Surface BOP Shut-In Protocols (Drilling, Tripping, Wireline/Out of Hole)
Key Takeaways
Use the posted shut-in procedure and current stack/string space-out reference.
Tripping requires a compatible internal barrier as well as annular closure.
Empty-hole sealing capability is model-specific, with the designated rated device used.
Verify containment and preserve barriers when connecting a pressure-reading route.
Prepare for the actual operation
The surface shut-in procedure must fit drilling, tripping, an empty hole or another operation. Before starting, verify the stack configuration, space-out reference, pressure ratings, internal valves, choke route and pressure-monitoring path. Know which element can seal the tubular currently in the stack. A pipe ram fitted for one diameter cannot be credited with sealing another, and a tool joint above the rotary table does not alone establish the position of joints across all BOP cavities.
The following duties explain the hard shut-in principle. The exact control order is taken from the posted procedure and the assessment instructions. For shallow gas where containment is unsuitable, use the approved diverter response instead. The objective is to limit influx while establishing and verifying the whole pressure envelope.
Drilling on bottom
Recognise the unexplained gain, increased returns or other influx indication, suspend drilling and communicate or alarm as instructed. Stop rotation before positioning the string. Pick up and space out from the verified stack reference so the selected element is on qualified pipe body. Stop pumps as directed, avoiding an unnecessary extended flow check when an influx is already evident. Close the designated annular or ram and operate the required side-outlet route against the prepared closed choke.
Check the selected function, panel and hydraulic response, well flow and pressure-monitoring route. Observe for external leakage and continued unplanned flow. If containment is not achieved, activate the planned second barrier. Record the operation, depth, density, pit gain and pressure trends and hand over to the supervisor. Do not substitute an estimated stabilisation time for observed valid readings.
Tripping with the string in the hole
Stop movement and secure the string using the appropriate handling arrangement. Use the prepared internal safety valve compatible with the connection and pressure duty. Where a manual full-opening valve is used, it is prepared open for installation, made up and closed under the instructed procedure. Flow through it during installation is a hazard to manage, not harmless spill. If pressure or flow prevents safe manual installation, use the preplanned alternative.
Close the designated annular or ram on a qualified section, establish the intended choke/gauge route and verify containment. The inside and annulus are separate flow paths, so both must be addressed. A float valve may limit internal backflow but does not prevent an annular influx or prove that the displayed pressure above it is valid SIDPP.
To obtain drillpipe pressure later, connect a verified pressure-rated route as instructed. Reopening the internal safety valve is a controlled barrier transfer requiring known pressure and valve status above it. Do not open it simply to “get a reading” into an unverified assembly. Preserve the internal barrier until the alternative containment route is demonstrated.
String completely out of the hole
Use the designated device qualified to seal the empty bore, normally the applicable blind or blind/shear ram arrangement. Some annular models have complete-shutoff capability, with manufacturer-specific pressure and element limits, so “an annular can never seal an empty hole” is incorrect. The installed procedure determines the element used, including its verification and alternative.
There is no drillstring pressure reference if no string is in the well. Record casing pressure, fluid profile and volume information. The subsequent plan may require volumetric control, controlled re-entry or another supervised method. Running pipe rapidly into a flowing well is not a substitute for containment. A string re-entry plan needs suitable barriers and a qualified stripping arrangement.
Other assemblies and wireline
Casing, cementing and wireline have operation-specific procedures because their internal routes and sealing dimensions differ. Wireline uses suitable pressure-control equipment; conventional annular and shear capability must be verified for the actual cable and tools. Do not delay containment by pulling a tool toward surface on an unsupported assumption. Cutting a cable and sealing the well are separate capabilities, and a non-shearable tool across the ram can prevent the intended emergency closure.
For a completion assembly, identify non-sealable and non-shearable items before movement, the flow-check requirement and the assured closure method. The same principle applies to a liner running tool or tubing accessory. The complete procedure must remain usable as the assembly changes position.
Monitoring and handover
After closure, record pressures at the procedure-specified intervals and monitor flow, gains, leaks and gas. A continuing pressure rise can reflect migration or other effects and requires prompt reporting and a pressure-maintenance plan. The handover includes which valves and elements are closed, whether the seals are verified, bit or assembly position, float status and any uncertainty. The next control decision should be based on that evidence, not on a generic assumption that the BOP command solved every path.
Operation-specific closure needs
| Item | Interpretation |
|---|---|
| Drilling | Verified pipe-body space-out and selected BOP route |
| Tripping | Compatible internal valve plus annular containment |
| Empty hole | Qualified empty-bore sealing element |
| Wireline/casing | Operation-specific pressure-control configuration |
Why is a manual full-opening safety valve normally prepared open before instructed installation?
To prove flow is harmless
To replace every annular barrier
To make connection compatibility unnecessary
To permit flow through the bore during controlled installation before it is closed
What determines whether an annular can seal an empty bore?
Only the pump speed
A universal rule that all annulars cannot
Only the casing depth
The actual model, element and manufacturer-rated complete-shutoff capability
What is required before reopening a string safety valve to a pressure-reading assembly?
Only a desire to read SIDPP
An assumption of zero pressure above the float
An unmade connection
A verified pressure-rated containment route and controlled barrier-transfer procedure
Sections you finish are checked off in the contents.