Current through Register Vol. 50, No. 9, September 20, 2024
A. General. This Section applies to each
operator of a pipeline facility with a controller working in a control room who
monitors and controls all or part of a pipeline facility through a SCADA
system. Each operator must have and follow written control room management
procedures that implement the requirements of this Section. The procedures
required by this Section must be integrated, as appropriate, with the
operator's written procedures required by
§30402 An operator must develop the
procedures no later than August 1, 2011, and must implement the procedures
according to the following schedule. The procedures required by Subsections and
Paragraphs B, C.5, D.2, D.3, F and G of this Section must be implemented no
later than October 1, 2011. The procedures required by Paragraphs C.1 through
C.4, D.1, D.4, and E must be implemented no later than August 1, 2012. The
training procedures required by Subsection H must be implemented no later than
August 1, 2012, except that any training required by another Paragraph of this
Section must be implemented no later than the deadline for that Paragraph. [
49 CFR
195.446(a)]
B. Roles and Responsibilities. Each operator
must define the roles and responsibilities of a controller during normal,
abnormal, and emergency operating conditions. To provide for a controller's
prompt and appropriate response to operating conditions, an operator must
define each of the following: [
49 CFR
195.446(b)]
1. a controller's authority and
responsibility to make decisions and take actions during normal operations; [
49 CFR
195.446(b)(1)]
2. a controller's role when an abnormal
operating condition is detected, even if the controller is not the first to
detect the condition, including the controller's responsibility to take
specific actions and to communicate with others; [
49 CFR
195.446(b)(2)]
3. a controllers role during an emergency,
even if the controller is not the first to detect the emergency, including the
controllers responsibility to take specific actions and to communicate with
others; [
49 CFR
195.446(b)(3)]
4. a method of recording controller
shift-changes and any hand-over of responsibility between controllers; and [
49 CFR
195.446(b)(4)]
5. The roles, responsibilities and
qualifications of others who have the authority to direct or supersede the
specific technical actions of controllers. [
49 CFR
195.446(b)(5)]
C. Provide Adequate Information.
Each operator must provide its controllers with the information, tools,
processes and procedures necessary for the controllers to carry out the roles
and responsibilities the operator has defined by performing each of the
following: [
49 CFR
195.446(c)]
1. implement API RP 1165 (incorporated by
reference, see §30107) whenever a SCADA system is added, expanded or replaced,
unless the operator demonstrates that certain provisions of API RP 1165 are not
practical for the SCADA system used; [
49 CFR
195.446(c)(1)]
2. conduct a point-to-point verification
between SCADA displays and related field equipment when field equipment is
added or moved and when other changes that affect pipeline safety are made to
field equipment or SCADA displays; [
49 CFR
195.446(c)(2)]
3. test and verify an internal communication
plan to provide adequate means for manual operation of the pipeline safely, at
least once each calendar year, but at intervals not to exceed 15 months; [
49 CFR
195.446(c)(3)]
4. test any backup SCADA systems at least
once each calendar year, but at intervals not to exceed 15 months; and [
49 CFR
195.446(c)(4)]
5. implement Section 5 of API RP 1168
(incorporated by reference, see §30107) to establish procedures for when a
different controller assumes responsibility, including the content of
information to be exchanged. [
49 CFR
195.446(c)(5)]
D. Fatigue Mitigation. Each
operator must implement the following methods to reduce the risk associated
with controller fatigue that could inhibit a controller's ability to carry out
the roles and responsibilities the operator has defined: [
49 CFR
195.446(d)]
1. establish shift lengths and schedule
rotations that provide controllers off-duty time sufficient to achieve eight
hours of continuous sleep; [
49 CFR
195.446(d)(1)]
2. educate controllers and supervisors in
fatigue mitigation strategies and how off-duty activities contribute to
fatigue; [
49 CFR
195.446(d)(2)]
3. train controllers and supervisors to
recognize the effects of fatigue; and [
49 CFR
195.446(d)(3)]
4. establish a maximum limit on controller
hours-of-service, which may provide for an emergency deviation from the maximum
limit if necessary for the safe operation of a pipeline facility. [
49 CFR
195.446(d)(4)]
E. Alarm Management. Each operator
using a SCADA system must have a written alarm management plan to provide for
effective controller response to alarms. An operator's plan must include
provisions to: [
49 CFR
195.446(e)]
1. review SCADA safety-related alarm
operations using a process that ensures alarms are accurate and support safe
pipeline operations; [
49 CFR
195.446(e)(1)]
2. identify at least once each calendar month
points affecting safety that have been taken off scan in the SCADA host, have
had alarms inhibited, generated false alarms, or that have had forced or manual
values for periods of time exceeding that required for associated maintenance
or operating activities; [
49 CFR
195.446(e)(2)]
3. verify the correct safety-related alarm
set-point values and alarm descriptions when associated field instruments are
calibrated or changed and at least once each calendar year, but at intervals
not to exceed 15 months; [
49 CFR
195.446(e)(3)]
4. review the alarm management plan required
by this subsection at least once each calendar year, but at intervals not
exceeding 15 months, to determine the effectiveness of the plan; [
49 CFR
195.446(e)(4)]
5. monitor the content and volume of general
activity being directed to and required of each controller at least once each
calendar year, but at intervals not exceeding 15 months, that will assure
controllers have sufficient time to analyze and react to incoming alarms; and [
49 CFR
195.446(e)(5)]
6. address deficiencies identified through
the implementation of Paragraphs E.1 through E.5 of this Section. [
49 CFR
195.446(e)(6)]
F. Change Management. Each
operator must assure that changes that could affect control room operations are
coordinated with the control room personnel by performing each of the
following: [
49 CFR
195.446(f)]
1. implement Section 7 of API RP 1168
(incorporated by reference, see §30107) for control room management change and
require coordination between control room representatives, operator's
management, and associated field personnel when planning and implementing
physical changes to pipeline equipment or configuration; and [
49 CFR
195.446(f)(1)]
2. require its field personnel to contact the
control room when emergency conditions exist and when making field changes that
affect control room operations. [
49 CFR
195.446(f)(2)]
G. Operating Experience. Each
operator must assure that lessons learned from its operating experience are
incorporated, as appropriate, into its control room management procedures by
performing each of the following. [
49 CFR
195.446(g)]
1. Review accidents that must be reported
pursuant to
§30125 to determine if control room
actions contributed to the event and, if so, correct, where necessary,
deficiencies related to: [
49 CFR
195.446(g)(1)]
a. controller fatigue; [
49 CFR
195.446(g)(1)(i)]
b. field equipment; [
49 CFR
195.446(g)(1)(ii)
]
c. the operation of any relief
device; [
49 CFR
195.446(g)(1)(iii)
]
d. procedures; [
49 CFR
195.446(g)(1)(iv)
]
e. SCADA system configuration;
and [
49 CFR
195.446(g)(1)(v)]
f. SCADA system performance. [
49 CFR
195.446(g)(1)(vi)
]
2. Include lessons
learned from the operator's experience in the training program required by this
Section. [
49 CFR
195.446(g)(2)]
H. Training. Each operator must
establish a controller training program and review the training program content
to identify potential improvements at least once each calendar year, but at
intervals not to exceed 15 months. An operator's program must provide for
training each controller to carry out the roles and responsibilities defined by
the operator. In addition, the training program must include the following
elements: [
49 CFR
195.446(h)]
1. responding to abnormal operating
conditions likely to occur simultaneously or in sequence; [
49 CFR
195.446(h)(1)]
2. use of a computerized simulator or
non-computerized (tabletop) method for training controllers to recognize
abnormal operating conditions; [
49 CFR
195.446(h)(2)]
3. training controllers on their
responsibilities for communication under the operator's emergency response
procedures; [
49 CFR
195.446(h)(3)]
4. training that will provide a controller a
working knowledge of the pipeline system, especially during the development of
abnormal operating conditions; [
49 CFR
195.446(h)(4)]
5. for pipeline operating setups that are
periodically, but infrequently used, providing an opportunity for controllers
to review relevant procedures in advance of their application; and [
49 CFR
195.446(h)(5)]
6. Control room team training and exercises
that include both controllers and other individuals, defined by the operator,
who would reasonably be expected to operationally collaborate with controllers
(control room personnel) during normal, abnormal or emergency situations.
Operators must comply with the team training requirements under this Paragraph
no later than January 23, 2018. [
49 CFR
195.446(h)(6)]
I. Compliance Validation. Upon
request, operators must submit their procedures to PHMSA or, in the case of an
intrastate pipeline facility regulated by a state, to the appropriate state
agency. [
49 CFR
195.446(i)]
J. Compliance and Deviations. An operator
must maintain for review during inspection: [
49 CFR
195.446(j)]
1. records that demonstrate compliance with
the requirements of this Section; and [
49 CFR
195.446(j)(1)]
2. documentation to demonstrate that any
deviation from the procedures required by this Section was necessary for the
safe operation of the pipeline facility. [
49 CFR
195.446(j)(2)]
AUTHORITY NOTE:
Promulgated in accordance with R.S. 30:753.
