DNV-RP-N103 Cathodic Protection: Galvanic vs ICCP, Sacrificial Anode Design, and What Engineers Get Wrong

1. Why Offshore Steel Requires Cathodic Protection

Bare carbon steel submerged in seawater corrodes at rates of 0.1–0.3 mm/year depending on oxygen availability, flow velocity, temperature, and microbiological activity. A typical jacket structure with 50 mm wall thickness at critical nodes would be structurally compromised within 15–25 years without corrosion control — well within the intended 25–30 year design life.

Coatings provide the first line of defence but degrade over time. Cathodic protection (CP) provides the second line: even after coating breakdown, CP prevents corrosion at exposed metal surfaces by maintaining an electrochemical potential at which the dissolution of iron is thermodynamically unfavourable.

DNV-RP-N103 provides the design methodology, current density requirements, and monitoring criteria for CP systems on offshore structures. It governs both the initial design (anode type, mass, distribution) and the in-service assessment (potential surveys, anode consumption checks, retrofit criteria).

2. Galvanic (Sacrificial Anode) vs ICCP: When Each Applies

Two distinct CP technologies apply to offshore structures. The choice depends on structure type, water depth, power availability, and the required adjustment capability.

For unmanned subsea structures with no power infrastructure — manifolds, templates, PLEM, pipeline spans — galvanic CP is the only practical option. For floating production units where the topsides can supply power and periodic dry-dock inspection is feasible, ICCP offers the advantage of adjusting protection level to actual consumption rather than the worst-case design scenario.

3. Protection Potential Criteria

DNV-RP-N103 defines protection as achieved when the steel surface potential is more negative than the protection criterion, but less negative than the overprotection limit §4:

The free corrosion potential of carbon steel in seawater is approximately −0.65 to −0.70 V vs Ag/AgCl. Cathodic protection shifts this to −0.80 V or more negative by supplying cathodic current — the electrochemical cell drives dissolution of the anode rather than the structure.

4. Current Density Design Values by Depth and Zone

The cathodic protection current demand depends on the oxygen content of the water, flow velocity, temperature, and the state of any coating. DNV-RP-N103 provides design current densities as a function of water depth and structure zone §5:

The current density is applied in three phases: initial (start of design life, with fresh coating), mean (average over design life accounting for progressive coating breakdown), and final (end of design life, fully broken-down coating). All three must be checked — the initial value governs the instantaneous current output requirement for each anode, while the mean value governs the total anode mass (integrated over life).

5. Sacrificial Anode Mass Calculation

The required net anode mass is derived from the total charge (current × time) needed to protect the structure over its design life, divided by the electrochemical efficiency of the anode alloy §6:

Anode alloy properties

The utilisation factor u accounts for the fact that an anode cannot be consumed to zero — the geometry deteriorates and current distribution becomes less effective as the anode wastes away. DNV-RP-N103 typically uses u = 0.80 for bracelet anodes and u = 0.75–0.85 for flush-mount or sled-type anodes depending on configuration.

The coating breakdown factor f_c increases from near-zero (intact coating) to 1.0 (fully broken down) over the design life. In practice, a polynomial increase is used, and both the mean and final values are specified in DNV-RP-N103 as a function of coating type and seawater temperature.

6. Design Life Calculation and Verification

The design life verification confirms that the net anode mass installed is sufficient to deliver the required current for the full design life, and that the anode current output at start of life and end of life meets the instantaneous demand:

Anode resistance

The resistance of a flush-mounted anode to the surrounding electrolyte determines its instantaneous current output. For a slender bracelet anode, the McCoy formula applies:

Deep water has higher resistivity and lower driving voltage from Al-Zn-In anodes (due to lower seawater temperature reducing activation). These opposing effects are both captured in the DNV-RP-N103 current density tables, which already account for the combined environmental effect at depth.

7. CP Monitoring During Service

CP systems must be verified in service to confirm the protection criterion (E ≤ −0.80 V) is met and that anodes are consuming at the expected rate. DNV-RP-N103 §9 and associated inspection codes define the survey programme:

Potential surveys

ROV-deployed Ag/AgCl potential probes measure the steel potential at representative locations across the structure. Survey points typically include:

• All main tubular joints (chord-brace intersections)
• Splash zone and upper jacket members (worst environment)
• Locations remote from anodes (to check that attenuation is within design limits)
• Any areas where coating damage has been observed

If any location shows E > −0.80 V vs Ag/AgCl during in-service survey, the CP system is inadequate at that point — either the anode is depleted, the anode distribution is inadequate, or a shielding effect is preventing current reaching the steel.

Anode consumption surveys

Visual ROV inspection documents anode dimensions. The measured cross-section is compared to the original drawing to estimate remaining anode mass and projected time to depletion. If depletion is projected before end of design life, retrofi action is required.

8. Retrofits: When Original CP is Insufficient

Retrofit CP is required when in-service surveys show either inadequate potentials or anode depletion that will occur before structure end of life. Options include:

9. HISC Interaction with Duplex Stainless Steel

Duplex stainless steel (22Cr, 25Cr grades) is extensively used in offshore applications for high-pressure, high-temperature, or corrosion-critical components — flowline connectors, riser flanges, umbilical end fittings, and subsea valve bodies.

When duplex SS components are electrically connected to a carbon steel structure under CP, the protection potential can exceed the susceptibility threshold for Hydrogen Induced Stress Cracking (HISC). DNV-RP-F112 governs this interaction.

The HISC mechanism in CP context

Three conditions must coexist for HISC to occur:

• Sufficient cathodic protection potential: typically E < −0.90 V vs Ag/AgCl for susceptible duplex grades
• Mechanical stress: residual stress from welding, machining, or applied load — particularly tensile stress at surface
• Diffusible hydrogen: generated at the steel surface by the cathodic reaction; diffuses into the microstructure at stress concentration points

NORSOK M-001 material selection criteria specify where duplex and super-duplex grades are required (PREN ≥ 35 for standard duplex, ≥ 40 for super-duplex in aggressive service). Any component falling into these categories must be reviewed against the HISC requirements of DNV-RP-F112 when CP is present.

10. Common Pitfalls in CP Design and Survey

Design calculation errors

• Applying bare-steel current density to coated surfaces without a coating breakdown factor — coating dramatically reduces initial demand; ignoring it produces conservative (oversized) anodes, but using the wrong breakdown function for the final condition can leave the structure underprotected at end of life
• Using mean current density alone to size anodes without checking the initial and final instantaneous requirements — a design that satisfies the mass requirement can still fail the instantaneous check if anodes are undersized per unit length and cannot deliver the initial current surge
• Not accounting for shielding by jacket members — anodes on the windward face do not protect the leeward face of a dense jacket. The current attenuation through a complex node cluster must be modelled, not assumed uniform

Survey and assessment errors

• Reporting E = −0.85 V at survey as "satisfactory" without checking whether nearby duplex components are simultaneously receiving overprotection — CP compliance for carbon steel and HISC compliance for duplex must be checked concurrently in the same survey
• Projecting anode life from visual inspection alone without dimensional survey — a heavily pitted anode may appear "mostly intact" visually while having lost 40–50% of its mass; only dimensional measurement gives remaining mass
• Not adjusting current density design values for deep-water installations — using shallow-water current densities for a deep-water subsea template overestimates demand by 2–3×, producing heavier-than-necessary anode weights