Surface BOP Shut-In Protocols (Drilling, Tripping, Wireline/Out of Hole)

Key Takeaways

  • Use the posted shut-in procedure and current stack/string space-out reference.

  • Tripping requires a compatible internal barrier as well as annular closure.

  • Empty-hole sealing capability is model-specific, with the designated rated device used.

  • Verify containment and preserve barriers when connecting a pressure-reading route.

Last updated: October 2026

Prepare for the actual operation

The surface shut-in procedure must fit drilling, tripping, an empty hole or another operation. Before starting, verify the stack configuration, space-out reference, pressure ratings, internal valves, choke route and pressure-monitoring path. Know which element can seal the tubular currently in the stack. A pipe ram fitted for one diameter cannot be credited with sealing another, and a tool joint above the rotary table does not alone establish the position of joints across all BOP cavities.

The following duties explain the hard shut-in principle. The exact control order is taken from the posted procedure and the assessment instructions. For shallow gas where containment is unsuitable, use the approved diverter response instead. The objective is to limit influx while establishing and verifying the whole pressure envelope.

Drilling on bottom

Recognise the unexplained gain, increased returns or other influx indication, suspend drilling and communicate or alarm as instructed. Stop rotation before positioning the string. Pick up and space out from the verified stack reference so the selected element is on qualified pipe body. Stop pumps as directed, avoiding an unnecessary extended flow check when an influx is already evident. Close the designated annular or ram and operate the required side-outlet route against the prepared closed choke.

Check the selected function, panel and hydraulic response, well flow and pressure-monitoring route. Observe for external leakage and continued unplanned flow. If containment is not achieved, activate the planned second barrier. Record the operation, depth, density, pit gain and pressure trends and hand over to the supervisor. Do not substitute an estimated stabilisation time for observed valid readings.

Tripping with the string in the hole

Stop movement and secure the string using the appropriate handling arrangement. Use the prepared internal safety valve compatible with the connection and pressure duty. Where a manual full-opening valve is used, it is prepared open for installation, made up and closed under the instructed procedure. Flow through it during installation is a hazard to manage, not harmless spill. If pressure or flow prevents safe manual installation, use the preplanned alternative.

Close the designated annular or ram on a qualified section, establish the intended choke/gauge route and verify containment. The inside and annulus are separate flow paths, so both must be addressed. A float valve may limit internal backflow but does not prevent an annular influx or prove that the displayed pressure above it is valid SIDPP.

To obtain drillpipe pressure later, connect a verified pressure-rated route as instructed. Reopening the internal safety valve is a controlled barrier transfer requiring known pressure and valve status above it. Do not open it simply to “get a reading” into an unverified assembly. Preserve the internal barrier until the alternative containment route is demonstrated.

String completely out of the hole

Use the designated device qualified to seal the empty bore, normally the applicable blind or blind/shear ram arrangement. Some annular models have complete-shutoff capability, with manufacturer-specific pressure and element limits, so “an annular can never seal an empty hole” is incorrect. The installed procedure determines the element used, including its verification and alternative.

There is no drillstring pressure reference if no string is in the well. Record casing pressure, fluid profile and volume information. The subsequent plan may require volumetric control, controlled re-entry or another supervised method. Running pipe rapidly into a flowing well is not a substitute for containment. A string re-entry plan needs suitable barriers and a qualified stripping arrangement.

Other assemblies and wireline

Casing, cementing and wireline have operation-specific procedures because their internal routes and sealing dimensions differ. Wireline uses suitable pressure-control equipment; conventional annular and shear capability must be verified for the actual cable and tools. Do not delay containment by pulling a tool toward surface on an unsupported assumption. Cutting a cable and sealing the well are separate capabilities, and a non-shearable tool across the ram can prevent the intended emergency closure.

For a completion assembly, identify non-sealable and non-shearable items before movement, the flow-check requirement and the assured closure method. The same principle applies to a liner running tool or tubing accessory. The complete procedure must remain usable as the assembly changes position.

Monitoring and handover

After closure, record pressures at the procedure-specified intervals and monitor flow, gains, leaks and gas. A continuing pressure rise can reflect migration or other effects and requires prompt reporting and a pressure-maintenance plan. The handover includes which valves and elements are closed, whether the seals are verified, bit or assembly position, float status and any uncertainty. The next control decision should be based on that evidence, not on a generic assumption that the BOP command solved every path.

Operation-specific closure needs

ItemInterpretation
DrillingVerified pipe-body space-out and selected BOP route
TrippingCompatible internal valve plus annular containment
Empty holeQualified empty-bore sealing element
Wireline/casingOperation-specific pressure-control configuration
Test Your Knowledge

Why is a manual full-opening safety valve normally prepared open before instructed installation?

A

To prove flow is harmless

B

To replace every annular barrier

C

To make connection compatibility unnecessary

D

To permit flow through the bore during controlled installation before it is closed

Test Your Knowledge

What determines whether an annular can seal an empty bore?

A

Only the pump speed

B

A universal rule that all annulars cannot

C

Only the casing depth

D

The actual model, element and manufacturer-rated complete-shutoff capability

Test Your Knowledge

What is required before reopening a string safety valve to a pressure-reading assembly?

A

Only a desire to read SIDPP

B

An assumption of zero pressure above the float

C

An unmade connection

D

A verified pressure-rated containment route and controlled barrier-transfer procedure

Sections you finish are checked off in the contents.