Guidelines for Initiating Events and Independent Protection Layers in Layer of Protection Analysis

381 Pages·2014·25.97 MB·English

GUIDELINES FOR
INITIATING EVENTS AND
INDEPENDENT PROTECTION
LAYERS IN LAYER OF
PROTECTION ANALYSIS

GUIDELINES FOR
INITIATING EVENTS AND
INDEPENDENT PROTECTION
LAYERS IN LAYER OF
PROTECTION ANALYSIS
Center for Chemical Process Safety
New York, NY
Center for Chemical Process Safety
W I L EY
Copyright © 2015 by the American Institute of Chemical Engineers, Inc. All rights reserved.
Published by John Wiley & Sons, Inc., Hoboken, New Jersey.
Published simultaneously in Canada.
No part of this publication may be reproduced, stored in a retrieval system, or transmitted in any form
or by any means, electronic, mechanical, photocopying, recording, scanning, or otherwise, except as
permitted under Section 107 or 108 of the 1976 United States Copyright Act, without either the prior
written permission of the Publisher, or authorization through payment of the appropriate per-copy fee to
the Copyright Clearance Center, Inc., 222 Rosewood Drive, Danvers, MA 01923, [phone], fax
[phone], or on the web at www.copyright.com. Requests to the Publisher for permission should
be addressed to the Permissions Department, John Wiley & Sons, Inc., 111 River Street, Hoboken, NJ
07030, [phone], fax [phone], or online at http://www.wiley.com/go/permission.
Limit of Liability/Disclaimer of Warranty: While the publisher and author have used their best efforts in
preparing this book, they make no representations or warranties with respect to the accuracy or
completeness of the contents of this book and specifically disclaim any implied warranties of
merchantability or fitness for a particular purpose. No warranty may be created or extended by sales
representatives or written sales materials. The advice and strategies contained herein may not be
suitable for your situation. You should consult with a professional where appropriate. Neither the
publisher nor author shall be liable for any loss of profit or any other commercial damages, including
but not limited to special, incidental, consequential, or other damages.
For general information on our other products and services or for technical support, please contact our
Customer Care Department within the United States at [phone], outside the United States at
[phone] or fax [phone].
Wiley also publishes its books in a variety of electronic formats. Some content that appears in print may
not be available in electronic formats. For more information about Wiley products, visit our web site at
www.wiley.com.
Library of Congress Cataloging-in-Publication Data:
Guidelines for initiating events and independent protection layers in layer of protection analysis /
Center for Chemical Process Safety of the American Institute of Chemical Engineers,
pages cm
Includes index.
Summary: "Presents a brief overview of Layer of Protection Analysis (LOPA)and its variations, and
summarizes terminology used for evaluating scenarios in the context of a typical incident sequence"—
Provided by publisher.
ISBN 978-0-470-34385-2 (hardback)
1. Chemical process control—Safety measures. 2. Chemical processes—Safety measures. 3. Chemical
plants—Risk assessment. I. American Institute of Chemical Engineers. Center for Chemical Process
Safety.
TP155.75.G854 2014
660'.2815—dc23 2014012633
Printed in the United States of America.
10 9 8 7 6 5 4 3 21
This book is one in a series of process safety guidelines and concept books pub-
lished by the Center for Chemical Process Safety (CCPS). Refer to www.wiley.
com/go/ccps for a full list of titles in this series.
It is sincerely hoped that the information presented in this document will lead to an
even more impressive safety record for the entire industry. However, the American
Institute of Chemical Engineers, its consultants, the CCPS Technical Steering Com-
mittee and Subcommittee members, their employers, their employers' officers and
directors, and Process Improvement Institute, Inc., and its employees do not war-
rant or represent, expressly or by implication, the correctness or accuracy of the
content of the information presented in this document. As between (1) American In-
stitute of Chemical Engineers, its consultants, CCPS Technical Steering Committee
and Subcommittee members, their employers, their employers' officers and direc-
tors, and Process Improvement Institute, Inc., and its employees, and (2) the user of
this document, the user accepts any legal liability or responsibility whatsoever for
the consequences of its use or misuse.

CONTENTS
List of Dota Tables xi
Acronyms and Abbreviations xv
Glossary xix
Acknowledgments xxv
Preface xxix
1. Introduction 1
1.1 Audience 2
1.2 Scope 3
1.3 Key Changes Since the Initial LOPA Concept Book 4
1.4 Recap of LOP A 6
1.4.1 What Is LOPA? 6
1.4.2 Common Elements of LOPA 8
1.4.3 When to Use LOPA 8
1.4.4 Inherently Safer Processes and LOPA 10
1.4.5 Advanced LOPA Techniques 10
1.5 Disclaimer 10
1.6 Linkage to Other CCPS Publications 11
1.7 Annotated Description of Chapters 13
2. Overview: Initiating Events and Independent Protection
Layers 16
2.1 LOPA Elements: An Overview 16
2.2 Management Systems to Support LOPA 16
2.3 Scenario Selection 18
VII
VIII INITIATING EVENTS AND INDEPENDENT PROTECTION LAYERS IN LOPA
2.4 Overview of Scenario Frequency 20
2.4.1 Scenario Definition and Level of Analysis 20
2.4.2 Equipment Failure Rate Considerations 21
2.4.3 Human Error Rate Considerations 22
2.4.4 Failure and Error Rate Data Sources 23
2.4.5 Validation of Failure/Error Rate Data 27
2.5 Overview of Consequences 28
2.5.1 Evaluation of Consequence Severity 28
2.5.2 Inherently Safer Design and Consequence Severity 29
2.6 Risk Considerations 29
2.6.1 Risk Assessment Methodologies 30
2.6.2 Risk Criteria 30
2.7 Conclusions 31
3. Core Attributes 34
3.1 Introduction to Core Attributes 34
3.2 Independence 35
3.2.1 Dependent Safety Systems 36
3.2.2 Common Cause Failure 36
3.2.3 Common Cause Modeled as Initiating Events 38
3.2.4 Advanced Methods for Addressing Common Cause 39
3.2.5 Common Cause Reflected in the Data Tables 40
3.3 Functionality 40
3.3.1 Time Dependency 41
3.3.2 SC AI and Response Time 44
3.3.3 Human-Based IPLs and Response Time 45
3.4 Integrity 47
3.4.1 Integrity of Equipment 48
3.4.2 Integrity as Related to Human IPLs 48
3.4.3 Revealed versus Unrevealed Failure 48
3.5 Reliability 49
3.5.1 Low Demand Mode 50
3.5.2 High Demand Mode 50
3.6 Auditability 52
3.7 Access Security 53
3.8 Management of Change 54
3.9 Use of Data Tables 55