WayneChastain,P.E.EastmanChemicalCompanyAdvancesinLayerofProtectionAnalysisAgendaOverviewofLayerofProtectionAnalysisGuidelinesforInitiatingEventsandIndependentProtectionLayersforLayerofProtectionAnalysisGuidelinesforEnablingConditionsandConditionalModifiersforLayerofProtectionAnalysisPathForward–EvergreenLOPADatabaseLayerofProtectionAnalysisSimplifiedformofquantitativeriskassessmentUsesorderofmagnitudecategoriesfor:ConsequenceseverityInitiatingeventfrequencyLikelihoodoffailureofIndependentProtectionLayers(IPLs)ProvidesanumericalindicationofadequacyofprotectivesystemsQuantitativeRiskAnalysisQRAisasuiteoftechniquesforbothconsequenceandfrequencyanalysisQRAtypicallyinvolvesevaluationofindividualriskand/orsocietalriskfromabroadrangeofeventsataplantsiteLayerofProtectionAnalysisIntroducedin2001SimplifiedSingleCause–ConsequenceAnalysisOrderofMagnitudeStrictRulesofIndependenceHowisLOPAused?ProcessHazardAnalysisEvaluationofadequacySafetyInstrumentedSystemsMostpopularmeansofdeterminingtheSafetyIntegrityLevelReliefDeviceDesignMitigationofreliefcasesLOPAProcessA•IdentifytheeventtobeanalyzedB•Determinetheconsequence•SelecttheriskcriteriaC•DeterminetheInitiatingEvent•SelecttheappropriateinitiatingeventfrequencyD•DetermineanyEnablingConditions•SelecttheappropriateprobabilityfortheenablingconditionE•DeterminetheIndependentProtectionLayers•SelecttheappropriateprobabilityoffailureondemandforeachIPLF•DetermineConditionalModifiers•SelecttheappropriateprobabilityforeachconditionalmodifierG•Calculateafrequencyofoccurrencefortheeventbasedontheinitiatingeventfrequency,theenablingevent,thePFDofeachIPL,andtheconditionalmodifiersH•ComparethecalculatedfrequencytotheriskcriteriatodetermineadditionalriskreductionrequiredSwissCheeseModelLOPAProcessDeterminetheConsequenceTheconsequenceisbasedontheimpactoftheeventConsequenceisusedtodeterminetheriskcriteriaLossofprimarycontainmentUltimateconsequencesLifesafetyEnvironmentalimpactBusinessimpactInitiatingEventsSeveralinitiatingeventsmayleadtotheconsequenceofinterestEachshouldbeevaluatedwithanindependentLOPAStandardvaluesareprovidedfortheinitiatingeventfrequenciesformostcommonfailures,forexample:BPCS(DCScontrols)loopfailuresOperatorerrorsTuberupturesLossofcoolingIndependentProtectionLayersIPLshavetomeetthreebasiccriteriaIndependentEffectiveAuditableStandardvaluesareusedfortheprobabilityoffailureondemand(PFD)forIPLsConditionalModifiersProbabilityofIgnitionProbabilityofPersonnelPresenceProbabilityofInjuryNottypicallyusediflossofprimarycontainmentistheendpointCalculatedEventFrequencyTheproductoftheinitiatingeventfrequencyandtheprobabilitiesoftheenablingcondition,theindependentprotectionlayers,andanyconditionalmodifiersprovidesthecalculatedeventfrequencyThecalculatedeventfrequencyisthencomparedtotheriskcriteriatodeterminethelevelofriskandtherecommendedreliabilityforadditionalcontrolstoreducetheriskCalculatedEventFrequency𝐸𝐸=𝐸𝐼𝐼×𝑃𝐼𝐸×�𝐼𝑃𝐼𝑃𝑃𝑃×�𝐶𝐶𝑃EventFrequencyInitiatingEventFrequencyEnablingConditionProbabilityProductofPFDsofIPLsProductofConditionalModifierProbabilitiesExampleLOPAFreq.orProb.RiskDescriptionScenarioExcessiveSteamFlowtoDistillationColumnResultsinOverpressure,Failure,andSevereInjuryConsequence10-5Singlesevereinjuryonthe...