Throughout history, total solar eclipses have been a significant event. In primitive societies, eclipses were viewed with fear or as important omens. In the US, the upcoming “Great American Solar Eclipse” is creating much excitement. From buying “official” eclipse-viewing glasses, to paying $1500 or more…
The International Electrotechnical Commission (IEC) has just published the first edition of IEC 62682 “Management of alarm systems for the process industries,” a global standard on alarm management. This new global standard was developed based on the ANSI/ISA-18.2 standard of the same name, which was published in…
Todd Stauffer, Director of Alarm Management at exida, takes you through a key part of the Alarm Rationalization process called Alarm Objective Analysis (AOA).
You will learn how to determine what alarms you need (and which one’s you don’t), how to eliminate nuisance alarms, and safely reduce the number…
From an operations point of view, one of the significant parts of the ISA-18.2 and IEC 62682 alarm management standards is the endorsement of alarm response procedures. An alarm response procedure, otherwise known as “Alarm Help” or “Alarm Response Manual”, is defined as guidance for response to an alarm (e.g., operator…
One of the more important tasks in the alarm management lifecycle is auditing of the alarm system configuration. Auditing preserves your investment in rationalization, checks for changes that bypassed the MOC process, and helps you to maintain the integrity of the alarm system. Oh, and it also required per…
As discussed in What do Nuisance Alarms, the 80-20 Rule, and Mental Models Have in Common?, there are typically a handful of alarm points (10 to 20) that create the majority of notifications (50-80%) to the operator (referencing the 80-20 rule). These nuisance alarms are affectionately called “bad…
The bow tie methodology, originally developed by ICI in the late 1970’s, has seen increasing industry adoption over the last 20 years. Bow tie diagrams build on the “Swiss Cheese Model” of hazard escalation and causation popularized by James Reason. They provide a powerful means for visualizing how a…
As discussed in Part I, bow tie diagrams provide an easy-to-understand visual representation of risk management information (hazards, potential consequences, barriers, degradation factors and controls). In this article we examine the applicability of bow ties to alarm management.
According to the CCPS book “Bow Ties in Risk Management”,…
US Chemical Safety Board cites lack of Alarm Philosophy, Alarm Rationalization, and State-Based Alarming as Contributing Factors to Blowout in Oklahoma
On January 22, 2018, a blowout and rig fire at the Pryor Trust gas well killed five workers, who were inside the…
Alarm floods are periods of alarm activity during which the alarm rate is greater than the operator can effectively manage (e.g., when the operator receives ≥10 alarms in 10 minutes). During a flood situation awareness is compromised and alarms are likely to be missed. In the eleven minutes prior to the explosion…
As the name implies, the purpose of Safe Operating Limits (SOL) is to define the limits beyond which a process will not intentionally be operated and at which troubleshooting ceases, replaced by pre-determined actions to bring the process to a safe state. Pretty important information. I am sure this is…
Situation: There are three operator consoles (positions) in the same control room. There is one general alarm horn that goes off whenever a new alarm comes in from any one of the three consoles. The horn draws the attention of each of the three operators.
Question: How are the…
Co-written by Todd Stauffer, Director of Alarm Management Services at exida
A wise man once said, “You can’t manage what you don’t measure.” Let's apply this to the world of cybersecurity to discuss the importance of cybersecurity metrics and how they are different from a cyber diagnostic and a…
The travel and group meeting restrictions from COVID-19 have allowed me to catch up on some reading about viruses; not the type that get transmitted to humans. This article is about the Stuxnet virus and what I learned from the book “Countdown to Zero Day: Stuxnet and the Launch of…
Contrary to what you might have guessed, the “Defeat of the Situation Awareness Demons” is not a new video game on XBOX or Playstation. It is a set of eight (8) factors which undermine effective Situation Awareness. It can be applied to operators in process plants to characterize human…
Industry Benchmark Survey on Alarms as Safeguards and Independent Protection Layers (IPLs)
exida recently conducted an industry benchmark survey on the practices for the use of alarms as safeguards and IPLs. With over 200 safety practitioners from around the world providing responses, you can use the survey findings to…
In the book “Outliers”, Malcolm Gladwell popularized the notion that to become an expert in a field requires putting in 10,000 hours of practice.
The emerging picture from studies of expertise is that ten thousand hours of practice is required to reach the level of mastery associated with being…
Which one of these layers of protection (operator response to alarm, relief valves, dikes, and safety instrumented systems) is not like the other?
Operator response to alarm (Operator Intervention), because of the “Human” factor.
It is very difficult to calculate the probability…
Increases in levels of automation and system complexity impact human error. Medical errors in hospitals and clinics result in approximately 100,000 people dying each year and cost the healthcare industry between $4B – $20B each year. In the petrochemical industries, operational error can cost upwards of $80M per incident. “Operator error”…
“…there is a belief amongst many engineers and managers that human error is both inevitable and unpredictable.
However, human error is inevitable only if people are placed in situations that emphasize human weaknesses and that do not support human strengths”
Martin Anderson, IChemE Safety and Loss Prevention…