IV

Rules for Classification and Construction Industrial Services

Offshore Technology

Guideline for the Certification of Blow-Out Preventers

Edition 2011

The following Rules come into force on May 1st, 2011 Germanischer Lloyd SE GL Noble Denton Brooktorkai 18, 20457 Hamburg, Germany Phone: +49 40 36149-750 Fax: +49 40 36149-280 glo@gl-group.com www.gl-group.com "General Terms and Conditions" of the respective latest edition will be applicable (see Rules for Classification and Construction, I - Ship Technology, Part 0 - Classification and Surveys). Reproduction by printing or photostatic means is only permissible with the consent of Germanischer Lloyd SE GL Noble Denton. Published by: Germanischer Lloyd SE, GL Noble Denton Printed by: Gebrder Braasch GmbH, Hamburg

IV Part 6 GL 2011

Section 1 Certification of Blowout Preventers

Chapter 8 Page 1 of 20

Table of Contents
Section 1 ................................................................................................................................................................. 3 Certification of Blowout Preventers .................................................................................................................... 3 1. 2. 2.1 2.2 2.3 2.4 2.5 3. 3.1 3.2 4. 4.1 4.2 5. 5.1 5.2 5.3 6. Scope of Equipment.................................................................................................................................. 3 Certification Process................................................................................................................................. 3 Basis for Certification............................................................................................................................... 3 Scope of Certification ............................................................................................................................... 3 Issue of Certificate.................................................................................................................................... 3 Operational Records ................................................................................................................................. 3 Validity of the Certification...................................................................................................................... 3 Certification of BOPs Built under Witness of GL .................................................................................... 6 General Notes ........................................................................................................................................... 6 Witness during Manufacture..................................................................................................................... 6 Certification of BOPs not Built under Witness of GL .............................................................................. 6 General Notes ........................................................................................................................................... 6 Certification Procedure ............................................................................................................................. 6 Inspections to Maintain the Validity of a Certificate ................................................................................ 7 Types of Inspection................................................................................................................................... 7 Explanations and General Requirments.................................................................................................... 7 Performance of Inspections ...................................................................................................................... 7 Quality Management and Workmanship .................................................................................................. 7

Section 2 ................................................................................................................................................................. 8 Principles, Normative References, Conditions, Documents .............................................................................. 8 1. 2. 2.1 2.2 3. 4. 4.1 4.2 5. 5.1 5.2 5.3 5.4 5.5 5.6 5.7 5.8 5.9 General Principles..................................................................................................................................... 8 Rules and Regulations to be Considered .................................................................................................. 8 Rules of Germanischer Lloyd ................................................................................................................... 8 Internationally Recognised Codes and Standards..................................................................................... 8 Safety, Environmental and Process Conditions ........................................................................................ 9 Documents for Examination ..................................................................................................................... 9 Types of Documents ................................................................................................................................. 9 Components and Subassemblies ............................................................................................................... 9 Failure Mode and Effect Analysis (FMEA)............................................................................................ 10 General.................................................................................................................................................... 10 Description of Subsystems Relevant for the Analysis ............................................................................ 10 Block Diagrams of Relevant Subsystems ............................................................................................... 10 Analysis of the Relevant Subsystems ..................................................................................................... 10 Tabular Worksheet.................................................................................................................................. 11 Assumptions and Defined Limits for the FMEA .................................................................................... 11 Management of Change .......................................................................................................................... 11 Conclusions ............................................................................................................................................ 11 FMEA-based Test Program .................................................................................................................... 11

Chapter 8 Page 2 of 20

Section 1 Certification of Blowout Preventers

IV Part 6 GL 2011

Section 3 ............................................................................................................................................................... 12 Design and Manufacture of Blowout Preventers.............................................................................................. 12 1. 2. 2.1 2.2 2.3 2.4 3. 4. 5. 5.1 5.2 5.3 5.4 5.5 5.6 5.7 5.8 5.8.1 5.9 6. 6.1 6.2 6.3 6.4 7. Scope ...................................................................................................................................................... 12 BOP Stack............................................................................................................................................... 12 Pipe Rams ............................................................................................................................................... 12 Blind Shear Rams ................................................................................................................................... 12 Annular BOP .......................................................................................................................................... 12 Connectors .............................................................................................................................................. 12 Guide Frame Structure............................................................................................................................ 12 Equipment under Pressure ...................................................................................................................... 12 Control Systems...................................................................................................................................... 13 Design Review........................................................................................................................................ 13 Hydraulic Control Units (HCU) ............................................................................................................. 13 Electrical Control Units .......................................................................................................................... 13 Subsea Control Pods ............................................................................................................................... 14 Umbilicals............................................................................................................................................... 14 Accumulators.......................................................................................................................................... 14 Surface Control Stations ......................................................................................................................... 14 Control Station Locations ....................................................................................................................... 14 Control Station Functions ....................................................................................................................... 14 Control System Response Times ............................................................................................................ 15 Contingency Systems.............................................................................................................................. 15 Remotely Operated Vehicles (ROVs)..................................................................................................... 15 Deadman System .................................................................................................................................... 15 Auto-Shear System ................................................................................................................................. 15 Acoustic Control System ........................................................................................................................ 15 Choke and Kill System ........................................................................................................................... 15

Section 4 ............................................................................................................................................................... 16 Inspection and Test of Blowout Preventers ...................................................................................................... 16 1. 1.1 1.2 1.3 1.4 2. 3. 4. 5. 6. Inspections during Manufacture and Assembly...................................................................................... 16 Quality Plan ............................................................................................................................................ 16 Inspection and Test Plan (ITP) ............................................................................................................... 16 Non-Destructive Testing (NDT) ............................................................................................................. 16 Pressure Test........................................................................................................................................... 16 Factory Acceptance Test (FAT).............................................................................................................. 16 Site Integration Test (SIT) ...................................................................................................................... 16 Annual Inspections ................................................................................................................................. 17 Inspections for Re-Certification.............................................................................................................. 17 Extraordinary inspections after Modification, Repair or Major Overhaul.............................................. 17

Appendix 1........................................................................................................................................................... 19 National Regulations........................................................................................................................................... 19

IV Part 6 GL 2011

Section 1 Certification of Blowout Preventers

Chapter 8 Page 3 of 20

Section 1 Certification of Blowout Preventers

1. Scope of Equipment
elements, and control, monitoring and interfacing equipment. 2.3 Issue of Certificate

These guidelines are applicable to the design, construction, and inspection of blowout preventers (BOPs), which are to be certified by Germanischer Lloyd (GL), including their power supply interfaces and control and monitoring system. Blowout preventers include: Main body and various types of hydraulic rams and/or seals and the guide frame structure, which together form the BOP stack; Hydraulic accumulators and electrical batteries forming the subsea power supply system; Interfaces to connect wellheads and lower marine riser packages/risers; Interfaces to connect umbilicals for external power supply, control and monitoring; Interfaces to allow underwater manipulation by a remotely operated vehicle (ROV); Choke and kill system including manually and remotely controlled valves; Power Supply and Control System.

After successful completion of the certification activities the certificate will be issued by GL. The certificate shall be kept on the site where the BOP is deployed. 2.4 Operational Records

A BOP is required to carry an operational record file in which details of the operational history (site, environmental and process parameters, maintenance, damages, repair) and BOP test reports are entered. The operational records shall be submitted to the GL inspector on request. 2.5 Validity of the Certification

(1) The validity of a certificate is limited to five years. The certificate will be maintained and extended in its validity as long as the BOP is subjected to all prescribed inspections and tests, and any modifications and repairs found to be necessary are carried out to the satisfaction of GL. (2) If the BOP is not subjected to the prescribed inspections and tests at their due dates the certificate will be suspended. However, when an inspection becomes due while the BOP is in use, the inspection may be deferred until the well is completed. (3) If the BOP has sufficient damage affecting the certification or if such damage may be assumed an inspection and test shall be conducted before the BOP is redeployed. GL shall be notified of such a situation in due course. (4) Where it is found that the BOP no longer complies with the requirements on which the certificate was issued, and if the operator fails to carry out the repairs or modifications considered necessary by GL within a specified period to be agreed upon, the certificate will expire. (5) If the repairs and modifications required by GL have been carried out and the BOP is subjected to a re-certification inspection or an extraordinary inspection the original certification may be reinstated. The inspection is to be carried out in accordance with the scope for re-certification inspections or extraordinary inspections respectively, refer to section 4, para 5 and para 6.

2.

Certification Process

The certification process comprises a design review and various stage inspections during the manufacturing of components, the assembly of the BOP stack and the commissioning of the completed system. Certificates issued need to be renewed and reconfirmed in regular intervals, at least every five years, after annual inspections have been regularly conducted with success. 2.1 Basis for Certification

The following guidelines constitute the basis for the certification of blowout preventers. For requirements not defined in these guidelines, other rules and guidelines of GL shall be applied as far as they are applicable. The latter include Rules for Materials and Welding as well as other Rules issued by GL.In addition, internationally accepted codes and standards form the basis of the certification. Details are referenced in Section 2, para 2.2. 2.2 Scope of Certification

Certification covers the entire BOP stack, including its machinery components, power supply, structural

Chapter 8 Page 4 of 20

Section 1 Certification of Blowout Preventers be returned to GL.

IV Part 6 GL 2011

(6) The validity of a certificate of a laid-up BOP continues unchanged. On request, any inspections which become due may be deferred until the BOP is reactivated for service. In these circumstances, the total scope and extent of inspections and test required thereafter, shall be determined by GL on a case-to-case basis. (7) If a certificate has for some reason expired or has been withdrawn by GL, such a certificate shall

(8) Should the BOP and its systems have had any form of modification since its initial delivery from manufacturer, then a design review incorporating said modifications shall be conducted. (9) Any damage and subsequent repairs shall be subject to design review with the same parameters as a design review for modifications.

IV Part 6 GL 2011

Section 1 Certification of Blowout Preventers

Chapter 8 Page 5 of 20

Fig. 1.1 Graphical presentation of the certification process

Chapter 8 Page 6 of 20

Section 1 Certification of Blowout Preventers

IV Part 6 GL 2011

3.
3.1

Certification of BOPs Built under Witness of GL

General Notes

(5) Upon completion of the assembly, the BOP, including all structural elements and assembled components, shall be tested in accordance with the details set out in section 4 of these guidelines. (6) To enable the GL inspector to fulfil his duty, he shall be granted free access to the BOP and to the workshops where parts requiring inspection and tests witnessed by GL are manufactured, assembled or tested. The necessary staff and equipment shall be provided.

(1) The application for certification of a BOP is to be submitted to GL in writing by the manufacturer or operator. (2) A document register shall be submitted as early as possible, indicating the specifications, calculations, drawings and data sheets, which are available, or will become available, for review in the course of the project. (3) All documents describing the BOP are to be submitted in triplicate to GL in case of paper copies. Alternatively, a single electronic submission for examination is acceptable. (4) Alterations to documents and drawings approved by GL are subject to a repeated approval of GL before any works commence. (5) An Inspection and Test Plan (ITP) is to be submitted to GL for approval and mark-up of intervention points (monitor, witness, hold) to be attended by a GL Inspector and the designated Inspection Office is to be advised in good time of tests to be performed under the witness of GL. (6) Upon the completion of the construction works and successful testing of the BOP, GL will issue the certificate. 3.2 Witness during Manufacture

4.
4.1

Certification of BOPs not Built under Witness of GL

General Notes

(1) The application for the certification of a BOP not built under the witness of GL is to be submitted to GL in writing. (2) All documents related to the BOP are to be submitted for examination with the application for certification. The scope and depth of examination will be in accordance with sections 2, 3 and 4 of this guideline. (3) Existing certification, its validity and any recommendations which have been made conditional upon the existing certification, are to be submitted together with the application. 4.2 Certification Procedure

(1) Materials for new constructions, replacements and repaired parts shall be tested as defined in the GL Rules for Materials, or other proven codes and standards acceptable to GL. (2) Parts of the BOP requiring inspection and tests witnessed by GL will be checked during manufacture for conformity with the approved documents. (3) The separate components of the BOP are to be tested in the manufacturers premises for mechanical strength and, where appropriate, for functionality. For components of novel design which do not yet have a proven track record when incorporated into a BOP, GL may demand more extensive tests. (4) The GL inspector will witness the assembly of the BOP stack and the installation of the machinery, control, monitoring and interfacing components as per the quality control plans and inspection and test plans. The workmanship will be examined and the required strength, tightness and functional tests shall be carried out in his presence.

(1) For admission to certification, the BOP shall be inspected in accordance with the provisions of an inspection for re-certification, refer to section 4, para 5. (2) If the BOP holds a valid certificate of another recognised Classification Society, the scope and depth of the inspections and tests of individual parts may be deferred to the due dates for annual inspection. (3) A certificate will be issued on the basis of satisfactory results from the examination of documentation and on the basis of satisfactory inspection and test results witnessed by a GL inspector and documented in relevant inspection reports. (4) Once a BOP has received a GL certificate, the same regulations will apply as for BOPs built under the witness of GL.

IV Part 6 GL 2011

Section 1 Certification of Blowout Preventers 5.3 Performance of Inspections

Chapter 8 Page 7 of 20

5.
5.1

Inspections to Maintain the Validity of a Certificate

Types of Inspection

(1) A BOP, which is certified by GL is to be subjected to the following regular inspections, if the validity of the certificate is to be maintained: Annual Inspection, see section 4, para 4; Inspection for recertification after five years, see section 4, para 5; Extraordinary Inspection, where the BOP or some of its components have suffered damage liable to affect serviceability and, therefore, safety, see section 4, para 6. (2) GL reserves the right to demand extraordinary inspections. Such inspections may be credited against prescribed regular inspections. 5.2 Explanations and General Requirments

All inspections are to be performed in accor-dance with prescribed procedures against predefined acceptance criteria as outlined in inspection and test plans approved by GL. Where the operational and functional particulars differ from the standard case, the scope of inspection shall be adjusted accordingly in coordination with GL. The detailed scope of the inspections and tests is addressed in section 4 of this guideline.

6.

Quality Management and Workmanship

(1) The manufacturer/supplier of a BOP shall apply a valid quality management system, such as ISO 9001 or equivalent. (2) As far as required by such a QMS, all components shall be checked and inspected by the manufacturers own personnel for completeness, correct dimensions and faultless workmanship during fabrication, assembly and completion. (3) Afterwards, all components and equipment shall be presented to GL for inspection in suitable sections and with proper access; for pressure testing normally in uncoated conditions. (4) The GL inspector may reject components that have not been adequately prechecked and may require the resubmission upon successful completion of such prechecks and any resulting corrective actions. (5) All significant details concerning quality and functionality shall be reflected in the manufacturing documents and shall be presented to GL during inspections. (6) If, due to insufficient or missing information in the detail documents, the quality and functional particulars of a component are in doubt, GL may require improvements. This is valid for supplemental or additional parts even when at the time of document approval these were not required or could not be required due to lack of available information.

(1) The designated inspection office is to be given timely notice when regular inspections become due or when it is intended to carry out repairs or modifications, so that the work can be witnessed. (2) Equipment and components are to be arranged so that they are accessible for inspections on board. Where this is either not possible or would involve inappropriate efforts, inspections may also be performed, upon application, in the manufacturers works or in another authorised workshop. (3) The results of each inspection together with any special requirements upon which the maintenance of certification or its validity is conditional, will be attached to the certificate. (4) Where parts are damaged or worn to such an extent that they no longer comply with the requirements of these guidelines or the applicable codes and standards, they shall be repaired or replaced. (5) Where defects are repaired on a temporary basis or where GL agrees that repairs or replacements are not immediately necessary, the certificate and its validity may be confirmed for a limited period of time. Such limitation will be attached to the certificate and will be removed once all the necessary works have been carried out.

Chapter 8 Page 8 of 20

Section 2 Principles, Normative References, Conditions, Documents

IV Part 6 GL 2011

Section 2 Principles, Normative References, Conditions, Documents

1. General Principles
(2) GL reserves the right to impose demands in addition to those mentioned in Rules and Guidelines in respect of all types of BOPs when considered necessary due to new knowledge or experience becoming available or to sanction deviations from Rules and Guidelines in specially justified cases. 2.2 Internationally Recognised Codes and Standards

(1) BOPs are to be designed and constructed in such a way that failure of single component cannot give rise to a safety critical situation. (2) BOPs and their components shall be designed to meet the service conditions stated in the specification. (3) BOPs shall be designed and built to ensure safe operation and facilitate adequate inspection, maintenance and repair. (4) A consistent set of codes and standards shall be selected for the design and construction of BOPs, avoiding overlaps, gaps and contradictions. (5) The codes and standards applied should be the latest revision available.

Codes and standards applicable to the certification of subsea well control equipment may include: API Spec 6A/ISO 10423, Specification for Wellhead and Christmas Tree Equipment; API Spec 16A/ISO 13533, Specification for Drill-through Equipment; API 16C, Specification for Choke and Kill Systems; API Spec 16D, Specification for Control Systems for Drilling, Well Control Equipment, and Control Systems for Diverter;

2.

Rules and Regulations to be Considered

API Spec 16F, Specification for Marine Drilling Riser Equipment; API Spec 17D, Subsea Wellhead and Christmas Tree Equipment; API RP 49, Recommended Practice for Drilling and Well Servicing Operations Involving Hydrogen Sulphide; API RP 53, Recommended Practices for Blowout Prevention Equipment Systems for Drilling Wells; API RP 59, Recommended Practice for Well Control Operations; ISO 13628-4, Petroleum and Natural Gas Industries - Design and Operation of Subsea Production Systems - Part 4: Subsea Wellhead and Tree Equipment ISO 13628-5, Petroleum and Natural Gas Industries - Design and Operation of Subsea Production Systems - Part 5: Subsea Umbilicals ISO 28781, Petroleum and Natural Gas Industries - Drilling and Production Equipment - Subsurface Barrier Valves and Related Equipment NACE MR 01-75, Petroleum and Natural Gas Industries Materials for Use in H2SContaining Environments in Oil and Gas Production.

BOPs and their components shall always be designed, built, and operated to meet the national laws and statutory requirements in force in the respective countries where they are to be used. Some examples of relevant legislation are referenced in appendix 1. 2.1 Rules of Germanischer Lloyd

The following GL Rules are valid as additional requirements for the certification of BOPs: GL-Rules II - Materials and Welding, Parts 1 - 3 GL-Rules IV Industrial Services, Part 6 - Offshore Technology GL Rules I Ship Technology, Part 5 Unmanned submersibles (ROV, AUV) and Underwater Working Machines Designs differing from GL-Rules may be permitted, if they provide equivalent levels of safety. (1) Where the design of a BOP or its components is based on new principles or technologies, which have not yet been sufficiently tested in practical operation, GL reserves the right to demand additional submission of documentation and the execution of additional special tests.

IV Part 6 GL 2011

Section 2 Principles, Normative References, Conditions, Documents 4.2

Chapter 8 Page 9 of 20

3.

Safety, Environmental and Process Conditions

Components and Subassemblies

The documents listed above shall be submitted for: (1) BOP stack comprising, but not limited to: Annular BOP Pipe Rams Shear Rams Bonnets Actuators and Stems Connectors to Wellheads and Lower Marine Riser Package Guide Frame Structure

All safety, environmental and process conditions shall be submitted with the application, based on the codes and standards mentioned above. If information is not known or complete at time of submittal, GL shall be notified when such data can be expected.

4.

Documents for Examination

GL reserves the right to request documents and/or records in addition to those mentioned here below, as needed, to confirm that equipment, systems, and components under examination are in compliance with statutory regulations, codes and standards, GLRules and other normative references for the specified operating conditions. 4.1 Types of Documents

(2) BOP Control System comprising, but not limited to: Overall Control System Surface control Stations Accumulators Actuators Hydraulic Hoses Valves and Fittings Hydraulic Power Units Control Pods Contingency Systems Interface Panels for docking of and intervention by ROVs Dead Man System Auto Shear System Acoustic Signal Transmission System, if installed

The types of documents to be submitted to GL for independent design review shall comprise, but not be limited, to the following: (1) Design specifications and data sheets, including material specifications; (2) Design drawings, schematics, calculations, including general arrangement and assembly drawings; (3) (4) (5) (6) (7) (8) (9) BOP system configuration;

Quality Plan (QP); Inspection and Test Plan (ITP); Procedures for Pressure Tests (internal and external overpressure) Function Tests Factory Acceptance Test (FAT) Site Integration Test (SIT) Material Test Records (MTR); NDT Records; Certificates of Conformance; (10) Service History (if applicable) regarding: Operation and Maintenance Modifications and Repairs Preservation and Storage (3)

(4) Choke and Kill System comprising, but not limited to: Valves and Fittings Choke Choke and Kill Lines Choke and Kill Hoses

Chapter 8 Page 10 of 20

Section 2 Principles, Normative References, Conditions, Documents

IV Part 6 GL 2011

5.
5.1

Failure Mode and Effect Analysis (FMEA)

General

The system descriptions are to be complemented by block diagrams as mentioned below. 5.3 Block Diagrams of Relevant Subsystems

(1) A FMEA shall be executed in an early stage during the design in order to allow for system modifications in due time. A tabular form, e. g. according to IEC 60812, is to be used. (2) The objective of the FMEA is to identify possible failures in the total system, in subsystems and in components of the complete BOP system, and to describe the effects and consequences of such failures. Additionally, the FMEA should highlight any measures proposed to be taken during the design stage to alleviate the likelihood of occurrence and the severity of the effects of the respective failure modes. (3) Equivalent safety studies (e. g. HAZOP) may be acceptable, provided an equivalent stringence with regard to systematics and coverage can be demonstrated. 5.2 Description of Subsystems Relevant for the Analysis

For each relevant subsystem, a block diagram shall be established. This block diagram shall contain the essential information of the system, which is required for the failure analysis, and normally comprises: Definitions of the subsystems; All essential components of the subsystems; Interfaces between the components of the subsystems; Interfaces to or from other subsystems (typical for hydraulics and controls); Arrangements for control of the total system; Supplies from outside the total system; Further aspects depending on the actual design of the BOP stack. 5.4 Analysis of the Relevant Subsystems

(1) The FMEA shall represent an independent document and be understandable without consulting further documentation. This means that the basic functions of all relevant subsystems shall be described together with details of the installed redundancies and especially the interfaces between the subsystems. (2) The description shall provide the operating personnel with a good overview of the structure and the functionality of the relevant subsystems of a BOP. For all subsystems, typical failure modes and their effects on the overall function of the BOP shall be indicated. The corrective actions to manage these failures and their effects shall be described. (3) For BOPs, the following subsystems are relevant for maintaining the overall functional integrity: Guide frame; Systems for control and monitoring; Vessels and apparatus under pressure; Piping systems, fittings; Umbilicals; Electrical installations; Emergency power supply; Interface equipment for umbilicals and ROVs.

The following essential aspects of each relevant subsystem shall be analysed. Any further aspects that are identified during the execution of the analysis shall also be analysed. See sample work sheet (Table 2.1): Failure of subsystems; Malfunction of subsystems; Failure of components in a subsystem; Malfunction of components; Interface failures between the subsystems, a subsystem and its components as well as between components themselves. Interface analysis is of particular importance, as experience shows that many failures are created due to lack of information about data, medium and power transferred or how failures are spread via the interfaces to other subsystems and components; Hidden failures and potential means to make them self-revealing; Practicality of alarms for certain failures and arrangement of periodic testing where alarms are not suitable or practical; Failures initiated by external influences which may lead to simultaneous failure of redundant subsystems (common cause failures), like changed environmental conditions and their control, voltage and frequency fluctuations in power supply, contamination of supply media, etc.

IV Part 6 GL 2011 5.5

Principles, Normative References, Conditions, Documents

Chapter 8 Page 11 of 20

Tabular Worksheet

The analysis shall be documented in tabular form. A typical work sheet is shown in Table 2.1. Similar

forms are acceptable as long as they are practical and follow the formats laid out in IEC 60812. the analysis shall consider all operational modes.

ID No.

Subsystem Component

Type of Failure

Failure Cause

Failure Detection

Consequences for Total System

Consequences for Subsytem or Component

Failure Correction

Remarks

1 2 3 4 Table 2.1 Sample FMEA Worksheet

5.6

Assumptions and Defined Limits for the FMEA

5.8

Conclusions

For the FMEA, the assumptions are to be defined which set the frame and define the limits. Typical assumptions are: The operating personnel are qualified and trained to safely and competently operate the equipment; The settings and switching operations prescribed in the operations manual are followed by the operating personnel; The power supply system has a well defined degree of availability through redundancy. 5.7 Management of Change

The FMEA shall contain a summary of the results of the analysis for the BOP. In addition, it should contain a listing of the main failures which may occur during the operation of the BOP. Training measures to handle events in case of such failures are to be proposed for the operating personnel aboard the drilling unit. A periodic check of the FMEA including practical trials is recommended. 5.9 FMEA-based Test Program

A test program shall be established that is aligned with the FMEA. The purpose of this program is to verify the assumptions and the expected operational behaviour of the BOP as defined in the FMEA. The test program shall consider typical failure modes in the relevant systems and components including the worst case failure. All operational modes of the BOP shall be considered. The test program shall be agreed with GL and shall specify in detail how the test will be carried out and/or how the simulation is done as an alternative for certain aspects of functional behaviour. These specified tests shall be included in the factory acceptance test procedure.

In case of changes, modifications, repairs to the design and construction of the BOP, the relevant sections of the FMEA shall be updated accordingly.

In case of changes of the environmental and process parameters to values outside the design and operating envelope, the relevant section of the FMEA shall be changed accordingly.

Chapter 8 Page 12 of 20

Section 3 Design and Manufacture of Blowout Preventers

IV Part 6 GL 2011

Section 3 Design and Manufacture of Blowout Preventers

1. Scope
2.3 Annular BOP

For the design of the BOP and all its additional systems and components, a detailed specification shall be provided, which shall include the limiting pressure and temperature conditions. Blowout preventers and additional pressurised equipment shall be designed in accordance with API RP 53 Recommended Practices for Blowout Prevention Equipment Systems for Drilling Wells and additional subordinated recognised technical standards. All materials for the construction of a BOP and all its associated components shall be suitably selected in accordance with the chemical and physical data of the flowing media and shall comply with internationally recognised standards. All materials, which may come into contact with the well fluid, shall be suitable for sour service. The requirements outlined in the NACE Standard MR0175/ISO 15156 are to be observed accordingly.

Annular BOPs are usually mounted above the BlindShear Rams and consist of a synthetic rubber bladder reinforced with steel ribs. Annular BOPs are either of Wedge Type or Spherical Type. Either is acceptable insofar as they conform to the requirements of API Spec 16A with respect to design, fabrication, testing, and documentation. 2.4 Connectors

The BOP connectors that interface to the wellhead and to the lower marine riser package shall conform to the requirements of API 6A with respect to design, fabrication, testing, and documentation.

3.

Guide Frame Structure

2.

BOP Stack

In general, all elements of the BOP stack, including flanges, valves, spools, adapters, clamps, etc. should conform to the requirement of API 16A or equivalent with regard to design, fabrication, testing and documentation. 2.1 Pipe Rams

The BOP guide frame, a four-post structure attached to the BOP assembly, is a means for guiding the complete BOP/LMRP assemblys primary alignment onto the permanent guide base. The guide frame structure also acts as the structural mounting for the various components of the remote control system, and the choke and kills connectors and stab subs. The guide frame structure shall have sufficient strength to protect the BOP stack from damage during handling and landing operations. However, the guide frame structure should not be considered as part of the well bore structure, because under operating conditions the BOP elements shall have the required bending strength based on maximum riser tension and angle. The BOP guide frame is to be designed in accordance with AISC or another equivalent recognised structural standard.

The BOP stack shall conform to configurations illustrated in API RP 53. It shall consist of at least two pipe rams with mechanical locking devices. Each set of pipe rams shall be capable of closing and sealing against at least one of the pipe sections in the hole. Each BOP stack shall have at least one pipe ram capable of closing and sealing against all pipe sections to be run through the BOP stack. Pipe rams must be capable of suspending the weight of a specified length of drill string when closed.

4.
2.2 Blind Shear Rams Each blind shear ram must be capable in a single operation of shearing, and sealing against pressure from below, the largest section of the highest grade pipe to be run in the well through the BOP when the specified control system pressure is available. Documentation shall be supplied verifying the fact.

Equipment under Pressure

Blowout preventers and all associated pressurised equipment (vessels, piping, hoses, etc.) shall be designed in accordance with recognised technical standards, e. g. ASME, BS 5500, PED or equivalent. Design conditions shall account for the maximum working pressure and temperature.

IV Part 6 GL 2011

Section 3 Design and Manufacture of Blowout Preventers

Chapter 8 Page 13 of 20

Hoses to be connected and disconnected shall be designed with quick-release self-sealing couplings to ensure a tight shut-off and sealing in operation and easy handling by personnel.

ity calculations, reservoir sizing, hydraulic and electrical analysis; (7) Arrangements and details of control consoles, including views and installation arrangements together with schematic plans and logic description for all power, control and monitoring systems, including their functions; (8) Type and size of all electrical cables and wiring associated with the control systems, including voltage rating, service voltage and currents, together with overload and shortcircuit protection; (9) Schematic plans and logic description of hydraulic and pneumatic control systems together with all interconnections, piping sizes and materials, including working pressures and relief valve settings; (10) Description of all alarm and emergency tripping arrangements and functional layouts, and description of all special valves, actuators, sensors and relays. 5.2 Hydraulic Control Units (HCU)

5.

Control Systems

All equipment for the control and monitoring of a BOP shall be designed and constructed in accordance with this guideline, the suitable standards (e. g. API 6A and 16D or equivalent) and the specifications in accordance with the design and environmental conditions specified for the BOP and its environment. Additionally, the guidance and recommendations put forth in API RP 53 should be considered as part of the path to certification and recertification. The BOP control system shall consist of a dual-pod arrangement. A second and independent system for intervention by remotely operated vehicles (ROVs) shall be provided. All equipment shall be designed, manufactured, tested and commissioned according to the procedures of the equipment manufacturer approved by GL and relevant regulatory requirements. 5.1 Design Review

The Hydraulic Control Unit (HCU) supplies a stable, regulated, filtered fluid. This fluid is supplied via a system of hydraulic lines and an umbilical to BOP mounted subsea accumulators. The hydraulic system shall be robust and maintain the specified pressure values and volume flows. The HCU reservoir shall include provisions for obtaining, and maintaining, the specified cleanliness requirement, such as drainage or circulation and filtration capability, should the fluid become contaminated. Output fluid from the HCU reservoir shall be prepared to a cleanliness level as defined in SAE AS 4059. The selected cleanliness level shall be according to the manufacturers written specification. Working fluid volumes shall comply with API RP 53. The HCU may be considered as a second control panel. 5.3 Electrical Control Units

The BOP Control and Monitoring System shall undergo a design review prior to the start of fabrication, which shall be conducted in accordance with this guideline and all applicable codes and standards. The design review of the Electrical, Instrumentation and Control Systems shall include, but is not limited to the following: (1) Batteries including installation, arrangement and details, where provided, to include charging apparatus, ventilation and corrosion protection; (2) Arrangement plans showing location of units controlled, instrumentation and control devices; (3) Specifications for control and instrumentation equipment; (4) Set points for control system components;

The electrical control units shall have a central control point. Alternatively, each control panel may communicate directly and independently with each control pod. The electrical control unit shall be supplied with electrical power from an uninterruptable power supply (UPS). The UPS battery backup shall be capable of running the system for at least two hours after loss of main power supply. The UPS shall be monitored from a remote manned location with, as a

(5) Appropriate elements addressed in the Failure Modes and Effects Analysis (FMEA); (6) Calculations for control systems demonstrating the systems ability to react adequately to anticipated occurrences, including transients. Documentation shall include but is not limited to volumetric capac-

Chapter 8 Page 14 of 20

Section 3 Design and Manufacture of Blowout Preventers

IV Part 6 GL 2011

minimum, alarm reporting of main power supply failure and internal UPS failure. 5.4 Subsea Control Pods

The BOP stack shall provide two completely independent and redundant control pods. Each pod shall contain all necessary valves and controls to operate the BOP stack functions. Each control pod shall be colour coded (e. g. Yellow and Blue), suitable for easy ROV identification subsea. The failure of one subsea control pod shall not affect the safe operation of the other pod and a means of isolating the failed pod shall be provided. The control pods may be retrievable or nonretrievable. 5.5 Umbilicals

Details of the specified drill string to be used after BOP certification shall be used when evaluating accumlator performance, because metallurgical differences in drill string pipe from different manufacturers may require recalculation due to different shear ram closing pressure. A dedicated accumulator system with appropriate volume and pressure shall be provided for BOP systems with a rapid secondary disconnect function. Additionally, when the BOP system features a two shear ram arrangement, volumetric calculations shall include both sets of shear rams. 5.7 Surface Control Stations

In general, the subsea umbilicals ensure hydraulic and electrical power supply, communications, and control of the subsea control pods. Some systems may combine hydraulic and electrical services in one umbilical, while other systems may separate the supply of hydraulic fluid into a rigid conduit assembly on each riser joint. In each case, the electrical conductors and electrical insulation as well as any hydraulic hose or tubing assemblies shall not be used as load bearing components in the umbilical assembly. Two control umbilicals shall be provided, connecting to the two subsea control pods to the surface control stations. Two methods of providing subsea fluid power to the subsea pods shall be provided. These systems may be rigid hydraulic conduits or hydraulic umbilical hoses. Umbilical strain relief and over-bending protection shall be provided for the interface between umbilical and subsea pod. The umbilical shall be designed and fabricated in accordance with ISO 13628-5, Subsea Umbilicals, or equivalent. 5.6 Accumulators

There shall be at least two distinct and separate BOP control stations for all BOP functions. The stations shall be mutually independent of each other. Functions shall have physical barriers on the buttons to prevent accidental activation of disconnect functions. 5.8 Control Station Locations

The first control station shall be located adjacent to the drilling console while the second control station shall be located near the main hydraulic supply unit for the BOP. If a third panel, which may have limited functionality, is installed for emergency operations, it should be installed remote from the rig floor. Access to either control station shall not require personnel to cross the drill floor or cellar deck. If any of the control stations is located in a designated hazardous area, it shall comply with the relevant codes and standards for exprotection. 5.8.1 Control Station Functions

Control station panels shall include, as a minimum but not limited to, the following functions: Close/open of all rams, annular preventers and choke and kill valves; Mechanical locking of rams; Primary disconnect of the Lower Marine Riser Package; Emergency Disconnect (only on floating rigs); Provision of audible and visual alarms for, as a minimum, low fluid level in reservoirs, loss of power supply and low accumulator pressure. Enable buttons shall be provided on the panels for all critical functions such that two-handed operations are necessary. All functions on the panels shall be clearly labelled.

Accumulator systems are required for subsea BOP stacks. The volume and pressure capacities for all subsea accumulators shall be suitable to ensure that specified valve closing times are met, in accordance with API 16D or equivalent. Accumulator calculations for Deadman, Autoshear and some acoustic systems, which are classified as rapid discharge systems, shall follow Method C in API 16D.

IV Part 6 GL 2011

Section 3 Design and Manufacture of Blowout Preventers 6.2 Deadman System

Chapter 8 Page 15 of 20

Secondary additional protection against inadvertent operation of riser disconnects and shear ram functions shall be provided on the control panels. Further functions as per API 16D shall be considered. 5.9 Control System Response Times

A deadman system is defined as a safety system that is designed to automatically close the blind-shear rams in the event of a simultaneous absence of hydraulic supply and signal transmission capacity in both subsea control pods. A deadman system shall be installed for BOPs used on floating drilling units. 6.3 Auto-Shear System

For Subsea Blowout Preventers the following system response times shall be achieved under the consideration of the accumulator design and control system internal delays: Closing of each ram BOP shall be achieved in less than 45 seconds; Closing of an annular BOP shall be achieved in less than 60 seconds; Operating times for choke and kill valves shall not exceed the minimum observed ram BOP closing times; The time to unlatch the Lower Marine Riser Package shall not exceed 45 seconds. For Surface Blow Out Preventers shorter times are stipulated in API 16D and shall be observed accordingly.

An auto-shear system is defined as a safety system that is designed to automatically shut in the well in the event of an unplanned disconnect of the Lower Marine Riser package (LMRP). When the auto-shear system is armed, a disconnect of the LMRP shall cause the auto shear system to close the shear rams. If, based on operator and rig procedures, the choke and kill valves are not automatically closed in this instance, which is an option based on API 16D, this shall be explicitely mentioned and justified. An auto-shear system shall be installed for BOPs used on floating drilling units. 6.4 Acoustic Control System

Conventional measurement of response time begins when the function is activated at any control panel and ends when the read back pressure gauge recovers to its nominal setting. Response times are based on fully charged accumulators, design water depth and minimum temperatures.

6.
6.1

Contingency Systems
Remotely Operated Vehicles (ROVs)

Floating rigs may use an acoustic system, optionally, in addition to deadman and auto-shear, as an emergency backup to control critical BOP functions. Accumulator requirements for this system shall meet the recommendations for acoustic system subsea accumulators in API 16D. Additional requirements for this type of system can also be found in API 16D and should be observed.

All subsea BOPs shall be equipped with Remotely Operated Vehicle (ROV) intervention capability. The intervention provision shall be such that the ROV shall be capable of closing one set of pipe rams, closing one set of blind-shear rams, and unlatching the lower marine riser package.

7.

Choke and Kill System

A multi-function ROV operating panel shall be mounted in an accessible location on the BOP stack and the panel shall be clearly marked for identification by the ROV cameras.

In general, all elements of the choke and kill system, including flanges, valves, spools, adapters, clamps, and chokes shall conform to the requirements of API 16C or equivalent. Each of the choke or kill lines shall have two valves of fail-to-close type, mounted in series close to the BOP stack in a position which protects them from dropped objects. They shall be hydraulically operated and opened against spring force. For maximal valve closing times refer to 5.9.

All ROV interfaces shall comply with the requirements of ISO 13628-8. Their markings shall comply with the requirements of ISO 13628-1, Table B.1.

Chapter 8 Page 16 of 20

Section 4 Inspection and Test of Blowout Preventers

IV Part 6 GL 2011

Section 4 Inspection and Test of Blowout Preventers

1. Inspections during Manufacture and Assembly
points where the witnessing of a GL inspector is required, he will sign the ITP once the activity is successfully completed. The qualifications of personnel performing NDT shall be either included in the NDT documentation or shall be traceable to equivalent records. 1.4 Pressure Test

Inspections and test of BOPs shall be carried out according to the following documents, to ensure that the BOP meets all design particulars approved by GL: Quality Control Plan (QCP); Inspection and Test Plan (ITP). 1.1 Quality Plan

The Quality Plan is a fundamental element of the QA system of the BOP manufacturer. The Quality Plan should outline all QA activities that will be implemented within the design and fabrication procedure of the BOP and its associated components. The quality Plan shall be specific for a project. 1.2 Inspection and Test Plan (ITP)

Pressure test reports shall clearly show calibration results, test medium, time of test at pressure, test temperature, minimum test pressure required, and actual test pressure attained. GL shall be invited well in advance to witness pressure testing. Pressure testing shall be performed in unpainted conditions.

2.

Factory Acceptance Test (FAT)

All inspections and tests to be carried out during manufacture and assembly shall be listed in an Inspection and Test Plan. This ITP shall include and outline all specific tests and inspections which have to be performed during manufacture and assembly with reference to test procedures, standards, specifications and acceptance criteria. Furthermore, each test step shall provide information about the requirements for reviewing the test documentation and the specific monitoring and witnessing points by GL. The ITP shall be submitted to GL for review and mark up of interventions (Monitor, Witness, Hold) within a reasonable notification period. 1.3 Non-Destructive Testing (NDT)

The BOP and all its associated equipment, including the control systems and contingency systems shall be subjected to a Factory Acceptance Test. All functions shall be tested during the FAT. Usually, this is executed while the BOP stack is mounted on a stump. The scope of tests, the test conditions, procedures and acceptance criteria shall be based on the service and operating conditions and shall be submitted to GL for review and approval well in advance. The scope of testing shall also include those items which result from the FMEA, refer to section 2, para 2.5.9. Provided that certified evidence can be presented about the capability of the shear rams to cut off the drill string specified in the design documentation, such a test needs not to be executed and a normal function test of the shear ram operation is sufficient. The FAT shall be carried out in presence of a GL inspector who shall be invited well in advance.

All non-destructive test (NDT) reports and subsequent inspections shall be signed and dated, and be provided as part of the BOP stack dossier. Inspection reports shall include the name, qualifications, and contact information of the personnel who performed the testing. The scope of the NDT shall be as detailed on the inspection and test plan (ITP). All incidents and out of specification conditions shall be documented along with the remedial actions taken to correct the situation. The ITP shall be signed and dated by the party performing the NDT, and by the manufacturer. At

3.

Site Integration Test (SIT)

A site integration test shall be executed upon arrival of the BOP at a drilling location for the first time after completion of the FAT. The SIT has the objective to demonstrate that the BOP and all associated control systems are fully functional on the location

IV Part 6 GL 2011

Section 4 Inspection and Test of Blowout Preventers

Chapter 8 Page 17 of 20

and are suitable for the specific well design and drilling programme. The SIT comprises a comprehensive stump test on board of the drilling rig and an initial test on the seafloor. The scope of tests, the test conditions, procedures and acceptance criteria shall be based on the service and operating conditions and shall be submitted to GL for review and approval well in advance. The initial test on the seafloor shall demonstrate, as a minimum, that the rams, the annular preventers, the choke and kill valves and deadman system are functioning correctly. The SIT shall be conducted in the presence of a GL inspector who shall be invited well in advance.

with their associated control systems, including deadman and auto-shear systems, shall be functiontested. (11) The interfaces which allow a ROV to connect and perform overrides shall be function tested. (12) Hose assemblies shall be checked for visible damages. (13) The umbilicals shall be checked for visible damages, cracks, deformations and corrosion. (14) Where applicable, acoustic backup control systems shall be function tested. (15) Upon successful completion of the Annual Inspection, the validity of the certificate will be confirmed. (16) When an annual inspection becomes due while the BOP is in use, the inspection may be deferred until the well is completed.

4.

Annual Inspections

The Annual Inspection of a BOP includes at least the following tests and checks, witnessed by GL:

5.
(1) Examination of the documents relating to the BOP, including its surface control systems and scrutiny of the operational history with BOP test reports and BOP maintenance records; (2) Visual inspection of the guide frame, all fixtures, covers, lifting points, claddings, etc. for damage, cracks, deformation, corrosion attacks and fouling; (3) Check of the measures for corrosion protection (e. g. anodes); (4) The BOP is to be pressure tested on its stump.

Inspections for Re-Certification

Every five years, an Inspection for Re-Certification shall be carried out, witnessed by GL. In addition to the annual inspections defined in para 4 above, the following tests and examinations shall be carried out: (1) For vessels and apparatus under pressure, which cannot be satisfactorily inspected internally or for which their satisfactory condition cannot be fully verified by internal inspection, another nondestructive test method shall be used or a hydraulic pressure test shall be performed. (2) Check shall be performed that accessories, especially hose assemblies and compensators have been changed according to the maintenance plan. Upon satisfactory completion of the Inspection for Re-Certification, the validity of the certificate will be extended for another period of five years.

(5) All vessels and apparatus under external or internal overpressure, penetrations, valves, fittings and relevant safety equipment are to be subjected to external inspection. (6) Check that insulation measurements have been performed on the electrical equipment; (7) Review of control systems and of the set points of the alarm sensors; (8) Change over from the main to the emergency electrical power supply is to be tested. (9) The accuracy of all essential instrument readings is to be checked. (10) All rams and annual preventers and the disconnect system for the Lower Marine Riser Package

6.

Extraordinary inspections after Modification, Repair or Major Overhaul

After modifications, repair or major overhaul, a BOP shall be subjected to an extraordinary inspection, witnessed by GL. The scope and depth of the inspection shall be developed in close cooperation between the holder of the certificate and GL.

Chapter 8 Page 18 of 20

Section 4 Inspection and Test of Blowout Preventers

IV Part 6 GL 2011

Additionally, in case of modifications it will be necessary to conduct a design review of those components and subsystems affected by the modifications. The scope and depth of this design review shall be determined by GL with the objective of confirming the compliance of the overall system with this guideline. The scope of inspections and tests shall be derived from the original tests during manufacturing, the

factory acceptance tests and the system integration tests as outlined in para 1, 2, 3 above. Due consideration will be given to avoid the unnecessary duplication of tests, where previous test results remain valid. In case of repairs, the spares used shall be acceptable to the original equipment manufacturer. Alternatively, non-OEM parts shall be subjected to a design review and to tests as outlined in para 1, 2, 3 above, and defined in a dedicated inspection and test plan which shall be subject to approval by GL.

IV Part 6 GL 2011

Appendix 1 National Regulations

Chapter 8 Page 19 of 20

Appendix 1 National Regulations

This Appendix contains references to the national regulations of some countries. These should not be considered complete, but only as a possible starting point for each license holder. Statutory requirements may change any time, and should be investigated from case to case to ensure that the references used are current and complete. In Australian waters, the regulators are the National Offshore Petroleum Safety Authority and also the regions including Government of Western Australia, Department of Mines and Petroleum. Key Regulations include, but may not be limited to: Petroleum (Submerged Lands) Management of Safety on Offshore Facilities Regulations 2007; Petroleum (Submerged Lands) Management of Well Operations Regulations 2004. The approach requires good oil field practice supported by a Safety Case to ALARP, with independent verification. In Brazilian waters, the regulators are Agncia Nacional do Petrleo, Gs Natural e Biocombustiveis (ANP). Key Regulations include, but may not be limited to: Resolution No. 43; Technical resolution Safety Management System (SGSO); CONAMA Resolution No. 23: Licensing of drilling and production activities. The approach is goal-setting, with reliance on industry standards and the requirement for risk analysis. In Canadian waters, the regulators are the National Energy Board, the Canada Nova Scotia Offshore Petroleum Board and the Canada Newfoundland & Labrador Offshore Petroleum Board. Key Regulations include, but may not be limited to: Canada Oil and Gas Operations Act (COGOA); SOR/2009-315 Canada Oil & Gas Drilling and Production Regulations; Draft Safety Plan Guidelines; Draft Drilling and Production Guidelines. Section 36.1 of the Safety Plan Guidelines lists Industry Standards and Practices that may be used; these are mostly API, together with NACE Standard MR0175.92m Item No. 53024 & NORSOK 010; Regulations Relating To Design And Outfitting Of Facilities Etc. In The Petroleum Activities (The Facilities Regulations) Chapter IV-I, Sections 48 55 and Guidelines thereto. This references NORSOK D-001, D-002 and D-010, with additional requirements to D-001; Regulations Relating To Conduct Of Activities In The Petroleum Activities (The Activities Regulations) Section 9 and Guidelines thereto Chapter 4 / Sect. 30a and Chapter 7 /Section 46; The approach requires a Safety Case to ALARP and the use of recognised standards. In Indonesian waters, the regulator is effectively BP MIGAS and the requirements are usually set in Production Sharing Contracts. It is understood that the approach requires best oilfield practice. In Norwegian waters, the regulators are the Norwegian Petroleum Directorate (NPD) and the Petroleum Safety Authority (PSA). Key Regulations include, but may not be limited to: The majority of the Drilling and Production Regulations are written in a goal- or performance-based style with clear regulatory objectives or goals. Goaloriented regulation is a hybrid approach that includes prescriptive and goal- or performance-based elements. The prescriptive elements are retained in the management system elements, information requirements for reporting and in information requirements related to applications for authorisations and well approvals. In Danish waters, the regulator is the Danish Energy Agency. Key Regulations include, but may not be limited to: Offshore Safety Act No. 1424 of December 21, 2005 with subsequent amendments; Executive Order No. 729 of 3rd July 2009; Guidelines for the Design of Fixed Offshore Installations 2009; Guidelines for Drilling Exploration 1988 (2009), attachment to A Guide to Hydrocarbon Licenses in Denmark.

Chapter 8 Page 20 of 20

National Regulations

IV Part 6 GL 2011

Regulations Relating To Material And Information In The Petroleum Activities (The Information Duty Regulations) Chapter III Section 7 & Guideline thereto. Refers to reporting according to NORSOK D-010; There are extensive references to other standards (mainly API & NORSOK but some from ANSI, ASME, ISO, NACE, NS & TBK). An overall objective for drilling and well activities will be the requirement that no single failure shall entail a life threatening situation for the involved personnel, or significant damage to material and the environment. This applies to both operations errors and to failure in connection with the equipment used directly in operations, as well as equipment with auxiliary functions. Safety systems are to be provided with two independent levels of protection to prevent or minimise the effects of a single malfunction or fault in the process equipment and piping system, including their controls. The two levels of control are to be provided by functionally different types of safety devices to reduce the probability of common cause failures. In UK waters, the regulator is the Health & Safety Executive (HSE). Key Regulations include, but may not be limited to: SI 1996/913 The Offshore Installations and Wells (Design and Construction, etc.) Regulations 1996 (DCR). The approach uses a Safety Case to ALARP. The Duty Holder must show that the Performance Standards are suitable and sufficient, which is done through the application of industry standards or alternatively more detailed assessment, to show that the residual risk not removed by the safety system is as low as reasonably practicable (ALARP). Wells are covered by a separate Well Examination Scheme under DCR requiring examinations by independent and competent persons.

In US waters, the regulator under the Department of Interior (DOI) is the Bureau of Ocean Energy Management, Regulation and Enforcement (BOEMRE). The BOEMRE has two separate functional bureaus:

Bureau of Ocean Energy Management (BOEM) will be responsible for managing development of the nations offshore resources; Bureau of Safety and Environmental Enforcement (BSEE) for enforcing safety and environmental regulations. Key regulations include, but may not be limited to:

30 CFR Part 250 - Oil and Gas and Sulphur Operations in the Outer Continental Shelf; NTL No. 2010-N10 US Department of the Interior BOEMRE, National Notice to Lessees and Operators of Federal Oil and Gas Leases, Outer Continental Shelf, "Statement of Compliance with Applicable Regulations and Evaluation of Information Demonstrating Adequate Spill Response and Well Containment Resources", November 08, 2010; NTL No. 2009-G07, US Department of the Interior Minerals Management Service Gulf of Mexico OCS Region, National Notice to Lessees and Operators of Federal Oil and Gas Leases, Outer Continental Shelf, Gulf of Mexico OCS Region, "Location of Choke and Kill Lines on Blowout Preventer Stacks", May 1, 2009. The regulations require adherence to a number of API RP's and Specs.