Document Title: EHS&SR Risk Management Key Process

Worldwide Exploration and Production
EHS&SR
Risk Management Key Process
Hess Corporation
EHS&SR KEY PROCESS
Document Title: EHS&SR Risk Management Key Process
eDocument Filename: EHSRiskMgtKeyProcess.doc

Document Number: EHS 01
Version Number: Revision 0
Date Issued: August 06, 2007
Date Revised
PAPER COPY IS UNCONTROLLED

CONTROLLED DOCUMENT IS ELECTRONIC VERSION ON iHESS
Key Process EHS 01 Version: Revision 0 Page 1 of 29

Uncontrolled Document, valid only at time of printing.
EHS&SR
Overview of EHS&SR Risk Management Documentation

EHS Risk Management in Hess is governed through the “E&P Expectations for the Management of EHS&SR”
(Ref. 1), specifically Element 2 (Hazard and Risk Management) and Element 7 (Design, Operations and
Maintenance). These requirements of Elements 2 and 7 are implemented through a set of 5 documents, namely:
• A mandatory Key Process document which must be applied
• Four Recommended Practice documents which have an advisory role, providing guidance on how to satisfy
the Key Process document.
Generally, these documents are intended to allow the reader to become an informed buyer of such services and the
documents do not go into all of the detail required to allow such work to be carried out. For readers who require
more detail, the documents provide references to relevant, industry accepted sources. Their relationship to each
other and their individual contents are summarized in the Figure and Table below.
This document details the Risk Management Process.

EHS&SR
Overview of EHS&SR Risk Management Documentation (cont’d)

DOCUMENT OBJECTIVES SUMMARY OF CONTENTS
Key Process 01 To describe all mandatory risk management practices required • Mandatory Assessment Requirements per Business
within Hess. Lifecycle
Risk Management • Risk Management Plan
• Risk Mitigation Controls
• Risk Registers
• QA processes
Recommended • PRA
To describe the tools recommended by Hess to identify and
Practice 01/01 • HAZID / ENVID
assess the risks arising from major accident hazards, defined
• HAZOP
as one which has the capability to: cause loss of life,
Technical Risk substantially damage an installation, cause major plant • QRA*
Assessment downtime or substantially impact the environment. • FMECA
• SIL
• LOPA
Recommended To describe the tools recommended by Hess to identify, assess • JSA
Practice 01/02 and manage the risks to the workforce (physical, chemical, • HS
biological and psychological) arising from the working
environment.
Operational Risk
Management
Recommended To describe the approaches recommended by Hess to identify, • IA
Practice 01/03 assess and manage all risks which have the potential to impact
the environment and social issues.
Impact Assessment
Recommended To define levels of risk which are generally considered (within • ALARP
Practice 01/04 the industry) to be acceptable. • Qualitative Risk Matrix
• Quantitative Risk Matrix (using Industry accepted
Risk Tolerability values)
• IRPA
*
Note that the term QRA is assumed to address a variety of assessment methods including: Consequence modeling, Fault trees, Event
trees, Reliability analysis, etc

EHS&SR
1.0 This document addresses the topics listed below.

Overview
Topic Page
Purpose 4
Scope 4
Governance 5
Responsibility 5
Business Lifecycle 5
Risk Management Process 7
Risk Management Plan 7
Risk Mitigation 8
Assurance 9
Training 9
Definitions 10
References 10
Appendix A: Risk Dependent Assessments 11
Appendix B: New Business Risk Assessment 12
Appendix C: Exploration (Seismic and Drilling) Risk Assessment 14
Appendix D: Project Development Risk Assessment 16
Appendix E: Production Operations Risk Assessment 19
Appendix F: Divestment / Abandonment Risk Assessment 21
Appendix G: EHS Risk Assessment Plan 23
Appendix H: Risk Register Process 28
Appendix I: Risk Register 30
2.0 The application of this Key Process is mandatory in all Hess operations. It ensures
Purpose consistent and effective management of EHS risks throughout the company and compliance
with the EHS&SR Expectations (in particular Elements 2 & 7).
This Key Process primarily addresses EHS risks. However, some risks associated with
Social Responsibility are addressed in the supporting Impact Assessment Recommended
Practice 01/03 and, whenever possible, an attempt should be made to include social risks in
EHS assessments.
Risk assessment is a highly complex area and while knowledge of this documentation is a
necessary first step to becoming an informed buyer of risk services it is not sufficient.
Personnel also require relevant training to complement this documentation (see section 11).
3.0 This Key Process applies to all Worldwide Exploration & Production (WWE&P)
Scope operations, associated facilities in which Hess is the operator, or has significant control
over operations, as well as other operations as designated by the Vice President of
EHS&SR, WWE&P.
In the non operated context the Hess joint venture representative can use this Key Process
as a guide to determining the appropriateness of the appointed operator’s risk management
methodologies.

EHS&SR
4.0 The table below identifies the Content Owner and the Approval Authority.
Governance
The Content Owner is responsible for:
a. Maintaining the Key Process current

b. Granting any operational exemptions to the requirements of this Key Process. Requests
for exemption must be documented and submitted by the relevant Line Manager, will
be technically assessed by the Content Owner and (where appropriate) recommended
for approval by the Approval Authority
c. Providing EHS risk assessment and management advice and guidance to Line
managers.
The Approval Authority is the person responsible for approving:
a. Distribution and subsequent revisions to this Key Process

b. Exemptions to this Key Process.
Content Owner Ben Treadgold

Approval Authority Kurt Kriter
5.0 Line Management is responsible for applying this Key Process. Users may include any
Responsibility management level within Hess ranging from SVP through Project and Operations
Managers to Supervisors, including:
a. Operations & Projects EHS Advisors and Managers

b. Operational Management
c. Project Managers
d. New Business Managers.
6.0 The “Value Chain” used in all Hess business processes in shown in Figure 6.1 below.
Business Lifecycle
Figure 6.1: Hess Value Chain
The Hess “Business Lifecycle” is assumed to commence, rather than end, with New
Business activity (including all of new country / area entry, new asset acquisition, etc) but
to follow the logic of the Value Chain. Multiple parts of the Value Chain may well be in
play within each of the Business Lifecycle elements. This Business Lifecycle is illustrated

EHS&SR
in Table 6.1 which also lists the risk assessments which must be applied at each of these
lifecycle elements.
Table 6.1: Mandatory Assessment Requirements per Business Lifecycle Element
NEW BUSINESS EXPLORATION PROJECT PRODUCTION DIVESTMENT /

(Seismic & Drilling) DEVELOPMENT OPERATIONS ABANDONMENT
• Preliminary • Preliminary • Preliminary • Preliminary • Preliminary

Risk Risk Risk Risk Risk
Assessment Assessment Assessment Assessment Assessment
• Hazard • Hazard • Hazard • Hazard • Hazard

Identification Identification Identification Identification Identification
Study / Study / Study / Study / Study /
Environment Environment Environment Environmental Environment
al al al Identification al
Identification Identification Identification Study Identification
Study Study Study Study
• Impact • Impact • Impact • Impact • Impact

Assessment Assessment Assessment Assessment Assessment
• Hazard & • Hazard &

Operability Operability
Study Study
• Job Safety • Job Safety • Job Safety • Job Safety

Analyses Analyses Analyses Analyses
• Hazard • Hazard • Hazard • Hazard

Spotting Spotting Spotting Spotting
Activities in bold black in the above Table (e.g. Job Safety Analyses) are those which Hess staff
would normally be expected to lead, take a major role in or impose the requirements on
contractors via contract documentation. Activities in bold purple italics (e.g. Impact
Assessment) are those in which Hess would normally involve an external consultancy to carry
out the detailed technical work whilst retaining ultimate responsibility.
The studies listed above in Table 6.1 may identify specific risks which require further,
more detailed assessment using the most appropriate risk tools. The choice of tool for these
further studies is dependant on many variables including: the specific risks, type of
operation, regulatory regime, etc. It is a Line Manager responsibility to make this choice
but, to support Line Management, Appendix A lists the most relevant “risk dependant”
further studies for each part of the Business Lifecycle.
The application of the techniques listed in Table 6.1 for each Business Lifecycle element is
summarized in Appendices B through F. In addition, each technique is also described in
more detail in the relevant supporting Recommended Practices which provide a risk
management “toolkit”.
Topic Page
Appendix A: Risk Dependent Assessments 11
Appendix B: New Business Risk Assessment 12
Appendix C: Exploration Risk Assessment 13
Appendix D: Project Development Risk Assessment 15
Appendix E: Production Operations Risk Assessment 18
Appendix F: Divestment / Abandonment Risk Assessment 20

EHS&SR
7.0 Risks are managed throughout the Business lifecycle through the application of the “Risk
Risk Management Management process”, namely:
Process
a. Plan: Development of a project specific or annual Risk Management plan to identify
what assessments are required, when they should be undertaken and who is responsible
b. Mitigate: Assess risks, determine if they are acceptable by comparing against
tolerability criteria then if they are not, take action to reduce the risk to acceptable
levels
c. Assure: monitor, review, audit and document the process to provide assurance that the
actions have been implemented.
This process is illustrated in Figure 7.0.
Figure 7.0 Hess Risk Management Process
8.0 Risks are managed throughout the Business Lifecycle through the production,
Risk Management documentation and application of a Risk Management Plan which relates the risk
Plan assessment tools identified in section 6.0 to key project milestones. This Plan must address:
a. Which methods will be used to identify and assess risks

b. When in the project lifecycle this work will be carried out
c. Who is responsible for this work
d. Whose input is required?
For work with a clear timeline (e.g. a seismic program, a drilling program, a project) this
Plan will follow the timeline. For work of a more “continuous” nature (e.g. production
operations) an annual Plan must be produced and updated. Appendix G provides further
information on the required structure of such EHS Risk Management plans.
This Plan must be compiled prior to the work commencing, in this context “work” refers to
the hiring of major contractors as well as the commencement of work in the field. In
addition, it may need to be regularly updated to reflect changes in understanding, risks or

EHS&SR
design / operational approaches. All revisions of the Plan must be circulated to relevant
staff for information and compliance.
The Plan should define a gated process (or be tied into existing gated processes) to ensure
that the activity cannot progress onto the next stage of the timeline until the risk
management activities and associated actions are complete.
Topic Page
Appendix G: EHS Risk Management Plan 22
9.0 The various risk assessment tools referenced in section 6.0 above allow Hess to evaluate
Risk Mitigation the level of risk associated with any activity / process / design either quantitatively or
qualitatively. This risk level must then to be compared to the Line Manager’s (and any
local Regulator’s) choice of risk tolerability criteria to assess the acceptability or otherwise
of the risk.
Each asset must define its own criteria and meet any acceptance criteria imposed by local
regulatory agencies. Hess does not impose mandatory risk acceptance criteria but, to
support assets in this area, Recommended Practice 01/04 summarizes generally accepted
industry approaches.
If these risk tolerability criteria are not met then action is required to mitigate the risk and
thus ensure compliance with these criteria The most appropriate risk mitigation measures
usually involve a combination of controls and the following risk mitigation hierarchy
(illustrated in Figure 9.1) must be applied by all assets.
Figure 9.1: Risk Mitigation Controls
1) Elimination – Complete removal of the hazard. Hazards are ‘designed out’ wherever this
is practical
2) Substitution – Replacement with a safer or more cost effective alternative

EHS&SR
3) Engineering Controls – Isolation/Segregation/Containment/Limitation. All involve

physical separation of personnel from the hazard
4) Administration Controls – Establishing policies and procedures to reduce exposure to
hazards, including monitoring of contaminant levels and reducing number of personnel
present during hazardous operations
5) Last Resort – Personal Protective Equipment (PPE). The role of PPE as a control measure
should not be confused with its more widespread role as a precaution and as a last line of
defense should an accident occur.
The hazards that are not removed are termed ‘residual risks’ and these must be analyzed in
further detail if they are not deemed to be acceptable. The aim is to reduce the risk and
demonstrate that any residual risk is acceptable.
10.0 The risk management processes described above will result in changes being required to
Assurance designs, operational practices and / or procedures, training and competency levels, etc to
ensure that risk tolerability levels are satisfied. Assets must have a formal, documented
risk management process in place to provide assurance that all actions are properly
implanted through a process of review, monitoring and audit as described in Appendix H.
This process requires that:
a. All “significant” risks arising from the studies are captured in a Risk Register as
defined in Appendix I. This Register will cover all such risks for the asset and should
be owned by the relevant Line Manager (e.g. Project Manager) who shall be designated
the Responsible Authority (RA)
b. This Risk register identifies the status of all such risks. All risks which have been
identified as requiring further work are tracked to “close out” as defined in Appendix
H.
In addition to the above processes, cross-functional reviews will take place on a regular
basis to provide further assurance.
It should be noted that the processes required are identical to those which should be in
place to manage change and to implement recommendations arising from accident
investigations and audits – there should be no need to develop additional processes only to
track risk assessment recommendations.
Topic Page
Appendix H: Risk Register Process 27
Appendix I: Risk Register 29
11.0 Training All Hess staff who may have a responsibility to implement this Key Process document
must have received appropriate training.

EHS&SR
12.0 ALARP: As Low As Reasonably Practicable. This denotes the point at which further steps
Definitions to reduce risks incur costs that are grossly disproportionate to the benefits gained.
Consequence: Outcome or impact of an event.
Hazard: A physical situation with a potential for human injury, damage to property,
damage to the environment or some combination of these.
Impact Assessment (IA): the process of identifying, predicting, evaluating and mitigating
the biophysical, social and other relevant effects of development proposals prior to major
decisions being taken and commitments made.
Likelihood: Used as a general description of probability or frequency.
Major Accident: An occurrence which has the capability to: cause loss of life,
substantially damage an installation, cause major plant downtime or substantially impact
the environment.
Residual Risk: The level of risk that remains after all proposed improvements to the
facility have been made. This may or may not be considered tolerable.
Risk: Risk is a function of the likelihood of an unwanted event occurring and the
consequential effects of that occurrence. It is often shown as a mathematical description of
Risk = Likelihood x Severity.
Severity: Level of impact on the organization as a result of the hazard consequences.
Qualitative Analysis: Qualitative analysis uses words to describe the magnitude of

potential consequences and the likelihood. These scales can be adapted to suit the
circumstances, and different descriptions may be used for different risks. Commonly used
terms to describe the risk level are High, Medium and Low.
Quantitative Analysis: uses numerical values (rather than the descriptive scales used in
qualitative and semi-quantitative analysis) for both consequences and likelihood using data
from a variety of sources. The quality of the analysis depends on the accuracy and
completeness of the numerical values and the validity of the models used. Consequences
may be determined by modeling the outcomes of an event or set of events, or by
extrapolation from experimental studies or past data. Such numerical consequence analysis
has been the most likely use of QRA within Hess.
13.0 1. E&P Expectations for the Management of EHS&SR.

References

EHS&SR
APPENDIX A: RISK DEPENDENT ASSESSMENT REQUIREMENTS

Section 6.1 of this Key Process defines those risk processes which must always be carried out in each stage of the
business lifecycle. However, as well as these mandatory risk assessment requirements, such studies may identify
specific risks which require further, more detailed assessment using the most appropriate risk tools. The choice of
tool for these further studies is dependant on many variables including: the specific risks, type of operation,
regulatory regime, the experience / expertise of local management etc. Table A.1 below lists the most relevant and
potentially most useful “risk dependant” further studies for each part of the Business Lifecycle (note that it is
unlikely that any further studies would be required in the New Business and Exploration Lifecycles). It is
emphasized that these further studies are not mandatory, their use will be solely a function of the identified risks.
All of these approaches require specialist knowledge and Hess staff would normally contract them to an external
consultancy. Consequently, although this Key Process and the supporting Recommended Practices do provide
relevant information on these techniques, the level of detail provided is consistent with Hess staff being informed
buyers of the service rather than carrying it out themselves.
Table A.1: “Risk Dependent” Assessment Requirements per Business Lifecycle Element
NEW BUSINESS EXPLORATION PROJECT PRODUCTION DIVESTMENT / ABANDONMENT

(Seismic & DEVELOPMENT OPERATIONS
Drilling)
• Quantitative • Quantitative • Quantitative • Quantitative Risk Assessment
Risk Risk Risk
Assessment* Assessment Assessment
• HAZOP
• Failure
Modes, Effects
& Criticality
Analysis
• Safety
Integrity Level
Assessment
• Layers of
Protection
Analysis
• Note that the term QRA is assumed to address a variety of assessment methods including: Consequence modeling,
Fault trees, Event trees, Reliability analysis, etc
Summary information on all of the above approaches is provided in Appendices B through F of this document
while Recommended Practice 01/01 “Technical Risk Assessment” provides more in-depth descriptions.

EHS&SR
APPENDIX B: NEW BUSINESS RISK ASSESSMENT

EHS&SR Management System Element 2 establishes the need to identify, assess and control health and safety risks
and environmental and social responsibility impacts in operations and activities at all stages of the lifecycle. This is
to ensure that necessary actions are taken to reduce these risks to acceptable levels through the application of
appropriate controls/mitigating measures.
The tables below identify the minimum requirements for risk assessment in the New Business Development phase
of the Hess Business Lifecycle. Blue boxes denote mandatory assessments, green boxes denote “risk dependent”
assessments (see Appendix A for definition)
Preliminary Risk Assessments (PRA) are required in the early concept stages of a Business
Development and Acquisition. The process is designed to be high level and therefore
usually qualitative. The aim is to identify areas of risk which require further assessment, or
which may raise concerns for the viability of the Business Development. Items under
PRA
consideration may include site selection, political landscape/stability, and time to obtain
permits / other approvals needed for projects, potential exposure of personnel to EHS&SR
hazards. If the Preliminary Risk Assessment concludes that the Business Development is
not feasible, no further risk assessment is required.
The Hazard Identification study (HAZID) and / or Environmental Hazard Identification

study (ENVID) is required following the PRA if the Business Development has been
deemed feasible or as a process for further assessment. The aim is to identify main
EHS&SR issues that could lead to serious consequences or occur at too high a frequency.
HAZID / ENVID
The general approach is to use hazard lists and guidewords systematically identifying the
relevant issues. In most instances the HAZID and ENVID should be combined into one
study. However, in any ISO 14001 accredited asset, the ENVID output (the environmental
aspects) needs to be extracted from the combined study.
An Impact Assessment (EIA) is required following the PRA if the Business Development
has been deemed feasible or as a process for further assessment. At this stage the IA will be
a screening exercise, the structure and content of which must conform to the in-country
IA
requirements. It is common at this stage that the potential environmental effects, health and
social impacts are assessed as well as governmental and local concerns. The IA provides an
essential input to decision making during this phase of the business lifecycle.
The application of the above requirements must also take account of the following:
• All risk assessments must reflect the requirements of the EHS&SR Expectations document (Ref. 1)
• Assessed risks must be addressed by levels of management commensurate with the nature and magnitude of the
risk
• The PRA, HAZID and IA must be clearly documented. If assessments are being lead by external parties, copies
must also be held in an appropriate Hess location. If the conclusions of a PRA are that the New Business
Development is not viable, records must still be kept for future reference or review of the decision making
process
• All actions resulting from each risk assessment process must be assigned to appropriate individuals with follow
up by the risk assessment Team Leader / Chairperson or nominee
• The risk assessment findings must be communicated to the relevant teams within Hess.

EHS&SR
APPENDIX C: EXPLORATION (SEISMIC & DRILLING) RISK

ASSESSMENT
and environmental and social responsibility impact in operations and activities at all stages of the lifecycle. This is
The tables below identify the minimum requirements for risk assessment in the Exploration phase of the Hess
Business Lifecycle. Blue boxes denote mandatory assessments, green boxes denote “risk dependant” assessments
(see Appendix A for definition)
Preliminary Risk Assessments (PRA) are required to identify areas of risk which require
further assessment by more detailed approaches such as HAZID, etc. Items under
PRA consideration may include operational risks, location dependant risks, political
landscape/stability, time to obtain permits/other approvals needed for projects, local
contractor competencies, potential exposure of personnel to EHS&SR hazards.
The aim of a Hazard Identification study (HAZID) and / or Environmental Hazard

Identification study (ENVID) in this phase of the lifecycle is to identify major EHS&SR
hazards which could occur during the planned seismic, exploration and drilling operations.
The general approach is to use hazard lists and guidewords systematically identifying the
relevant issues. The HAZID process should also be used to perform a health assessment on
HAZID / ENVID the operations by developing hazard lists and guidewords specifically related to health
effects. The process is not to resolve problems, re-write procedures or to re-design systems,
but to identify possible consequences and determine the required safeguards. In most
instances the HAZID and ENVID should be combined into one study. However, in any ISO
14001 accredited asset, the ENVID output (the environmental aspects) needs to be
extracted from the combined study.
The Impact Assessment (EIA) will identify the potential significant environmental and
social interactions from the Exploration operation on the environment and vice-versa.
IA
Controls must be identified and developed. The structure and content of the IA must
conform to ‘in country’ requirements.
A Job Safety Analysis (JSA) - also known as a Task Risk Assessment (TRA) - is carried out
in the workplace by the workforce and their line Supervisors. In the Exploration Life Cycle
JSA’s would normally be carried out by the Contractor. A JSA must be carried out prior to
JSA the commencement of any potentially hazardous activity at the work location. They aim to
break down the task into steps and identify areas of risk which require management or
further assessment. JSA’s are often the vehicle used for communicating the task steps, the
hazards and required controls to those who implement the requirements.
Hazard spotting is a process of continual identification and management of hazards in the

Hazard Spotting workplace. A process which empowers the entire workforce to identify, take action (which
may include stopping the job) and record hazards must be implemented for site operations.

EHS&SR
Quantitative Risk Assessment (QRA) is a detailed risk assessment tool which provides
QRA
numerical estimates of risk. It is seldom used by Hess during this phase of the lifecycle.
A Hazard and Operability Study (HAZOP) is a method of identifying hazards and

problems which prevent safe and efficient functioning. The HAZOP process is to
systematically apply guidewords and a series of questions for each piece of equipment
included in the scope of the HAZOP.
HAZOPs provide the opportunity to go through the equipment line by line, deviation by
HAZOP
deviation. HAZOP results must include identification of hazards and operating problems,
recommendations for changes in equipment, procedures to improve the systems and
recommendations for further studies as necessary.
If required during this lifecycle element, the HAZOP would only be applied during the
planning for a well test.
The application of the above requirements must also take account of the following:
risk
• Outcomes from each of the processes must be clearly documented. If assessments are being lead by external
parties, copies must also be held at appropriate Hess locations
up by the risk assessment Team Leader / Chairperson or nominee
• The risk assessment findings must be communicated at all levels to ensure the workforce required to implement
the controls understand the risks.

EHS&SR
APPENDIX D: PROJECT DEVELOPMENT RISK ASSESSMENT

EHS&SR Element 7 establishes the need for new and existing facilities to identify potential EHS&SR hazards using
appropriate risk assessment tools. Mitigation of risks is required through the implementation of appropriate controls.
Systems or processes must be established to ensure that when facilities are being designed and specified, commercial
and EHS&SR risks are appropriately considered. Risks introduced by simultaneous operations are expected to be
assessed and managed.
The tables below identify the potential requirements for risk assessment in the Project Development phase of the
Hess Business Lifecycle. Risk assessments conducted in this phase are very detailed to ensure project design is
suitable and controls are established. Blue boxes denote mandatory assessments, green boxes denote “risk
dependant” assessments (see Appendix A for definition)
further assessment by more detailed approaches such as HAZID, etc. Items under
PRA consideration may include design and / or operational risks, location dependant risks, time to
obtain permits/other approvals needed for projects, fabrication risks, installation risks, local
contractor competencies, potential exposure of personnel to EHS&SR hazards.

hazards in design or during planned Project operations. The general approach is to use hazard
lists and guidewords systematically identifying the relevant issues. The HAZID process
should also be used to perform a health assessment on the design by developing hazard lists
HAZID / ENVID
and guidewords specifically related to health effects. The process is not to resolve problems,
re-write procedures or to re-design systems, but to identify possible consequences and
determine the required safeguards. In most instances the HAZID and ENVID should be
combined into one study. However, in any ISO 14001 accredited asset, the ENVID output
(the environmental aspects) needs to be extracted from the combined study.
The Impact Assessment (IA) will identify the potential significant environmental and social
interactions from the project operations. Factors that may present fundamental cost
IA constraints to the feasibility of a project should be investigated. The IA must conform to in-
country requirements. It must be improved in increasing detail as the project develops
through to the next business lifecycle phase.
A Hazard and Operability Study (HAZOP) is a method of identifying hazards and problems
which prevent safe and efficient operation. The HAZOP process is to systematically apply
guidewords and a series of questions for each pipeline, vessel and piece of equipment
included in the scope of the HAZOP.
HAZOPs provide the opportunity to go through the design line by line, deviation by
HAZOP
deviation. HAZOP results must include identification of hazards and operating problems,
recommendations for changes in design, procedures to improve the systems and
recommendations for further studies as necessary. It will be necessary to decide early in the
design phase how the HAZOP process will tie into the timing of detailed design and
construction.

EHS&SR
A Job Safety Analysis (JSA) - also known as a Task Risk Assessment (TRA) - is carried out
in the workplace by the workforce and their line Supervisors. In the Project Development
Life Cycle JSA’s would normally be carried out by the Contractor. A JSA must be carried
JSA out prior to the commencement of any potentially hazardous activity at the work location.
They aim to break down the task into steps and identify areas of risk which require
management or further assessment. JSA’s are often the vehicle used for communicating the
task steps, the hazards and required controls to those who implement the requirements.
Hazard spotting is a process of continual identification and management of hazards in the

Hazard Spotting workplace. A process which empowers the entire workforce to identify, take action (which
may include stopping the job) and record hazards must be implemented for site operations.
numerical estimates of risk. It is most frequently used by Hess during this phase of the
lifecycle for consequence modeling. It could also be used during this phase of the lifecycle as
QRA
a tool to assist in examining and comparing risk levels in design concepts, identifying events
which contribute most to the individual and societal risk and estimating the benefits of a
proposed risk reduction measure.
Failure Modes, Effects and Criticality Analysis (FMECA) comprise two activities, a Failure
Mode Effects Analysis (FMEA) and a Criticality Analysis (CA). FMEA systematically
evaluates equipment failure modes and the potential impact of each failure on performance.
FMECA Criticality Analysis ranks each potential failure mode according to its severity and likelihood
of occurrence. An FMEA can be carried out in isolation to a CA. If required, an FMECA
should be repeated / iterated as a project goes from concept through to detailed design to
assure the reliability and performance of a specific critical item of equipment.
Safety Integrity Level (SIL) reviews establish the required safety integrity level for
instrument systems, based on the risk of injury to people, the economic loss due to potential
damage to equipment and on the level of potential damage to the environment. Carried out in
SIL
the late design phase of a project, the outputs from the review should then be used for
planning equipment commissioning, testing, maintenance, modifications and
decommissioning to ensure adequate safety levels are maintained
Layer of Protection Analysis (LOPA) semi-quantitatively evaluates the safety integrity of

process operations. It uses simple numerical calculations to measure the adequacy of
protection layers (e.g. alarms, relief valves, control loops, etc) against the potential
LOPA
consequences of process deviations (e.g. loss of containment, personnel exposure, etc). LOPA
results should be seen as giving an order of magnitude estimation of the risk levels from any
given scenario.
The application of the above requirements must also take account of the following
• All risk assessments conducted in this lifecycle phase must consider commercial risks and the potential for
simultaneous operations during hazard identification
risk

EHS&SR
• Findings, controls and actions from all risk assessments must be clearly documented. Risk assessment records,
including those performed or lead by Contractors must be held in an appropriate Hess location and made
available for reference in the next phase of the business lifecycle
• All risk assessment activities should be scheduled to ensure that any outcomes can be input into the design
process thereby contributing to the philosophy of safety by design
up by the risk assessment Team Leader / Chairperson or nominee to ensure actions are appropriately completed
• The risk assessment findings must be communicated throughout the project and other relevant teams within
Hess, especially workforces involved in implementing the required controls.
The approach outlined in this Key Process Document (and in this Appendix) assumes a major/ stand alone
project development activity. However, much project activity is associated with apparently minor modifications to
existing producing facilities. Such projects should always operate under the control of the asset’s Management of
Change procedure which should select the relevant risk management approaches to be used from the techniques
defined above. However, none of these risk management techniques are mandatory for such minor modification
projects – they should all be considered as risk dependant.

EHS&SR
APPENDIX E: PRODUCTION OPERATIONS RISK ASSESSMENT

assessed and managed.
The tables below identify the minimum requirements for risk assessment in the Production Operations phase of the
Hess Business Lifecycle. Blue boxes denote mandatory assessments, green boxes denote “risk dependent”
assessments (see Appendix A for definition)
Preliminary Risk Assessments (PRA) are required to identify areas of risk which
require further assessment by more detailed approaches such as HAZID, HAZOP etc.
PRA Items under consideration may include design and / or operational risks, location
dependant risks, local contractor competencies, potential exposure of personnel to
EHS&SR hazards.
Hazard Identification studies (HAZID) and / or Environmental Hazard Identification

studies (ENVID) in this phase of the lifecycle are required to identify major EHS&SR
hazards from design or operational changes and introduction of new equipment. The
HAZID process can also be used as an assessment process following a TRA, where
further risk assessment is deemed a requirement. The general approach is to use
HAZID / ENVID hazards lists and guidewords systematically identifying the relevant issues. The
process is not to resolve problems, re-write procedures or to re-design systems, but to
identify possible consequences and determine the required safeguards. In most
instances the HAZID and ENVID should be combined into one study. However, in any
ISO 14001 accredited asset, the ENVID output (the environmental aspects) needs to be
extracted from the combined study.
The Impact Assessment (IA) must be reviewed annually to confirm that the IA is still
current. If changes occur (as monitored by the Hess MoC process) such as operational
IA
modifications, design modifications, changes in venting or disposal processes, etc then
the IA must be updated accordingly.
A Hazard and Operability Study (HAZOP) is a method of identifying hazards and

problems which prevent safe and efficient operation. The HAZOP process is to
systematically apply guidewords and a series of questions for each pipeline, vessel and
piece of equipment included in the scope of the HAZOP.
HAZOPs provide the opportunity to go through the design line by line, deviation by
HAZOP deviation. HAZOP results must include identification of hazards and operating
problems, recommendations for changes in design, procedures to improve the systems
and recommendations for further studies as necessary. It will be necessary to decide
early in the design phase how the HAZOP process will tie into the timing of detailed
design and construction.

EHS&SR
A Job Safety Analysis (JSA) - also known as a Task Risk Assessment (TRA) - is
carried out in the workplace by the workforce and their line Supervisors. A JSA must
be carried out prior to the commencement of any potentially hazardous activity at the
JSA work location. They aim to break down the task into steps and identify areas of risk
which require management or further assessment. JSA’s are often the vehicle used for
communicating the task steps, the hazards and required controls to those who
implement the requirements.
Hazard spotting is a process of continual identification and management of hazards in

the workplace. A process which empowers the entire workforce to identify, take action
Hazard Spotting
(which may include stopping the job) and record hazards must be implemented for
production operations.
numerical estimates of risk. It is seldom used by Hess during this phase of the lifecycle.
QRA However, any QRA’s carried out during the project lifecycle must be maintained and
updated periodically during this production lifecycle (or at defined intervals in
compliance with in-country Regulations) to ensure that they are still current.
• Where relevant, Hazard identification must consider the potential for simultaneous operations or activities
risk
• Findings, controls and actions from all risk assessments must be clearly documented. Risk assessment records
must be held at an appropriate Hess location. Those performed or lead by Contractors must be made available
during operational planning and implementation and, if appropriate held on site for a specified period
• Risk assessments should, where relevant, consider the findings from previous assessments to ensure process
design, operation and maintenance continues to implement planned safeguards
• Risk assessments must be reviewed at specified intervals and updated as changes are planned to ensure effective
controls are understood before a change is implemented
up by the risk assessment Team Leader / Chairperson or nominee to ensure actions are completed as required
• The risk assessment findings must be communicated throughout the project and other relevant teams within
Hess, especially workforces involved in implementing the required controls

EHS&SR
APPENDIX F: DIVESTMENT / ABANDONMENT RISK

ASSESSMENT
assessed and managed operations are expected to be assessed and managed
The tables below identify the minimum requirements for risk assessment in the Abandonment phase of the Hess
Business Lifecycle. Blue boxes denote mandatory assessments, green boxes denote “risk dependant” assessments
(see Appendix A for definition)
further assessment by more detailed approaches such as HAZID, HAZOP etc. Items
PRA under consideration may include design and / or operational risks, location dependant
risks, local contractor competencies, potential exposure of personnel to EHS&SR
hazards.

hazards which could occur during the planned Abandonment or Divestiture. The general
approach is to use hazards lists and guidewords systematically identifying the relevant
HAZID / ENVID issues. The process is not to resolve problems, re-write procedures or to re-design
systems, but to identify possible consequences and determine the required safeguards. In
most instances the HAZID and ENVID should be combined into one study. However, in
any ISO 14001 accredited asset, the ENVID output (the environmental aspects) needs to
be extracted from the combined study.
If details for the Abandonment phase have been developed over the lifecycle of the
operation, it may not be necessary to conduct a new Impact Assessment (IA) at this
IA stage. However, it must still conform to in-country requirements and identify the
potential significant environmental interactions from the planned operations on the
environment and vice-versa.
A Job Safety Analysis (JSA) - also known as a Task Risk Assessment (TRA) - is carried
out in the workplace by the workforce and their line Supervisors. A JSA must be carried
out prior to the commencement of any potentially hazardous activity at the work
JSA location. They aim to break down the task into steps and identify areas of risk which
require management or further assessment. JSA’s are often the vehicle used for
communicating the task steps, the hazards and required controls to those who implement
the requirements.

EHS&SR
Hazard spotting is a process of continual identification and management of hazards in

the workplace. A process which empowers the entire workforce to identify, take action
Hazard Spotting
(which may include stopping the job) and record hazards must be implemented for
production operations.
numerical estimates of risk. It is most frequently used by Hess during this phase of the
lifecycle for consequence modeling. It could also be used during this phase of the
QRA
lifecycle as a tool to assist in examining and comparing risk levels in abandonment
methods, identifying events which contribute most to the individual and societal risk and
estimating the benefits of a proposed risk reduction measure.
• All risk assessments conducted in this lifecycle phase must consider the relevant EHS&SR outcomes from
previous assessments during hazard identification
risk
• Findings, controls and actions from all risk assessments must be clearly documented. Risk assessment records
must be held at an appropriate Hess location. Those performed or lead by Contractors must be made available
during operational planning and implementation
up by the risk assessment Team Leader / Chairperson or nominee to ensure actions are completed
• The risk assessment findings must be communicated to relevant teams within Hess, especially workforces
involved in implementing the required controls.

EHS&SR
APPENDIX G: EHS RISK MANAGEMENT PLAN

Risks are managed throughout the Business Lifecycle through the production, documentation and application of a
Risk Management Plan. The Plan must be a formal controlled document which should be as succinct as possible
(most plans should be no longer than one or two pages in length) and will normally consist of 3 sections:
Section 1 – Document control: This section will contain document control information including: who “owns”
the Risk Management Plan and how Plan implementation will be monitored and assured
Section 2 – Project / Activity Description: This section will provide a high level summary of all project
activities (along with references to where further detail can be obtained) coupled with a project bar chart to give
an appropriate indication of timing
Section 3 – Plan: This section should primarily consist of a table showing
• What risk studies will be carried out (with reference to this Key Process and the supporting Recommended
Practices). As a minimum those studies defined as mandatory in Table 6.1 of this Key Process must be included.
The local regulatory regime may also dictate additional studies. In addition, the project / operations team may
also be aware of specific EHS concerns which they wish to address with further studies, either selected from the
list in Appendix A or from their own experience. Finally this list of studies may evolve as the project / operation
evolves or as further risk studies are carried out – the EHS Risk Management Plan must remain a live document
(e.g. as the design evolves during the project lifecycle it may become necessary to repeat / revisit previous EHS
studies to assure that they are still relevant)
• When it will be carried out. The timing will be related to key project milestones / gates which are listed in
Tables G.1.1 through G.1.6 (Blue boxes in the tables denote mandatory assessments, green boxes denote “risk
dependent” assessments as defined in Appendix A). Most such studies will require a timescale of around a few
weeks to prepare for the review, organize attendees / etc, carry it out and document findings. Studies with
substantially longer timescales (e.g. IA’s) are identified in the tables
• Who is responsible (i.e. who should be managing the study, either through directly chairing it or through acting
in an informed buyer role by hiring external contractors to chair / support the work)
• Who should attend these studies (i.e. which contractors / subcontractors need to attend, either because of their
specialist knowledge or because they need to “own” the study outputs)
Section 3 will normally consist of a table similar to that illustrated in Table G.2.
Table G1.1 Risk Study Timeline - New Business (including Divestment)
RISK REVIEW TIMING NOTES

PRA At commencement of planning for the Acquisition /
Divestment activity.
HAZID / ENVID Following site / country visits and prior to any If PRA deems activity feasible.
decision on the Acquisition / Divestment.
IA Immediately following the HAZID / ENVID and prior Such a high level IA may take a number of weeks and this timing
to any decision on the Acquisition / Divestment. must be factored into the project decision making schedule.

EHS&SR
Table G1.2 Risk Study Timeline – Seismic Exploration
RISK STUDY TIMING NOTES

PRA At commencement of planning for the Seismic work
and before beginning contractor selection / bidding.
IA Commence immediately following the PRA. Needs to A full IA consists of a number of stages which (depending on the
be complete prior to commencement of field activity. regulatory regime) may include:
• Data Gathering
• Report Preparation
• Stakeholder Consultation
• Public Consultation
• Regulatory Authority Review and approval / acceptance
In a known region with limited regulatory requirements and no
need for consultation an IA will typically require around 4 weeks
of calendar time. For an unknown region (where data has to be
gathered) with a strict regulatory regime requiring substantial
consultation, an IA could require many months of calendar time.
These timings must be factored into the project decision making

schedule.
HAZID / ENVID Following site / country visits and prior to the • Contractors should be involved in this activity if selection
commencement of field activity. has been made
• ENVID output will feed into the IA
JSA Ongoing during field work. Ensure that requirement for JSA is included in the contract.
HS Ongoing during field work. Ensure that requirement for HS is included in the contract.
Table G1.3 Risk Study Timeline – Drilling

PRA At commencement of planning for the Drilling
program and before beginning contractor selection /
bidding.
IA Commence immediately following the PRA. Needs to A full IA consists of a number of stages which (depending on the
be complete prior to commencement of field activity. regulatory regime) may include:
• Data Gathering
• Report Preparation
• Stakeholder Consultation

schedule.
HAZID / ENVID Following site / country visits and prior to the • Contractors should be involved in this activity if selection
commencement of field activity. has been made
• ENVID output will feed into the IA
• If SIMOPS is planned then other contributors to SIMOPS
(e.g. production, construction, etc) must be included in the
HAZID and further studies (e.g. QRA) may be required
QRA After the HAZID but prior to the commencement of Seldom used by Hess during this phase of the lifecycle.
field activity.
HAZOP Prior to any well testing operations. Well testing contractors must be involved in this activity and they
may be asked to lead the activity.
JSA Ongoing during field work. Ensure that requirement for JSA is included in the contract.
HS Ongoing during field work. Ensure that requirement for HS is included in the contract.

EHS&SR
Table G1.4 Risk Study Timeline – Projects
The responsibility for these studies will be a mix of Hess or the major project contractor. For smaller projects where
Hess retains the day to day management role Hess is likely to lead all studies. For turnkey projects the required
studies will be built into the contractual documentation and managed by the turnkey contractor.

PRA During concept selection stage
IA Commence immediately following the PRA. A full IA consists of a number of stages which (depending on the
regulatory regime) may include:
Needs to be completed prior to the design being frozen
(i.e. the completion of detailed design) because, • Data Gathering
irrespective of the regulatory framework, there may be • Report Preparation
impacts on the design • Stakeholder Consultation

schedule.
HAZID / ENVID Early on in the conceptual design. • ENVID output will feed into the IA
HAZOP At a number of key decision making gates including, The timing of a HAZOP requires a balance between waiting long
as a minimum: enough so that sufficient design detail is available and carrying it
• Close to end of FEED out sufficiently early in the process to minimise the impact of any
• Close to the end of detailed design (this to required modifications.
include HAZOP of all vendor supplied
equipment)
QRA During detailed design if required by the HAZOP. Most frequently used by Hess during this phase of the lifecycle
for consequence modeling.
FMECA During detailed design if required by the HAZOP.
SIL During detailed design if required by the HAZOP.
LOPA During detailed design if required by the HAZOP.
JSA Ongoing during construction work. Ensure that requirement for JSA is included in the contract.
HS Ongoing during construction work. Ensure that requirement for HS is included in the contract.
HAZID / ENVID Prior to commencement of installation / HUC activity
JSA Ongoing during installation / HUC activity. Ensure that requirement for JSA is included in the contract.
HS Ongoing during installation / HUC activity. Ensure that requirement for HS is included in the contract.

EHS&SR
Table G1.5 Risk Study Timeline – Production Operations
a) New Producing Facility (where the project team hands over a facility which fully complies with Timeline G.1.4)
The following table assumes that all production operations receive the relevant risk studies and “as built” versions of
key engineering information from the project group (usually in the form of a “Safety Dossier”) and that they then
retain this information current.

PRA Review annually to confirm that the high level risks This document should exist from the project. It will be retained
identified in the PRA are still current by the Operations Group but if changes occur (as monitored by
the Hess MoC process) then it must be updated. This can be
carried out as part of a wider Business Risk review
IA Review annually to confirm that the IA is still current This document should exist from the project. It will be retained
by the Operations Group but if changes occur (as monitored by
the Hess MoC process) then it must be updated.
HAZID / ENVID Review annually to confirm that the HAZID / ENVID This document should exist from the project. It will be retained
is still current by the Operations Group but if changes occur (as monitored by
HAZOP
• Review annually to confirm that the HAZOP is
This document should exist from the project. It will be retained
by the Operations Group but if changes occur (as monitored by
still current
• As required by the application of the MoC
process
QRA If the HAZOP required a QRA. Review annually to
confirm that the QRA is still current
JSA Prior to any novel work to ensure effective EHS
control.
HS Ongoing
*MoC refers to the Hess Management of Change process – see Element 8
b) Existing Producing Facility
The following table applies to producing facilities which are acquired by Hess or to Hess facilities which have not
been designed, fabricated and installed in accordance with Timeline G.1.4. In such circumstances substantial
additional work is required to assure EHS compliance with the requirements of this Key Process and the time
required to reach compliance reflects this effort.
WORK TIMING NOTES

PRA Review annually to confirm that the PRA is still This can be carried out as part of a wider Business Risk review.
current
PREPARE KEY As soon as possible Ensure that key supporting data (Design Philosophies /
SUPPORTING DATA Operational Procedures / “As Built” engineering drawings) are
current
IA Carry out an IA within 12 months of the issue of this Identify all / any actions arising from this IA which are required
Key Process document / acquisition of the facility. to mitigate E&SR risk, action them and track to closure.
HAZID / ENVID Carry out a HAZID / ENVID within 12 months of the Identify all / any actions arising from this HAZID / ENVID
issue of this Key Process document / acquisition of the which are required to mitigate E&SR risk, action them and track
facility. to closure.
HAZOP Carry out a HAZOP (and any other associated risk Identify all / any actions arising from this HAZOP which are
studies identified by the HAZOP such as a QRA) required to mitigate E&SR risk, action them and track to closure.
within 24 months of the issue of this Key Process
document / acquisition of the facility
JSA Prior to any novel work to ensure effective EHS
control.
HS Ongoing
*MoC refers to the Hess Management of Change process – see Element 8

EHS&SR
Table G1.6 Risk Study Timeline – Abandonment (see Table G1.1 for Divestment)
The responsibility for these studies will be a mix of Hess or the major contractor. For small projects where Hess
retains the day to day management role Hess is likely to lead all studies.

PRA During abandonment method selection stage
IA Commence immediately following the PRA. A full IA consists of a number of stages which (depending on the
regulatory regime) may include:
Needs to be completed prior to the abandonment
concept being frozen because, irrespective of the • Data Gathering
regulatory framework, there may be impacts on the • Report Preparation
abandonment method. • Stakeholder Consultation

schedule.
HAZID / ENVID Early on in the abandonment method selection. ENVID output will feed into the IA
QRA Prior to critical work if required by HAZID. Most frequently used by Hess during this phase of the lifecycle
for consequence modeling.
JSA Ongoing during dismantling and similar work. Ensure that requirement for JSA is included in the contract.
HS Ongoing during dismantling and similar work. Ensure that requirement for HS is included in the contract.
Table G2 Section 3 Pro Forma
RISK RESPONSIBLE RESPONSIBLE OTHER COMPANIES DUE DATE NOTES

STUDY COMPANY PERSON TO BE
REPRESENTED

EHS&SR
APPENDIX H: RISK REGISTER PROCESS

The process flow chart below summarizes the process required to ensure that recommendations arising from risk
assessments are appropriately addressed. The process is described in detail below.
Identify appropriate technique for risk

assessment.
Technical Operational
PRA JSA
HAZID HS
ENVID
IA
HAZOP
Risk
Register
Recommend and
implement remedial
actions and assess
residual risk
NO Is residual risk
Acceptable
YES
Review and
Audit
Approve

EHS&SR
1. The results of EHS related risk assessment will be appropriately documented, by the relevant Team Leader /
Chairperson
2. All “significant” EHS risks arising from such studies (including those which are deemed acceptable as well as
those which have been identified as requiring further work) shall be captured in a Risk Register as defined in
Appendix I. This Register will cover all such risks for the asset and should be owned by a relevant line
manager (e.g. the project manager) designated the Responsible Authority (RA). Some smaller projects may
find it convenient to capture the results of all risk assessments, not just those from EHS studies, in such a
Register, however as the project size and associated risks increase such an approach soon becomes unwieldy
3. It is important that all managers “buy into” the register and that all of the risks it contains are relevant and
material. Any such issues should have been resolved during review of the risk assessments. However, if it is
subsequently decided between relevant managers and the RA that some actions identified from risk
assessments should not be captured on the Register then the decision must be documented and approved by
both parties
4. All risks in the Risk Register requiring further work must then be closed out. The register itself identifies:
• What should be done
• Who is responsible to do it
• When it should be done by.
5. The Risk register should be updated regularly (ideally monthly) to monitor progress in addressing these issues
6. All actions in the Risk Register must be formally closed out
7. The RA will:
• Monitor any outstanding actions on periodic basis
• Update the Risk Register with this information.
8. Once the risks have been closed out (through the implementation of corrective and preventive actions) it is
also critical to ensure that any relevant Controlled Documents (i.e. design, operational etc) are updated as
necessary to reflect these changes. Depending on the asset this may remain the responsibility of the nominated
competent person or of the RA. No risk should be closed out until these actions are complete. Such actions
will usually be carried out in accordance with “Document Control” and “Change Management” standards.
The RA will finally arrange for verification that the actions have been completed and that they have been effective
in addressing the initial concern. This can be achieved during regular, planned audit activity or through dedicated
actions. Such activities will follow the requirements of Element 13 (Audit) of the EHS&SR Expectations (Ref. 1).

EHS&SR
APPENDIX I: RISK REGISTER

Asset:
Lifecycle:
Responsible Authority:
Risk Register
RESIDUAL RISK
RISK IDENTIFICATION & ANALYSIS CONTROL STRATEGY MITIGATION PLAN
RATING
RISK EXISTING ADDITIONAL CONTROL
No. IMPACT L C R APPROVED ACTION BY DUE STATUS PRIORITY COMMENTS
ISSUE CONTROLS CONTROLS DOC. No.


Document Title: EHS&SR Risk Management Key Process

Încărcat de

Informații document

Titlu original

Drepturi de autor

Formate disponibile

Partajați acest document

Partajați sau inserați document

Opțiuni de partajare

Vi se pare util acest document?

Este necorespunzător acest conținut?

Drepturi de autor:

Formate disponibile

Document Title: EHS&SR Risk Management Key Process

Încărcat de

Drepturi de autor:

Formate disponibile

Worldwide Exploration and Production

EHS&SR KEY PROCESS

Document Title: EHS&SR Risk Management Key Process

eDocument Filename: EHSRiskMgtKeyProcess.doc

PAPER COPY IS UNCONTROLLED

Key Process EHS 01 Version: Revision 0 Page 1 of 29

Overview of EHS&SR Risk Management Documentation

• A mandatory Key Process document which must be applied

This document details the Risk Management Process.

Key Process EHS 01 Version: Revision 0 Page 2 of 29

Overview of EHS&SR Risk Management Documentation (cont’d)

Key Process EHS 01 Version: Revision 0 Page 3 of 29

1.0 This document addresses the topics listed below.

Key Process EHS 01 Version: Revision 0 Page 4 of 29

a. Maintaining the Key Process current

The Approval Authority is the person responsible for approving:

a. Distribution and subsequent revisions to this Key Process

Content Owner Ben Treadgold

a. Operations & Projects EHS Advisors and Managers

Key Process EHS 01 Version: Revision 0 Page 5 of 29

Table 6.1: Mandatory Assessment Requirements per Business Lifecycle Element

NEW BUSINESS EXPLORATION PROJECT PRODUCTION DIVESTMENT /

• Preliminary • Preliminary • Preliminary • Preliminary • Preliminary

• Hazard • Hazard • Hazard • Hazard • Hazard

• Impact • Impact • Impact • Impact • Impact

• Hazard & • Hazard &

• Job Safety • Job Safety • Job Safety • Job Safety

• Hazard • Hazard • Hazard • Hazard

Key Process EHS 01 Version: Revision 0 Page 6 of 29

This process is illustrated in Figure 7.0.

Figure 7.0 Hess Risk Management Process

a. Which methods will be used to identify and assess risks

Key Process EHS 01 Version: Revision 0 Page 7 of 29

Figure 9.1: Risk Mitigation Controls

Key Process EHS 01 Version: Revision 0 Page 8 of 29

3) Engineering Controls – Isolation/Segregation/Containment/Limitation. All involve

Key Process EHS 01 Version: Revision 0 Page 9 of 29

Consequence: Outcome or impact of an event.

Likelihood: Used as a general description of probability or frequency.

Severity: Level of impact on the organization as a result of the hazard consequences.

Qualitative Analysis: Qualitative analysis uses words to describe the magnitude of

13.0 1. E&P Expectations for the Management of EHS&SR.

Key Process EHS 01 Version: Revision 0 Page 10 of 29

APPENDIX A: RISK DEPENDENT ASSESSMENT REQUIREMENTS

NEW BUSINESS EXPLORATION PROJECT PRODUCTION DIVESTMENT / ABANDONMENT

Key Process EHS 01 Version: Revision 0 Page 11 of 29

APPENDIX B: NEW BUSINESS RISK ASSESSMENT

The Hazard Identification study (HAZID) and / or Environmental Hazard Identification

Key Process EHS 01 Version: Revision 0 Page 12 of 29

APPENDIX C: EXPLORATION (SEISMIC & DRILLING) RISK

The aim of a Hazard Identification study (HAZID) and / or Environmental Hazard

Hazard spotting is a process of continual identification and management of hazards in the

Key Process EHS 01 Version: Revision 0 Page 13 of 29

A Hazard and Operability Study (HAZOP) is a method of identifying hazards and

Key Process EHS 01 Version: Revision 0 Page 14 of 29

APPENDIX D: PROJECT DEVELOPMENT RISK ASSESSMENT

The aim of a Hazard Identification study (HAZID) and / or Environmental Hazard

Key Process EHS 01 Version: Revision 0 Page 15 of 29

Hazard spotting is a process of continual identification and management of hazards in the

Layer of Protection Analysis (LOPA) semi-quantitatively evaluates the safety integrity of

Key Process EHS 01 Version: Revision 0 Page 16 of 29

Key Process EHS 01 Version: Revision 0 Page 17 of 29

APPENDIX E: PRODUCTION OPERATIONS RISK ASSESSMENT

Section 3 – Plan: This section should primarily consist of a table showing