50 20 40

Total 285 335 20 249

3.2.2. Input - Output hardware request

Input/ Output AI DI AO DO

5 Old Wells 0 25 0 60

4 New Wells 0 20 0 48

Process DH-01 30 60 0 52

WHP-DH02 12 12 0 2

Flame Detector 46 0 0 16

Sub-Total 88 117 0 178

Spare 20% 18 25 16 36

Total 106 142 16 214

4. HARDWARE DESIGN REQUIREMENTS

4.1. General

The SIS systems shall be compatible with the PCS to form a platform Integrated Control System.The SIS systems shall be redundancy full specification (Power supplies, controllers, I/O modules,etc.)Hardware design request to be certified by third party (Lloyds Register, Vietnam Register orGermanischer Lloyd)

4.2. Cabinets

All electronic equipment shall be housed in OGPE-VSP'S cabinet (e.g. RITTAL type or equivalent).Final cabinet layouts will be subject to OWNER'S approval. Cabinets will conform to IP 54standards, or better.Cabinets shall generally be dimensions of 1200 mm (W)x800mm(D)x2200mm(H), excluding 100mmintegral plinth. However due to the HVAC duct above the available free space at PCR, the maximum

height PCS/ESD/F&G cabinet in the PCR shall not be more that 2400mm. The cabinets shall bepreferably front and rear accessable only with two 600 mm (W) doors. However, OGPE-VSP may


11/27



propose any cabinet sizes and front/rear access types that would fit in the supplied system devicesand accessories for review and approval by the Purchaser.The OGPE-VSP shall design and supply a rigid, self-supporting free standing cabinet forincorporation within a suite of cabinets and bolted.Access to the equipment mounted within the panel shall be from lockable, vertically hinged doors.Hinges shall be lifted off type. The doors shall be hinged to open 180.Removable access doors and panels shall be fitted with dust tight seals.All door locks shall be provided with the same lock and key combination. Keys shall be removablewith the doors either locked or unlocked.Adequate natural ventilation shall be provided to ensure the internal ambient temperature does notexceed the safe continuous operating temperature of the components located therein. No externalforced ventilation is to be provided by the OWNER.Cabinet shall be provided with fan(s) and sufficient louvers with dust filters to extract heat out of thecabinet. Suitable high panel temperature and over temperature switches shall be installed inside thecabinet and connected to the PLC for alarming (these inputs are excluded from OGPE-VSP'S I/O listand I/O count, but shall be considered in OGPE-VSP'S Scope of Supply).

Welding shall be neat, uniform and have sufficient strength to withstand the loads imposed upon it.

Welding shall have 100 % penetration and shall be free from siag inclusions. All welds to be fullycleaned and free from burrs on completion of operation.OGPE-VSP shall provide tapped holes and removable ring bolts for lifting purpose.A metallic pocket shall be provided on the inside of the doors to contain drawings and data.Cables entrance will be from the top of the cabinets.OGPE-VSP shall provide sufficient clearance between components to permit maintenance-whilst inoperation.Consideration shall be given to maintain a low center of gravity during lay out design.Nameplates shall be made from laminated plastic, white-black-white and shall be attached withstainless steel screws. Nameplates engraving shall be subject to OWNER review and approvalThey shall have the same color and painting quality and general internal layout. The cabinet paintingshall be as per manufacturer's standards. The Painting Procedure shall be submitted for OGPE-VSP /

COMPANY'S approval. Each rack shall be completely filled and unused slots shall have blankingplates.The modules shall be easily removable for replacement but secure from vibration. The module shallhave plug-in connectors or edge connectors.All cabinets shall have as a minimum; common alarms for power supply failure, fan failure and hightemperature (volt free contact).

4.3. Earthi ng, grounding and shielding

The earthing, grounding and shielding shall be in accordance with the requirements described below.There shall be three types of earthing systems within the SIS system.Safety earth (power system earth)

Instrumentation (clean) earth

I.S. Earth for IS instruments (if applicable)All metallic structures, enclosures, doors and equipment shall be boned, within each cabinet orconsole, to a single safety earth point. This single point shall be a brass or copper bolted lugconnection, adequate to receive a 16 mm2copper earth cable terminated in a ring lug.

Each system cabinet, console or marshaling cabinet shall contain an instrumentation earth bar, ofminimum cross section 35 mm2. This bar shall be insulated from the cabinet. In marshaling cabinets,

this bar shall be equipped with means to attach cable screens/drain wires of incoming field cables.All earth conductors shall be insulated and identified at connection to earth bar. Earth conductorinsulation shall be colored as follows:

Safety Earth Green with yellow stripe

Instrumentation Earth/ I.S Earth Plain Green


12/27



4.4. Power suppli es

The Purchaser shall provide a dual power feed from 24V DC Battery Backed-up Power Supply ( 10%) for the system/marshaling cabinets and a single non-UPS feed 220V AC ( 10 %), 60 Hz (2) forcabinet light, operator consoles and service socket.The SIS system equipment shall be designed to operate on 24 VDC 10% floating power from a

battery charger source, supplied by others.The power supply distribution within the SIS cabinets shall not be referenced to the ground. Shouldany part of the system be referenced to the ground, OGPE-VSP shall provide isolating devices tomaintain the floating power supply distribution.DC power shall be distributed via MCB's in such a manner that each circuit or system may beindividually isolated.The OGPE-VSP shall provide a complete, detailed power supply system to meet the needs of hisown equipment as well as the needs of the field devices. Spare capacity shall be provided toaccommodate fully loaded cabinets.OGPE-VSP shall indicate the total power consumption and heat dissipation values for all systemcomponents.OGPE-VSP shall state the maximum power supply interruption time, the system can withstand

without affecting the functionality and the inrush current details for switching power on.

4.5. Termination modules

The termination modules shall meet the following requirements:plug / socket connection shall be used,all inputs and outputs shall be fuse protected,

termination module circuits shall not be referenced to earth,analogue termination modules shall have current limiting resistors to provide short circuit protectionon field inputs,SIS PLC termination modules shall be powered by redundant power supplies.

4.6. Wiri ng and connections

Each cabinet shall be equipped with one auxiliary 220 VAC outlets for maintenance and test

instruments.220 VAC power wiring shall be standard for the application and according to the latest editions of

IEC.All terminals carrying more than 24 VDC shall be protected against accidental contact by removablecover plates and labeled accordingly

Wiring required for interconnecting cabinets, consoles, or other system components shall be in theform of plug-in cables.

Plug connection and internal wiring to fit maintenance communication links.These cables shall be manufactured to length per site requirements, and their source and destinationclearly identified.

The interconnection cables between the system cabinets and the field termination cabinets are toinclude 20 % additional prefabricated construction spares and terminated using plug-in type

connectors. The cables shall be specified according to site technical requirements.The inter-cabinet cables shall be furnished by the OGPE-VSP. The cables shall conform to

applicable industry standards for data transmission.All signal wire shields shall be drained to a heavy ground bus at each cabinet (isolated ground) and atone end only.

All wire ends shall be identified with permanently attached (shrink-on shrouding) tags showing wireidentification and loop number.

Cables shall enter from the top of the cabinet and shall not block service or maintenance access torack-mounted equipment (e.g., power supply, etc.).Each terminal shall hold only one wire. Jumper straps especially designed for the block must be used

if more than one wire requires connection to a common point.


13/27



Raceways shall be designed to segregate input/output signals of different voltage levels, and mustaccommodate all cables without overflow.The equipment will normally be installed so that terminals and all electronic equipment areaccessible from the front and rear of the cabinet. A plan drawing showing accessibility to all systemand termination cabinets will be furnished by OGPE-VSP.OGPE-VSP'S standard internal wiring conductor identification method shall be submitted forapproval.

4.7. Tagging and numberi ng

The identification of all internal components and interconnections as part of the SIS equipmentsupply shall be done by the OGPE-VSP.

The application tagging (cabinets, systems, etc..) shall be in accordance with a project taggingspecification to be provided by the OGPE-VSP during detailed engineering.

Each cabinet shall have its own identification name plates on both cabinet's front and rear side.Fixing method of name plates to be subject to OGPE-VSP/OWNER approval detailed design. Allengraving shall be in English language and shall confirm to the tagging convention to be definedduring detail design.

4.8.

PLC Hardware Requirement

In cases of redundant equipment (power supply, CPU, I/O modules etc.) on failure, the switching ofone equipment to another shall be automatic and should not create any disturbance to the operationof the system. Failure of any modules shall be annunciated and replacement of failed module shall bepossible without isolating the power supply.

4.8.1. Input and Output modules (I/O)

4.8.1.1. General Requirement

All I/O modules shall have optical isolation from logic system (1500 V DC).All input/output module electronics and channels shall include individual protectingdevice to prevent shorting of the card.The I/O modules design shall allow replacement while power is supplied withoutaffecting the operations of any I/O of the system.The I/O modules design shall be fitted with status and diagnostic LED's (as a minimum,

power supply status and I/O channel status).The field I/O channels shall be electrically isolated from the I/O module electronics andshall not be referenced to the system earthing.The system shall be designed to automatically self-test input and output cards in such away as not to cause any process disturbance, but shall reliably detect otherwise covert

failures.Access-protected override facilities for certain individual input channels shall be

provided for maintenance purposes.Input /output modules shall form part of the system feature which shall providediagnostics for any faults in the I/O modules. A standard requirement of the autotest

system shall be test-abort function in case of genuine alarm.Input/output modules shall be replaceable without removing the signal wiring between

the module and the termination module and without use of special tool.I/O shall typically provide 8, 16 or 32 points per module and shall be capable of beingmixed in any I/O chassis. OGPE-VSP shall provide the complete reference and datasheet

of proposed I/O modules.The Analogue to Digital Conversion (ADC) performed by the I/O module electronics for

digital transmission shall meet the following minimum requirements:Resolution : 12 bits

Linearity + 1 least significant bit (LSB)Repeatability + 14 LSB


14/27



Accuracy + 0.1 % full range over entire operating temperature rangeCommon Mode Rejection @ 50 Hz 65 dB

4.8.1.2. Analogue input

The maximum impedance of 4-20 mA analogue input circuit shall be 250 ohms. 1-5VDC input option is to be provided, input resistance equal to 500 K ohms or greater.Channel analogue input module can be either used active or passive circuit. Analogue

input circuit will be 24 VDC from SIS by redundant DC power supplies unless otherwisenoticed.Analogue input modules shall have transmitter out-of-range fault detection, as well asopen and short circuit detection.Line monitoring fault (applicable for F&G System l/O's only):

Shall be displayed and reported at the PCS consoles

Shall generate alarm or shutdown.

Analogue input modules shall have differential, DC coupled input circuits.Each input circuit shall be individually isolated and individually protected by fuse.

4.8.1.3. Digital Input

All input shall be powered under 24 VDC by the SIS using redundant 24 VDC powersupplies. Digital input modules shall have common input circuits in group of 8. Switchesshall have normally closed contact to open on trip condition. Each input circuit shall beindividually protected by fuse.Digital input modules shall be capable to integrate with field mounted Proximity type

sensors.

4.8.1.4. Digital output

All outputs shall be powered under 24 VDC by the SIS.Excepted for the monitoring of the complete output circuits, the output modules shall

have the output signals closed during normal operation and open during safety trip orfield-safe position.Momentary or latched type outputs shall be possible on each channel and the same shall

be software selectable.Generally interposing relays shall be avoided, however they are used to interfaceelectrical circuits. Relay digital output modules shall be duplicated or triplicated modules

with external relay on associated termination module.Each output circuit shall be individually isolated and individually protected by the fuse.

Output requirement:

a) Output to solenoid valves:

24 VDC to Ex(d) or Ex(n) solenoid valves, normally energised, de-energised to trip.This voltage shall be supplied from the ESD system. The output current rating perchannel shall be minimum 0.5A at 24 VDC.

b) Outputs to Switch rack or to packaged unit control panel:Output contacts to Switch rack shall be 24 VDC, 2A. The required 24 VDC powersupply shall be supplied by the ESD system. The volt free contacts shall be closedduring normal operation and open during safety trip or fail-safe position.

4.8.2. Programmable Logic Controller

4.8.2.1. General requirements

SIS system shall be implemented in a fault tolerant, dual or triple modular redundant

format so that no single component or module failure shall cause a system failure orprocess shutdown. These systems shall have a fully duplicated or triplicated architecture


15/27



from the I/O modules to the main processor. Systems shall be specifically designed forsafety applications. Integrated systems comprising general purpose PLC hardware arenot acceptable. Dual redundant systems shall be diagnostics based 1 out of 2architecture. Each signal channel shall be fully isolated from the others while performingparallel control. These systems shall employ voting scheme or enhanced self-diagnosticsto provide a high integrity, error free, and uninterrupted process operation with no singlepoint of failure.System components shall be rack-mounted, modular design, plug-in type. Modules shallbe replaceable without the need for special tools.The system shall have self-diagnostic programs that run independent of the applicationprograms on a continuous basis with fault detection capability down to the I/O moduleindividual channel. All modules shall be replaceable on line without causing furthersystem degradation. Re-initialization of replacement module shall be automatic.Identification and location of faults and status shall be automatic, by means of indicators(LED) located on each module with displays of faults on maintenance/override localconsole and with common fault alarm and status displayed on PCS via a dual redundant

digital high speed communication links.

4.8.2.2.

Power supply modules

The PLC shall operate with a minimum dual redundant power supply. Each powersupply shall be individually capable of supporting the power requirements of allmodules.Each power supply shall feed a separate power rail.The power supply modules shall be fitted with status and diagnostic LED's (as a

minimum, module status, fault).The power supply module shall be replaceable without affecting the working of anyother modules in PLC.

4.8.2.3. Main Processor Modules

The duplicated or triplicated main processors shall operate in parallel and as oneintegrated unit, with each processor controlling one leg of the I/O bus (i.e. the processorduplication or triplication shall be transparent to the user).

Identical operating software and applications programs, including fault history, residingin each processor memory shall be executed independently. The processor shall alsoexecute a voting of all data received and transmitted to the I/O modules that will control

the process.Input signal will be separated into two or three isolated paths from the input terminal of

the input module to the voter circuit output.The PLC shall be provided with individual battery back-up to maintain the integrity ofthe memory for minimum six (6) months in case of power failure. Battery degradation

shall be included as part of the diagnostic alarm.

The system must be protected from unauthorized or accidental modification of programs(password). OGPE-VSP shall indicate the protection procedures available on the system.All facilities necessary for making modification to the logic system should be providedas part of the program development and maintenance console.

Scan time of the PLC shall not exceed 200 msec.

4.8.2.4. Communication modules

General requirementsDigital communication link shall preferably utilize coaxial cable that allows a high-speed

data transfer.Communication module shall be automatically and permanently tested to ensure that it isnot out of service. Identification and location of faults and status shall be automatic, and

shall be recorded and displayed on PCS Console. Transfer to a back-up communicationmodule or channel shall be automatic without disrupting the system operation.


16/27



The communication cable shall be flexible for ease of installation and termination withinequipment cabinets. Cable and fittings shall be of top quality and shall be field proven.The system shall be designed for quick and easy connection and disconnection ofdevices.OGPE-VSP shall provide the complete reference and datasheet of the proposedcommunication modules at a bid stage.Internal communicationsAll PLC internal communication shall be duplicated as minimum. Internalcommunication to include:Communication between the main processors,Communication between the main processors and the I/O modules,

Communication between the main processors and the communication modules.

PCS communication modulesSIS Systems are network devices of the Control System network similar to OperatorControl Station, PCS Controllers.SIS system shall be connected to the PCS system via a redundant communication link to

allow data acquisition, supervisory and control from/to the operator control station. Thislink shall be direct link to the PCS network.

PCS to SIS communication links shall be highly secured in order to eliminate any wrongor corrupted data transfer. OGPE-VSP shall detail the propose communication linkprinciple at bid stage.Communication modules shall be designed for optimum data transmission speed.The communication parameters (ports, protocol, communication speed, etc.) shall be

determined at detail design stage.Printer interfacePLC shall be able to be connected to a printer permanently. Auto documentation(including logic diagrams) print out facility shall be provided for all applicationprograms.

Program development and maintenance console interfacePLC shall be able to connect to the programming/maintenance console to allowupload/download/reload memory, real time data transfers, system maintenance, andmodification in the current program, etc.Refer to section 4.11 for details of the PC based Engineering station

OGPE-VSP shall provide all devices (port, cables and fittings) to ensure operationalcommunication

4.9. Automatic self -testing and diagnostics

The system shall be self-checking. The main processor modules shall run regular and frequentdiagnostics in between the execution of the application program in such a manner as not to interferewith the basis cycle time operation of any program.As a minimum, on-line diagnostics shall perform the following:

check voting and fault detection circuit,

vote and verify all memories,

vote and verify all inputs and outputs,

diagnostic check of operating system and user program,

Reveal all hidden faults or the potential of a fault occurrence and provide a sufficient

warning for plant maintenance to correct the situation

Diagnostic alarms shall be accessible through the maintenance console; LED's on the modules andon the PCS via the communication links.

PLC shall have its internal "watchdog" contact arranged so that a common signal is initiated for asystem fault. Signal will be available on hardwired alarm contact.


17/27



OGPE-VSP will state clearly in their proposal how the system is diagnosed (type of diagnostic, scantime, etc..) and which alarms are available.The following types of testing and fault monitoring shall be provided for F&G System as aminimum:

First out alarm in a Digital Output (to ESD System) group

Power supply distribution monitoring

Data storage availability and integrity tests

Communication interface checks.

Wire break in the loop.

Ground fault detection in the loop.

Controller/Monitor malfunction and failure.

Signal processing fault.

Line fault (short circuit and/or open circuit).

Power supply faults.

Common database facilities such as sorting, querying etc. shall be available as well as the possibilityto export the SER file to Microsoft windows based applications.Historical data shall be retained on losses of power supply to the system.

4.10. Sequence of Events Recorder (SER)

Emergency shutdown system failure, etc. shall require a Sequence of events Recorder. The SERfunction shall be handled by the PLC.The principle of SER function is to keep a record of all the event sequencing between severalinformation of a same process area.This means SER function shall be able to :

Discriminate status change of information within 100 msec.

Store the events with a time stamping precision of 100m.sec. into its own memory. Send the events with all information to printer, dedicated PC and PCS system.

Events report shall include but not be limited to the following:

Change of state of discrete inputs and outputs, alarm thresholds on the analogue

input,

Alarm and/or trip points,

System diagnostics,

Event log printout shall include as a minimum: Date / hours / minutes / seconds / milliseconds / tag /Status.

The SER function shall be standard feature of the system software and hardware.SER data integration within the PCS alarm management shall be proposed by the PCS OGPE-VSP

4.11. Program Development And Maintenance Console Requir ements (ENGI NEERING

CONSOLE)

A complete console with the operating system and programming software shall be supplied for theSIS system.This console shall be PC based, including latest microprocessor, disk and memory of sufficientcapacity and relevant peripherals. It shall be equipped with the latest version of a proven operatingsystem (e.g. Windows XP or later) and with the programming and maintenance software.

The programming and maintenance software shall include, but shall not be limited to the followingminimum software requirements:

System and I/O configurations identifying each module type location and tag name,


18/27



System data base including tag names, descriptions, type, etc.

Programming user program (SIS and SER),

Maintenance system,

Online modification of user program

Automatic on line documentation,

Off line testing of the control program including full emulation of program and

monitoring of the emulated program,

On line monitoring of the program execution in the PLC,

Download/upload/reload program facilities,

Output overrides, this function shall only be performed under password protection

and work permit conditions.

Inputs/outputs forcing facility shall be provided (for testing and maintenance

purposes)

OGPE-VSP supplied program development and maintenance console shall be equipped with

password security to access the different levels of operation.Application program shall be identified by the date and time of last CPU loading or by a revision

number automatically updated in order to ensure the identity between source and object runningprogram. If not, the Engineering Console shall provide a comparison tool between object runningprogram into the controller and source program resident in the console. The details of the comparisonshall include the exact difference between the original and the modified program.

4.12. System Override and Maintenance Facil i ties

The following by-pass and override facilities shall be provided. Two different override modes shallbe available:

Start-up override (SUO),

Maintenance or Test Override Switch (MOS).

4.12.1. Start-up Override (SUO)

In order to be able to start-up equipment or sections of process, it shall be necessary to override someinputs to the SIS system, as sensor signal may be in an abnormal state prior to start-up and couldcause a shutdown. Such overrides are designated as "Start-up overrides".Activation of start-up overrides shall be carried out automatically by the SIS system during a start-upsequence. It will only defeat the shutdown function, input status monitoring will remain operable.Each override function shall be reset automatically either by the sensor signal reverting to the normalor healthy state, after a dedicated step of the equipment start-up sequence, or after a predeterminedtime delay or by a set of process conditions. If cancelled automatically by the sensor signal, the input

circuitry will prevent nuisance trips being caused by oscillation of the input around the reset value.Indication of the status of sensors overridden by automatic start-up shall be provided at the Operatorworkstation (PCS consoles) and on event log print out.The Tag-Nos. of the input signals which requires start-up override facility and its reset conditionswill be provided to the OGPE-VSP during detailed engineering.

4.12.2. Maintenance override

Overrides which have to be made in order to be able to safely perform maintenance work on sensorsduring process operation are designed as "maintenance overrides".This override facility shall be provided for inputs, where a second or back-up indication and a meansto stop the process are available to the operator.

A maximum of one trip initiator may be overridden per protection group at any one time.


19/27



To reduce the number of MOSs, an MOS shall not be applied for 2 out of 3 SIS initiatorconfigurations. To reduce the IPF PFD, and MOS function shall be provided for each of the initiatorsof 2 out of 2 SIS initiator configurations. Setting of one MOS shall create a situation such that duringthe time the override is switched on, the configuration automatically functions as a 1 out of 2 system.Output shall not be overridden because, within one protection group (UZ group), they are usually theresult of more than one Input.Individual override status indication shall also be provided, with alarm, at the Operator Workstationand on event log print-out so that the overridden function cannot be left engaged.A MOS shall be activated from the PCS. When a MOS is activated, the appropriate override signalshall be sent via the communications link to the SIS.A hard - wired, yellow, back-lit MOS enable switch shall be provided on the PCS console. At leastone switch shall be provided per process unit. Only when this switch is in the enable position, is theMOS signal accepted by the actual protection logic. The operator has the possibility to de-activateany override when the communication link fails because this switch is hardwiredThe status of the MOS enable switch shall be read by the PCS via the integrated communicationnetwork for event logging purposes.

The logic to activate only one override per protection group shall be implemented in the SIS system.

In case the PCS to SIS communication link fails, the override shall remain as they were before thefailure and when the link is re-established there shall be no status change.Maintenance overrides and its reset shall be activated from the PCS consoles by the operator.Several levels of password protection shall be provided to prevent the unauthorized use of thesefacilities.Setting of input override shall override the shutdown logic function only, Field input status indicationshall remain available.Appropriate alarm shall be generated by SIS System and transmitted to the Sequence of EventsRecorder.

4.13. Pri nters requir ements

The minimum speed shall be 250 characters / second and shall be of dot matrix impact and low-noise

type (50 dB at 0,5 meter distance).It shall be able to handle continuous printing of 136 characters per line for folder paper and the paperhandling trays along with separate printer stand shall be supplied.The printer shall be equipped with an automatic controlled motor ON/OFF facility.

4.14. System Software Configuration Requirements

4.14.1. General Requirements

The application software for the project shall be based on standard software typical modules. Theapplication software shall be structured as defined in the ESD and Flame detect Cause and EffectDiagrams and the as per the specification requirements.

Each operational logic sequence for a separate unit of the plant shall have a corresponding softwaremodule designed to operate as a stand-alone functioning unit. Each module shall be labeled.

Similarly, the common functions for the whole plant, such as Emergency Shutdown, shall have aseparate software module, and be labeled.Subroutines shall not be utilised in the application program. Programming shall be accomplishedusing standard conventional software packages (i.e. alarm levels, valves, etc.).Programmable systems shall be fully configurable by the OGPE-VSP and shall require no specialised

programming whatsoever.Program shall be performed using function block logic diagrams rather than ladder logic diagrams.

OGPE-VSP to quote optional price to provide cause and effect diagrams on the system usingsoftware packages.Function block diagrams with comment boxes and narrative descriptions shall be provided. All SIS

Software shall have complete function blocks diagrams containing descriptive function blockscomments, tags, identification of all bits and words used, and be complemented with necessary full


20/27



narrative descriptions of each logic section. The top of the first page of the documentation shall beara full project title.Links with other control systems shall be clearly identified and documented. Memory allocationtable shall be provided.Data table assignment lists shall be provided. Complete listings of all data table files, and bitassignments used throughout the programs containing the memory address, symbolic or tag nameand cross reference to function block usage within the programs shall be provided.Program changes and modifications shall be fully recorded by the application software developmenttool and shall be available as part of the on line documentation facility.

4.14.2. ESD executive actions upon field transmitter line monitoring faults

The OGPE-VSP shall provide internal software to accomplish this monitoring.The monitoring system shall discriminate between Open-Circuit and Short- circuit faults and truealarm conditions.

mA 0 3 4 20 21 26

Open circuit Normal Operating Short circuit

Tx with LLthreshold

Shutdown Shutdown Normal Operating Alarm

Tx with HHthreshold

Alarm Normal Operating Shutdown Shutdown

Tx with/LL&HH

threshold

Shutdown ShutdownNormalOperating

Shutdown Shutdown

4.15. Confi guration tools

The OGPE-VSP shall define the facilities and methods for implementing configuration on hissystem. He shall submit a description of the software used to configure the system including the

software releases intended to be used. OGPE-VSP shall state if configuration can be done on apersonal computer or on a system console with keyboard.Online modification and downloading of the configuration shall be possible. OGPE-VSP shall statehow new or modified configuration can be downloaded on line on the system, for the applicationprograms and data base.

4.16. Painting

The SIS cabinet(s) and equipment shall be given a robust paint finish commensurate with an offshoreindustrial environment. As a minimum, the System OGPE-VSP shall provide his standard paintspecification for an offshore industrial environment for review and approval by the Purchaser. Theinternal and external paint color of the cabinets shall be (RAL7032). Rack-mounted components inthe cabinets may be to manufacturers' standard finish.

4.17. Weight Control Requi rements

The System OGPE-VSP shall provide unit weights for all items of equipment / material within thisspecification. The manner in which this information is to be submitted to the Purchaser is specified

within the OGPE-VSP Weight Control Procedure.

4.18. RFI /EM I I nterference

The SIS system and the components shall be RFI/EMI immune such that no change in the function orstatus shall occur, when a UHF 6 Watt hand-held radio is held in close proximity, even with the

cabinet doors open.


21/27



Operation of the SIS System shall be unaffected by Electromagnetic (or Radio FrequencyInterference), and tested in accordance with current IEC Standards.The equipment shall not be susceptible to, or interfere with, radio transceivers, or any otherelectronic equipment, switchgear etc. operated within 1 meter of the equipment with cabinet doorsopen.Radio transceivers are defined as UHF/VHF band units of 6 Watts.

1. Precautions shall be taken to protect equipment from the effects of stray RF (Radio

Frequency) fields, in particular those, which may occur during commissioning while

using portable radio equipment.

2. OGPE-VSP shall ensure all systems conform to EMC Directive and have been designed

and manufactured in accordance with BS EN 61000-6-4 "Electromagnetic compatibility

(EMC)Part 6-4: Generic standardsEmission standard for industrial environments"

and BS EN 61000-6-2 "Electromagnetic compatibility (EMC) Part 6-2: Generic

standards Immunity for industrial environments".

The OGPE-VSP shall demonstrate that the system conforms with IEC 801-3, Severity level 3

(10V/M), over the frequency range 20 Hz to 1 GHz. The total effect of the radio frequencyinterference shall be equal to or less than 0.1% of the output span with the doors closed and equal toor less than 0.5% with the doors open. All control signals shall be unaffected by tests.

4.19. Network L oad Analysis

The System OGPE-VSP is to provide a full load analysis of the system prior to a fully integratedsystem FAT. The analysis shall detail network loading for normal operating conditions and

maximum theoretical load based on signal quantities. The loading on the processing units shall bemaximized at 50% of total capacity.

4.20. Flame detector transmi tter

OGPE-VSP is required to supply 40 complete set of Flame Detector Transmitters (included

transmitters and mounting accessories) which must be compatible with the new system proposed.The supplied flame detector transmitter shall meet the following requirements:

Specification Requirement Remark

Operation temperature

rangeOperational -50C to +75C

Field of view Minimum 120 degrees horizontal / 95 degreesvertical

Spectral range UV Radiation 185 to 260 nanometers

IR Radiation in the 4.4 micron range

Time delay Selectable

Sensitivity Setting Selectable

Response time


22/27



Certifications/ Approved Class 1, Zone 1, Ex d IIB + H2 T5

ATEX/IECEx - II 2 G Ex d II B+H2 T5 Gb

Factory Mutual (FM) 3260 SIL2

NEMA Type 4XEN 54-10 Certified (VdS).

IP66 - Enclosure ratings

5. TECHNICAL REQUIREMENTS

5.1. General Requirements for ESD

5.1.1. Operator Interface

5.1.1.1.MOS Pushbutton Board

OGPE-VSP shall provide MOS/SUO pushbutton board attached to front door of ESDcabinet complete with key operated MOS switches, latch type backlighted ESDpushbuttons with protection cover. OGPE-VSP shall also include lamp test, resetpushbuttons and indicating lamps as necessary.

5.1.1.2.ESD Matrix (mimic) Board

OGPE-VSP shall provide identical ESD Matrix (mimic) Boards attached on the frontdoor of the ESD Cabinet.The ESD / FD Matrix (mimic) board shall have push buttons (MOS, SUO) and lamps.Fire and Gas status shall also be indicated on the matrix.

5.2.

ESD System

5.2.1. ESD System Overview

The primary objective in the design of the ESD for FPU-DH01 is to engineer a highly reliable SafetySystem, with minimum operating cost. The following design principles are intended to consolidate /standardize ESD System hardware, software and OGPE-VSP services, achieving minimum capitaland operating cost. The implementation of ESD System with high availability shall ensure thecontinuous uninterrupted production of oil from FPU-DH01. Redundant architecture shall beemployed to avoid common mode failure points anywhere within the system.The ESD system will be chosen to provide the user with safe, efficient, cost effective and reliable

equipment of proven technology, having a history of reliable operation in systems of similararchitecture, size and performance in offshore applications.The ESD system shall be rated SIL 3 and certified by certifying agencies such as TUV.The ESD system shall allow for expansion of the system in future. OGPE-VSP shall furnish detailsof future expansion philosophy identifying the maximum capabilities including total I/O modulecapacity per controllers, remote I/O capabilities, peer-to-peer communication facilities.The ESD system shall be designed to receive all types of input signals and take executive actions asper the shutdown Cause & Effect Chart. The system shall also exchange data transfer and actions tothe F&G System via hardwired links, and to the PCS via integrated communication network.All analogue and digital inputs shall be of a fail-safe design. The ESD system shall be of normallyenergized design. A "1" logic signal is considered to be normal state, and a "0" logic signal is theabnormal (trip or failure) state.

The inputs to the ESD system will move to open circuit position for an alarm or abnormal condition.In the normal state, the outputs from the logics shall be energized and any input becoming open


23/27



circuit shall result in de-energized of the associated output circuits. Output signals from the ESDsystem should go to a "0" state on power failure or component failure. Open and short circuit ofinputs shall not cause nuisance shutdowns but shall be annunciated as fault condition.All input cards shall provide visual indication of the status of the input, relative to the trip point andstatus of the outputs. All output cards shall indicate the status of the output signal.The ESD system shall provide as a minimum but not limited to the following alarm annunciation viathe PCS.

Power distribution MCB failure.

Power supply failure.

Cabinet temperature high.

Earth leakage.

Cabinet fan failure.

5.2.2.

ESD Manual Push Button

In the event of a fire whilst people are still onboard the installation, there shall be manual platform

ESD buttons at strategic locations around the platform. The manual ESD push button shall be themushroom head key resettable type. On manual ESD initiation, the FPU DH-01 operator will beinformed of the status of the system via the PCS system.

5.3. General Requi rements Flame Detector System

5.3.1. General Requirements

The primary objective in the design of the Flame Detector System for FPU DH-01 is to engineer ahighly reliable Safety System, with minimum operating cost. The following design principles areintended to consolidate / standardize Flame Detector System hardware, software and OGPE-VSPservices, achieving minimum capital and operating cost. The implementation of Flame Detector

System with high availability shall ensure the continuous.The Flame Detector system will be chosen to provide the user with safe, efficient, cost effective andreliable equipment of proven technology, having a history of reliable operation in systems of similararchitecture, size and performance in offshore applications.The Flame Detector system shall be rated SIL 3 by certifying agencies such as TUV.The Flame Detector system shall allow for expansion of the system in future. OGPE-VSP shallfurnish details of future expansion philosophy identifying the maximum capabilities including totalI/O module capacity per controllers, remote I/O capabilities, peer-to-peer communication facilities.The Flame Detector system shall be designed to receive all types of input signals and take executiveactions as per the shutdown Cause & Effect Chart. The system shall also exchange data transfer and

actions to the ESD System via hardwired links, and to the PCS via integrated communicationnetwork.

The Flame Detector System shall be of failsafe design.Open and short circuit of inputs shall not cause nuisance shutdowns but shall be annunciated as faultcondition.

All input cards shall provide visual indication of the status of the input, relative to the trip point andstatus of the outputs. All output cards shall indicate the status of the output signal.Flame Detector system shall provide as a minimum but not limited to the following alarmannunciation via the PCS.

Power distribution MCB failure.

Power supply failure.

Flame detector.

Gas detector. Smoke detector.


24/27



Heat detector.

Cabinet temperature high.

Earth leakage.

Cabinet fan failure.

Activate deluge systems.

Activate Halon (FM200) system.

Active HVAC system.

Trip power generators.

The FD system shall be state of the art microprocessor based having functional distribution and database distribution sub-system wise. The system shall be modular in construction and be capable offuture expansion by adding additional modules.

On-line replacement of any module shall be possible in such a way that removal and addition of amodule may be carried out without de-energizing the system. Wherever redundant modules areprovided, there should not be any interruption in the system while replacing a faulty module.Galvanic isolation shall be provided for all field signals and the system shall have the capability of

detecting open sensors.All sub-systems of this system shall be able to operate satisfactorily in a temperature range ofminimum 15 C and maximum 35 C and a humidity range of 20 to 90 % non-condensing.OGPE-VSP's proprietary high speed network cable and communication software for communicationbetween their respective systems PCS, ESD, FD (F&G) system

5.3.2. Flame Detector System Overview

The Flame Detector System shall provide all functions necessary to monitor and safeguard the FPUDH-01 from hazardous situations arising from the presence of fire. It shall support the followingfunctions as a minimum:

Fire Detection Gas detection.

Status monitoring and alarm displays

Initiation of shutdown via the ESD

Sequence of Event Recording

Time synchronization with ESD, PCS via integrated communication network or

hardwired

The fire detection philosophy, which caters for only one major incident at any one time, shall be as

follows:

To detect fires or potential fires rapidly To protect personnel, equipment and environment

To isolate, shut off and blow down hydrocarbon sources via the ESD.

To control / suppress the fire manually or automatically

5.3.3. Fire and gas logic

The Fire and gas logic will be configured to vote using "2ooND" (Two out of N, diagnostic)detection concept. This concept requires two detectors in a voting group to cause an executive action.The voting logic for Fire & Gas detection is 2ooND i.e. 2 out of "N" number of detectors in thevoting group/zone. The "D" denotes that if any detector in that group has faulted then the faulty

detector will initiate a voted input as high-high and as such the logic reverts to 1ooN (one out of N).


25/27



6. Package control philosophy

6.1. Software and Support

Where possible, previously implemented and proven generic software shall be utilised. However all'Special to Contract' software development to meet any requirements of this specification shall beclearly identified by the System OGPE-VSP to the Purchaser in his proposal and throughout thedetailed design phase.The Purchaser reserves the right to conduct a full software design audit either by its own personnel or

by a nominated independent body.The System OGPE-VSP shall provide full details, throughout the project, of all quality assurance andcontrol procedures utilised in 'special to contract software' preparation, in particular:Establishing a software development plan to include the timely submittal of technical designdocumentation.

Establishing 'special-to-contract' software QA procedures.Establishing 'special-to-contract' software support and warranty.

The Purchaser shall be provided with fully annotated listings and machine-readable source code

along with provisions to edit, test, compile and re-install software for any special to contract softwaredeveloped for the Project.

7. ADDITIONAL REQUIREMENTS

7.1. Availability and Reliabil ity

The design of the SIS systems is to be governed by SIL analysis in accordance with IEC 61508.The SIS shall be built up from components and sub-systems having established field-provenreliability. The use of novel or prototype equipment shall not be used particularly where a failurewould affect the control path of the system.The availability of the SIS for the purpose of maintaining production shall be as a minimum 99.99

percent. This shall be calculated on the basis of a single control path from one process input to oneprocess output, and shall exclude marginal loss of availability due to automatic testing.The fractional dead time of the SIS (i.e. the probability that the system is not capable of executing itssafety function) shall not exceed 10E'

7. This shall be calculated on a single path basis as for

availability, but excluding the loss of availability due to testing and shall be based on a Mean Time toRepair of 6 hours.The loss of availability for automatic testing shall not exceed 1 second per operational hour as anaverage, with no testing operation disabling the system for more than 4 seconds at a time.The SIS shall have a high degree of tolerance to malfunctions of hardware and software. A fault inany part of the SIS shall cause minimal effect, remaining local to that part and the system shallremain operational.The SIS shall maintain its safety functions independent of any other system.

7.2.

Functi onal Design Specifi cation

The functional design specification shall contain, as minimum:

Design philosophy

General description

System configuration and interfacing details

Interface Electronic Characteristics (supply current, impedance etc.)

Detailed equipment specifications

Full F&G Detector & field device details including Wiring details

System/Marshaling Cabinet's wiring details

Cabinet and equipment layout including dimensions, heat calculations & weight data

Typical loop diagrams for all inputs/outputs


26/27



Software Functional Design Specification

Functional Logic Diagrams (FLD's)

Power supply and distribution system plus maximum load

I.S. loop verification calculations

Equipotential bonding drawings

Availability and reliability calculations

7.3. Failure Mode and Ef fects Analysis

System OGPE-VSP shall execute an exhaustive and complete Failure Mode and Effects Analysis(FMEA) or Fault Tree Analysis (FTA) on the complete control system.

The FMEA / FTA shall also predict the availability, reliability and fractional dead time of thesystem. The results of this work shall be presented in a clear, comprehensible manner.It is recognized that some components of the system furnished by sub-suppliers or others will haveinsufficient data to permit a full FMEA. In this case, the use of fail-danger and fail-safe data basedon component counts may be acceptable.

The report shall detail all sources of data used and shall show all calculations and assumptions. Thefailure mode effect analysis shall form part of the F.D.S.PACKAGE LIMIT CONNECTIONS.

7.4. Change Management

The System OGPE-VSP confirms to a schedule of rates for additional I/O. The schedule shall detaileach type of I/O and a cost for addition and deletion with respect to hardware and softwareinstallation, engineering, amendments to system database, configuration, testing, documentation andapprovals by Verification Bodies as applicable.The System OGPE-VSP confirms to a schedule of rates for the production of HMI graphics. Thisschedule shall detail rates for 0.25, 0.5 and full screen graphics and include all engineering, displays(static & dynamic), configuration, testing and approvals by Verification Bodies as applicable.To mitigate against the risk to cost and schedule over run the OGPE-VSP should be prepared to

participate in a purchaser led workshop to formulate a joint risk action plan. The OGPE-VSP shouldalso be prepared to formulate a comprehensive schedule of rates to cover all identifiable hardwareand software changes. Further, the OGPE-VSP is to be prepared to formulate a joint changeprocedure with the purchaser with the purchaser for the duration of the contract.

8. Testing

8.1. Factory Acceptance Test (FAT)

The System OGPE-VSP shall undertake as much testing of the new hardware as possible in thefactory in order to minimize the time required on site. Testing shall use test panels simulating all

(100%) I/O and shall include a fully integrated system test.

Testing shall include radio frequency immunity testing, including the use of hand held radiosprovided by others, frequencies to be advised prior to testing.At least four weeks prior to the commencement of any testing, the System OGPE-VSP shall submit afull Inspection and Test Plan, FAT procedure, including check and sign off sheets, to the Purchaser

for approval. Testing will not commence until the ITP has been approved by the Purchaser.All testing, in the System OGPE-VSP's Factory, at the Third Party link OGPE-VSPs works, and

onshore, shall be documented and all details recorded in the procedure, thereafter being signed by allparties.

8.2. Onshore Testing

The onshore testing shall include a fully integrated test including field devices as much as practicable.The test shall include for simulation of all new serial data through redundant links and hard I/O

interfaces direct to system nodes.


27/27

The System OGPE-VSP shall be responsible for undertaking and/or supervising all the onshoreinstallation and testing work of the complete system at their fabrication facility. A specifictest/commissioning procedure will be required and shall be issued for review and approval by theBuyer at least 02 weeks prior to the work being undertaken on platform.The System OGPE-VSP shall also provide all special installation tools and sufficient Commissioningspares to complete the work, he shall not assume that operating spares will be made available.OGPE-VSP shall provide his own commissioning tools including additional screens, keyboards, andspecial tools, etc.

8.3. Offshore Testing

The offshore testing shall be carrying out final test before start-up production. The OGPE-VSP shall

be responsible for undertaking and/or supervising and troubleshooting to complete system.

8.4. Certificate

System shall be certified by Third party (Lloyds Register, Vietnam Register or Germanischer Lloyd)during testing.

9.

DOCUMENTATION

The OGPE-VSP confirms to all the documentation required and as per the VDRL.The OGPE-VSP confirms to System Architecture and Functional Logic Diagram.The OGPE-VSP confirms to System Loop Diagrams (to system boundaries only) in the Purchaser'sCAD format and interface to be defined during detailed design.Dimensional drawings showing indicative dimensions (including any furniture), system blockdiagram and panel general arrangements shall be provided with the bid. This is to facilitate the layoutof the Control and Equipment rooms by the Purchaser where space is at a premium.

Drawings may be submitted showing individual equipment items or showing 'equipment suites'which can be located as blocks.

02 exhibit i services (3)

Documents