Compliance

Job Safety Analysis on Oilfield Locations: How to Write One That Gets Used

A job safety analysis, or JSA, turns a work task into a list of steps, the hazards in each step, and the controls that keep people out of harm's way. Crews do it before anyone picks up a tool. Done well, it catches small missteps before they become incidents. Done badly, it is a clipboard ritual everyone signs and no one reads. Here is the JSA workflow crews actually use.

What a JSA is, and what it is not

A JSA breaks a job into its basic steps, identifies the hazards tied to each step, and sets a control for every hazard. The output is a written record that the crew agrees to before work starts.

It helps to be precise about what a JSA is not. There is no single OSHA standard that says "fill out a JSA on this form." OSHA and NIOSH guidance for oil and gas well drilling and servicing treats identifying and controlling hazards as a recommended practice. A JSA is one practical way to apply it, and most operators and service companies treat it as a requirement on location.

The core workflow: break, list, control

The JSA method has three parts, always in this order.

• Break the job into steps. Write the task as a sequence of actions, from rig-up to rig-down. Keep each step short enough that one set of hazards applies.
• List the hazards in each step. Pressure, moving parts, pinch points, dropped objects, slips and trips, hot surfaces, flammable gas, weather. Name what can hurt someone in that step.
• Set a control for each hazard. Controls can be engineered (guards, lockout, rated equipment), administrative (procedure, training, communication), or protective (gloves, goggles, breathing protection). If a step has no workable control, the job does not start until it does.

The crew does this together, at the location, before the work begins. The person doing the step should be the one naming the hazards.

Who writes it, and when

A JSA is written by whoever leads the work, usually a supervisor or crew lead, and reviewed with the whole crew. It is not a one-person document.

Write a fresh JSA, or update the existing one, when:

• The work is new, or the crew has not done it on this location before.
• The work is high-risk: pressure, lifting, hot work, confined space, working at height.
• The work is non-routine, outside the normal daily plan.
• The crew has changed. A new hand on the job changes the risk picture.
• Something changed: different equipment, different well conditions, different weather.

When conditions change mid-job, the JSA is revised on the spot. The crew stops work until the change is agreed.

Worked example: replacing a wellhead gauge

Take a routine job: replacing a pressure gauge on a wellhead. Five steps.

• Step 1, identify the gauge and confirm the well is shut in. Hazard: wrong valve, trapped pressure. Control: confirm isolation and bleed the line to zero before tools go on.
• Step 2, isolate and bleed the line. Hazard: trapped pressure, gas release. Control: close and lock the isolation valve, bleed through the vent, watch for pressure build-back.
• Step 3, remove the old gauge. Hazard: residual pressure, thread damage, dropped tool. Control: back it off slowly, stand clear of the port, use the right wrench size.
• Step 4, install the new gauge. Hazard: cross-threading, seal failure. Control: check the thread, apply thread sealant, torque to spec.
• Step 5, restore the well and confirm no leaks. Hazard: leak at the new fitting. Control: repressurize slowly, check the connection, watch for signs of gas.

Five steps, five hazard lists, five controls, all on one page. Written with the crew it takes ten minutes, and the thinking is where the value is.

Common failures that make JSAs useless

The JSA fails when it becomes paperwork:

• Copy-paste files. The same JSA gets reused for months and stops matching the actual job.
• Supervisor-only writing. When the crew does not contribute, they do not own the analysis, and they will not follow it.
• No crew sign-off. Without signatures there is no accountability and no record the crew reviewed the hazards.
• Generic hazard lists. "Be careful" is not a control. Every hazard needs a specific action.
• Writing it after the job. A JSA filled in at the end of the day protects no one.

The test of a good JSA is simple: would a new crew member know what to do from the paper alone?

Where the JSA meets permit to work

A JSA and a permit to work are different documents, but they work together. The permit authorizes the work and sets its boundaries: what, where, when, and under what conditions. The JSA is the hazard analysis for how the work gets done. High-risk tasks such as hot work and confined space entry normally need both. See permit to work systems on oil and gas sites, hot work and welding permits, and confined space entry in tank batteries.

Keeping records

The JSA belongs in the job file. If something goes wrong, the record shows what the crew planned, knew, and agreed to. That record is how an incident gets investigated and how a lesson gets shared.

Note the difference between a JSA and an injury record. Recording and reporting occupational injuries and illnesses is governed by OSHA 29 CFR 1904, which sets the rules for what gets recorded and reported. A JSA is not that kind of record. It is a planning document, and the operator or employer decides how long to keep it, usually as part of the job file.

File the signed JSA with the ticket so the record travels with the job. OpsFlo is software that tracks field tickets, dispatch, approvals, timesheets and documents for oilfield service companies, so the JSA, the permit and the ticket stay in one place.

Digital JSAs on tablets in the field

Paper JSAs get wet, lost, or left in the truck. A digital JSA on a tablet solves the practical problems: the form is always the current version, the crew signs on screen, and the completed analysis uploads to the job file the moment it is done.

Digital does not change the method. The crew still walks the job, names the steps, and agrees the hazards. What changes: the JSA stops being paper that can disappear and becomes a record that is hard to lose.

Sources and further reading

• OSHA 29 CFR 1904: Recording and reporting occupational injuries and illnesses
• OSHA/NIOSH: Oil and Gas Well Drilling and Servicing eTool and guidance (OSHA 3820)