SIL (LOPA) Analisys Procedure
SIL (LOPA) Analisys Procedure
SIL (LOPA) Analisys Procedure
IN INNOVATION
SIL ANALISYS USING LOPA
2017
1 DIQUIMA Official
S I L A NA L I S Y S U S I NG L O P A
2
CONTENTS
3
Purpose and Scope SIL(LOPA) Procedure
Assign required Safety Integrity Level (SIL) for each Safety Instrumented
Function (SIF).
4
Purpose and Scope SIL(LOPA) Procedure
SIF needs to ensure that risk reduction will mitigate all hazard scenarios to
tolerable risk target.
5
Purpose and Scope SIL(LOPA) Procedure
2. SIL PROCEDURE
Safety &
Severity
Health
Environment Financial Reputation Target Freq.
Severe environmental impact or
constant very high exceedance of Coverage on international media, high profile community outrage, high
5 Greater
Major
Fatality statutory limits or immediate
than $ 1bn
level of concern amongst governments and action by international NGOs. 10-06 yr-1
intervention by third parties or Major impact on reputation with customers &/or shareholders
government bodies
Serious environmental impacts,
Multiple LTI extending over 1 km2 area or constant Extensive attention in national media, some international coverage,
4 with exceedance of statutory limit or $100 mm- national government and NGO involvement, serious community concerns 10-05 yr-1
Serious permanent significant alarm raised by third parties $1bn and complaints.
disability or government body with instruction to Serious impact on reputation with customers &/or shareholders
mitigate
Multiple
MTC/RWC/LT Moderate environmental impact,
extending over 10,000m2 or multiple Some national media coverage considerable community concern and 10-04 yr-1
3 I or single LTI $10 mm-
intermittent exceedance of statutory potentially a single community complaint.
Moderate with limit or concern raised from third
$100 mm Moderate impact on reputation with stakeholders
permanent parties or government body
disability
Medical
treatment, Minor environmental impacts, confined
within fence line of site or multiple 10-03 yr-1
2 restricted $1 mm- Noticed within QG, information shared with neighbours, some community
constant exceedance of statutory limit.
Minor work or short- $10 mm concerns raised. Minor impact on reputation with stakeholders
No complaint from third parties or
term LTI with government body
no disability
Slight environmental impacts, within
First aid or immediate locale or some exceedance
1 $50k- Noticed within QG, no media coverage, no public disruption. Slight impact 10-02 yr-1
minor of statutory limit but assessed to be
Slight $1mm on reputation with stakeholders
treatment ALARP. No third party or government
body involved.
6
Purpose and Scope SIL(LOPA) Procedure
2. SIL PROCEDURE
7
Purpose and Scope SIL(LOPA) Procedure
2. SIL PROCEDURE
SIF identification:
A code assigned to each SIF. It will be XX-SIF-nn, where XX is unit number and
nn are correlative.
SIF description:
A description of the elements involved and the action. For example: Interlock UZ-
XXXXX triggered by TSHH-XXXXX (MooN) causing the closure of ESDV-XXXXX
and ESDV-XXXXX (MooN).
Design intent:
A description of the aim of SIF. For example, Pumps XXXXXX protection against
low level or high pressure in XXXXXX protection.
8
Purpose and Scope SIL(LOPA) Procedure
2. SIL PROCEDURE
Interlock
Tags (and action) of final elements needed to restore safe state to the process.
Also voting is request.
9
Purpose and Scope SIL(LOPA) Procedure
2. SIL PROCEDURE
10
Purpose and Scope SIL(LOPA) Procedure
2. SIL PROCEDURE
It is the time between initiator set point and the damage if no protection is
triggered (it can depend of the cause). This value requires an order, not a
detailed calculation (this calculation need to be performed during SIF
design phase).
2. SIL PROCEDURE
This parameter is used to fix initiating frequency, due to not always that the
initiating event occurs, final consequence happens.
Large 1 0.1 1
For some scenarios, hazardous event can be only possible under some
conditions, for example during maintenance or during start-up. This parameter
adjusts this situation, selecting the percentage of the time when this condition is
present.
For example, if start up occurs one day (24 hours) every six months, this value will
12 be 1/180.
Purpose and Scope SIL(LOPA) Procedure
2. SIL PROCEDURE
As operator can be present in potential hazard area or not, this value try to fix this
issue.
Occupancy Factor
(*) Applicable for start-up, maintenance and any activity that needs operators
involved (e.g. loading and unloading).
13
Purpose and Scope SIL(LOPA) Procedure
2. SIL PROCEDURE
This parameter corrects the possibility of injured people evacuation and treatment.
Vulnerability Factor
Evacuation is not easy (from platforms, structures, etc) 1
14
Purpose and Scope SIL(LOPA) Procedure
2. SIL PROCEDURE
FU = FIE x EN x OC x ET x VU
5. Next step is checking safeguards to identify IPLs. If they are, assign IPL
credits for them.
Not all the safeguards are IPL but all IPL are safeguards. An IPL needs to achieve
following criteria.
15
Purpose and Scope SIL(LOPA) Procedure
2. SIL PROCEDURE
IPL criteria:
Specificity: Should be specifically designed to prevent a consequence or
a dangerous situation by itself. An IPL is designed solely to prevent or to
mitigate the consequences of one potentially hazardous event (for
example, a runaway reaction, release of toxic material, a loss of
containment, or a fire).
Independence: An IPL is independent of other protection layers
associated with the identified danger and also of scenario initiator.
Reliability: Should be sufficiently reliable to prevent consequences from
occurring; the probability of failure on demand must be 10% as minimum.
Auditability: It should be possible to test and maintenance should be
easy, so that its capacity for risk reduction can be maintained throughout
its lifetime.
16
Purpose and Scope SIL(LOPA) Procedure
2. SIL PROCEDURE
PFD
Independent Protection Layer RRF IPL Credit
(1/RRF)
Pressure Relief Device (mechanical safety trip) for clean service 100 0.01 2
Pressure Relief Device (mechanical safety trip) for dirty service 10 0.1 1
Double Check Valves designed for the hazardous scenario (gases) 10 0.1 1
Single Check valve designed for the hazardous scenario (liquid) 10 0.1 1
Personnel Protection Equipment in restrict area 10 0.1 1
Dike (only take credit for environmental issue) 100 0.01 2
Blast wall/ Bunker 1000 0.001 3
Flame/ Detonation arrestor 100 0.01 2
Double mechanical seal (or similar) 10 0.1 1
Inherent Safe Design (design condition, mechanical stop, flow orifice, Scenarios with this safeguard are not to be analyzed in the
etc. ) SIL due to they are covered.
17
Purpose and Scope SIL(LOPA) Procedure
2. SIL PROCEDURE
7. As SIF risk reduction has not been used in calculus, required risk
reduction is calculated for each scenario:
8. Overall RRF is calculated (sum of individual RRF) to get final RRF of the
SIF and therefore, SIL.
18
Purpose and Scope SIL(LOPA) Procedure
2. SIL PROCEDURE
19
20