Copyright 2011, Jacobs Engineering Group Inc. All rights reserved.
Principles of Inherent Safe Design
Jo Fearnley CIE Conference 10 May 2011 Copyright 2011, Jacobs Engineering Group Inc. All rights reserved. May 2011 | Slide 2 Fxborough 1974 Copyright 2011, Jacobs Engineering Group Inc. All rights reserved. May 2011 | Slide 3 Presentation outline What is inherent safety? Inherent safety implementation techniques Conflicts in inherent safety Human factors and inherent safety issues Copyright 2011, Jacobs Engineering Group Inc. All rights reserved. May 2011 | Slide 4 Definition Inherent safety: An approach to process design and operation which builds in safety, health and environmental considerations at the start Copyright 2011, Jacobs Engineering Group Inc. All rights reserved. May 2011 | Slide 5 Definition Inherent safety: What you dont have cant leak! Trevor Kletz 1978 Copyright 2011, Jacobs Engineering Group Inc. All rights reserved. May 2011 | Slide 6 Definition Inherent safety: A low level of danger, even if something goes wrong Wikipedia. Copyright 2011, Jacobs Engineering Group Inc. All rights reserved. May 2011 | Slide 7 Inherently safer design In reality no design can be inherently safe However you can have an inherently safer design Copyright 2011, Jacobs Engineering Group Inc. All rights reserved. May 2011 | Slide 8 Inherently safer guidewords Guideword description Substitute Replace a substance with a less hazardous material or processing route with one that does not involve hazardous material. Replace a hazardous procedure with one that is less hazardous. Minimise Use smaller quantities of hazardous materials when the use of such materials cannot be avoided - also called intensification. Perform a hazardous procedure as few times as possible when the procedure is unavoidable. Moderate Use hazardous materials in their least hazardous forms or identify processing options that involve less severe processing conditions - also called attenuation or limitation of effects. Simplify Design processes, processing equipment and procedures to eliminate opportunities for errors by eliminating excessive use of add-on (engineered) safety features and protective devices - also called error tolerance. Less equipment of any kind means that there is less to go wrong. Copyright 2011, Jacobs Engineering Group Inc. All rights reserved. May 2011 | Slide 9 Other options not inherent safety Reduce consequential harm risk to people is dependent on their presence in the harm zone risk to environment is dependent on the sensitivity of species within the harm zone risk to asset is not location specific Copyright 2011, Jacobs Engineering Group Inc. All rights reserved. May 2011 | Slide 10 Other options not inherent safety Locate process in region with no harm consequences is it justified to release hazardous material into an area which has low population numbers no special environmental features? in the UK severity of harm is based on people number of fatalities and injuries estimated environment potential for a major accident to the environment (MATTE) which is relative to the special features nearby Copyright 2011, Jacobs Engineering Group Inc. All rights reserved. May 2011 | Slide 11 Other obvious options Design piping for maximum pressure and temperature under fault conditions rather than installing pressure and temperature trips Minimise pipe route lengths to limit quantity available to leak Use all welded lines Select materials of construction for the worst case conditions they could see, not the normal conditions Design support structures for the worst credible external events such as wind, flood, earthquake, fire Copyright 2011, Jacobs Engineering Group Inc. All rights reserved. May 2011 | Slide 12 Layers of process safety Copyright 2011, Jacobs Engineering Group Inc. All rights reserved. May 2011 | Slide 13 Layers of process safety - inherent Ideally this means eliminating the hazard from the design Copyright 2011, Jacobs Engineering Group Inc. All rights reserved. May 2011 | Slide 14 Layers of process safety - passive This is building the protection into the design so it cannot be (easily) changed Reduce frequency and / or consequence of hazard e.g. design conditions should mean that process cannot move outside of the safe envelope under any circumstances however external factors such as external damage exist future design / process changes could invalidate protection Copyright 2011, Jacobs Engineering Group Inc. All rights reserved. May 2011 | Slide 15 Layers of process safety - active These layers are intended to prevent, control or mitigate a potentially hazardous scenario: e.g. Prevent: high level trip isolates flow into a tank before it can overfill and lose containment Control: a restrictive orifice plate limits the rate of loss of containment if a line fails Mitigate: heat activated links open deluge valves to spray water in case of fire Copyright 2011, Jacobs Engineering Group Inc. All rights reserved. May 2011 | Slide 16 Layers of process safety - procedural These are systems which are intended to manage risk Safety / process management system (SMS) / (PMS) company policy site rules operating procedures training / refresher training maintenance and inspection regimes test procedures and schedules emergency response plans (on- and off- site) Copyright 2011, Jacobs Engineering Group Inc. All rights reserved. May 2011 | Slide 17 Tolerability of risk - ALARP Copyright 2011, Jacobs Engineering Group Inc. All rights reserved. May 2011 | Slide 18 Presentation outline What is inherent safety? Inherent safety implementation techniques Conflicts in inherent safety People and inherent safety issues Copyright 2011, Jacobs Engineering Group Inc. All rights reserved. May 2011 | Slide 19 Inherent safety implementation techniques Constructive questioning for example: Is it necessary? Why do it that way? Why that material? Why so much? How can we make it simpler? Copyright 2011, Jacobs Engineering Group Inc. All rights reserved. May 2011 | Slide 20 Inherent safety implementation techniques Alternatives for lower impact? Alternatives to minimise inventories? Alternatives for benign process conditions? Ultimate fate of all substances? Designed for minimum purges? Designed for minimum effluent & waste disposal? Designed to minimise consequences of releases? Impact of increased SH&E standards on costs? Copyright 2011, Jacobs Engineering Group Inc. All rights reserved. May 2011 | Slide 21 Presentation outline What is inherent safety? Inherent safety implementation techniques Conflicts in inherent safety People and inherent safety issues Copyright 2011, Jacobs Engineering Group Inc. All rights reserved. May 2011 | Slide 22 Conflicts in inherent safety Inherent Safety is not always obvious Cost implications Flexibility Personal choice Balance of demands Judgement Information available etc etc Copyright 2011, Jacobs Engineering Group Inc. All rights reserved. May 2011 | Slide 23 Conflicts in inherent safety Inherent safety design depends on extent of understanding: Experience of people Experience of process Industry knowledge History of incidents Data availability (e.g. MSDS, compatibility, etc) New / novel / innovative then what?? Copyright 2011, Jacobs Engineering Group Inc. All rights reserved. May 2011 | Slide 24 Presentation outline What is inherent safety? Inherent safety implementation techniques Conflicts in inherent safety Human factors and inherent safety issues Copyright 2011, Jacobs Engineering Group Inc. All rights reserved. May 2011 | Slide 25 Human factors and inherent safety issues Task design / workload Motivation Complexity Time available in which to make a decision Procedures design ease of reference, correct, detailed Communications Organisational structure Management attitude production is more important than safety Non-compliance with standards accepted as normal Poor training / inexperience Lack of self belief (in ability to make correct decision) Poor design (too many alarms arising so ignores them no distinction of important alarms) Colour blind Too busy / distracted Poor environment (too hot / cold / cramped / poor lighting / layout not conductive to seeing fault warning) Misleading information Alarm fault ( e.g. alarm often in spuriously, so ignored) Stress / fatigue / boredom Copyright 2011, Jacobs Engineering Group Inc. All rights reserved. May 2011 | Slide 26 Contact details Please make contact through Jo Fearnley, Principal Consultant Jacobs Consultancy Services Phoenix House 3 Surtees Way Surtees Business Park Stockton-on-Tees TS18 3HR Tel: +44 (0)1642 334 053 (direct dial) Mob: +44 (0)7799 343 392 jo.fearnley@jacobs.com www.jacobs.com Copyright 2011, Jacobs Engineering Group Inc. All rights reserved. May 2011 | Slide 27 Copyright Copyright of all published material including photographs, drawings and images in this document remains vested in Jacobs and third party contributors as appropriate. Accordingly, neither the whole nor any part of this document shall be reproduced in any form nor used in any manner without express prior permission and applicable acknowledgements. No trademark, copyright or other notice shall be altered or removed from any reproduction. Copyright 2011, Jacobs Engineering Group Inc. All rights reserved. May 2011 | Slide 28 Disclaimer This Presentation includes and is based, inter alia, on forward-looking information and statements that are subject to risks and uncertainties that could cause actual results to differ. These statements and this Presentation are based on current expectations, estimates and projections about global economic conditions, the economic conditions of the regions and industries that are major markets for Jacobs Engineering Group Inc. (including subsidiaries and affiliates) lines of business. These expectations, estimates and projections are generally identifiable by statements containing words such as expects, believes, estimates or similar expressions. Important factors that could cause actual results to differ materially from those expectations include, among others, economic and market conditions in the geographic areas and industries that are or will be major markets for Jacobs businesses, oil prices, market acceptance of new products and services, changes in governmental regulations, interest rates, fluctuations in currency exchange rates and such other factors as may be discussed from time to time in the Presentation. Although Jacobs Engineering Group Inc. believes that its expectations and the Presentation are based upon reasonable assumptions, it can give no assurance that those expectations will be achieved or that the actual results will be as set out in the Presentation. Jacobs Engineering Group Inc. is making no representation or warranty, expressed or implied, as to the accuracy, reliability or completeness of the Presentation, and neither Jacobs Engineering Inc. nor any of its directors, officers or employees will have any liability to you or any other persons resulting from your use. Jacobs consists of many legally independent entities, constituting their own separate identities. Jacobs is used as the common brand or trade mark for most of these entities. In this presentation we may sometimes use Jacobs, we or us when we refer to Jacobs companies in general or where no useful purpose is served by identifying any particular Jacobs company.