inspection results (irr) · inspection results (irr) unit 32965 (126) no. assets sub ... (b)(1) are...

Inspection Results (IRR)

UNIT 32965 (126)

No. AssetsSub

ModuleQst# Question ID References Question Text Result

IssueSummary

InspectionNotes

1. UNIT 32965(and 1otherassets)

CR.CRMGEN 1. CR.CRMGEN.CRMCRITERIA.P 195.446(a) Does the processadequately addresscriteria by whichthe operatordetermines whichof its facilities arecontrol rooms?

Sat -- BP operate threecontrol roomcenters located atRenton, WA;Tulsa, OK; andLong Beach, CA. Each control roomis a stand alonecenter that arenot connected. This inspectionwill apply to theOlympic Pipelinecontrol centerlocated in Renton,WA.


CR.CRMGEN 2. CR.CRMGEN.CRMMGMT.P 195.446(a) Are CRMproceduresformalized andcontrolled?

Sat -- Annual review isvery October bycontrol centertrainingcoordinator.


CR.CRMGEN 3. CR.CRMGEN.CRMIMPLEMENT.R 195.446(a) Were proceduresapproved, in place,and implementedon or before theregulatorydeadline?

Sat -- Control RoomOperation,Management &EmergencyResponse (OMER)was developed1-23-2009.


CR.CRMGEN 4. CR.CRMGEN.CRMPROCLOCATION.O 195.446(a) Are proceduresreadily available tocontrollers in thecontrol room?

Sat -- All controllershave access to tothe DocumentRecordManagement(DRM) system forControl RoomProcedures.


CR.CRMRR 1. CR.CRMRR.RESPONSIBLE.P 195.446(b)(1) Are there clearprocesses todescribe eachcontroller's physicaldomain ofresponsibility forpipelines and otherfacility assets?

Sat -- Olympic Pipelinehas twocontrollers and aqualifiedsupervisor. Eachcontrollermonitors the20-inch mainlinefrom Ferndale toPortland, OR. andthe secondcontrollermonitors the16-inch mainlinefrom Ferndale toSeattle, WA.


CR.CRMRR 2. CR.CRMRR.QUALCONTROL.P 195.446(b)(1) Are there provisionsin place to assurethat only qualifiedindividuals mayassume control atany console/desk?

Sat -- The two mainlinecontrollers andtheir supervisorare control roomqualified.


CR.CRMRR 3. CR.CRMRR.DOMAINCHANGE.P 195.446(b)(1) If the physicaldomain ofresponsibilityperiodicallychanges, has a

Sat -- Procedure:FCTRL-OPS-463-004Sections 8-13;Physical Change

Results (IRR) file:///C:/InspectionAssistant/App/chrome/content/0.1/index.html?ff_profi...

1 of 37 5/15/2013 10:07 AM

No. AssetsSub


IssueSummary

InspectionNotes

clear process beenestablished todescribe theconditions for whensuch a changeoccurs?

to Back-upFacility.


CR.CRMRR 4. CR.CRMRR.RESPCHANGE.P 195.446(b)(1) Do processesaddress acontroller's roleduring temporaryimpromptu(unplanned)changes incontrollerresponsibilities?

Sat -- Procedure:FCTRL-OPS-463-004Sections 8-12;Shift Turn Overand Hand-OverResponsibilities.


CR.CRMRR 5. CR.CRMRR.COMMANDVERIFY.P 195.446(b)(1) Do the definedroles andresponsibilitiesrequire controllersto stay at theconsole to verify allSCADA commandsthat have beeninitiated arefulfilled, and thatcommands givenvia verbalcommunicationsare acknowledgedbefore leaving theconsole for anyreason?

Sat -- Shift LeaderResponsibilitiesinclude takingover controllerconsole duringchange overbecause all shiftchanges areverbal commands.


CR.CRMRR 6. CR.CRMRR.AUTHORITYABNORMAL.P 195.446(b)(2) Have processesbeen established todefine thecontrollers'authority andresponsibilitieswhen an abnormaloperating conditionis detected?

Sat -- Information iscontained inOMER Book #1,page 3 and OMERBook #2,paragraph H forAbnormal Action.


CR.CRMRR 7. CR.CRMRR.PRESSLIMITS.O 195.446(b)(2) Are controllersaware of thecurrent MOPs of allpipeline segmentsfor which they areresponsible, andhave they beenassigned theresponsibility tomaintain thosepipelines at orbelow the MOP?

Sat -- --


CR.CRMRR 8. CR.CRMRR.AUTHORITYEMERGENCY.P 195.446(b)(3) Do processesdefine thecontrollers'authority andresponsibility tomake decisions,take actions, andcommunicate withothers upon beingnotified of, or upondetection of, andduring, anemergency or if aleak or rupture is

Sat -- CRM P-195.466(b)(2) & OMERBook 2, paragraphH & I


2 of 37 5/15/2013 10:07 AM

No. AssetsSub


IssueSummary

InspectionNotes

suspected?


CR.CRMRR 9. CR.CRMRR.EVACUATION.P 195.446(b)(3) Do processesspecifically addressthe controller'sresponsibilities inthe event thecontrol room mustbe evacuated?

Sat -- --


CR.CRMRR 10. CR.CRMRR.COMMSYSFAIL.P 195.446(b)(3) Do processesspecifically addressthe controller'sresponsibilities inthe event of aSCADA system ordatacommunicationssystem failureimpacting largesections of thecontroller's domainof responsibility?

Sat -- OMER Book 2Section 5.99.1,paragraph G and J


CR.CRMRR 11. CR.CRMRR.HANDOVER.P 195.446(b)(4)(195.446(c)(5))

Have processesbeen establishedfor the hand-over ofresponsibility thatspecify the type ofinformation to becommunicated tothe oncoming shift?

Sat -- FCTRL-OPS-463-004


CR.CRMRR 12. CR.CRMRR.HANDOVERDOC.P 195.446(b)(4)(195.446(c)(5))

Do processesrequire that recordsdocument thehand-over ofresponsibility,document the timethe actualhand-over ofresponsibilityoccurs, and the keyinformation andtopics that werecommunicatedduring thehand-over?

Sat -- --


CR.CRMRR 13. CR.CRMRR.HANDOVERDOC.R 195.446(b)(4)(195.446(c)(5))

Are there recordsthat document thehand-over ofresponsibility,document the timethe actualhand-over ofresponsibilityoccurs, and the keyinformation andtopics that werecommunicatedduring thehand-over?

Sat -- --


CR.CRMRR 14. CR.CRMRR.HANDOVEROVERLAP.P 195.446(b)(4) Do processesrequire thecontrollers todiscuss recent andimpendingimportant activitiesensuring adequateoverlap?

Sat -- --


3 of 37 5/15/2013 10:07 AM

No. AssetsSub


IssueSummary

InspectionNotes


CR.CRMRR 15. CR.CRMRR.HANDOVERALTERNATIVE.P 195.446(b)(4) When a controller isunable to continueor assumeresponsibility forany reason, do theshift hand-overprocesses includealternative shifthand-over actionsthat specificallyaddress thissituation?

Sat -- --


CR.CRMRR 16. CR.CRMRR.UNATTENDCONSOLE.P 195.446(b)(4) Has the operatorestablished anadequate processfor occasions whenthe console is lefttemporarilyunattended for anyreason?

NA -- No such eventoccurred, orcondition existed,in the scope ofinspection review.


CR.CRMRR 17. CR.CRMRR.CONSOLECOVERAGE.P 195.446(b)(4) Do processesmaintain adequateconsole coverageduring shifthand-over?

Sat -- --


CR.SCADA 1. CR.SCADA.SYSTEMMOC.P 195.446(c)(1) Do processesclearly define thetypes of changes tothe SCADAsystem(s) thatconstituteadditions,expansions, orreplacements underthe meaning of theCRM rule?

Sat -- --


CR.SCADA 2. CR.SCADA.DISPLAYCONFIG.P 195.446(c)(1) Are there writtenprocesses toimplement the APIRP 1165 displaystandards to theSCADA systemsthat have beenadded, expanded,or replaced sinceAugust 1, 2012?

Sat -- --


CR.SCADA 3. CR.SCADA.HUMANFACTORS.R 195.446(c)(1) Has section 4 ofAPI RP 1165regarding humanfactors engineeringbeen implemented?

Sat -- --


CR.SCADA 4. CR.SCADA.DISPLAYHARDWARE.R 195.446(c)(1) Has section 5 ofAPI RP 1165regarding displayhardware beenimplemented?

Sat -- --


CR.SCADA 5. CR.SCADA.DISPLAYLAYOUT.R 195.446(c)(1) Has section 6 ofAPI RP 1165regarding displaylayout andorganization beenimplemented?

Sat -- --


CR.SCADA 6. CR.SCADA.DISPLAYNAVIGATION.R 195.446(c)(1) Has section 7 ofAPI RP 1165regarding displaynavigation beenimplemented?

Sat -- --


4 of 37 5/15/2013 10:07 AM

No. AssetsSub


IssueSummary

InspectionNotes


CR.SCADA 7. CR.SCADA.DISPLAYOBJECTS.O 195.446(c)(1) Has section 8 ofAPI RP 1165regarding displayobjectcharacteristics beenimplemented?

Sat -- --


CR.SCADA 8. CR.SCADA.DISPLAYDYNAMICS.R 195.446(c)(1) Has section 9 ofAPI RP 1165regarding displayobject dynamicsbeen implemented?

Sat -- --


CR.SCADA 9. CR.SCADA.CONTROLSELECTION.R 195.446(c)(1) Has section 10 ofAPI RP 1165 controlselection andtechniques beenimplemented?

Sat -- --


CR.SCADA 10. CR.SCADA.ADMINISTRATION.R 195.446(c)(1) Has section 11 ofAPI RP 1165administration beenimplemented?

Sat -- --


CR.SCADA 11. CR.SCADA.1165IMPRACTICAL.R 195.446(c)(1) If any/all applicableparagraph(s) of APIRP 1165 have notbeen implemented,has it beendemonstrated anddocumented thatthe unimplementedprovisions areimpractical for theSCADA systemused?

Sat -- --


CR.SCADA 12. CR.SCADA.SETPOINT.P 195.446(c)(2)(195.406(b))

Does the processadequately definesafety-relatedpoints?

Sat -- Procedure CTULM-SCD-OPS-460-003


CR.SCADA 13. CR.SCADA.SETPOINT.R 195.446(c)(2) Do records indicatesafety-relatedpoints have beenadequatelyimplemented?

Sat -- --


CR.SCADA 14. CR.SCADA.POINTVERIFY.P 195.446(c)(2) Are there adequateprocesses to defineand identify thecircumstanceswhich require apoint-to-pointverification?

Sat -- SOP ProcedureSCADA Pt. to Pt.Testing Section8.0


CR.SCADA 15. CR.SCADA.POINTVERIFY.R 195.446(c)(2) Have requiredpoint-to-pointverifications beenperformed?

Sat -- --


CR.SCADA 16. CR.SCADA.POINTVERIFYEXTENT.P 195.446(c)(2) Are there adequateprocesses for thethoroughness of thepoint-to-pointverification?

Sat -- --


CR.SCADA 17. CR.SCADA.POINTVERIFYEXTENT.R 195.446(c)(2) Do recordsdemonstrateadequatethoroughness of thepoint-to-pointverification?

Sat -- --


CR.SCADA 18. CR.SCADA.POINTVERFIYINTVL.P 195.446(c)(2) Is there anadequate processfor defining whenthe point-to-point

Sat -- --


5 of 37 5/15/2013 10:07 AM

No. AssetsSub


IssueSummary

InspectionNotes

verification must becompleted?


CR.SCADA 19. CR.SCADA.POINTVERFIYINTVL.R 195.446(c)(2) Do records indicatethe point-to-pointverification hasbeen completed atthe requiredintervals?

Sat -- --


CR.SCADA 20. CR.SCADA.COMMPLAN.P 195.446(c)(3) Has an internalcommunicationplan beenestablished andimplemented thatis adequate tomanually operatethe pipeline duringa SCADAfailure/outage?

Sat -- --


CR.SCADA 21. CR.SCADA.COMMPLAN.R 195.446(c)(3) Has the internalcommunicationplan been testedand verified formanual operationof the pipelinesafely at least onceeach calendar yearbut at intervals notexceeding 15months?

Sat -- --


CR.SCADA 22. CR.SCADA.BACKUPSCADA.O 195.446(c)(4) Is there a backupSCADA system?

Sat -- --


CR.SCADA 23. CR.SCADA.BACKUPSCADADEV.P 195.446(c)(4) Has the use of thebackup SCADAsystem fordevelopment workbeen defined?

Sat -- Development hasfull capabilitiesand is not a partof the back-upsystem. Reviewed settingsfor 64 pressureswitches from2012 data.


CR.SCADA 24. CR.SCADA.BACKUPSCADATEST.R 195.446(c)(4) Is the backupSCADA systemtested at least onceeach calendar yearat intervals not toexceed 15 months?

Sat -- --


CR.SCADA 25. CR.SCADA.BACKUPSCADAVERIFY.R 195.446(c)(4) Does the testingverify that thereare adequateprocesses in placefor decision-makingand internalcommunications tosuccessfullyimplement atransition fromprimary SCADA tobackup SCADA, andback to primarySCADA?

Sat -- --


CR.SCADA 26. CR.SCADA.BACKUPSCADAADEQUACY.R 195.446(c)(4) If the back-upSCADA system isnot designed tohandle all thefunctionality of the

Sat -- --


6 of 37 5/15/2013 10:07 AM

No. AssetsSub


IssueSummary

InspectionNotes

main SCADAsystem, does thetesting determinewhether there areadequateprocedures in placeto account fordisplaced and/ordifferent availablefunctions duringback-upoperations?


CR.SCADA 27. CR.SCADA.BACKUPSCADATRANSFER.P 195.446(c)(4) Do processesadequately addressand test thelogistics oftransferring controlto a backup controlroom?

Sat -- --


CR.SCADA 28. CR.SCADA.BACKUPSCADARETURN.P 195.446(c)(4) Do proceduresadequately addressand test thelogistics ofreturningoperations back tothe primary controlroom?

Sat -- --


CR.SCADA 29. CR.SCADA.BACKUPSCADAFUNCTIONS.R 195.446(c)(4) Is a representativesampling of criticalfunctions in theback-up SCADAsystem beingtested to ensureproper operation inthe event thebackup system isneeded?

Sat -- The primarycomputer isrotated betweenRenton andTacoma ControlCenters.


CR.CRMFM 1. CR.CRMFM.FATIGUEMITIGATION.P 195.446(d) Does the fatiguemitigation processor procedures(plan) identifyoperator-specificfatigue risks?

Sat -- SOP FCTRL-OPS463-009 (Rev7-31-'12)Olympic usesCircadian Study &Recommendationsto define operatorspecific fatiguerisks.


CR.CRMFM 2. CR.CRMFM.FATIGUERISKS.P 195.446(d) Does the fatiguemitigation planadequately addresshow the programreduces the riskassociated withcontroller fatigue?

Sat -- Olympic uses 14hour limit per dayand maximum 65hours per 7-dayperiod.


CR.CRMFM 3. CR.CRMFM.FATIGUEQUANTIFY.P 195.446(d) Do processesrequire that thepotentialcontribution ofcontroller fatigue toincidents andaccidents bequantified duringinvestigations?

Sat -- SMRS page 29.


CR.CRMFM 4. CR.CRMFM.FATIGUEMANAGER.P 195.446(d) Is there adesignated fatiguerisk manager whois responsible andaccountable for

Sat -- --


7 of 37 5/15/2013 10:07 AM

No. AssetsSub


IssueSummary

InspectionNotes

managing fatiguerisk and fatiguecountermeasures,and someone(perhaps the sameperson) that isauthorized toreview and approveHOS emergencydeviations?


CR.CRMFM 5. CR.CRMFM.SHIFTLENGTH.R 195.446(d)(1) Is the scheduledshift length lessthan or equal to 12hours (not includingshift hand-over) oris there adocumentedtechnical basis toshow that shiftlengths andschedule rotationsare adequate toprovide controllersoff-duty timesufficient to achieve8 hours ofcontinuous sleep?

Sat -- Procedure FCTRL-OPS-463-009. FRMS Document -DuPont Schedule(RP 755)


CR.CRMFM 6. CR.CRMFM.SHIFTLENGTHTIME.R 195.446(d)(1) Does the operatorfactor in all timethe individual isworking for thecompany whenestablishing shiftlengths andschedule rotationsor is there adocumentedtechnical basis toshow that shiftlengths andschedule rotationsare adequate toprovide controllersoff-duty timesufficient to achieve8 hours ofcontinuous sleep?

Sat -- CircadianEvaluation forScientific Basis forWork Schedules.


CR.CRMFM 7. CR.CRMFM.SCHEDULEDTIMEOFF.R 195.446(d)(1) Are all scheduledperiods of time offat least one hourlonger than 8 hoursplus commute timeor is there adocumentedtechnical basis toshow that shiftlengths andschedule rotationsare adequate toprovide controllersoff-duty timesufficient to achieve8 hours ofcontinuous sleep?

Sat -- --


CR.CRMFM 8. CR.CRMFM.ONCALLCONTROLLER.R 195.446(d)(1) For controllers whoare on call, doesthe operatorminimize

Sat -- Two relief personsare available andtheir commutetime is counted


8 of 37 5/15/2013 10:07 AM

No. AssetsSub


IssueSummary

InspectionNotes

interrupting therequired 8 hours ofcontinuous sleep oris there adocumentedtechnical basis toshow that shiftlengths andschedule rotationsare adequate toprovide controllersoff-duty timesufficient to achieve8 hours ofcontinuous sleep?

for the same daythey arerequested towork. Thecommute time isnot counted if thecontroller isscheduled the daybefore their shift.


CR.CRMFM 9. CR.CRMFM.MAXHOS.P 195.446(d)(4) Do processes limitthe maximum HOSlimit in any sliding7 day period to nomore than 65 hoursor is there adocumentedtechnical basis toshow reduction ofthe risk associatedwith controllerfatigue?

Sat --


CR.CRMFM 10. CR.CRMFM.MINTIMEOFF.P 195.446(d)(4) After reaching theHOS limit in anysliding 7 dayperiod, is theminimum time offat least 35 hours oris there adocumentedtechnical basis toshow a reduction ofthe risk associatedwith controllerfatigue?

Sat -- FatigueManagement RiskSystem FCTRL-OPS-463-009


CR.CRMFM 11. CR.CRMFM.DOCSCHEDULE.P 195.446(d)(4) Is there a formalsystem todocument allscheduled andunscheduled HOSworked, includingovertime and timespent performingduties other thancontrol roomduties?

Sat -- --


CR.CRMFM 12. CR.CRMFM.DAYSOFF.P 195.446(d)(4) For normal businesshour typeoperations (i.e.,five days perweek), are no morethan five daysworked insuccession beforeat least two daysoff?



CR.CRMFM 13. CR.CRMFM.WORKHOURS.R 195.446(d)(4) For normal businesshour typeoperations (i.e.,five days perweek), is the shiftstart time no earlier



9 of 37 5/15/2013 10:07 AM

No. AssetsSub


IssueSummary

InspectionNotes

than 6:00 a.m. andthe shift end timeno later than 7:00p.m.?


CR.CRMFM 14. CR.CRMFM.FATIGUECOUNTERMEASURES.P 195.446(d)(4) For shifts longerthan 8 hours, havespecific fatiguecountermeasuresbeen implementedfor the ninth andbeyond hours?



CR.CRMFM 15. CR.CRMFM.DAILYHOSLIMIT.P 195.446(d)(4) Do processes limitthe daily maximumHOS limit no morethan 14 hours inany sliding 24-hourperiod?

Sat -- Olympic Pipelineuses HOSED(Hours of ServicedEmergencyDocument) Form,referenceAdvisory BulletinADB-05-06, andProcedure463-009 page 18.


CR.CRMFM 16. CR.CRMFM.CONTROLLERNUMBERS.O 195.446(d)(4) Do operationsinclude a sufficientnumber of qualifiedcontrollers?

Sat -- --


CR.CRMFM 17. CR.CRMFM.OFFDUTYHOURS.P 195.446(d)(4) Do processesensure thatcontrollers areprovided with atleast thirty-five(35) continuousoff-duty hours whenlimits are reachedfollowing the mostrecent 35-hour(minimum) off-dutyrest period or isthere adocumentedtechnical basis toshow that themaximum limit oncontroller HOS isadequate to reducethe risk associatedwith controllerfatigue?

Sat -- Procedure463-009 page16-19.


CR.CRMFM 18. CR.CRMFM.SHIFTHOLDOVER.P 195.446(d)(4) Does the shiftholdover processconform to shiftholdover guidelinesor is their adocumentedtechnical basis toshow that themaximum limit oncontroller HOS isadequate to reducethe risk associatedwith controllerfatigue?

Sat -- --


CR.CRMFM 19. CR.CRMFM.SPECIFICCOUNTERMEASURES.P 195.446(d)(4) Do processesrequire specificfatiguecountermeasuresduring applicabletime periods, or is

Sat -- Fatigue RiskManagementFCTRL-OPS-466-009


10 of 37 5/15/2013 10:07 AM

No. AssetsSub


IssueSummary

InspectionNotes

there adocumentedtechnical basis toshow that themaximum limit oncontroller HOS isadequate to reducethe risk associatedwith controllerfatigue?


CR.CRMFM 20. CR.CRMFM.HOSDEVIATIONS.P 195.446(d)(4) Is there a formalprocess forapprovingdeviations from themaximum HOSlimits?

Sat -- --


CR.CRMFM 21. CR.CRMFM.FATIGUEEDUCATE.P 195.446(d)(2)(195.446(d)(3))

Does the programrequire that fatigueeducation/trainingis required for allcontrollers andcontrol roomsupervisors?

Sat -- --


CR.CRMFM 22. CR.CRMFM.FATIGUEREFRESHER.R 195.446(d)(2)(195.446(d)(3))

Is refresher fatigueeducation providedat regular intervals?

Sat -- --


CR.CRMFM 23. CR.CRMFM.FATIGUEREVIEW.P 195.446(d)(2)(195.446(d)(3))

Do processesrequire that theeffectiveness of thefatigueeducation/trainingprogram bereviewed at leastonce each calendaryear, not to exceed15 months?

Sat -- --


CR.CRMFM 24. CR.CRMFM.FATIGUESTRATEGY.P 195.446(d)(2) Does fatigueeducation addressfatigue mitigationstrategies(countermeasures)?

Sat -- --


CR.CRMFM 25. CR.CRMFM.OFFDUTY.P 195.446(d)(2) Does fatigueeducation addresshow off-dutyactivities contributeto fatigue?

Sat -- --


CR.CRMFM 26. CR.CRMFM.FATIGUECONTENT.P 195.446(d)(3) Is the content offatigue trainingadequate fortraining controllersand supervisors torecognize theeffects of fatigue?

Sat -- --


CR.CRMAM 1. CR.CRMAM.ALARM.P 195.446(e) Is the alarmmanagement plana formal processthat specificallyidentifies criticaltopical areasincluded in theprogram?

Sat -- Procedure FCTRL-OPS-463-007. The InternationalSociety of SCADA(ISA) isreferenced forManagement ofAlarm Systems forthe ProcessIndustries.

78. UNIT 32965(and 1other

CR.CRMAM 2. CR.CRMAM.ALARMMALFUNCTION.P 195.446(e)(1) Is there a processto identify andcorrect inaccurate

Sat -- --


11 of 37 5/15/2013 10:07 AM

No. AssetsSub


IssueSummary

InspectionNotes

assets) or malfunctioningalarms?


CR.CRMAM 3. CR.CRMAM.ALARMREVIEW.P 195.446(e)(1) Does the review ofsafety-relatedalarms account fordifferent alarmdesigns and allalarmtypes/priorities?

Sat -- --


CR.CRMAM 4. CR.CRMAM.CONTROLLERPERFORMANCE.P 195.446(e)(1) Does the review ofsafety-relatedalarms account forindividual-specificcontrollerqualification andperformance?

Sat -- --


CR.CRMAM 5. CR.CRMAM.STALEDATA.P 195.446(e)(1) Does the review ofsafety-relatedalarms includespecific proceduresand practices formanaging stale orunreliable data?

Sat -- --


CR.CRMAM 6. CR.CRMAM.MONTHLYANALYSIS.P 195.446(e)(2) Do processesrequire the monthlyidentification,recording, review,and analysis ofpoints that havebeen taken offscan, have hadalarms inhibited,generated falsealarms, or thathave had forced ormanual values forperiods of timeexceeding thatrequired forassociatedmaintenance oroperatingactivities?

Sat -- Procedure - OPS -460-012


CR.CRMAM 7. CR.CRMAM.PROBLEMCORRECTION.P 195.446(e)(2) Does the alarmmanagement planinclude a processfor promptlycorrecting identifiedproblems and forreturning thesepoints to service?

Sat -- --


CR.CRMAM 8. CR.CRMAM.ALARMSETPOINTS.P 195.446(e)(3) Is there a formalprocess todetermine thecorrect alarmsetpoint values andalarm descriptions?

Sat -- --


CR.CRMAM 9. CR.CRMAM.SETTINGCONTROL.P 195.446(e)(3) Have proceduresbeen established toclearly address howand to what degreecontrollers canchange alarm limitsor setpoints, orinhibit alarms, ortake pointsoff-scan?

Sat -- --


12 of 37 5/15/2013 10:07 AM

No. AssetsSub


IssueSummary

InspectionNotes


CR.CRMAM 10. CR.CRMAM.VERIFICATION.P 195.446(e)(3) Do processesrequire that anycalibration orchange to fieldinstruments requireverification of alarmsetpoints and alarmdescriptions?

Sat -- --


CR.CRMAM 11. CR.CRMAM.PLANREVIEW.P 195.446(e)(4) Are there processesto review the alarmmanagement planat least once eachcalendar year, butat intervals notexceeding 15months, in order todetermine theeffectiveness of theplan?

Sat -- --


CR.CRMAM 12. CR.CRMAM.PLANREVIEW.R 195.446(e)(4) Do records indicatereview of the alarmmanagement planat least once eachcalendar year, butat intervals notexceeding 15months, in order todetermine theeffectiveness of theplan?

Sat -- --


CR.CRMAM 13. CR.CRMAM.WORKLOAD.P 195.446(e)(5) Does the CRMprogram have ameans ofidentifying andmeasuring the workload (content andvolume of generalactivity) beingdirected to anindividualcontroller?

Sat -- --


CR.CRMAM 14. CR.CRMAM.WORKLOADMONITORING.P 195.446(e)(5) Is the process ofmonitoring andanalyzing generalactivitycomprehensive?

Sat -- --


CR.CRMAM 15. CR.CRMAM.CONTROLLERREACTION.P 195.446(e)(5) Does the processhave a means ofdetermining thatthe controller hassufficient time toanalyze and reactto incomingalarms?

Sat -- --


CR.CRMAM 16. CR.CRMAM.PERFORMANCEANALYSIS.R 195.446(e)(5) Has an analysisbeen performed todetermine ifcontroller(s)performance iscurrently adequate?

Sat -- Procedure-ADM-061-001


CR.CRMAM 17. CR.CRMAM.DEFICIENCIES.P 195.446(e)(6) Is there a processto address howdeficiencies foundin implementing195.446(e)(1)through195.446(e)(5) will

Sat -- --


13 of 37 5/15/2013 10:07 AM

No. AssetsSub


IssueSummary

InspectionNotes

be resolved?


CR.CRMAM 18. CR.CRMAM.DEFICIENCIES.R 195.446(e)(6) Do records indicatedeficiencies foundin implementing195.446(e)(1)through195.446(e)(5) havebeen resolved?

Sat -- --


CR.CRMCMGT 1. CR.CRMCMGT.CHANGECOORDINATION.P 195.446(f)(1) Does the processassure changes infield equipment (forexample, moving avalve) that couldaffect control roomoperations arecoordinated withcontrol roompersonnel?

Sat -- ProcedureUSPL-MOO-001-001


CR.CRMCMGT 2. CR.CRMCMGT.CHANGECOORDINATION.R 195.446(f)(1) Do records indicatethat changes infield equipment (forexample, moving avalve) that couldaffect control roomoperations werecoordinated withcontrol roompersonnel?

Sat -- --


CR.CRMCMGT 3. CR.CRMCMGT.CHANGEMEETINGS.P 195.446(f)(1) Is there a processto mandate acontrol roomrepresentative willparticipate inmeetings wherechanges that coulddirectly or indirectlyaffect control roomoperations(including routinemaintenance andrepairs) are beingconsidered,designed andimplemented?

Sat -- --


CR.CRMCMGT 4. CR.CRMCMGT.CHANGETRAINING.R 195.446(f)(1) Beforeimplementingchanges, do recordsindicate controllerswere provided withnotification andtraining to assuretheir ability tosafely incorporatethe proposedchange intooperations?

Sat -- --


CR.CRMCMGT 5. CR.CRMCMGT.EMERGENCYCONTACT.P 195.446(f)(2) Is there a processrequiring fieldpersonnel andSCADA supportpersonnel tocontact the controlroom whenemergencyconditions exist?

Sat -- --

100. UNIT 32965(and 1

CR.CRMCMGT 6. CR.CRMCMGT.FIELDCONTACT.P 195.446(f)(2) Does the processrequire field

Sat -- --


14 of 37 5/15/2013 10:07 AM

No. AssetsSub


IssueSummary

InspectionNotes

otherassets)

personnel andSCADA supportpersonnel tocontact the controlroom when makingfield changes (forexample, moving avalve) that affectcontrol roomoperations?


CR.CRMCMGT 7. CR.CRMCMGT.FIELDCHANGES.R 195.446(f)(2) Do records indicatefield personnel andSCADA supportpersonnelcontacted thecontrol room whenmaking fieldchanges (forexample, moving avalve) that affectcontrol roomoperations?

Sat -- --


CR.CRMEXP 1. CR.CRMEXP.ABNORMALREVIEW.P 195.446(g)(1) Is there a formal,structured approachfor reviewing andcritiquingreportable eventsto identify lessonslearned?

Sat -- --


CR.CRMEXP 2. CR.CRMEXP.ABNORMALREVIEW.R 195.446(g)(1) Do records indicatereviews ofreportable eventsspecificallyanalyzed allcontributing factorsto determine ifcontrol roomactions contributedto the event, andcorrected anydeficiencies?

Sat -- --


CR.CRMEXP 3. CR.CRMEXP.LESSONSLEARNED.P 195.446(g)(2) Does the programrequire training onlessons learnedfrom a broad rangeof events(reportableincidents/accidents,near misses, leaks,operational andmaintenanceerrors, etc.), eventhough the controlroom may not havebeen at fault?

Sat -- --


CR.CRMEXP 4. CR.CRMEXP.LESSONSLEARNED.R 195.446(g)(2) Has operatingexperience reviewtraining beenconducted onlessons learnedfrom a broad rangeof events(reportableincidents/accidents,near misses, leaks,operational andmaintenance

Sat -- --


15 of 37 5/15/2013 10:07 AM

No. AssetsSub


IssueSummary

InspectionNotes

errors, etc.)?


CR.CRMTRAIN 1. CR.CRMTRAIN.CONTROLLERTRAIN.P 195.446(h) Has a controllertraining programbeen established toprovide training foreach controller tocarry out their rolesandresponsibilities?

Sat -- --


CR.CRMTRAIN 2. CR.CRMTRAIN.CONTROLLERTRAIN.R 195.446(h) Has a controllertraining programbeen implementedto provide trainingfor each controllerto carry out theirroles andresponsibilities?

Sat -- --


CR.CRMTRAIN 3. CR.CRMTRAIN.TRAININGREVIEW.P 195.446(h) Have processesbeen established toreview thecontroller trainingprogram content toidentify potentialimprovements atleast once eachcalendar year, butat intervals not toexceed 15 months?

Sat -- --


CR.CRMTRAIN 4. CR.CRMTRAIN.TRAININGREVIEW.R 195.446(h) Have processesbeen implementedto review thecontroller trainingprogram content toidentify potentialimprovements atleast once eachcalendar year, butat intervals not toexceed 15 months?

Sat -- --


CR.CRMTRAIN 5. CR.CRMTRAIN.TRAININGCONTENT.R 195.446(h) Does trainingcontent address allrequired material,including trainingeach controller tocarry out the rolesand responsibilitiesthat were definedby the operator?

Sat -- --


CR.CRMTRAIN 6. CR.CRMTRAIN.AOCLIST.R 195.446(h)(1) Has a list of theabnormal operatingconditions that arelikely to occursimultaneously orin sequence beenestablished?

Sat -- Simultaneous orsequence AOC'shave beenincluded intraining forcontroller to takeaction to keeppeople safe firstand propertysecond.


CR.CRMTRAIN 7. CR.CRMTRAIN.TRAININGABNORMAL.P 195.446(h)(1) Does the trainingprogram providecontroller trainingon recognizing andresponding toabnormal operatingconditions that arelikely to occursimultaneously or

Sat -- --


16 of 37 5/15/2013 10:07 AM

No. AssetsSub


IssueSummary

InspectionNotes

in sequence?


CR.CRMTRAIN 8. CR.CRMTRAIN.TRAINING.O 195.446(h)(2) Does the trainingprogram use asimulator ortabletop exercisesto train controllershow to recognizeand respond toabnormal operatingconditions?

Sat -- --


CR.CRMTRAIN 9. CR.CRMTRAIN.TRAINING.R 195.446(h)(2) Does the trainingprogram use asimulator ortabletop exercisesto train controllershow to recognizeand respond toabnormal operatingconditions?

Sat -- --


CR.CRMTRAIN 10. CR.CRMTRAIN.COMMUNICATIONTRAINING.P 195.446(h)(3) Does the CRMprogram traincontrollers on theirresponsibilities forcommunicationunder theoperator'semergencyresponseprocedures?

Sat -- --


CR.CRMTRAIN 11. CR.CRMTRAIN.SYSKNOWLEDGE.P 195.446(h)(4) Does the trainingprogram providecontrollers aworking knowledgeof the pipelinesystem, especiallyduring thedevelopment ofabnormal operatingconditions?

Sat -- --


CR.CRMTRAIN 12. CR.CRMTRAIN.INFREQOPSLIST.R 195.446(h)(5) Has a list ofpipeline operatingsetups that areperiodically (butinfrequently) usedbeen established?



CR.CRMTRAIN 13. CR.CRMTRAIN.INFREQOPSREVIEW.P 195.446(h)(5) Do processesspecify that, forpipeline operatingset-ups that areperiodically (butinfrequently) used,the controllers mustbe provided anopportunity toreview relevantprocedures inadvance of theiruse?



CR.CRMCOMP 1. CR.CRMCOMP.SUBMITPROCEDURES.P 195.446(i) Are there adequateprocesses to assurethat the operator isresponsive torequests fromapplicable agenciesto submit their CRMprocedures?

Sat -- --


17 of 37 5/15/2013 10:07 AM

No. AssetsSub


IssueSummary

InspectionNotes


CR.CRMCOMP 2. CR.CRMCOMP.SUBMITPROCEDURES.R 195.446(i) Has the operatorbeen responsive torequests fromapplicable agenciesto submit their CRMprocedures?

Sat -- A copy of BP'sCRM procedureswere requestedon February 27,2013 that was 61days before thescheduledinspection on April29, 2013. BPconsiders theirprocedures as aproprietarydocument and notmake theirprocedureavailable atanytime beforethe inspection. CFR 195.446Control RoomManagement (i)ComplianceValidation states: Upon request,operators mustsubmit theirprocedures toPHMSA (or theState Agency). BP needs to beforthright inexpressing theirintention andmake proceduresaccess by anagreement ratherthan stalling andevadingquestions. It'snot in the interestof PHMSA (or theState Agency) tosell or publish anoperator'sprocedure.


CR.CRMCOMP 3. CR.CRMCOMP.CRMCOORDINATOR.R 195.446(i) Is there anindividual that isresponsible andaccountable forcompliance withrequests fromPHMSA or otherapplicableagencies?

Sat -- --


CR.CRMCOMP 4. CR.CRMCOMP.RECORDS.P 195.446(j)(1) Recordsmanagementprocesses adequateto assure recordsare sufficient todemonstratecompliance withthe CRM rule?

Sat -- --


CR.CRMCOMP 5. CR.CRMCOMP.RECORDS.R 195.446(j)(1) Are recordssufficient todemonstratecompliance withthe CRM rule?

Sat -- --


18 of 37 5/15/2013 10:07 AM

No. AssetsSub


IssueSummary

InspectionNotes


CR.CRMCOMP 6. CR.CRMCOMP.ELECTRONICRECORDS.R 195.446(j)(1) Are electronicrecords properlystored,safeguarded, andreadily retrievable?

Sat -- --


CR.CRMCOMP 7. CR.CRMCOMP.DEVIATIONS.P 195.446(j)(2) Are there processesto demonstrate andprovide adocumented recordthat everydeviation from anyCRM rulerequirement wasnecessary for safeoperation?



CR.CRMCOMP 8. CR.CRMCOMP.DEVIATIONS.R 195.446(j)(2) Were all deviationsdocumented in away thatdemonstrates theywere necessary forsafe operation?


UNIT 925 (126)

No. AssetsSub


IssueSummary

InspectionNotes


CR.CRMGEN 1. CR.CRMGEN.CRMCRITERIA.P 195.446(a) Does the processadequately addresscriteria by which theoperatordetermines which ofits facilities arecontrol rooms?

Sat -- BP operate threecontrol roomcenters located atRenton, WA;Tulsa, OK; andLong Beach, CA. Each control roomis a stand alonecenter that are notconnected. Thisinspection willapply to theOlympic Pipelinecontrol centerlocated in Renton,WA.


CR.CRMGEN 2. CR.CRMGEN.CRMMGMT.P 195.446(a) Are CRM proceduresformalized andcontrolled?

Sat -- Annual review isvery October bycontrol centertrainingcoordinator.


CR.CRMGEN 3. CR.CRMGEN.CRMIMPLEMENT.R 195.446(a) Were proceduresapproved, in place,and implementedon or before theregulatorydeadline?

Sat -- Control RoomOperation,Management &EmergencyResponse (OMER)was developed1-23-2009.


CR.CRMGEN 4. CR.CRMGEN.CRMPROCLOCATION.O 195.446(a) Are proceduresreadily available tocontrollers in thecontrol room?

Sat -- All controllers haveaccess to to theDocument RecordManagement(DRM) system forControl RoomProcedures.


CR.CRMRR 1. CR.CRMRR.RESPONSIBLE.P 195.446(b)(1) Are there clearprocesses todescribe eachcontroller's physicaldomain ofresponsibility forpipelines and other

Sat -- Olympic Pipelinehas two controllersand a qualifiedsupervisor. Eachcontroller monitorsthe 20-inchmainline from


19 of 37 5/15/2013 10:07 AM

No. AssetsSub


IssueSummary

InspectionNotes

facility assets? Ferndale toPortland, OR. andthe secondcontroller monitorsthe 16-inchmainline fromFerndale toSeattle, WA.


CR.CRMRR 2. CR.CRMRR.QUALCONTROL.P 195.446(b)(1) Are there provisionsin place to assurethat only qualifiedindividuals mayassume control atany console/desk?

Sat -- The two mainlinecontrollers andtheir supervisorare control roomqualified.


CR.CRMRR 3. CR.CRMRR.DOMAINCHANGE.P 195.446(b)(1) If the physicaldomain ofresponsibilityperiodicallychanges, has aclear process beenestablished todescribe theconditions for whensuch a changeoccurs?

Sat -- Procedure: FCTRL-OPS-463-004Sections 8-13;Physical Change toBack-up Facility.


CR.CRMRR 4. CR.CRMRR.RESPCHANGE.P 195.446(b)(1) Do processesaddress acontroller's roleduring temporaryimpromptu(unplanned)changes incontrollerresponsibilities?

Sat -- Procedure: FCTRL-OPS-463-004Sections 8-12;Shift Turn Overand Hand-OverResponsibilities.


CR.CRMRR 5. CR.CRMRR.COMMANDVERIFY.P 195.446(b)(1) Do the defined rolesand responsibilitiesrequire controllersto stay at theconsole to verify allSCADA commandsthat have beeninitiated arefulfilled, and thatcommands givenvia verbalcommunications areacknowledgedbefore leaving theconsole for anyreason?

Sat -- Shift LeaderResponsibilitiesinclude taking overcontroller consoleduring change overbecause all shiftchanges are verbalcommands.


CR.CRMRR 6. CR.CRMRR.AUTHORITYABNORMAL.P 195.446(b)(2) Have processesbeen established todefine thecontrollers'authority andresponsibilitieswhen an abnormaloperating conditionis detected?

Sat -- Information iscontained in OMERBook #1, page 3and OMER Book#2, paragraph Hfor AbnormalAction.


CR.CRMRR 7. CR.CRMRR.PRESSLIMITS.O 195.446(b)(2) Are controllersaware of thecurrent MOPs of allpipeline segmentsfor which they areresponsible, andhave they beenassigned the

Sat -- --


20 of 37 5/15/2013 10:07 AM

No. AssetsSub


IssueSummary

InspectionNotes

responsibility tomaintain thosepipelines at orbelow the MOP?


CR.CRMRR 8. CR.CRMRR.AUTHORITYEMERGENCY.P 195.446(b)(3) Do processes definethe controllers'authority andresponsibility tomake decisions,take actions, andcommunicate withothers upon beingnotified of, or upondetection of, andduring, anemergency or if aleak or rupture issuspected?

Sat -- CRM P-195.466(b)(2) & OMERBook 2, paragraphH & I


CR.CRMRR 9. CR.CRMRR.EVACUATION.P 195.446(b)(3) Do processesspecifically addressthe controller'sresponsibilities inthe event thecontrol room mustbe evacuated?

Sat -- --


CR.CRMRR 10. CR.CRMRR.COMMSYSFAIL.P 195.446(b)(3) Do processesspecifically addressthe controller'sresponsibilities inthe event of aSCADA system ordatacommunicationssystem failureimpacting largesections of thecontroller's domainof responsibility?

Sat -- OMER Book 2Section 5.99.1,paragraph G and J


CR.CRMRR 11. CR.CRMRR.HANDOVER.P 195.446(b)(4)(195.446(c)(5))

Have processesbeen established forthe hand-over ofresponsibility thatspecify the type ofinformation to becommunicated tothe oncoming shift?

Sat -- FCTRL-OPS-463-004


CR.CRMRR 12. CR.CRMRR.HANDOVERDOC.P 195.446(b)(4)(195.446(c)(5))

Do processesrequire that recordsdocument thehand-over ofresponsibility,document the timethe actualhand-over ofresponsibilityoccurs, and the keyinformation andtopics that werecommunicatedduring thehand-over?

Sat -- --


CR.CRMRR 13. CR.CRMRR.HANDOVERDOC.R 195.446(b)(4)(195.446(c)(5))

Are there recordsthat document thehand-over ofresponsibility,document the timethe actual

Sat -- --


21 of 37 5/15/2013 10:07 AM

No. AssetsSub


IssueSummary

InspectionNotes

hand-over ofresponsibilityoccurs, and the keyinformation andtopics that werecommunicatedduring thehand-over?


CR.CRMRR 14. CR.CRMRR.HANDOVEROVERLAP.P 195.446(b)(4) Do processesrequire thecontrollers todiscuss recent andimpendingimportant activitiesensuring adequateoverlap?

Sat -- --


CR.CRMRR 15. CR.CRMRR.HANDOVERALTERNATIVE.P 195.446(b)(4) When a controller isunable to continueor assumeresponsibility forany reason, do theshift hand-overprocesses includealternative shifthand-over actionsthat specificallyaddress thissituation?

Sat -- --


CR.CRMRR 16. CR.CRMRR.UNATTENDCONSOLE.P 195.446(b)(4) Has the operatorestablished anadequate processfor occasions whenthe console is lefttemporarilyunattended for anyreason?



CR.CRMRR 17. CR.CRMRR.CONSOLECOVERAGE.P 195.446(b)(4) Do processesmaintain adequateconsole coverageduring shifthand-over?

Sat -- --


CR.SCADA 1. CR.SCADA.SYSTEMMOC.P 195.446(c)(1) Do processesclearly define thetypes of changes tothe SCADAsystem(s) thatconstitute additions,expansions, orreplacements underthe meaning of theCRM rule?

Sat -- --


CR.SCADA 2. CR.SCADA.DISPLAYCONFIG.P 195.446(c)(1) Are there writtenprocesses toimplement the APIRP 1165 displaystandards to theSCADA systems thathave been added,expanded, orreplaced sinceAugust 1, 2012?

Sat -- --


CR.SCADA 3. CR.SCADA.HUMANFACTORS.R 195.446(c)(1) Has section 4 of APIRP 1165 regardinghuman factorsengineering beenimplemented?

Sat -- --


22 of 37 5/15/2013 10:07 AM

No. AssetsSub


IssueSummary

InspectionNotes


CR.SCADA 4. CR.SCADA.DISPLAYHARDWARE.R 195.446(c)(1) Has section 5 of APIRP 1165 regardingdisplay hardwarebeen implemented?

Sat -- --


CR.SCADA 5. CR.SCADA.DISPLAYLAYOUT.R 195.446(c)(1) Has section 6 of APIRP 1165 regardingdisplay layout andorganization beenimplemented?

Sat -- --


CR.SCADA 6. CR.SCADA.DISPLAYNAVIGATION.R 195.446(c)(1) Has section 7 of APIRP 1165 regardingdisplay navigationbeen implemented?

Sat -- --


CR.SCADA 7. CR.SCADA.DISPLAYOBJECTS.O 195.446(c)(1) Has section 8 of APIRP 1165 regardingdisplay objectcharacteristics beenimplemented?

Sat -- --


CR.SCADA 8. CR.SCADA.DISPLAYDYNAMICS.R 195.446(c)(1) Has section 9 of APIRP 1165 regardingdisplay objectdynamics beenimplemented?

Sat -- --


CR.SCADA 9. CR.SCADA.CONTROLSELECTION.R 195.446(c)(1) Has section 10 ofAPI RP 1165 controlselection andtechniques beenimplemented?

Sat -- --


CR.SCADA 10. CR.SCADA.ADMINISTRATION.R 195.446(c)(1) Has section 11 ofAPI RP 1165administration beenimplemented?

Sat -- --


CR.SCADA 11. CR.SCADA.1165IMPRACTICAL.R 195.446(c)(1) If any/all applicableparagraph(s) of APIRP 1165 have notbeen implemented,has it beendemonstrated anddocumented thatthe unimplementedprovisions areimpractical for theSCADA systemused?

Sat -- --


CR.SCADA 12. CR.SCADA.SETPOINT.P 195.446(c)(2)(195.406(b))

Does the processadequately definesafety-relatedpoints?

Sat -- Procedure CTULM-SCD-OPS-460-003


CR.SCADA 13. CR.SCADA.SETPOINT.R 195.446(c)(2) Do records indicatesafety-relatedpoints have beenadequatelyimplemented?

Sat -- --


CR.SCADA 14. CR.SCADA.POINTVERIFY.P 195.446(c)(2) Are there adequateprocesses to defineand identify thecircumstanceswhich require apoint-to-pointverification?

Sat -- SOP ProcedureSCADA Pt. to Pt.Testing Section 8.0


CR.SCADA 15. CR.SCADA.POINTVERIFY.R 195.446(c)(2) Have requiredpoint-to-pointverifications beenperformed?

Sat -- --

37. UNIT 925(and 1

CR.SCADA 16. CR.SCADA.POINTVERIFYEXTENT.P 195.446(c)(2) Are there adequateprocesses for the

Sat -- --


23 of 37 5/15/2013 10:07 AM

No. AssetsSub


IssueSummary

InspectionNotes

otherassets)

thoroughness of thepoint-to-pointverification?


CR.SCADA 17. CR.SCADA.POINTVERIFYEXTENT.R 195.446(c)(2) Do recordsdemonstrateadequatethoroughness of thepoint-to-pointverification?

Sat -- --


CR.SCADA 18. CR.SCADA.POINTVERFIYINTVL.P 195.446(c)(2) Is there anadequate processfor defining whenthe point-to-pointverification must becompleted?

Sat -- --


CR.SCADA 19. CR.SCADA.POINTVERFIYINTVL.R 195.446(c)(2) Do records indicatethe point-to-pointverification hasbeen completed atthe requiredintervals?

Sat -- --


CR.SCADA 20. CR.SCADA.COMMPLAN.P 195.446(c)(3) Has an internalcommunication planbeen establishedand implementedthat is adequate tomanually operatethe pipeline duringa SCADAfailure/outage?

Sat -- --


CR.SCADA 21. CR.SCADA.COMMPLAN.R 195.446(c)(3) Has the internalcommunication planbeen tested andverified for manualoperation of thepipeline safely atleast once eachcalendar year but atintervals notexceeding 15months?

Sat -- --


CR.SCADA 22. CR.SCADA.BACKUPSCADA.O 195.446(c)(4) Is there a backupSCADA system?

Sat -- --


CR.SCADA 23. CR.SCADA.BACKUPSCADADEV.P 195.446(c)(4) Has the use of thebackup SCADAsystem fordevelopment workbeen defined?

Sat -- Development hasfull capabilitiesand is not a part ofthe back-upsystem. Reviewedsettings for 64pressure switchesfrom 2012 data.


CR.SCADA 24. CR.SCADA.BACKUPSCADATEST.R 195.446(c)(4) Is the backupSCADA systemtested at least onceeach calendar yearat intervals not toexceed 15 months?

Sat -- --


CR.SCADA 25. CR.SCADA.BACKUPSCADAVERIFY.R 195.446(c)(4) Does the testingverify that there areadequate processesin place fordecision-makingand internalcommunications tosuccessfully

Sat -- --


24 of 37 5/15/2013 10:07 AM

No. AssetsSub


IssueSummary

InspectionNotes

implement atransition fromprimary SCADA tobackup SCADA, andback to primarySCADA?


CR.SCADA 26. CR.SCADA.BACKUPSCADAADEQUACY.R 195.446(c)(4) If the back-upSCADA system isnot designed tohandle all thefunctionality of themain SCADAsystem, does thetesting determinewhether there areadequateprocedures in placeto account fordisplaced and/ordifferent availablefunctions duringback-up operations?

Sat -- --


CR.SCADA 27. CR.SCADA.BACKUPSCADATRANSFER.P 195.446(c)(4) Do processesadequately addressand test thelogistics oftransferring controlto a backup controlroom?

Sat -- --


CR.SCADA 28. CR.SCADA.BACKUPSCADARETURN.P 195.446(c)(4) Do proceduresadequately addressand test thelogistics of returningoperations back tothe primary controlroom?

Sat -- --


CR.SCADA 29. CR.SCADA.BACKUPSCADAFUNCTIONS.R 195.446(c)(4) Is a representativesampling of criticalfunctions in theback-up SCADAsystem being testedto ensure properoperation in theevent the backupsystem is needed?

Sat -- The primarycomputer isrotated betweenRenton andTacoma ControlCenters.


CR.CRMFM 1. CR.CRMFM.FATIGUEMITIGATION.P 195.446(d) Does the fatiguemitigation processor procedures(plan) identifyoperator-specificfatigue risks?

Sat -- SOP FCTRL-OPS463-009 (Rev7-31-'12)Olympic usesCircadian Study &Recommendationsto define operatorspecific fatiguerisks.


CR.CRMFM 2. CR.CRMFM.FATIGUERISKS.P 195.446(d) Does the fatiguemitigation planadequately addresshow the programreduces the riskassociated withcontroller fatigue?

Sat -- Olympic uses 14hour limit per dayand maximum 65hours per 7-dayperiod.


CR.CRMFM 3. CR.CRMFM.FATIGUEQUANTIFY.P 195.446(d) Do processesrequire that thepotentialcontribution ofcontroller fatigue toincidents and

Sat -- SMRS page 29.


25 of 37 5/15/2013 10:07 AM

No. AssetsSub


IssueSummary

InspectionNotes

accidents bequantified duringinvestigations?


CR.CRMFM 4. CR.CRMFM.FATIGUEMANAGER.P 195.446(d) Is there adesignated fatiguerisk manager who isresponsible andaccountable formanaging fatiguerisk and fatiguecountermeasures,and someone(perhaps the sameperson) that isauthorized toreview and approveHOS emergencydeviations?

Sat -- --


CR.CRMFM 5. CR.CRMFM.SHIFTLENGTH.R 195.446(d)(1) Is the scheduledshift length lessthan or equal to 12hours (not includingshift hand-over) oris there adocumentedtechnical basis toshow that shiftlengths andschedule rotationsare adequate toprovide controllersoff-duty timesufficient to achieve8 hours ofcontinuous sleep?

Sat -- Procedure FCTRL-OPS-463-009. FRMS Document -DuPont Schedule(RP 755)


CR.CRMFM 6. CR.CRMFM.SHIFTLENGTHTIME.R 195.446(d)(1) Does the operatorfactor in all time theindividual is workingfor the companywhen establishingshift lengths andschedule rotationsor is there adocumentedtechnical basis toshow that shiftlengths andschedule rotationsare adequate toprovide controllersoff-duty timesufficient to achieve8 hours ofcontinuous sleep?

Sat -- CircadianEvaluation forScientific Basis forWork Schedules.


CR.CRMFM 7. CR.CRMFM.SCHEDULEDTIMEOFF.R 195.446(d)(1) Are all scheduledperiods of time offat least one hourlonger than 8 hoursplus commute timeor is there adocumentedtechnical basis toshow that shiftlengths andschedule rotationsare adequate toprovide controllersoff-duty time

Sat -- --


26 of 37 5/15/2013 10:07 AM

No. AssetsSub


IssueSummary

InspectionNotes

sufficient to achieve8 hours ofcontinuous sleep?


CR.CRMFM 8. CR.CRMFM.ONCALLCONTROLLER.R 195.446(d)(1) For controllers whoare on call, doesthe operatorminimizeinterrupting therequired 8 hours ofcontinuous sleep oris there adocumentedtechnical basis toshow that shiftlengths andschedule rotationsare adequate toprovide controllersoff-duty timesufficient to achieve8 hours ofcontinuous sleep?

Sat -- Two relief personsare available andtheir commutetime is counted forthe same day theyare requested towork. Thecommute time isnot counted if thecontroller isscheduled the daybefore their shift.


CR.CRMFM 9. CR.CRMFM.MAXHOS.P 195.446(d)(4) Do processes limitthe maximum HOSlimit in any sliding 7day period to nomore than 65 hoursor is there adocumentedtechnical basis toshow reduction ofthe risk associatedwith controllerfatigue?

Sat --


CR.CRMFM 10. CR.CRMFM.MINTIMEOFF.P 195.446(d)(4) After reaching theHOS limit in anysliding 7 day period,is the minimumtime off at least 35hours or is there adocumentedtechnical basis toshow a reduction ofthe risk associatedwith controllerfatigue?



CR.CRMFM 11. CR.CRMFM.DOCSCHEDULE.P 195.446(d)(4) Is there a formalsystem to documentall scheduled andunscheduled HOSworked, includingovertime and timespent performingduties other thancontrol roomduties?

Sat -- --


CR.CRMFM 12. CR.CRMFM.DAYSOFF.P 195.446(d)(4) For normal businesshour typeoperations (i.e., fivedays per week), areno more than fivedays worked insuccession before atleast two days off?



CR.CRMFM 13. CR.CRMFM.WORKHOURS.R 195.446(d)(4) For normal businesshour typeoperations (i.e., five

NA -- No such eventoccurred, orcondition existed,


27 of 37 5/15/2013 10:07 AM

No. AssetsSub


IssueSummary

InspectionNotes

assets) days per week), isthe shift start timeno earlier than 6:00a.m. and the shiftend time no laterthan 7:00 p.m.?

in the scope ofinspection review.


CR.CRMFM 14. CR.CRMFM.FATIGUECOUNTERMEASURES.P 195.446(d)(4) For shifts longerthan 8 hours, havespecific fatiguecountermeasuresbeen implementedfor the ninth andbeyond hours?



CR.CRMFM 15. CR.CRMFM.DAILYHOSLIMIT.P 195.446(d)(4) Do processes limitthe daily maximumHOS limit no morethan 14 hours inany sliding 24-hourperiod?

Sat -- Olympic Pipelineuses HOSED(Hours of ServicedEmergencyDocument) Form,reference AdvisoryBulletinADB-05-06, andProcedure 463-009page 18.


CR.CRMFM 16. CR.CRMFM.CONTROLLERNUMBERS.O 195.446(d)(4) Do operationsinclude a sufficientnumber of qualifiedcontrollers?

Sat -- --


CR.CRMFM 17. CR.CRMFM.OFFDUTYHOURS.P 195.446(d)(4) Do processesensure thatcontrollers areprovided with atleast thirty-five (35)continuous off-dutyhours when limitsare reachedfollowing the mostrecent 35-hour(minimum) off-dutyrest period or isthere a documentedtechnical basis toshow that themaximum limit oncontroller HOS isadequate to reducethe risk associatedwith controllerfatigue?

Sat -- Procedure 463-009page 16-19.


CR.CRMFM 18. CR.CRMFM.SHIFTHOLDOVER.P 195.446(d)(4) Does the shiftholdover processconform to shiftholdover guidelinesor is their adocumentedtechnical basis toshow that themaximum limit oncontroller HOS isadequate to reducethe risk associatedwith controllerfatigue?

Sat -- --


CR.CRMFM 19. CR.CRMFM.SPECIFICCOUNTERMEASURES.P 195.446(d)(4) Do processesrequire specificfatiguecountermeasuresduring applicable

Sat -- Fatigue RiskManagementFCTRL-OPS-466-009


28 of 37 5/15/2013 10:07 AM

No. AssetsSub


IssueSummary

InspectionNotes

time periods, or isthere a documentedtechnical basis toshow that themaximum limit oncontroller HOS isadequate to reducethe risk associatedwith controllerfatigue?


CR.CRMFM 20. CR.CRMFM.HOSDEVIATIONS.P 195.446(d)(4) Is there a formalprocess forapprovingdeviations from themaximum HOSlimits?

Sat -- --


CR.CRMFM 21. CR.CRMFM.FATIGUEEDUCATE.P 195.446(d)(2)(195.446(d)(3))

Does the programrequire that fatigueeducation/trainingis required for allcontrollers andcontrol roomsupervisors?

Sat -- --


CR.CRMFM 22. CR.CRMFM.FATIGUEREFRESHER.R 195.446(d)(2)(195.446(d)(3))

Is refresher fatigueeducation providedat regular intervals?

Sat -- --


CR.CRMFM 23. CR.CRMFM.FATIGUEREVIEW.P 195.446(d)(2)(195.446(d)(3))

Do processesrequire that theeffectiveness of thefatigueeducation/trainingprogram bereviewed at leastonce each calendaryear, not to exceed15 months?

Sat -- --


CR.CRMFM 24. CR.CRMFM.FATIGUESTRATEGY.P 195.446(d)(2) Does fatigueeducation addressfatigue mitigationstrategies(countermeasures)?

Sat -- --


CR.CRMFM 25. CR.CRMFM.OFFDUTY.P 195.446(d)(2) Does fatigueeducation addresshow off-dutyactivities contributeto fatigue?

Sat -- --


CR.CRMFM 26. CR.CRMFM.FATIGUECONTENT.P 195.446(d)(3) Is the content offatigue trainingadequate fortraining controllersand supervisors torecognize theeffects of fatigue?

Sat -- --


CR.CRMAM 1. CR.CRMAM.ALARM.P 195.446(e) Is the alarmmanagement plan aformal process thatspecificallyidentifies criticaltopical areasincluded in theprogram?

Sat -- Procedure FCTRL-OPS-463-007. TheInternationalSociety of SCADA(ISA) is referencedfor Management ofAlarm Systems forthe ProcessIndustries.


CR.CRMAM 2. CR.CRMAM.ALARMMALFUNCTION.P 195.446(e)(1) Is there a processto identify andcorrect inaccurateor malfunctioning

Sat -- --


29 of 37 5/15/2013 10:07 AM

No. AssetsSub


IssueSummary

InspectionNotes

alarms?


CR.CRMAM 3. CR.CRMAM.ALARMREVIEW.P 195.446(e)(1) Does the review ofsafety-relatedalarms account fordifferent alarmdesigns and allalarmtypes/priorities?

Sat -- --


CR.CRMAM 4. CR.CRMAM.CONTROLLERPERFORMANCE.P 195.446(e)(1) Does the review ofsafety-relatedalarms account forindividual-specificcontrollerqualification andperformance?

Sat -- --


CR.CRMAM 5. CR.CRMAM.STALEDATA.P 195.446(e)(1) Does the review ofsafety-relatedalarms includespecific proceduresand practices formanaging stale orunreliable data?

Sat -- --


CR.CRMAM 6. CR.CRMAM.MONTHLYANALYSIS.P 195.446(e)(2) Do processesrequire the monthlyidentification,recording, review,and analysis ofpoints that havebeen taken off scan,have had alarmsinhibited, generatedfalse alarms, or thathave had forced ormanual values forperiods of timeexceeding thatrequired forassociatedmaintenance oroperating activities?

Sat -- Procedure - OPS -460-012


CR.CRMAM 7. CR.CRMAM.PROBLEMCORRECTION.P 195.446(e)(2) Does the alarmmanagement planinclude a processfor promptlycorrecting identifiedproblems and forreturning thesepoints to service?

Sat -- --


CR.CRMAM 8. CR.CRMAM.ALARMSETPOINTS.P 195.446(e)(3) Is there a formalprocess todetermine thecorrect alarmsetpoint values andalarm descriptions?

Sat -- --


CR.CRMAM 9. CR.CRMAM.SETTINGCONTROL.P 195.446(e)(3) Have proceduresbeen established toclearly address howand to what degreecontrollers canchange alarm limitsor setpoints, orinhibit alarms, ortake pointsoff-scan?

Sat -- --


CR.CRMAM 10. CR.CRMAM.VERIFICATION.P 195.446(e)(3) Do processesrequire that anycalibration or

Sat -- --


30 of 37 5/15/2013 10:07 AM

No. AssetsSub


IssueSummary

InspectionNotes

assets) change to fieldinstruments requireverification of alarmsetpoints and alarmdescriptions?


CR.CRMAM 11. CR.CRMAM.PLANREVIEW.P 195.446(e)(4) Are there processesto review the alarmmanagement planat least once eachcalendar year, butat intervals notexceeding 15months, in order todetermine theeffectiveness of theplan?

Sat -- --


CR.CRMAM 12. CR.CRMAM.PLANREVIEW.R 195.446(e)(4) Do records indicatereview of the alarmmanagement planat least once eachcalendar year, butat intervals notexceeding 15months, in order todetermine theeffectiveness of theplan?

Sat -- --


CR.CRMAM 13. CR.CRMAM.WORKLOAD.P 195.446(e)(5) Does the CRMprogram have ameans of identifyingand measuring thework load (contentand volume ofgeneral activity)being directed to anindividualcontroller?

Sat -- --


CR.CRMAM 14. CR.CRMAM.WORKLOADMONITORING.P 195.446(e)(5) Is the process ofmonitoring andanalyzing generalactivitycomprehensive?

Sat -- --


CR.CRMAM 15. CR.CRMAM.CONTROLLERREACTION.P 195.446(e)(5) Does the processhave a means ofdetermining thatthe controller hassufficient time toanalyze and reactto incoming alarms?

Sat -- --


CR.CRMAM 16. CR.CRMAM.PERFORMANCEANALYSIS.R 195.446(e)(5) Has an analysisbeen performed todetermine ifcontroller(s)performance iscurrently adequate?

Sat -- Procedure-ADM-061-001


CR.CRMAM 17. CR.CRMAM.DEFICIENCIES.P 195.446(e)(6) Is there a processto address howdeficiencies found inimplementing195.446(e)(1)through195.446(e)(5) willbe resolved?

Sat -- --


CR.CRMAM 18. CR.CRMAM.DEFICIENCIES.R 195.446(e)(6) Do records indicatedeficiencies found inimplementing195.446(e)(1)

Sat -- --


31 of 37 5/15/2013 10:07 AM

No. AssetsSub


IssueSummary

InspectionNotes

through195.446(e)(5) havebeen resolved?


CR.CRMCMGT 1. CR.CRMCMGT.CHANGECOORDINATION.P 195.446(f)(1) Does the processassure changes infield equipment (forexample, moving avalve) that couldaffect control roomoperations arecoordinated withcontrol roompersonnel?

Sat -- ProcedureUSPL-MOO-001-001


CR.CRMCMGT 2. CR.CRMCMGT.CHANGECOORDINATION.R 195.446(f)(1) Do records indicatethat changes in fieldequipment (forexample, moving avalve) that couldaffect control roomoperations werecoordinated withcontrol roompersonnel?

Sat -- --


CR.CRMCMGT 3. CR.CRMCMGT.CHANGEMEETINGS.P 195.446(f)(1) Is there a processto mandate acontrol roomrepresentative willparticipate inmeetings wherechanges that coulddirectly or indirectlyaffect control roomoperations(including routinemaintenance andrepairs) are beingconsidered,designed andimplemented?

Sat -- --


CR.CRMCMGT 4. CR.CRMCMGT.CHANGETRAINING.R 195.446(f)(1) Beforeimplementingchanges, do recordsindicate controllerswere provided withnotification andtraining to assuretheir ability tosafely incorporatethe proposedchange intooperations?

Sat -- --


CR.CRMCMGT 5. CR.CRMCMGT.EMERGENCYCONTACT.P 195.446(f)(2) Is there a processrequiring fieldpersonnel andSCADA supportpersonnel tocontact the controlroom whenemergencyconditions exist?

Sat -- --


CR.CRMCMGT 6. CR.CRMCMGT.FIELDCONTACT.P 195.446(f)(2) Does the processrequire fieldpersonnel andSCADA supportpersonnel tocontact the controlroom when making

Sat -- --


32 of 37 5/15/2013 10:07 AM

No. AssetsSub


IssueSummary

InspectionNotes

field changes (forexample, moving avalve) that affectcontrol roomoperations?


CR.CRMCMGT 7. CR.CRMCMGT.FIELDCHANGES.R 195.446(f)(2) Do records indicatefield personnel andSCADA supportpersonnel contactedthe control roomwhen making fieldchanges (forexample, moving avalve) that affectcontrol roomoperations?

Sat -- --


CR.CRMEXP 1. CR.CRMEXP.ABNORMALREVIEW.P 195.446(g)(1) Is there a formal,structured approachfor reviewing andcritiquing reportableevents to identifylessons learned?

Sat -- --


CR.CRMEXP 2. CR.CRMEXP.ABNORMALREVIEW.R 195.446(g)(1) Do records indicatereviews ofreportable eventsspecifically analyzedall contributingfactors to determineif control roomactions contributedto the event, andcorrected anydeficiencies?

Sat -- --


CR.CRMEXP 3. CR.CRMEXP.LESSONSLEARNED.P 195.446(g)(2) Does the programrequire training onlessons learnedfrom a broad rangeof events(reportableincidents/accidents,near misses, leaks,operational andmaintenance errors,etc.), even thoughthe control roommay not have beenat fault?

Sat -- --


CR.CRMEXP 4. CR.CRMEXP.LESSONSLEARNED.R 195.446(g)(2) Has operatingexperience reviewtraining beenconducted onlessons learnedfrom a broad rangeof events(reportableincidents/accidents,near misses, leaks,operational andmaintenance errors,etc.)?

Sat -- --


CR.CRMTRAIN 1. CR.CRMTRAIN.CONTROLLERTRAIN.P 195.446(h) Has a controllertraining programbeen established toprovide training foreach controller tocarry out their rolesand responsibilities?

Sat -- --


33 of 37 5/15/2013 10:07 AM

No. AssetsSub


IssueSummary

InspectionNotes


CR.CRMTRAIN 2. CR.CRMTRAIN.CONTROLLERTRAIN.R 195.446(h) Has a controllertraining programbeen implementedto provide trainingfor each controllerto carry out theirroles andresponsibilities?

Sat -- --


CR.CRMTRAIN 3. CR.CRMTRAIN.TRAININGREVIEW.P 195.446(h) Have processesbeen established toreview thecontroller trainingprogram content toidentify potentialimprovements atleast once eachcalendar year, butat intervals not toexceed 15 months?

Sat -- --


CR.CRMTRAIN 4. CR.CRMTRAIN.TRAININGREVIEW.R 195.446(h) Have processesbeen implementedto review thecontroller trainingprogram content toidentify potentialimprovements atleast once eachcalendar year, butat intervals not toexceed 15 months?

Sat -- --


CR.CRMTRAIN 5. CR.CRMTRAIN.TRAININGCONTENT.R 195.446(h) Does trainingcontent address allrequired material,including trainingeach controller tocarry out the rolesand responsibilitiesthat were definedby the operator?

Sat -- --


CR.CRMTRAIN 6. CR.CRMTRAIN.AOCLIST.R 195.446(h)(1) Has a list of theabnormal operatingconditions that arelikely to occursimultaneously or insequence beenestablished?

Sat -- Simultaneous orsequence AOC'shave beenincluded in trainingfor controller totake action tokeep people safefirst and propertysecond.


CR.CRMTRAIN 7. CR.CRMTRAIN.TRAININGABNORMAL.P 195.446(h)(1) Does the trainingprogram providecontroller trainingon recognizing andresponding toabnormal operatingconditions that arelikely to occursimultaneously or insequence?

Sat -- --


CR.CRMTRAIN 8. CR.CRMTRAIN.TRAINING.O 195.446(h)(2) Does the trainingprogram use asimulator ortabletop exercisesto train controllershow to recognizeand respond toabnormal operatingconditions?

Sat -- --


34 of 37 5/15/2013 10:07 AM

No. AssetsSub


IssueSummary

InspectionNotes


CR.CRMTRAIN 9. CR.CRMTRAIN.TRAINING.R 195.446(h)(2) Does the trainingprogram use asimulator ortabletop exercisesto train controllershow to recognizeand respond toabnormal operatingconditions?

Sat -- --


CR.CRMTRAIN 10. CR.CRMTRAIN.COMMUNICATIONTRAINING.P 195.446(h)(3) Does the CRMprogram traincontrollers on theirresponsibilities forcommunicationunder the operator'semergencyresponseprocedures?

Sat -- --


CR.CRMTRAIN 11. CR.CRMTRAIN.SYSKNOWLEDGE.P 195.446(h)(4) Does the trainingprogram providecontrollers aworking knowledgeof the pipelinesystem, especiallyduring thedevelopment ofabnormal operatingconditions?

Sat -- --


CR.CRMTRAIN 12. CR.CRMTRAIN.INFREQOPSLIST.R 195.446(h)(5) Has a list ofpipeline operatingsetups that areperiodically (butinfrequently) usedbeen established?



CR.CRMTRAIN 13. CR.CRMTRAIN.INFREQOPSREVIEW.P 195.446(h)(5) Do processesspecify that, forpipeline operatingset-ups that areperiodically (butinfrequently) used,the controllers mustbe provided anopportunity toreview relevantprocedures inadvance of theiruse?



CR.CRMCOMP 1. CR.CRMCOMP.SUBMITPROCEDURES.P 195.446(i) Are there adequateprocesses to assurethat the operator isresponsive torequests fromapplicable agenciesto submit their CRMprocedures?

Sat -- --


CR.CRMCOMP 2. CR.CRMCOMP.SUBMITPROCEDURES.R 195.446(i) Has the operatorbeen responsive torequests fromapplicable agenciesto submit their CRMprocedures?

Sat -- A copy of BP's CRMprocedures wererequested onFebruary 27, 2013that was 61 daysbefore thescheduledinspection on April29, 2013. BPconsiders theirprocedures as aproprietary


35 of 37 5/15/2013 10:07 AM

No. AssetsSub


IssueSummary

InspectionNotes

document and notmake theirprocedureavailable atanytime before theinspection. CFR195.446 ControlRoomManagement (i)ComplianceValidation states: Upon request,operators mustsubmit theirprocedures toPHMSA (or theState Agency). BPneeds to beforthright inexpressing theirintention andmake proceduresaccess by anagreement ratherthan stalling andevadingquestions. It's notin the interest ofPHMSA (or theState Agency) tosell or publish anoperator'sprocedure.


CR.CRMCOMP 3. CR.CRMCOMP.CRMCOORDINATOR.R 195.446(i) Is there anindividual that isresponsible andaccountable forcompliance withrequests fromPHMSA or otherapplicableagencies?

Sat -- --


CR.CRMCOMP 4. CR.CRMCOMP.RECORDS.P 195.446(j)(1) Recordsmanagementprocesses adequateto assure recordsare sufficient todemonstratecompliance with theCRM rule?

Sat -- --


CR.CRMCOMP 5. CR.CRMCOMP.RECORDS.R 195.446(j)(1) Are recordssufficient todemonstratecompliance with theCRM rule?

Sat -- --


CR.CRMCOMP 6. CR.CRMCOMP.ELECTRONICRECORDS.R 195.446(j)(1) Are electronicrecords properlystored,safeguarded, andreadily retrievable?

Sat -- --


CR.CRMCOMP 7. CR.CRMCOMP.DEVIATIONS.P 195.446(j)(2) Are there processesto demonstrate andprovide adocumented recordthat every deviationfrom any CRM rulerequirement was



36 of 37 5/15/2013 10:07 AM

Acceptable Use: Inspection documentation, including completed protocol forms, summary reports, executive summary reports, and enforcement

documentation are for internal use only by federal or state pipeline safety regulators. Some inspection documentation may contain information which the

operator considers to be confidential. In addition, supplemental inspection guidance and related documents in the file library are also for internal use only by

federal or state pipeline safety regulators (with the exception of documents published in the federal register, such as advisory bulletins). Do not distribute or

otherwise disclose such material outside of the state or federal pipeline regulatory organizations. Requests for such information from other government

organizations (including, but not limited to, NTSB, GAO, IG, or Congressional Staff) should be referred to PHMSA Headquarters Management.

No. AssetsSub


IssueSummary

InspectionNotes

necessary for safeoperation?


CR.CRMCOMP 8. CR.CRMCOMP.DEVIATIONS.R 195.446(j)(2) Were all deviationsdocumented in away thatdemonstrates theywere necessary forsafe operation?



37 of 37 5/15/2013 10:07 AM

inspection results (irr) · inspection results (irr) unit 32965 (126) no. assets sub ... (b)(1) are...

Documents