A safety case in oil and gas is a structured document showing how major accident risks are identified, controlled, and reduced to an acceptable level. It explains the facility, hazards, safety systems, emergency arrangements, workforce involvement, and management measures used to protect people and the environment.
Oil and gas operations involve complex equipment, high pressures, flammable substances, hazardous chemicals, and challenging working environments. A single failure involving a well, pipeline, process vessel, structure, or control system can lead to a serious fire, explosion, gas release, environmental incident, or loss of life.
For this reason, operators cannot rely on basic safety checklists or general promises that a facility is safe. They need to demonstrate, using evidence, that they understand the major hazards associated with their operation and have effective systems in place to control them.
This demonstration is known as a safety case.
A safety case brings together technical studies, risk assessments, operating procedures, emergency arrangements, maintenance systems, workforce responsibilities, and evidence of independent verification. It explains not only what safety measures exist but also why those measures are suitable for the installation and how they will remain effective throughout its operating life.
In the UK offshore oil and gas sector, safety case legislation is intended to reduce major accident risks to the health and safety of people working on offshore installations and in connected activities.
What Is a Safety Case in Oil and Gas?
A safety case is a formal, evidence-based document that explains how an oil and gas operator or installation owner will manage major accident hazards.
It describes the facility, the activities carried out there, the dangerous substances involved, the major hazards that could arise, and the control measures used to prevent or limit serious incidents.
A safety case should demonstrate that:
- Major hazards have been properly identified
- Risks have been carefully assessed
- Suitable safety measures are in place
- Safety-critical equipment can perform its required function
- Workers have appropriate competence and training
- Emergency response arrangements are practical
- Management systems support safe operations
- Risks are reviewed as equipment and conditions change
The safety case is not merely a historical record of how the facility was designed. It is meant to remain connected to real operations, maintenance decisions, emergency planning, staffing, and future modifications.
In UK external waters, the Offshore Installations (Offshore Safety Directive) (Safety Case etc.) Regulations 2015 apply to relevant oil and gas operations. Separate 2005 regulations continue to cover activities in internal waters such as estuaries.
Why Is a Safety Case Important?
A safety case is important because oil and gas installations can create consequences far beyond an individual workplace injury.
A major accident may affect many workers at once, damage essential safety systems, interrupt energy production, cause environmental pollution, and make evacuation or rescue extremely difficult.
The safety case requires those responsible for an installation to examine these risks before an emergency occurs.
It creates a structured answer to several fundamental questions:
- What could go seriously wrong?
- How likely is each event?
- What could cause the event?
- Who or what could be affected?
- Which systems prevent the event?
- Which systems reduce the consequences?
- How will people escape or be rescued?
- How will safety measures be tested and maintained?
- Who is responsible for each safety activity?
A strong safety case also helps prevent safety arrangements from becoming fragmented. Engineering teams, managers, contractors, maintenance personnel, emergency responders, and offshore workers all need to understand how their decisions affect major hazard control.
Is a Safety Case the Same as a Risk Assessment?
A safety case includes risk assessment, but the two are not identical.
A risk assessment usually examines a particular activity, hazard, item of equipment, or work process. For example, a company may complete separate risk assessments for lifting operations, confined spaces, chemical exposure, hot work, or maintenance activities.
A safety case has a broader purpose. It presents an overall demonstration that the installation’s major accident risks are being managed effectively.
It combines multiple risk assessments with:
- Facility descriptions
- Safety management arrangements
- Technical evidence
- Emergency plans
- Performance standards
- Verification systems
- Workforce involvement
- Maintenance arrangements
- Organisational responsibilities
- Lifecycle planning
A risk assessment may therefore be one piece of evidence within a much larger safety case.
What Is a Major Accident Hazard?
A major accident hazard is a situation that could lead to severe consequences involving multiple people, extensive damage, or serious environmental harm.
In oil and gas operations, major accident hazards may include:
- An uncontrolled release of oil or gas
- A well blowout
- A large fire
- A vapour cloud explosion
- Structural collapse
- Loss of stability
- A major collision
- Failure of a pressure system
- Failure of evacuation equipment
- Loss of the temporary refuge
- A serious pipeline rupture
- Release of toxic or asphyxiating gas
HSE guidance recognises well blowouts as major accident hazards because uncontrolled hydrocarbons can result in major fires and explosions.
A safety case must consider not only the initial event but also how it could escalate. For example, a small gas leak may become much more serious if detection fails, ignition occurs, fire protection is unavailable, or workers cannot reach a safe area.
Who Is Responsible for Preparing a Safety Case?
The exact dutyholder depends on the type of installation and operation.
Responsibilities may fall to:
- The operator of a production installation
- The owner of a non-production installation
- The licensee
- The well operator
- Organisations responsible for particular offshore activities
HSE guidance on the 2015 regulations is directed at licensees, production installation operators, non-production installation owners, and well operators with relevant duties.
Although specialist engineers and consultants may help prepare technical sections, the responsible organisation cannot simply hand over ownership of the safety case.
Senior management must understand the main hazards, support the necessary controls, provide suitable resources, and ensure that the arrangements described in the document are implemented in practice.
What Does an Oil and Gas Safety Case Contain?
The exact content depends on the installation, its lifecycle stage, its location, and the operations being carried out. However, most safety cases cover several essential areas.
Description of the Installation
The safety case normally explains what the installation is, where it is located, what it produces, and how its major systems operate.
This section may describe:
- Production equipment
- Drilling systems
- Oil and gas processing equipment
- Pipelines and risers
- Storage systems
- Electrical generation
- Living accommodation
- Control rooms
- Temporary refuges
- Helidecks
- Lifeboats and evacuation equipment
- Fire and gas detection
- Emergency shutdown systems
The purpose is to give readers enough information to understand how the installation functions and where major hazards may arise.
Major Hazard Identification
The operator must identify events that could develop into major accidents.
This process may involve hazard identification workshops, historical incident reviews, engineering studies, bow-tie analysis, fault-tree analysis, consequence modelling, and examination of credible failure scenarios.
Hazards should be considered during:
- Normal production
- Drilling
- Well intervention
- Maintenance
- Start-up and shutdown
- Construction
- Modification
- Decommissioning
- Severe weather
- Simultaneous operations
The analysis should also consider human error, organisational weaknesses, equipment deterioration, software failures, and external events.
Risk Assessment
Once major hazards have been identified, the operator must assess their likelihood and possible consequences.
Risk assessment may examine:
- How frequently an event could occur
- The volume of oil or gas that could be released
- The speed at which an event could escalate
- The number of people potentially exposed
- The effect on escape routes
- The effect on safety-critical systems
- The availability of emergency support
- The impact of weather and sea conditions
The aim is not to claim that risk has disappeared. Oil and gas activities cannot be made completely risk-free. Instead, the safety case should show that risks have been reduced through suitable prevention, detection, control, and emergency measures.
Safety Management System
A safety management system explains how the organisation controls safety through everyday decisions and activities.
Important elements may include:
- Leadership and accountability
- Roles and responsibilities
- Employee competence
- Contractor management
- Permit-to-work arrangements
- Management of change
- Maintenance planning
- Incident reporting
- Emergency exercises
- Auditing
- Performance monitoring
- Communication
- Learning from failures
HSE identifies work control, supervision, competence, and effective safety leadership as important elements of an offshore safety management system.
A technically sound facility can still become unsafe if maintenance is neglected, procedures are unclear, staffing is inadequate, or commercial pressure overrides safe decision-making.
Safety-Critical Elements
Safety-critical elements are parts of an installation whose failure could cause or contribute substantially to a major accident, or whose purpose is to prevent or limit the effects of one.
Examples may include:
- Emergency shutdown valves
- Fire and gas detection systems
- Blowout preventers
- Pressure-relief systems
- Fire pumps
- Deluge systems
- Structural supports
- Temporary refuge systems
- Lifeboats
- Escape routes
- Emergency communications
- Well-control equipment
The safety case should identify these elements and explain the standards they must meet.
Dutyholders must ensure that safety-critical elements and specified emergency-response plant are initially suitable and remain suitable throughout the life of the installation.
Performance Standards
Performance standards define what a safety-critical element must achieve.
A useful performance standard may address:
- Functionality
- Availability
- Reliability
- Survivability
- Response time
- Capacity
- Maintenance requirements
- Testing frequency
For example, stating that an installation has a fire detection system is not enough. The safety case should define how quickly the system must detect a fire, which areas it must cover, how alarms are communicated, and whether it can continue operating during an emergency.
Clear performance standards make it possible to inspect, test, and verify that protective systems remain effective.
Independent Verification
Independent verification provides additional assurance that safety-critical systems are suitable and remain capable of performing their required functions.
The independent competent person should have appropriate knowledge, experience, authority, and freedom from operational pressure.
Verification may include:
- Reviewing design documents
- Examining equipment
- Witnessing tests
- Checking maintenance records
- Reviewing repairs
- Inspecting modifications
- Identifying non-compliance
- Following up unresolved findings
UK dutyholders are required to keep a verification scheme under continual review and obtain assurance from an independent competent person regarding safety-critical elements and specified plant.
Fire and Explosion Protection
Oil and gas installations must be prepared for fires, explosions, and releases of hazardous substances.
The safety case may describe:
- Gas detection
- Fire detection
- Ignition control
- Emergency shutdown
- Isolation and blowdown
- Fire-resistant structures
- Active firefighting systems
- Passive fire protection
- Smoke control
- Temporary refuge protection
HSE’s offshore emergency guidance covers fire and explosion prevention as well as escape, evacuation, rescue, and recovery arrangements.
The systems should work together. Detecting a gas release is of limited value if isolation valves fail, alarms cannot be heard, or workers do not know how to respond.
Emergency Response Arrangements
A safety case must consider what happens when preventive measures do not stop an incident.
Emergency planning may cover:
- Raising alarms
- Stopping production
- Isolating hazardous equipment
- Muster procedures
- Protecting the temporary refuge
- Evacuating workers
- Launching survival craft
- Helicopter restrictions
- Marine rescue
- Medical treatment
- Communication with shore
- Coordination with emergency services
Emergency plans should be realistic. They must consider poor weather, smoke, damaged escape routes, power loss, injured workers, and reduced access to lifeboats or helicopters.
Regular exercises help confirm whether arrangements that appear effective on paper will actually work under pressure.
Workforce Involvement
The people who operate and maintain an installation often understand practical risks that may not be obvious from drawings or technical calculations.
Workers can contribute by identifying:
- Difficult-to-follow procedures
- Inaccessible equipment
- Frequent alarm problems
- Maintenance weaknesses
- Unsafe workarounds
- Conflicting instructions
- Poorly positioned escape equipment
- Communication failures
Workforce consultation makes the safety case more realistic and helps employees understand how their roles support major hazard control.
A safety case should not remain locked inside a technical department. Its main findings must be communicated in a way that workers and contractors can understand.
Environmental Emergency Planning
A major offshore accident can affect the sea, coastal areas, wildlife, fisheries, and nearby communities.
Environmental arrangements may therefore include:
- Spill detection
- Oil pollution response
- Containment equipment
- Emergency notification
- Shoreline protection
- Waste management
- Monitoring
- Coordination with environmental authorities
In the UK, the Offshore Major Accident Regulator brings HSE and the Offshore Petroleum Regulator for Environment and Decommissioning together to regulate offshore major accident hazards and related safety and environmental responsibilities.
How Is a Safety Case Assessed?
Preparing a safety case does not automatically mean it will be accepted.
The relevant regulator examines whether the submission provides an adequate demonstration that major hazards are being controlled.
The assessment may consider:
- Whether required information is included
- Whether hazard studies are suitable
- Whether assumptions are reasonable
- Whether safety-critical systems are identified
- Whether performance standards are measurable
- Whether emergency arrangements are credible
- Whether the management system supports safe operation
- Whether environmental risks are properly addressed
In the UK offshore sector, OMAR’s functions include assessing and accepting relevant safety cases, inspecting operations, reviewing notifications, planning interventions, and investigating incidents.
Regulatory acceptance does not transfer responsibility from the operator to the regulator. The operator remains responsible for managing the risks and implementing the commitments made in the safety case.
Does an Accepted Safety Case Mean the Installation Is Completely Safe?
No industrial facility can be guaranteed to be completely free from risk.
Acceptance generally means that the regulator considers the safety case to provide an adequate demonstration under the relevant legal framework. It does not mean that failures are impossible or that the operator can stop improving safety.
Conditions can change because of:
- Ageing equipment
- Corrosion
- New wells
- Changed production
- Different fluids
- New contractors
- Staffing changes
- Updated technology
- Structural modifications
- New scientific knowledge
The safety case must therefore operate as a living system rather than a framed certificate gathering dust in an office.
When Must a Safety Case Be Updated?
A safety case should be reviewed whenever important changes may affect major accident risk.
Examples include:
- Installation modifications
- New production equipment
- Major well operations
- Changes to operating limits
- New substances or processes
- Changes in emergency arrangements
- Organisational restructuring
- Extended operating life
- Decommissioning activities
- Significant findings from incidents
- New information about hazards
Material changes may require regulatory review or acceptance before they are introduced.
Even when no major modification occurs, periodic reviews are necessary to confirm that risk assessments, equipment standards, emergency arrangements, and management systems remain valid.
The Role of Maintenance in a Safety Case
Maintenance is central to major hazard control.
Safety equipment may look adequate during design, but its reliability can deteriorate because of corrosion, vibration, fatigue, contamination, weather exposure, or poor servicing.
Maintenance arrangements should therefore consider:
- Inspection intervals
- Testing requirements
- Defect reporting
- Spare parts
- Repair priorities
- Temporary equipment
- Backlogs
- Equipment isolation
- Ageing and obsolescence
Structural integrity must also be maintained throughout an installation’s lifecycle through suitable inspection, analysis, repair, and management arrangements.
A safety case loses credibility when the systems described in it are not maintained in the real facility.
What Is the Difference Between a Safety Case and a Safety Plan?
A safety plan usually describes how specific work will be carried out safely. It may cover responsibilities, training, protective equipment, inspection arrangements, and emergency steps for a project or activity.
A safety case is broader and more evidence-driven.
It demonstrates how major accident hazards are controlled across an installation or operation. It also explains why the selected controls are appropriate and how their effectiveness will be maintained.
A safety plan may support the safety case, but it does not replace it.
What Are Common Weaknesses in Safety Cases?
A safety case may become ineffective when it is treated mainly as a regulatory paperwork exercise.
Common weaknesses include:
- Generic hazard descriptions
- Outdated equipment information
- Unclear responsibilities
- Weak workforce consultation
- Poorly defined performance standards
- Unsupported assumptions
- Incomplete emergency scenarios
- Maintenance backlogs
- Unresolved verification findings
- Failure to reflect operational changes
- Limited communication with workers
Another common problem is the gap between documented procedures and actual practice.
A safety case may describe excellent control measures, but those measures provide little protection if workers lack time, training, resources, supervision, or authority to follow them.
Benefits of an Effective Safety Case
An effective safety case provides benefits beyond legal compliance.
It can help an organisation:
- Understand its most serious hazards
- Prioritise safety investment
- Improve maintenance decisions
- Strengthen emergency preparedness
- Clarify management accountability
- Support workforce training
- Identify gaps before an incident occurs
- Manage changes more safely
- Reduce operational disruption
- Protect reputation and business continuity
It also provides a shared reference point for engineers, managers, regulators, contractors, and workers.
Within the wider energy supply chain, companies such as 123 Oil depend on safe, reliable production, storage, and distribution systems to support consistent fuel availability for customers.
Conclusion
A safety case in oil and gas is a structured, evidence-based demonstration of how major accident hazards are identified, assessed, controlled, and continually managed.
It describes the facility, its hazards, safety management arrangements, safety-critical equipment, performance standards, verification processes, emergency plans, and workforce responsibilities.
The document must reflect what happens in real operations. It should influence maintenance, training, modification, leadership, emergency exercises, and everyday decision-making.
A safety case cannot remove every risk from oil and gas operations. However, it creates a disciplined framework for understanding serious hazards and preventing individual failures from developing into catastrophic events.
Frequently Asked Questions
The main purpose is to demonstrate that major accident hazards have been identified and that suitable technical, operational, and organisational measures are in place to control the risks.
The responsible installation operator, owner, licensee, or well operator prepares the safety case. Engineers and consultants may provide support, but legal and operational responsibility remains with the relevant dutyholder.
A safety case normally includes a description of the installation, major hazard assessments, safety management systems, emergency arrangements, safety-critical elements, performance standards, and verification measures.
Relevant offshore installations must have an accepted safety case under the applicable regulatory framework before certain operations can begin. Requirements depend on the installation, activity, and location.
It should be reviewed periodically and whenever material changes, incidents, new hazards, ageing equipment, modifications, or organisational changes could affect major accident risk.
A safety-critical element is equipment or a system whose failure could cause or contribute substantially to a major accident, or whose purpose is to prevent or limit its consequences.
No. An emergency response plan is one part of a safety case. The complete safety case also covers hazard identification, risk assessment, management systems, prevention measures, verification, maintenance, and workforce involvement.