744-745 / 973
© SBM Offshore 2012. All rights reserved.
www.sbmoffshore.com31
Conclusions
•
Systems in place to prevent changes post-validation cannot always be
guaranteed 100% effective
•
Errors identified by code reviews need to be rectified without introducing
more errors
•
Procedures during operation to prevent modification or forcing cannot be
guaranteed 100% effective during the entire plant life.
•
Many of the errors described cannot be identified by proof testing
•
Additional challenges come from mixing asset shutdowns with safety
SIFs, and from secondary convenience shutdown logic.
Neil Wakeling, August 2014