Practical HAZOPS Forengineers and Technicians PDF
Practical HAZOPS Forengineers and Technicians PDF
With offices conveniently located worldwide, IDC Technologies has an enthusiastic team of professional
engineers, technicians and support staff who are committed to providing the highest level of training and
consultancy.
TECHNICAL WORKSHOPS
TRAINING THAT WORKS
We deliver engineering and technology training that will maximize your business goals. In today’s
competitive environment, you require training that will help you and your organization to achieve its goals
and produce a large return on investment. With our ‘training that works’ objective you and your
organization will:
• Get job-related skills that you need to achieve your business goals
• Improve the operation and design of your equipment and plant
• Improve your troubleshooting abilities
• Sharpen your competitive edge
• Boost morale and retain valuable staff
• Save time and money
EXPERT INSTRUCTORS
We search the world for good quality instructors who have three outstanding attributes:
1. Expert knowledge and experience – of the course topic
2. Superb training abilities – to ensure the know-how is transferred effectively and quickly to you in
a practical, hands-on way
3. Listening skills – they listen carefully to the needs of the participants and want to ensure that you
benefit from the experience.
Each and every instructor is evaluated by the delegates and we assess the presentation after every class to
ensure that the instructor stays on track in presenting outstanding courses.
REFERENCE MATERIALS
A fully illustrated workshop book with hundreds of pages of tables, charts, figures and handy hints, plus
considerable reference material is provided FREE of charge to each delegate.
IDC workshops also satisfy criteria for Continuing Professional Development according to the
requirements of the Institution of Electrical Engineers and Institution of Measurement and Control in the
UK, Institution of Engineers in Australia, Institution of Engineers New Zealand, and others.
CERTIFICATE OF ATTENDANCE
Each delegate receives a Certificate of Attendance documenting their experience.
ONSITE WORKSHOPS
All IDC Technologies Training Workshops are available on an on-site basis, presented at the venue of
your choice, saving delegates travel time and expenses, thus providing your company with even greater
savings.
OFFICE LOCATIONS
AUSTRALIA • CANADA • INDIA • IRELAND • MALAYSIA • NEW ZEALAND • POLAND •
SINGAPORE • SOUTH AFRICA • UNITED KINGDOM • UNITED STATES
[email protected] www.idc-online.com
Practical HAZOPS
For Engineers and Technicians
Revision 4
Website: www.idc-online.com
E-mail: [email protected]
IDC Technologies Pty Ltd
PO Box 1093, West Perth, Western Australia 6872
Offices in Australia, New Zealand, Singapore, United Kingdom, Ireland, Malaysia, Poland, United States of
America, Canada, South Africa and India
All rights to this publication, associated software and workshop are reserved. No part of this publication
may be reproduced, stored in a retrieval system or transmitted in any form or by any means electronic,
mechanical, photocopying, recording or otherwise without the prior written permission of the publisher. All
enquiries should be made to the publisher at the address above.
ISBN: 978-1-921007-064
Disclaimer
Whilst all reasonable care has been taken to ensure that the descriptions, opinions, programs, listings,
software and diagrams are accurate and workable, IDC Technologies do not accept any legal responsibility
or liability to any person, organization or other entity for any direct loss, consequential loss or damage,
however caused, that may be suffered as a result of the use of this publication or the associated workshop
and software.
In case of any uncertainty, we recommend that you contact IDC Technologies for clarification or assistance.
Trademarks
All terms used in this publication that are believed to be registered trademarks or trademarks are listed
below:
Acknowledgements
IDC Technologies expresses its sincere thanks to all those engineers and technicians on our training
workshops who freely made available their expertise in preparing this manual.
Contents
Glossary xi
1 Introduction 1
1.1 General information 1
1.2 Workshop outline 2
1.3 Reference sources 3
2 Introduction to HAZOP 5
2.1 What is HAZOP? 5
2.2 Who does it? 5
2.3 How is it done? 5
2.4 To what? 6
2.5 When? 7
2.6 Why do we do HAZOPS? 7
2.7 Alternatives to HAZOP 8
2.8 Next study steps 9
Appendix 2 115
Appendix 3 119
Appendix 4 123
Appendix 5 137
Appendix 6 149
Appendix 7 195
Glossary
Abbreviations and terminologies used in
this manual or relevant to hazard studies
and safety instrumented systems
AECI
South African Chemicals manufacturing company. Originally part of the ICI Chemicals
Group the company produced a wide-ranging manual on HAZOP procedures based on
many years of practical experience within the ICI group.
ALARP
As Low As Reasonably Practicable. The UK Health and Safety Executive (HSE) adopted
this expression to describe the principle that can be applied to determine if an acceptably
low risk of harm has been achieved when safety measures are applied to potentially
hazardous situation. See Chapter 6.
Architectural constraints
Refers to the need for fault tolerant structures to be provided in SIS sub systems where
safe failure cannot always be assured. In practice this means 2 or more redundant devices
are needed to achieve high SIL ratings unless very safe failure fractions can be shown.
See IEC 61511-1 clause 11.4
Availability
The probability that an item of equipment or a control system will perform its intended
task. It is often expressed as a percentage of the time per year of use
Common-cause failure
Failure of a plant item or safeguarding system as a result of one or more events, originating
from the same external or internal conditions, causing coincident failures of two or more
separate channels in a multiple channel system.
Demand mode
Applies to a safety-instrumented system when the frequency of demands for operation is no
greater than once per year. (Refer IEC 61511 –1). The safety performance in this mode is
measured by the probability of failure on demand. See PFD. See high demand mode
ELD
Engineering Line Diagram. Often used as an alternative term for P&ID, especially
mechanical plant applications. Can be used as a basis for plant definition in HAZOP.
EPSC
European Process Safety Centre.
This is an international industry-funded organisation that provides an independent technical
focus for process safety in Europe. Based in Rugby, UK at the offices of the Institute of
Chemical Engineers it is supported by many large chemical companies. The EPSC guide
“HAZOP Guide to best practice” has been consulted extensively in the preparation of this
manual. See Appendix 1 for reference details.
ESD
See Emergency shutdown system
Fail-safe
A control system response that, after one or multiple failures, lapses into a predictable
safe condition.
Failure modes
In safety-instrumented systems, 4 types of failure mode are recognized:
Detected safe failure, (revealed fault).
Undetected safe failure. (An unrevealed fault that leads to a dangerous state)
Detected dangerous failure. A fault that is potentially dangerous but is detected by the
system diagnostics, see revealed fault).
Undetected dangerous failure (A fault that prevents the system from providing its safety
function and remains hidden within the system permanently or until found by periodic
functional testing.)
Fault
IEC definition: “abnormal condition that may cause a reduction in, or loss of, the
capability of a functional unit to perform a required function”.
Fault tolerance
IEC definition: “ability of a functional unit to perform a required function in presence of
faults or errors”. Hence Fault tolerance level of 1 tolerates 1 dangerous failure without
loss of safety function.
FLD
Functional Logic Diagram. A graphical representation of control system functions,
showing the logic-gates and timers as well as the logic signal interconnections.
FMEA
Failure Mode and Effect Analysis. A numerical technique for assisting hazard analysis of
mechanical or electronic equipment. Systematic component level analysis of the failures
resulting from each component or subsystem within an electronic system (typically a
process instrument). Also: FMECA: Criticality Analysis. Applies when FMEA is
extended to identify dangerous or critical failure modes.
Functional safety
Safety that depends on the correct functioning of the SIS and other active protection
layers. Hence a functional safety system provides safety by the way it functions. This
distinguishes it from safety due to its presence such as a fire door or blast proof wall or a
hard hat.
HAZAN
Generic abbreviation for Hazard analysis.
xiv Practical HAZOPS Trips and Alarms
Hazard analysis
Describes the procedures for examining the possible causes of a hazard to decide the
likelihood or hazardous event frequency. Hazard analysis methods therefore quantify the
hazard. Sometimes confused with Hazard Identification. When the hazard analysis is
extended to quantify the consequences of a hazardous event it becomes a risk assessment.
See Chapter 8.
Hazard study
Generic term for any systematic method of identifying hazards and evaluating how they
can be avoided.
HAZID
Hazard identification technique. Generic term, widely used, to describe any method of
identifying hazards. These will include checklist methods, and guideword tables.
Corresponds to preliminary process hazard analysis (PHA) or Hazard study level 2. See
Appendix 4.
HAZOP
Term applied to the structured and systematic examination of a process or system in
functional parts to find possible hazards and operability problems. HAZOP is one of a
number of recognized hazard study methods.
Logic Solver
E/E/PES components or subsystems that execute the application logic. A relay system,
solid-state logic, pneumatic logic or a PLC can perform this role.
HIPPS
High Integrity Pressure Protection System. Also called “Over Pressure Protection System”.
HMI
Human to Machine Interface or “operator interface”, usually a computer screen to present
the actual process and system status.
I ChemE
UK Institution of Chemical Engineers.
ICI
ICI Ltd. Originally an abbreviation for Imperial Chemical Industries Ltd, major UK and
international producer of chemicals, explosives, agri-chemicals, plastics and
pharmaceuticals etc. ICI chemical plant design teams pioneered the development of
HAZOP study method in the 1960s and many publications are based on the guidelines and
experience arising from this organisation. (See AECI)
Abbreviations and Glossary of terms xv
IEC
International Electrotechnical Commission. Based in Geneva. Develops a vast range of
internationally supported standards. IEC 61882 is an established standard for HAZOP
method.
Inherently fail-safe
A characteristic property of a device or a control system that causes it to revert to a non
hazardous state if a failure occurs in the device. The fail-safe property derives from the
principle itself and not from additional components or test circuits.
Logic solver
E/E/PES components or subsystems that execute the application logic. Electronic and
programmable electronics include input/output modules. Some SIS functions do not
require a logic solver.
MTBF
Mean time between failures. ( Statistical). This term is normally applied to serviceable
equipment, typically instrument sensors, valves or PLCs. Hence normally used in SIS
reliability calculations.
MTTF
Mean time to fail. This term is normally applied to disposable single life components
such as relays or resistors, which are replaced when they fail. Numerically the same as
MTBF when calculating reliability of a SIS.
MTTR
Mean Time To Repair. The mean time between the occurrence of a failure and the return
to normal failure-free operation after a corrective action. This time also includes the time
required for failure search and re-starting the system. Alternative: Mean Time To Restore.
Nuisance failure
See “Spurious Trip”
Overt faults
Faults that are classified as announced, detected, revealed, etc. Opposite of “covert fault”.
PES
Programmable Electronic System. Refers particularly to process control systems and
safety control systems using digital electronics in the form of PLCs and DCS. Identifies
devices that depend on software as well as hardware for their correct functioning.
P&ID
Piping and Instruments Diagram. Alternatively: Process and Instruments Diagram. Single
or multiple set of drawings defining all process plant equipment and piping
interconnections with all valves and line devices and includes details of controls and
instrumentation.
PID Controller
Automatic control function employing proportional, integral and derivative functions of the
deviation from set point to drive a corrective action in the process.
PLC
Programmable Logic Controller. Refers to industrial grade PLCs usually seen in BPCS
duties. See safety PLC.
Proof test
A 100% functional test used to prove the availability of a safeguarding system.
Reliability
The probability that no functional failure has occurred in a system during a given period of
time.
Safety availability
Probability that a SIS is able to perform its designated safety service when the process is
operating. The average Probability of Failure on Demand (PFDavg) is the preferred term.
(PFD equals 1 minus Safety Availability).
Safety lifecycle
Necessary activities involved in the implementation of safety-related systems, occurring
during a period of time that starts at the concept phase of a project and finishes when all of
the E/E/PE safety-related systems, other technology safety-related systems and external
risk reduction facilities are no longer available for use.
Abbreviations and Glossary of terms xvii
Safety PLC
PLC or controller specially designed and configured for safety duties. The safety PLC is
characterized by specialized software design to reduce the chances of systematic errors
being introduced into its operating system and in its application software. The hardware
system is provided with comprehensive internal diagnostic routines and techniques
designed to check for the presence of known types of electronic faults. All diagnostics are
designed to result in safe failure states of the safety functions.
SCADA
Supervisory Control and Data Acquisition. This term is most commonly applied to PC
based equipment interfaced to plant via PLCs or input output devices.
SIL
Safety Integrity Level defining a PFD by order of magnitude, which is related to the risk
involved in various types of processes. The SIL range is from 1 to 4 as defined in IEC
61508. Process plants are normally restricted to using SILs 1 to 3. See IEC 61511 pat 1
clauses 9.2.3 and 9.2.4.
Spurious trip
A plant trip arising out of an overt or detected equipment failure in the SIS or an
erroneous assessment of the situation. (E.g. error in the logic functions). A shutdown is
initiated, though no demand for safety function response exists. Also referred to as a
“false trip” or a “nuisance failure”. Spurious trips can contribute to the hazard rate of the
plant through the disturbances so caused.
Systematic failures
Failures occurring in identical parts of a (redundant) system due to similar circumstances.
History shows that also errors in specification, engineering, software and environmental
factors, such as electrical interference or maintenance errors must be considered. Such
faults can only be eliminated by a modification of the design or of the manufacturing
process, operational procedures, documentation or other relevant factors.
Trip
A shutdown of the process or machinery by a safety system. The plant cannot start
operating again until there is a manually initiated restart procedure.
Introduction
The successful practice of the technique is very dependent on the skills of the facilitator
or HAZOP team leader. This manual identifies the leader’s tasks and provides a first level
of training in those duties. HAZOP leadership skills are largely based on the subsequent
experience to be gained by the leader whilst making good use of the best available advice
and guidance.
2 Practical HAZOPS for Engineers and Technicians
Both those who will participate in workshops, either as facilitator or team member, and
those who will be recipients of workshop reports are encouraged to participate in this
training to learn the behaviors necessary to contribute and respond optimally in the
performance of a HAZOP workshop.
Obvious Obvious
See what Experience
happens !
HAZARDS Codes of
Checklist practice
HAZOP
Hazard analysis
(HAZAN)
Identifies the problem Quantifies the problem
Figure 1.1
Differences between HAZOP and HAZAN
Please note that there is a glossary of abbreviations and terms placed at the beginning of
the manual for help with the jargon and acronyms that inevitably arise from a technical
subject.
Introduction 3
Material for this course have also been sourced from previous and existing IDC Training
Manuals, in particular:
• Training notes from earlier IDC HAZOP workshops have been integrated
into this edition and IDC Technologies acknowledges with thanks the
contribution of Max Barrie for much of the core material on HAZOP
workshop techniques.
• Practical HAZOPS, Trips and Alarms: IDC Technologies’ training
manual that combines training in hazard studies with training in safety
instrumented systems. Substantial material from this source has been
adopted for this manual where we have more focus on the core training in
HAZOP methods.