SEMS on the OCS: What a BSEE Safety Management System Audit Checks
On the Outer Continental Shelf, safety is not a set of good intentions. It is a management system with a name: SEMS, the Safety and Environmental Management System. The system belongs to the operator, but it reaches down to every contractor on the platform. The contractor's paperwork sits in the same audit pile as the operator's, and every worker's right to stop unsafe work comes from SEMS rules. If you take work offshore, you work inside this system whether or not you have seen the documents. Here is what SEMS covers and what an audit actually checks.
Keep in mind: SEMS rules do not care whether you have read them. They care whether the work on the platform matches the written system. An audit finds the gap, not the excuse.
What SEMS is and why it exists
SEMS stands for Safety and Environmental Management System. BSEE, the Bureau of Safety and Environmental Enforcement, requires it for oil and gas operations on the OCS under 30 CFR 250 Subpart S. That is a regulation, not a guideline. Operating on the shelf means having a SEMS that meets Subpart S, and being able to prove it.
The system took its current shape after the Macondo loss of well control. That event showed that a company could carry good safety documents and still fail at safety. So the rules were written to make management systems auditable and to push safety authority down to the people doing the work. The SEMS II rule added stop work authority, ultimate work authority, and employee participation to the system.
The elements a SEMS is expected to cover
BSEE expects a SEMS to cover the full life of an operation. The elements are spelled out in the regulation, and an auditor checks them one by one:
- Hazards analysis: identifying what can go wrong and what the safeguards are.
- Management of change: reviewing any change to equipment, procedures, or personnel before the change happens.
- Operating procedures and safe work practices: the written steps for doing the job and for doing it safely.
- Training: making sure the people on the platform know how to do the work they are assigned.
- Mechanical integrity and quality assurance: keeping equipment fit for service and making sure what you bought meets the spec it claims.
- Pre-startup review: checking a facility or a major change before it begins operation.
- Emergency response and control: knowing what to do when something goes wrong.
- Incident investigation: finding the cause after an event, not just assigning blame.
- Audits: checking the system against the regulation on a schedule.
- Records and documentation: keeping the evidence that the system is real.
Two of these deserve special attention on the platform. Stop work authority gives any worker the right, and the duty, to stop work they believe is unsafe. It does not require a vote or a supervisor's permission. Ultimate work authority names the person on site with final authority over safety, and the crew is supposed to know who that person is.
What the audit actually checks
The operator's SEMS is audited by an accredited third-party auditor. The operator selects the auditor within the rules BSEE sets, and the audit report goes to BSEE. The auditor's job is not to admire the manual. It is to find out whether the written system is real on the platform.
That means comparing documents to work. Do the procedures match the job being done today? Do the training records match the crew on shift? Did recent changes go through management of change, or did someone swap the equipment and tell nobody? Are the hazards analyses current, or are they from a job that ended years ago? The auditor walks the deck, pulls files, and talks to workers. A document that looks fine in the office falls apart fast when nobody on the crew has seen it.
Findings come back with corrective actions attached. The operator answers for them to BSEE and closes them out on a schedule. BSEE also runs its own inspections apart from the audit cycle, and BSEE can stop work when it finds conditions that put people or the environment at risk.
What the contractor faces on the platform
A service company on an OCS platform works inside the operator's SEMS. That is not optional, and it is not separate. The contractor's people take part in hazards analyses and in drills. The contractor's procedures get reviewed against the operator's. Training records get checked. And the contractor's crew members carry stop work authority like everyone else on the platform. If a hand from a small service firm stops a job, the operator's system is supposed to back that call.
Contractors who run their own safety management system find the audit easier. Their paperwork already exists, and it lines up with the operator's. Contractors without one feel the operator's system asking questions their paperwork cannot answer. The operator's plan expects contractor procedures, training proof, and hazard records to exist. If they do not, the gap shows up in the audit, and the operator feels it too.
Two documents matter most on a service job. The emergency response plan tells the auditor what the crew does when things go wrong, and the third party rig inspections records tell the auditor whether the equipment has actually been checked. An auditor reads those two first.
On the OCS, the record is the operation. SEMS exists so that what is written and what is done are the same thing. The contractor whose paperwork matches its work is the contractor that stays invited.
Sources
A SEMS audit reads the record first and the facility second.
Keep operating procedures, training records, MOC documents and audit evidence in OpsFlo, the ticket, dispatch, timesheet, approvals and document software built for field crews, so the paperwork matches the work.
Book a session