Understanding the Global Impact of the Oil and Gas Sector: IEC Standards and EX Inspection
Explosive atmospheres kill people and destroy assets. When flammable gases, vapours, mists, or combustible dusts are present in concentrations sufficient to ignite, a single uncontrolled ignition source — a worn brush contact, a cracked cable gland, a corroded enclosure — can trigger consequences that shut down a facility, end careers, and end lives. The financial exposure from a single Ex-related incident runs well beyond the immediate damage: regulatory shutdowns, insurance penalties, litigation, and reputational harm compound the direct loss. Yet across the industry, Ex inspection programmes remain inconsistently applied, poorly documented, and frequently deferred under production pressure.
This article sets out what a competent inspection programme looks like, which standards govern it, and how to build a defensible, risk-based approach that satisfies both regulators and your own engineering conscience.
Why Explosive Atmospheres Demand a Structured Approach
Hydrocarbon facilities are, by definition, environments where flammable materials are processed, stored, and transferred. Zone classification — the formal process of defining where explosive atmospheres exist or may exist — is not a paperwork exercise. It is the foundation on which every equipment selection, installation, and inspection decision rests.
Equipment that is correctly specified and installed on day one can degrade to an unsafe condition through corrosion, mechanical damage, unauthorised modification, or simple wear. An Ex enclosure with a missing bolt, a flameproof joint that has been ground down during a maintenance intervention, or a cable gland filled with the wrong compound is no longer providing the protection its certification promises. The hazardous-area classification has not changed; the equipment has simply ceased to meet it.
The global reach of the oil and gas sector amplifies this problem. Assets operate in arctic cold, desert heat, offshore splash zones, and humid jungle environments. Each environment attacks Ex equipment differently, and a single global standard framework is the only practical way to ensure that a pump installed in a Norwegian offshore module and one installed in a Middle Eastern gas plant are both assessed against a consistent baseline.
The Standards Framework
IEC Standards for Explosive Atmospheres
The primary international framework for Ex equipment is the IEC 60079 series. This is a multi-part standard covering:
- Classification of areas where explosive gas atmospheres may be present
- Equipment protection concepts (flameproof, intrinsic safety, increased safety, pressurisation, encapsulation, and others)
- Selection, installation, and inspection requirements
IEC 60079-10-1 addresses gas and vapour zone classification; IEC 60079-10-2 covers combustible dust. Equipment design and testing requirements are spread across further parts of the series, each tied to a specific protection concept.
For inspection specifically, IEC 60079-17 — Electrical installations inspection and maintenance — is the governing document. It defines three grades of inspection: visual, close, and detailed. It specifies what must be examined at each grade, the competency requirements for the inspector, and the documentation that must result. Any inspection programme that cannot be mapped back to IEC 60079-17 is, at minimum, incomplete.
The IECEx scheme provides an international certification and personnel competency framework built on these standards. Equipment certified under IECEx carries documentation that can be verified globally, which matters when you are procuring replacement parts for a remote asset and need to confirm that a substitute item genuinely meets the original protection concept.
Functional Safety Intersection
Where Ex equipment forms part of a Safety Instrumented System, the requirements of IEC 61511 — Functional safety: Safety instrumented systems for the process industry sector — apply in parallel. An Ex-rated solenoid valve on a safety instrumented function must satisfy both its Ex certification requirements and its SIL verification requirements. These are not the same thing, and treating one as a proxy for the other is a common and dangerous error.
Area Classification and the Permit System
IEC 60079-10-1 requires that zone classification drawings are produced, maintained, and kept current with process changes. In practice, many facilities operate with zone drawings that predate significant modifications. Before any Ex inspection can be meaningful, the inspector must confirm that the drawings reflect the current plant configuration. A zone drawing that shows a Zone 2 boundary that has, in reality, shifted due to a ventilation change means that every equipment selection decision made against that drawing is suspect.
Work in hazardous areas must be controlled through a formal permit-to-work system. Any task that involves opening, depressurising, or inspecting hydrocarbon-containing equipment requires: confirmed isolation of all energy sources, depressurisation to a verified safe condition, confirmation of zero energy state, lock-out/tag-out applied and documented, hazardous-area precautions appropriate to the zone, continuous or pre-entry gas detection, and safe venting of any residual inventory before work begins. These are not optional steps and they are not negotiable under production pressure.
Inspection Grades and What They Actually Require
Visual Inspection
A visual inspection is conducted without opening enclosures or disturbing equipment. It confirms that the equipment is present, appears undamaged, is the correct type for the zone, and that no obvious external degradation — corrosion, impact damage, missing labels — is visible. It is the minimum intervention and should be performed at the highest frequency.
Close Inspection
A close inspection includes everything in a visual inspection plus a more detailed examination that may involve opening enclosures with appropriate precautions. Cable glands are checked for correct type and proper installation. Flameproof joints are checked for surface condition. Breathing and draining devices are confirmed to be functional and unobstructed. Earthing and bonding connections are verified.
Detailed Inspection
A detailed inspection includes all elements of a close inspection and extends to internal examination, measurement of flameproof joint gaps where access permits, verification of internal wiring condition, and confirmation that internal components match the certified design. This grade requires the highest level of competency and the most rigorous documentation.
IEC 60079-17 provides inspection schedules that link grade to frequency based on the protection concept and the severity of the environment. The inspector should not set these frequencies arbitrarily; they should be derived from the standard and adjusted upward where environmental conditions or operational history justify it.
Illustrative Scenario: Deferred Inspection Consequences
The following is an illustrative scenario constructed to demonstrate a common failure pattern. It does not represent a specific incident.
Consider a gas compression station where flameproof junction boxes in a Zone 1 area have been on a rolling visual-only inspection programme for several years. A close inspection, when finally conducted, reveals that a significant proportion of the boxes have flameproof joint faces showing corrosion and mechanical damage from previous maintenance interventions where gaskets were incorrectly fitted. The equipment remains energised and the zone remains active. None of this was visible from outside the enclosures.
The corrective work requires: zone entry permits, gas detection coverage, LOTO on all affected circuits, enclosure opening in sequence with re-energisation controls, and documentation of every finding against the asset register. The volume of work, had it been caught incrementally through scheduled close inspections, would have been a fraction of the remediation effort — and the period of undetected non-compliance would not have existed.
Practical Checklist: Building a Defensible Ex Inspection Programme
Use this checklist as a gap-assessment tool against your current programme.
Documentation and Basis
- [ ] Zone classification drawings are current, stamped with the last review date, and reflect all plant modifications
- [ ] Equipment registers identify the protection concept, Ex marking, and certification reference for every item in a classified zone
- [ ]
IECExor equivalent certificates are held on file and traceable to installed equipment
Competency
- [ ] Inspectors hold demonstrable competency aligned with
IEC 60079-17requirements - [ ] Competency records are maintained and subject to periodic review
- [ ] Inspection findings are reviewed by a competent person before close-out
Programme Structure
- [ ] Inspection grades and frequencies are defined per equipment type and zone, referenced to
IEC 60079-17 - [ ] Inspection frequencies are reviewed when environmental conditions or failure history indicate
- [ ] Overdue inspections are tracked, risk-assessed, and escalated — not silently deferred
Execution Controls
- [ ] Permits to work are issued for all close and detailed inspections in live zones
- [ ] Gas detection is specified and confirmed before enclosure opening
- [ ] LOTO procedures are in place for any inspection requiring de-energisation
Findings Management
- [ ] All findings are recorded against the asset register, not just on paper inspection sheets
- [ ] Non-compliant items are risk-ranked and have a defined remediation timeline
- [ ] Repeat findings on the same asset trigger a root-cause review, not just a repeat repair
Interfaces with Other Disciplines
- [ ] Ex inspection findings that affect SIL-rated equipment are communicated to the functional safety engineer
- [ ] Modifications to equipment in classified zones go through a management-of-change process that includes Ex re-assessment before implementation
Conclusion and Next Steps
An Ex inspection programme that exists only on paper — with documentation that is not current, inspectors who are not competent, and findings that are not closed — provides no real protection. It creates the appearance of compliance while the actual risk accumulates unseen inside enclosures and under cable glands.
The immediate next step for any facility that cannot answer all items on the checklist above is a gap assessment against IEC 60079-17. That assessment should produce a prioritised action list, not a general observation that "improvements are needed." Specific assets, specific deficiencies, specific owners, and specific dates.
For procurement teams, the lesson is that Ex certification must be verified at the point of purchase, not assumed. An IECEx certificate number should be confirmed against the IECEx public database before equipment is accepted into a classified zone. A certificate that cannot be verified is not a certificate.
For maintenance leads, the lesson is that every intervention on Ex equipment in a classified zone is a potential de-certification event if it is not controlled. The flameproof joint that was ground down to make reassembly easier has been modified from its certified condition. That is not a paperwork problem; it is an ignition source waiting for the right concentration.
The IEC 60079 series exists because the industry learned these lessons through incidents. The cost of implementing the standard correctly is always lower than the cost of learning the lesson again.