Ethics and fundamental principles of risk acceptance criteria

Ethics are concerned with distinguishing between what actions are “right” and “wrong” and what values are “good” and “bad”, etc. and there is a long academic tradition in discussing ethics and ethical theories. Risk acceptance criteria, on the other hand, distinguish between levels of risks that are acceptable and levels that are intolerable. In some sense, one may say that risk acceptance criteria distinguishes between “good” and “bad” systems and activities with regards to the risk they expose the society or elements of a society to and there is thus an obvious link between ethics and risk acceptance criteria or to risk management at large. However, there are few references in the literature that explores this link, and in this paper, the ethical foundation of fundamental principles of risk acceptance criteria will be elaborated upon.This paper considers some important principles for establishing risk acceptance criteria for safety critical systems and activities. The various principles and the philosophies behind them might at first sight seem contradictory and exclusive, but it is demonstrated how they may coexist in one and the same regulatory regime; They may complement each other in order to achieve the overall safety objectives of society. Then, some brief considerations of the ethical foundations for the principles will be given and some relevant examples of actual risk acceptance criteria will be given from the maritime industries. However, it is believed that the principles and discussions are of general interest and apply to all areas of technical risk and to safety regulations in a broader perspective.     

Can level of safety climate predict level of orientation toward safety in a decision making task?

Establishing the relationship between level of safety climate and safety performance is a current challenge. This work examines the relationship between level of safety climate and orientation toward safety in the decision making process and choice. Alternatively, this work seeks to answer the question of whether level of safety climate can predict safety-oriented decision making. A generalized safety climate questionnaire and a decision making simulation are utilized to examine this relationship. The results indicate that level of safety climate is not a significant predictor of the decision process; however, it was found to be a significant predictor of the selection of safer choices.     

An integrated framework of safety performance evaluation for oil and gas production plants: Application to a petroleum transportation station

Safety performance evaluation is a significant way to ensure the safety of oil and gas production plants. Various evaluation methods have been proposed to make safety evaluation more consistent and scientific. However, a major concern is that many existing safety evaluation measurements are still subjective and are not easy to obtain in a uniform way, which can be attributed to the challenges that process plants faced such as people having different knowledge levels, equipment with dispersed locations and management with many processes. This paper aims to display the impact of risk factors on system safety level in a succinct and visual way that may be expected to overcome subjective opinions from experts and provide a more pertinent and practical safety strategies. To this end, an integrated framework is developed, which considers crucial risk factors from pipeline, static equipment, dynamic equipment and management. First, Fault tree analysis (FTA) is used to explicitly determine the crucial r risk factors. Then, a novel fuzzy cognitive map cooperating with relative degree analysis model (FCM-RDA) is proposed to deal with the weigh distribution opinions. Finally, considering the oil and gas production process is a complex system, a fuzzy comprehensive evaluation (FCE) is employed to calculate the overall safety level.     

The use of supervisory practices as leverage to improve safety behavior: a cross-level intervention model

Introduction: The paper presents three intervention studies designed to modify supervisory monitoring and rewarding of subordinates' safety performance. Method: Line supervisors received weekly feedback concerning the frequency of their safety-oriented interactions with subordinates, and used this to self-monitor progress toward designated improvement goals. Managers higher up in the organizational hierarchy received the same information, coupled with synchronous data concerning the frequency of workers' safety behaviors, and highlighting co-variation of supervisory action and workers' behavior. Results: In all the companies involved, supervisory safety-oriented interaction increased significantly, resulting in significant changes in workers' safety behavior and safety climate scores. Continued improvement during the post-intervention period suggests the inclusion of workers' safety behavior as in-role supervisory responsibility. Applied and theoretical implications are discussed.     

Risk reduction concept to provide design criteria for Emergency Systems for onshore LNG plants

The functional safety requirement is widely applied in the process plant industry in accordance with the international standards, such as IEC and ISA. The requirement is defined as safety integrity level (SIL) based on the risk reduction concept for protection layers, from original process risk to tolerable risk level. Although the standards specify both, the Prevention System and the Emergency System, as level of protection layers, the standards specify in detail only the use of the Prevention System (i.e., Safety Instrumented System (SIS)). The safety integrity level is not commonly allocated to the Emergency System (e.g., Fire and Gas System, Emergency Shutdown System and Emergency Depressuring System). This is because the required risk reduction can be normally achieved by only the Prevention System (i.e., SIS and Pressure Safety Valve (PSV)). Further, the risk reduction level for the Emergency System is very difficult to be quantified by the actual SIL application (i.e., evaluated based on the single accident scenario, such as an accident from process control deviation), since the escalation scenarios after Loss of Containment (LOC) greatly vary depending on the plant design and equipment. Consequently, there are no clear criteria for evaluating the Emergency System design. This paper aims to provide the functional safety requirement (i.e., required risk reduction level based on IEC 61508 and 61511) as design criteria for the Emergency System.In order to provide clear criteria for the Emergency System evaluation, a risk reduction concept integrated with public’s perception of acceptable risk criteria is proposed and is applied to identify the required safety integrity level for the Emergency System design. Further, to verify the safety integrity levels for the Emergency Systems, the probabilistic model of the Emergency Systems was established considering each Emergency System (e.g., Fire and Gas System, Emergency Shutdown System and Emergency Depressuring System) relation as the Overall Emergency System. This is because the Overall Emergency System can achieve its goal by the combined action of each individual system, including inherent safe design, such as separation distance.The proposed approach applicability was verified by conducting a case study using actual onshore Liquefied Natural Gas Plant data. Further, the design criteria for Emergency Systems for LNG plants are also evaluated by sensitivity analysis.     

3-Parameters SPW technique: A new method for evaluation of target safety integrity level

Introduced by IEC-61508 standard, safety integrity levels (SIL) have been used for assessing the reliability of safety instrumented functions (SIF) for protection of the system under control in abnormal conditions. Different qualitative, semi-qualitative and quantitative methods have been proposed by the standard for establishing target safety integrity levels amongst which “Risk Graph” has gained wide attention due to its simplicity and easy-to-apply characteristics. However, this method is subject to many deficiencies that have forced industry men and experts to modify it to fit their demands. In this paper, a new modification to risk graph parameters has been proposed that adds more flexibility to them and reduces their subjective uncertainties but keeps the method as simple as before. Three parameters, namely severity (S), hazard avoidance probability (P), and demand rate (W) are used instead of former four parameters. Hence, the method is named SPW. The outcome results of this method can be directly converted to probability of failure on demand (PFD) or risk reduction factor (RRF). The proposed method has been tested on an example case that has been studied before with conventional risk graph and LOPA techniques. The results show that new method agrees well with LOPA and reduces costs imposed by conservative approximations assumed during application of conventional risk graph.     

Safety evaluation of leak in a storage tank using fault tree analysis and risk matrix analysis

The work presented in this paper used a quantitative analysis of relevant risks through the development of fault tree analysis and risk analysis methods to aid real time risk prediction and safety evaluation of leak in a storage tank. Criticality of risk elements and their attributes can be used with real time data to predict potential failures likely to occur. As an example, a risk matrix was used to rank risk of events that could lead to a leak in a storage tank and to make decisions on risks to be allowed based on past statistical data. An intelligent system that recognizes increasing level(s) and draws awareness to the possibility of additional increase before unsafe levels are attained was used to analyse and make critical decisions. After a visual depiction of relationships between hazards and controls had been actualized, dynamic risk modelling was used to quantify the effect controls can potentially have on hazards by applying historical and real-time data into a probabilistic model. The output of a dynamic risk model is near real-time quantitative predictions of risk likelihood. Results from the risk matrix analysis method mixed with RTD and FTA were analyzed, evaluated, and compared.     

The safety chain: A delusive concept

Various governments have defined a so-called safety chain to structure their efforts in the field of risk management for low-probability disasters. The safety chain typically consists of the following components: proaction, prevention, preparation, repression. While the terminology suggests that the safety chain should be interpreted a series system, the safety chain more closely resembles a parallel system. This has important implications: the safety chain is not as weak as its weakest link; unreliable links need not always be strengthened as it will often be more efficient to rely on a few layers of protection, or just one. To avoid misguided efforts caused by the confusing terminology ‘safety chain’, we propose the use of the term ‘layers of protection’, as is currently the case in the Dutch flood safety policy. Furthermore, we show that imperfect preparedness for low-probability disasters is often perfectly defensible or rational, given the differences between the cost-effectiveness of investments in prevention and disaster preparedness.     

A new simple methodology for evaluation of explosion risk in underground coal mines

The key objective of this paper is the presentation of a new risk assessment tool for underground coal mines based on a simplified semi-quantitative estimation and assessment method.In order to determine the risk of explosion of any work process or activity in underground coal mines it is necessary to assess the risk. The proposed method is based on a Risk Index obtained as a product of three factors: frequency of each individual scenario P_ucm, associated severity consequences C_ucm and exposure time to explosive atmospheres E_ucm. The influence of exposure time is usually not taken into account up to now. Moreover, the exposure to explosive atmospheres may affect factors of hazardous event probability as much as its consequences. There are many definitions of exposure to explosive atmospheres but in the case of underground coal mines the exposure is defined as frequency risk of firedamp and coal dust. The risk estimation and risk assessment are based on the developed of a risk matrix.The proposed methodology allows not only the estimation of the explosion risk but also gives an approach to decide if the proposal investment is well-justified or not in order to improve safety.     

Risk and safety perception on urban and rural roads: Effects of environmental features,driver age and risk sensitivity

Objective: The ability to detect changing visual information is a vital component of safe driving. In addition to detecting changing visual information, drivers must also interpret its relevance to safety. Environmental changes considered to have high safety relevance will likely demand greater attention and more timely responses than those considered to have lower safety relevance. The aim of this study was to explore factors that are likely to influence perceptions of risk and safety regarding changing visual information in the driving environment. Factors explored were the environment in which the change occurs (i.e., urban vs. rural), the type of object that changes, and the driver's age, experience, and risk sensitivity.

Methods: Sixty-three licensed drivers aged 18–70 years completed a hazard rating task, which required them to rate the perceived hazardousness of changing specific elements within urban and rural driving environments. Three attributes of potential hazards were systematically manipulated: the environment (urban, rural); the type of object changed (road sign, car, motorcycle, pedestrian, traffic light, animal, tree); and its inherent safety risk (low risk, high risk). Inherent safety risk was manipulated by either varying the object's placement, on/near or away from the road, or altering an infrastructure element that would require a change to driver behavior. Participants also completed two driving-related risk perception tasks, rating their relative crash risk and perceived risk of aberrant driving behaviors.

Results: Driver age was not significantly associated with hazard ratings, but individual differences in perceived risk of aberrant driving behaviors predicted hazard ratings, suggesting that general driving-related risk sensitivity plays a strong role in safety perception. In both urban and rural scenes, there were significant associations between hazard ratings and inherent safety risk, with low-risk changes perceived as consistently less hazardous than high-risk impact changes; however, the effect was larger for urban environments. There were also effects of object type, with certain objects rated as consistently more safety relevant. In urban scenes, changes involving pedestrians were rated significantly more hazardous than all other objects, and in rural scenes, changes involving animals were rated as significantly more hazardous. Notably, hazard ratings were found to be higher in urban compared with rural driving environments, even when changes were matched between environments.

Conclusion: This study demonstrates that drivers perceive rural roads as less risky than urban roads, even when similar scenarios occur in both environments. Age did not affect hazard ratings. Instead, the findings suggest that the assessment of risk posed by hazards is influenced more by individual differences in risk sensitivity. This highlights the need for driver education to account for appraisal of hazards’ risk and relevance, in addition to hazard detection, when considering factors that promote road safety.     

Consequence risk analysis using operating procedure event trees and dynamic simulation

Faults due to human errors cost the petrochemical industry billions of dollars every year and can have adverse environmental consequences. Unquantified human error probabilities exist during process state transitions performed each day by process operators using standard operating procedures. Managing the risks associated with operating procedures is an essential part of managing the overall safety risk. Additional operator training and safety education cannot eliminate all such faults due to human errors; therefore, we propose an operating procedure event tree (OPET) like analysis with branches and events specifically designed to perform risk analysis on operating procedures. The OPET method adapts event trees to analyze the risk due to human error while performing operating procedures. We consider human error scenarios during the procedure and determine the likely consequences by applying dynamic simulation. The modified event tree provides an estimate of the error frequencies.Operating procedure steps were developed, and potential operator faults were determined for two typical equipment switching procedures found in chemical plant operations. Then, dynamic simulation using Aspen HYSYS software was applied to determine the overpressure related consequences of each fault. Finally, the error frequencies resulting from those scenarios were analyzed using operating procedure event trees. We found that a typical ethylene plant gas header would overpressure with 0.6% frequency per manual dryer switch. Since dryer switches occur from every few days up to once per shift, these results suggest that dryer switching should be automated to ensure safe and environmentally friendly operation. Process dryer switching performed manually by operators opening and closing gate valves can be automated with control valves and a distributed control system. A sample distillation column was found to overpressure with 0.85% frequency per manual reflux pump switch.     

Incorporating inherent safety during the conceptual process design stage: A literature review

This paper reviews principal concepts, tools, and metrics for risk management and Inherently Safer Design (ISD) during the conceptual stage of process design. Even though there has been a profusion of papers regarding ISD, the targeted audience has typically been safety engineers, not process engineers. Thus, the goal of this paper is to enable process engineers to use all the available design degrees of freedom to mitigate risk early enough in the design process. Mainly, this paper analyzes ISD and inherent safety assessment tools (ISATs) from the perspective of inclusion in conceptual process design. The paper also highlights the need to consider safety as a major component of process sustainability. In this paper, 73 ISATs were selected, and these tools were categorized into three groups: hazard-based inherent safety assessment tools (H-ISATs) for 22 tools, risk-based inherent safety assessment tools (R-ISATs) for 33 tools, and cost-optimal inherent safety assessment tools (CO-ISATs) for 18 tools. This paper also introduces an integrated framework for coordinating the conventional process design workflow with safety analysis at various levels of detail.     

Selection of failure frequency and its impact on risk assessment – A case study from plot plan optimisation

Facility Siting is an important phase of project development. A critical stage is plot plan optimisation, where significant potential hazards are eliminated due to equipment spacing. In addition to ensuring appropriate compliance with minimum spacing requirements, occupied building studies to achieve compliance with the requirements of API 752 and API 753 could also be undertaken to optimise safety outcomes. The studies are done in three stages, where the first stage is hazard identification, second stage is consequence assessment and the third stage is risk assessment. Third stage assessments are only carried, if the consequence based siting recommendations are not practical to implement.This paper presents the challenges in estimating risk due to process hazards with a focus on selecting right event likelihood data. A comparison is presented on the variation in predicted risk levels based on equipment failure rates and leak frequencies.Case study of a plot plan optimisation study is undertaken with DNVGL Phast Risk and the variation in risk levels up to two orders of magnitude are recorded. Challenges such as adaption of data for local conditions, consistent definitions of failure, sample size of data, applicability of data play a significant role in identifying and correctly quantifying the risk levels. Such challenges and its impact on risk quantification are presented in this paper as well as its impact on facility siting.     

基于风险度量理论的煤矿安全的系统评价

对风险理论最新进展的评述认为 ,安全就是零风险 ,凡事总有风险 ,安全只是相对的 ;安全问题是系统风险问题 ,风险和安全是同一个系统不确定性状态的两种对称的描述 ;安全程度或风险大小不仅取决于客观自然因素也决定于主观因素。笔者根据姜青舫提出的满足风险度量公理的险度函数 ,对矿井风险体系的结构分析 ,提出了矿井风险集、矿井险度和安全度新型综合评价指标。使矿山的安全评价建立在合理风险理论的基础之上 ,其中相对险度指标可直接作为风险预警指标使用。     

Learning from the application of nuclear probabilistic safety assessment to the chemical industry

This paper introduces the new approach of risk analysis established by the French Ministry of the Environment and develops the benefits of applying nuclear probabilistic safety assessment approaches to the chemical industry.In the aftermath of the AZF disaster in Toulouse on 21 September 2001, a new law was proposed by the French government asking for the investigation of all representative scenarios and the assessment of the probability of the resulting dangerous phenomena to demonstrate an acceptable level of safety. Therefore, any accident is investigated from a global point of view, according to its gravity and its probability.In 2000, the French Ministry of the Environment asked the Institute for Radiological Protection and Nuclear Safety (IRSN), and in particular its Systems and Risk Protection Assessment (SESPRI) and its Industrial Risks, Fire and Containment Assessment and Study (SERIC) departments, to conduct a Probabilistic Safety Assessment (PSA) study of an LPG distribution facility, specially for the BLEVE scenario. This study has showed the power of PSA for defining and prioritizing actions to be carried out to improve safety of facilities; however, it requires credible data for reliability and failure of the equipment, not available in generic failure databases.Since 2007, IRSN has taken several initiatives in collaboration with operators in order to provide more precise and representative failure rates for main safety equipment, ready to use in future PSA relative to LPG plants.     

Traffic culture as symbol exchange - A cross-country comparison of Russia and Norway

The core aim of the study was to gain insight into the cross-country differences in traffic risk perception and driving behaviour and also how culture and cultural differences may influence perceived risk and risk behaviour by comparing a sample of the Russian population with a sample of the Norwegian population. A new measurement instrument aimed at measuring culture as symbol exchange was applied. Self-completion questionnaire surveys were carried out among representative samples of the Norwegian (n = 247) and the Russian (n = 299) population aged 18 years and over. The results showed that culture defined as symbol exchange was weakly associated with risk perception. It is suggested that research carried out to date on the role of culture in risk research may have focused on criterion variables which are not very relevant. However, while traffic safety culture does not seem to be important for risk perception, this study shows that it seems to be relevant for drivers’ risk behaviour and thus it is still relevant and important to focus on traffic culture in risk research despite the fact that culture does not predict perceived risk. As symbol exchange, the newly developed measure of traffic safety culture is capable of predicting drivers’ risk behaviour in traffic and is therefore a valid predictor of traffic safety.     

Perceptions of personal vulnerability to workplace hazards in the Australian construction industry

Introduction

The importance of risk perception for workplace safety has been highlighted by the inclusion of risk appraisals in contemporary models of precautionary behavior at work. Optimism bias is the tendency to think that negative events are less likely to happen to oneself than to the average person, and is proposed to be related to the reduced use of precautions.

Method

Building on studies of optimism bias for workplace hazards using samples with heterogenous risk profiles, the current study aimed to investigate whether optimism bias is present in a sample of workers exposed to similar workplace hazards. 175 Australian construction workers completed a brief survey that asked them to rate the likelihood of common construction industry hazards occurring to them and to the average worker of the same age doing the same job. Significant levels of optimism bias were found for many hazards (including being electrocuted, being trapped in a confined space, falling from heights, and causing someone else to have an injury).

Results

Optimism bias was not related to perceived controllability, contrary to findings in other domains, yet consistent with findings of optimism bias for workplace hazards. Optimism bias was not found to be related to a reduction in safe work behaviors, though this may be due to difficulties in measuring safe or precautionary behavior, such as social desirability.

Impact on industry

That most workers think that hazards are less likely to happen to them than to the average worker presents a significant problem because it may ameliorate the efficacy of safety programs, yet constitutes a largely unexplored opportunity for improving workplace safety performance.     

Does the potential safety risk affect whether particular construction hazards are recognized or not?

Introduction: Evidence from the global construction industry suggests that an unacceptable number of safety hazards remain unrecognized in construction workplaces. Unfortunately, there isn’t a sufficient understanding of why particular safety hazards remain unrecognized. Such an understanding is important to address the issue of poor hazard recognition and develop remedial interventions. A recent exploratory effort provided anecdotal evidence that workers often fail to recognize safety hazards that are expected to impose relatively lower levels of safety risk. In other words, the research demonstrated that the underlying risk imposed by a safety hazard can affect whether a hazard will be recognized or not. Method: The presented research focused on empirically testing this preliminary finding. More specifically, the study tested the proposition that Construction workers are more likely to recognize safety hazards that impose higher levels of safety risk than those that impose relatively lower levels of safety risk. The research goals were accomplished through a number of steps. First, a set of 16 construction case images depicting a variety of construction operations that included a number of known safety hazards was presented to a panel of four construction safety experts. The experts were tasked with examining each of the known safety hazards and providing a rating of the relative safety risk that the individual hazards impose. Having obtained an estimate of the underlying safety risk, a hazard recognition activity was administered to 287 workers recruited from 57 construction workplaces in the United States. The hazard recognition activity involved the examination of a random sample of two construction case images that were previously examined by the expert panel and reporting relevant safety hazards. Results: The results of the study provided support for the proposition that workers are more likely to recognize hazards that impose relatively higher levels of safety risk. Practical Applications: The findings of the study can be leveraged to improve existing hazard recognition methods and develop more robust interventions to address the issue of poor hazard recognition levels.     

Quantification of risk perception: Development and validation of the construction worker risk perception (CoWoRP) scale

Introduction: The construction sector is leading in the number of accidents and fatalities; risk perception is the key to driving these numbers. Previous construction safety studies on risk perception quantification have not considered affective risk perception of construction workers or conducted comprehensive reliability and validity testing. Thus, this study aims to fill this need by developing a psychometrically sound instrument – the Construction Worker Risk Perception (CoWoRP) Scale – to assess the risk perception of construction workers. Method: Four phases of scale development, namely, item development, factor analysis, reliability assessment, and validity assessment were conducted with the collection and testing of data from a group (n = 469) of voluntary construction workers in Hong Kong. Results: The CoWoRP Scale with 13 items was shown to have acceptable test–retest reliability, internal consistency reliability, as well as content, convergent, discriminant, and criterion-related validity. Also, the CoWoRP Scale was affirmed to have three dimensions of worker risk perception, namely risk perception – probability, risk perception – severity, risk perception – worry and unsafe. These three dimensions of worker risk perception were negatively correlated with their risk-taking behavior. Conclusions: The CoWoRP Scale is a reliable and valid instrument for measuring the risk perception of construction workers and is expected to facilitate the construction safety studies that take risk perception of construction workers into account. Practical applications: The CoWoRP Scale could serve as an aptitude test to identify the characteristics of construction workers most likely to perceive lower risk in risky work situations. In turn, this information could help safety management provide safety training programs to those workers to enhance their risk perception and thereby minimizing their risk-taking behavior, reducing unnecessary training costs, and improving the construction safety performance.     

Inherent safety concept based proactive risk reduction strategies: A review

The growing scale and complexity of process industries have brought safety, health, and environmental issues to the forefront. As a result, proactive risk reduction strategies (RRSs) are commonly employed to address these issues by reducing the frequency or mitigating the consequences of potential incidents. Among these strategies, inherent safety, which is a proactive measure of loss prevention and risk management, is considered to be the most effective method. This review aims to provide a comprehensive analysis of RRSs for achieving inherency, as well as techniques for evaluating the performance of inherent safety, health, and environmental aspects. Background information is presented, including the development and implementation of the inherently safer process design, as well as the approaches for achieving inherently healthier and environmentally friendlier processes. Subsequently, the execution approaches and practical applications of other RRSs are discussed to highlight the distinctiveness and benefits of inherent safety. Next, this study examined the characteristics of inherency assessment tools (IATs) based on available information at different process stages. Furthermore, the evaluation methods and historical development of IATs are investigated from the perspectives of safety, occupational health, and environmental considerations, followed by a statistical analysis of IATs. It is concluded that the no-chemical hazards-based IATs have not been extensively studied yet, which may improve the safety level of process plants from the perspective of comprehensive inherency risk reduction. As a way forward, future research opportunities are proposed to promote the implementation of greater optimized risk management.