MURPHY MERAUX REFINERY

OIL U.S.A., Inc. POLICIES AND PROCEDURES

SSP-0001

Date Issued: 10-09-09

Supersedes: 02-17-09

Page 19 of 19

TITLE:

Control of Hazardous Energy (Lockout/Tagout)

SCOPE:

This procedure covers the servicing and maintenance of equipment in which unexpected energization or start-up of equipment, or release of stored energy could cause injury to employees.

PURPOSE:

This standard establishes requirements for the lockout and tag-out of equipment energy isolating devices to protect personnel from injury, in, on or around machines, equipment, piping, vessels, etc., during repair, maintenance and associated activities. It shall be used to ensure that equipment is isolated from all potentially hazardous energy sources before employees perform any servicing and/or maintenance activities where the unexpected energization, start-up or release of stored energy could cause injury.

The following practices are excluded from this procedure:

1. Normal production operations including repetitive, routine minor adjustments, filter element changes, pump screen changes where the operator is in visual sight of the Energy Isolation Device during his/her personal work, and maintenance which are covered under OSHA machine guarding standards, provided the work DOES NOT require the employee to remove or bypass a guard or other safety device; or place any part of his/her body into an area on a machine or piece of equipment where work is actually performed upon the material(s) being processed (point of operation) or where an associated danger zone exists during a machine operating cycle.

2. Work on cord and plug connected electrical equipment where the unplugging of the equipment is under the exclusive control of the employee performing the servicing or maintenance. The plug or cord connected electrical equipment is considered under the exclusive control of the employee ONLY when that employee is located with the equipment and the plugging device is immediately adjacent to that equipment. If the employee performing the servicing or maintenance leaves the equipment for any reason prior to completion, he/she shall affix a personal tag to the plug.

3. Hot tap operations when evidence shows that continuity of service is essential, shutdown is impractical and documented procedures are followed that provide proven effective protection for employees.

§

4. For work on Firewater line valves (Pratt valves) the valves shall be isolated for maintenance work by means of Tag Out only. Valves will be closed, depressured and tagged out by Qualified Employee (unit operator). Once line isolation is completed and hazardous Energy is controlled all valves will be tagged With a DANGER DO NOT OPERATE tag. Tags will be securely fastened to the energy isolating device and properly identified by the Qualified Employee. Before work is to begin, a hydrant or monitor located between isolation points will be opened to relieve all line pressure between the isolation valves. When the job is complete, tags shall be removed by qualified employee, valves opened and line pressured and returned to service.


DEFINITIONS:

AUTHORIZED EMPLOYEE: A person who implements a lockout/tagout system procedure on machines or equipment to perform the servicing or maintenance on that machine or equipment. An authorized employee and an affected employee may be the same person when the affected employee's duties also include performing maintenance or service on a machine or equipment which must be locked or a tagout system implemented. This authority will be vested in qualified employees, upon successful completion of a comprehensive training program in "Control of Hazardous Energy".

AFFECTED EMPLOYEE: An employee whose job requires him/her to operate or use a machine or equipment on which servicing or maintenance is being performed under lockout or tagout or whose job requires him/her to work in an area in which such servicing or maintenance is being performed. If such affected employee is actually performing work on, or in, the affected equipment, he or she shall be an authorized employee, authorized/required to apply a lockout device.

DEPARTMENTAL LOCKS: Each Department has been assigned colored coded locks to be used to isolate equipment during the LOTO process. The following color schemes will be assigned to:

Teal: Chief Operator/Pumper Gauger

Green: Operations

Blue: Maintenance Craftsman

Orange: HF Alky Unit

Black: Contractors

Red: Safety

ENERGY SOURCE: Any source of electrical, mechanical, hydraulic, pneumatic, chemical, thermal or other energy.

ENERGY ISOLATING DEVICE: A mechanical device that physically prevents the transmission or release of energy, including but not limited to the following:

a. A manually operated electrical circuit breaker

b. A disconnect switch

c. A manually operated switch by which the conductors of a circuit can be disconnected from all ungrounded supply conductors and, in addition, no pole can be operated independently

d. A slip blind (Refer to Maintenance Policy MPS-PF-0001)

e. Valve(Refer to Maintenance Policy MPS-PF-0001)

f. Any similar device used to block or isolate energy. The term does not include a push button, selector switch and other control circuit-type devices.

LOCKOUT: The placement of a lockout device on an energy isolating device, in accordance with an established procedure, ensuring that the energy isolating device and the equipment being controlled cannot be operated until the lockout device is removed.

LOCKOUT DEVICE: A device that utilizes a positive means such as a lock to hold an energy isolating device in the safe position and prevent the energizing of a machine or equipment.

TAGOUT: The placement of a tagout device on an energy isolating device, in accordance with an established procedure, to indicate that the energy isolating device and equipment being controlled may not be operated until the tagout device is removed.

TAGOUT DEVICE: A prominent warning device, such as a tag and a means of attachment, which can be securely fastened to an energy isolating device in accordance with an established procedure, to indicate that the energy isolating device and the equipment being controlled may not be operated until the tagout device is removed.


DRAIN/DEPRESSURE: The process that relieves stored energy, pressure or liquids that when released could cause injuries or illnesses to exposed employees.

HOT TAP: A procedure used in repair, maintenance and service activities which involves welding and drilling a piece of equipment under pressure. (Reference current MOUSA maintenance procedures for details.)

TRY: Upon completion of lockout and tagout, a deliberate attempt to energize the equipment being isolated shall be tried by all means possible (i.e., manual, DSC controlled, time delayed, etc.). Only upon attempted and failed energizing process shall the equipment be considered "Locked Out-Tagged Out and Tried".

QUALIFIED PERSON: A person who, by experience or training, has the knowledge to implement adequate methods to control and isolate hazardous energy. This definition is listed under “Authorized Employee” but is not the same.

LOCK BOX: A hinged box approved by the Safety Department equipped with a lockable clasp to prevent opening and removal of the contents when a lock is applied. All Lock Boxes shall be numbered.

a. Isolation Lock Box - the lock box used to contain the key to the isolation lock(s) used by the Authorized Employee (Equipment Owner/Operator) to lockout or tagout the Energy Isolating Devices required for the specific job to be performed. These lock boxes will normally be kept in control rooms.

b. Craft Lock Box - the lock box used to contain the key to the craft lock when used by the lead worker for the craft to ensure security of the isolation lock box. This lock box may be kept in a location convenient for the craft group.


TRAINING:

Each authorized and affected employee shall be instructed in the purpose and use of the "Control of Hazardous Energy" procedure.

The Safety Department shall be responsible for:

1. Initial training.

§ 2. Annual training

3. Additional training if there is a change in the energy control procedures.

Departmental supervision shall be responsible for retraining in the following situations:

1. A change in job assignments.

2. A change in machines.

3. A change in equipment or process that present a new hazard.

4. When a periodic inspection reveals, or Murphy Oil has reason to believe that there are deviations from or inadequacies in the employee's knowledge or use of the energy control procedures.

PERIODIC INSPECTIONS:

Maintenance Supervisors, Operations Area and Shift Supervisors, Chief Operators and Safety Supervisory personnel shall conduct annual audits on SSP-0001 to assure the effectiveness of this policy. The Joint (Union/Company) Health and Safety Committee will conduct monthly audits on SSP-0001, LOTO. Results of these audits will be posted on the refinery intranet. A periodic review of these audits will be conducted by the Safety Department.


LOCKOUT/TAGOUT SYSTEM

1. All personnel (MOUSA and contractor) shall comply with the provision of the lockout/tagout system.

2. Supervision must enforce the use of personnel locks/tags to insure protection when personnel are performing tasks where exposure to unexpected energization may occur.

3. Locks and tags shall not be used for any purpose other than personal protection, LOTO.

4. Where equipment is lockable, use of a lock is required by all exposed personnel.

5. Where equipment is not lockable, tagout application shall be utilized.

6. The lockout/tagout of electrical energy sources shall occur at the circuit disconnect switch.

GENERAL PROCEDURE FOR EQUIPMENT SHUTDOWN:

1. Affected employees shall be notified of the application of lockout devices.

2. The Chief Operator/Pumper Gauger, Chief Operator, shall survey and identify all energy sources that must be isolated before the equipment can be serviced.

3. The qualified employee (Unit Operator) shall shutdown the equipment in accordance with standard shutdown procedures. Lockout each energy source with an operation's department lock and attach a "DANGER - DO NOT OPERATE" tag at each lockout point. The attached tag will be identified with the name of the employee that applied the tag and dated. Lockout devices shall hold the energy isolating devices in a "Safe" or "Off" position.

The equipment isolation description shall be recorded on the lockout/tagout log sheet.

4. All potentially hazardous stored or residual energy shall be relieved, disconnected, restrained and otherwise rendered safe.

5. Once the equipment is shut down and the hazardous energy has been controlled, the authorized operations personnel, together with Maintenance/Contractor/Servicing personnel, shall verify that the isolation of the equipment is effective by attempting to start the locked out equipment. If the equipment does not start then the lockout is complete.

Note: Maintenance/Contractor/Servicing Craftsman shall verify, with Unit Operator, that all LOTO isolation points have been secured and sign Equipment Isolation Log form.

If the equipment DOES START, then all energy sources and lockouts must be rechecked.

No work may be performed on the equipment until a successful lockout has been confirmed.

Controls must be deactivated or returned to the neutral mode after the test.

6. The Qualified Employee (Unit Operator) will place the key/keys to the Isolation Lock(s) for the energy isolation devices into the Isolation Lock Box.

7. The Chief Operator/Pumper Gauger, shall verify all LOTO energy sources/points have been isolated and secured then sign the Equipment Isolation Log.


8. The Chief Operator/Pumper Gauger shall then affix the Custody Lock, "FIRST ON/LAST OFF" to the Isolation Lock Box to ensure control of the contents. This lock must remain affixed to the Isolation Lock Box at all times until completion of the job. The Chief Operator/Pumper Gauger, or designated Qualified Person, shall transfer custody of the Isolation Lock Box key to the subsequent designated Chief Operators/Pumper Gauger. The custody transfer shall take place by transferring the key to the "FIRST ON/LAST OFF" custody lock to the designated chief operator for the subsequent shift. The key to the custody lock shall be kept in the control of the Chief/Operator Pumper Gauger on the Area Peg Boards.

NOTE: Maintenance task or activities only requiring minimal LOTO can be performed in the field at the task site, without utilizing Lock Boxes. LOTO at field locations will require the operator to apply a “FIRST ON/LAST OFF” tag. Task involving multiple crafts/contractors and craftsmen will utilize LOCK BOXES.

9. All Murphy employees and contractors actually performing work on, or in, the equipment shall be "authorized employees" and shall attach their personal lock to the lock box in order to ensure that the keys to the Operations Department's lockout devices are not available until all work is completed.

NOTE: Contractors shall apply a "CONTRACTOR LOCK APPLIED" tag with their personal lock.

10. Closed valves will not be depended on for isolation purposes when a confined space entry permit is required or if the equipment is to be left open and unattended. Blinds will be placed in flange joints as closely as possible to the vessel or equipment. See SSP-0015, "Confined Space Entry" procedures.

11. The following information shall be recorded on the lockout/tagout permit sheet: (See attachment 1)

a. Name of the individual initiating the lockout

b. Date

c. Time

d. Area

e. Unit

f. Lockbox number

g. Equipment name and number

h. Job description

i. Equipment isolation description,

j. Signatures of both the Unit and Chief Operator

k. Date the job was completed and the name of the individual terminating the lockout.

All Murphy Maintenance and Contractor Craftsman applying or removing a personal lock from the lock box shall record the following information on the lockout/tagout log sheet:

a. Date

b. Department or company name

c. Name of the individual applying the lock

d. Time the lock was applied

e. Time the lock was removed

f. Indicate "Yes" or "N/A" for group lockout, and

g. Indicate "Yes" or "N/A" for work not completed tag.

All completed log sheets shall be forwarded to the Area Supervisor.

SHIFT CHANGE:

When an "Authorized" Craftsman is temporarily called off the project or still has work remaining at the end of a shift, he or she shall remove their personal lock and tag from the lock box and replace it with a tag labeled "WORK NOT COMPLETED". Upon returning to the project, the employee shall replace the "WORK NOT COMPLETED" tag with their personal lock and resume work on the equipment.

All locks attached and removed must be recorded on the lockout/tagout log sheet.

NOTE: The lock that is tagged "FIRST ON/LAST OFF" must never be removed if any personal locks or "WORK NOT COMPLETED" tags are attached to the lock box.

LOCKOUT REMOVAL:

1. Each Murphy and contractor employee working on, or in, the equipment shall remove their personal lock from the lock box and inform the authorized employee (chief operator/Pumper Gauger, or designated Qualified Person), when their work has been completed on the locked out equipment.

2. When all of the personal locks and "WORK NOT COMPLETED" tags have been removed from the lock box, the chief operator/Pumper Gauger shall open the lock box by removing the "FIRST ON/LAST OFF" lock. The chief operator can then retrieve the keys to the Operations Department's lock(s).