Piper Alpha Appleton BBC
الملخص
TLDRLa prezento esploras la katastrofon sur la Piper Alpha platformo en 1988, analizante la kaŭzojn de la tragedio kaj la lecionojn pri sekureco. La prezentanto priskribas la strukturojn de la platformo, la publikan enketon post la katastrofo, kaj ses kritikajn faktorojn kiuj kontribuis al la perdo de vivoj. La konkludo emfazas la gravecon de administrado en sekureco, sisteman aliron, kaj la kvaliton de sekureca administrado, substreke ke sekureco estas afero de vivo kaj morto.
الوجبات الجاهزة
- 🔍 La Piper Alpha estis offshore petrolplatformo.
- 💥 La katastrofo okazis la 6-an de julio 1988.
- ⚖️ Publika enketo estis gvidata de Lord Cullen.
- 📉 Ses faktoroj kontribuis al la alta mortoprocento.
- 📋 Manko de trejnado estis grava problemo.
- 🚨 Sekureco estas respondeco de la administrado.
- 🔧 Kvalito de sekureca administrado estas esenca.
- 📊 Auditoj devas esti altkvalitaj.
- 🛑 Manko de sistemaj aliroj kaŭzis problemojn.
- 🌊 La 'bottom line' de sekureco estas vivo kaj morto.
الجدول الزمني
- 00:00:00 - 00:05:00
La prezento temas pri la katastrofo sur la Piper Alpha platformo en 1988, kun la celo disvolvi fundamentajn lecionojn pri sekureco. La prezentanto klarigas la strukturo de la platformo, ĝian funkciadon, kaj la unikajn defiojn, kiujn alfrontis la laboristoj en kazo de urĝa situacio, komparante ĝin kun surtera industrio.
- 00:05:00 - 00:10:00
La katastrofo rezultigis 167 mortojn, kio kondukis al publika enketo gvidata de Lord Cullen. La enketo celis identigi la kaŭzojn de la katastrofo kaj fari rekomendojn por eviti similan okazaĵon en la estonteco. La prezento emfazas, ke la enketo ne celis kulpigi individuojn, sed kompreni la okazaĵon.
- 00:10:00 - 00:15:00
La eksplodo okazis en la gas-kompresia modulo, kaŭzita de malfunkciado de pumpilo, kiu ne estis adekvate prizorgita. La malbona komunikado inter la teamoj kaj la manko de kono pri la duobla prizorgado de la pumpilo estis kritikaj faktoroj, kiuj kondukis al la katastrofo.
- 00:15:00 - 00:20:00
La enketo malkovris, ke la permeso por labori ne estis ĝuste administrita, kun mankoj en la sistemoj, kiuj devus certigi sekurecon. La manko de trejnado por la supervizoroj kaj la neefika administrado de la permesoj estis gravaj kaŭzoj de la katastrofo.
- 00:20:00 - 00:25:00
La eksplodo kaŭzis nur kelkajn mortojn, sed la sekva oleo-fajro, kiu daŭris pli longe ol atendite, kaŭzis la plimulton de la viktimoj. La manko de sistemiga analizo de danĝeroj en la projektado de la platformo estis grava manko.
- 00:25:00 - 00:30:00
La administrado de la aliaj platformoj ne haltis la produktadon, supozante, ke Piper Alpha kontrolos la situacion. Tio montras la mankon de trejnado kaj simulado de krizaj situacioj inter la platformoj, kio plifortigis la katastrofon.
- 00:30:00 - 00:35:00
La akvo-sistemo por fajro-fighting ne funkciis, ĉar la rezervaj pumpiloj ne estis agorditaj por aŭtomata starto. La decido de la platforma administranto ne estis sufiĉe kvalita, kio kondukis al neefikeco en la fajro-fighting sistemoj.
- 00:35:00 - 00:40:00
La plimulto de viktimoj mortis en la loĝejo pro karbona monoksido, ĉar la evakuado ne estis organizita. La manko de trejnado por la administranto de la platformo kaj la neefika komunikado inter la teamoj kaŭzis la malfruan reagon al la katastrofo.
- 00:40:00 - 00:46:28
La prezento finas kun kvar fundamentaj lecionoj pri sekureco: la respondeco de la administrado, la bezono de sistemiga aliro, la graveco de kvalito en sekureca administrado, kaj la neceso de alta kvalito en sekureca revizio. La rakontoj de du supervivantoj emfazas, ke sekureco estas demando de vivo kaj morto, kaj la sumo de individuaj kontribuoj determinas la sekurecon de ĉiuj laboristoj.
الخريطة الذهنية
فيديو أسئلة وأجوبة
Kio estis la Piper Alpha?
Piper Alpha estis granda offshore petrolplatformo situanta ĉirkaŭ 100 mejlojn de Aberdeen, produktanta petrolon, gason, kaj kondensaton.
Kio okazis la 6-an de julio 1988?
La 6-an de julio 1988, Piper Alpha suferis eksplodon kaj sekvan fajron, rezultigante la morton de 167 homoj.
Kio estis la rolo de la publika enketo?
La publika enketo, gvidata de Lord Cullen, celis determini la kaŭzojn de la katastrofo kaj fari rekomendojn por eviti ripetiĝon.
Kio estis la ĉefaj faktoroj kontribuantaj al la katastrofo?
Ses faktoroj estis identigitaj, inkluzive mankojn en la permeso por labori, trejnado, kaj sistemaj mankoj en sekureca administrado.
Kio estas la 'bottom line' de sekureco?
La 'bottom line' de sekureco estas ke sekureco ne estas intelekta ekzerco, sed afero de vivo kaj morto, kaj la kvalito de individuaj kontribuoj determinas la sekurecon de kolegoj.
عرض المزيد من ملخصات الفيديو
- 00:00:09afternoon the purpose of my presentation
- 00:00:12is to develop some fundamental lessons
- 00:00:15about safety and I want to do that by
- 00:00:19considering the
- 00:00:21circumstances surrounding the disaster
- 00:00:24that struck the piper Alpha platform in
- 00:00:281988 my presentation is in five
- 00:00:33stages I want to tell you first what was
- 00:00:36Piper and what happened to
- 00:00:38it and then I'll explain a little bit
- 00:00:40about the public
- 00:00:42inquiry which was really an accident
- 00:00:46investigation and the major part of my
- 00:00:48talk is to consider six factors that I
- 00:00:52believe crucially bore on the loss of
- 00:00:55life in the
- 00:00:58disaster and from those
- 00:01:00I want to develop lessons about managing
- 00:01:04safety and finally I'll close my
- 00:01:07presentation and what I believe is the
- 00:01:09bottom line of safety so let's start
- 00:01:12with what was Piper and what happened to
- 00:01:16it Piper was a large offshore oil rig
- 00:01:20located about 100 miles offshore from
- 00:01:22abdine uh it had a traditional
- 00:01:26layout at the South End the drilling
- 00:01:28Derek in the middle
- 00:01:31a processing unit separating oil gas
- 00:01:33condensate and at the far end the white
- 00:01:36building the accommodation block with
- 00:01:37the helicopter pad on top and Piper
- 00:01:40produced oil gas and condensate
- 00:01:44condensate mainly
- 00:01:46propane it exported oil both to Shore
- 00:01:49and gas to Shore and condensate to Shore
- 00:01:52and crucially it was linked to two other
- 00:01:55platforms by both oil pipelines and gas
- 00:01:59pipelines
- 00:02:05my life was spent in the onshore
- 00:02:07chemical industry and therefore when I
- 00:02:10joined the public inquiry into the
- 00:02:12disaster and started to think about an
- 00:02:14oil rig out in the North Sea in terms of
- 00:02:18emergency there were three things that
- 00:02:20struck me straight
- 00:02:22away first one was the fact that it was
- 00:02:24surrounded by water and therefore the
- 00:02:27people who worked on it did not go home
- 00:02:30at night like the do on land and
- 00:02:32therefore in any emergency the number of
- 00:02:35people that are at risk were massively
- 00:02:38greater than an
- 00:02:40onshore Refinery or chemical plant
- 00:02:43roughly 20 times as many
- 00:02:48people the second factor that struck me
- 00:02:51was the question of escape on sure if we
- 00:02:54have an emergency on a
- 00:02:57plant the means of Escape is the surface
- 00:03:00of the
- 00:03:01land and the means of Transport are our
- 00:03:04own legs we just run away and within 10
- 00:03:06or 15 seconds we can be out of danger
- 00:03:09but with an offshore rig Escape has to
- 00:03:12be
- 00:03:13organized information is needed will
- 00:03:16helicopters arrive when will they arrive
- 00:03:19are the ships stood by an escape has to
- 00:03:22be led it requires leadership to take
- 00:03:26those decisions that are necessary do we
- 00:03:28wait for helicopter do we take to the
- 00:03:32water and the third crucial differences
- 00:03:34on Shore was in terms of handling any
- 00:03:38emergency on Shore the first thing we
- 00:03:40call up is the local fire brigade they
- 00:03:43come with first class equipment
- 00:03:45well-trained Crews and experienced
- 00:03:48officers to lead them but on an offshore
- 00:03:51rig you cannot whistle up the fire
- 00:03:53brigade you tackle any emergency with
- 00:03:57what you got on the rig and with the
- 00:03:59people you employ if you have a fire
- 00:04:02it's the built-in Firewater system that
- 00:04:05you use and it's the part-time fireman
- 00:04:08there may be processed workers or
- 00:04:10Fitters management of any sort so three
- 00:04:14crucial differences with the onshore
- 00:04:16plant which you will see as the disaster
- 00:04:20develops uh played a critical part what
- 00:04:23happened to
- 00:04:25Piper well at 10:00 on the evening of
- 00:04:286th of July 1988
- 00:04:30there was an
- 00:04:31explosion and a subsequent fire and in
- 00:04:35just a few
- 00:04:38hours that platform was reduced to
- 00:04:41this just the base of the um drilling
- 00:04:45ring end of the
- 00:04:46platform 12,000 tons of steel was 454 ft
- 00:04:51down on the bottom of the North
- 00:04:53Sea but more crucially in just that few
- 00:04:57hours 166 men
- 00:05:01died the total death toll was 167 one
- 00:05:05more died of his injuries the next
- 00:05:09day and it is because of that large
- 00:05:11death toll that there was a public
- 00:05:14inquiry into the
- 00:05:17disaster what's a public inquiry
- 00:05:21like it's a court of
- 00:05:24law it's led by a judge in this case
- 00:05:27Lord Cullen a very senior Scottish judge
- 00:05:31parties are represented by Council by
- 00:05:33legal council so for instance the
- 00:05:36operator was represented by Council uh
- 00:05:39the survivors were represented by their
- 00:05:40own Council the trade unions
- 00:05:43represented uh some of the equipment
- 00:05:46suppliers were
- 00:05:47represented because they felt their
- 00:05:49equipment might be implicated in the
- 00:05:51causes of the disaster
- 00:05:55itself Witnesses presented evidence and
- 00:05:58they were cross-examined by both both
- 00:05:59the council and the
- 00:06:05judge but the inquiry was still an
- 00:06:08accident investigation and therefore it
- 00:06:11had exactly the same objectives as we
- 00:06:15have throughout the organization in any
- 00:06:18accident and that is to determine the
- 00:06:22causes of the accident in this case the
- 00:06:25causes of death and secondly to make
- 00:06:28recommendations to avoid a
- 00:06:36repetition as I develop this
- 00:06:40presentation and develop in particular
- 00:06:43the causes of
- 00:06:44death you will be able to interpret what
- 00:06:47I said as criticism of parts of an
- 00:06:51organization or
- 00:06:53individuals that is not the purpose of
- 00:06:55my presentation and it was not the
- 00:06:58purpose of the public
- 00:07:00inquiry public inquiry just had to
- 00:07:03determine what happened why it happened
- 00:07:06and make recommendations to avoid a
- 00:07:09repetition so just like an accident
- 00:07:12investigation run like a court of law
- 00:07:15but differing crucially from a court
- 00:07:18case we're all used to reading the
- 00:07:21newspapers and the prosecuting Council
- 00:07:23gets up and in
- 00:07:25effect sets out for the court what the
- 00:07:29prosecution the police believe happened
- 00:07:33they worked it out from the evidence
- 00:07:35then the case is defended but in a
- 00:07:37public inquiry no one gets up and says
- 00:07:40we've investigated we've worked out what
- 00:07:43happened on Piper Alpha we can tell
- 00:07:45you the inquiry itself does that piece
- 00:07:49of detective work as you go along and by
- 00:07:52the inquiry I mean the judge and the
- 00:07:55three
- 00:07:57assessors I was one of those Assessor
- 00:08:00I said there were three of us with three
- 00:08:02different industrial backgrounds our
- 00:08:05sole job was to help the judge help him
- 00:08:08with the detective work to determine
- 00:08:10what happened and why help him to
- 00:08:12formulate
- 00:08:13recommendations and thirdly help him
- 00:08:16write the
- 00:08:18report so there's the public inquiry let
- 00:08:21me now move on to the events of the
- 00:08:25night and the six factors that bore on
- 00:08:28the high death t
- 00:08:30as I've told you at 10:00 there was an
- 00:08:36explosion we knew it was 10:00 because
- 00:08:39one Manet switched on the television
- 00:08:41news and the television announcer hadn't
- 00:08:44yet said anything so we knew it was
- 00:08:47within seconds of
- 00:08:5010:00 we knew where it was and that was
- 00:08:54in the gas compression module in the
- 00:08:56middle of the
- 00:08:57platform in part because the Iver said
- 00:09:00well I felt a Bang from that direction
- 00:09:02or I heard a Bang from this and we
- 00:09:05could uh cross the lines but crucially
- 00:09:09the control room operator
- 00:09:12survived uh and about 30 seconds maybe a
- 00:09:15minute before the explosion he had a
- 00:09:17series of gas alarms from that gas
- 00:09:20compression
- 00:09:23module and the third reason we could
- 00:09:25home in where it started was from the
- 00:09:28survivors describing damage damage to
- 00:09:31walls so we knew it was 10:00 we knew
- 00:09:34where it
- 00:09:35was all the gas alarms that came up were
- 00:09:38low-lying in the
- 00:09:40module and therefore what had leaked was
- 00:09:44heavier than air not natural gas lighter
- 00:09:48so it was propane that
- 00:09:50leaked and it is for that reason that
- 00:09:53the inquiry concentrated its attention
- 00:09:56on what we've been happening to the
- 00:09:58condensate system
- 00:10:00in the period before the
- 00:10:05explosion everything was running
- 00:10:07normally until about 50 minutes before
- 00:10:109:45 and at that time the pump that
- 00:10:14pressured up condensate to about 1,000
- 00:10:17PSI to inject it into the oil export
- 00:10:20line to go to shore tripped
- 00:10:25out the night shift tried to restart the
- 00:10:27pump and failed
- 00:10:31but there was an installed spare
- 00:10:34pump now the night shift knew that
- 00:10:36during that day that spare pump had been
- 00:10:39taken for
- 00:10:40maintenance it had been taken for a
- 00:10:42major overhaul done once every two
- 00:10:46years but they also knew very little had
- 00:10:49been done to the spare pump yes it had
- 00:10:51been electrically
- 00:10:53isolated suction and delivery valves
- 00:10:55closed the propane blown down from the
- 00:10:58pump
- 00:10:59but no pipe work had been opened up no
- 00:11:02slip plates had been fitted so it should
- 00:11:05be a relatively easy and quick job to
- 00:11:08recommission the spare
- 00:11:11pump reconnect electricity Supply open
- 00:11:14suction and V vales start the pump
- 00:11:17on but the night shift were not aware
- 00:11:21that there was a second maintenance job
- 00:11:22that had been started that day on that
- 00:11:25pump on its delivery pip work there was
- 00:11:27a relief valve
- 00:11:30and that relief valve had been taken off
- 00:11:32that day for an annual overhaul and a
- 00:11:34check of its set
- 00:11:37pressure the work on the valve was not
- 00:11:40complete by
- 00:11:416:00 uh the platform was trying to
- 00:11:44reduce overtime and the contractor's
- 00:11:47employees who were doing the relief
- 00:11:50valve
- 00:11:51overhaul uh decided they would finish
- 00:11:53the job the next morning
- 00:12:00the Twan contractor team one was a
- 00:12:02supervisor it was his first time ever
- 00:12:04acting as a
- 00:12:06supervisor
- 00:12:07and at 6:00 he took the permit to work
- 00:12:11for the reli work back to the control
- 00:12:15room the process Supervisor was busy
- 00:12:19with his Handover 6:00 was a shift
- 00:12:23change so the contractor's supervisor
- 00:12:26signed the permit and left it on the
- 00:12:28desk
- 00:12:34he did not check the job site before he
- 00:12:37did
- 00:12:41that so here were two maintenance jobs
- 00:12:43the process team knew about one they
- 00:12:45were confident they could recommission
- 00:12:47the spare pump they did not know about a
- 00:12:49second which crucially was on the
- 00:12:53delivery side of the pump before the
- 00:12:56delivery valve when they attempted to
- 00:12:59recommission the spare
- 00:13:01pump condensate
- 00:13:03leak from where that relief valve had
- 00:13:07been taken off yes blank flanges should
- 00:13:12have been fitted they cannot have been
- 00:13:14fitted fully and
- 00:13:22well why didn't the process supervisors
- 00:13:26know about that relief valve the permit
- 00:13:29to work system is designed to do just
- 00:13:32that to make sure that everybody who
- 00:13:34needs to know does
- 00:13:37know when the inquiry examined what had
- 00:13:41been happening in permits to work that
- 00:13:43day we found there were faults in the
- 00:13:46permit to work system on that fatal
- 00:13:48Wednesday
- 00:13:51evening as I said the contractor
- 00:13:53supervisor did not talk to the process
- 00:13:56supervisor he did not in uh respect the
- 00:13:59job site the two permits one for the
- 00:14:02major pump overhaul the second one for
- 00:14:04the relief valve were not cross
- 00:14:06reference one to the
- 00:14:12other and they were faults on the night
- 00:14:15when we invested the background to that
- 00:14:18these were not unusual
- 00:14:22faults common jobs on the same piece of
- 00:14:24equipment on Piper Alpha the permits
- 00:14:27were never cross reference one to the
- 00:14:31other it was common practice for
- 00:14:34maintenance supervisors to return
- 00:14:36permits to the control room not speak to
- 00:14:39the process supervisor and leave them
- 00:14:41lying on the
- 00:14:44desk process
- 00:14:46supervisors quite frequently would sign
- 00:14:49off a
- 00:14:50permit accepting the job back and the
- 00:14:53equipment back prior to inspecting the
- 00:14:56job site to satisfy themselves the work
- 00:14:59was complete and entirely
- 00:15:07safe the contractor supervisor I told
- 00:15:10you was a new one his first time ever as
- 00:15:12a supervisor he'd had no training in the
- 00:15:16permit to work system whatsoever yes
- 00:15:19he'd seen the supervisor he worked for
- 00:15:22in days gone by use the permit system
- 00:15:25but he'd had no
- 00:15:27training but that was wasn't too unusual
- 00:15:29on
- 00:15:30Piper nobody
- 00:15:32else had received regular and formal
- 00:15:36training in the operation of the permit
- 00:15:38to work
- 00:15:40system everything was learning on the
- 00:15:43job the problem with learning on the job
- 00:15:46is you perpetuate and accumulate
- 00:15:57errors so here was
- 00:16:01explosion at the heart of it was a lack
- 00:16:04of
- 00:16:05knowledge at the heart of it was a
- 00:16:08breakdown in a permanent to work
- 00:16:10system and it wasn't just an error on
- 00:16:13the night it was Perman work that way
- 00:16:16the men on Piper Alpha did not work the
- 00:16:19permit to work system as the management
- 00:16:22had laid
- 00:16:26down and that was in in part dependent
- 00:16:30on the lack of
- 00:16:32training so an explosion and two
- 00:16:34deficiencies deficient permit to work
- 00:16:36system deficient
- 00:16:38training I said the inquiry's role was
- 00:16:40to look to the causes of death um the
- 00:16:43explosion caused very few deaths we
- 00:16:47think maybe
- 00:16:52two but after the explosion there was an
- 00:16:56an oil fire
- 00:17:00the explosion of the gas compression
- 00:17:02module blew down the
- 00:17:04firewall and damaged equipment in the
- 00:17:07oil separation unit and there was an
- 00:17:10almost immediate very large oil
- 00:17:17fire I said it Brew down the
- 00:17:21firewalls so obviously in the design of
- 00:17:23the plant it had been considered that
- 00:17:27the chances of a fire in the compression
- 00:17:29module was sufficiently large to Warrant
- 00:17:32a
- 00:17:35firewall it seems
- 00:17:39inconceivable uh in a gas compression
- 00:17:42module handling natural gas and
- 00:17:43condensate that the likelihood of an
- 00:17:46explosion was any less than the
- 00:17:48likelihood of a
- 00:17:49fire but no explosion walls were
- 00:17:52installed between the modules
- 00:17:59on Piper in his design phase there had
- 00:18:02never been a systematic assessment of
- 00:18:05all potential
- 00:18:08hazards and therefore no identification
- 00:18:11that an explosion was just as likely as
- 00:18:13a
- 00:18:18fire so there was deficient Hazard
- 00:18:25analysis the oil fire was prolonged
- 00:18:29in fact it lasted longer than the
- 00:18:31inventory of oil on Piper would permit
- 00:18:35it I told you earlier that Piper was
- 00:18:38connected to two other platforms by oil
- 00:18:40pipelines and the production from those
- 00:18:43pip pipelines was put to shore via
- 00:18:50Piper after the initial explosion on
- 00:18:53Piper and during the subsequent fire the
- 00:18:56other two pip uh platforms went on
- 00:19:01producing and in effect they were
- 00:19:03pumping their oil to the fire on
- 00:19:10Piper when the inquiry asked the
- 00:19:13managers of the other platforms why they
- 00:19:15went on producing instead of shutting
- 00:19:18down they said that um they
- 00:19:22assumed that Piper would bring its
- 00:19:24emergency under control they'd heard the
- 00:19:27maydays they'd heard ships broadcasting
- 00:19:30that had been attracted round same
- 00:19:31Pipers on fire but they
- 00:19:34assumed that they would bring it under
- 00:19:36control the initial explosion
- 00:19:40unfortunately put out a commission all
- 00:19:42the means of communication on Piper so
- 00:19:45they could not talk to Piper
- 00:19:50directly but they really had no evidence
- 00:19:53on which to make that assumption that it
- 00:19:55would be brought under
- 00:19:56control and therefore no real
- 00:19:59justification for going on
- 00:20:03producing but when we examine the
- 00:20:06background to that issue we found that
- 00:20:10there had never been any training or
- 00:20:12simulated exercises in an interplatform
- 00:20:17emergency the three platforms connected
- 00:20:20together by both oil and gas pipes
- 00:20:22formed one system and if one was in
- 00:20:24trouble there must be a reaction on the
- 00:20:26other
- 00:20:27two but had never been a simulation
- 00:20:31exercise so managers could work out what
- 00:20:34they might do in the face of different
- 00:20:36emergencies so prolonged oil
- 00:20:39fire division Hazard analysis no
- 00:20:42explosion walls and again deficient
- 00:20:46training but even the oil fire killed
- 00:20:49very few
- 00:20:51people what did it look like like
- 00:20:56this a large fire fire but not totally
- 00:21:00engulfing the
- 00:21:02platform unfortunately it produced
- 00:21:04massive amount of thick black smoke that
- 00:21:07swept to the North End of the platform
- 00:21:09where all the lifeboats were located and
- 00:21:11no one could reach a
- 00:21:16Lifeboat but it's doubtful whether that
- 00:21:18oil fire on its own in the fire killed
- 00:21:21many people maybe
- 00:21:23want but it was followed by a gas fire
- 00:21:30the gas pipes connected Piper to the
- 00:21:33other two platforms and to shore came up
- 00:21:37in Piper in the middle of the oil
- 00:21:42fire and as that fire played on those
- 00:21:45pipes they gradually weakened the gas
- 00:21:48was at about 2,000 PSI and
- 00:21:52eventually they burst successively one
- 00:21:55after about 25 minutes the other two are
- 00:21:57about another half hour
- 00:22:03later was the hazard of the gas pipes
- 00:22:07recognized well yes it was and in
- 00:22:10particular on Piper just 12 months
- 00:22:13before a young chemical engineer had
- 00:22:15been asked to consider whether it was
- 00:22:17worth renewing the contract for the
- 00:22:20small firefighting ship that stood by
- 00:22:24Piper um it could spray water onto Piper
- 00:22:28but it wasn't very effective at fighting
- 00:22:30a fire but this young chemical
- 00:22:32engineer in studying this issue uh
- 00:22:36examined all the potential fires that
- 00:22:38could occur on paper and in doing so he
- 00:22:41examined what the fire would be like if
- 00:22:44a gas Riser
- 00:22:46broke and what he wrote about that was
- 00:22:50that if a gas Riser fails into a
- 00:22:54fire the fire will be enormous there
- 00:22:57will be no no means of containing
- 00:23:00it and the loss of life will be very
- 00:23:05large at the meeting of senior managers
- 00:23:08to consider his report about renewing
- 00:23:11the contract for the firefighting ship
- 00:23:14that paragraph about the potential
- 00:23:16Hazard of the gas risers was never
- 00:23:20raised no one commented on it no one
- 00:23:24questioned it
- 00:23:29so here was a known
- 00:23:33Hazard a massive Indy of gas in those
- 00:23:37long large pipelines aimed at the
- 00:23:41platform and the hazard was not managed
- 00:23:44it wasn't a question of identification
- 00:23:46it was a question of managing it could
- 00:23:48anything have been
- 00:23:50done well yes you could have had water
- 00:23:53sprays specifically on the risers that
- 00:23:56would have bought some time you could
- 00:23:58have insulated the Rises that would pose
- 00:24:01problems because of corrosion underneath
- 00:24:03the insulation but again you could have
- 00:24:05bought time might have bought some hours
- 00:24:08that might have been crucial on that
- 00:24:10fatal
- 00:24:12night what did the gas fire look like
- 00:24:17look like
- 00:24:19this as you can see very different from
- 00:24:22the oil
- 00:24:23fire the platform engulfed in fire but
- 00:24:26this slide gives you a very poor
- 00:24:28impression of what it was like um and
- 00:24:32what I want to do is to show you a very
- 00:24:34small piece of
- 00:24:35video um in one of the ships near Piper
- 00:24:38on that evening a Norwegian sailor had a
- 00:24:41video camera and he was taking shots for
- 00:24:43his child school
- 00:24:45project and he took film of the disaster
- 00:24:49and what I want to show you is about 30
- 00:24:5140 seconds of film which starts with the
- 00:24:54oil
- 00:24:55fire and you then see the first gas
- 00:24:59Riser
- 00:25:01[Music]
- 00:25:04blow
- 00:25:05incredibly some men escaped after that
- 00:25:09gas Riser blow and through those
- 00:25:17Flames I said earlier that uh a North
- 00:25:20Sea platform has to fight a fire with
- 00:25:22whatever it's
- 00:25:23got and on Piper
- 00:25:30it had quite a lot in particular it had
- 00:25:33a water delu system that sprayed a
- 00:25:37defined amount of water over every area
- 00:25:41that could contain
- 00:25:47hydrocarbons on the night of the
- 00:25:50disaster the water supply system did not
- 00:25:53work at all now the initial explosion No
- 00:25:57Doubt destroyed the main power
- 00:26:00supply and therefore put out a
- 00:26:02commission the water pumps that supplied
- 00:26:05that water delude system but the
- 00:26:08designers of the platform had foreseen
- 00:26:10that possibility and had therefore
- 00:26:14installed emergency water pumps diesel
- 00:26:17driven that started up
- 00:26:20automatically when the W the electrical
- 00:26:22driven pumps failed but on the night of
- 00:26:25the disaster the diesel driven drump
- 00:26:28pumps were not on automatic start they
- 00:26:31were on manual
- 00:26:35start they were on manual start because
- 00:26:38of a problem with diver
- 00:26:42safety the water pumps took their
- 00:26:44suction from below the
- 00:26:46platform and if a diver was close to the
- 00:26:49pump suction when it started up
- 00:26:52automatically he or these feeder lines
- 00:26:55could be sucked into it and the diver
- 00:26:57could die
- 00:26:58and this issue was raised with the
- 00:27:00platform
- 00:27:03manager quite rightly raised with him
- 00:27:05and he
- 00:27:06decided that the diesel driven pumps
- 00:27:10would be on manual start whenever the
- 00:27:12divers were in the water note not when
- 00:27:15they were near the pump intake whenever
- 00:27:17they were in the water and on Piper in
- 00:27:20the summer months diving took place for
- 00:27:2212 hours each
- 00:27:25day so in the summer months The crucial
- 00:27:29backup fire water pumps were on manual
- 00:27:31start for half the
- 00:27:38time platform manager absolutely right
- 00:27:41to consider
- 00:27:42the the problem with the divver safety
- 00:27:45what was wrong was the quality of the
- 00:27:48decision he took in the face of that
- 00:27:51problem on his assist the platform they
- 00:27:53only put the diesel pumps on manual
- 00:27:55start when the divers were close to pump
- 00:27:58suction
- 00:28:00Intex and that was
- 00:28:06infrequent but even if the pumps had
- 00:28:08started up it is most unlikely that the
- 00:28:11Deluge system would have worked properly
- 00:28:14because there had been a
- 00:28:15problem with blocking of the Deluge
- 00:28:20heads the seawater corroded the Deluge
- 00:28:23pipe work the products of corrosion were
- 00:28:25carried forward and bed the small holes
- 00:28:28in the Deluge
- 00:28:32heads first attempt to cure this uh was
- 00:28:35by more frequent cleaning of the pipe
- 00:28:38work but that didn't work it just
- 00:28:40presented bare metal to be
- 00:28:43corroded second method tried was to put
- 00:28:46in larger heads with larger holes in
- 00:28:48them that didn't work either the
- 00:28:51corrosion products block those and
- 00:28:53finally it had been decided to replace
- 00:28:55all the Deluge pipe work in
- 00:28:57non-corrosive material
- 00:28:59unfortunately by the time of the
- 00:29:01disaster the only module that had been
- 00:29:04so converted was the drilling module and
- 00:29:07that was the one that didn't really
- 00:29:09catch
- 00:29:09fire now I think you'd agree
- 00:29:12that's a quite logical way of tackling
- 00:29:15that problem try one method try
- 00:29:19increasing the holes and finally facing
- 00:29:21the large expans of replacing the PIP
- 00:29:24work but what was not acceptable was
- 00:29:28that the problem of blocking deluse
- 00:29:30heads had been identified 4 years before
- 00:29:34the
- 00:29:35disaster and after 4 years it had not
- 00:29:39been
- 00:29:43solved so in terms of
- 00:29:47firefighting the diesel driven pumps
- 00:29:49being on
- 00:29:50manual was
- 00:29:52a a deficiency of quality of safety
- 00:29:55decision
- 00:29:59the spray heads not being fully
- 00:30:01functional working well was a de
- 00:30:05deficiency of Safety Management it was
- 00:30:07well known throughout the company but it
- 00:30:10had not been solved in any kind of
- 00:30:12reasonable time
- 00:30:16period as I told you the inquiry has to
- 00:30:20determine the causes of death and the
- 00:30:24bulk of the people on Piper Alpha died
- 00:30:28in the accommodation
- 00:30:32block as the explosion took place at
- 00:30:3410:00 at night uh most of the onboard
- 00:30:37crew were already in the accommodation
- 00:30:39block and many of those working made the
- 00:30:42way there through the smoke Through the
- 00:30:44flames and they did that because the
- 00:30:46normal means of transportation was by
- 00:30:48helicopter and they expected Rescue
- 00:30:51helicopters to come in and take them off
- 00:31:00but they died in that accommodation and
- 00:31:02they died of carbon monoxide poisoning
- 00:31:04from
- 00:31:07smoke because
- 00:31:10although the ventilation system on the
- 00:31:14uh accommodation block had dampness that
- 00:31:17would close on high
- 00:31:19temperature people kept opening doors to
- 00:31:22see what was happening kept breaking
- 00:31:25Windows to see if they could Escape
- 00:31:29some fire doors had been permanently
- 00:31:32hooked open to facilitate passage had
- 00:31:35been like that for weeks so there was no
- 00:31:38discipline in the face of that fire and
- 00:31:41the smoke and gradually the
- 00:31:45accommodation filled up with thick smoke
- 00:31:48and the people died we know that because
- 00:31:51one part of the accommodation block was
- 00:31:52recovered from the Bottom of the Sea and
- 00:31:54there were 80 bodies in it
- 00:32:00but they also died because they stayed
- 00:32:08there within minutes of the initial
- 00:32:11explosion it must have been very evident
- 00:32:14that no helicopter had any chance of
- 00:32:17landing on Piper in the face of the
- 00:32:19flames and the
- 00:32:21smoke the only chance anybody in the
- 00:32:24accommodation has and it was a lousy
- 00:32:28chance was to leave the accommodation
- 00:32:31fight the way through the smoke and the
- 00:32:33flames and jump in the sea and hope to
- 00:32:36be picked up and there were many ships
- 00:32:39around doing exactly
- 00:32:42that
- 00:32:45unfortunately no decision was
- 00:32:49taken to tell the men in the
- 00:32:51accommodation block to take that
- 00:32:54terrible chance but it was a chance and
- 00:32:57they stay stayed and
- 00:33:01died none of us
- 00:33:04know how we will react under the stress
- 00:33:07of a major emergency if we were in
- 00:33:09charge we can't forecast
- 00:33:11that but what the inquiry
- 00:33:14noted was that the offshore installation
- 00:33:18manager had had inadequate training in
- 00:33:22handling
- 00:33:24emergencies he hadn't gone through any
- 00:33:26simulation exercises
- 00:33:28of the types of emergencies that might
- 00:33:30develop on an offshore
- 00:33:33rig not his
- 00:33:37fault if a man is appointed to a job and
- 00:33:41training is needed to fit him for that
- 00:33:43job it is the senior Management's
- 00:33:46responsibility to provide that training
- 00:33:48that training was not
- 00:33:53provided it was a poor chance of
- 00:33:56survival
- 00:33:58but it was possible 28 men left the
- 00:34:04accommodation fought the way through the
- 00:34:06flames and smoke jumped in the sea and
- 00:34:08they were picked
- 00:34:15up the final factor I want to touch on
- 00:34:18about the
- 00:34:22disaster it's about auditing the
- 00:34:24deficiencies I've told you about um
- 00:34:29they were not difficult to find in the
- 00:34:32inquiry the problems of the permit to
- 00:34:35work system we ran over in the first
- 00:34:38fortnite so if we found them so easily
- 00:34:41why is it the management had not notice
- 00:34:44them during the operation of
- 00:34:48Piper our way of knowing what's
- 00:34:50happening in all our
- 00:34:52organizations um is by auditing now we
- 00:34:55do it required by law to do it for
- 00:35:00finances and equally we
- 00:35:03audit safety practices and on Piper
- 00:35:06there was a lot of
- 00:35:08auditing more than I'd been used to in
- 00:35:11my previous career in
- 00:35:14chemicals for example each day one of
- 00:35:18the safety operators on the
- 00:35:21platform was required to monitor the
- 00:35:23operation of the permit to work system
- 00:35:25and he went around looking what people
- 00:35:27were doing an examine permit to work
- 00:35:29forms things like
- 00:35:32that no Faults were ever reported on the
- 00:35:35permit to work system on Piper
- 00:35:40Alpha just 6 months previously there had
- 00:35:43been an Inc company audit of Piper they
- 00:35:46chose three or four subjects to audit
- 00:35:47one again was the permit to work
- 00:35:50system that in company
- 00:35:54audit said there were no Faults in the
- 00:35:56operation of the firm to work system on
- 00:35:58Piper
- 00:36:04Alpha problem with the delug heads been
- 00:36:07running for four
- 00:36:09years it was an annual fire Insurance
- 00:36:12audit the inquiry read the reports for
- 00:36:14the four years not a single report noted
- 00:36:18the problem of the Deluge heads but it
- 00:36:21was a fire Insurance AIT
- 00:36:28so a lot of auditing on
- 00:36:32Piper but deficient quality
- 00:36:37auditing and when you have deficient
- 00:36:39quality auditing it has a double Hazard
- 00:36:43are you miss things that you want to
- 00:36:44pick up and
- 00:36:46correct but secondly it lulls the
- 00:36:49management into a false sense of
- 00:36:51security as one very senior manager said
- 00:36:53to the inquiry I knew everything was all
- 00:36:57right right because I got no reports of
- 00:37:00things being wrong from safety
- 00:37:04auditing I my
- 00:37:06experience that's not real life safety
- 00:37:10isn't like that there are always things
- 00:37:13that you can find that can be improved
- 00:37:16and if you get reports that give
- 00:37:17continuous good marks you smell
- 00:37:25it so there are six factors
- 00:37:29and the backgrounds to them that bore on
- 00:37:31the death toll on Piper
- 00:37:34Alpha what I want to do now is extract
- 00:37:37lessons from
- 00:37:40those clearly there are lessons to learn
- 00:37:43about the detailed design and operation
- 00:37:45of permit work systems for
- 00:37:48example um equally there are lessons
- 00:37:51peculiar to the offshore industry like
- 00:37:54planning evacuation and means of Escape
- 00:37:59but all history teaches us that the
- 00:38:01detailed circumstances of any major
- 00:38:04accident never repeat themselves and
- 00:38:07it's for that reason that we try to get
- 00:38:10to the root causes of any
- 00:38:15accident and when we look at the list of
- 00:38:19deficiencies that I've developed
- 00:38:23today we can bring out four lessons
- 00:38:31all the divisiones I've talked about
- 00:38:33were the responsibility of
- 00:38:36management so the first lesson is that
- 00:38:39safety is the responsibility of
- 00:38:41management no one else it's not the
- 00:38:42responsibility the regulator or safety
- 00:38:45committees or anything like that it is
- 00:38:47the responsibility of management
- 00:38:49management is a very wide term let's get
- 00:38:53more specific it is the responsibility
- 00:38:56of line manager
- 00:38:58M it is not the responsibility of the
- 00:39:01safety department safety department has
- 00:39:04a crucial role to play it has things it
- 00:39:06must do but it is not responsible for
- 00:39:10safety performance that is the line
- 00:39:13management and it is the line management
- 00:39:16from top to bottom from the chief
- 00:39:19executive to the lowest
- 00:39:21supervisor and in particular the chief
- 00:39:25executive he has to be totally committed
- 00:39:28and visibly
- 00:39:30committed so that's the first lesson I
- 00:39:33would extract from Piper
- 00:39:36Alpha the second lesson is that safety
- 00:39:39needs a systematic approach if you look
- 00:39:41at all those
- 00:39:43deficiencies they were failures in
- 00:39:45systems either there was a system it
- 00:39:48didn't work well for instance there was
- 00:39:50a permit work system but it didn't work
- 00:39:55properly or there wasn't a system where
- 00:39:58there should have
- 00:40:00been there was no systematic assessment
- 00:40:03of major hazards in the design of Piper
- 00:40:05Alpha there should have
- 00:40:08been so safety needs a systematic
- 00:40:14approach third lesson I extract
- 00:40:19is it is the quality of Safety
- 00:40:21Management which is crucial to
- 00:40:24you the offshore installation manager
- 00:40:26facing the the problem with the divers
- 00:40:28with the pump
- 00:40:29intakes right to face it he had to
- 00:40:32decide what was wrong was the quality of
- 00:40:34his decision another example from the
- 00:40:37same manager he he told us that he he
- 00:40:41walked around the platform for about an
- 00:40:42hour an hour and a half each day and he
- 00:40:45did that to keep his finger on the pulse
- 00:40:46and in particular to keep a feel of
- 00:40:49safety check on permits to work look how
- 00:40:51people were doing jobs and I think
- 00:40:53you'll all agree that was a right thing
- 00:40:55for the leader to do
- 00:40:58but he told us he did that at 7:00 at
- 00:41:01night and he did it at 7:00 at night
- 00:41:05because that was the only time he had
- 00:41:07available offshore installation manager
- 00:41:09is a very busy man but then the bulk of
- 00:41:12the work finished at
- 00:41:176:00 so it it is not just putting the
- 00:41:21effort into Safety Management it is the
- 00:41:24quality of what each one of us do
- 00:41:30and the final lesson is about
- 00:41:37auditing we have to
- 00:41:40know that things we decide must be done
- 00:41:43a certain way to be safe are done that
- 00:41:46way every single time every single
- 00:41:52day and our way of doing that is by
- 00:41:56safety your
- 00:41:58ating and it must be high quality safety
- 00:42:03auditing so there are four fundamental
- 00:42:06lessons I would draw out of the disaster
- 00:42:09on Piper and his
- 00:42:13background but I told you at the start
- 00:42:17that my final section of the
- 00:42:18presentation was what I call the bottom
- 00:42:21line of
- 00:42:25safety and where I to cover that is to
- 00:42:28tell you of two short episodes told To
- 00:42:32Us by two of the survivors from
- 00:42:36pipo they were both relatively young men
- 00:42:39around
- 00:42:4030 and the first one was very
- 00:42:43unlucky he arrived on Piper just 6 hours
- 00:42:46before the explosion at 4:00 in the
- 00:42:48afternoon it was the first time he' ever
- 00:42:50been on Piper Alpha in fact it was the
- 00:42:54first time he'd ever worked offshore
- 00:42:59he had a short safety introduction
- 00:43:01course he had a meal as he was starting
- 00:43:04a to go to work at 6:00 in the morning
- 00:43:07he decided to go to bed early and he did
- 00:43:08about
- 00:43:098:00 and he was woken by the
- 00:43:14explosion and he then tried to tell the
- 00:43:17inquiry how he escaped but he suffered
- 00:43:21from a major problem at no instant had
- 00:43:25he any idea where he was
- 00:43:28he never been on the thing
- 00:43:30before Council kept saying where were
- 00:43:33you then I don't know I couldn't
- 00:43:37see and eventually he found himself on a
- 00:43:41walkway and he was surrounded by Thick
- 00:43:45Smoke and then large Flames came up with
- 00:43:49the smoke
- 00:43:50itself and he told the inquiry I decided
- 00:43:53to jump off the
- 00:43:55walkway and the C
- 00:43:57asked him why decided to do that and he
- 00:44:01said I decided it was to better better
- 00:44:05to die hitting the deck than to be burnt
- 00:44:10alive he did jump he fell straight in
- 00:44:13the sea and was rescued until to this
- 00:44:16day neither he nor we know where he
- 00:44:20jumped
- 00:44:23from the second episode
- 00:44:28this from a man who worked for the
- 00:44:30drilling contractor bordon he was on
- 00:44:32night shift when the explosion took
- 00:44:34place he was at the drilling
- 00:44:37rig and he fought his way through the
- 00:44:39flames and the smoke to the
- 00:44:41accommodation
- 00:44:43block and that took him some
- 00:44:45time and by the time he got there the
- 00:44:48accommodation block was full of the
- 00:44:51thick black smoke and when he got inside
- 00:44:54he could see nothing and he could see no
- 00:44:56one
- 00:44:58and he told the inquiry he called out is
- 00:45:01anybody from bordon here when Council
- 00:45:04asked him why did you call that
- 00:45:08out he said I didn't want to die
- 00:45:13alone and I tell you those two
- 00:45:17stories because we must always remember
- 00:45:21that safety is not an intellectual
- 00:45:24exercise it's not something to keep
- 00:45:27safety departments in work or the reason
- 00:45:30to go to conferences or hear
- 00:45:33presentations safety is truly a matter
- 00:45:36of life and
- 00:45:41death and the sum and quality of all our
- 00:45:45individual contributions to the
- 00:45:48management of
- 00:45:49safety determines whether the colleagues
- 00:45:52we work with live or die
- 00:45:57and on Piper Alpha on the 6th of July
- 00:46:011988 they died
- 00:46:17[Music]
- Piper Alpha
- katastrofo
- sekureco
- publika enketo
- permeso por labori
- trejnado
- hazardanalizo
- administrado
- fajro
- evakuado