Offshore crew rotations: reconcile the roster and mobilisation status

Topics: offshore crew rotation planning, offshore roster reconciliation, crew rotation approvals, mobilisation schedule records

Why planned offshore rosters fail at the heliport check-in desk

Upstream offshore production platforms, mobile offshore drilling units (MODUs), and remote onshore drilling rigs operate on continuous back-to-back crew rotations (typically 14 days on / 14 days off or 21 days on / 21 days off). Every crew change requires tight coordination across operator personnel, drilling contractors, and specialist third-party service technicians.

Despite weeks of advance scheduling, heliport check-in desks and marine shore bases routinely face last-minute mobilisation crises:

1. Mid-Hitch Certificate Expiry: A senior production technician is cleared onto the Tuesday morning helicopter manifest because their Offshore Survival (BOSIET/FOET) or H2S breathing apparatus certificate is valid on departure day (2026-10-20). Five days into the 14-day offshore hitch (2026-10-25), the certificate expires while the technician is 120 nautical miles offshore, creating a statutory compliance breach under DGMS Oil Mines Regulations 2017.
2. Safety-Critical Role Coverage Gaps: A back-to-back crane operator or Coxswain is swapped at the last minute due to illness. The replacement technician holds trade qualifications, but does not hold the secondary platform emergency response role (Helideck Emergency Response Team Member — HERTM) held by the outgoing worker, leaving the installation below its minimum Safety Case emergency manning matrix.
3. Accumulated Working-Hour and Rest-Period Violations: A specialist wireline or coiled-tubing engineer completes an extended hitch on Platform A, disembarks at the heliport, and is immediately rostered onto a crew change for Platform B by a different project coordinator, violating cumulative work-hour and mandatory rest-period limits under the Ministry of Labour and Employment New Labour Codes.
4. Bunk and Lifeboat POB Over-Subscription: Turnaround campaign coordinators book 18 vendor technicians onto flights without reconciling simultaneous demobilisation seats, pushing planned platform headcount above certified lifeboat capacity.

Takeaway: The heliport flight manifest must never be populated directly from a draft roster; every passenger slot requires an explicit CLEARED_FOR_MANIFEST token verified against the full hitch plus weather-buffer horizon.

Four deterministic rules for mobilisation reconciliation

To prevent non-compliant boarding and unplanned offshore shut-ins, the mobilisation reconciliation engine evaluates every rostered person at T-7 days (early warning), T-48 hours (manifest lock), and T-12 hours (final heliport gate):

1. The hitch-end plus weather-buffer validity formula

A worker mobilising on planned_mob_date for a hitch ending on planned_demob_date must hold valid statutory certificates across the entire offshore stay plus a mandatory contingency buffer (B_weather = 3 days during normal season, 5 days during monsoon/cyclone season):

Required_Certificate_Expiry_Date >= Planned_Demob_Date + Weather_Buffer_Days

For example, if a 14-day offshore rotation departs on 2026-10-20 and is scheduled to demobilise on 2026-11-03 with a 3-day monsoon/weather buffer, every mandatory qualification (BOSIET/HUET, DGMS Periodical Medical Examination, H2S BA, and role-specific Well Control IWCF or Crane Operator certificate) must remain valid through at least 2026-11-06T23:59:59Z. Any certificate expiring between 2026-10-20 and 2026-11-06 triggers HOLD_EXPIRES_DURING_HITCH.

2. Platform emergency response and safety-critical role parity

Under DGMS Oil Mines Regulations 2017 and offshore installation Safety Cases, every platform maintains a minimum on-board count of emergency duties:

• Offshore Installation Manager (OIM) & Deputy OIM
• Certified Lifeboat Coxswains (minimum 2 per lifeboat)
• Helideck Emergency Response Team Leader (HERTL) and Members (HERTM)
• Offshore Medic and Confined Space Rescue Technicians

The reconciliation engine simulates the post-flight platform POB state (Current_Onboard - Outbound_Flight + Inbound_Flight). If swapping Worker A (outbound) with Worker B (inbound) causes any emergency duty count to drop below the platform minimum, the flight swap is flagged HOLD_EMERGENCY_MATRIX_DEFICIT even if Worker B is fully qualified for their primary maintenance trade.

3. Cross-asset fatigue, rest window, and working-hour checks

In alignment with the Ministry of Labour and Employment New Labour Codes, the mobilisation ledger tracks actual heliport/gangway check-out timestamps across all company installations—not just a single asset's roster sheet. If a contractor technician disembarked from Platform West at 2026-10-17T16:00:00Z after a 14-day hitch (168 hours worked), attempting to mobilise that technician to Platform East on 2026-10-20T07:00:00Z (63 hours elapsed rest vs minimum required 168 hours / 7 days field break for back-to-back rotation) triggers HOLD_FATIGUE_REST_VIOLATION.

4. Physical access badge and OT zone revocation on demobilisation

In accordance with NIST SP 800-82 Rev. 3 personnel access controls for critical facilities, mobilisation status directly governs physical turnstile badges and OT control-room access tokens. When a worker checks onto the inbound flight and registers at the platform gangway/helideck, their physical zone access and PTW receiver eligibility activate; the moment the worker manifests onto the outbound return flight, active PTW receiver authorisations and control-room access privileges for that installation automatically suspend.

Illustrative example (hypothetical scenario): 42-person crew change across 3 flights

Illustrative scenario notice: All site volumes, defect counts, error rates, engineering hours, and INR (₹) figures below are hypothetical scenario assumptions constructed to demonstrate the control math and workflow gating. Any time or cost reductions represent modeled process/capacity estimates under these assumptions, not achieved client benchmark savings or guaranteed cash realization.

Consider a scheduled Tuesday crew change (2026-10-20, 14-day hitch ending 2026-11-03, required validity horizon 2026-11-06) for Offshore Platform PLAT-KGD-02 (Certified Max POB = 120, Current POB = 114), involving 42 inbound personnel and 38 outbound personnel across three Sikorsky S-92 flights (14 seats per flight):

1. Projected Net POB Check: 114 current + 42 inbound - 38 outbound = 118 projected POB. While 118 <= 120 Max POB, two inbound vendor commissioning engineers were booked without corresponding outbound seats on Flight 3, which would momentarily push platform POB to 114 + 14 - 6 = 122 (+2 over capacity) between Flight 2 arrival (10:30) and Flight 3 departure (13:00). Action: Re-sequence 2 vendor inbound seats from Flight 2 to Flight 3 so instantaneous POB never exceeds 118.
2. Individual Readiness Audit (42 inbound personnel at T-48h):
   • 37 personnel (88.10%) pass all four gates (CLEARED_FOR_MANIFEST).
   • 2 personnel hold BOSIET or DGMS Medical certificates expiring on 2026-10-29 and 2026-11-04 (valid on departure day 2026-10-20, but expiring before the 2026-11-06 hitch-plus-buffer horizon) -> HOLD_EXPIRES_DURING_HITCH.
   • 1 crane operator lacks the Coxswain_Boat_2 emergency role held by the outgoing operator, leaving Boat 2 with only 1 Coxswain -> HOLD_EMERGENCY_MATRIX_DEFICIT.
   • 1 third-party mud-logging specialist disembarked from a neighbouring rig 4 days earlier after a 21-day hitch -> HOLD_FATIGUE_REST_VIOLATION.
   • 1 mechanical technician has a pending medical follow-up hold after blood-pressure screening -> HOLD_MEDICAL_UNFIT.
3. Pre-Flight Resolution: At T-36h, the Roster Manager replaces 4 held personnel from the pre-cleared standby pool and secures a documented 48-hour OIM/Medical renewal clearance for the technician who completed clinic re-testing, achieving 42 / 42 (100%) verified manifest compliance prior to T-12h flight lock.

Takeaway: Evaluating mobilisation readiness at T-48h against both the hitch-end date and transient flight-by-flight POB prevents heliport turn-backs and lifeboat capacity breaches.

Technical implementation: mobilisation readiness reconciliation record

{
  "mobilisation_check_id": "MOB-CHK-20261020-0019",
  "installation_id": "PLAT-KGD-02",
  "rotation_slot_id": "SLOT-CRANE-OP-B",
  "worker_id": "EMP-OFF-4829",
  "planned_flight_id": "HEL-S92-20261020-F1",
  "hitch_window": {
    "planned_mob_date": "2026-10-20",
    "planned_demob_date": "2026-11-03",
    "weather_buffer_days": 3,
    "required_validity_horizon": "2026-11-06"
  },
  "gate_evaluations": {
    "competence_and_medical": {
      "bosiet_huet_expiry": "2028-04-14",
      "dgms_medical_expiry": "2027-06-30",
      "stage_3_crane_expiry": "2027-09-15",
      "horizon_check_passed": true
    },
    "emergency_response_parity": {
      "outgoing_worker_er_roles": ["LIFEBOAT_COXSWAIN_BOAT2", "FIRE_TEAM_BA"],
      "incoming_worker_er_roles": ["FIRE_TEAM_BA"],
      "post_swap_boat2_coxswain_count": 1,
      "minimum_required_boat2_coxswains": 2,
      "parity_check_passed": false
    },
    "fatigue_and_rest_ledger": {
      "last_offshore_disembark_utc": "2026-10-05T14:30:00Z",
      "elapsed_rest_days": 14.7,
      "minimum_required_rest_days": 14.0,
      "rest_check_passed": true
    },
    "pob_and_bunk_allocation": {
      "assigned_bunk_id": "MOD-B-204-LOWER",
      "assigned_lifeboat_station": "BOAT-2-SEAT-14",
      "transient_platform_pob": 114,
      "certified_max_pob": 120,
      "pob_check_passed": true
    }
  },
  "reconciliation_outcome": {
    "overall_status": "BLOCKED_MOBILISATION_HOLD",
    "hold_reason_codes": ["HOLD_EMERGENCY_MATRIX_DEFICIT"],
    "resolution_owner": "OFFSHORE_ROSTER_MANAGER",
    "escalation_authority": "OFFSHORE_INSTALLATION_MANAGER"
  }
}

Acceptance tests and operational readiness thresholds

Summary and next actions

1. Separate roster planning from manifest clearance: Treat the rotation schedule as a planning baseline and require an automated four-source readiness token (CLEARED_FOR_MANIFEST) before assigning a heliport boarding pass.
2. Validate certificates against the hitch-end plus buffer horizon: Configure the LMS/HR check to require certificate validity through planned_demob_date + 3 days (or 5 days in monsoon season) so no qualification expires mid-hitch.
3. Simulate post-swap emergency response and transient POB counts: Verify that every crew change preserves minimum Coxswain, HERT, and Medic coverage and keeps flight-by-flight platform headcount within lifeboat capacity.
4. Link demobilisation manifests to physical and OT access revocation: Automatically suspend installation PTW receiver eligibility and control-room badge access when a worker boards the outbound return flight.