Dynamic-risk-informed safety barrier management: An application to cost-effective barrier optimization based on data from multiple sources

An integrated approach for performance assessment and management of safety barriers in a systemic manner is needed concerning the prevention and mitigation of major accidents in chemical process industries. Particularly, the effects of safety barriers on system risk reduction should be assessed in a dynamic manner to support the decision-making on safety barrier establishments and improvements. A simulation approach, named Simulink-based Safety Barrier Modeling (SSBM), is proposed in this paper to conduct dynamic risk assessment of chemical facilities with the consideration of the degradation of safety barriers. The main functional features of the SSBM include i) the basic model structures of SSBM can be determined based on bow-tie diagrams, ii) multiple data (periodic proof test data, continuous condition-monitoring data, and accident precursor data) may be combined to update barrier failure probabilities and initiating event probabilities, iii) SSBM is able to handle uncertainty propagation in probabilistic risk assessment by using Monte Carlo simulations, and iv) cost-effectiveness analysis (CEA) and optimization algorithms are integrated to support the decision-making on safety barrier establishments and improvements. An illustrative case study is demonstrated to show the procedures of applying the SSBM on dynamic risk-informed safety barrier management and validate the feasibility of implementing the SSBM for cost-effective safety barrier optimization.     

Cost-based fire risk assessment in natural gas industry by means of fuzzy FTA and ETA

Fire is the most prevalent accident in natural gas facilities. In order to assess the risk of fire in a gas processing plant, a fault tree analysis (FTA) and event tree analysis (ETA) has been developed in this paper. By utilizing FTA and ETA, the paths leading to an outcome event would be visually demonstrated. The framework was applied to a case study of processing plant in South Pars gas complex. All major underlying causes of fire accident in a gas processing facility determined through a process hazard analysis (PHA). Fuzzy logic has been employed to derive likelihood of basic events in FTA from uncertain opinion of experts. The outcome events in event tree has been simulated by computer model to evaluate their severity. In the proposed methodology the calculated risk has the unit of cost per year which allows the decision makers to discern the benefit of their investment in safety measures and risk mitigation.     

Operational risk assessment: A case of the Bhopal disaster

Accidental releases of hazardous chemicals from process facilities can cause catastrophic consequences. The Bhopal disaster resulting from a combination of inherently unsafe designs and poorly managed operations is a well-known case. Effective risk modeling approaches that provide early warnings are helpful to prevent and control such rare but catastrophic events. Probability estimation of these events is a constant challenge due to the scarcity of directly relevant data. Therefore, precursor-based methods that adopt the Bayesian theorem to update prior judgments on event probabilities using empirical data have been proposed. The updated probabilities are then integrated with consequences of varying severity to produce the risk profile.This paper proposes an operational risk assessment framework, in which a precursor-based Bayesian network approach is used for probability estimation, and loss functions are applied for consequence assessment. The estimated risk profile can be updated continuously given real-time operational data. As process facilities operate, this method integrates a failure-updating mechanism with potential consequences to generate a real-time operational risk profile. The real time risk profile is valuable in activating accident prevention and control strategies. The approach is applied to the Bhopal accident to demonstrate its applicability and effectiveness.     

基于贝叶斯网络的物流无人机失效风险评估*

为降低城市物流无人机（UAV）失效坠落风险,通过考虑其运行环境和系统故障等因素的影响,以城市物流无人机运行数据为基础,从系统故障、运行环境和人为因素3方面提取失效诱因;分析物流无人机失效模式,并构建意外坠落事故的贝叶斯网络;基于所建网络和失效诱因发生概率分别计算不同工况下意外坠落事故及各中间事件概率,并基于网络拓扑结构展开反向推理,推演事故的主要失效诱因。结果表明:物流无人机正常运行时发生安全事故的概率为6.54×10-3;其中,电池电量不足、桨叶失效和电池故障是坠落事故的主要诱因,计算结果可为无人机运行安全风险防控提供依据。     

Quantitative risk assessment integrated with dynamic process simulation for reactor section in heavy oil desulfurization process

A new methodology for quantitative risk assessment (QRA) integrated with dynamic simulation and accident simulation is proposed. The objective of this study is to discover inherent risks that are undetectable by conventional risk analysis methods based on steady-state conditions. The target process is the reactor section in the heavy oil desulfurization (HOD) process, which is likely to pose vast potential risks due to the high operating conditions of pressure and temperature. First, a dynamic simulation of a shut-down procedure was performed to observe the behavior of process variables using Aspen HYSYS V10, which is a commercially available process software. Based on the results of the dynamic simulation, several blind spots indicating a higher operating pressure than that in the steady-state simulation were identified. To assess the risks of the detected blind spots, a QRA was performed using the commercial software of SAFETI V8.22, which performs risk calculation based on consequence and frequency data. As a result of applying the proposed method to the HOD process, the risk assessment outcome was identified as intolerably risky unlike that of steady-state conditions, thereby indicating that dynamic simulations can serve as a method to spot inherent risks that are undetectable in steady-state conditions. In addition, mitigation procedures that reduce the risk of the process to a tolerable level are performed, thereby enabling a safer and more reliable process.     

Risk assessment of chemical process considering dynamic probability of near misses based on Bayesian theory and event tree analysis

With the development of modern automatic control systems, chemical accidents are of low frequency in most chemical plants, but once an accident happens, it often causes serious consequences. Near-misses are the precursor of accidents. As the process progresses, near misses caused by abnormal fluctuation of process variables may eventually lead to accidents. However, variables that may lead to serious consequences in the production process cannot update the risk in the life cycle of the process by traditional risk assessment methods, which do not pay enough attention to the near misses. Therefore, this paper proposed a new method based on Bayesian theory to dynamically update the probability of key variables associated with process failure risk and obtain the risk change of the near-misses. This article outlines the proposed approach and uses a chemical process of styrene production to demonstrate the application. In this chemical process, the key variables include flow rate, liquid level, pressure and temperature. In order to study the dynamic risk of the chemical process with consideration of near misses, according to the accumulated data of process variables, firstly the abnormal probability of the variables and the failure rate of safety systems associated with the variables were updated with time based on Bayesian theory. On the basis of the dynamic probability of key process variables, an event tree of possible consequences caused by variable anomalies was established. From the logical relationship of the event tree, the probability of different consequences can be obtained. The results show that the proposed risk assessment method based on Bayesian theory can overcome the shortcomings of traditional analysis methods. It shows the dynamic characteristics of the probability of different near misses, and achieves the dynamic risk analysis of chemical process accidents.     

Integrated dynamic risk assessment of buried gas pipeline leakages in urban areas

In urban areas, buried gas pipeline leakages could potentially cause numerous casualties and massive damage. Traditional static analysis and dynamic probability-based quantitative risk assessment (QRA) methods have been widely used in various industries. However, dynamic QRA methods combined with probability and consequence are rarely used to evaluate gas pipelines buried in urban areas. Therefore, an integrated dynamic risk assessment approach was proposed. First, a failure rate calculation of buried gas pipelines was performed, where the corrosion failure rate dependent on time was calculated by integrating the subset simulation method. The relationship between failure probability and failure rate was considered, and a mechanical analysis model considering the corrosion growth model and multiple loads was used. The time-independent failure rates were calculated by the modification factor methods. Next, the overall evolution process from pipeline failures to accidents was proposed, with the accident rates subsequently updated. Then, the consequences of buried gas pipeline accidents corresponding to the accident types in the evolution process were modeled and analyzed. Finally, based on the above research, dynamic calculation and assessment methods for evaluating individual and social risks were established, and an overall application example was provided to demonstrate the capacity of the proposed approach. A reliable and practical theoretical basis and supporting information are provided for the integrity and emergency management of buried gas pipelines in urban areas, considering actual operational conditions.     

Uncertainty reduction for improved mishap probability prediction: Application to level control of distillation unit

At all levels, the understanding of uncertainty associated with risk of major chemical industrial hazards should be enhanced. In this study, a quantitative risk assessment (QRA) was performed for a knockout drum in the distillation unit of a refinery process and then probabilistic uncertainty analysis was applied for this QRA. A fault tree was developed to analyze the probability distribution of flammable liquid released from the overfilling of a knockout drum. Bayesian theory was used to update failure rates of the equipment so that generic information from databases and plant equipment real life data are combined to gain all available knowledge on component reliability. Using Monte Carlo simulation, the distribution of top event probability was obtained to characterize the uncertainty of the result. It was found that the uncertainty of basic event probabilities has a significant impact on the top event probability distribution. The top event probability prediction uncertainty profile showed that the risk estimation is improved by reducing uncertainty through Bayesian updating on the basic event probability distributions. The whole distribution of top event probability replaces point value in a risk matrix to guide decisions employing all of the available information rather than only point mean values as in the conventional approach. The resulting uncertainty guides where more information or uncertainty reduction is needed to avoid overlap with intolerable risk levels.     

Dynamic accident modeling for high-sulfur natural gas gathering station

Dynamic accident modeling for a gas gathering station is implemented to prevent high-sulfur natural gas leakage and develop equipment inspection strategy. The progress of abnormal event occurring in the gas gathering station is modeled by the combination of fault tree and event sequence diagram, based on accident causal chain theory, i.e. the progress is depicted as sequential failure of safety barriers, then, the occurrence probability of the consequence of abnormal event is predicted. Consequences of abnormal events are divided into accidents and accident precursors which include incidents, near misses and so on. The Bayesian theory updates failure probability of safety barrier when a new observation (i.e. accident precursors or accidents data) arrives. Bayesian network then correspondingly updates failure probabilities of basic events of the safety barriers with the ability of abductive reasoning. Consequence occurrence probability is also updated. The results show that occurrence probability trend of different consequences and failure probability trend of safety barriers and basic events of the safety barriers can be obtained using this method. In addition, the critical basic events which play an important role in accidents occurrence are also identified. All of these provide useful information for the maintenance and inspection of the gas gathering station.     

Dynamic risk analysis of offloading process in floating liquefied natural gas (FLNG) platform using Bayesian Network

The growing demand for natural gas has pushed oil and gas exploration to more isolated and previously untapped regions around the world where construction of LNG processing plants is not always a viable option. The development of FLNG will allow floating plants to be positioned in remote offshore areas and subsequently produce, liquefy, store and offload LNG in the one position. The offloading process from an FLNG platform to a gas tanker can be a high risk operation. It consists of LNG being transferred, in hostile environments, through loading arms or flexible cryogenic hoses into a carrier which then transports the LNG to onshore facilities. During the carrier's offloading process at onshore terminals, it again involves risk that may result in an accident such as collision, leakage and/or grounding. It is therefore critical to assess and monitor all risks associated with the offloading operation. This study is aimed at developing a novel methodology using Bayesian Network (BN) to conduct the dynamic safety analysis for the offloading process of an LNG carrier. It investigates different risk factors associated with LNG offloading procedures in order to predict the probability of undesirable accidents. Dynamic failure assessment using Bayesian theory can estimate the likelihood of the occurrence of an event. It can also estimate the failure probability of the safety system and thereby develop a dynamic failure assessment tool for the offloading process at a particular FLNG plant. The main objectives of this paper are: to understand the LNG offloading process, to identify hazardous events during offloading operation, and to perform failure analysis (modelling) of critical accidents and/or events. Most importantly, it is to evaluate and compare risks. A sensitivity analysis has been performed to validate the risk models and to study the behaviour of the most influential factors. The results have indicated that collision is the most probable accident to occur during the offloading process of an LNG carrier at berth, which may have catastrophic consequences.     

A new look at release event frequencies

Within the context of a quantitative risk analysis (QRA), the two main constituents used to describe petrochemical risks are, and have always been, consequence and probability. The consequences of hazardous material accidents are easy to apprehend – if a hazard is realized it can injure people or cause fatalities, damage equipment or other assets, or cause environmental damage. Frequencies for these consequences, on the other hand, are not as easy to understand. Process safety professionals develop event frequencies by evaluating historical data and calculating incident rates, which represent, in the QRA context, how often a release of a hazardous material has occurred. Incident rates are further modified by probabilities for various hole sizes, release orientations, weather conditions, ignition timing, and other factors, to arrive at unique event probabilities that are applied in the QRA. This paper describes the development of incident rates from historical database information for various equipment types, as well as defining a methodology for assigning hole size probabilities from the same data, such that a hole size distribution can be assigned within each QRA study. The combination of total incident rates and a hole size distribution relationship can then serve as a foundation within the frequency side of many QRA studies.     

Dynamic failure assessment of an ammonia storage unit: A case study

Chemical Process Industries usually contain a diverse inventory of hazardous chemicals and complex systems required to perform process operations such as storage, separation, reaction, compression etc. The complex interactions between the equipment make them vulnerable to catastrophic accidents. Risk and failure assessment provide engineers with an intuitive tool for decision making in the operation of such plants. Abnormal events and near-miss situations occur regularly during the operation of a system. Accident Sequence Precursors (ASP) can be used to demonstrate the real-time operating condition of a plant. Dynamic Failure Assessment (DFA) methodology is based on Bayesian statistical methods incorporates ASP data to revise the generic failure probabilities of the systems during its operational lifetime.In this paper, DFA methodology is applied on an ammonia storage unit in a specialized chemical industry. Ammonia is stored in cold storage tanks as liquefied gas at atmospheric pressure. These tanks are susceptible to failures due to various abnormal conditions arising due process failures.Tank failures due to three such abnormal conditions are considered. Variation of the failure probability of the safety systems is demonstrated. The authors use ASP data collected from plant specific sources and safety expert judgement. The failure probabilities of some safety systems concerned show considerable deviation from the generic values. The method helps to locate the components which have undergone more degradation over the period and hence must be paid attention to. In addition, a Bayesian predictive model has been used to predict the number of abnormal events in the next time interval. The user-friendly and intuitive nature of the tool makes it appropriate for application in safety assessment reports in process industries.     

Accident modelling and analysis in process industries

Accident modelling is a methodology used to relate the causes and effects of events that lead to accidents. This modelling effectively seeks to answer two main questions: (i) Why does an accident occur, and (ii) How does it occur. This paper presents a review of accident models that have been developed for the chemical process industry with in-depth analyses of a class of models known as dynamic sequential accident models (DSAMs). DSAMs are sequential models with a systematic procedure to utilise precursor data to estimate the posterior risk profile quantitatively. DSAM also offers updates on the failure probabilities of accident barriers and the prediction of future end states. Following a close scrutiny of these methodologies, several limitations are noted and discussed, and based on these insights, future work is suggested to enhance and improve this category of models further.     

Modelling of BP Texas City refinery accident using dynamic risk assessment approach

Process industries involve handling of hazardous substances which on release may potentially cause catastrophic consequences in terms of assets lost, human fatalities or injuries and loss of public confidence of the company. In spite of using endless end-of-the-pipe safety systems, tragic accidents such as BP Texas City refinery still occur. One of the main reasons of such rare but catastrophic events is lack of effective monitoring and modelling approaches that provide early warnings and help to prevent such event. To develop a predictive model one has to rely on past occurrence data, as such events are rare, enough data are usually not available to better understand and model such behavior. In such situations, it is advisable to use near misses and incident data to predict system performance and estimate accident likelihood. This paper is an attempt to demonstrate testing and validation of one such approach, dynamic risk assessment, using data from the BP Texas City refinery incident.Dynamic risk assessment is a novel approach which integrates Bayesian failure updating mechanism with the consequence assessment. The implementation of this methodology to the BP Texas City incident proves that the approach has the ability to learn from near misses, incident, past accidents and predict event occurrence likelihood in the next time interval.     

Consequence risk analysis using operating procedure event trees and dynamic simulation

Faults due to human errors cost the petrochemical industry billions of dollars every year and can have adverse environmental consequences. Unquantified human error probabilities exist during process state transitions performed each day by process operators using standard operating procedures. Managing the risks associated with operating procedures is an essential part of managing the overall safety risk. Additional operator training and safety education cannot eliminate all such faults due to human errors; therefore, we propose an operating procedure event tree (OPET) like analysis with branches and events specifically designed to perform risk analysis on operating procedures. The OPET method adapts event trees to analyze the risk due to human error while performing operating procedures. We consider human error scenarios during the procedure and determine the likely consequences by applying dynamic simulation. The modified event tree provides an estimate of the error frequencies.Operating procedure steps were developed, and potential operator faults were determined for two typical equipment switching procedures found in chemical plant operations. Then, dynamic simulation using Aspen HYSYS software was applied to determine the overpressure related consequences of each fault. Finally, the error frequencies resulting from those scenarios were analyzed using operating procedure event trees. We found that a typical ethylene plant gas header would overpressure with 0.6% frequency per manual dryer switch. Since dryer switches occur from every few days up to once per shift, these results suggest that dryer switching should be automated to ensure safe and environmentally friendly operation. Process dryer switching performed manually by operators opening and closing gate valves can be automated with control valves and a distributed control system. A sample distillation column was found to overpressure with 0.85% frequency per manual reflux pump switch.     

Incident tree model and incident tree analysis method for quantified risk assessment: An in-depth accident study in traffic operation

Fault tree analysis (FTA) is a logically structured process that can help identify potential causes of system failure before the failures actually occur. However, FTA often suffers from a lack of enough probabilistic basic events to check the consistency of the logic relationship among all events through linkage with gates. Sometimes, even logic relationship among all events is difficult to determine, and failures in system operation may have been experienced rarely or not at all. In order to address the limitations, this paper proposes a novel incident tree methodology that characterizes the information flow in a system instead of logical relationship, and the amount of information of a fuzzy incident instead of probability of an event. From probability statistics to fuzzy information quantities of basic incidents and accident, we propose an incident tree model and incident tree analysis (ITA) method for identification of uncertain, random, complex, possible and variable characteristic of accident occurrence in quantified risk assessment. In our research, a much detailed example for demonstrating how to create an incident tree model has been conducted by an in-depth analysis of traffic accident causation. The case study of vehicle-leaving-roadway accident with ITA illustrates that the proposed methodology may not only capture the essential information transformations of accident that occur in system operation, but also determine the various combinations of hardware faults, software failures and human errors that could result in the occurrence of specified undesired incident at the system level even accident.     

Dynamic risk assessment for underground gas storage facilities based on Bayesian network

Loss of the underground gas storage process can have significant effects, and risk analysis is critical for maintaining the integrity of the underground gas storage process and reducing potential accidents. This paper focuses on the dynamic risk assessment method for the underground gas storage process. First, the underground gas storage process data is combined to create a database, and the fault tree of the underground gas storage facility is built by identifying the risk factors of the underground gas storage facility and mapping them into a Bayesian network. To eliminate the subjectivity in the process of determining the failure probability level of basic events, fuzzy numbers are introduced to determine the prior probability of the Bayesian network. Then, causal and diagnostic reasoning is performed on the Bayesian network to determine the failure level of the underground gas storage facilities. Based on the rate of change of prior and posterior probabilities, sensitivity and impact analysis are combined to determine the significant risk factors and possible failure paths. In addition, the time factor is introduced to build a dynamic Bayesian network to perform dynamic assessment and analysis of underground gas storage facilities. Finally, the dynamic risk assessment method is applied to underground gas storage facilities in depleted oil and gas reservoirs. A dynamic risk evaluation model for underground gas storage facilities is built to simulate and validate the dynamic risk evaluation method based on the Bayesian network. The results show that the proposed method has practical value for improving underground gas storage process safety.     

Risk analysis for oil & gas pipelines: A sustainability assessment approach using fuzzy based bow-tie analysis

Vast amounts of oil & gas (O&G) are consumed around the world everyday that are mainly transported and distributed through pipelines. Only in Canada, the total length of O&G pipelines is approximately 100,000 km, which is the third largest in the world. Integrity of these pipelines is of primary interest to O&G companies, consultants, governmental agencies, consumers and other stakeholder due to adverse consequences and heavy financial losses in case of system failure. Fault tree analysis (FTA) and event tree analysis (ETA) are two graphical techniques used to perform risk analysis, where FTA represents causes (likelihood) and ETA represents consequences of a failure event. ‘Bow-tie’ is an approach that integrates a fault tree (on the left side) and an event tree (on the right side) to represent causes, threat (hazards) and consequences in a common platform. Traditional ‘bow-tie’ approach is not able to characterize model uncertainty that arises due to assumption of independence among different risk events. In this paper, in order to deal with vagueness of the data, the fuzzy logic is employed to derive fuzzy probabilities (likelihood) of basic events in fault tree and to estimate fuzzy probabilities (likelihood) of output event consequences. The study also explores how interdependencies among various factors might influence analysis results and introduces fuzzy utility value (FUV) to perform risk assessment for natural gas pipelines using triple bottom line (TBL) sustainability criteria, namely, social, environmental and economical consequences. The present study aims to help owners of transmission and distribution pipeline companies in risk management and decision-making to consider multi-dimensional consequences that may arise from pipeline failures. The research results can help professionals to decide whether and where to take preventive or corrective actions and help informed decision-making in the risk management process. A simple example is used to demonstrate the proposed approach.     

城市天然气管网预警系统的研究与实现

随着城市天然气管网密度加大,由于天然气管理手段滞后导致的天然气泄漏事故急剧增加。基于GIS技术并结合燃气管网定量风险分析(QRA)模型,提出利用定量风险分析模型实现管网风险预警的方法。结合C#+ArcEngine编程技术,开发城市天然气管网预警系统,实现管网失效率分析、燃气事故扩散模拟、火灾及爆炸模拟、个人风险等值线绘制、社会风险分析等功能,能够进行区域性事故后果预测、个人风险和社会风险计算、安全性评价及应急预案编制等项工作。     

液化天然气加注船安全定量风险分析

液化天然气（LNG）加注船是一种为LNG动力船提供燃料的新型船舶,国内目前尚处于起步阶段,缺乏相关安全标准和规范。采用国际定量风险评价（QRA）的通用理念,研究适用于我国LNG加注船的安全评价方法,提出具体实施步骤和依据准则,并以国内某LNG加注船作为实例分析说明。建立加注船LNG火灾事故树,确定相关火灾事故概率;研究适合加注船火灾事故后果的方形火焰模型,以及LNG火灾热辐射对人体伤害的计算方法;参考国际海事组织（IMO）的风险准则,确定LNG加注船个人风险和社会风险;最后与按NFPA-59A计算的防火间距作对比分析。通过计算,例中加注船的风险位于须采取相关安全措施的ALARP区域,风险控制区域半径20m。若按NFPA-59A要求计算防火间距,该加注船对外部须划定半径52m区域作为安全区域,且须将船身增长37m以满足内部防火要求,在实际工程中无法实现,相比较QRA方法更适合我国LNG加注船的安全评价工作。