2.3 Human Factors, Situational Awareness & Crew Communication in Well Control
Key Takeaways
IOGP's 2021 review of 172 reported well-control incidents identified human factors in 71% and barrier failures in 67%; contributing factors can overlap.
Confirmation bias leads drilling crews to rationalize kick warning signs as benign operational anomalies like formation ballooning or mud transfer.
Normalization of deviance progressively desensitizes teams to recurrent minor anomalies, converting hazardous conditions into acceptable operational baselines.
Endsley's Situational Awareness framework comprises three hierarchical tiers: Perception (Level 1), Comprehension (Level 2), and Projection (Level 3).
The driller must promptly execute the approved well-control response when an influx is suspected; seeking prior supervisory permission must not delay that response.
Forensic investigations into catastrophic well control failures—including the Macondo (Deepwater Horizon) blowout in the Gulf of Mexico and the Montara incident in the Timor Sea—demonstrate a consistent reality: major blowouts rarely result from unpredictable mechanical failures alone. IOGP's 2021 review of 172 reported well-control incidents identified human factors in 71% and barrier failures in 67%. These are overlapping contributing factors, not evidence that equipment functioned correctly or that human and mechanical causes are mutually exclusive.
For supervisors, superintendents, and lead engineers, mastering the human dimensions of well control—cognitive bias mitigation, situational awareness maintenance, Crew Resource Management (CRM), and clear shut-in authority—is as critical as mastering kill-sheet calculations.
Cognitive Traps in Well Control Decision-Making
Under high-stress, high-tempo drilling conditions, the human brain relies on cognitive heuristics (mental shortcuts). In well control, these heuristics often manifest as hazardous cognitive biases:
1. Confirmation Bias
Confirmation bias is the psychological tendency to interpret ambiguous, contradictory sensor data in a manner that confirms pre-existing expectations or operational plans.
- Rig Floor Scenario: After drilling through a transition zone, the active pits gain 8 barrels and flow continues with pumps off. Instead of recognizing an underbalanced formation influx, the crew rationalizes the flow as "formation ballooning" (fracture breathing), thermal mud expansion, or an unrecorded surface transfer from the reserve pits. By convincing themselves that the well cannot be kicking, the team delays shut-in to run prolonged flow checks.
2. Normalization of Deviance
First identified by sociologist Diane Vaughan during the Challenger investigation, normalization of deviance describes the cultural process by which operational shortcuts, uncalibrated instruments, or unexplained anomalies become acceptable practice because "nothing went wrong the last time."
- Rig Floor Scenario: A pit volume totalizer (PVT) sensor drifts by 5 barrels daily without maintenance, or negative pressure test criteria are repeatedly softened from zero-flow to "minimal manageable flow." In the Macondo disaster, ambiguous pressure readings on the drillpipe during the negative test were explained away as a "bladder effect" rather than recognized as a direct pathway to the hydrocarbon reservoir.
3. Automation Complacency
Drillers frequently place excessive trust in automated warning systems, assuming that software alarms will trigger before a kick escalates. However, sensor lag, plugged pit floats, or disabled audible alarms can silence automated systems. Automation must never replace manual verification tools, including visual flow-checks and calibrated trip sheets.
Situational Awareness (SA) in the Wellbore Environment
Dr. Mica Endsley defines Situational Awareness across three distinct cognitive levels. A breakdown at any single level compromises the entire safety envelope:
Endsley's Situational Awareness Hierarchy
│
LEVEL 3: PROJECTION
"Forecasting future state: Falling pressure will expand gas
and can rapidly increase the risk of riser unloading."
▲
│
LEVEL 2: COMPREHENSION
"Synthesizing cues: Drilling break + standpipe drop +
active pit gain = Underbalanced gas kick."
▲
│
LEVEL 1: PERCEPTION
"Detecting raw sensory cues: ROP spikes from 15 to 45 ft/hr;
active pits gain 6 barrels; pump pressure drops 120 psi."
- Level 1: Perception: Detecting sensory cues—reading a drop in standpipe pressure, observing an increase in flowline paddle angle, or noticing a rate of penetration (ROP) drilling break. Fatigue, circadian troughs (especially 02:00 to 06:00), and multi-tasking severely degrade Level 1 perception.
- Level 2: Comprehension: Integrating disparate cues into a coherent operational diagnosis. A competent supervisor does not see an isolated ROP break; they connect the ROP break with lower standpipe pressure and increasing pit volume to deduce that a light formation fluid has entered the annulus.
- Level 3: Projection: Anticipating future wellbore states. Level 3 SA includes anticipating that free gas can migrate and expand as its absolute confining pressure falls. For an ideal gas at constant temperature, Boyle's law () gives an inverse-pressure relationship. The resulting increase in return volume can threaten riser and surface-handling capacity.
Crew Resource Management (CRM) & Graded Assertiveness
Rig operations historically suffered from an authoritarian hierarchy where junior personnel—roughnecks, mud loggers, or assistant drillers—felt intimidated about questioning decisions made by the Driller or Company Representative. Modern well control doctrine enforces Crew Resource Management (CRM), emphasizing psychological safety, structured feedback, and closed-loop communication.
Closed-Loop Communication Protocol
Ambiguity during well control operations is hazardous. Closed-loop communication requires three steps:
- Directive: The supervisor issues a clear, unambiguous command: "Driller, shut in the well using the upper annular preventer."
- Repeat-Back: The receiver repeats the instruction verbatim: "Closing the upper annular preventer now."
- Confirmation: The sender verifies execution: "Confirmed, upper annular is closed."
The PACE Graded Assertiveness Model
When a crew member observes a dangerous anomaly or an incorrect operational decision, they must utilize the PACE graded assertiveness escalation:
- P - Probe: Inquire politely to stimulate awareness ("Driller, did you notice the flowline paddle is reading 15% higher than before the connection?");
- A - Alert: Point out the operational risk directly ("Driller, our active pit gained 6 barrels during that stand; we are showing positive influx signs.");
- C - Challenge: Issue a direct professional challenge ("Driller, we have positive flow with the pumps stopped. Industry standard requires us to shut in the well immediately.");
- E - Emergency Intervention: Escalate immediately and carry out the emergency actions assigned to your role in the rig procedure ("Suspected influx: execute the approved well-control response now.").
Tour Handovers and the Absolute Authority to Shut In
Shift Handover Vulnerabilities
Shift and tour handovers represent periods of heightened well control vulnerability. Incomplete turnover briefings often omit critical contextual information, such as minor pit volume drifts, pump repairs, or narrow kick margins. Standardized handover checklists must mandate:
- Active primary and secondary barrier status;
- Current mud properties (density in/out, rheology, ECD, gas units);
- Pore pressure and fracture gradient margins;
- Calculated shut-in casing pressure limitations (MAASP);
- Review of open Management of Change (MOC) waivers.
Prompt Response and Clear Shut-In Authority
The crew must know and practise the response for the current operation. When a well is suspected to be flowing unintentionally, act promptly; do not postpone containment while seeking permission or explaining away the signs. The driller must have authority to execute that response without waiting for supervisory approval.
Important
Use the approved response: For conventional operations with a shut-in-capable barrier arrangement, suspected unintended flow calls for prompt shut-in followed by investigation. Where the planned response is different—for example, shallow gas requiring diversion—execute that procedure instead of closing the well indiscriminately. Crew members must know their emergency roles and control responsibilities.
Rig leadership must support prompt execution of the approved response, including a shut-in that later proves to be a false alarm. Do not delay action on suspected unintended flow while seeking permission. Review the event afterward, and distinguish that immediate response from the flow checks specified for warning signs.
A mud logger observes a fast rate of penetration (ROP) drilling break followed immediately by a 4-barrel gain in the active mud pit while drilling gas-bearing sandstone. The mud logger projects that if drilling continues, the gas can expand as pressure falls near the surface, increasing the risk of riser unloading. According to Endsley's model, which level of Situational Awareness does this projection represent?
Level 1: Perception of environmental cues.
Level 2: Comprehension of current operational facts.
Level 3: Projection of future status and consequences.
Level 4: Autonomous execution of emergency response.
Following a pump shutdown for a drillpipe connection, the flowline paddle indicates 10% flow and the trip tank gains 3 barrels. The assistant driller tells the driller: 'It is just thermal expansion and formation ballooning because we increased pump rates earlier.' What cognitive failure is the crew demonstrating, and what is the required operational safeguard?
Automation complacency; the crew should recalibrate the electronic flow paddle while maintaining circulating pumps.
Groupthink; the crew should convene an emergency rig safety meeting to vote on whether to conduct a flow check.
Hindsight bias; the crew should calculate the Horner plot temperature gradient before closing the annular preventer.
Confirmation bias; the crew must overcome rationalization, immediately execute shut-in, and confirm pressures on gauges.
During conventional drilling with a shut-in-capable BOP system, what authority should the driller have when unintended well flow is suspected?
Authority to execute the approved shut-in response promptly without waiting for prior supervisory permission.
The Driller must first obtain verbal concurrence from the Operator Company Representative before activating any BOP rams.
The Driller must perform a minimum 15-minute flow check to prove fluid influx before contacting the Toolpusher to authorize shut-in.
The Driller must alert the rig superintendent via radio and await formal verification of kill sheet calculations before closing the well.
Sections you finish are checked off in the contents.