Classification: Confidential
NFPS OFFSHORE RISER PLATFROM & INTRAFIELD PIPELINES PROJECT COMP 3 STATE OF QATAR
LTC/C/NFP/5129/20
VOLUME 2- EXHIBIT 8
SAFETY HEALTH ENVIRONMENT & SECURITY (SHES) INSTRUCTIONS PART 5 – SECURITY & EMERGENCY RESPONSE MANAGEMENT
PROPRIETARY CONFIDENTIAL EXHIBIT 8 Page 1 of 40
Classification: Confidential
NFPS OFFSHORE RISER PLATFROM & INTRAFIELD PIPELINES PROJECT COMP 3 STATE OF QATAR
LTC/C/NFP/5129/20
TABLE OF CONTENTS INTRODUCTION … 3
REFERENCES … 3
Qatargas References… 3 Ras Laffan Industrial City (Qatar Petroleum) references … 4 Other References … 4
1.0
2.0
2.1 2.2 2.3
3.0
ABBREVIATIONS & DEFINITIONS … 4
3.1 3.2
Acronyms and Abbreviations … 4 Terms and Definitions … 5
4.0
SECURITY MANAGEMENT … 6
Security Objectives … 7 Security Strategy … 8 4.1 Security Threats & Vulnerabilities … 9 4.2 Security Instructions … 13 4.3 Security Personnel… 20 4.4 Searches … 27 4.5 Prohibited Items … 28 4.6 Information Security … 29 4.7 Security Threat Levels … 30 4.8 Security Resources and Infrastructure … 30 4.9
5.0
EMERGENCY RESPONSE & PREPAREDNESS … 30
Emergency Response Levels … 31 5.1 Emergency Instructions … 33 5.2 Project Incident Management Team … 34 5.3 5.4 Muster Wardens and On-Scene Commanders … 35 5.5 Muster Points … 36 Emergency Drills and Exercises … 36 5.6
6.0
REPORTING & RECORDING … 37
6.1 6.2
Daily Security Observations … 37 Security Reporting … 37
7.0
ATTACHMENTS … 38
Attachment 1: List of Tables & Figures … 38 Attachment 1: PIPER Template Example… 39 7.1
PROPRIETARY CONFIDENTIAL EXHIBIT 8 2 of 40
Classification: Confidential
NFPS OFFSHORE RISER PLATFROM & INTRAFIELD PIPELINES PROJECT COMP 3 STATE OF QATAR
LTC/C/NFP/5129/20
1.0
INTRODUCTION
CONTRACTOR shall establish suitable arrangements during North Field Production Sustainability (NFPS) Project (hereafter referred to as Project), execution to ensure the security and protection of the Project’s people, SITE(s), WORKSITE(s), material, equipment, plant, executed work and completed assets.
The Project shall be protected from internal and external threats, including but not limited to petty crime, criminal intrusion, theft, assault, violence, terrorist attacks, cyber-attacks, etc. These shall meet the minimum requirements established for Ras Laffan Industrial City (RLC) and the State of Qatar where applicable, or alternatively the prevailing APPLICABLE LAWS where the WORK shall be carried out in other geographical locations.
CONTRACTOR shall establish suitable arrangements during Project execution to ensure that all likely emergency situations that may arise, are identified, assessed and contingency and response measures established. These shall be aligned with Qatargas (QG) emergency response requirements where appropriate and APPLICABLE LAWS relevant to the location of the WORK(s).
For clarity, all references in this Exhibit and referenced documentation the to Ministry of Municipality and Environment (MME), Qatar Petroleum (QP) and RLC stated herein this procedure are applicable to SITE(s) covered by COMPANY permit to work. For other SITE(s) and WORKSITE(s) under CONTRACTOR permit to work control, CONTRACTOR shall include controls and processes that as a minimum meet the requirements of this Exhibit and referenced documentation.
2.0
REFERENCES
The following are a list of key references related to Security and Emergency Response. Notwithstanding the list provided herewith, CONTRACTOR shall ensure compliance to all relevant procedures, APPLICABLE LAWS in areas where the WORK is performed to ensure that security objectives are met.
2.1 Qatargas References
Table 1: QG References
Document # a) PRT-SEC-POL-001 PRT-SEC-PRC-002 PRT-SEC-PRC-011 PRT-SEC-PRC-012 PRT-SEC-PRC-013 PRT-SEC-PRC-015 PRT-SEC-PRC-018 PRT-SEC-PRC-020
Document Title SECURITY Security Policy Security Management System QG Parking and Traffic Control Procedure Pass Procedure Qatargas Security Access Control Management Qatargas Offshore Security Plan Operational Security Requirements for Projects Restricted Safe Photography
PROPRIETARY CONFIDENTIAL EXHIBIT 8 3 of 40
Classification: Confidential
NFPS OFFSHORE RISER PLATFROM & INTRAFIELD PIPELINES PROJECT COMP 3 STATE OF QATAR
LTC/C/NFP/5129/20
PRT-SEC-PRC-021 PRT-SEC-PRC-023 PRT-SEC-PRC-027 PRT-SEC-PRC-029
b) PRT-ERP-POL-001 PRT-ERP-PRC-008 PRT-ERP-PRC-016 PRT-ERP-PRC-023 PRT-ERP-PRC-024 PRT-ERP-PRC-035 PRT-ERP-PRC-037 PRT-ERP-PRC-039 PRT-ERP-PRC-041
Material Exit Pass Procedure Security Plan Development Unaccounted Personnel Reporting Baseline Physical Security Standard
EMERGENCY RESPONSE Fire Protection Policy EMS Division Emergency Response Operations Tier-3 Emergency Response Plan Tier 2 Incident Management Crisis Management Plan Building Fire Inspection Tier 1 Offshore Emergency Response Procedure ENS Operating Procedure Emergency Response-Crisis Management Drills Exercises
2.2 Ras Laffan Industrial City (Qatar Petroleum) references
Table 2: RLC references
Document # IML-EMR-MAN-001
Document Title RLC Emergency Response Plan
2.3 Other References
Table 3: Other References
Reference # API April 2005
API October 2004
Document Title Security Guidelines for the Petroleum Industry Security Vulnerability Assessment - Methodology for the Petroleum and Petrochemical Industries
3.0
ABBREVIATIONS & DEFINITIONS
3.1 Acronyms and Abbreviations
ALARP
CCTV
CMT
ERT
ESRP
QG
ID
:
:
:
:
:
:
:
As Low as Reasonably Practicable
Closed circuit television
Crisis Management Team
Emergency Response Team
Emergency Services Reporting Point
Qatargas Operating Company LTD.
Identification
PROPRIETARY CONFIDENTIAL EXHIBIT 8 4 of 40
Classification: Confidential
NFPS OFFSHORE RISER PLATFROM & INTRAFIELD PIPELINES PROJECT COMP 3 STATE OF QATAR
LTC/C/NFP/5129/20
IT
MME
MOI
NFPS
PIMT
PIPER
QP
RFID
RLC
RTA
:
:
:
:
:
:
:
:
:
:
Information Technology
Ministry of Municipality and Environment
Ministry of Interior
North Field Production Sustainability
Project Incident Management Team
Pre-Incident Planning for Emergency Response
Qatar Petroleum
Radio-frequency ID
Ras Laffan Industrial City
Road Traffic Accident
3.2 Terms and Definitions
Table 3: Terms and Definitions
Term
Arson
Assault
Break-in
Homicide
Intelligence Report
Kidnapping
Definition
Intentional and malicious burning to destroy company property or personal property on company premises.
Any attempted or actual infliction of physical injury on a person. This would include assaults to employees and/or contractors, or inflicted due to their affiliation with the project
Entering site areas by force
The killing of one person by another. An employee or stewardable contractor death due to one person killing another is determined to be work-related regardless of the time intervening between the incident and death
A report made of people, circumstances or events which, while they may have no immediate and / or direct impact on the site activities, could prove useful in improving threat intelligence analysis – e.g. rumours of impending public disturbance, security incidents at non- project areas inside RLC, suspicious activity outside project areas or contractor fabrication sites, etc.
The forcible detention, abduction or confinement of personnel and/or from the project, during business activities, or as a result of their work affiliation. Kidnapping includes:
PROPRIETARY CONFIDENTIAL EXHIBIT 8 5 of 40
Classification: Confidential
NFPS OFFSHORE RISER PLATFROM & INTRAFIELD PIPELINES PROJECT COMP 3 STATE OF QATAR
LTC/C/NFP/5129/20
Term
Definition
Express Kidnapping: A type of short duration kidnapping that generally involves forcing the captive to withdraw money from a personal bank account
For Ransom: A kidnapping which involves a request for money
in return for the release of the captive
Public Disturbance / Activism
Incident, event or gathering that is in close proximity to, or interrupts the peace and order of, a site premises (e.g., facility, office building, activities, meeting, etc.).
Robbery
Taking of property with the use of force, threat of force, or violence against the victim. Additional subsets of robbery include: Car Jacking: Forcible theft of a car from a motorist Marine Vessel Piracy: Criminal violence committed at sea Truck Jacking: Forcible theft of a truck
The wilful and malicious actions in order to destroy property, which interferes with, or adversely affects, normal site activities. Theft - the taking of property without permission. Includes:
Burglary: Forceful unauthorized entry into a building or
Sabotage
structure with intent to steal.
Embezzlement: Theft committed by a person having fiduciary
responsibility for assets within his/her organization.
Extortion: The act or practice of obtaining something or
compelling some action by force or coercion.
An expression of intention to inflict injury or damage includes a Bomb Threat: (a threat to detonate an explosive).
Evidence of unauthorized intrusion or invasion of company property irrespective of resulting damage. There is no cost threshold for reporting.
Threat
Trespassing
Vandalism
Malicious acts intended to damage or destroy company property.
4.0
SECURITY MANAGEMENT
COMPANY maintains the commitment to promote a high standard of security. In order to achieve this standard, management strives to provide a secure and productive WORK environment for the workforce, to protect the general public, to protect COMPANY assets. To help achieve these goals, CONTRACTOR shall develop within ninety (90) days of EFFECTIVE DATE a Security Management Plan for COMPANY APPROVAL. The plan and its associated documents will define requirements for the security program for the WORK.
PROPRIETARY CONFIDENTIAL EXHIBIT 8 6 of 40
Classification: Confidential
NFPS OFFSHORE RISER PLATFROM & INTRAFIELD PIPELINES PROJECT COMP 3 STATE OF QATAR
LTC/C/NFP/5129/20
The Security Management Plan shall be used by CONTRACTOR as a basis for providing, developing, implementing, and maintaining security facilities, equipment, materials, consumables, manuals, procedures and personnel. This document shall cover security aspects during performance of WORK at all SITE(s) and WORKSITE(s) associated with the Engineering, Procurement, Construction and Installation scope and to provide guidance to the Project security team providers.
All the WORK scope, instructions and requirements defined in this part of Exhibit 8 form part of the LUMP SUM PRICE.
CONTRACTOR shall act in accordance with the applicable provisions of the APPLICABLE LAWS, the Universal Declaration of Human Rights, the Fundamental Principles and Rights at Work of the 1998 International Labour Organisation Declaration.
4.1 Security Objectives
In order to ensure the effective implementation of COMPANY HSES policy, the CONTRACTOR will maintain these documented Project Security Objectives as part of the Security Management Plan processes, etc.:
Security is everyone’s responsibility
Promote security and wellbeing of all Project employees
Promote and proactively pursue the goal of zero security incidents
Demonstrate a professional security image by effective communication and appearance
Undertake timely and systematic identification of potential security threats across all areas
of exposure
Conduct risk assessments for every identified security threat and eliminate the security threat or establish adequate risk control measures to mitigate the risk level to as low as reasonably practicable (ALARP)
Record, track and document all actions to mitigate identified security threats across all phases
of the WORK
Conduct regular management reviews and audits of the effectiveness of the security
management system in fulfilling policy, objectives, and performance criteria
CONTRACTOR shall provide and implement necessary policy directives to the Project Security guard force for the delivery of effective security service throughout all SITE(s) and WORKSITE(s) within the Project scope.
CONTRACTOR security guards will only take orders and instructions from personnel as defined in CONTRACTOR Security Management Plan, unless it is a real time emergency requiring immediate action. Other personnel attempting to give orders or instructions shall be politely informed that all routine or non-emergency requests or concerns are to be addressed to relevant line Management.
CONTRACTOR is fully responsible to ensure full compliance with all COMPANY, RLC, QATRAGAS and APPLICABLE LAWS in terms of Security Management requirements and expectations.
PROPRIETARY CONFIDENTIAL EXHIBIT 8 7 of 40
Classification: Confidential
NFPS OFFSHORE RISER PLATFROM & INTRAFIELD PIPELINES PROJECT COMP 3 STATE OF QATAR
LTC/C/NFP/5129/20
Where CONTRACTOR proposed WORKSITE(s) will have an existing Security Management Plan based on the immediate WORK environment and geographical location, CONTRACTOR shall ensure the requirements set forth in this Exhibit are complied with at that WORKSITE(s) and are captured within the Security Management Plan.
All references in this Exhibit and referenced documentation the to Ministry of Municipality and Environment (MME), Qatar Petroleum (QP) and RLC stated herein this procedure are applicable to SITE(s) covered by COMPANY permit to work.
The Ministry of Interior (MOI) is responsible for Security Management in RLC, so within this section whenever reference is made to RLC, CONTRACTOR shall consider that this refers to MOI.
CONTRACTOR shall appoint a specialist Security Subcontractor to provide Security services at the SITE(s) and/or WORKSITE(s) where WORKS will be undertaken on the Project. The Subcontractor shall have all APPLICABLE LAWS requirements in place to operate as a Security service provider.
CONTRACTOR shall submit their proposed Security Subcontractor for any SITE(s) and/or WORKSITE(s) for COMPANY APPROVAL, including the following information as a minimum:
Demonstration of Major Project Security Service experience
Relevant registration and confirmation that it is authorized to operate as a Security Service
provider in the geographical location they will be appointed
Summary of means in which the Security Subcontractor shall ensure compliance to the
Project instructions and exhibit 8 SHES instructions
Details of specific experience and certification of key personnel as required in terms of
Emergency Response and Coordination
4.2 Security Strategy
As part of the Security Management Plan, CONTRACTOR shall identify and implement a Security Strategy. The Security Strategy shall be focused on providing long term security and employs a range of measures and assets that are focused on utilizing the basic strategies of Deter, Detect, Delay and Respond to security threats against the Project assets, personnel, and business continuity.
The Security Strategy design ensures that the different security measures employed work together to provide a system whereby the measures overlap and thus ensure security in depth.
4.2.1 Deterrence
Malevolent acts such as theft, sabotage and criminal activities are be prevented by deterring the adversary – by implementing measures that are perceived by potential adversaries as too difficult to circumvent. This makes the specific asset or facility an unattractive target, resulting in the potential adversary abandoning attempts to act against it.
The deployment of Security Guards stationed at key locations within SITE and/or WORKSITE, and the effective patrolling by both foot and mobile patrols are the principal features that will be used to deter criminal activity.
PROPRIETARY CONFIDENTIAL EXHIBIT 8 8 of 40
Classification: Confidential
NFPS OFFSHORE RISER PLATFROM & INTRAFIELD PIPELINES PROJECT COMP 3 STATE OF QATAR
LTC/C/NFP/5129/20
CONTRACTOR is to detail their proposed arrangements for this in the Security Management Plan.
4.2.2 Detection
Detection is the security strategy employed with the aim to discover an adversary’s actions. The effectiveness of the detection function is based upon the probability of sensing the adversarial action and providing the time required for reporting and assessing the incident or alarm.
Detection measures will be employed by CONTRACTOR at all SITE(s) and WORKSITE(s) – including the screening of personnel for unauthorized entry and possession of prohibited items. Guards at fixed positions and on patrol will maintain high levels of vigilance and will detect intrusions or criminal activity
4.2.3 Delay
The Delay function of the overall security strategy entails the use of barriers, locks and security personnel in well-positioned fixed posts and mobile patrols working in conjunction to slow down the adversary’s progress.
CONTRACTOR will include their control measures and processes for this in the Security Management Plan.
4.2.4 Response
A significant Security tasking will be to respond both rapidly and effectively to Security incidents and thereby prevent the adversary’s successful penetration or action. The response will be sufficiently manned, trained and equipped to ensure the interruption of the adversary’s progress and to execute their response duties effectively. The main success indicator is the response time from receiving the communication of a suspicious activity or incident to the security responders’ arrival at the location and their effective handling of the security incident.
CONTRACTOR shall Management Plan.
include their response arrangements and processes
in their Security
4.3 Security Threats & Vulnerabilities
CONTRACTOR shall develop a Security Threat and Vulnerabilities Risk Assessment within sixty (60) days of EFFECTIVE DATE for COMPANY APPROVAL. As a minimum, but not limited to, it shall include a list of credible Security Threats and Vulnerability scenarios as listed below.
CONTRACTOR shall REVIEW the Security Threat and Vulnerabilities Risk Assessment and update in line with the actual SITE(s) and WORKSITE(s) condition a minimum of 6 monthly intervals, taking into account all SITE(s) and WORKSITE(s).
4.3.1 Security Threats
The findings of the Risk Assessment shall be incorporated into the Security Management Plan.
The credible scenarios that have been identified include, but is not limited to, the following:
PROPRIETARY CONFIDENTIAL EXHIBIT 8 9 of 40
Classification: Confidential
NFPS OFFSHORE RISER PLATFROM & INTRAFIELD PIPELINES PROJECT COMP 3 STATE OF QATAR
LTC/C/NFP/5129/20
- Bomb Threat: A bomb threat would have a certain nuisance value but would not be that
credible
-
Sabotage: Incidents of sabotage have occurred on projects in RLC in the past, due to attempts of contract prolongation or to avenge perceived mistreatment or unfairness. To be assessed for all SITE(s) and WORKSITE(s)
-
Labour Unrest – Violent (Riot): Violent riots have occurred within RLC involving extensive destruction of property and injuries. Most of these incidents are linked to wage or living condition disputes. This is applicable to all SITE(s) and WORKSITE(s)
-
Labour Unrest – Peaceful (Sit In): Similarly to the scenario of violent labour unrest, peaceful unrest is typically driven by similar reasons, but it does not involved destruction or damage to property. To be assessed for all SITE(s) and WORKSITE(s)
-
Hostage or Kidnapping: Isolated incidents have occurred in the past where Management has been held hostage or threatened, principally during labour unrest. Kidnapping for material reward is not common. To be assessed for all SITE(s) and WORKSITE(s) and include travel to/from considering the geographical location of the WORK(s)
-
Assault: Individuals fighting, assault by a number of workers on a supervisor or colleague or ethnic groups clashing occurs regularly within RLC and other SITE and WORKSITE locations. To be assessed for all SITE(s) and WORKSITE(s)
-
Theft of Materials – Large Scale: Large scale theft of materials has occurred in RLC and normally involves a syndicate or gang. To be assessed for all SITE(s) and WORKSITE(s)
-
Theft of Materials – Pilferage: Low level pilferage of tools and small materials by workers for personal gain is relatively common. To be assessed for all SITE(s) and WORKSITE(s)
-
Road Traffic Accident (RTA) – With Casualties: This is considered a safety risk, however this is included in this assessment due to Security involvement in the mitigation. To be assessed for all SITE(s) and WORKSITE(s)
-
Road Traffic Accident (RTA) – No Casualties: This is considered a safety risk, however
this is included in this assessment due to Security involvement in the mitigation
- Information Security violations: Primarily leaving sensitive information in a location
where it can be found by unauthorized persons
- Code of Ethics violation: Violation of code of business ethics such as conflict of interest
or discrimination
-
Cyber Attack: It has occurred in the past and may re-occur in the future
-
Intrusion: Third party intrusion into SITE(s) and/or WORKSITE(s). Fishing boat intrusion is
relatively common
- Pirate Attack: Vessel including the shipment is boarded and controlled by pirates for
ransom causing delays of completing the WORK
PROPRIETARY CONFIDENTIAL EXHIBIT 8 10 of 40
Classification: Confidential
NFPS OFFSHORE RISER PLATFROM & INTRAFIELD PIPELINES PROJECT COMP 3 STATE OF QATAR
LTC/C/NFP/5129/20
CONTRACTOR shall review the list, as well as control measures and ensure they are up to date and implemented, at least on a quarterly basis.
4.3.2 Security Vulnerability Assessment
The findings of the Risk Assessment shall be incorporated into the Security Management Plan.
During the Risk Assessment CONTRACTOR shall consider potential areas of vulnerability, such as (but not limited to):
Power supply
Potable water supply
Fire water network
IT & Telecom services
Food services
Dining / messing facilities
Material storage areas
Office areas including confidential/ sensitive information
Traffic routes
The assessment shall cover all activities at all SITE(s) and WORKSITE(s) locations and provide mitigation controls and processes for identified potential vulnerable areas.
4.3.3 High Profile Areas
CONTRACTOR shall develop and implement a High-Profile Area Program within one hundred and twenty (120) days of EFFECTIVE DATE for COMPANY APPROVAL. CONTRACTOR shall pay close attention to potential risks associated with the following areas and activities (but not limited to) and include their intended control measures, processes, etc., to mitigate the risk to ALARP:
- Main Gate
Inadequate lighting
Attempted entry with no valid pass or a fraudulent pass
Unauthorized vehicles
Visitor control (unplanned)
Smuggling in of unauthorized items (i.e. alcohol, drugs, weapons etc.)
Theft of material
No material removal passes
- Perimeter Fencing
PROPRIETARY CONFIDENTIAL EXHIBIT 8 11 of 40
Classification: Confidential
NFPS OFFSHORE RISER PLATFROM & INTRAFIELD PIPELINES PROJECT COMP 3 STATE OF QATAR
LTC/C/NFP/5129/20
Vandalism
Holes or gaps in fence line
Poor lighting or burnt out lights
Damaged fence
Illegal entry attempts
- Traffic Control and Management
Unauthorized vehicle entry
Proper vehicle searches conducted
Careless parking and obstruction of traffic flow
Exceeding speed limit
Unauthorized parking
Lack of road signs
Damaged vehicles (i.e. light covers, exhaust systems, oil leaks etc.).
- Control of Personnel (Access & Egress)
SITE and WORKSITE personnel (COMPANY/ CONTRACTOR/ Subcontractor)
Visitors and/or deliveries
Vendor(S) representatives
Government officials
Intruders
- Control of Systems
Perimeter fencing
Security lighting
Security signs (restricted areas)
Key management / control
Electronic surveillance (CCTV) and electronic access systems
- Control of Confidential Information
Employee contracts
Gaining proprietary information through industrial espionage
Personnel documents
Computer data
PROPRIETARY CONFIDENTIAL EXHIBIT 8 12 of 40
Classification: Confidential
NFPS OFFSHORE RISER PLATFROM & INTRAFIELD PIPELINES PROJECT COMP 3 STATE OF QATAR
LTC/C/NFP/5129/20
- Control plan for Emergencies
Emergency response plan
Good public relations with RLC MOI, Police, Civil Defence, regulatory bodies in other
geographical locations where WORK is conducted
Vandalism or looting
Natural disaster
Accidents or medical cases
Civil unrest
4.4 Security Instructions
4.4.1 Access Control
4.4.1.1 Onshore
CONTRACTOR shall implement a suitable and sufficient access control system as part of its Security Management Plan for SITE(s) and WORKSITE(s) areas to ensure that only authorized persons enter SITE(s) and WORKSITE(s) facilities. The authorization to enter includes a record for access/ egress; personal information of person entering/ exiting SITE(s) and WORKSITE(s) areas; relevant SHES training or in case of visitors appointment/ escort.
CONTRACTOR shall ensure that the access control system is be supported by sufficient resources and infrastructure to ensure that no unauthorized access/egress is made to/from SITE(s) and/or WORKSITE(s), including (but not limited to):
Appointments of a COMPANY APPROVED Security guard force, meeting all APPLICABLE LAWS
requirements for the geographical location
Access control points (including manned and unmanned points)
Guard houses with provision for guards on shift (day and night)
Electronic access control system to log access/ egress times of individuals linked to a personal
ID badge
ID badges with RFID and/or barcodes assigned to individuals who are authorized to access SITE(s) and WORKSITE(s)
Access control readers including fixed and portable handheld type
Sufficient staging areas to allow smooth access/ingress of people, equipment and vehicles
including searches
Tools and equipment to enable efficient communication within the Security team including
radios and phones
PROPRIETARY CONFIDENTIAL EXHIBIT 8 13 of 40
Classification: Confidential
NFPS OFFSHORE RISER PLATFROM & INTRAFIELD PIPELINES PROJECT COMP 3 STATE OF QATAR
LTC/C/NFP/5129/20
Equipment to perform suitable and sufficient searches of persons, vehicles and equipment
entering and exiting the facility
Material exit pass system in line with COMPANY and RLC requirements
Batons for controlling traffic (green and red) with illuminating capability to ensure visibility
during hours of darkness
Guards to observe conditions of vehicles/ equipment entering SITE(s) and WORKSITE(s), and if any obvious defects are noticed, i.e. flat tire, broken windscreen, broken lights, the Guard shall inform his Supervisor who shall notify relevant SHES personnel for further inspection
CONTRACTOR shall ensure that a suitable means of tracking access/egress is implemented. CONTRACTOR shall take note of the blockade on the State of Qatar and the restrictions imposed by the MOI when applying for RLC ID badges for persons who were resident in blockade countries. CONTRACTOR shall take full responsibility for the timely application and issuance of RLC ID badges:
All Project personnel shall be issued with an RLC MOI issued ID cards if working in SITES under
COMPANY permit to work
All Project personnel shall be issued with Project Personal Photo I.D. Cards
All Personal ID cards shall have RFID or barcodes to interface with electronic access control
system
All Project vehicles will be issued with Vehicle I.D. Passes
Visitors will surrender their Qatari I.D. Card (or passport for short term visitors) and be issued
with a temporary Project I.D. Card
A log book will be maintained for all visitors entering SITE(s) and WORKSITE(s)
CONTRACTOR shall only grant access through Personal ID cards to CONTRACTOR related WORK areas except for COMPANY, who shall be granted access to all WORK areas. The WORK areas include all SITES and WORKSITES.
CONTRACTOR shall ensure that the RLC pass application process is managed in line with COMPANY and RLC procedures. Sufficient competent personnel shall be provided by CONTRACTOR to process RLC gate passes, and CONTRACTOR shall maintain an accurate record of SITE and WORKSITE personnel issued with RLC badges. The RLC badge validity shall be linked to SITE and/or WORKSITE access and CONTRACTOR shall take all reasonable steps to ensure that RLC badge requirements are complied with.
CONTRACTOR shall include their processes for issuing and controlling site passes for other WORKSITES within their Security Management Plan. As a minimum, it shall meet or exceed the requirements identified above.
Once the access control is implemented CONTRACTOR shall carry out regular penetration testing to confirm the suitability and efficiency of its access control measures. Penetration testing shall be supported by written reports, which will include the test, outcome and improvement actions (when
PROPRIETARY CONFIDENTIAL EXHIBIT 8 14 of 40
Classification: Confidential
NFPS OFFSHORE RISER PLATFROM & INTRAFIELD PIPELINES PROJECT COMP 3 STATE OF QATAR
LTC/C/NFP/5129/20
required). CONTRACTOR shall REVIEW planned tests with COMPANY prior to execution and submit penetration test reports to COMPANY for APPROVAL.
4.4.1.2 Offshore
For access offshore, CONTRACTOR shall, at its own cost and expense, obtain Qatar Petroleum (QP) “Offshore Pass”, and obtain QP “Offshore Medical Fitness Card”. CONTRACTOR’s schedule shall take account of the period of time (typically two (2) to three (3) working days) required to process the applications and issue the Offshore Pass and Offshore Medical Fitness Card. Refer to QP Offshore Medical Fitness Requirements.
CONTRACTOR shall assure that CONTRACTOR’s and Sub-contractor’s employees have been trained in the safe performance of all aspects of the work and/or situations normally encountered in and around inland and offshore oilfields, including but not limited to safe ingress and egress on offshore platforms.
CONTRACTOR shall ensure that all personnel who visit offshore facility’s or are executing vessel related activities in the Qatar North Field are required to have a valid H2S/BA certificate; and “Helicopter Underwater Survival Training” (HUET) and Sea Survival Training certificates. All training certificates shall be available for COMPANY REVIEW upon request. H2S, HUET and Sea Survival training shall be performed at an OPITO APPROVED training provider.
4.4.2 Alcohol and Drug testing
Security personnel shall support alcohol & drug testing on the Project. CONTRACTOR shall provide suitable number of breathalyser units/drug swabs as described in the relevant part of SHES instructions.
Security personnel may be trained to conduct breathalyser testing. However, drug testing will only be witnessed by Security personnel (when requested by medical staff). All security personnel who use breathalyser machines shall be suitably trained and competent to carry out breathalyser testing including random- as well as for-cause testing. All breathalyser machines shall be calibrated. and disposable mouthpieces shall be used prior to each test.
Security personnel shall carry out breathalyser testing:
Random and for-cause testing at security access points
Testing after each vehicle incident or high potential incident at SITE and/or WORKSITE
Second confirmatory breathalyser test if medical personnel identify a positive result
For-cause testing when required due to reasonable suspicion of persons under the influence
of alcohol on SITE and/or WORKSITE.
4.4.3 Alcohol & Drug policy
The use of / being under the influence of drugs and alcohol while at SITE or WORKSITE is strictly prohibited. This includes using, possessing, distributing, manufacturing, being under the influence
PROPRIETARY CONFIDENTIAL EXHIBIT 8 15 of 40
Classification: Confidential
NFPS OFFSHORE RISER PLATFROM & INTRAFIELD PIPELINES PROJECT COMP 3 STATE OF QATAR
LTC/C/NFP/5129/20
of, or otherwise being involved in illegal drugs and the abusive use of chemicals or controlled substances while on SITE or WORKSITE.
CONTRACTOR shall ensure that any person failing to follow this policy receive disciplinary action, up to and including possible removal from the Project and/or report to regulatory bodies.
4.4.4 Traffic Violations
CONTRACTOR shall implement Traffic Violations measures as part of its Security Management Plan.
CONTRACTOR shall ensure that the following traffic RULES are be applied at SITE and/or WORKSITE, and security personnel shall assist with the enforcement of these RULES. More detailed transport controls are detailed in the Safety & Risk Management part of the SHES instructions:
No overtaking on SITE or WORKSITE
No using mobile phone whilst driving (including hands-free/ blue-tooth)
Obey the speed limit
Driver and Passenger Seatbelts to be worn at all times
Always follow at a safe distance (3-second rule)
Report all near misses and accidents immediately
No driving without a valid driving license & defensive driver training
No Parking in unauthorized parking place
Mandatory reverse parking
No overloading of vehicles and/ or inadequate seating arrangements
No misuse of vehicles passes (i.e. pass number and license plate number not matching, etc.)
Not slowing down and stopping at the security gates or check points
Ignoring traffic signs
Crossing road inter-sections without stopping or slowing down
Mounting or dismounting passengers whilst vehicle in motion
Ignoring or failing to use signal indicator lights
Driving under the influence of alcohol or drugs
Carrying passengers in vehicles not designed to carry passengers or without seating and
hardtop roofs
Not using head-lights while travelling in SITE and/or WORKSITE areas
Not giving way to pedestrians
PROPRIETARY CONFIDENTIAL EXHIBIT 8 16 of 40
Classification: Confidential
NFPS OFFSHORE RISER PLATFROM & INTRAFIELD PIPELINES PROJECT COMP 3 STATE OF QATAR
LTC/C/NFP/5129/20
instructions
The SHES orientation/induction training program and enforced by all SITE and WORKSITE personnel with strong support from the security group.
through CONTRACTOR’s
communicated
shall be
clearly
4.4.5 Theft and Damage
CONTRACTOR shall implement suitable and sufficient control measures to mitigate against theft and damage of property on the Project. The requirements shall be captured in Security Management Plan.
CONTRACTOR shall include within the Security Management Plan the control measures and process for manging as a minimum, but not limited to, the following:
Control access to SITE(s) and WORKSITE(s) Authorized Project badge holders only Visitor log in and log out registers Ensure material exit passes are used and checked Pay special attention to suspicious activities / vulnerable areas Regularly patrol the areas where equipment, tools, sheds and vehicles may be carelessly left
unattended or unsecured at the end of shift
Frequently patrol perimeter fence Random vehicle searches and searches of suspicious vehicles and persons Supervision and training REVIEW security threats, vulnerabilities and high-profile areas regularly and follow the
procedures correctly
Always check and confirm – if it is possible to do so Be vigilant; observe and report any suspicious person or movement Discuss suspicious matters with your supervisor and change your patrol routes regularly Report any defective locks Report suspected misuse or damage of locks or keys Ensure that all entry or exit points are securely locked when not in use Check all exterior doors and gate locks Use key control register for opening doors for employees. Check name against company
roster
4.4.6 Photography
Cameras, digital cameras, video cameras, camcorders are classified as prohibited items and will not be permitted on SITE(s) and/or WORKSITE(s) without a valid camera permit.
Any unauthorized use of photography equipment shall be reported by CONTRACTOR to COMPANY.
4.4.7 Bomb Threats
CONTRACTOR shall detail the requirements to deal with bomb threats as part of its Security Management Plan. Bomb threats may come from:
PROPRIETARY CONFIDENTIAL EXHIBIT 8 17 of 40
Classification: Confidential
NFPS OFFSHORE RISER PLATFROM & INTRAFIELD PIPELINES PROJECT COMP 3 STATE OF QATAR
LTC/C/NFP/5129/20
Hoaxes and/or practical jokes
Personnel deliberately causing inconvenience but not necessarily motivated to cause damage
or harm to people
Disgruntled employees with malicious intentions
Extremist organizations
CONTRACTOR shall implement these guidelines for dealing with bomb threats as part of Standing Instructions:
When bomb threats are received three steps will be considered; Step 1: Control, Step 2:
Search and Step 3: Evacuate
Always adopt a professional approach; never treat a bomb threat as a hoax and consider as
a genuine threat
Try and keep the caller talking. Ask the caller to repeat the message. Record every word spoken by the person. If the caller does not indicate the location of the bomb or the time of possible detonation ask for this information. Inform the caller that the building is occupied and the detonation of a bomb could result in death or serious injury to many innocent people
Always stay calm. Pay particular attention to background noises, such as motor running, music playing, airplane flying, machinery activities and any other noise, which may give a clue as the location of the caller
Listen to everything that is said (Exact words of the message)
Try and form an impression of the caller (i.e. mental health issues, intoxicated, angry etc.)
Listen closely to the voice (male, female), voice quality (calm, excited,) accents, and speech impediments. Immediately after the caller hangs up, report the threat to the Supervisor
CONTRACTOR shall report the information immediately to the police department, fire
department and other appropriate agencies.
CONTRACTOR shall implement these guidelines for actions to take, in case response is made to a bomb threat, as part of Standing Instructions:
Do not discuss “Bomb Threat” with anyone other than the police and the key management
personnel
The minimum exclusion zones which shall be considered is; 300 feet (91 meters) for a package
or brief case; 1750 feet (533 meters) for a car bomb
If the danger zone is located, the area should be isolated with relevant exclusion zone and cordoned off until the object has been removed or disarmed. The scene has to be secured by hazard tapes and “No Entry” signs posted, and post sentries as required
Take notes to include what actions you have taken and times
PROPRIETARY CONFIDENTIAL EXHIBIT 8 18 of 40
Classification: Confidential
NFPS OFFSHORE RISER PLATFROM & INTRAFIELD PIPELINES PROJECT COMP 3 STATE OF QATAR
LTC/C/NFP/5129/20
Make sure no one attempts to disarm or move any device. The removal/disarming must be
left to relevant Qatar government specialist department
Do not use radios or Mobile Phones near the vicinity; radio beams could cause premature
detonation of initiators
Be aware – there may be other secondary explosive (bobby trap) devices
Never attempt to cover suspicious packages.
CONTRACTOR shall implement these guidelines for actions to take, in case a suspicious object is identified, as part of Standing Instructions, including UXO
Do not touch or move the object
Note the description of the suspicious object, and determine why is it suspicious
After establishing the facts, immediately call the Supervisor who will, after authentication,
determine what assistance is required and take appropriate action
Make an assessment of the scene and establish the most direct route to the object. Plan
alternate route in case the first route is in danger
Stand-by to receive the relevant Qatar government specialist department/regulatory bodies
in the geographical location of the WORK and guide them to the incident scene.
4.4.8 Key Control
CONTRACTOR shall implement key control requirements as part of its Security Management Plan.
The requirements shall be issued through the Standing Instructions and may include requirements such as:
Guard force personnel will maintain positive control over all keys at all times
All key boxes will remain locked at all times unless removing or replacing a key
A joint key box inventory will be conducted by the guard force supervisors when changing
shifts. This inventory will be logged onto the supervisor daily activities report
At no time will any guard force member either issue out or turn over control of any key to any person without that person’s written consent and confirmation of CONTRACTOR Security & Emergency Coordinator or his delegate. This includes turning over or issuing keys to COMPANY or CONTRACTOR personnel
Proper identification will be checked for any personnel requesting entry into an office building or room. Acceptable identification is an RLC badge (with photo), a Project badge or both. No identification, no entry, no exceptions
Guard force member will log in all building or room entries onto the entry control log. Both
entry and securing of doors will be logged
PROPRIETARY CONFIDENTIAL EXHIBIT 8 19 of 40
Classification: Confidential
NFPS OFFSHORE RISER PLATFROM & INTRAFIELD PIPELINES PROJECT COMP 3 STATE OF QATAR
LTC/C/NFP/5129/20
Guard force member will personally take the requested key in hand and walk to the location and unlock the door. At no time will the key remain in the possession of the requesting individual or left in a door
When a door is requested to be secured the guard will make a physical check of the room for obvious damage, ensure windows are closed and locked, turn out the lights if needed and secure the door. Anything thought to be in question will be noted in the guard shift daily activities report.
4.5 Security Personnel
Many of the requirements in this section shall be captured and communicated through the Standing Instruction procedure.
CONTRACTOR shall ensure that the information is collated and communicated as required.
4.5.1 Guard Professional Capabilities & Duties
CONTRACTOR shall ensure that Security Personnel maintain the following capabilities (as a minimum):
To be able to deal with any emergency situations and know how to summon assistance when
required
To be able to communicate in English effectively
To be alert at all times while on duty and observe activities, unsafe conditions or hazards,
which could result in injury or damage to property, equipment or personnel
To maintain the highest level of personal discipline and behave in a manner to command
respect
To strictly comply with SITE and/or WORKSITE security orders and instructions in force
without favouritism or exception
To apply their specialist knowledge, which would help them get WORK done effectively and
efficiently
To be courteous and well mannered. Their approach should portray a positive image of the
Project SITE and/or WORKSITE
CONTRACTOR shall develop and issue general duties and instructions for Security Guards as part of the Security Management Plan including:
Prevention of unlawful / unauthorized access
Prevention of theft / pilferage
Maintenance of relevant SITE and/or WORKSITE security requirements
Fire Prevention
PROPRIETARY CONFIDENTIAL EXHIBIT 8 20 of 40
Classification: Confidential
NFPS OFFSHORE RISER PLATFROM & INTRAFIELD PIPELINES PROJECT COMP 3 STATE OF QATAR
LTC/C/NFP/5129/20
Alertness and reporting of any security / safety hazards
Familiarization with the area of their responsibility and be able to direct people as necessary
Enforcing security procedures and policies
Keeping fire hydrants and roadways clear in case of emergency
Reporting any unusual acts immediately
Detain suspicious of disorderly persons and inform your Supervisor accordingly
CONTRACTOR shall develop a Security Guard performance matrix, together with its Security service provider and measure the performance of its Security Personnel. CONTRACTOR shall take relevant actions in case of good and poor performance and share such performance matrix and actions with COMPANY.
4.5.2 Security Administration
Security Guards and Security Supervisors must be able to perform the following basic duties:
Write simple report forms Communicate via telephone and radio Understand and follow instructions given in English Understand and interpret safety signs Summon emergency services Be able to carry out their duties in adverse weather and the actual SITE and/or WORKSITE
Identify potential security threat and safety hazards
working conditions.
4.5.3 Code of Conduct
CONTRACTOR shall implement standing instructions related to expected Security Guard Code of Conduct. The following Code of Conduct shall be implemented (as a minimum):
Guards will carry out security guarding duties or other related tasks within the given area of
responsibility
Guards will protect the area of responsibility from loss and damages. Guards will apply their specialist knowledge in the prevention, detection and reduction of loss and damage and ensure that COMPANY’s RULES are not broken
Guards will maintain log books according to the “scope of work” for the location and forward
verbal or written reports as and when necessary
Guards will promptly carry out the WORK entrusted to them during weekdays, weekends,
official or public holidays in accordance with their shift schedules
Guards will unconditionally abide by the Project RULES and regulations without any
deviations
PROPRIETARY CONFIDENTIAL EXHIBIT 8 21 of 40
Classification: Confidential
NFPS OFFSHORE RISER PLATFROM & INTRAFIELD PIPELINES PROJECT COMP 3 STATE OF QATAR
LTC/C/NFP/5129/20
Guards will promptly respond to riots, public disturbances, fighting or exchange of foul words
between any personnel on the Project and report to their Supervisors
In the event of any traffic accident, guards will promptly inform the matter to their Supervisors
In the event of personal injury, guards will promptly notify their Supervisors and will attempt to secure the incident scene
Guards will ensure that no unauthorized equipment or material leave the premises without
a valid Material removal Permit or express authority of COMPANY
Guards will hand over all ‘lost and found’ items to CONTRACTOR
Guards will not loiter around or remain in any office, buildings, installations, recreation
facilities any longer than necessary to carry out the assigned duties
Guards will immediately report any crimes, discrepancies, irregularities or security breaches
to their Supervisors
Guards are responsible to implement security RULES. Guards will not neglect nor without due or sufficient cause, omit to promptly and diligently carry out any tasks given to them during the course of their duties
Guards will be familiar with the property they are protecting including name or number,
designation of areas, patrol routes, buildings doors and fire exits
Guards will not feign or exaggerate any sickness or injury with a view of evading their duties
Guards will strictly adhere to all orders and instructions given to them by their Supervisor. They will comply with “Standing Instructions” and follow the cause with the highest integrity
Guards that obtain results at the cost of violation of APPLICABLE LAWS or other unscrupulous
acts will be terminated
Guards will not make any false verbal statements or written reports of whatever descriptions
Guards on conviction of any crime will notify their Supervisor immediately
Guards will remain courteous and tactful whilst on duty. They will not be uncivil to persons encountered in the course of duty or use unnecessary authority. They will never resort to violence or arguments and any disagreement or misunderstanding will be immediately informed to Supervisors
Guards will not disclose, dispose or divulge any information, classified information or proprietary information, without the express written agreement of CONTRACTOR and COMPANY. Offenders are liable for prosecutions and termination of employment without notice or benefits
Guards will not associate or have any dealings with any person or organizations advocating
or fostering hatred or prejudice against any racial or religious groups
PROPRIETARY CONFIDENTIAL EXHIBIT 8 22 of 40
Classification: Confidential
NFPS OFFSHORE RISER PLATFROM & INTRAFIELD PIPELINES PROJECT COMP 3 STATE OF QATAR
LTC/C/NFP/5129/20
Guards will not act in manner reasonably likely to bring discredit upon the Project or its
organizations
Guards will complete “Daily Guards Report”. The report will cover every event that has taken
place during the tour of duty and actions taken
Guards will complete an “Incident Report” for any events that are outside the scope of Daily Guards Report. The report will cover the nature of incident, date, time, event, people involved and any recommendations
Guards will always remain vigilant and alert. They will not sleep whilst on duty. Failing to do
so may result in disciplinary action taken against the offenders
Guards will maintain a high standard of personal discipline and be firm, calm and courteous
while enforcing the rules and display a spirit of “Accepting Ownership of Problems”
Guards will report to duty at the correct times specified by their Supervisors
Any complaints against the individual guards must be entered in the Daily Guards Report and
notified to the Supervisors accordingly
Guards will without fail brief their relievers accordingly. Such briefings may include verbal
instructions, telephone messages or the change of plans or orders
Guards are to assure by posted checklist that all equipment in charge of him is in working condition. Any defects or deficiencies are to be reported without any delay and logged in the Daily Guards Report accordingly
Guards will not use telephones, other communication equipment or office equipment for unofficial or private or personal use. The only exception to this rule is during emergency cases where they may be required to present justifications
Guards will not neglect the performance of their duties. This includes, but not limited to, failure to promptly report any security incidents, failure to make required post checks, sleeping on duty, unreasonable delays or failures to carry out assigned tasks, conducting personal affairs during duty hours, and refusing to render assistance or cooperate in upholding the integrity of SITE and/or WORKSITE security. Disciplinary action will be taken against the offenders
Guards will not smoke whilst on duty. Smoking will take place only in the designated smoking
areas during break/ rest periods
Guards will remain on duty until properly relived by another guard. They will not leave their assigned duties without expressed permission or sufficient cause except during emergency situations. In such cases, they will notify the Supervisor immediately
Guards will report to duty on the correct specified time as per their schedule. If they are unable to report to duty due to illness or injury, they will notify their Supervisor immediately
PROPRIETARY CONFIDENTIAL EXHIBIT 8 23 of 40
Classification: Confidential
NFPS OFFSHORE RISER PLATFROM & INTRAFIELD PIPELINES PROJECT COMP 3 STATE OF QATAR
LTC/C/NFP/5129/20
Guards will not wear uniform other than those APPROVED by CONTRACTOR and COMPANY. They will maintain neat and clean appearance and observe high standard of personal hygiene. Such requirements include regular trimming of hair/ fingernails, clean-shaven face, buttoned shirt, wearing proper uniform and head-dress, and well-polished shoes and generally smart appearance. They will not wear uniform in public areas after duty hours unless expressly authorized
Guards will upkeep the public relations with employees and the general public in order to
carry out their duties effectively
Guards will observe parking regulations and report any violations to the Supervisor
Guards will at all times observe and maintain their personal hygiene. They will be clean-
shaven, trimmed fingernails, trimmed hair and generally smart appearance
Guards will attend and investigate all security breaches and report the matter promptly to
their Supervisors accordingly
Guards will ensure that all equipment in their charge are in working condition, and if not,
reported for repair or replacement
Guards are responsible for the safe custody of all keys under their control. Keys must not be issued to unauthorized personnel, janitors or duplicated. The movements of keys are to be recorded in a key register
Guards will ensure that they are law abiding and respectful of the local cultural traditions. They will not indulge, consume, deal or be in possession or be under the influence of any debilitating or intoxicating substances including without limitation of alcohol or unauthorized drugs other than those prescribed by competent medical authorities
Guards will not WORK whilst under the influence of alcohol or consume any alcohol whilst at
WORK. Serious disciplinary action will be taken against the offenders
Guards will report any unusual occurrences, security breaches (sign of interferences or intrusions, defects, etc.), fire, and safety hazards promptly to the Supervisors. These reports will either be verbal or in writing. If “break-in” is suspected – they will not attempt to enter, touch or remove anything behind until the crime scene is cleared. Report such incident immediately
Guards will ensure that all fire-fighting equipment are in the correct designated locations or
fire cabinets and that emergency escape routes are clear of obstacles
Guards will note any accumulation of garbage or obstacles in fire exits, fire doors, electrical
rooms, stores and fire extinguishers and take appropriate action as necessary
Guards will fight fire with proper firefighting equipment provided at SITE and/or WORKSITE
according with their experience/training and never put their life in danger
Guards will know how to operate fire extinguishers, fire alarms and other fire protection
system used in SITE and/or WORKSITE
PROPRIETARY CONFIDENTIAL EXHIBIT 8 24 of 40
Classification: Confidential
NFPS OFFSHORE RISER PLATFROM & INTRAFIELD PIPELINES PROJECT COMP 3 STATE OF QATAR
LTC/C/NFP/5129/20
Guards will be familiar with the “Emergency Call Out” procedure when dealing with fires or
other emergencies. Guards will know their specific duties under such plans
In the event of an outbreak of fire a guard will be posted at the Main Gate to guide the Fire Service to the scene of fire to ensure unnecessary time is not lost
Guards will regularly assess the level of security threat and ensure that adequate security
measures are taken at all times
Guards will always remain vigilant and alert and report any suspicious activities within the
area of their responsibilities and know how to summon assistance during emergency
Guards will deny access to any persons/ vehicles that in their knowledge are in possession of firearms, explosives, or other harmful or dangerous materials or substances unless authorized by COMPANY and inform the Supervisor immediately
Guards will have the authority to conduct vehicles and personnel search
Guards will not touch or remove any suspicious materials or packages left unattended. Such
materials or packages will be reported to the Supervisor immediately
Guards will report any suspicious persons, activities or objects immediately to their
Supervisor
Guards will challenge any strangers or person who are suspiciously behaving or loitering in the premises. Guards will do so politely, positively and professionally as they may be genuine employees or visitors
Guards will regularly keep in touch with the Site Supervisor in order to effectively implement
and coordinate security function at SITE and/or WORKSITE
Guards will not patrol or enter ‘Exclusion Areas/ Zones’ unless it is safe to do so and required
by virtue of a specific duty
Guards will patrol the assigned routes at the frequency assigned to them by their Supervisor
Guards will not misuse WORK vehicles for private/ unofficial journeys.
4.5.4 Customer Care
CONTRACTOR shall ensure that Security Personnel follow good customer care principles. In many occasions, guards are the first persons to come in contact with visitors or customers.
Creating a good relationship with all organizations involved in SITE and/or WORKSITE activities (including visitors) is of vital importance and the following care shall be undertaken:
It is essential that guards display a spirit of friendliness, courtesy and cooperation and present a business-like appearance. Guards will conduct themselves in a professional manner at all times
Good manners shall be demonstrated to help gain respect from persons the guards interact
with
PROPRIETARY CONFIDENTIAL EXHIBIT 8 25 of 40
Classification: Confidential
NFPS OFFSHORE RISER PLATFROM & INTRAFIELD PIPELINES PROJECT COMP 3 STATE OF QATAR
LTC/C/NFP/5129/20
Guards should carry out request willingly and be prepared to assist as long as it does not
conflict with their responsibilities. If in doubt, check with the Supervisor
Being clean, tidy and smart will promote customer relations. Both in personal appearance
and at place of WORK
Be cheerful and obliging. This will not make guards less professional but will enhance your
credibility and respect in the workplace
4.5.5 Customer Complaints
CONTRACTOR shall implement a process through the Security Management Plan related to Customer complaints for security. All complaints, no matter how minor, shall be reported to CONTRACTOR Security & Emergency Response Coordinator and shall be recorded in the ‘Daily Security Report’. COMPANY shall receive information of all complaints, and immediate notification if complaints are received which may be of a serious nature.
The process for complaints shall be documented and available for all persons to use, without fear of retribution. All requests for the security supervisor’s or security coordinator’s name and phone number shall be answered.
4.5.6 Guards’ familiarization & training
CONTRACTOR shall implement a program for familiarization of security guards, including on-the job training as well as an orientation/induction program. As part of this familiarization program, all security personnel will be familiar with the following:
Location and name of SITE and/or WORKSITE
Access control procedures
Standing instruction process
Telephones and who are authorized to use them
Hours of duty/shift change
Names of emergency contacts and phone numbers
Procedures for issuing keys
Personal identification system
Key personnel on SITE and/or WORKSITE
Emergency procedures
Location of fire alarms, firefighting equipment and breathing apparatus
Where and when to patrol
Patrol exclusion zones
High risk, sensitive or vulnerable areas
PROPRIETARY CONFIDENTIAL EXHIBIT 8 26 of 40
Classification: Confidential
NFPS OFFSHORE RISER PLATFROM & INTRAFIELD PIPELINES PROJECT COMP 3 STATE OF QATAR
LTC/C/NFP/5129/20
Safety and security hazards
Dealing with bomb threat calls
Search processes and requirements
Breathalyser testing
Organizations working on SITE and/or WORKSITE
Adjacent facilities / organizations
Electronic equipment in use
Contact, Electronic Card Readers, etc
4.5.7 Confidentiality
All guards will protect confidential materials and information against unauthorized disclosures. Any guards found in breach of these requirements will be liable for criminal prosecution.
Guards shall treat all information covering, arising out of, or received by virtue of the contract as confidential. Guards will not, except as may be required by APPLICABLE LAWS, in any manner, advertise, publish or release any statement or information relating to the Project scope of WORK or use any other materials without prior written agreement by CONTRACTOR and/or COMPANY.
4.5.8 Personal Protective Equipment (PPE)
CONTRACTOR shall provide all Security Personnel in accordance with project PPE requirements, including:
Safety Helmet
APPROVED safety glasses with side shields – dark lens during daylight hours and clear lens
during darkness hours
Safety boots with ankle support
High visibility reflective jackets
Whistle
Hand-gloves (to be used when required)
Water bottle
4.6 Searches
As part of CONTRACTOR Security Management Plan, CONTRACTOR shall implement search Rules and Guidelines. The search Rules and Guidelines shall include requirements of:
Types of searches (i.e. contraband, for-cause, random)
Communication of RULES and Guidelines (i.e. signs at access points)
PROPRIETARY CONFIDENTIAL EXHIBIT 8 27 of 40
Classification: Confidential
NFPS OFFSHORE RISER PLATFROM & INTRAFIELD PIPELINES PROJECT COMP 3 STATE OF QATAR
LTC/C/NFP/5129/20
Vehicles, equipment, bus, marine spread and personnel searches
Actions following searches
Reporting and recordkeeping
CONTRACTOR shall ensure that the following Rules and guidelines are strictly followed, and well understood by security personnel:
Male guards shall not search females under any circumstances
Guards will not use any amount of force to carry out a search
Always obtain permission first before first attempt to search
BE POLITE, always treat people the way that you would expect them to treat you
BE POSITIVE, don’t be afraid to question something that does not appear to be correct
BE PROFESSIONAL, be firm but fair and use tact and courtesy at all times
Always thank the person at the end of the search
All searches shall be conducted in pairs
Random search is a strong deterrence against possible bomb attack or pilferages, as people would not know when the search would be conducted. CONTRACTOR shall determine the ratio of random searches in consultation with COMPANY. Random searches must avoid searching the same vehicle or person repeatedly, and random search ratios will be increased or decreased based on SITE and/or WORKSITE conditions, threats, trends etc.
CONTRACTOR shall strictly follow search criteria determined by Security Threat Levels, as announced by RLC.
Security personnel shall perform searches as required when suspicious vehicles are identified at SITE and/or WORKSITE. CONTRACTOR and COMPANY reserve the right to deny SITE or WORKSITE access to persons who refuse to searches, irrespective of the organization they belong.
CONTRACTOR shall ensure that access points maintain a search register, which shall include (as a minimum):
Date and time of search
Name of person
Organization
Findings
4.7 Prohibited Items
The following are classified as restricted items and are not permitted at SITE(s) or WORKSITE(s) without a written authorization:
Firearms or any kind, shotguns, air guns, handguns, flare pistols, starting pistols and stun guns
PROPRIETARY CONFIDENTIAL EXHIBIT 8 28 of 40
Classification: Confidential
NFPS OFFSHORE RISER PLATFROM & INTRAFIELD PIPELINES PROJECT COMP 3 STATE OF QATAR
LTC/C/NFP/5129/20
Replica or imitation of firearms, toy guns (plastic or metal)
Ammunitions, detonators, grenades, dynamites, explosive and accessories or devices
(commercial or homemade)
Incendiary materials of any nature
Radioactive/ magnetic
items (unless transported by an authorized CONTRACTOR/
Subcontractor with relevant certification and permitting in place)
Flammable gases, liquids or substances toxic chemicals or gases not limited to ammonia, nitrous fumes, carbon monoxide, hydrogen cyanide (unless transported by an authorized CONTRACTOR/ Subcontractor/ Supplier with relevant certification and permitting in place)
Pointed objects, weapons, bladed items and sharp-edged weapons adapted to cause injury,
e.g.:
o Flick knives, gravity catch knives, stilettos and daggers o Other knives – real and ceremonial (with blades more than 3 inches/ 8 cm) o Crossbows o Spears and arrows o Swords, umbrellas/ walking stick containing sword blades o Domestic gas cylinders o Poisons o Alcohol and drugs o Cameras and Video cameras o Stripped electrical circuit boards o X-ray equipment o Firecrackers and its products
o Paraffin heating appliances of any kind o Pressure cooker of any kind
4.8
Information Security
All Project personnel have a responsibility to safeguard information. CONTRACTOR shall ensure that information security requirements are implemented. Information security requirements includes the process of identification of information; classification of information; labelling of information; and control points.
In general CONTRACTOR shall take due care to safeguard information, including:
Keep office doors locked when out of office Confidential documents to be filled / stored out of view Lock office drawers with confidential information Keep portable media stored and locked away Computer to be locked when not in use Maintain the ‘clean desk’ policy
PROPRIETARY CONFIDENTIAL EXHIBIT 8 29 of 40
Classification: Confidential
NFPS OFFSHORE RISER PLATFROM & INTRAFIELD PIPELINES PROJECT COMP 3 STATE OF QATAR
LTC/C/NFP/5129/20
4.9 Security Threat Levels
The Project will adopt security threat levels and responses in accordance with QG Procedure PRT-SEC-PRC-018 - Operational Security Requirements for Projects.
4.10 Security Resources and Infrastructure
CONTRACTOR shall provide suitable and sufficient resources to enable the security personnel to carry out their duties in line with the SHES requirements as well as any APPLICABLE LAWS requirements.
CONTRACTOR shall consider, as a minimum, the following resources in the Security Management Plan:
Security manpower
Security vehicles
Security guard posts/ offices
Search areas & search tools
Access control systems (including badges and readers)
Communication (including phones and radios)
VBU’s and Traffic Cones
In addition to the typical security resources, CONTRACTOR shall also plan for, and have in place suitable number of guards to man restricted areas that will be ‘live’ during pre-commissioning, commissioning & SIMOPS phases. As a minimum, CONTRACTOR shall consider 24/7 cover for Sub- stations that are energized, and SIMOPS fenced areas for all areas during progression of SIMOPS.
5.0
EMERGENCY RESPONSE & PREPAREDNESS
CONTRACTOR shall develop an Emergency Response and Preparedness Plan for each SITE(s) and WORKSITE(s) within sixty (60) days of EFFECTIVE DATE for COMPANY APPROVAL. CONTRACTOR shall also develop relevant ERP bridging documents where applicable and/or when advised by COMPANY.
The plan shall consider all elements of Emergency Preparedness and Response including:
Emergency Response Levels
Emergency Instructions
Guidance on planning and execution of Emergency Drills and Exercises
Communication Protocol
Project Incident Management Team Structure
Muster Wardens
Project On-Scene Commanders
Muster Points
PROPRIETARY CONFIDENTIAL EXHIBIT 8 30 of 40
Classification: Confidential
NFPS OFFSHORE RISER PLATFROM & INTRAFIELD PIPELINES PROJECT COMP 3 STATE OF QATAR
LTC/C/NFP/5129/20
Identification of Emergency Services Reporting Point (ESRP)
Emergency Evacuation/ support systems (Hyperbaric Evacuation Systems for Diving Support
Vessel)
For SITE(s) and WORKSITE(s) under COMPANY permit to work control, RLC Onshore Emergency Response Plans and Reference Point drawings shall be posted at SITE(s) and WORKSITE(s) bulletin boards, and will include:
SITE and/or WORKSITE layout – updated satellite images, if possible
RLC Emergency Location Grids
RLC ESRP locations
RLC Street and Avenue names
Muster Point locations
SITE and/or WORKSITE road numbers and names
SITE, and WORKSITE Security Gate locations (when installed)
Numbering of Construction Areas
Medical Aid Centre location
For SITE(s) and WORKSITE(s) under CONTRACTOR permit to work control CONTRACTOR will include the same information as a minimum.
Upon hearing the alarm, personnel will stop ALL activities immediately, all equipment will be shut down and all personnel shall proceed to the muster points. The following action shall be taken at Muster Points:
Head Count (negative)
Details of missing person(s)
Standby to evacuate or stand-down
No one is permitted to re-enter the incident SITE or WORKSITE until notification has been received from Emergency Services or the Incident Commander. If any personnel are found to be missing, the Emergency Services shall be informed immediately of the person’s name, staff number, and last known location. No attempt will be made to locate missing personnel until a search is authorized by Emergency Services
No vehicles other than emergency vehicles will be driven on the SITE or WORKSITE in an emergency. In certain situations, the access gates will be “locked down” to all non-emergency vehicles. Wind direction at SITE(s) and WORKSITE(s) will be indicated by windsocks. Movement should be crosswind, followed by upwind direction, in the event of a potential gas leak.
5.1 Emergency Response Levels
PROPRIETARY CONFIDENTIAL EXHIBIT 8 31 of 40
Classification: Confidential
NFPS OFFSHORE RISER PLATFROM & INTRAFIELD PIPELINES PROJECT COMP 3 STATE OF QATAR
LTC/C/NFP/5129/20
CONTRACTOR shall implement emergency response levels in three (3) tiers. As part of the Emergency Response and Preparedness Plan, CONTRACTOR shall clearly define roles and responsibilities of all the groups involved in the emergency management within all tiers (refer to COMPANY “Tier-2 Incident Management Procedure”, with ref. no. PRT-ERP-PRC-023 for guidance).
CONTRACTOR shall carry out specific training to familiarize all groups of their roles and responsibilities. CONTRACTOR shall arrange training for the Project Incident Management Team (PIMT) in Major Emergency and Crisis Management. The PIMT shall consist of key management from COMPANY, CONTRACTOR and Subcontractor.
The major groups involved in the three (3) tiers are the Emergency Response Team (ERT), Incident Command Team (ICT); Incident Management Team (IMT); Crisis Management Team (CMT).
Tier 1 (ERT/ ICT): The response is managed by the ERT and may require support from the ICT. This is typically an emergency which is managed by SITE or WORKSITE resources with no external support.
Tier 2 (PIMT): The response is further supported by the PIMT, and this is typically an
emergency involving external resources.
Tier 3 (CMT): The response is further supported by the CMT, and this is typically major incidents/ emergencies where the COO Major Projects will intervene to support the PIMT
Note: The ICT function as per the flow-chart shall be detailed in CONTRACTOR Emergency Response and Preparedness Plans. The incident escalation process is depicted in Figure 1.
Figure 1: Incident Escalation Process (3 Tiers)
PROPRIETARY CONFIDENTIAL EXHIBIT 8 32 of 40
Classification: Confidential
NFPS OFFSHORE RISER PLATFROM & INTRAFIELD PIPELINES PROJECT COMP 3 STATE OF QATAR
LTC/C/NFP/5129/20
5.2 Emergency Instructions
CONTRACTOR shall develop Emergency Instructions as part of the Emergency Response and Preparedness Plan. The instructions shall consider:
Evacuation instructions
Muster instructions
Pre-Incident Planning & Emergency Response (PIPER)
CONTRACTOR shall develop a Pre-Incident Planning & Emergency Response (PIPER) list within ninety (90) days of EFFECTIVE DATE for COMPANY APPROVAL. The list shall be in line with SITE and WORKSITE activities and expected emergency scenarios. The list shall be updated on a regular basis together with the actual PIPERS.
CONTRACTOR shall include, but not limited to, the following scenarios that must be further developed:
Fire & Rescue
PROPRIETARY CONFIDENTIAL EXHIBIT 8 33 of 40
Classification: Confidential
NFPS OFFSHORE RISER PLATFROM & INTRAFIELD PIPELINES PROJECT COMP 3 STATE OF QATAR
LTC/C/NFP/5129/20
Chemical / Oil Spill
Toxic Gas Release
Medical Emergency
Rescue from Confined Spaces
Rescue from Height
Rescue from collapsed excavation
Rescue from water
Collapse of a structure
Rescue of persons in contact with energized electrical source
Bomb Threat
Forced Entry
Hostage or Kidnapping
Labour Unrest
Road Traffic Incident
CONTRACTOR shall provide suitable and sufficient audible alarms to address potential emergency scenario across all SITES and WORKSITES. This shall include emergencies from onsite activities and/or adjacent projects or operational activities.
CONTRACTOR shall ensure that the construction Alarms provided in all WORK areas (unless specified for exception) provide prompt notification to all affected personnel at the SITE and/or WORKSITE in the event of an emergency. The alarms will require to be initiated on command, if the situation dictates.
CONTRACTOR shall consider stand-alone gas detection systems to provide further localized alarms based on potential risks present in WORK areas.
The emergency alarms shall be tested on a weekly basis on a set day and time in order that personnel become familiar with the alarm tone and to test the audibility of the alarm signals.
All personnel shall be trained on the types and alarms and expected responses as part of SITE or WORKSITE orientation/induction program.
For personnel in areas where the alarms are not audible (e.g. inside tanks or due to high equipment noise), portable radios may be provided and an alarm announcement will be made over the radio. Alternatively, whistles may be utilized to raise the alarm.
5.3 Project Incident Management Team
PROPRIETARY CONFIDENTIAL EXHIBIT 8 34 of 40
Classification: Confidential
NFPS OFFSHORE RISER PLATFROM & INTRAFIELD PIPELINES PROJECT COMP 3 STATE OF QATAR
LTC/C/NFP/5129/20
The Project Incident Management Team (PIMT) shall be formed in case of Tier 2 emergencies where external resources are required. CONTRACTOR shall ensure that a suitable PIMT office is setup for this purpose with relevant tools, equipment and resources as required.
The PIMT members shall undergo training as described earlier and regular exercises shall be carried out to familiarize the PIMT members with their duties. The PIMT design and operational requirements shall include:
A dedicated office with a meeting room table and chairs, of sufficient size to cater for all
possible PIMT representatives
PIMT roles and responsibilities placed on the table with name cards for specific roles in the
team
Telephone communication with Project reference call and video Project reference
capabilities
Relevant boards to note down events throughout emergencies including boards for capturing
incident events; resource allocation; location drawings with grid locator/coordinates
Spare radios shall be kept in the PIMT office that must be charged on a regular basis
Relevant procedures shall be kept on file and up to date in PIMT together with up-to-date
emergency call out lists
CONTRACTOR shall define roles and responsibilities together with actions for all members of the PIMT. The PIMT shall include (as a minimum):
Incident Coordinator – CONTRACTOR
Deputy Incident Coordinator – CONTRACTOR
Relevant Management Representative – COMPANY, CONTRACTOR, Subcontractor
SHES Manager – COMPANY, CONTRACTOR
Scribe(s) – CONTRACTOR.
5.4 Muster Wardens and On-Scene Commanders
CONTRACTOR shall ensure that all SITE and WORKSITE based Muster Wardens and On-Scene Commanders are trained in their roles and responsibilities.
Muster Wardens shall be nominated from area SHES personnel. The Muster Warden responsibilities include (but not limited to):
Will have received Muster Warden training and has been designated as a Muster Warden
within his area of responsibility
On hearing the alarm or on instruction to muster they move to the Muster Point
They make and maintain communications
PROPRIETARY CONFIDENTIAL EXHIBIT 8 35 of 40
Classification: Confidential
NFPS OFFSHORE RISER PLATFROM & INTRAFIELD PIPELINES PROJECT COMP 3 STATE OF QATAR
LTC/C/NFP/5129/20
They, and other leaders, exercise firm control of the personnel at the Muster Points
Ensure that the personnel mustered orderly Identify any Injured Persons, instruct First Aiders to provide first aid, place casualties in optimum position for rapid evacuation
Keep the mustered personnel informed, display leadership and prevent disorder or panic
Organize the safe evacuation of the mustered personnel to another Muster Point or to the
Safe Havens
5.5 Muster Points
CONTRACTOR shall determine a suitable and sufficient number of Muster Point signs that will be installed at SITE(s) and WORKSITE(s) for COMPANY APPROVAL. Muster points shall be visible, meet RLC design requirements and include the relevant grid-locator reference number. Muster points will also be fitted with windsocks at reasonable elevation for visibility. It is expected CONTRACTOR shall have existing Muster Point provisions at the Topside Fabrication Facility. COMPANY May REVIEW the Layout as applicable. Offshore Marine spread shall have its own design-based Muster Points.
5.6 Emergency Drills and Exercises
CONTRACTOR shall prepare an Annual Emergency Drill and Exercise plan within ninety (90) days of EFFECTIVE DATE for COMPANY APPROVAL which will be reviewed and updated on quarterly basis. The schedule shall include the following aspects:
Annual Exercise/Drill plan
Status of exercises/drills conducted
Exercise/Drill reports
Status on Corrective Actions
Consideration for both SITE and WORKSITE
CONTRACTOR shall ensure that periodic fire, evacuation and other emergency scenario drills are conducted for all personnel. Results of emergency exercises and drills should be documented, including opportunities for improvement. Follow-up actions should be identified and addressed in a timely manner.
CONTRACTOR in coordination with COMPANY shall periodically test emergency plans and communications processes by carrying out emergency exercises. These exercises should evaluate planned responses from COMPANY, CONTRACTOR, Subcontractor and external resources such as RLC/QP. Exercises should be based on a scenario consistent with current Project activities and risk exposure. Exercises should also consider potential impacts on the construction SITE(s) and WORKSITE(s) of incidents (e.g., toxic gas release) including nearby operating facilities.
In addition, periodic exercises should be conducted on scenarios which require notification and response of the Emergency Management process addressed in the Emergency Response and Preparedness Plan.
PROPRIETARY CONFIDENTIAL EXHIBIT 8 36 of 40
Classification: Confidential
NFPS OFFSHORE RISER PLATFROM & INTRAFIELD PIPELINES PROJECT COMP 3 STATE OF QATAR
LTC/C/NFP/5129/20
Corrective actions deriving from the exercises and drills may involve revisions the Emergency Response and Preparedness Plan. Drills and Exercises may take the form of:
Seminars
Workshop(s)
Tabletops
Games
Drills
Functional Exercises
Full-Scale exercises
Each Drill or Exercise will:
Have specific defined objectives
Test the capability of people, facilities and equipment to handle the anticipated emergency
scenario
Summarize key exercise findings to share with interested groups
Notify the appropriate organizations in advance that there is a drill or exercise occurring (example RLC/QP Control Room, etc.) and notify again upon completion of the drill or exercise
6.0
REPORTING & RECORDING
This section details the requirements for security & emergency reporting, including non-compliances.
6.1 Daily Security Observations
CONTRACTOR shall ensure that security personnel maintain daily reports for all relevant guard posts. The Security Supervisor shall REVIEW the daily records and regular checks shall be done by CONTRACTOR Security & Emergency Coordinator.
6.2 Security Reporting
CONTRACTOR shall maintain relevant data related to access control, including (but not limited to):
Vehicle pass issuance records
ID badge issuance records
Vehicle & Personnel searches performed
Security related incidents and events
Emergency drills and exercises
Inspections and patrols.
PROPRIETARY CONFIDENTIAL EXHIBIT 8 37 of 40
Classification: Confidential
NFPS OFFSHORE RISER PLATFROM & INTRAFIELD PIPELINES PROJECT COMP 3 STATE OF QATAR
LTC/C/NFP/5129/20
7.0
ATTACHMENTS
Attachment 1: List of Tables & Figures
Table # Description
1 QG References 2 RLC References 2a Other References 3 Terms and definitions 4 RLC Security Threat Levels 5 RLC Port Security Threat Levels
Figure # Description
1
Incident Escalation Process (3 Tiers)
Page # 3-4 4 4 5-6 24-25 25-26
Page # 28
PROPRIETARY CONFIDENTIAL EXHIBIT 8 38 of 40
Classification: Confidential
NFPS OFFSHORE RISER PLATFROM & INTRAFIELD PIPELINES PROJECT COMP 3 STATE OF QATAR
LTC/C/NFP/5129/20
7.1 Attachment 1: PIPER Template Example
PIPER: Description of scenario, i.e. Building Fire & Rescue
List main components of scenario, i.e.
a. Fire and smoke b. Hazardous fumes c. Rescue
NOTIFICATION:
Security Operation Centre
“Contact Number”
“SECUIRTY #”
RLC Emergency Services
135
INITIAL HAZARD ASSESSMENT:
List initial potential hazards with actions as a result of scenario, i.e.
-
Check the possibility of electrical shock
-
Use confined space approach and precautions
-
Plan for poor visibility
-
Plan for lack of power
-
Is there a possibility of falling debris?
ACTION PLAN:
Each incident is unique! Actions to control the incident shall protect:
1st PEOPLE 2nd ENVIRONMENT 3rd ASSETS
List the possible sequence of actions following the emergency event, i.e.
- The witness will contact his Supervisor
- Supervisor calls emergency number and reports incident and requests assistance
- Supervisor takes the role of POSC and carries out his functions
- Supervisor calls RLC Emergency number (135), reports incident and requests RLC
assistance
- An ambulance and fire truck will be sent by RLC ECC to ESRP
- Project will initiate the Incident Information Cascade (see Cascade for detail)
- Project will dispatch the applicable medical team (site medical team) – where
appropriate
- Security Supervisor will move to ESRP and guide RLC vehicles and personnel to incident
location
PROPRIETARY CONFIDENTIAL EXHIBIT 8 39 of 40
Classification: Confidential
NFPS OFFSHORE RISER PLATFROM & INTRAFIELD PIPELINES PROJECT COMP 3 STATE OF QATAR
LTC/C/NFP/5129/20
- The POSC will act as liaison to RLC Incident Commander (IC) and provide details such as
: scope, cause of incident, action taken and resources required
- RLC ES IC will implement restriction zone and deny access to those not involved in the
emergency response.
- Determine safe entry route for responding emergency personnel and evacuation.
- Identify contingencies, such as transportation for evacuating personnel or water
supply.
- Determine if electrical isolation will be required.
- Identify any possible domino effect on adjacent facilities.
- POSC will assist with traffic and personnel control and any other tasks as requested by
RLC IC
- POSC will communicate with RLC IC and provide feedback to PIMT
CONTRACTOR shall use the above template and replace italic text with actual information based on the Project PIPER register scenarios.
PROPRIETARY CONFIDENTIAL EXHIBIT 8 40 of 40
Project: Q-32705 - Saipem COMP3 Folder: HSE