SAFOP

TABLE OF CONTENTS 1 INTRODUCTION ..........................................................................................................5 1.1 SCOPE ...............................................................................................................................5 2 DEFINITIONS ................................................................................................................7 2.1 GENERAL...........................................................................................................................7 2.2 TECHNICAL........................................................................................................................ 72.3 ABBREVIATIONS............................................................................................................... 92.4 REFERENCES ...................................................................................................................9 3 SAFOP STUDIES GENERAL PRINCIPLES ............................................................... 10 3.1 TYPES OF STUDIES........................................................................................................103.1.1 Safety Analysis (SAFAN)..................................................................................................103.1.2 Security and Operability Analysis (SYSOP)......................................................................103.1.3 Operator Task Analysis (OPTAN).....................................................................................103.2 TIMING OF STUDIES.......................................................................................................103.2.1 Initial Study........................................................................................................................103.2.2 Final Study........................................................................................................................103.3 SAFOP TEAM COMPOSITION........................................................................................103.3.1 General.............................................................................................................................103 .3.2 Leader...............................................................................................................................10 3.3.3 Secretary...........................................................................................................................11 3.3.4 Members...........................................................................................................................11 3.3.5 Training.............................................................................................................................12 3.4 STUDY EXECUTION........................................................................................................123.4.1 General.............................................................................................................................123 .4.2

Methods............................................................................................................................123 .4.3 Environment......................................................................................................................12 3.5 PREPARATIVE WORK ....................................................................................................133.5.1 General.............................................................................................................................133 .5.2 Initial Study........................................................................................................................133.5.3 Final Study........................................................................................................................133.6 RECORDING....................................................................................................................13 3.6.1 Worksheets.......................................................................................................................133 .7 FOLLOWUP ....................................................................................................................133.7.1 Recommended Actions.....................................................................................................13 4 SAFETY ANALYSIS (SAFAN) .................................................................................... 15 4.1 GENERAL.........................................................................................................................15 4.1.1 Study Phases....................................................................................................................154.2 STUDY TECHNIQUE........................................................................................................154.3 PROCEDURE...................................................................................................................15 4.4 RECOMMENDED ACTIONS............................................................................................164.5 EXAMPLES.......................................................................................................................1 64.5.1 Safety Analysis (Outside Persons)....................................................................................164.5.2 Safety Analysis (Non-Electrical SPDC Staff)....................................................................174.5.3 Safety Analysis (Electrical SPDC Staff)............................................................................17

Doc. Ref.: QSP-FE-03-22AUGUST 2001 Page 3 5 SYSTEM SECURITY AND OPERABILITY OF PLANT ANALYSIS (SYSOP) ............. 23 5.1 GENERAL.........................................................................................................................23 5.1.1 Study Phases....................................................................................................................235.2 STUDY TECHNIQUE........................................................................................................235.2.1 Element Selection.............................................................................................................235.2.2 Component Method ..........................................................................................................235.2.3

Assessment Point Method................................................................................................245.2.4 Consequences and Results..............................................................................................245.3 STUDY PROCEDURE......................................................................................................245.3.1 General.............................................................................................................................245 .4 RECOMMENDED ACTIONS............................................................................................255.5 EXAMPLES.......................................................................................................................2 55.5.1 Component Method ..........................................................................................................255.5.2 Assessment Point Method................................................................................................26 6 OPERATOR TASK ANALYSIS (OPTAN) .................................................................... 38 6.1 GENERAL.........................................................................................................................38 6.1.1 Study Phases....................................................................................................................386.2 STUDY TECHNIQUE........................................................................................................386.3 STUDY PROCEDURE......................................................................................................396.4 RECOMMENDATIONS.....................................................................................................3 96.5 EXAMPLES.......................................................................................................................4 06.5.1 Control Room Operator Task Analysis.............................................................................406.5.2 Field Operator Task Analysis............................................................................................40APPENDIX 1 – NOTES OF GUIDANCE FOR SAFOP TEAM LEADERS...................................44APPENDIX 2 – NOTES OF GUIDANCE FOR SAFOP TEAM SECRETARIES..........................46APPENDIX 3 – CONTROL ROOM OPERATOR'S MAIN TASKS QUESTIONNAIRE............47APPENDIX 4 – FIELD 0PERATOR'S MAIN TASKS QUESTIONNAIRE.....................................50 7 ENGINEERING STANDARD USER-COMMENT FORM ............................................ 52 SAFOP Guidelines Doc. Ref.: QSP-FE-03-22August 2001 Page 4 Figure 1-1 - SAFOP STUDY INPUTS AND RESULTS..........................................................................6Figure 3-1 - SAFOP STUDY TEAM COMPOSITION...........................................................................11Figure 3-2 SAFOP STUDY SEQUENCE ...........................................................................................14Figure 4-1 -

SAFAN GUIDE WORDS AND PROMPT WORDS ..........................................................18Figure 4-2 - SAFAN STUDY SEQUENCE............................................................................................19Figure 5-1 SYSOP GUIDE WORDS AND PROMPT WORDS..........................................................27Figure 5-2 - SYSOP COMPONENT ASSEMBLY METHOD …………………………………………… 28Figure 5-3 SYSOP ELEMENT ASSESSMENT POINT STUDY SEQUENCE ...................................29Figure 5-4 - ELECTRICAL SYSTEM POSSIBLE ELEMENT AND STUDY SEQUENCE....................30Figure 5-5 - 33 KV FEEDER CIRCUIT ELEMENT...............................................................................31Figure 5-6 132 KV AND 33 KV BUSBAR ELEMENTS.......................................................................32Figure 5-7 - 132/33 20 MVA TRANSFORMER ELEMENT..................................................................33Figure 5-8 OVERHEAD TRANSMISSION LINE ELEMENT..............................................................34Figure 5-9 - 132/33 KV TRANSFORMER ELEMENT ASSESSMENT POINTS..................................35Figure 61 - OPTAN STUDY SEQUENCE...........................................................................................41Checksheet SAFETY ANALYSIS (SAFAN) …………………………………………………………………20Worksheet SAFETY ANALYSIS (SAFAN) ………………………………………………………………….22Checksheet SYSTEM SECURITY AND OPERABILITY (SYSOP) ……………………………………..36Worksheet SYSTEM SECURITY AND OPERABILITY (SYSOP) ……………………………………….37Checksheet OPERATOR TASK ANALYSIS (OPTAN) …………………………………………………..40Worksheet OPERATOR TASK ANALYSIS (OPTAN) …………………………………………………….42

Doc. Ref.: QSP-FE-03-22AUGUST 2001 Page 5 1INTRODUCTION This guide describes a series of studies that shall be used during various phases of amajor project being engineered to design, install and operate high voltage

generation,transmission and distribution electrical installation, within Shell PetroleumDevelopment Company of Nigeria Ltd. (SPDC).These studies are collectively designated as a 'Safety and Operability( SAFOP ) Study' and are internationally established for use in thepetrochemical industry.Individual studies can be applied to assist in clarifying objectives of the installation,selection of plant and equipment and its use in terms of system security andoperability.Additionally, one of the studies helps to identify major hazards to different groups ofpersonnel inherent in construction, commissioning and operation of high voltageelectrical systems. 1.1 SCOPE A SAFOP is performed to provide a formal framework for a searching and systematicexamination of engineering design in terms of effective operation and safety ofpersonnel, using information provided by SPDC project staff, their Consultants, plantManufacturers and relevant Government agencies (Federal Ministry of Power andSteel - FMPS and National Electric Power Authority - NEPA) where interface exist.A SAFOP study does not include detailed analysis of design calculations, design data(e.g., checking of protection settings, etc.) stipulated by engineering designConsultants nor any initial review of a Manufacturer's design capabilities (such as testcertificates for items of plant, etc.).A SAFOP shall form part of the project work scope for projects which do change theconfiguration of the SPDC High Voltage power generation and transmission system,or when new loads are connected to the system with a total installed capacity inexcess of 1 MVA. In other cases, the SPDC Corporate Discipline Head Electrical maystill decide to include a SAFOP study in a project scope, depending on the possibleimpact on power system integrity and operability.The project RFQ shall mention the requirement for the inclusion of a SAFOP study.Objectives of a SAFOP Study are summarised as to: • Assess and minimise types of potential hazard presented to personnel in thevicinity of electrical installations. • Provide a critical review of both network design and plant to be installed andassess any limitations and their effects on both operability and security of theoverall system. • Analyse tasks set for operators assess facilities and instructions provided toundertake these tasks and recommend measures to avoid operator error.It is not the intention of this study guide to duplicate design work provided by SPDC’sConsultants or turnkey Contractors, but it is intended that

SAFOP Studies shouldcomplement engineering design by providing overall assessments of final design froman operational view point.An overview of inputs to, and results sought from a Safety and Operability Study( SAFOP ) is illustrated in FIGURE 1-1. SAFOP Guidelines Doc. Ref.: QSP-FE-03-22August 2001 Page 6 FIGURE 1-1SAFOP Study Input and Results 2 DEFINITIONS 2.1 GENERAL For the purposes of this document the following definitions shall be used. ENGINEERINGDESIGNLayouts/SchematicsDrawingsSpecificationsSAFETY, OPERATION& MAINTENANCEDOCUMENTATIONManufacturer’s dataSPDC HSE regsSPDC ESR’s/ESOP’sLocal Electricity Act(CAP 106)Electricity SupplyRegulationsSAFOP TEAMTechnical knowledgeOperational Experience SAFETY & OPERABILITYSTUDY (SAFOP) (see figure 3)MODIFICATIONSTO DESIGNLayouts and/orplant/equipmentcomponentsSAFOPDATAFILEFINALISEPROJECTDESIGNAC TION LIST FORFURTHERDOCUMENTATIONOperational andmaintenance proceduresDesign supportdocumentation

Doc. Ref.: QSP-FE-03-22AUGUST 2001 Page 7 Shall - The word 'shall' is to be understood as mandatory.Should - The word 'should' is to be understood as strongly recommended.May - The word 'may' is to be understood as indicating a possible course ofaction.The Company - Shell Petroleum Development Company of Nigeria Ltd.User - A specified engineer or Consultant who applies these Standards in theexecution of SPDC project.The Consultant - The party to the contract with the Company who is responsible forproviding the design, engineering and other related consultationservices under the contract.The Contractor - The party to the Contract with the Company who is responsible for theconstruction and other related works specified in the contract. Onoccasion, for example in 'turnkey contracts' the contractor may beresponsible for design, engineering, manufacture, shipment, supply,installation, testing, commissioning and performance guarantee up tothe defects liability period as defined in the individual contract.Manufacturer - The party responsible for the manufacture of equipment and services toperform the duties specified by the Consultant or Company.Vendor/Supplier - A party responsible for the supply of equipment, materials or product-related services in accordance with the Purchase Order issued bySPDC or its nominated Contractor.Works - All Works to be executed and all services to be rendered by aContractor under the terms of a Contract.Work-site - A defined place designated by the Company whereat all Works and aContractor under a Contract shall execute services. 2.2 TECHNICAL Assessment Point - Assessment points are defined locations within an Element to which aknown deviation is assigned.Checksheet - Record attention points which have to be worked out at the WorksheetComponent - An item of plant or equipment that when combined with othercomponents forms an ‘Element’.Control - All means by which an Operator gives instructions or institutes actions. -cont.-Deviation - Departure from the normal design function of an Element orComponent. Display - Methods of giving visual or graphic information to an operator.ESOP Electrical Safety Operational Procedure are instructions that are issuedto supplement the SPDC Electrical Safety Rules.ESR - Electrical Safety Rules ref.: Safety Manual appendix VII SAFOP Guidelines Doc. Ref.: QSP-FE-03-22August 2001 Page 8 Element - Major part of an electrical installation that is large enough to be ofinterest in terms of the study objective.Function - Definition of the design and operating intention of plant or equipmentunder both normal and abnormal running conditions.Guide-word Label or distinctive word used to focus attention of a SAFOP studyteam on possible Deviations and their consequences.Hazard - Danger to persons or electrical components which could cause injury,damage or other form of loss. Information - Recorded plant data. Key Task - Identification of chief task under the three main Operator dutiesheadings. Keyword - Identification of a hazard that may occur in an electrical installation andpresent danger to personnel or environment.

Monitor - Survey and assess all displays.Procedure - This term may include general operating guidance, aid to meetoperating aims and a specified series of actions to achieve a givenresult. Prompt-word - Word chosen to help a study team to identify possible deviations orconsequences associated with a selected Guideword.Protect - To monitor system parameters and automatically initiate disconnectionof a circuit under fault conditions. Resources - Means of aid or support, knowledge understanding and training.SAFOP Study - Safety and Operability Study is the application of a series of technicalexaminations and audits to assess hazard potential to personnel andplan of mistaken operation of a system or malfunction of individualcomponents and consequential effects including operator error.SCADA - Supervisory Control and Data Acquisition, i.e., to provide remotesystem control and data acquisition.Study Definition Statement of object and scope of study.Worksheet - Formally recorded results and recommendations obtained duringSAFOP study. 2.3 ABBREVIATIONS ESR - Electrical Safety Rules.ESOP Electrical Safety Operational Procedure.FMPS - Federal Ministry of Power and SteelHAZOP - Hazard and Operability Study.NEPA - National Electric Power AuthorityOPTAN Operator Task Analysis. RFQ Request for Quotation (project work scope)SAFAN - Safety Analysis.SCADA Supervisory Control and Data Acquisition.SIEP - Shell International Exploration and Production B.V.

Doc. Ref.: QSP-FE-03-22AUGUST 2001 Page 9 SIOP Shell International Oil Products B.V.SPDC - Shell Petroleum Development Company of Nigeria Ltd.UKEA United Kingdom Electrical Association.VDU Visual Display Unit. 2.4 REFERENCES SIPM EP 23/5 -

Guidance on Hazard and Operability (HAZOP) Studies revised edition1983.Safety and ReliabilityDirectorate -Guide to Reducing Human Error in Process Operation (UKEA)February 1985 SRD R347CISHEC SafetyCommittee -A Guide to Hazard and Operability Studies (1979) 3 SAFOP STUDIES GENERAL PRINCIPLES 3.1 TYPES OF STUDIES Three completely different types of studies are necessary to fully meet objectives of acomplete SAFOP study and these can be summarised as follows. 3.1.1 Safety Analysis (SAFAN) A SAFAN examines hazards always present in construction, commissioning andoperation of high voltage electrical installations and considers them in relation tosafety of personnel who are to operate, work or even be in the vicinity of overheadlines and substations being engineered under a project. 3.1.2 Security and Operability Analysis (SYSOP) A SYSOP reviews briefly standards of overall network design and assesses securityof supply provided to different user groups fed from high voltage systems. Itexamines main items of plant and their auxiliaries planned to be installed andconsider any limitations found and their effect on system operability. SAFOP Guidelines Doc. Ref.: QSP-FE-03-22August 2001 Page 10 3.1.3 Operator Task Analysis (OPTAN) An OPTAN looks at probable tasks to be undertaken by both control room and fieldoperators during normal and abnormal conditions. It assesses usability of equipmentto be provided and reviews instructions necessary to prevent human error as far as isreasonably economic and practicable. 3.2 TIMING OF STUDIES All three studies can be undertaken with considerable advantage at two distinctphases of an overall project, as follows. 3.2.1 Initial Study This can be implemented on completion of the conceptual design stage, i.e., at thebeginning of phase 1 design with the final review of specification before its approval,and help clarify project objectives. It considers network design together with plantand ancillary equipment required meeting project intention. 3.2.2 Final Study This should be implemented as soon as possible following completion of 90% of thedesign. It may however be recognised at this stage that further study is required tocomplete both SYSOP and OPTAN

studies when equipment-manufacturing drawingsbecome available. 3.3 SAFOP TEAM COMPOSITION3.3.1 General In general terms, SAFOP study teams should consist of sufficient qualified membersto be able to provide knowledge for both technical operational know-how and safetyinputs necessary to meet study objectives. 3.3.2 Leader The person chosen, as Team Leader should be present, whenever possible, at allmeetings of the SAFOP teams to preserve a consistent and effective approach to allphases of a project. He should be of sufficient seniority or standing to guiderepresentatives of various SPDC departments, Consultants, Manufacturers, turnkeycontractors and relevant Government agencies, through working meetings of teamswithout undue wastage of time and effort.cont.-The Team Leader should not be involved personally in detailed planning orconstruction of an overall project or in day to day discussions with outside consultants(if used) or Manufacturers. Proven ability to chair meetings in a firm but informalmanner is desirable, especially when the team may consist of various levels of staff,all of whom should have equal opportunity to make their contributions to discussions. 3.3.3 Secretary The person appointed as Team Secretary should be present at all meetings of SAFOP Teams to preserve a uniform method of recording on standard worksheetsrecommended actions for the SAFOP Data File.It is helpful if the Team Secretary has a sound understanding of electrical powerengineering, as the SYSOP and OPTAN studies are necessarily conducted in termsof jargon familiar only to power engineers. Also he should be able to contribute todiscussions and assist the Team Leader in avoiding repetitive discussions of mattersthat should be settled at other individual study team meetings. 3.3.4 Members Preferred or ideal composition for a complete SAFOP study undertaken at both Initialand Final phases of a project should be as detailed in the chart in FIGURE 3-1.

Doc. Ref.: QSP-FE-03-22AUGUST 2001 Page 11 INDIVIDUAL STUDIES SAFAN SYSOP OPTANINITIAL PHASE Project Engineer * * * Representative from :– Safety Department * *Custodian Department (Operations/ Field Maintenance) * * *Electrical Engineering Discipline * * *Design Consultants (If used) * * *EPC Contractor (if different from Design consultant) * * *Government representatives (if interface exists) * * * FINAL PHASE Project Engineer * * * Representative from :– Safety Department *Custodian Department (Operations/ Field Maintenance) * * *Electrical Engineering Discipline * * *Design Consultants (if used) * * *EPC Contractor/Manufacturer Systems Design Engineer * * *Government representatives (if interface exists) * * * * Representative to attend. Figure 3-1 - SAFOP STUDY TEAM COMPOSITION Preferred membership for these small teams should enableChecksheets/Worksheets to be speedily compiled and avoid unnecessaryassumptions and speculation that are time wasting and present problems inunderstanding Worksheets in the Data File.As with HAZOP and other studies it is desirable for all team members to havecomprehensive briefing or training before taking part in a SAFOP study.It is essential that both Team Leader and Secretary study this guide and have clearunderstanding of different working methods described for all three types of individualstudies.-cont.-It is obviously vital that overall project objectives are clear to the Team Leader andthat he is aware of the time scale for the schemes partial or final

commissioning, sothat he can plan the different team meetings to achieve maximum effective use ofmembers time and effort. 3.3.5 Training The Team leader shall suitably plan training sessions if he feels that these arerequired. Training sessions should consist, in the main, of a presentation by theTeam Leader of both objectives and proposed working methods of the complete SAFOP study.If possible, all members of SAFOP study teams should attend this presentation sothat they may question the Team Leader on their individual roles in the teams.At this presentation, the Team Leader should establish at what date design drawings,diagrams and relevant data will be available for both Initial and Final phase teamstudies. The Team Leader will then outline the preparative work (see FIGURE 3-2)that each member should undertake before team meetings.

SAFOP Guidelines Doc. Ref.: QSP-FE-03-22August 2001 Page 12 3.4 STUDY EXECUTION3.4.1 General All three individual studies can be conducted independently of the other two, ifnecessary, but the approach shown on the flowchart (see FIGURE 3-2) shouldproduce the best result, although it is recognised that there will be some necessaryoverlapping or crosschecking of individual studies. SAFAN and SYSOP studiescertainly should be carried out, if possible, at both Initial and the Final phases of theproject, but it is perhaps not so rewarding to carry out an OPTAN initial Study until the SYSOP

Final Study is complete. Obviously it is difficult to try and identify whereoperator error is possible when final design of the plant and ancillary equipment is notknown. However, it may help in, selecting staff who will undertake Control Room andField Operator duties. 3.4.2 Methods The number of team meetings should be kept to a minimum consistent with theefficient working of teams.Initial study should be completed in one to two days once team members havemastered working methods. However a final SYSOP study could well take one tothree days, depending on the size of a project and the amount of major plant andancillary equipment to be installed.Availability of team members to attend meetings must be considered but it isimportant not to work as a team for more than five hours at one session. This is firstlyto enable the Team Secretary to write and produce copies of his worksheets for theteam’s approval at the next days meeting. Secondly, so that the team remains freshand retains its capacity for inquiring in to details of a project with the original thinkingnecessary to spot anomalies or detect unforeseen hazards. 3.4.3 Environment Finally, it is desirable to conduct team meetings in an environment remote fromthe normal offices of the members to prevent continual interruptions and phonecalls causing inevitable distraction. A Conference Room with plenty of space forlaying-out drawings, etc., is ideal. 3.5 PREPARATIVE WORK3.5.1 General Preparative work can be classified into two elements: one consisting of data providedby Consultants and Manufacturers and the other undertaken by individual teammembers.Engineering design is provided by Consultants and Manufactures in the form of layoutdrawings, protection schematics, Operating manuals etc. SPDC Electrical SafetyRules(ESR’s), Electrical Safety Operational Procedures (ESOP’s) and HSE Standardsshould be made available to teams in addition to general safety instructions that referto particular hazards. 3.5.2 Initial Study At this phase terms of reference are composed, teams formed and base datacompiled. Working procedures are clearly defined before the main studycommences. 3.5.3 Final Study Final study teams should have design drawings, diagrams and all relevant data in a'frozen’ state. Manufacturer(s) shall be able to incorporate any changes fordeviations, which are not acceptable to the SAFOP Team. Again, appropriate

Doc. Ref.: QSP-FE-03-22AUGUST 2001 Page 13 specialists should be able to save a team valuable time by becoming familiar withthese before the team's meetings. 3.6 RECORDING3.6.1 Worksheets A Team Secretary has the duty to ensure that record of SAFOP study results areproduced and written in a consistent and understandable manner. He must ensurethat recommended actions are clear and are unambiguous, as well as record theSPDC department/EPC Contractor is to discharge the actions.Worksheets must be clearly identified and marked to indicate whether study is at theinitial or final phase of a project.All drawings and diagrams examined at team meetings must be listed on appropriateWorksheets, together with revision numbers of copy tabled. 3.7 FOLLOW-UP3.7.1 Recommended Actions Follow-up work undertaken on completion of a SAFOP study will be in the form ofrecommended actions calling, for example, for modification to design or a writtenprocedure to cater for a particular situation.If an Initial Study is undertaken, recorded Worksheets should be an invaluable aidwhen the Final Study is commenced. Assumptions that have sometimes to be madeat an early design phase can be checked for accuracy when design drawings are inan approved 'frozen' state. Recommended actions sometimes will now not benecessary for a particular aspect as, in the meantime, the project engineer may havetaken steps to improve the situation. SAFOP Guidelines Doc. Ref.: QSP-FE-03-22August 2001 Page 14 Figure 3–2 SAFOP Study Sequence SAFETYANALYSIS (SAFAN)STUDYSTUDYMETHOD HAZARDKEYWORDSYSTEMSECURITY &OPERABILITYANALYSIS (SYSOP )GUIDEWORDMETHODOPERATORTASKANALYSIS( OPTAN)

KEY TASKAND YES/NOTECHNIQUESTUDYCOMPLETIONSAFOPSTUDYGUIDETECHNICAL AUDIT &EVALUATION OFMAJOR DANGERS &RISK TO PERSONALSAFETY* ADDITIONAL SAFETYPROCEDURESIDENTIFIED* LAYOUT / PLANTDESIGN CHANGE* ESOPsSECURITY OF SYSTEM& OPERABILITY OFPLANT / EQUIPMENT* DESIGN MODIFICATIONS* ADDITIONAL OPERATIONAND MAINTENANCEPROCEDURESIDENTIFIEDOPERATOR TASKOPERATOR INTERFACEDECISIONSSUPPORTING INFOACTIONSCONTROL FACSSAFOP STUDYREPORT(Recommendations& action list)* OPERATOR FACILITIES* TRAINING & SUPPORT* DOCUMENTATION* TASK* DESIGN* ORGANISATIONSAFOP STUDYDATA FILESAFOP STUDYINPUTS(see figure 1)

Doc. Ref.: QSP-FE-03-22AUGUST 2001 Page 15 4. SAFETY ANALYSIS (SAFAN) 4.1 GENERAL4.1.1 Study Phases A SAFAN study may be divided into two distinct phases • An initial technical audit undertaken by the study team on conceptualdesign to examine an overall project in terms of safe operation and safetyof personnel, (Section 3.2 gives details.) • A final SAFAN study carried out during the frozen design stage prior tomanufacture, when construction drawings are available, giving detailedlayouts of overhead lines and substations. These

drawings can beexamined now in detail by the study team to determine if project designpermits safe operation with adequate safety of personnel. 4.2 STUDY TECHNIQUE To assist the study team in identifying potential hazards, a number of 'Keywords' or‘Guide words’ are used to identify specific types of dangers that an installation canpresent to various categories of personnel who may be effected by it.To further aid the team in its evaluation, a list of 'Prompt-words' for each Keyword hasbeen prepared (see FIGURE 4-1 for suggested Key words and Prompt words).Possible dangers that an installation presents to persons vary with degree of accessor exposure permitted. Within these limitations three groups of persons have beenidentified and classified into: • Outside Persons' (not under SPDC Safety Regulations). • ‘Non-Electrical SPDC Staff and Contractors’ (under SPDC Safety Regulations,but with No Authorised Entry into SPDC Electrical Installations). • ‘Electrical SPDC Staff and Contractors' (under SPDC Safety Regulations WithEntry to Electrical Installations).A common checksheet is used for each of the above classifications. The group beingexamined shall be indicated in the worksheet. 4.3 PROCEDURE The team assesses in detail possible situations where persons may be exposed todanger.The Team Leader selects a constituent part of the overall installation for detailedstudy and applies a Hazard Keyword; for example, the part chosen could be a sectionof overhead line, with the Keyword 'Electrocution' applied. For each Hazard Keywordchosen, situations where persons may be exposed to danger be assessed inconjunction with necessary corresponding design information such as plant layout,boundary fences, screening, etc.Team discussions take place to identify all possible situations where danger to eachclassification of person could arise and will be indicated on the checksheet.-cont.-It should be borne in mind that electrical installations operate as complete systems,where occurrence or initiation of faults in one location may cause serious SAFOP Guidelines Doc. Ref.: QSP-FE-03-22August 2001 Page 16 consequences elsewhere in a system. For example, a lightning strike on anoverhead line may result in flashover of equipment at the nearest substation somedistance from the original incident location.Electrical faults can also vary over a considerable time period, with fault duration offractions of a second to periods of several minutes, depending on protection, alarm andcontrol schemes and, in the last resort, on the reactions of the operators.Recognition of potential Hazards will depend, to some extent, on operationalbackground and experience of team members. However, the Prompt-word list inFIGURE 4-1 may be used to stimulate discussion and to aid the team in itsassessment.Study continues until all Hazard Keywords have been applied in turn to eachindividual constituent part of a complete installation and possible dangerous situationsdetermined for each personnel classification.In a large installation it is possible that some constituent parts will recur and, ifidentical, will not require further

investigation. However, any interactions with otherparts of the installation may still need to be assessed.FIGURE 4-2 illustrates the Safety Analysis study sequence. 4.4 RECOMMENDED ACTIONS All situations identified on the checksheet as being potentially dangerous to personnelare recorded on SAFAN Worksheets, together with information used or required forassessment and, if possible, with actions recommended by the Study Team. Theserecommendations should, if possible, suggest means by which: • The causes of the Hazard are removed. • Failing this the means to prevent persons being exposed to the Hazard. • Finally if these cannot be satisfactorily achieved, then the minimumresponse is to limit consequences of the Hazard as far as practicable.In the case of minimum response to a defined hazard, an additional decision needs tobe reached as to whether further research or investigation is required to remove ormitigate the Hazard, the SPDC department/EPC Contractor responsible is recordedon the Worksheet by the Team Secretary. 4.5 EXAMPLES4.5.1 Safety Analysis (Outside Persons) Person classification - Outside Persons (Not under SPDC Safety Regulations).Hazard Keyword Selected - Electrocution.Exposure Situation - High Voltage Conductor on Ground.Data Required - Protection Information.Assess - Possible Danger.Recommended Actions - Consider use of earthed cables, e.g., at road crossings. Reviewprotection for adequacy.Record SAFAN CHECK SHEET/WORKSHEET.4.5.2 Safety Analysis (Non-Electrical SPDC Staff) Person Classification - Non-Electrical SPDC Staff.Hazard Keyword Selected Electrocution.Exposure Situation - Fire fighting staff attending fire in substation compound withexposed high voltage conductors.

Doc. Ref.: QSP-FE-03-22AUGUST 2001 Page 17 Data Required - Existing instructions to fire fighting teams. RecommendedActions Check SPDC fire instructions and modify if necessaryto direct teams to custodians of electrical substation before entry.Record SAFAN CHECK SHEET/WORKSHEET4.5.3 Safety Analysis (Electrical SPDC Staff) Person Classification - Electrical SPDC Staff and Contractors.Hazard Keyword Selected - Toxicity.Exposure Situation - Substation air conditioning.Data Required - Layout of air conditioning system.Assessment - Possible circulation of smoke and toxic fumes from switchroomsinto control and relay room.Recommended Actions - Check compatibility of air conditioning with fire zones.Recommend installation of fire detection panel in low fire riskarea (local Control Room) with audible alarm.Record SAFAN CHECK SHEET/WORKSHEET

SAFOP Guidelines Doc. Ref.: QSP-FE-03-22August 2001 Page 18 Electrocution Direct ContactIndirect ContactProximityInductionStep PotentialTestingWorkingSite WorkExcavationsErectionFencesBuilding near Substations/Lines Fire PolesTransformersConductors (Arcing Ground)Fireball (Explosion)DC Arcs Explosion Pressure, Tension, Compression (releaseof force)BlastInsulatorsSeepageGas/Oil CollectionChemicalRacking (isolatable Switchgear)TransformersSwitchgearBatteriesCylinders Physical Danger Falling (onto/into)Site Construction Work (Fences)Remote Control (Mechanical Devices)Racking (isolatable Switchgear)Mechanical DangerEmergency exitsLadders, etc.Warnings for remote Switchgear andtapchangers operations

Toxicity S.F6 (Arc products)H 2 SGasesAcidsAsbestosPVCChemical Radiation x-raysRadio Active Substances Figure 4-1 - SAFAN GUIDE WORDS AND PROMPT WORDS

SAFOP Guidelines Doc. Ref.: QSP-FE-03-22August 2001 Page 26 Consequences and Results- Busbar zone protection isolates adjacent 132 kV Busbar.Loss of 132 kV interconnection- Loss of supply, only one transformer installed at substationPrompt-word - 'Back-up’Recommended Action - Check that overhead line protection acts as back up in caseof bus-zone protection failure.Record SYSOP Checksheet/Worksheet.

SAFOP Guidelines Doc. Ref.: QSP-FE-03-22August 2001 Page 27 GUIDEWORD PROMPTWORDSIdentify Unable to identifyMisleading identification(Misidentify) Operate Will not operateWill not openWill not closeWill not tripWill not tapWill not isolateNo operation cooling Control Cannot controlIncorrect controlDisconnectorCircuit BreakerTap ChangerCoolersNeutral Switch Display No indicationNo alarmsNo informationFalse display Maintain Cannot maintainIsolateEarthTestClearance Protect Short circuitEarth faultOpen circuitOverloadBack-up (protection) Environment TemperatureHumidityVibrationNoiseLighting Figure 5-1 - SYSOP GUIDE WORDS AND PROMPT WORDS

SAFOP Guidelines Doc. Ref.: QSP-FE-03-22August 2001 Page 28 Figure 5-2 - SYSOP COMPONENT ASSEMBLY METHOD STUDY SEQUENCE2. EXPLAIN FUNCTION OF COMPLETE ELEMENT 3. APPLY GUIDE WORD 5. DEVELOP DEVIATION 6. EXAMINE LOCATION/CAUSE 7. EVALUATE CONSEQUENCES AND RESULTS 8. RECOMMEND ACTIONS 9. RECORD 10. REPEAT STEPS 4 TO 9 FOR ALL COMPONENTS 11. REPEAT STEPS 3 TO 10 FOR

ALL GUIDE WORDS 12. REPEAT STEPS 1 TO 11 FOR EACH ELEMENT FINISH 1.SELECT ELEMENT OF COMPLETE SYSTEM 4. SELECT COMPONENT AND EXPLAIN FUNCTION STARTEXAMINE OVERALL SECURITY OFELECTRICAL SYSTEM

SAFOP Guidelines Doc. Ref.: QSP-FE-03-22August 2001 Page 29 START2. SELECT ELEMENT OF 3. EXPLAIN FUNCTION OFSELECTED ELEMENT5. SELECT ASSESSMENT POINT 6. EXAMINE LOCATION/CAUSE7. EVALUATE CONSEQUENCESAND RESULTS8. RECOMMEND ACTIONS9. RECORD10. REPEAT STEPS 5 TO 9 FOR 11. REPEAT STEPS 4 TO 10 FORALL

DEVIATIONS12. REPEAT STEPS 2 TO 11 FOREACH ELEMENTFINISHEXAMINE OVERALL SECURITY OFELECTRICAL SYSTEM4. APPLY DEVIATION1. APPLY GUIDE WORD Figure 5-3 - SYSOP ELEMENT ASSESSMENT POINT STUDY SEQUENCE

SAFOP Guidelines Doc. Ref.: QSP-FE-03-22August 2001 Page 30 Figure 5-4 - ELECTRICAL SYSTEM POSSIBLE ELEMENT AND STUDY SEQUENCESTARTFINISH1. DISTRIBUTION CIRCUIT2. BUSBAR3. TRANSFORMER4. BUSBAR5. TRANSMISSION CIRCUIT6. BUSBAR1. TRANSFORMER(IN PARALLEL)109877

SAFOP Guidelines Doc. Ref.: QSP-FE-03-22August 2001 Page 31 Components1. Circuit Breaker 7. Indication/Control Circuits 2. Current Transformer 8. Batteries/ DC Supplies3. Voltage Transformers 9. AC Supplies4. SCADA 10. Gas / Air Supplies5. Instrumentation 11. Cabling/ Earthing6. Protection Circuits 12. Alternative In feed Conditions Figure 5-5 – 33 kV FEEDER CIRCUIT ELEMENT TOGATHERINGSTATIONELEMENT 33 kV FEEDER CIRCUIT

SAFOP Guidelines Doc. Ref.: QSP-FE-03-22August 2001 Page 38 6 OPERATOR TASK ANALYSIS (OPTAN) 6.1 GENERAL6.1.1 Study Phases An OPTAN study may be divided into two distinct phases. They are: • The initial study may be carried out after the conceptual design stage. However, asspecific data will not be available at this time, study should concentrate on the systemrequirements and staffing for Control Room and Field Operator duties. (Subsection 3.2.1gives details.) • The final study should take place following SAFAN

and SYSOP studies on the 'frozen'design when many Operator tasks will have been identified.The study team should look in detail at tasks required to be undertaken by Control Room andField Operators, analyse Operator predicted response to these tasks, and review equipmentand instructions provided. 6.2 STUDY TECHNIQUEOPTAN methods used by the SAFOP Study Team naturally follow on from SAFAN techniques and SYSOP examination sessions. (Chapters 4.0 and 5.0 of this EngineeringGuideline.)Detailed complexity of all Operator actions and decisions makes it unlikely that a completeassessment of every eventuality will be achieved. However, by drawing attention to certainsalient points and general problems, possibility of human error should be considerablyreduced.Anything which makes human operator’s work more difficult can lead to mistakes. Operatorsmay develop poor work habits to cope with difficulties. This may lead them to either forget todo something, or to use wrong working methods. These habits may be tolerated undernormal working conditions but are likely to give rise to serious problems when combined withpower plant failure or loss of supply.Major incidents usually occur through combination of minor failures. For example, one item(such as a VDU display, which is difficult to read) may seem trivial when considered alone,but when considered with other factors (such as heavy workload) may have seriousconsequences.To assist the team in its study, Operator tasks in both Control Room and Field are subdividedunder three main headings. These are: • Normal Operator Duties. • System Switching. • Abnormal or Emergency Conditions.Each of these duties are further subdivided under headings which attempt to establish acorrelation between procedures envisaged and situations considered. These headings,defined as key tasks, are: • Monitor/Check. • Make Decisions. • Actions.Typical questionnaires to establish main tasks for Control Room and Field Operators areprovided in APPENDICES 3 and 4.

SAFOP Guidelines Doc. Ref.: QSP-FE-03-22August 2001 Page 39 6.3 STUDY PROCEDURE This part of the study analyses an Operator's anticipated response to his task byassessing the ability of that Operator, his equipment and instructions to give optimumperformance with a minimum of error.The team should consider decisions Operators make in carrying out every step oftheir responsibilities, the information they need to identify and carry out their task, andthe relative frequency and level of demand on each of these responsibilities.Operators must understand what is happening, have foreknowledge of requiredactions, and must know what results to expect from any actions taken.Like in SAFAN and SYSOP to assist the study team in its assessment, a list ofPrompt-words has been prepared. These are used to pose key questions. 'Have theOperators sufficient experience to perform their duties with a minimum risk of error?Suggested Prompt-words are: • Training. • Understanding. • Authority. • Instructions. • Information.These questions are applied in turn to specific Operator duties relating to variousitems of plant, equipment and procedures.Questions can also provide a framework for analysis of incidents in which humanerror is involved. Each question is intended; after consideration, to be answered by a'Yes' or a 'No' or by a qualified response 'it depends'. In an well-organised workingsituation the answers should all be 'Yes'.The study continues

until the team is satisfied that all relevant Operator tasks havebeen assessed and results recorded. 6.4 RECOMMENDATIONS When the answer to the question is 'Yes' the likelihood of human error will probablybe low and changes to the situations to which the questions relate should not benecessary.A 'No' answer to the question reveals a potential for Operator error. To minimise riskof error, a specific operating procedure may need to be adopted or it may benecessary to incur additional expenditure on plant design modifications. However,such expenditure should be carefully evaluated against consequences.When the answer is 'it depends', then a Judgement must be made of whethercircumstances in which a problem arises, merit further attention.Questions applied and operator duties assessed, together with results obtained andrecommended actions, are recorded on 'OPTAN' Worksheets.Flowchart FIGURE 6-1 illustrates the study sequence for Operator Task Analysis.

SAFOP Guidelines Doc. Ref.: QSP-FE-03-22August 2001 Page 40 6.5 EXAMPLES6.5.1 Control Room Operator Task Analysis Selected Main Duty - Abnormal and emergency conditions.Selected Key Task - Take action.Plant Identified - Fault on 33 kV overhead line.Key Question Applied - Has he the AUTHORITY to switch out or attempt toreturn to service this item of plant?Answer Obtained - No.Action Recommended - Review limits of Authority and Responsibility. Checksecurity of supply criteria.Record Results OPTAN Checksheet/Worksheet6.5.2 Field Operator Task Analysis Selected Main Duty - System switching.Selected Key Task - Make decisions.Plant Identified - Major items of plant and equipment.Key Question Applied - Has he the UNDERSTANDING and TRAINING tocheck all relevant plant conditions on site beforeinitiating switching programs, e.g., Plant loading,Transformer Tap positions, etc? Answer Obtained - No.Action Recommended - Review Training.- Define limits of Authority and Responsibility. Review Electrical Operational Safety Proceduresand Electrical Safety Rules.Record Results OPTAN Checksheet/Worksheet

OPTANCHECKSHEET Promptwords Plant Equipment Procedures Monitor Generators Emerg.generatorMotors Transformer UPS ThyristorControlsSwitching Isolating AuthorisationTraining ESRUnderstanding ESRAuthority ESRInstructions ESRInformation

SAFOP Guidelines Doc. Ref.: QSP-FE-03-22August 2001 Page 41 Figure 6-1 - OPTAN STUDY SEQUENCE START2. SELECT MAIN DUTY3. SELECT KEY TASK5. APPLY KEY QUESTION6. OBTAIN ANSWERYES/NO/IT DEPENDS9. REPEAT STEPS 5 TO 8 FOR ALLKEY QUESTIONS7. RECOMMEND ACTIONS8. RECORD10. REPEAT STEPS 4 TO 9 FORALL ITEMS/ PLANT/ EQUIPMENT/PROCEDURES11. REPEAT STEPS 3 TO 10 FORALL KEY TASKS12. REPEAT STEPS 2 TO 11 FORALL MAIN

DUTIESFINISH4. IDENTY PLANT / EQUIPMENTPROCEDURES1. SELECT OPERATORCONTROL ROOM/ FIELD

SAFOP Guidelines Doc. Ref.: QSP-FE-03-22August 2001 Page 42 OPERATOR TASK ANALYSIS (OPTAN) WORKSHEET Project : Stage of Study (INITIAL/FINAL) :Location :Drawings :Sheet …….. of ……….Operator : CONTROL ROOM/ FIELD Operator Duty: NORMAL DUTIES/ SYSTEM SWITCHING/ EMERGENCY OPERATIONKey Task Plant/ Item Knowledge/ Resource YES/ NO Recommendation Action

SAFOP Guidelines Doc. Ref.: QSP-FE-03-22August 2001 Page 44 APPENDIX 1 – NOTES OF GUIDANCE FOR SAFOP TEAM LEADERS GENERAL • It is essential, having been chosen as Team Leader for a SAFOP study, that the SAFOP Guide is read in its entirety so that its objectives and the different type of studies that arenecessary to achieve them are understood for both Initial and Final phases. • It will be necessary to establish with the various SPDC departments involved who will act astheir representatives at both Initial and Final phase studies. ( SAFOP

3.3.4). • If one of these representatives can act as Team Secretary ( SAFOP Subsection 3.3.3)throughout the studies, this should be agreed before the Team's first meeting. It should benoted that some technical knowledge and ability to accurately record team decisions isdesirable for this role. • It is important to agree with the Project Engineer the date when design philosophy data,drawings, diagrams, etc., will be available for either the Initial or Final phase study meetings. • A suitable room for team meetings should be arranged that meet the suggested requirements.( SAFOP Subsection 3.4.3). Flip charts and an overhead projector will be useful, depending onthe style of presentations decided upon. A plentiful supply of individual study, blankWorksheets should be available for members. TEAM'S INTRODUCTION TO SAFOP • A copy of the SAFOP Guide should be supplied to all members of the SAFOP study team wellbefore the initial meeting. • A presentation, possibly on Flip charts or overhead projector slides, should then be made to allnew members of the SAFOP team, preferably by the Team Leader. • The scene for the studies should be set so those individual members understand theirrespective roles, and may ask questions to clarify their responsibilities. • At this first meeting it should be agreed which documents, e.g., design philosophy data,drawings, diagrams, etc., will be circulated to individual members so that they will he able tomore easily answer queries on their particular subject or specialisation. • The Team Leader should explain that there would always be some necessary overlap or crosschecking of particular aspects of the projects under discussion at the different types of studies. • When such queries have been aired the discussions should be curtailed and the querydirected to the individual study team that is dealing with the particular subject. •

It should be remembered that it is most frustrating for team members to sit through a TeamLeader's explanation of a SAFOP study each time a new member Joins a working meeting.This can be avoided by giving the new team entrant a copy of the SAFOP Guide and, ifpossible, a separate briefing by the Team Leader or Team Secretary before attending his firstmeeting. STUDY EXECUTION • The SAFOP Guide (Subsection 3.4.1) suggests a preferred method of working through theindividual studies and the amount of time that should be allotted for team meetings. • The Team Leader must ensure that all members of the team are given an equal opportunity tocontribute at team meetings and that one member does not dominate the discussions,particularly because of his seniority. • The Team Secretary must be allowed time, both at the team meetings and afterwards, torecord the team's recommendations on the study worksheets. And, ideally, have the facility ofready access to a word processor unit so that the amendments agreed could be available forthe next team meeting and the SAFOP Data File updated. FOLLOW-UP

SAFOP GUIDELINES Doc. Ref.: QSP-FE-03-22August 2001 Page 45 •

The Team Leader should identify at team meeting which member or department is requiredto take action on a particular issue, and should ensure that he is given the authority to expecta satisfactory answer at subsequent meetings. • Finally, the Team Leader should be satisfied that after both Initial and Final phase studiesare complete that the Team Secretary has produced a comprehensive SAFOP Data Filewhich can have an agreed circulation and, if necessary attached action list.

SAFOP Guidelines Doc. Ref.: QSP-FE-03-22August 2001 Page 46 APPENDIX 2 – NOTES OF GUIDANCE FOR SAFOP TEAM SECRETARIES GENERAL • It is essential that having been chosen as Team Secretary for a SAFOP Study, that the SAFOP Guide is read in its entirety so that its objectives and the different type of studies that arenecessary to achieve them are understood for both Initial and Final phase studies. • An early meeting with the Team Leader is desirable before the first team meeting so that thefollowing items can be discussed and an action plan agreed • Establish the representatives who will attend team meetings, and their availability. ( SAFOP Subsection 3.3.4). • Date of first meeting for all team members and circulation of date and details. • Booking of 'Conference Room' for meeting. ( SAFOP Subsection 3.4.3).

• Copies of SAFOP Guide to be obtained and distributed to members of team. • Flip charts, overhead projectors, are availability for presentation at first meeting. • Copies of blank worksheets for individual members. • Data, drawings and diagrams to be made available by Project Engineer at Initial or final phasestudy meetings. • Access to word processor unit for typing, correcting and copying of worksheets. • Presentation at first meeting – who does what? STUDY EXECUTION • The Team Secretary must record the drawing numbers, etc., of all documents tabled and thererevision numbers on the worksheets. • The location, e.g., a particular substation or section of overhead line examined, must be identifiedon the worksheets. • Only when an action is required of someone is an entry made on the individual study worksheet. • The words used in 'Recommended Action' or ’Recommendation column' of Check/Worksheet areimportant and should be agreed by the team at the presentation meeting. As a suggestion, forinstance these could be :-Review: The team is unhappy regarding a certain aspect and wants clarification or suggestsa 're-think' by department responsible.Consider: The team feels that certain actions or policies should be adopted if the economicsallow.Recommend: The team is agreed and feels strongly that a certain modification or change to theproposed design or policy should be made. • The Team Secretary should be firm in establishing the 'Recommended Action' orRecommendation' that the Team Leader has agreed will be recorded on the Worksheets. Inparticular, if the Team Secretary has taken part in discussion on specific issues, opportunityshould be sought to properly record it at that time. • The Team Secretary should try to encourage the Team Leader to keep team meetings to the five-hour maximum suggested in this Guide ( SAFOP Subsection 3.4.2). •

Try to assist the Team Leader in curtailing discussions on specific aspects of the projects atindividual studies that should be taking place under a different individual study. (I.e. predictedaction by a Control Room Operator in a SYSOP team meeting when it is better aired in an OPTAN team meeting). FOLLOW-UP • Produce final agreed Worksheets and place in SAFOP Data File. • Circulate SYSOP Data File (either Initial or Final) to an agreed distribution.

SAFOP GUIDELINES Doc. Ref.: QSP-FE-03-22August 2001 Page 47 APPENDIX 3 – CONTROL ROOM OPERATOR'S MAIN TASKS QUESTIONNAIRE GENERAL The following questionnaire has been prepared under three pleadings, which are consideredto be the Control Room Operator's Main Tasks. These are: • Normal Operator Duties (Monitor or Check). • System Switching (e.g., Plant Remote Operation). • Abnormal or Emergency Conditions (e.g., Plant Failure, Loss of Supply,Commissioning and System Outages).In the following questions, the word 'Display' refers to all methods of giving information tothe operator, the word 'Control' applies to all means by which the operator givesinstructions. CONTROL OPERATOR QUESTIONNAIRENormal Operator Duties

Under normal duties the operator will: • Monitor or Check Displays. • Make Decisions. • Take Actions.Monitor or Check DisplaysAre all displays including VDUs and Mimic Diagrams easily readable with clear identifiableinformation?Is all relevant information supplied? Is redundant information kept to a minimum?Is there an Alarm List available on VDUs?Is there a 'Banner' area for incoming alarms? Is confusing paging of VDU displaysavoided?Are Audio Indicators for various functions easily distinguishable?Are there sufficient VDUs so that all information required at a given time can be displayedsimultaneously?Is the operator able to initiate routine logging of specific items of plant in terms of measuredvalues at regular intervals?Is it possible to easily set and alter High and Low Limit Alarms on measured values?Is it possible for an operator to easily adjust setting factor and dead band area on measuredvalues?Is any change of state taking place on the power network displayed regardless of whetherrelevant substation or plant has been switched to ‘Local’?-cont.-Are colour codes and any other such conventions used in displays readily obvious in meaning andeasy to learn?

SAFOP Guidelines Doc. Ref.: QSP-FE-03-22August 2001 Page 48 Are colour guns on the VDUs permanently monitored?Can operators initiate regular checks of the SCADA system by routine operation of a dummy circuitbreaker at each substation? (Also possibly dummy analogues).Can a page of VDU information is easily transferred to hard copy printout on a logging printer(regardless of colour)?Does acceptance of incoming alarm information NOT remove such information from display? Is there adequate monitoring of the SCADA system itself? (Monitoring of SCADA system – indications of on-line computer, Hot standby/off-line computer, Healthy UPS system, and Regulartransmissions over standby routing to substations) i.e., is a Watchdog panel provided?Make DecisionsBased on information received from the overall monitoring of a system, can operators makedecisions related to? • Changing Transformer Tap Positions? •

Opening and Closing Circuit Breakers? • Generator Output? • Overload Conditions on Transformers and • OHL Voltage Levels?Can the operator be assisted at arriving at these decisions by having rapid and secure access tocommunication with Generator Operators, Field Staff, Administrative Staff, Senior AuthorisedElectrical Persons?Is information, upon which decisions are based concerning plant, derived from the plant componentitself as far as possible?Take ActionsIs there adequate 'Tell Back' responses to actions performed, such as: • Transformer Tap Changing? • Circuit Breaker Operation? • Reset of Trip Relays? • Start and Stop Transformer Cooling Fans?Can any incorrect selection be easily cancelled prior to final actuate signals being sent?Are there full and adequate procedures laid down, and are these easily understood even bypersonnel unfamiliar with the system. System Switching All previous questions under Normal Operations are relevant and applicable in the case of systemswitching, plus the following.-cont.-Are there formal procedures set out such as preparation of switching programs andagreement with field staff over these schedules prior to implementation?Will the safety aspects of system switching be included within the operator's responsibilitiessuch that he formally enters and logs details of documents, (Electrical Permits to Work,etc.) application of Circuit Main Earth and implementation of ESR requirements?

SAFOP GUIDELINES Doc. Ref.: QSP-FE-03-22August 2001 Page 51 Will the substation be subject to the ESR when the last connection is to be made toconductors that can be made alive from the system?Will a Senior Authorised Electrical Person (SAEP) become involved in the protection andvoltage pressure testing before the substation is connected to the system?Will SPDC provide technical staff to monitor turnkey contractors' staff when substation ispartially commissioned?Has the operator the training and understanding to identify abnormal plant conditions andemergency situations, e.g.: • A tap changer stuck between taps? • A circuit breaker locked out? • Relay flag operations? • Low battery volts? • Low oil levels? • Buchholz gas alarms, etc.?Has the operator been told not to climb any structure without safety documentation?Has the operator training, understanding and instructions to carry out minor tasks on plant,and equipment, e.g.: • Reset relay flags and indicators? • Test cooling fans? • Reset maximum reading instruments? • Change silica gel breathers?Have the operator instructions to inspect and check: • Portable earths? • Posts, chains, ropes, etc. (temporary barriers in compounds)?Is the operator aware that when performing battery inspections, smoking and the presenceof naked flames are prohibited in battery rooms or in the vicinity of battery installations? System Switching (Operating Plant) When performing switching operations, has the operator been made familiar and receivedtraining on: • Operation of 132 kV Disconnector? • Operation of 132 kV Earth Switches? • Operation of 132 kV Circuit Breakers (Local)?

• Operation of 33 kV Circuit Breakers (Local) including isolating, locking-off andearthing both circuit and busbars? • Operation and control of transformer tap changers? • Application of Circuit Main Earths to 132 kV and 33 kV coppers? • Operation of Tap Change Controls? • Operation of Low Voltage Switchboards?Has the operator been trained in the use of correct voltage detectors before applying CME’sto? • Exposed coppers? • Switchgear spouts?

SAFOP Guidelines Doc. Ref.: QSP-FE-03-22August 2001 Page 52 7. ENGINEERING STANDARD USER-COMMENT FORM Engineering Standard User-Comment Form If you find something that is incorrect, ambiguous or could be better in a standard, write yourcomments and suggestions on this form. Send the form to the Document custodian (CorporateDiscipline Head Electrical).The form has spaces for your personal details. This lets the custodian ask you about yourcomments and tell you about the decision. Standard Details Title Issue Date:Number:Page number: Heading Number: Figure Number: Comments:Suggestions:User’s personal details Name: Ref.Ind: Signature: Date:Phone: Custodian Actions RecdDate:

Decision: Reject:Accept, revise at next issue:Accept, issue temporary amendmentSign: Ref.Ind:Date:Comments:OriginatorAdvised:Date: Sign:Advised:Date: Sign: