Hazard Analysis Techniques for System Safety

522 Pages·2005·2.63 MB·English

by  Clifton A. Ericson II

Hazard Analysis
Techniques for
System Safety

Hazard Analysis
Techniques for
System Safety
Clifton A. Ericson, II
Fredericksburg,Virginia
A JOHN WILEY & SONS, INC., PUBLICATION
Copyright#2005byJohnWiley&Sons,Inc.Allrightsreserved.
PublishedbyJohnWiley&Sons,Inc.,Hoboken,NewJersey.
PublishedsimultaneouslyinCanada.
Nopartofthispublicationmaybereproduced,storedinaretrievalsystem,ortransmittedinany
formorbyanymeans,electronic,mechanical,photocopying,recording,scanning,orotherwise,
exceptaspermittedunderSection107or108ofthe1976UnitedStatesCopyrightAct,without
eitherthepriorwrittenpermissionofthePublisher,orauthorizationthroughpaymentofthe
appropriateper-copyfeetotheCopyrightClearanceCenter,Inc.,222RosewoodDrive,Danvers,
MA01923,978-750-8400,fax[phone],oronthewebatwww.copyright.com.Requeststo
thePublisherforpermissionshouldbeaddressedtothePermissionsDepartment,JohnWiley&Sons,Inc.,
111RiverStreet,Hoboken,NJ07030,[phone],fax[phone].
LimitofLiability/DisclaimerofWarranty:Whilethepublisherandauthorhaveusedtheirbest
effortsinpreparingthisbook,theymakenorepresentationsorwarrantieswithrespecttothe
accuracyorcompletenessofthecontentsofthisbookandspecificallydisclaimanyimplied
warrantiesofmerchantabilityorfitnessforaparticularpurpose.Nowarrantymaybecreatedor
extendedbysalesrepresentativesorwrittensalesmaterials.Theadviceandstrategiescontained
hereinmaynotbesuitableforyoursituation.Youshouldconsultwithaprofessionalwhere
appropriate.Neitherthepublishernorauthorshallbeliableforanylossofprofitoranyother
commercialdamages,includingbutnotlimitedtospecial,incidental,consequential,orotherdamages.
ForgeneralinformationonourotherproductsandservicespleasecontactourCustomerCareDepartment
withintheU.S.at877-762-2974,outsidetheU.S.at317-572-3993orfax317-572-4002.
Wileyalsopublishesitsbooksinavarietyofelectronicformats.Somecontentthatappearsinprint,
however,maynotbeavailableinelectronicformat.
LibraryofCongressCataloging-in-PublicationData:
Ericson,CliftonA.
Hazardanalysistechniquesforsystemsafety/CliftonA.Ericson.
p.cm.
Includesindex.
ISBN0-471-72019-4(cloth)
1. Industrialsafety--Dataprocessing.2. Systemsafety. I.Title.
T55.E722005
620.806--dc22
2005001260
PrintedintheUnitedStatesofAmerica
10 9 8 7 6 5 4 3 2 1
Contents
PREFACE xvii
ACKNOWLEDGMENTS xix
1. System Safety 1
1.1 Introduction / 1
1.2 System Safety Background / 2
1.3 System Safety Characterization / 3
1.4 System Safety Process / 4
1.5 System Concept / 5
1.5.1 General System Model / 5
1.5.2 System Attributes / 7
1.5.3 System Types / 8
1.5.4 System Life Cycle / 9
1.5.5 System Development / 10
1.6 Summary / 12
2. Hazards, Mishap,and Risk 13
2.1 Introduction / 13
2.2 Hazard-Related Definitions / 14
2.3 Hazard Theory / 15
2.4 Hazard Actuation / 19
2.5 Hazard Causal Factors / 21
2.6 Hazard–Mishap Probability / 23
2.7 RecognizingHazards / 23
v
vi CONTENTS
2.8 Hazard Description / 27
2.9 Summary / 27
3. Hazard AnalysisTypesand Techniques 31
3.1 Types and Techniques / 31
3.2 DescriptionofHazard Analysis Types / 34
3.2.1 Conceptual Design Hazard Analysis
Type (CD-HAT) / 34
3.2.2 Preliminary Design Hazard Analysis
Type (PD-HAT) / 35
3.2.3 Detailed Design Hazard Analysis
Type (DD-HAT) / 37
3.2.4 System DesignHazard Analysis
Type (SD-HAT) / 38
3.2.5 OperationsDesignHazard Analysis
Type (OD-HAT) / 40
3.2.6 Human DesignHazard Analysis
Type (HD-HAT) / 41
3.2.7 Requirements Design Hazard Analysis
Type (RD-HAT) / 42
3.3 Timing of Hazard Analysis Types / 44
3.4 Interrelationship ofHazard Analysis Types / 44
3.5 Hazard Analysis Techniques / 45
3.5.1 Technique Attributes / 45
3.5.2 Primary Hazard Analysis Techniques / 46
3.6 Inductive and Deductive Techniques / 48
3.7 Qualitativeand QuantitativeTechniques / 51
3.8 Summary / 53
4. Preliminary Hazard List 55
4.1 Introduction / 55
4.2 Background / 55
4.3 History / 56
4.4 Theory / 56
4.5 Methodology / 57
4.6 Worksheet / 60
4.7 Hazard Checklists / 62
4.8 Guidelines / 64
4.9 Example:Ace Missile System / 65
CONTENTS vii
4.10 Advantages and Disadvantages / 70
4.11 Common Mistakes toAvoid / 71
4.12 Summary / 71
5. Preliminary Hazard Analysis 73
5.1 Introduction / 73
5.2 Background / 73
5.3 History / 74
5.4 Theory / 75
5.5 Methodology / 76
5.6 Worksheet / 78
5.7 Guidelines / 81
5.8 Example: Ace Missile System / 82
5.9 Advantages and Disadvantages / 85
5.10 Common Mistakes toAvoid / 85
5.11 Summary / 93
6. Subsystem Hazard Analysis 95
6.1 Introduction / 95
6.2 Background / 95
6.3 History / 96
6.4 Theory / 96
6.5 Methodology / 97
6.6 Worksheet / 98
6.7 Guidelines / 102
6.8 Example: Ace Missile System / 103
6.9 Advantages and Disadvantages / 107
6.10 Common Mistakes toAvoid / 107
6.11 Summary / 113
7. System Hazard Analysis 115
7.1 Introduction / 115
7.2 Background / 116
7.3 History / 117
7.4 Theory / 117
7.5 Methodology / 118
7.6 Worksheet / 120
7.7 Guidelines / 122
viii CONTENTS
7.8 Example / 123
7.9 Advantages and Disadvantages / 128
7.10 Common Mistakes toAvoid / 129
7.11 Summary / 129
8. Operatingand Support Hazard Analysis 131
8.1 Introduction / 131
8.2 Background / 131
8.3 History / 133
8.4 Definitions / 133
8.5 Theory / 134
8.6 Methodology / 135
8.7 Worksheet / 138
8.8 Hazard Checklists / 140
8.9 Support Tools / 140
8.10 Guidelines / 142
8.11 Examples / 143
8.11.1 Example 1 / 143
8.11.2 Example 2 / 143
8.12 Advantages and Disadvantages / 152
8.13 Common Mistakes toAvoid / 152
8.14 Summary / 152
9. Health Hazard Assessment 155
9.1 Introduction / 155
9.2 Background / 155
9.3 History / 156
9.4 Theory / 156
9.5 Methodology / 157
9.6 Worksheet / 160
9.7 Checklist / 162
9.8 Example / 164
9.9 Advantages and Disadvantages / 164
9.10 Common Mistakes toAvoid / 168
9.11 Summary / 168
10. Safety Requirements/Criteria Analysis 169
10.1 Introduction / 169
10.2 Background / 169
CONTENTS ix
10.3 History / 170
10.4 Theory / 170
10.5 Methodology / 171
10.6 Worksheets / 172
10.7 Example / 175
10.8 Advantages and Disadvantages / 175
10.9 Common Mistakes toAvoid / 180
10.10 Summary / 180
11. Fault Tree Analysis 183
11.1 Introduction / 183
11.2 Background / 185
11.3 History / 186
11.4 Theory / 187
11.5 Methodology / 188
11.5.1 Building Blocks / 188
11.5.2 Definitions / 191
11.5.3 Construction—Basics / 193
11.5.4 Construction—Advanced / 195
11.5.5 ConstructionRules / 196
11.6 FunctionalBlock Diagrams / 197
11.7 Cut Sets / 198
11.8 MOCUS Algorithm / 199
11.9 Bottom-Up Algorithm / 199
11.10 Mathematics / 201
11.11 Probability / 202
11.12 Importance Measures / 204
11.13 Example 1 / 206
11.14 Example 2 / 207
11.15 Example 3 / 210
11.16 Phase- andTime-Dependent FTA / 215
11.17 Dynamic FTA / 218
11.18 Advantages and Disadvantages / 219
11.19 Common Mistakes toAvoid / 220
11.20 Summary / 220
12. Event Tree Analysis 223
12.1 Introduction / 223
12.2 Background / 223