You’ve spec’d out the perfect subsurface safety valve (SCSSV) for your well. It’s rated, qualified, and you trust it as a primary barrier. But the valve is only one part of the system. To operate it, a hydraulic control line must breach the very barrier you’re trying to establish.
This line runs from surface, through the tubing hanger, down the annulus, and into the tubing wall at the valve itself. It’s a deliberate hole through your primary barrier, and it’s often treated as mere plumbing. This oversight is common, but it’s a mistake. Control line issues are a leading cause of SCSSV unavailability. A failure at the wrong depth can compromise well integrity, allowing annulus fluid into the tubing or vice-versa, depending on your pressure regime.
The Engineering Reality of Control Line Penetrations
The engineering reality is that this “plumbing” involves three distinct barrier crossings, each with its own set of failure characteristics. Understanding these points is crucial for robust design and installation.
The Tubing Hanger Penetration
This is where the control line passes through the tubing hanger via a port, typically sealed with metal-to-metal or elastomeric seals. This connection is highly susceptible to installation damage. Routing, cutting, flaring, fitting, and torquing are all done by hand on the rig floor, often in tight spaces and under schedule pressure. These field-assembled fittings are the single most common source of control system leaks.
The Annulus Run
Downhole, the control line is clamped to the tubing at regular intervals. While it doesn’t penetrate a barrier here, it resides within the A-annulus, exposed to whatever fluids and conditions exist there. Common failures include chafing at clamps, crushing during running-in-hole (RIH), corrosion if the encapsulation is breached, and fatigue where the line spans unsupported across a tubing coupling.
The Valve Entry
This is the true downhole barrier crossing, where the control line enters the tubing wall at the safety valve itself. The seal here is an integral part of the valve assembly, qualified with it. However, the connection to the incoming control line is still made in the field, introducing another potential weak point.
Understanding Control Fluid Hydrostatic Head
Beyond the physical penetrations, the control fluid itself introduces a critical operational factor: hydrostatic head. The hydraulic fluid in the line is not inert; it exerts a hydrostatic pressure that adds significantly to any surface pressure applied. On deep-set valves, this hydrostatic head is often what primarily holds the valve open, with surface pressure only providing the top-up.
Ignoring control fluid density in your opening and closing pressure calculations will lead to substantial errors, especially in deeper wells. The deeper the valve, the greater this error.
Consider a tubing-retrievable safety valve set at 1,050 m TVD. If your control fluid is a 1.05 sg water-glycol blend, the hydrostatic head is approximately 1,566 psi (0.433 × 1.05 × (1,050 m 3.281 ft/m)). If the valve requires 3,200 psi differential across its operating piston to stay open against tubing pressure, your required surface control pressure would be 3,200 psi – 1,566 psi = 1,634 psi.
Now, imagine that same valve is later deepened to 2,400 m TVD during a workover. The hydrostatic head alone would then be approximately 3,580 psi. In this scenario, the valve would hold open on hydrostatic pressure alone, and a surface bleed-off might no longer reliably close it. This is why you cannot change a valve’s setting depth without fully requalifying the control system – a change that often looks trivial on a completion sketch.
Decision Checklist for Control Line Integrity
To mitigate these risks and ensure the long-term integrity of your SCSSV system, incorporate these critical checks into your design and installation procedures:
- Material Compatibility: Confirm the control line material is compatible with the annulus fluid over the well’s design life, accounting for packer fluid additives and potential souring. Remember, stainless control line in a chloride-bearing brine at temperature is a prime candidate for chloride stress-corrosion cracking.
- Encapsulation Integrity: Specify fully encapsulated control line and verify that the encapsulation is continuous across every clamp and splice point.
- Minimize Field Connections: Count the number of field-made connections and actively work to minimize them. Each connection is an independent leak candidate, assembled under less-than-ideal rig floor conditions.
- Accurate Clamp Spacing: Verify clamp spacing against actual tubing coupling positions. This prevents clamps from landing on upsets and eliminates long, unsupported spans across potential doglegs.
- Thorough Pressure Testing: Pressure-test the complete control line to its rated pressure after the hanger lands. Use a hold period long enough to detect slow leaks—a five-minute test will not find a fitting weeping at millilitres per hour.
- Document Pressures: Record the calculated opening and closing pressures, along with the specific control fluid density used, in the well file. This becomes your reference for all future function tests.
- Assess Common-Cause Dependency: If a second hydraulically operated device shares the same control system, confirm that a single line failure does not defeat both. If it does, accept and clearly document this common-cause dependency in your barrier schematics.
Common Failure Modes and Lessons Learned
Understanding the common failure modes and their signatures is key to early detection and effective intervention:
- Fitting Leak (Hanger or Tree): This manifests as a slow control pressure loss with no effect on the annulus. You’ll often see fluid visible at the surface. These are generally recoverable without a rig, by simply remaking the fitting.
- Chafe or Crush (Annulus): If the control line is chafed or crushed at a clamp point in the annulus, your control pressure will not hold. You’ll observe control fluid entering the A-annulus, and the annulus level may rise. Sometimes, an insert valve can recover this, but often it requires a workover.
- Corrosion Pinhole (Splash Zone/Wet Annulus): A pinhole from corrosion, particularly in the splash zone or a wet annulus, typically shows as a gradual increase in top-up volume over months. An insert valve might be a temporary fix.
- Encapsulation Breach: This has no immediate symptom but accelerates corrosion of the control line itself. It’s not directly detectable until a leak develops.
- Valve Piston Seal: A failure of the valve piston seal at the SCSSV will result in control fluid loss with communication to the tubing. Surface pressure may track tubing pressure. This always requires an insert valve or a full workover.
The critical operational distinction is between a leak above the wellhead and one below it. Above the wellhead, the leak is visible, the primary barrier is not breached, and the repair is usually straightforward. Below the wellhead, control fluid is lost into the annulus or tubing, detectable only as a trend in top-up volumes. Repair almost always necessitates an insert valve or a full workover.
Lesson Learned: Track Control Fluid Volumes
This is critical. Don’t just log ‘topped up control line – OK’. Track control-fluid top-up volume as a logged number, recording the actual millilitres added. A line losing 200 ml per week is a nuisance; that same line losing 200 ml per day three months later is a failure in progress. Quantifiable data provides a leading indicator, often giving you weeks of warning before a valve becomes unavailable.
Barrier Diagram Integrity
Your control line penetrates the barrier envelope. It absolutely must appear as a numbered element on your barrier diagram, complete with its own rating, test date, and test direction. If the control line is missing from your barrier diagram, you have an unshaded, undocumented path through your primary envelope.
The Bottom Line
While your SCSSV is rigorously qualified in a test facility, its operational reliability hinges on the control line—a component assembled on the rig floor with hand tools. The overall integrity of your barrier system is defined by that field assembly, not just the factory qualification. Allocate your design and operational scrutiny accordingly. Have a question about your well? Reach out via the contact page.