Glossary
Browse the IADC Lexicon alphabetically or by category. Get comprehensive definitions of drilling industry terms.
Attacker
Definition(s)
Attacker
An individual, group, organization, or government that executes an attack. Extended Definition: A party acting with malicious intent to compromise an information system. Adapted from: Barnum & Sethi (2006), NIST SP 800-63 Rev 1 Source: NICCS™ Portal Cybersecurity Lexicon, National Initiative for Cybersecurity Careers and Studies (https://niccs.us-cert.gov/glossary) as of 11 November 2015, Global StandardsAttenuation
Definition(s)
Attenuation
Decay of seismic waves as they travel from a source to the site under consideration. Source:API RP 2EQ, Seismic Design Procedures and Criteria for Offshore Structures, First Edition, November 2014. Global StandardsAttestation
Definition(s)
Attestation
issue of a statement, based on a decision following a review, that fulfilment of specified requirements has been demonstrated [SOURCE: ISO/IEC 17000:2004, 5.2, modified — Notes to entry have been removed.] Source: ISO/IEC TS 17027:2014, Conformity assessment – Vocabulary related to competence of persons used for certification of persons, Global StandardsAttractiveness
Definition(s)
Attractiveness
- An estimate of the value of a target to a threat. Consideration shall be given to the following factors in defining the threat and in determining the need for any enhanced countermeasures:
- potential for mass casualties/fatalities;
- extensive property damage;
- proximity to national assets or landmarks;
- possible disruption or damage to critical infrastructure;
- disruption of the national, regional, or local economy;
- ease of access to target;
- media attention or possible interest of the media;
- company reputation and brand exposure;
- the presence of on-site materials that can be used as a chemical or biological weapon (or precursor materials that can be used to develop chemical or biological weapons).
Attractiveness
An estimate of the value of a target to a threat. Consideration shall be given to the following factors in defining the threat and in determining the need for any enhanced countermeasures:- potential for mass casualties/fatalities;
- extensive property damage;
- proximity to national assets or landmarks;
- possible disruption or damage to critical infrastructure;
- disruption of the national, regional, or local economy;
- ease of access to target;
- media attention or possible interest of the media;
- company reputation and brand exposure.
- the presence of on-site materials that can be used as a chemical or biological weapon (or precursor materials that can be used to develop chemical or biological weapons).
Attribute
Definition(s)
Attribute
Property or characteristic of an object that can be distinguished quantitatively or qualitatively by human or automated means. [SOURCE: ISO/IEC 15939:2007, modified – “entity” has been replaced by “object” in the definition.]. Source: ISO/IEC 27000:2014, Information technology — Security techniques — Information security management systems — Overview and vocabulary, Third Edition, January 2014. Global StandardsAttribute
Inherent characteristic of a person. EXAMPLE Visual acuity; sensitivity to others; openness. Source: ISO/IEC TS 17027:2014, Conformity assessment – Vocabulary related to competence of persons used for certification of persons, Global StandardsATV
Definition(s)
ATV
all-terrain vehicle. Source: API RP 98, Personal Protective Equipment Selection for Oil Spill Responders, First Edition, August 2013. Global StandardsAudit
Definition(s)
Audit
An evaluation of a security assessment or security plan performed by an owner or operator, the owner or operator's designee, or an approved third-party that is intended to identify deficiencies, non-conformities, and inadequacies that would render the assessment or plan insufficient.
Source: API RP 781 Security Plan Methodology for the Oil and Natural Gas Industries.1st Ed. September 2016. Global StandardsAudit
Documented investigation conducted by the purchaser to verify that applicable requirements are being implemented. Source: API SPEC 17L1, Specification for Flexible Pipe Ancillary Equipment, First Edition, March 2013. Global StandardsAudit
Audit means a systematic, independent and documented process for obtaining audit evidence and evaluating it objectively to determine the extent to which audit criteria are fulfilled. Source: IMO Resolution A.1083(28), Amendments to International Convention on Load Lines, 1966, 10 December 2013, Regulations Source: IMO Resolution A.1085(28), Amendments to the Convention on the International Regulations for Preventing Collisions at Sea, 1972, , 10 December 2013, Regulations Source: IMO Resolution A.1084(28), Amendments to International Convention on Tonnage Measurement of Ships, 1969, 10 December 2013, RegulationsAudit
A formal, scheduled evaluation of an activity or asset with pre-determined objectives, criteria and protocols to test compliance against OMS expectations, implementation and/or performance. Audits vary in extent of independence and impartiality. This depends on whether the assessment is performed locally within an activity or asset based on "self-assessment"; by auditors appointed internally from other parts of the organisation; or by third parry auditors who are external to the company (imposed, invited). Source: IOGP Report No. 510, Operating Management System Framework for controlling risk and delivering high performance in the oil and gas industry, International Association of Oil & Gas Producers, June 2014. Global StandardsAudit
Systematic, independent and documented process for obtaining audit evidence and evaluating it objectively to determine the extent to which the audit criteria are fulfilled.- Note 1 to entry: An audit can be an internal audit (first party) or an external audit (second party or third party), and it can be a combined audit (combining two or more disciplines).
- Note 2 to entry: “Audit evidence” and “audit criteria” are defined in ISO 19011.
Audit
A documented activity aimed at verifying by examination and evaluation that the applicable elements of the quality programme continue to be effectively implemented. Source: Rules and Regulations for the Classification of Mobile Offshore Units, Part 4, Steel Unit Structures, June 2013, Lloyd’s Register, Global StandardsAudit
Systematic, independent and documented process for obtaining audit evidence and evaluating it objectively to determine the extent to which the audit criteria are fulfilled.- NOTE: 1 Internal audits, sometimes called first party audits, are conducted by the organization itself, or on its behalf, for management review and other internal purposes (e.g. to confirm the effectiveness of the management system or to obtain information for the improvement of the management system). Internal audits can form the basis for an organization’s self-declaration of conformity. In many cases, particularly in small organizations, independence can be demonstrated by the freedom from responsibility for the activity being audited or freedom from bias and conflict of interest.
- NOTE: 2 External audits include second and third party audits. Second party audits are conducted by parties having an interest in the organization, such as customer, or by other persons on their behalf. Third party audits are conducted by independent auditing organizations, such as regulator or those providing certification.
- NOTE: 3 When two or more management systems of different disciplines (e.g. quality, environmental, occupational, health and safety) are audited together, this is termed a combined audit.
- NOTE: 4 When two or more auditing organizations cooperate to audit a single auditee, this is termed a joint audit.
- NOTE: 5 Adapted from ISO 9000:2005, definition 3.9.1.
Audit
A systematic, independent and documented process for obtaining audit evidence and evaluating it objectively to determine the extent to which audit criteria are fulfilled. Note: CSA Standard CAN/CSA-ISO 9000:05. Source: Environmental Protection Plan Guidelines, The Canada-Newfoundland and Labrador Offshore Petroleum Board, Canada-Nova Scotia Offshore Petroleum Board, and National Energy Board, Canada, March 31, 2011. Regulatory Guidance Source: Safety Plan Guidelines, The Canada-Newfoundland and Labrador Offshore Petroleum Board, Canada-Nova Scotia Offshore Petroleum Board, and National Energy Board, Canada, March 31, 2011. Regulatory GuidanceAudit
Independent review and examination of records and activities to assess the adequacy of system controls, to ensure compliance with established policies and operational procedures, and to recommend necessary changes in controls, policies, or procedures (See “security audit”) [9].- NOTE: There are three forms of audit.
- (1) External audits are conducted by parties who are not employees or contractors of the organization.
- (2) Internal audit are conducted by a separate organizational unit dedicated to internal auditing. (3) Controls self assessments are conducted by peer members of the process automation function.
Audit
In this regulation, “audit” means systematic assessment of the adequacy of the management system to achieve the purpose referred to in paragraph (1)(a) carried out by persons who are sufficiently independent of the system (but who may be employed by the duty holder) to ensure that such assessment is objective. Source: The Offshore Installations (Safety Case) Regulations 2005, UK S.I. 2005/3117, 2005. RegulationsAudit Client
Definition(s)
Audit Client
organization or person requesting an audit NOTE 1 In the case of internal audit, the audit client can also be the auditee or the person managing the audit programme. Requests for external audit can come from sources such as regulators, contracting parties or potential clients. NOTE 2 Adapted from ISO 9000:2005, definition 3.9.7 Source: ISO 19011:2011 (E) – Guidelines for auditing management system. Global StandardsAudit Conclusion
Definition(s)
Audit Conclusion
outcome of an audit, after consideration of the audit objectives and all audit findings. NOTE Adapted from ISO 9000:2005, definition 3.9.6 Source: ISO 19011:2011 (E) – Guidelines for auditing management system. Global StandardsAudit Criteria
Definition(s)
Audit Criteria
set of policies, procedures or requirements used as a reference against with audit evidence is compared NOTE 1 Adapted from ISO 9000:2005, definition 3.9.3 NOTE 2 If the audit criteria are legal (including statutory or regulatory) requirements, the terms “compliant” or “non-compliant” are often used in an audit finding. Source: ISO 19011:2011 (E) – Guidelines for auditing management system. Global StandardsAudit Evidence
Definition(s)
Audit Evidence
records, statements of fact or other information which are relevant to the audit criteria and verifiable NOTE Audit evidence can be qualitative or quantitative. [ISO 9000:2005, definition 3.9.4] Source: ISO 19011:2011 (E) – Guidelines for auditing management system. Global StandardsAudit Findings
Definition(s)
Audit Findings
results of the evaluation of the collected audit evidence against audit criteria NOTE 1 Audit findings indicate conformity or nonconformity. NOTE 2 Audit findings can lead to the identification of opportunities for improvement or recording good practices. NOTE 3 If the audit criteria are selected from legal or other requirements, the audit finding is termed compliance or non-compliance. NOTE 4 Adapted from ISO 9000:2005, definition 3.9.5. Source: ISO 19011:2011 (E) – Guidelines for auditing management system. Global StandardsAudit Plan
Definition(s)
Audit Plan
description of the activities and arrangements for an audit [ISO 9000:2005, definition 3.9.12]. Source: ISO 19011:2011 (E) – Guidelines for auditing management system. Global StandardsAudit Programme
Definition(s)
Audit Programme
arrangements for a set of one or more audits planned for a specific time frame and directed towards a specific purpose NOTE Adapted from ISO 9000:2005, definition 3.9.2. Source: ISO 19011:2011 (E) – Guidelines for auditing management system. Global StandardsAudit Scope
Definition(s)
Audit Scope
Extent and boundaries of an audit. [SOURCE: ISO 19011:2011]. Source: ISO/IEC 27000:2014, Information technology — Security techniques — Information security management systems — Overview and vocabulary, Third Edition, January 2014. Global StandardsAudit Scope
Extent and boundaries of an audit. NOTE The audit scope generally includes a description of the physical locations, organizational units, activities and processes, as well as the time period covered. [ISO 9000:2005, definition 3.9.13] Source: ISO 19011:2011 (E) – Guidelines for auditing management system. Global StandardsAudit Team
Definition(s)
Audit Team
one or more auditors conducting an audit, supported if needed by technical experts NOTE 1 One auditor of the audit team is appointed as the audit team leader NOTE 2 The audit team may include auditors-in-training [ISO 9000:2005, definition 3.9.10]. Source: ISO 19011:2011 (E) – Guidelines for auditing management system. Global StandardsAuditee
Definition(s)
Auditee
organization being audited [ISO 9000:2005, definition 3.9.8]. Source: ISO 19011:2011 (E) – Guidelines for auditing management system. Global StandardsAuditor
Definition(s)
Auditor
person who conducts an audit Source: ISO/IEC 17021:2011 (E) – Conformity assessment – Requirements for bodies providing audit and certification of management systems . Global Standards Source: ISO 19011:2011 (E) – Guidelines for auditing management system. Global StandardsAUT
Definition(s)
AUT
Automated Ultrasonic Examination. Source: API 570, Piping Inspection Code: In-service Inspection, Rating, Repair, and Alteration of Piping Systems, Fourth Edition, February 2016, with Addendum May 2017. Global StandardsAUT
Automated ultrasonic testing. Source: API Standard 2RD, Dynamic Risers for Floating Production Systems, Second Edition, September 2013. Global StandardsAuthentication
Definition(s)
Authentication
The process of verifying the identity or other attributes of an entity (user, process, or device). Extended Definition: Also the process of verifying the source and integrity of data. Adapted from: CNSSI 4009, NIST SP 800-21, NISTIR 7298 Source: NICCS™ Portal Cybersecurity Lexicon, National Initiative for Cybersecurity Careers and Studies (https://niccs.us-cert.gov/glossary) as of 11 November 2015, Global StandardsAuthentication
Property that an entity is what it is claims to be. Source: ISO/IEC 27000:2014, Information technology — Security techniques — Information security management systems — Overview and vocabulary, Third Edition, January 2014. Global StandardsAuthentication
Process of validating identity. Source: DNVGL-RP-G108, Cyber security in the oil and gas industry based on IEC 62443, DNV GL, September 2017. Global StandardsAuthentication
Security measure designed to establish the validity of a transmission, message, or originator, or a means of verifying an individual's authorization to receive specific categories of information [9]. Source: ANSI/ISA–99.00.01–2007, Security for Industrial Automation and Control Systems, Part 1: Terminology, Concepts, and Models, 29 October 2007. National StandardAuthenticity
Definition(s)
Authenticity
A property achieved through cryptographic methods of being genuine and being able to be verified and trusted, resulting in confidence in the validity of a transmission, information or a message, or sender of information or a message. Adapted from: CNSSI 4009, NIST SP 800-53 Rev 4 Source: NICCS™ Portal Cybersecurity Lexicon, National Initiative for Cybersecurity Careers and Studies (https://niccs.us-cert.gov/glossary) as of 11 November 2015, Global StandardsAuthority
Definition(s)
Authority
A person with appropriate competence who is formally granted the power to make judgements and take decisions on technical or resource issues within a defined scope. Source: IOGP Report No. 510, Operating Management System Framework for controlling risk and delivering high performance in the oil and gas industry, International Association of Oil & Gas Producers, June 2014. Global StandardsAuthority
'Authority' means the International Sea-Bed Authority Source: United Nations Convention on the Law of the Sea (UNCLOS), 1982, LegislationAuthority Having Jurisdiction
Definition(s)
Authority Having Jurisdiction
Third-party organization required to be satisfied with the standard of engineering proficiency and safety of a project- EXAMPLE: A classification society, verification body or government regulatory body.
Authorization
Definition(s)
Authorization
Right or permission that is granted to a system entity to access a system resource. Authorization is dependent on authentication.
Source: DNVGL-RP-G108, Cyber security in the oil and gas industry based on IEC 62443, DNV GL, September 2017. Global StandardsAuthorization
Approval/agreement to perform a specific activity (e.g. repair) prior to the activity being performed. Source: API 510, Pressure Vessel Inspection Code: In-service Inspection, Rating, Repair, and Alteration, Tenth Edition, May 2014, with Addendum May 2017. Global Standards Source: API 570, Piping Inspection Code: In-service Inspection, Rating, Repair, and Alteration of Piping Systems, Fourth Edition, February 2016, with Addendum May 2017. Global Standards Source: API 510, Pressure Vessel Inspection Code: In-Service Inspection, Rating, Repair, and Alteration Downstream Segment, Ninth Edition, June 2006. Global StandardsAuthorization
A process of determining, by evaluating applicable access control information, whether a subject is allowed to have the specified types of access to a particular resource. Extended Definition: The process or act of granting access privileges or the access privileges as granted. From: OASIS SAML Glossary 2.0; Adapted from CNSSI 4009 Source: NICCS™ Portal Cybersecurity Lexicon, National Initiative for Cybersecurity Careers and Studies (https://niccs.us-cert.gov/glossary) as of 11 November 2015, Global StandardsAuthorization
“Authorization” means an authorization issued by the Board under paragraph 5(1)(b) of the Act (autorisation). Source: Canada Oil and Gas Drilling and Production Regulations, SOR/2009-315, February 2013. RegulationsAuthorization
An authorization issued by the Boards pursuant to the Accord Acts. Note: 4C-NAAIA 138(1)(b) and CNSOPRAIA 142(1)(b). Incident Reporting and Investigation Guidelines, The Canada-Nova Scotia Offshore Petroleum Board and Canada-Newfoundland and Labrador Offshore Petroleum Board, Canada, November 30, 2012. Regulatory Guidance Incident Reporting and Investigation Guidelines, The Canada-Nova Scotia Offshore Petroleum Board and Canada-Newfoundland and Labrador Offshore Petroleum Board, Canada, November 30, 2012. Regulatory GuidanceAuthorization
Authorization means an authorization issued by the Board under paragraph 138(1)(b) of the Act. Source: Drilling and Production Guidelines, The Canada-Nova Scotia Offshore Petroleum Board and Canada-Newfoundland and Labrador Offshore Petroleum Board, Canada, March 31, 2011. Regulatory GuidanceAuthorization
Authorization means an authorization issued by the Board under paragraph 142(1)(b) of the Act. Source: Drilling and Production Guidelines, The Canada-Nova Scotia Offshore Petroleum Board and Canada-Newfoundland and Labrador Offshore Petroleum Board, Canada, March 31, 2011. Regulatory Guidance Source: Nova Scotia Offshore Petroleum Drilling and Production Regulations, SOR/2009-317, Canada, current to May 31, 2012. RegulationsAuthorization
An authorization issued by a Board under paragraph 5(1)(b) of COGOA, 142(1)(b) of CNSOPRAIA, and 138(1)(b) of CNAAIA. Note: Excerpted from section 1.(1) of the Regulations. Source: Environmental Protection Plan Guidelines, The Canada-Newfoundland and Labrador Offshore Petroleum Board, Canada-Nova Scotia Offshore Petroleum Board, and National Energy Board, Canada, March 31, 2011. Regulatory Guidance Source: Safety Plan Guidelines, The Canada-Newfoundland and Labrador Offshore Petroleum Board, Canada-Nova Scotia Offshore Petroleum Board, and National Energy Board, Canada, March 31, 2011. Regulatory Guidance Source: Offshore Waste Treatment Guidelines, The Canada-Newfoundland and Labrador Offshore Petroleum Board, Canada-Nova Scotia Offshore Petroleum Board, and National Energy Board, Canada, December 15, 2010. Regulatory GuidanceAuthorization
Right or a permission that is granted to a system entity to access a system resource [11]. Source: ANSI/ISA–99.00.01–2007, Security for Industrial Automation and Control Systems, Part 1: Terminology, Concepts, and Models, 29 October 2007. National StandardAuthorized Inspection Agency
Definition(s)
Authorized inspection agency
Any one of the following:- a) the inspection organization of the jurisdiction in which the pressure vessel is used;
- b) the inspection organization of an insurance company that is licensed or registered to write and does write pressure vessel insurance;
- c) the inspection organization of an owner or user of pressure vessels who maintains an inspection organization for his/her equipment only and not for vessels intended for sale or resale; or
- d) an independent organization or individual that is under contract to and under the direction of an owner/user and that is recognized or otherwise not prohibited by the jurisdiction in which the pressure vessel is used. The owner/user’s inspection program shall provide the controls that are necessary when contract inspectors are used.
Source: API 510, Pressure Vessel Inspection Code: In-service Inspection, Rating, Repair, and Alteration, Tenth Edition, May 2014, with Addendum May 2017. Global Standards
Authorized inspection agency
Defined as any of the following:- the inspection organization of the jurisdiction in which the piping system is used,
- the inspection organization of an insurance company that is licensed or registered to write insurance for piping systems;
- an owner or user of piping systems who maintains an inspection organization for activities relating only to his equipment and not for piping systems intended for sale or resale;
- an independent inspection organization employed by or under contract to the owner/user of piping systems that are used only by the owner/user and not for sale or resale;
- an independent inspection organization licensed or recognized by the jurisdiction in which the piping system is used and employed by or under contract to the owner/user.
Authorized inspection agency
Anyone of the following:- The inspection organization of the jurisdiction in which the pressure vessel is used.
- The inspection organization of an insurance company that is licensed or registered to write and does write pressure vessel insurance;
- The inspection organization of an owner or user of pressure vessels who maintains an inspection organization for his equipment only and not for vessels intended for sale or resale; or
- An independent organization or individual that is under contract to and under the direction of an owner/user and that is recognized or otherwise not prohibited by the jurisdiction in which the pressure vessel is used. The owner/user's inspection program shall provide the controls that are necessary when contract inspectors are used.
Authorized Person
Definition(s)
Authorized person
A person assigned by an employer to perform or supervise the performance of a specific type of duty or duties at the work site. Source: API RP 54, Recommended Practice for Occupational Safety for Oil and Gas Well Drilling and Servicing Operations, Third Edition, August 1999 (2007). Global StandardsAuthorized person
A qualified person assigned by an employer to perform or supervise the performance of a specific type of duty or duties at the work site. Source: API RP 74, Recommended Practice for Occupational Safety for Onshore Oil and Gas Production Operation, First Edition, October 2001 (March 2007). Global StandardsAuthorized Piping Inspector
Definition(s)
Authorized Piping Inspector
An employee of an owner/user organization or authorized inspection agency (3.1.6) who is qualified and certified by examination under the provisions of Section 4 and Annex A and is able to perform the functions specified in API 570 where contracted or directed to do so. An NDE examiner is not required to be an authorized piping inspector. Whenever the term inspector is used in API 570, it refers to an authorized piping inspector.
Source: API 570, Piping Inspection Code: In-service Inspection, Rating, Repair, and Alteration of Piping Systems, Fourth Edition, February 2016, with Addendum May 2017. Global StandardsAuthorized Pressure Vessel Inspector
Definition(s)
Authorized pressure vessel inspector
An employee of an authorized inspection agency who is qualified and certified to perform inspections under this inspection code, including Annex B. Whenever the term “inspector” is used in API 510, it refers to an authorized pressure vessel inspector.
Source: API 510, Pressure Vessel Inspection Code: In-service Inspection, Rating, Repair, and Alteration, Tenth Edition, May 2014, with Addendum May 2017. Global Standards