PHA Procedure
PHA Procedure
SAFETY
Rev. 1
1-Oct-2012
Page 1 of 15
TABLE OF CONTENTS
Rev.
1.
INTRODUCTION/PURPOSE ......................................................................... 2
2.
SCOPE ........................................................................................................... 2
3.
DEFINITIONS................................................................................................. 2
4.
REQUIREMENTS .......................................................................................... 4
5.
RESPONSIBILITIES .................................................................................... 15
6.
REFERENCES ............................................................................................. 15
7.
ATTACHMENTS .......................................................................................... 15
8.
APPENDICES .............................................................................................. 15
Issue Date
Prepared
By:
Amendment Description
Reviewed
By:
Approved
By:
Roehl
Bartolome
Carl
Poldrack
1-Oct-12
01-Jul-09
QC-PSM-PRO-00-0001
Page 1 of 15
Venkata
Chandra
Roehl
Bartolome
SAFETY
PROCESS HAZARD ANALYSIS
1.
QC-PSM-PRO-00-0001
Rev. 1
1-Oct-2012
Page 2 of 15
INTRODUCTION/PURPOSE
The OSHA PSM Standard and the OE system require the conduct of Process Hazards
Analysis (PHA) to manage the process safety risks of operations.
This procedure is intended to establish a consistent process for evaluating process
hazards associated with facility operations.
2.
SCOPE
This procedure is applicable to the Q-Chem manufacturing facilities in Mesaieed and
Ras Laffan.
This procedure covers PHAs that have broad process coverage and are subject to
periodic revalidation. This also covers single purpose PHAs such as those required by
MOC and other work processes.
3.
DEFINITIONS
Cause-by-Cause HAZOP: a Hazard and Operability study in which there is an explicit
correlation between the consequences, safeguards, and actions to each particular
cause of a deviation.
Complex PHA method: for the purpose of this procedure, the HAZOP/LOPA method.
Consideration a method for risk reduction, required by EHS-6100 Risk Ranking
Matrix, made by the PHA Team for management review and evaluation.
Consequence: the undesirable result of an incident, usually measured in terms of
health/safety effects, environmental impacts, loss of property, and business costs.
Deviation-by-Deviation HAZOP: a Hazard and Operability study in which all causes,
consequences, safeguards, and actions correlate to a deviation.
Enabling Event: An event or condition that makes possible another event.
Expected Outcomes reasonable consequences considering only those conditions
explained in the cause description. Other failure conditions [such as event escalation
(a leak continues to get worse), the probability that a toxic material is directed toward
breathing space, the probability of use, or the probability of multiple personnel in the
area] are not considered when determining consequences unless stated in the cause
description and reflected in the cause frequency.
Frequency: number of occurrences of an event per year.
HAZOP-LOPA Analysis a scenario-based hazard evaluation procedure, in which a
team uses a series of guide words to identify possible deviations from the intended
design or operation of a process, then examines the potential consequences of the
deviations and the adequacy of existing safeguards.
QC-PSM-PRO-00-0001
Page 2 of 15
SAFETY
PROCESS HAZARD ANALYSIS
QC-PSM-PRO-00-0001
Rev. 1
1-Oct-2012
Page 3 of 15
The HAZOP-LOPA includes an analysis of each scenario using predefined values for
the initiating cause frequency, independent protection layer failure probabilities, and
consequence severity, in order to compare an order-of-magnitude scenario risk
estimate to risk criteria.
Hazard: an inherent chemical or physical characteristic that has the potential for
causing harm to people, damage to property or the environment, and/or adverse
impact or interruption to the normal flow of business.
Initiating Event: The event, which initiates the scenario that is leading to the
undesired consequence. It is referred as the initiating cause.
Independent Protection Layer (IPL): A special class of protection layers that satisfy
the following conditions:
Independent from the initiating event and any other protection layers;
Must completely prevent the scenario without the assistance of any other
protection layer.
Mitigated Risk: the risk of an event with consideration given to existing IPLs.
Process Hazard Analysis (PHA): An organized and systematic effort to identify and
analyze the significance of potential hazards associated with the processing or
handling of highly hazardous chemicals by focusing on equipment, instrumentation,
utilities, human actions, and external conditions that might affect the process.
It includes some or all of the following activities: hazard identification, consequence
analysis, hazard evaluation, past incident evaluation, human factors evaluation, facility
siting evaluation, risk assessment, and development of recommendations.
Residual Risk: The risk of an event with consideration given to existing IPLs and
recommended actions.
Safeguard: Any device, system, or action that is likely to interrupt the chain of events
following an initiating event, or that mitigates the consequences of a hazardous event.
A safeguard may not meet the requirements of an IPL.
Severity: a measure of the magnitude of a consequence.
Simple PHA Methodology: for the purpose of this procedure, What-If, Checklist,
What-If/Checklist, and Failure Modes and Effects Analysis (FMEA) methodologies.
Unmitigated Risk: the risk of an event without consideration given to existing
safeguards.
QC-PSM-PRO-00-0001
Page 3 of 15
SAFETY
PROCESS HAZARD ANALYSIS
4.
QC-PSM-PRO-00-0001
Rev. 1
1-Oct-2012
Page 4 of 15
REQUIREMENTS
4.1
4.2
4.2.2
4.2.3
4.2.4
The selection of the PHA methodology shall consider the relative hazard
and complexity of the process to be studied and the hazards of the
materials in the process. If any two characteristics in below table indicate
a complex method, a complex method shall be considered.
4.2.5
QC-PSM-PRO-00-0001
Page 4 of 15
SAFETY
PROCESS HAZARD ANALYSIS
4.3
4.3.2
4.3.3
4.5
Rev. 1
1-Oct-2012
Page 5 of 15
4.4
QC-PSM-PRO-00-0001
PHA Scope
4.4.1
The process unit owner and the PHA facilitator shall define the scope of
the study.
4.4.2
4.4.3
4.4.4
At a minimum, the PHA shall consider impacts to workers, the public, the
environment and economics. If a risk evaluation is to be performed, the
PHA shall follow the guidance in EHS-6100 Risk Ranking Matrix.
4.4.5
4.4.6
For PHAs which are initiated by MOC, the PHA team shall ensure that all
possible scenarios or conditions are identified and included in the scope of
the study. These include:
Normal Operations
Idle / Standby Conditions
Batch Operations
Precommissioning/Commissioning Operations
Decommissioning/Shutdown Operations.
PHA Team
4.5.1
QC-PSM-PRO-00-0001
Page 5 of 15
SAFETY
PROCESS HAZARD ANALYSIS
QC-PSM-PRO-00-0001
Rev. 1
1-Oct-2012
Page 6 of 15
QC-PSM-PRO-00-0001
Page 6 of 15
SAFETY
QC-PSM-PRO-00-0001
Rev. 1
1-Oct-2012
Page 7 of 15
4.6
Equipment Inspectors.
Scribe. In addition to the Core Team, the PHA team should include
a scribe to record the PHA study. This scribe should be a separate
person from those team members above and should not be included
in the calculation of the team experience.
4.6.2
4.6.3
QC-PSM-PRO-00-0001
Page 7 of 15
SAFETY
PROCESS HAZARD ANALYSIS
QC-PSM-PRO-00-0001
Rev. 1
1-Oct-2012
Page 8 of 15
4.7.2
4.7.3
4.7.4
QC-PSM-PRO-00-0001
Page 8 of 15
SAFETY
PROCESS HAZARD ANALYSIS
4.7.5
QC-PSM-PRO-00-0001
Rev. 1
1-Oct-2012
Page 9 of 15
Previous Incidents
The PHA team shall evaluate the results of the incident investigations of
previous PSM incidents. Previous incidents shall include incidents at the
facility being analyzed, at similar CPChem facilities, and at other company
facilities where information is available. The PHA Facilitator shall assure
that all previous incidents identified are cross-referenced to specific
scenarios in the PHA where that incident was analyzed.
4.7.6
Facility Siting
Facility Siting shall be reviewed by the PHA team. The Facility Siting
review shall be in two stages: (1) globally for the unit/site and (2) as part
of the PHA scenario evaluation. The PHA team shall identify hazards
caused by siting issues to equipment, building, and personnel locations
and recommend ways to reduce the hazards. Detailed stand-alone facility
checklists (such as those on the CPChem PSM Best Practices Network
SharePoint site) and building siting studies may augment the global
facility siting review.
4.7.7
Human Factors
Human Factors shall be reviewed by the PHA team. The Human Factors
review shall be in two stages: (1) globally for the unit/site and (2) as part
of the PHA scenario evaluation. The PHA team shall identify hazards
caused by human factor issues to equipment, building, and personnel
locations and recommend ways to reduce the hazards. Detailed standalone facility checklists (such as those on the PSM Best Practices
Network SharePoint site) may augment the global human factors
review. Potential human errors shall be considered as causes of process
upsets. The team shall estimate whether operators would have adequate
time, information, and equipment to respond to deviations (i.e., to
contribute to incident prevention and mitigation).
Routine operating procedures and other non-routine procedures (e.g.,
startup, shutdown, emergency, and maintenance procedures) should be
analyzed to uncover error-likely situations that could result in catastrophic
consequences.
4.7.8
Causes
Causes (what-if questions, scenario initiating events, etc.) represent the
human and equipment failures and natural events that can result in offnormal process conditions. If the PHA methodology chosen is
HAZOP/LOPA, the analysis shall use the cause-by-cause methodology
rather than the deviation-by-deviation method.
4.7.9
Consequences
The PHA team shall document the reasonable worst-case consequences
for an identified accident initiating event. Worst-case consequences are
QC-PSM-PRO-00-0001
Page 9 of 15
SAFETY
PROCESS HAZARD ANALYSIS
QC-PSM-PRO-00-0001
Rev. 1
1-Oct-2012
Page 10 of 15
Where Mitigated Risk level is 4, the PHA team shall do the following;
QC-PSM-PRO-00-0001
Page 10 of 15
QC-PSM-PRO-00-0001
SAFETY
Rev. 1
1-Oct-2012
Page 11 of 15
or
effectiveness
of
safeguards
NOTE:
If the PHA Team has suggestions that are not required for risk reduction
to meet corporate risk criteria, the Team shall maintain a list separate
from the PHA. These suggestions shall be considered separately by
appropriate members of the plant leadership team.
QC-PSM-PRO-00-0001
Page 11 of 15
SAFETY
QC-PSM-PRO-00-0001
Rev. 1
1-Oct-2012
Page 12 of 15
As noted in the previous section, a list of suggestions not required for risk
reduction (non-risk supported considerations) shall also be prepared.
However, this does not need to be included in the PHA report.
For single purpose PHAs, a copy of the worksheets, considerations, and
other relevant forms shall be generated off the PHA Pro software and
included in the documentation package of the corresponding MOC,
incident investigation, or other process requiring the study. A formal report
is not necessary unless specifically required.
QC-PSM-PRO-00-0001
Page 12 of 15
SAFETY
QC-PSM-PRO-00-0001
Rev. 1
1-Oct-2012
Page 13 of 15
QC-PSM-PRO-00-0001
Page 13 of 15
SAFETY
PROCESS HAZARD ANALYSIS
QC-PSM-PRO-00-0001
Rev. 1
1-Oct-2012
Page 14 of 15
All PHA action items shall be tracked until closure and reviewed monthly
by management. The status of these action items shall be reported
through the process safety metrics.
Action items from non-risk supported considerations should also be
included in the review. However, these items shall not be included in the
process safety metrics.
Management shall communicate the actions to operating, maintenance
and other employees whose work assignments are in the process and
who may be affected by the recommendations or actions.
4.7.16 Document Retention
PHA
documentation,
including
documented
resolution
recommendations, shall be retained for the life of the process.
of
Redo
A redo is a complete restart of the previous PHA, working from a blank
analysis. There are five basic reasons that could drive a total re-do of a
PHA:
Poor PHA quality.
Multiple serious incident history with root causes that were not
previously addressed in the PHA.
Multiple significant changes since last PHA.
QC-PSM-PRO-00-0001
Page 14 of 15
SAFETY
QC-PSM-PRO-00-0001
Rev. 1
1-Oct-2012
Page 15 of 15
Length of time (> 5 years) since last total redo. (The revalidation
option must be a redo if the previous PHA was not a redo. A
revalidation shall not be revalidated.)
Opportunity to develop/maintain in-house PHA facilitation
expertise.
For the redo option, PHA quality shall be determined as less than
desired if any of the following are true.
Marked-up drawings that were used in the previous PHA did not
accurately represent the field installation.
5.
assists
in
RESPONSIBILITIES
Responsibilities are addressed in the appropriate sections of this procedure.
6.
REFERENCES
OSHA 29 CFR 1910. 119 (e) Process Safety Management of Highly Hazardous
Chemicals Process Hazard Analysis
CPChem Global OE Procedure EHS-6205 Process Hazards Analysis
CPChem Global OE Procedure EHS-6200 Hazard and Operability Study with
Layer of Protection Analysis
CPChem Global OE Procedure EHS-6100 Risk Ranking Matrix
CPChem Global OE Procedure EHS-6206 PHA Facilitator Competency
Assessment
7.
ATTACHMENTS
None
8.
APPENDICES
None
QC-PSM-PRO-00-0001
Page 15 of 15