A Safety and Environmental Management System (SEMS) is a regulatory program mandated by the Bureau of Safety and Environmental Enforcement (BSEE) under 30 CFR Part 250, Subpart S, applicable to operators of offshore oil and gas facilities on the US Outer Continental Shelf (OCS). SEMS requires operators to develop, implement, maintain, and continuously improve a management system covering thirteen defined elements — including hazards analysis, management of change, operating procedures, mechanical integrity, and incident investigation — with the goal of preventing incidents, injuries, and environmental releases. Broadly speaking, it is a US offshore regulatory requirement.
SEMS is the offshore equivalent of the OSHA Process Safety Management (PSM) regulation, first mandated in 2010 with significant updates in 2013 (SEMS II). The SEMS hazards analysis element is what invokes the IEC 61511-1 framework: it requires operators to systematically assess process hazards and risk, and it is the IEC 61511-1 H&RA that determines whether a safety instrumented function (SIF) is required to reduce risk to a tolerable level. Where a SIF is identified, the full IEC 61511-1 safety lifecycle then governs its design, verification, and validation. SEMS mandates the hazard analysis; IEC 61511-1 is the most typical methodology that performs that analysis and determines if a SIS is needed.
Key Points
- Required by BSEE under 30 CFR Part 250, Subpart S for all offshore oil and gas operators on the US Outer Continental Shelf; it is the offshore counterpart to OSHA PSM for onshore processes.
- Covers thirteen elements including hazards analysis, management of change, pre-startup review, mechanical integrity, training, and incident investigation.
- The SEMS hazards analysis element drives the IEC 61511-1 hazard and risk assessment, which determines whether a SIF is required — not the other way around.
Example
An offshore production platform is subject to SEMS. The SEMS hazards analysis element requires the operator to conduct an IEC 61511-1 H&RA. That assessment identifies a scenario where a high-pressure excursion could rupture a vessel, and determines that the existing protection layers are insufficient — a SIF is required.
Cited Sources