Chapter Four Risk Assessment of NLNG
Chapter Four Risk Assessment of NLNG
PROTECTIVE
LAYERS
INCOPORATED
INTO
STANDARD
BASIC PROCESS CONTROL SYSTEM The basic process control system (BPCS), including
normal manual controls, is the first level of protection during normal operation. The BPCS is
designed to maintain the process in the safe operating region. The normal operation of a BPCS
control loop may be credited as an IPL if it meets the appropriate criteria. The failure of the
BPCS can be an initiating event. When considering using the BPCS as an IPL, the analyst must
evaluate the effectiveness of the access control and security systems as human error can degrade
the performance of the BPCS (CCPS, 1998b).
CRITICAL ALARMS AND HUMAN INTERVENTION These systems are the second level
of protection during normal operation and should be activated by the BPCS. Operator action,
initiated by alarms or observation, can be credited as an IPL when various criteria are satisfied to
assure the effectiveness of the action. Company procedures and training may improve the
performance of humans in the system, but procedures themselves are not an IPL. Inherently safer
process design features are encouraged to eliminate possible scenarios Inherently Safer Chemical
Processes: A Life Cycle Approach (CCPS, 1998a).
SAFETY INSTRUMENTED FUNCTION (SIF) A SIF is a combination of sensors, logic
solver, and final elements with a specified safety integrity level that detects an out-of-limit
(abnormal) condition and brings the process to a functionally safe state. A SIF is functionally
independent of the BPCS. A SIF is normally considered to be an IPL and the design of the
system, the level of redundancy, and the amount and type of testing will determine the PFD the
SIF receives in LOPA. (CCPS, 1996b).