On a producing well, barrier integrity is maintained by people. We read pressures, test valves, bleed annuli, and fix anything that degrades. This constant monitoring and intervention is an implicit part of the barrier design. Remove the people, and the entire system fundamentally changes character.
A barrier that relies on human oversight for its survival is not the same as one designed to survive because it is inherently inert and mechanically stable. This distinction is the single most critical idea separating well suspension design from permanent abandonment design, yet it’s routinely overlooked because we use the same vocabulary – “barrier” – for both.
Why Time Changes Everything for Well Barriers
A suspension barrier has a service life measured in months to a few years, with the explicit assumption that someone will return to the well. An abandonment barrier, by contrast, has no service life at all. It must function reliably after every organization involved has ceased to exist, with zero maintenance or monitoring.
For every barrier element, you must ask: what maintains this? If the answer involves a person, a pressure supply, a periodic test, or a chemical inhibitor, that element has a finite service life and is suitable only for suspension. If the answer is “nothing – it is inert and mechanically stable,” then it’s a candidate for permanent abandonment.
Elements Unsuitable for Permanent Abandonment
Consider common well elements and how they degrade when left unattended:
- Elastomeric packer seals: Prone to compression set, chemical attack, and explosive decompression from any pressure fluctuation. Suitable for short suspension only.
- Mechanical plugs with elastomers: Suffer the same elastomer degradation, plus debris accumulation can prevent later retrieval, turning a planned pull into a milling job.
- Closed valves: Seats corrode, scale builds up, and there’s no way to confirm they remain closed without intervention. Only viable for short suspension; never a permanent barrier.
- Fluid columns: Weight material settles, fluids dilute, gas can migrate through, or they can be lost to formation. Require constant monitoring and potential replenishment.
- Casing: Subject to internal and external corrosion. Once cathodic protection systems are off, its integrity depends entirely on the quality and longevity of the external annular cement.
The pattern is clear: anything that relies on an elastomer, stored energy, or a fluid property has a clock running on it. Only set cement across a competent formation, not exposed to attacking fluids, truly lacks a maintenance requirement and offers permanent integrity.
Suspension: Designing for a Return (That May Be Delayed)
Suspension design often fails because it’s based on an optimistic planned duration. Wells suspended for six months pending a workover routinely sit for four years because economics changed, the workover was deferred, or the rig went elsewhere. The original barriers, selected for six months, are now quietly past their design basis.
Two practical consequences follow. First, select barriers for a duration substantially longer than your planned suspension. Second, and more importantly, every suspension must include a defined monitoring regime and a clear review date. At this date, the arrangement is either renewed, upgraded, or converted to full abandonment. A suspension without a review date becomes a permanent condition by accident.
Retrievability also deserves specific thought. A plug that cannot be pulled because debris has accumulated on top, or because its retrieving profile has corroded, converts a planned intervention into an expensive milling job. For suspensions that may run long, a plug that is easy to mill can sometimes be a better choice than one designed for easy retrieval.
Abandonment: The Logic of True Permanence
Permanent abandonment reverses the design approach. Instead of asking what will hold for a given period, the question becomes what will still be holding when nothing can be inspected, repaired, or replaced. This drives a set of preferences that might seem overly conservative until the timescale is taken seriously:
- Cement across a formation, not cement inside a pipe. A plug set inside casing is only as good as the casing and its external cement. True isolation is established rock-to-rock, with the casing removed or perforated and cemented through, so it does not depend on steel that will eventually corrode.
- Competent formation as the sealing interface. The barrier is only as good as what it is sealing against. A cement plug across a permeable or fractured interval is effectively a plug in a pipe with holes in it.
- Length that tolerates imperfect placement. Plug length requirements are not primarily about the pressure the cement can hold – a short, perfectly bonded plug can hold enormous pressure. They are about the probability that some continuous portion of the placed length is properly bonded and uncontaminated.
- No reliance on anything requiring energy or attention. This means no valves, no applied pressure, no chemical inhibitors, and no monitoring.
Worked Example: Why Plug Length is About Placement, Not Strength
Consider a cement plug in 9⅝ in casing (8.681 in ID) that must hold a differential of 2,500 psi. If we take a conservative cement-to-casing bond shear strength of 50 psi, the force to be resisted is 2,500 psi × π × (8.681 in)² / 4 = 148,000 lbf. The bond area required would be 148,000 lbf / 50 psi = 2,960 in². This translates to a length of L = 2,960 in² / (π × 8.681 in) = 108 in ≈ 2.8 m.
Mechanically, under three meters of perfectly well-bonded cement holds this load. However, regulatory and good-practice plug lengths are an order of magnitude greater. This extra length is not strength margin; it is placement insurance. It exists because contamination, channeling, and mud pockets are likely somewhere in the interval, and the design assumes only a fraction of the placed length will actually be competent. Anyone arguing plug length solely from strength calculations has fundamentally misunderstood what the length is for.
The Awkward Middle Ground: Long-Term Suspension Risks
Wells suspended for years occupy an awkward middle ground where suspension elements are aging, but full abandonment has not been funded. This situation must be addressed explicitly, not by drift.
Remember, monitoring is not a barrier; it detects failure, it doesn’t prevent it. A suspension arrangement justified by monthly annulus pressure readings relies on a detection system. This detection only has value if there’s a defined response and the immediate capability to execute it. If the response to a detected failure is “mobilize a rig within eighteen months,” the monitoring isn’t providing the protection implied.
Your Barrier Design Decision Checklist
- For every barrier element, ask: What maintains this? If it requires human intervention, it’s not permanent.
- Select suspension barriers for a duration substantially longer than planned, accounting for deferrals.
- Ensure every suspension includes a defined monitoring regime and an explicit review date.
- Write the expiry date of the suspension directly on the barrier diagram. Diagrams get looked at; separate schedules get filed.
- For long-term suspensions, establish if any barrier element has exceeded its known service life. If so, the well is outside its design basis.
- Assess if the current barrier arrangement is monitorable. An unmonitorable barrier past its service life is an unquantified risk.
- Consider upgrading single, time-limited elements (e.g., replacing an elastomer-dependent plug with a cement plug) to convert the arrangement from time-limited to durable. This is often cheaper than full abandonment and removes the clock.
The Bottom Line
The most common integrity problem on suspended wells isn’t that a barrier failed, but that the arrangement was never reviewed after its underlying assumptions expired. Suspension designs are built around a return date; when that date passes, the design basis quietly becomes fiction while the paperwork still reads as valid. Putting the expiry date on the diagram, and treating an expired suspension as a deviation requiring a decision, catches this critical oversight in a way no amount of additional barrier hardware will. Have a question about your well? Reach out via the contact page.