Canada–Nova Scotia Offshore Area Petroleum Operations Framework Regulations — 133
ical damage and damage caused by fire, explosion and physical and environmental conditions to which they may be exposed so that they remain capable of fulfilling their intended functions under all foreseeable operating conditions; (e) the system allows for all information that is necessary to permit the management of emergency situations to be continuously provided to the main control centre and other strategic locations, including information regarding (i) the shutdown level and the source of activation of the system, (ii) any shutdown effects that failed to execute on activation of the system, and (iii) the status, including failure, of the system’s components; (f) the system is capable of being activated from multiple manual activation points that are (i) clearly marked, (ii) protected against unintentional activation, and (iii) located at (A) in the case of manual activation points for the highest level of shutdown, the main control centre and other strategic locations, including aircraft landing areas and other embarkation stations, and (B) in the case of all other manual activation points, strategic positions, at least one of which must not be in a hazardous area; (g) the activation of the system from a manual activation point triggers the general alarm system referred to in section 130 ; (h) if any part of the system is operated using a hydraulic or pneumatic accumulator, (i) the accumulator (A) is located as close as is practicable to the part that it is intended to operate, except if that part is part of a subsea production system, and (B) has the capacity for a sufficient number of activations to ensure that shutdown can be achieved, and (ii) the shutdown valves revert to a fail-safe mode in the event of a failure of the accumulator; (i) the system is capable of testing both its input and output signal devices and its internal functions to ensure its functioning; (j) in the event of a failure of the main electrical power supply referred to in subsection 122 (4), the system has the capacity to function continuously until the main electrical power supply is restored or all shutdown operations have been concluded; (k) in the event that an impairment of the system or any of its components increases the risk to safety or the environment, any other systems that support the emergency shutdown system reverts to a fail-safe mode; (l) if two or more installations are connected or if there is temporary equipment that has an emergency shutdown system on an installation, (i) the emergency shutdown systems of the connected installations are linked so that emergency shutdown signals are transmitted between those systems, (ii) the emergency shutdown systems of the temporary equipment are linked to the installation’s emergency shutdown system so that emergency shutdown signals are transmitted between those systems, and (iii) the logic for the emergency shutdown system of each of the connected installations and of the temporary equipment is re-evaluated and modified, if necessary, to take into account the fact that the emergency shutdown systems are linked, with the logic of the installation’s emergency shutdown system being given priority over that of any temporary equipment; (m) the system is capable of being overridden or reset only if the cause of its activation has been resolved and there has been local confirmation that the equipment that gave rise to the system shutdown can be safely used; and (n) override commands and functions are not capable of being unintentionally activated. Testing and maintenance (6) If the emergency shutdown system is capable of being overridden for the purposes of testing and maintenance activities, the operator must ensure that the following requirements are met: (a) override commands and functions must be applied for the shortest amount of time possible and with as few as possible being applied simultaneously; and (b) the testing and maintenance activities must not impair the system beyond what is ne