Physical Address
304 North Cardinal St.
Dorchester Center, MA 02124
ISO 28460:2010 – Petroleum and Natural Gas Industries — LNG Ship-to-Shore Interface and Port Operations
Standard for LNG ship-to-shore interface, mooring systems, cargo transfer, and safety requirements for port operations
Overview of LNG Ship-to-Shore Interface Standardization
ISO 28460:2010 addresses the critical interface between LNG carriers and port facilities, covering the entire spectrum of ship-to-shore interactions including mooring arrangements, cargo transfer systems, emergency shutdown protocols, and communication requirements. As global LNG trade has expanded rapidly, standardized interface requirements have become essential for ensuring safe and efficient operations across diverse port configurations and vessel designs.
The standard applies to all LNG carriers above 10,000 m³ cargo capacity calling at terminals handling LNG or LPG. It covers both loading and discharging operations, including the critical cool-down and gas-up procedures that precede cargo transfer.
Mooring System Requirements and Berth Design
ISO 28460 specifies minimum mooring line arrangements: for LNG carriers up to 200,000 m³, a minimum of four breast lines and four spring lines are required, with each line having a minimum breaking load of 1,000 kN. The standard mandates the use of quick-release mooring hooks (QRH) with remote release capability from a safe location, and requires that all mooring points be designed for loads including 100-knot beam winds and 2-knot currents simultaneously.
| Vessel Size (m³) | Min. Breast Lines | Min. Spring Lines | Min. Breaking Load (kN) | QRH Required |
|---|---|---|---|---|
| 10,000 – 75,000 | 4 (2 fwd, 2 aft) | 4 (2 fwd, 2 aft) | 800 | Yes |
| 75,000 – 145,000 | 4 (2 fwd, 2 aft) | 4 (2 fwd, 2 aft) | 1,000 | Yes |
| 145,000 – 200,000 | 6 (3 fwd, 3 aft) | 4 (2 fwd, 2 aft) | 1,300 | Yes |
| > 200,000 (Q-Max) | 8 (4 fwd, 4 aft) | 6 (3 fwd, 3 aft) | 1,500 | Yes |
Modern LNG terminals are increasingly adopting vacuum-breakaway mooring hooks that automatically release at 80% of the minimum breaking load, preventing catastrophic mooring failure during extreme weather events. This technology is recommended by ISO 28460 for terminals exposed to tropical storm conditions.
Cargo Transfer Systems and Emergency Shutdown
The standard requires marine loading arms (or cryogenic hoses where approved) designed for a minimum flow velocity of 10 m/s in the liquid line and operating pressures up to 1.5 MPa. Emergency shutdown (ESD) systems must be tested to achieve full isolation within 30 seconds of activation, with redundant ESD-1 (ship-initiated) and ESD-2 (shore-initiated) signals. The permissive sequence for cargo transfer requires establishing the ESD link, verifying mooring tension, and completing the pre-transfer checklist before any cargo valve is opened.
The ESD system compatibility testing between ship and shore systems is the most common cause of operational delays at LNG terminals. ISO 28460 recommends annual joint ESD drills and a standardized ESD test protocol using a dedicated test signal (not the actual cargo system) to verify response times.
Vapor return lines must be sized to handle boil-off gas generated during cargo transfer, typically equivalent to 0.15% of cargo volume per hour for ambient-temperature operations. The standard specifies maximum pressure differentials of 50 mbar between ship and shore vapor systems to prevent over-pressurization or vacuum conditions.
Operational safety during LNG transfer depends on maintaining the vapor return line at a positive pressure at all times. Negative pressure can cause air ingress, creating flammable mixtures within the vapor system. All terminals must have nitrogen purging systems rated for at least 1.5 times the vapor system volume per hour.
Emergency Shutdown System Architecture and Testing
The standard defines a hierarchical emergency shutdown system with three distinct levels. ESD-1 is the ship-initiated emergency shutdown that stops cargo transfer by closing the ship’s manifold valves and the shore’s loading arm valves simultaneously. ESD-2 is shore-initiated and follows the same valve closure sequence but from the shore control system. ESD-3 is a total facility emergency shutdown that isolates the entire berth, activates fire-fighting systems, and initiates personnel evacuation. The standard specifies maximum total response times: ESD-1 and ESD-2 must achieve full flow isolation within 30 seconds of activation, with the valve closure stroke time not exceeding 15 seconds for the primary valves. The interlocking logic requires that both ESD-1 and ESD-2 systems be tested before each cargo transfer operation, with a dedicated test signal that does not interfere with the operational system. The test protocol must verify: signal transmission time (< 2 seconds), valve closure response (< 15 seconds), and alarm activation in both ship's navigation bridge and shore control room. Annual full-scale ESD drills involving both ship and shore crews are mandated, with documented results maintained for regulatory review. The standard also addresses the crucial issue of ESD compatibility between different ship and shore systems, which has been identified as a contributing factor in multiple LNG transfer incidents due to signal protocol mismatches between older and newer systems.
ESD compatibility testing between ship and shore systems is the single most common cause of operational delays at LNG terminals, accounting for approximately 40% of pre-transfer delays in a survey of 20 major terminals. ISO 28460 recommends maintaining a compatibility database for each ship class that calls at the terminal, with pre-arrival ESD compatibility verification completed at least 24 hours before the vessel’s estimated time of arrival. This proactive approach can reduce berthing-to-start-of-operations time by 1-2 hours.
Safety Instrumented Systems and Hazard Analysis
The standard requires that LNG terminals conduct a formal Safety Integrity Level (SIL) assessment per IEC 61511 for all cargo transfer safety functions. The ESD system typically requires SIL 2 rating (risk reduction factor ≥ 100), while the fire and gas detection system requires SIL 1 or SIL 2 depending on the area classification and consequence analysis. The standard specifies that the probability of failure on demand (PFD) for the ESD system must not exceed 0.01 per year for SIL 2 functions, requiring redundant sensor and actuator configurations with regular proof testing. Hazard and operability (HAZOP) studies must be conducted at the design stage for new terminals and reviewed every 5 years for existing installations, covering all normal and abnormal operating modes including cargo transfer, cool-down, gas-up, maintenance, and emergency conditions. Layers of protection analysis (LOPA) must demonstrate at least three independent protection layers between the initiating event and the worst-case credible consequence for each identified hazard scenario. These risk-based requirements ensure that the safety systems are proportionate to the hazard level, avoiding both under-protection and unnecessary over-engineering of safety systems.
The cargo transfer operation must never commence if the ESD communication link between ship and shore cannot be established and verified. There have been multiple recorded incidents where temporary ESD communication failures during the pre-transfer checklist were accepted with a “work-around” plan, only to result in uncontrolled cargo release when a real emergency occurred minutes or hours later. The standard is unequivocal: no ESD link, no cargo transfer — under any circumstances.
FAQ
Q: What are the key differences between ISO 28460 and OCIMF mooring guidelines?
A: ISO 28460 provides more specific requirements for LNG operations including ESD integration and cryogenic hose specifications, while OCIMF provides general mooring guidelines applicable to all tanker types.
A: ISO 28460 provides more specific requirements for LNG operations including ESD integration and cryogenic hose specifications, while OCIMF provides general mooring guidelines applicable to all tanker types.
Q: How does the standard address simultaneous operations (SIMOPS)?
A: The standard requires a formal SIMOPS risk assessment when other activities (bunkering, maintenance, other vessel movements) occur within 100 m of the LNG berth during cargo transfer.
A: The standard requires a formal SIMOPS risk assessment when other activities (bunkering, maintenance, other vessel movements) occur within 100 m of the LNG berth during cargo transfer.
Q: What is the minimum water depth requirement for LNG berths?
A: While not specified as a single value, the standard requires that under-keel clearance be maintained at minimum 20% of vessel draft at all states of tide, accounting for squat effects at approach speeds.
A: While not specified as a single value, the standard requires that under-keel clearance be maintained at minimum 20% of vessel draft at all states of tide, accounting for squat effects at approach speeds.
Trending now
