WorkflowAsset Management, Maintenance & Reliability

Maintenance and Inspection Deferral Management

Maintenance deferral management that checks each safeguard a deferral relies on against today’s records, and shows what else on the barrier is weak at once.

See the demo Book a demo

Follow one shutdown valve deferral to its signature ↓

The problem

The form asks about one valve, and the answer rests on other protections

When a shutdown valve test cannot happen this hitch, the supervisor writes the request at the end of a twelve-hour shift and copies last time’s assessment, because there is no hour to do better. The copy still says both firewater pumps are available after one has gone for overhaul.

The technical authority reads it alone, often the day before it expires. Bypasses and out-of-service items sit in other logs, conditions sit in the form, and nobody looks across the barrier until something on it is needed.

Built forTechnical authoritiesInstallation managersAsset managersMaintenance supervisorsProcess safety engineers

The Problem Today

Each offshore deferral is judged alone, so nobody sees the protections for one hazard weak at once.

4,000: deferred hours per installation, one industry body’s average our estimate

Pieced together by hand today

Forms
Work orders
Shift logs
Tests

Assessments copied forwardOld safeguards stay on the form after they change
Conditions left uncheckedSet at sign-off, then seen only at audit

The Solution

Case draftedEach request built from its work order, history and last test
What is it leaning on?Each safeguard read from the risk assessment, checked against today
Overlap shown by barrierA calendar by safety barrier shows what is unproven or out at once
Rank reset, gaps coveredA false assessment is ranked again, then signed offshore and onshore

Built-in controls

Nothing signs until each gap is covered
Agents never move a date or set a rank
High risk and third extensions go onshore

What You Get

Technical authorities decide with the true state in front of them, and conditions get watched.

One calendar of what is weakDeferrals, bypasses and out-of-service items by barrier
No quiet repeatsEach extension counted, and the owner warned before the date
Conditions with proofEach one waits for the record that shows it was kept

One request, one morning

Maintenance deferral management for a shutdown valve that wants 60 more days

The full-stroke test on a Module C shutdown valve is already on its first extension, and the supervisor asks for a second, to the next planned stop. Here is the morning the technical authority decides it.

demoThe platform, its crew and every figure in this morning are invented for the sample.

0108:02
186 open deferrals, and the calendar shows them by barrier, not by form
Offshore technical authority
Overnight the agents redrew the platform’s calendar: 186 open deferrals and 3,860 deferred hours, 64 of them on a safety barrier and 122 routine. Each lane is a barrier, from structure to lifesaving, with tests deferred, extensions, bypasses and items out of service drawn in their own marks. The top band shows where the barriers are weak at once.
02Module C
In gas compression, three protections are unproven or out for 19 days
Offshore technical authority
Narrowed to Module C, the picture is plain. The shutdown valve asking for more time, the module’s gas detectors and firewater pump B overlap for 19 days. Those are three of the protections against a gas release in this module. The calendar keeps unproven apart from out of service, and the agent’s note gives one next step: open the case file.
03Case file
A second extension that would run 120 days past a 12-month test
Offshore technical authority
The case file sets out the request: 60 more days for the full-stroke closure and seat leak test, because it needs Train 2 offline. Granted as asked, the test runs 120 days past its interval, 33% of it, over the 25% flag. The history shows the last full test closed in 14.2 s against 20, and the first extension already granted.
04What it leans on
Two of the five safeguards in the assessment are not true today
Offshore technical authority
The assessment was copied from the first extension’s, and sentences 2 to 5 are unchanged. Checked against today’s records, the detectors are not proven, their own test deferred under another request, and pump B is out for overhaul with no spare. Three safeguards hold. Each finding shows its record and a confidence figure, and the bypass log’s read time is flagged as stale.
05Decide
The assessment was false, so the rank goes from Medium to 12, High
Offshore technical authority
Decide is shut until the check is reviewed and the rank set again. The technical authority moves likelihood from 2 to 3, so revision 2 reads 12, High. The agents found a production notice the request missed: a Train 2 water wash on two days this month. That window lets the test happen, and bringing the detector test forward cuts the overlap to 12 days.
06Decide
14 days instead of 60, with a condition covering each gap
Offshore technical authority
She takes the shorter grant. Fourteen days, to the water wash, and two conditions: finish the gas detector test early, and no hot work in Module C until the valve passes, with pump A run weekly and the result logged. The calendar beside her shows all three unproven or out at once for 12 days, and two or more for 59.
07Countersign
The installation manager opens three records before he can countersign
Offshore installation manager
High rank and a second extension send the decision on board first. Countersign stays shut until the installation manager has opened the revised risk assessment, the detector deferral and the firewater pump entry. He sees what was decided, the new date and the route that still lies ahead, onshore. The technical authority cannot sign her own decision a second time.
08Onshore
Onshore, away from production pressure, the asset manager opens two records
Onshore asset manager
The onshore asset manager holds the higher authority for high-rank requests. She opens revision 2 of the assessment and the Train 2 notice that made the shorter grant possible, then signs. No countdown opens the button. It opens only once she has opened what she is signing.
09Signed
The new date goes to the maintenance system, and two conditions are watched
Offshore technical authority
The deferral is signed by all three, with its reason, its rank and its conditions in one place. The new date goes to the maintenance system, and the detector request’s date moves forward with it. From here an agent looks for the record that proves each condition was kept, and flags it if none arrives.
10After
The overlap falls from 19 days to 12, and the 14 days cut 86 to 59
Offshore technical authority
Back on the calendar, the Module C picture has changed. Three protections unproven or out at once now runs 12 days, because the detector test came forward, and the time with two or more falls from 86 days to 59 because of the shorter date. The agent’s note says which change did what.

Five sentences in a copied risk assessment, checked against today

The assessment for the second extension relied on five safeguards. Here is what each sentence said, and what the records said on the morning.

The assessment says	True today
The valve passed its partial stroke, and its last closure time was inside the limit	Holds. A partial stroke does not prove the seat
The boundary valve can isolate the same inventory	Holds, with a wider shutdown
Module C gas detectors are in date	Not true. Their test is itself deferred
Both firewater pumps are available	Not true. Pump B is out for overhaul, pump A alone, no spare
An area operator walks Module C every shift	Holds, 14 of 14 shifts

demoSample data, from the working solution. Unproven is not impaired: the detectors are in service but untested, and the screens keep the two apart.

Where the platform’s 3,860 deferred hours sit

Backlog is reported in hours each month. Split by barrier, it shows how much of it touches a safety function.

On a safety barrier64 deferrals	2,292 hours
Routine work122 deferrals	1,568 hours
Deferred hours, all open deferrals186 deferrals	3,860 hours

demoSample data, from the working solution.

Around the deferral

Expiry, conditions and the trail behind each deferral on the platform

Five more screens the platform’s signers and auditors keep open. Each one opens full size.

Deferral requests queue: 16 waiting, ranked, with what each leans on, the next step and a decide-by date — **Requests, highest risk first**16 requests waiting, each with its rank, what it leans on and who decides next. A decide-by clock sits 24 hours before each date.

Deferred maintenance backlog by expiry: next 30 days by day, three dates passed, and tasks moved more than once — **What runs out next**The next 30 days, three dates passed with no extension, and 35 of 186 tasks moved more than once. A third extension becomes a change request.

Conditions list: 60 conditions, 3 missed and 2 with no record, each with the log that proves it and its state — **Conditions, with the proof they need**Each condition names the record that would prove it, from a shift log or the maintenance system. Missed and no record come first, each with a follow-up.

Audit trail for a deferral: copied assessment, overnight check, rank change, decision, two signatures and the new date — **Audit trail**Each request, check, decision and signature in order, from the copied assessment to the new date. Nobody can edit an entry, and an export carries all of it.

Deferral process settings: who signs at each level of risk, each rule locked, and an independent verifier told on second extensions — **Who signs, locked**Authority rises with risk: routine, first safety-critical, high rank or second extension, third extension. A setting here can only tighten the rule.

demoSample data, from the working solution.

Who decides a safety-critical maintenance deferral, and who countersigns

Authority rises with risk, and signers open the records before the button opens.

Offshore maintenance supervisor

Sees: The work order, the next planned stop and the drafted case
Signs: Raises the request, and never decides it

Offshore technical authority

Sees: What the assessment leans on, the calendar by barrier and the rank
Signs: Decides, sets the rank and covers each gap

Process safety engineer

Sees: The barriers across modules
Signs: Countersigns a first safety-critical deferral at Low or Medium, and owns change requests

Offshore installation manager

Sees: The revised assessment and the records it now rests on
Signs: Countersigns high rank, second extensions and group moves

Onshore asset manager

Sees: The rank and the gap, away from the platform
Signs: Signs high rank, second extensions and change requests

What the agents leave to the technical authority and the signers

Agents draft, read, check and redraw the calendar. These stay with people.

No agent sets a rankA false assessment must be ranked again by the technical authority, with a new revision.

No agent moves a dateThe date moves in the maintenance system only after the last signature.

No timer opens the sign buttonEach signer opens the records first, and the button stays shut until every one is open.

Safety-critical tasks stay out of groupsGroup requests carry routine work only, sampled and countersigned.

A disproved reason is not offeredWhen the agents show a safeguard is not true, the reasons that lean on it drop off the list.

What technical authorities ask about maintenance deferral management

What is maintenance deferral management?

Maintenance deferral management is how a site decides whether a safety task can wait past its date. Here each deferral is a case file: agents draft it, read its risk assessment for the safeguards it relies on, check them against today’s records and show the overlap by barrier. The technical authority decides, and higher risk goes to more signers.

How does it improve a deferred maintenance risk assessment?

It reads the assessment sentence by sentence and ties each safeguard to a record: a test, a deferral, an out-of-service entry, a shift log. Where a sentence is no longer true, the screen says so and the rank must be set again before anyone can sign.

Does it handle inspection deferral as well as maintenance?

Yes. Internal inspections and tests sit on the same calendar as maintenance tasks, each on the barrier it leaves unproven, and the case file shows how far past its interval a deferral would run.

How does it show cumulative risk on a barrier?

The calendar has one lane per safety barrier and draws deferred tests, extensions, bypasses and items out of service together. The overlap is counted in days, and a suggestion shows which change shortens it.

Who can sign a second extension?

The technical authority decides it, the installation manager countersigns, and the onshore asset manager signs. A third extension is no longer a deferral: it becomes a change request with two named signers and a clock.

How are conditions on a deferral followed up?

Each condition names the record that proves it, such as a shift log entry or a work order. An agent looks for that record and flags a missed or unrecorded condition to its owner.

Asset Management, Maintenance & Reliability

Bring one deferral
and the assessment behind it.

We’ll walk you through what it leans on and what else on that barrier is down, using your own records.

Book a demo Browse solutions

Maintenance and Inspection Deferral Management

The form asks about one valve, and the answer rests on other protections

The Problem Today

The Solution

What You Get

Maintenance deferral management for a shutdown valve that wants 60 more days

186 open deferrals, and the calendar shows them by barrier, not by form

In gas compression, three protections are unproven or out for 19 days

A second extension that would run 120 days past a 12-month test

Two of the five safeguards in the assessment are not true today

The assessment was false, so the rank goes from Medium to 12, High

14 days instead of 60, with a condition covering each gap

The installation manager opens three records before he can countersign

Onshore, away from production pressure, the asset manager opens two records

The new date goes to the maintenance system, and two conditions are watched

The overlap falls from 19 days to 12, and the 14 days cut 86 to 59