173 / 648
Safety and environmental standards for fuel storage sites
Final report
171
213 The
receiver’s
written instructions should cover all key phases of its operations, including:
preparation and start-up;
■
■
monitoring the transfer and stock reconciliation, including response to alarms if required;
■
■
tank changeover;
■
■
closing/shutting down;
■
■
routine checks;
■
■
contingencies for abnormal occurrences.
■
■
Further details of the requirements for each phase are given below.
Preparation and start-up
214 This requires an effective means of communication between sender and receiver, which
should be achieved by means of a
consignment transfer agreement
.
215 In addition the receiver should have written procedures in place to ensure that the necessary
preparatory checks and line setting are carried out effectively. These procedures should specify
clearly defined routings for all standard transfers, including alignment of valves etc
except
when
risk assessment determines that this is not necessary, taking consideration of the complexity,
frequency and criticality of the task.
216 If a non-standard routing is to be used there should be a clear, detailed specification of the
required route.
Monitoring and reconciliation, including response to alarms
217 Procedures for monitoring and reconciliation should include initial verification that the fuel
movement phase is as expected, by initial dip/telemetry as appropriate, after around 15–20
minutes (determined by transfer speed and capacity etc). If ‘Yes’ this should be confirmed to the
consignor/sender.
218 If ‘No’ it should be treated as an abnormal situation and contingency arrangements should
be specified. Robust arrangements, based on a risk assessment of local circumstances, must be
made to identify ‘unauthorised’ movements.
219 There should be continuous verification at
set periods
(within defined tolerances) through
manual checks or automated systems as appropriate. Checking at set periods is necessary
to check that the ‘mental model’ is correct or if there has been an unexpected change (eg an
unexpected process change, or a measurement error due to a stuck instrument). The set periods
and tolerances should be defined and clear to operators, and be derived from risk assessment,
taking account of:
fill and offtake rates;
■
■
capacity;
■
■
degree of automated control of movement;
■
■
potential speed of response;
■
■
planned staffing cover arrangements/if a problem;
■
■
anticipated completion time.
■
■
220 Communication requirements must be specified, including the need for the receiver to
contact the sender when critical steps are approaching, such as ‘running’ tank changes or when
there are abnormal circumstances or trips.
221 Procedures should specify that all filling operations must be terminated at or before the
normal fill level, which should be set sufficiently far below the LAH to avoid spurious activation of
the alarm. (In this context alarms do not include alerts for process information).