Skip to content
Episode 159: Regulatory Compliance from a Process Perspective with Charlene Wright episode artwork

Dec 22, 2020 37 min

Episode 159: Regulatory Compliance from a Process Perspective with Charlene Wright

from Pipeliners Podcast Hosted by Pipeliners Podcast

This week's Pipeliners Podcast episode features first-time guest Charlene Wright discussing how pipeline operators can more effectively view and approach regulatory compliance. In this episode, you will learn about the importance of processes organically flowing from the management of assets in pipeline operations, how to optimize recordkeeping to support compliance, the advancement of Pipeline SMS from a high-level discussion to implementation and culture change, and more critical topics. - Read the show notes and full episode transcript at PipelinersPodcast.com

Episode details come from the podcast's RSS feed.

Embed this episode

Ready to play

Episode 159: Regulatory Compliance from a Process Perspective with Charlene Wright

0:00 37:09
of matches

Transcript Auto-generated, may contain errors

Welcome to the Pipeliners Podcast, episode 159, sponsored by Inersys Corporation, providers of Poins, the Pipeline Operations Excellence Management System, compliance and operations software for the Pipeline Control Center, recently releasing Comply Manager, software to streamline audit radiance. Find out more about Poins at Inersyscorp.com. Thank you, Russell. Very good to have you.

Before we get into it, would you give us a little bit about your background and tell us how you got into Pipeline? My introduction to the pipeline industry came from representing operators in litigation arising from pipeline incidents, ruptures, failures. And that led me to an in-depth exploration of the pipeline safety code, both on the federal level and then state regulations, and a better understanding of processes that drive decisions inside of pipeline companies. So what would you say you learned in doing that?

What I learned in the incident investigation and in that litigation arena is that I think pipeliners try to do the right thing. I think for the most part, pipeline operators are great people trying to do their best. And yet there are gaps that occur, there are risks that are present, that if not accounted for, can result in a failure. I think that's certainly my experience, Charlene, that in general pipeline operators, and not just the companies, but really the people at those companies are really trying to do their very best to get the job done and get it done safely.

Why do you think that these gaps exist? What leads to having those gaps happen? Well, Russell, we work in one of the most highly regulated industries in the country, certainly in North America. And understanding all of those regulatory requirements, in addition to understanding systems that have been in place for decades, for longer than most of the folks who are maintaining them have been in the industry, is a complex process.

And it involves having to make decisions on resources and on direction inside of a company that have a lot of moving parts. And oftentimes, if there are not processes in place to manage those complexities, gaps occur. Yeah, so I can talk to that. So I've just passed my three-year anniversary of doing this podcast.

And I tell people all the time that I am amazed by two things. One, just how technical this business is, and the other is how broad it is, how many different technologies and disciplines are involved in running these systems. It's really a very complex and wide-ranging challenge. You're right, Russell.

It is interesting because what the public doesn't necessarily hear and see firsthand is that pipeline operators are responsible for making pipelines safer. And for developing through the investment of resources, some of the technology that has led to advanced leak detection, advancements in corrosion management and prevention, advancements in the kinds of materials that we use to build pipelines. So it's more than just moving products through the gas line or through a liquid line. It's much more complex than that.

Well, before we got on the microphone, we were visiting a little bit in talking football analogies. And my analogy to that is that it's kind of like being a pipeline operator is kind of like being an offensive lineman. The only time you get your name called is when you get a flag thrown. That's true.

The best offensive lineman, generally the ones you've never heard about. You're absolutely right. That's not completely true, but I think the point's well made. So we're talking about just how broad and complex running a pipeline is.

And one of the things you got to do is have processes. But how do you, I mean, how does a pipeline operator understand, how do they develop understanding around all of their processes? Well, that's a great question, Russell. And I always tell folks that the way to start, the basis for all understanding is not the regulations, but it's actually their own system, understanding their assets, and knowing what the risks are related to each of those assets is the place to start.

From that point, they can understand better which processes will help them to effectively and safely operate their systems. And the regulatory piece can then flow from that. Regulatory compliance is not a bolt on. It's a process that should flow organically from managing your assets.

Yeah, I call that natural compliance. That's a great term. You should do what you need to do to operate the facilities and the assets and compliance should just fall out of how you're operating. Now, that's really easy to say.

That is not easy to do. You're absolutely right. And part of it is that in trying to understand bigger picture, we often lose track of all of the details that go into those processes. So even though we're trying to do the right thing and every day, I think operators go to work and they understand that they've put something in the ground that's going to be there for a long time.

And they are absolutely mindful of employee safety and the public safety and everything that they do. But if you miss the process piece, then you miss a lot of opportunities to improve, to identify gaps and to understand what things could be done better. So it is a little bit about intent and a lot about documenting a robust process. Yeah.

And again, that's a mouthful, right? So I often get tripped up between three words, policy, process and procedure. How would you say that those three things are distinct? That's a great question.

And I don't think I've ever been asked that before. Inside different companies that I have the pleasure of doing work for, those terms are often used interchangeably. But I don't think they are really the same thing. So I consider a policy and overarching high level commitment by leadership of a company on how they intend to do business and what values the company has.

I consider a process to be about what is done. How is it going to be done? What are we going to use? What is our repeatable, auditable process that gets us from point A to point Z and identifies gaps in the audit of that process?

How do we carry out our intended operations and what are our tolerant defects? How do we minimize deficiencies and deviations? That's about that's process. Procedures are more of first line doer instructions, if you will.

It is the devil's in the details. Well, they're in your procedures. And they are absolutely required under the pipeline safety code. So every operator is required to not only have but follow a written set of procedures to safely operate their system.

And those are really important words because it means you best be careful what you put in your procedures and make sure you understand what you committed to because those procedures have now become a federal requirement. Well, they're also, when you look at an incident investigation, they're one of the first things to get evaluated. Absolutely. And they'll tend to be evaluated initially from a do they meet code, but they'll also be evaluated from a standpoint of did they contribute to the incident?

Absolutely. And did they operate or train their employees and contractors on what those procedures require? Yeah. Yeah.

Yeah. That's exactly. I mean, you could do a whole series of podcasts just on that particular question. But so I define this policy process procedure as a governance program where my policy is kind of the law.

If you think about that from a military perspective, it would be, here's my standing orders. What was the mission in World War II? It was the defeat, total defeat of the Germans, that kind of thing. The process is, well, we're first going to land, then we're going to drive to this point, and then we're going to drive to this point, and the procedures get down to, well, here's how you drive a landing craft.

So, procedures tend to be more one person doing something. So, they can be a little bit more complex than that, but your point, I think, was really well stated. It's the detailed, you do X, Y, and Z. That's right.

Right. So, that's really important to have that all put together. What do you think operators miss when they think about compliance and when you think about what people are doing with their policy process of procedures? I think there are a couple of things that get missed.

First is that they forget about documenting the record keeping requirement, for their own procedures and for the regulations, and that's really absolutely critical because your record keeping can save you or it can kill you. The regulators, both state and federal regulators expect operators to maintain records that will clearly demonstrate that required activities from their procedures and from the regulations were satisfied, and they were done according to the requirements that were set forth. So, it's not just about the second piece of this, it's not just about satisfying that requirement, but it's using those records to determine whether your process and procedures were effective, and they missed that piece of it. So, it's not enough to say, I've checked a box, I've done something because I have to do it or because it's a requirement.

It's more important to also say, we did this, but was it enough for our system? Was it effective for our system? Is it effective in the areas that we operate? Those are really important questions that can't be missed.

Yeah, and that's broader than just compliance, right? Absolutely. That's really, am I doing what is appropriate, effective, and efficient for my organization, for my assets? That's right.

That's the world we live in in the context of SMS, right? Right. Yeah, no, I actually get to great segue because I was going to ask about that as well. So, how does this relate to pipeline safety management systems?

Pipeline safety management systems are important in that we are beginning to look at the totality of what we do and also how different processes and procedures interrelate and how we are looking at them in a fashion that allows us to understand whether we are improving safety by what we're doing. I think SMS is really important and it's something that we are always talking about now in the industry. But I really hope it is my fervent hope that operators don't just see this as the next sort of the next big thing that they need to check off their list. We tend to have a little bit of shiny object syndrome.

We go to the next shiny thing that's out there that we can put as a gold star. We've accomplished this. SMS is really not something that is a one and done. It is something that you have to live with and adapt and mature over a long period of time and it should grow organically through your company DNA.

It can't be a bolt-on. It can't be something where we say, we can check each of these boxes and so we're done. So that's the big important part about SMS is really understanding. This is a commitment that is not a short-term thing and it's definitely something that you're going to have to get a handle on in terms of resourcing it and documenting it for the long haul.

Yeah, I've related this story in the past but I recall visiting with one operator and I was talking to the gentleman that was responsible for the alarm management program and alarm management program is one of the parts of pipeline SMS. It's API 1167 and I asked him what was he doing with regards to pipeline SMS and he had never heard of pipeline SMS. This was maybe a year, a year and a half ago that I had this conversation and I'm like, okay, well that confirms for me what I suspected which is pipeline SMS right now is kind of a high-level programmatic conversation. It has not really worked its way down to where the boots are hitting the dirt.

So I'm with you. I think that this conversation about compliance and policy process and procedure and pipeline SMS are all bound up together. I also agree that pipeline SMS is a cultural thing. It's a capability.

You're building into a company. It's a way of thinking about how you do your business but I also think we got a long ways to go. Yes, not every company is ready for SMS. I hate to bring us back to football, Russell, but it's a very complicated play and if you don't know how to block and tackle yet, learn to block and tackle first.

That's really what they need to do before they try to tackle something as complicated as SMS. Yeah, it'd be like a sandlot team trying to engage in the West Coast office. It's just not going to work. That's right.

For the football nerds in the audience. That's right. Well, I'm in Texas here. So it's football's big.

Yeah, exactly. It's part of the culture. So what are the foundational elements of pipeline SMS and how do they relate to this conversation we've been having? The foundational elements honestly build on the plan due check act cycle that we've had in the industry for decades now.

But it takes important pieces of that plan due check act process and it institutionalizes them. So it starts with risk management and understanding your system and where your risks are, where your threats are, and then it evolves into elements that deal with operational controls and training and confidence of your individuals and record keeping and emergency preparedness and incident investigation and safety assurance and then going back through that cycle. It's a management commitment to understanding how all of those different elements interconnect in a way that that basically provides a safety net to structure the rest of your procedures. So if you think about the plan due check act cycle plan is make sure that you've thought through.

I mean, this is a question. I'm just kind of teeing it up. Sure. Plan is I've thought through and I've defined my policy process of procedures.

Do is I'm executing my procedures. Check is I'm looking at seeing have I accomplished what my policy and process says I should be accomplishing and act is I'm going to modify my policy process and procedures to improve my outcomes. Exactly. So foundational to that is I have defined those policies processes and procedures.

That's right. And two, I have the ability to analyze what occurred. And in order to analyze what has occurred, you have to first have metrics in place that are meaningful. So pipeline operators measure thousands of things that you know, when you ask someone, now what are you measuring?

Honestly, they will give you thousands of pieces of data or sets of data on what they measure. But if they're those measures are not driving decisions, they're meaningless. They need to have meaningful metrics that tell leadership to do something or stop doing something. And if it's not feeding that information into management, then it's really a pointless exercise.

Once you have metrics in place that align to your company's goals and values, then you can begin to really check outcomes and effectiveness against those metrics and it will drive your decisions. Well, that's the difference between data and information, right? And then even more so, it's the difference between information and actionable information. Right.

And I'm an engineer, so I always believe that more data is better. Okay. I just. But I also am very aware that data for data's sake, while I could do all kinds of interesting analysis and maybe find something and do some kind of optimization, it's not helpful in terms of running an organization.

Right. So, you know, that kind of pivots into a conversation more detail about records and record keeping. And really, you know, if I'm going to understand outcomes, then I've got to create records and those records have to create data that I can process into actionable information. Correct.

And I think we've got a long ways to go as an industry in that domain. We definitely do. And I think there are different levels of maturity on record keeping the different operators have, both from the sense of what records they keep, but also how they're maintaining them. If your records are being kept, you know, in a binder under someone's desk, that data is not getting analyzed and integrated into the decisions that are being made for the various programs from, you know, integrity management to damage prevention, it's just sitting there collecting dust.

And let's face it, everybody listening has one person like this at least in their company that are still keeping their data in these binders under their desk. That doesn't do anybody any good. And they're doing this because if they get an inspection, they want to be able to produce this binder. Well, that's lovely, but you missed an opportunity.

Well, that's right. And that's the distinction between compliance and a compliance mindset versus a SMS mindset. That's absolutely right. Yes.

In my mindset would be, I've got this information. How do I feed it into decision making to improve things? Right. And regulations, let's face it, have become more complex over time.

You know, the last big set of new set of regulations that came out was back in 2011 with the control room management rule, because it certainly changed the way we looked at control rooms, becoming more of an information center. And then it, then it used to be treated and it created this need to keep so many different kinds of records that were not even generated inside the control room that people had to get their arms around it. And I think, you know, they're having lots of different ways to do that that have popped up in the industry. I mean, I'm a big fan of the CRM suite, that the poem suite, because it actually captures not just the process, but it helps the operators understand what are the records that need to be kept and how do they need to be kept.

But then also, are we just keeping these for our compliance or can we analyze them and look at this in slice and dice this data in ways that make sense to us? That's really important. Yeah. And you know, that that's an easy thing to say.

And I think the entire industry would agree that there's value in that. I think the challenge is that there's a lot that has to happen to figure out how to take all these records that we create and make them useful from a decision making standpoint. Absolutely. And you know, there's a lot of interesting stuff going on around leak detection program management, in particular, I talk about that because there's something I know a little bit about, and how they're building frameworks that address the entirety of what you're doing in leak detection, including your computerized models and your field inspections and, you know, camera imagery and all kinds of other things that are being done around a program versus, you know, I'm just, you know, I get a legal arm and here's what I do is my process and procedure to respond to a legal arm.

It's just, you know, I mean, that's maybe an oversimplification, but there's a big difference between analyzing a program and performing and analyzing a task. Absolutely. That's correct. And where do you think the value is that for the operators?

Well, I think the value for the operators is understanding how to use their data so that they can become more efficient, become safer, and even more importantly, use limited resources in the best way possible. I think the public sometimes thinks that pipeline operation unlimited resources, well, no company has unlimited resources. We all make decisions every single day about where to put our people's time and where to invest money. And that those decisions should be data driven decisions.

And if they're using records to validate and evaluate processes, those decisions become easier to make. Right. I would absolutely, I would absolutely agree with that. But they need to be data driven.

I think one of the big challenges in our business is that it's so technical. And we end up having these managers that understand the technology and they have data coming up to them and they're going through it and analyzing it and preparing reports that go to others. And a lot of that process, we actually got to figure out how to get what's in these really good engineers heads and put it into systems that we can more universally understand. And that's that ain't gonna happen overnight.

That's a lifetime, a career kind of commitment that's required to have those kind of things accomplished. You know, that's really a good point. And it brings to mind the fact that we need to understand that we're in a really pivotal time in our industry. We are at a time where we've got a lot of baby boomers that are retiring from their work, that have careers, and the kind of institutional knowledge that simply can't be replaced.

And if there aren't already processes in place to capture that information and understand the importance of it, we're going to miss out and we're going to have this enormous gap that isn't going to be replaced by new bright talented engineers that don't know the system, that don't know the institutional history, we have to get it now. And we're probably almost too late if we haven't already started. Well, I think it depends on the company you talk about. Some companies have done an incredibly good job of institutionalizing their understanding about their various domains.

Others, they just rely on what people know. It's very interesting. I mean, if you talk about the smaller private equity back, mid streams and such, they tend to have really sharp engineers that understand their business and can move quickly and get things done, but may not have the level of discipline and rigor around their policy process and procedure. But they're flexible and they can change and adapt and they tend to be the folks that adapt to new process, new technology quicker, where the bigger guys tend to have very mature understanding and policy procedure process, etc.

But may not have the flexibility necessary to adapt to and incorporate new technology and new understanding. That's right. So the difference between a PT boat and an aircraft carrier. That's right.

And if you're acquiring systems that you haven't operated and maintained over these last decades, everything is about those records. Understanding that and taking the time in advance to do your due diligence, look at the records and understand what you're getting into before you acquire a new system is really important. Because anything that you don't get right away is going to be more difficult to obtain later on. So let's make sure that we do that as well, because we do see a lot of that in the industry where different companies acquire different systems.

And then that acquiring company is responsible to understand where the risks are, understand what records are there and be able to defend what it does to operate the systems. Yes. I want to tee up kind of as a wrap up of a question for you. So give me a second or two, Charlene.

I'm going to tee up a question around the idea of process quality. So I got an MBA while I was in the military and that MBA had a quantitative focus. And one of the things we did is we read the work that Deming did on total quality management. And we would take manufacturing processes and we would diagram them all the way from the floor all the way through to what the CEO needed to see in order to run the company and try to determine what was the data that was important and how you rolled that up.

It was really fascinating to me how you diagram that and so forth. A couple of things in order to do quality management that are required. The first is you have to have a documented process. And then I have to have clear either measurement or testing.

Ideally, I'm going to be able to measure the process because I can do that in real time. But some processes I actually have to look at the output and test it. And then I have to take the, I got to correlate my testing of the output to the measurement of the device. And then I got to figure out how to roll that up and determine what is and isn't important.

So process quality requires a very disciplined process around getting the process documented. And then a continuing effort to analyze that processes and its performance and look for ways to improve it. And Deming transformed the manufacturing world by implementing what at that time was called TQM. Process safety management, pipeline safety management, other disciplines kind of come out of that, black belt, you know, six sigma, those sort of things kind of come out of that idea.

So I'm kind of giving you that as a background. So I think that that's someplace we need to head in pipeline. I'm wondering if you agree with that. And if you do, what do you think would be required for us to get there?

I definitely think that quality assurance and quality control is important. I think that if we put in place processes that check our internal controls to see if they're sufficient and to be able to have a robust process that we have, you know, both checked and rechecked and adapted, it will make us better at everything that we do. And I think you're right. I think there are elements of process controls and quality control that are kind of baked in to SMS, but to actually take that piece out and really think about it and really unpack all of those terms is important.

It would actually mean that you'd need a bit of a cultural transformation inside of an organization to get everyone to be working on that same path. And that's kind of the whole the Deming approach to management to, right? That that internal transformation is interesting that you're thinking about that. I don't think there are that many.

There have long been kind of process controls inside of organizations, but they tend to be tied more to compliance and limited by compliance. And I think there's an opportunity to have it have compliance to be one piece of a much larger concept. Yeah, I would agree with that, Charlene. And I think the reason I think about it is it goes back to my training early on.

And I did this in my first job out of the military before I started getting into oil and gas where I applied this successfully. And I think there's a real big challenge in the pipeline world because if I start looking at pipeline integrity or catholic protection and I'm trying to figure out how I'm going to get to a what are the nodes in the network of the process and what needs to happen in each of those nodes and what do I need to measure about each of those nodes at starts getting really complicated. I mean, it is, I mean, it's as complicated as aviation, if not more so, in terms of really breaking down all the pieces of parts. Well, that's true.

I mean, the one thing that's important about quality management is that consistency that can flow from it and the and being able to adapt the principles that will help you to manage risk, you know, and we're all about managing risk, right? That's exactly right. And it's different. I mean, that's actually a very good point too, because if you think about it from a manufacturing standpoint, what I'm trying to do is improve the quality and consistency of the output.

Right. So I'm measuring for something that is occurring. But in pipeline, I'm often measuring for something I don't want to occur, which is a much more difficult problem technically. That's right.

So that's right. And you know, that goes back to my comment on metrics. It's really important not to just use those lagging indicators that are measurements of things we do not want to occur. It's really important to have leading indicators that help us to understand whether we're doing the right things to prevent those occurrences.

Yeah, yeah, exactly. Exactly. Exactly. Well, listen, what I'm going to ask this kind of is a wrap up question.

What would you want the listeners to kind of take away from this overall conversation? I think the takeaway should be that this is a great industry. It's a great place to work with some really great people that are committed to safety for employees, for contractors, for the public. But good intentions are often not enough.

And we are under heightened scrutiny in an incredibly highly regulated industry. So process is king and your records will save you. So that's where your focus needs to be. Processes king and your records will save you.

I think that's a great place to land this thing. And then one final comment, just thank you for the plugs for the point CRM suite for the audience that was not requested. That just happened out of the natural conversation. I'm a big fan.

I appreciate that. Well, listen, Charlene, it's been a pleasure to have you. And thanks for being a guest. We look forward to having you come back.

Thanks very much, Russell. I hope you enjoyed this week's episode of the Pipe Liners Podcast and our conversation with Charlene. Just a reminder, before you go, you should register to win our customized Pipe Liners podcast Yeti Tumblr. Simply visit pipelinerspodcast.com slash win to any yourself in the drawing.

If you would like to support the podcast, please leave us a review on Apple Podcast, Google Play, Stitcher, or whatever smart device podcast application you happen to use. You can find instructions at pipelinerspodcast.com. If you have ideas, questions, or topics you'd be interested in, please let me know on the contact us page at pipelinerspodcast.com or reach out to me on LinkedIn. Thanks for listening.

Talk to you next week.

Frequently asked questions

How long is this episode of Pipeliners Podcast?

This episode is 37 minutes long.

When was this Pipeliners Podcast episode published?

This episode was published on December 22, 2020.

Is there a transcript available for this episode?

Yes, a full transcript is available for this episode. You can read the complete transcript on the episode page.

Can I download this Pipeliners Podcast episode?

Yes. Use the download control on the episode player to save the publisher-provided media file.