Oil & gas projects fail loudly. Cost overruns measured in billions, schedule slips measured in years, and post-mortems that always trace back to the same root cause: a risk register that wasn't actually used.
This guide is the upstream and midstream practitioner's reference for building an oil & gas risk register that drives sanction, not just satisfies the auditor — tuned for UK North Sea, GCC Aramco/ADNOC, and global LNG projects.
Independent reviews of major upstream and LNG projects consistently show cost overruns of 30–100% and schedule slips of 1–3 years. The risk register is the early-warning system that prevents both — if it is structured and used.
What makes oil & gas registers different
The fundamentals are the same as any risk register — WHY / WHAT / HOW statements, named owners, numeric probability, 3-point cost and schedule impact. What's different is the risk universe:
- Subsurface uncertainty. Reservoir quality, recovery factor, well productivity — locked into every cost and schedule decision.
- Long-lead equipment. GIS modules, compressors, subsea trees, FPSO topsides — single-source, 24–48 month leads, geopolitical exposure.
- Permits & consents. OPRED in the UK, MOIM/Aramco approvals in Saudi, ADNOC HSEIA in UAE — non-linear timelines.
- Regulatory & HSE. COMAH, SEMS, IOGP guidance, Bowtie analyses for major-accident hazards.
- Commodity exposure. Steel, copper, nickel, FX — correlated across packages.
- Industrial relations & labour pools. North Sea offshore rota, GCC visa quotas, regional craft availability.
The oil & gas risk taxonomy
A robust register starts with a category taxonomy that the workshop team agrees before any risk is written:
| Category | Typical risks |
|---|---|
| Subsurface & reservoir | Reservoir quality, water cut, gas-oil ratio, well productivity, geomechanics, drilling complexity. |
| Design maturity | Late FEED changes, FOAK process technology, vendor design rework. |
| Procurement & supply chain | Long-lead equipment slip, single-source LSTK contractor decline, vendor financial distress. |
| Construction & commissioning | Modularisation interfaces, sailaway weather windows, hook-up and commissioning productivity. |
| HSE & major-accident | COMAH compliance, regulatory near-miss escalation, Bowtie barrier failure. |
| Regulatory & permits | OPRED, ADNOC HSEIA, MOIM approvals, third-party consents. |
| Commercial & contractual | LSTK price exposure, FIDIC variations, FX, commodity, liquidated damages. |
| Geopolitical & market | Sanctions, export controls, oil-price scenarios, host-government policy. |
| Industrial relations | Offshore craft availability, strikes, visa quotas (GCC), training pipeline. |
| Decommissioning & abandonment | End-of-field liability, regulatory uplift, well abandonment cost growth. |
Top 10 high-impact oil & gas risks (UK + GCC patterns)
- Long-lead equipment slip on critical path — subsea trees, compressors, GIS modules.
- Sailaway weather window miss — North Sea topsides, FPSO tow-out.
- Subsurface productivity below P50 — reservoir performance worse than base case.
- FEED maturity gaps at sanction — design-rework spiral once EPC starts.
- Regulatory consent slip — OPRED / HSEIA / MOIM bottlenecks.
- Steel & commodity escalation — correlated across packages.
- Labour availability and rota constraints — offshore craft and visa-restricted regions.
- Vendor financial distress — single-source LSTK exposure.
- Brownfield tie-in shutdown overruns — turnaround scope creep.
- HSE major-accident event during construction — project-pause exposure.
Quantification: linking the register to QSRA, QCRA & JCL
Oil & gas projects almost always need integrated cost & schedule risk (JCL) rather than siloed analysis — because:
- Long-lead slip drives time-dependent costs (rigs, offshore PMC, financing).
- Weather window misses cascade into sailaway and hook-up productivity.
- Permit slip pushes drilling spread costs and rig demobilisation penalties.
Every register entry needs: numeric probability, 3-point cost impact (£ or $), 3-point schedule impact (days), affected activity in P6/MSP, affected cost line in the estimate, and correlation flag.
Where workshop estimates fail (and why oil & gas needs RDE™)
Subsurface and commercial uncertainty ranges in oil & gas are notoriously underestimated by workshop teams — see three-point estimates & RDE™.
IQRM's Risk Data Engine™ (RDE™) calibrates impact ranges against historical UK North Sea, GCC, and global LNG project performance — replacing optimistic workshop ranges with empirical distributions that survive lender stress tests.
Frequently asked questions
How is an oil & gas register different from a construction register?
It adds subsurface, regulatory, and geopolitical categories. The base structure is the same as any defensible risk register.
Should we run separate registers for HSE major-accident risks?
No — integrate them into the same register with a Bowtie reference. Separate registers fragment ownership and obscure interdependencies.
What's the right cadence for oil & gas?
Monthly for the full register; weekly for top-quartile risks; immediate review on FEED-EPC handover, FEL gates, and any major scope or vendor change.
How does the register feed sanction-stage QCRA?
Every residual risk maps to a cost line and an activity ID in the QCRA / JCL model. See contingency calculation for the P-value extraction.
Build oil & gas registers that survive sanction
The QRM Professional Programme covers upstream and midstream risk register design, RDE™ calibration, and integrated QSRA/QCRA/JCL workflows.
Explore the Programme →Related: Risk Register Guide · Construction Risk Register · Integrated JCL · 3-Point Estimates & RDE™
