May 24, 2010

Blowout Preventer

What is a blowout preventer? In the Deepwater Horizon oil rig disaster, it is suspected that the blowout preventer failed. Please see Wikepedia's explanation given below:
BOPs come in a variety of styles, sizes and pressure ratings, and usually several individual units comprise a BOP stack. Blind rams are designed to close an open wellbore. Pipe rams seal around tubular components in the well (drill pipe, casing, tubing, or coiled tubing). Shear-seal BOPs are fitted with hardened steel shearing surfaces that can actually cut through drill pipe and tool strings, if all other barriers fail. Since BOPs are important for the safety of the crew, as well as the drilling rig and the wellbore itself, BOPs are regularly inspected, tested and refurbished. Tests vary from daily test of functions of critical wells to monthly or less frequent testing of wells with low likelihood of control problems.Any of these BOPs may be installed underwater, normally with two hydraulic actuators.
Deepwater Horizon blowout
After the Deepwater Horizon drilling rig explosion on April 20, 2010, the blowout preventer should have activated itself automatically to avoid an oil spill in the Gulf of Mexico. Underwater robots were sent to manually activate the mechanism's switch, to no avail. As of May 2010[update] it is unknown why it failed.BP representatives suggested that the preventer could have suffered a hydraulic leak. Gamma-ray imaging of the preventer conducted on May 12 and May 13, 2010 showed that the preventer's internal valves were partially closed and were restricting the flow of oil. Whether the valves closed automatically during the explosion or were shut manually by ROV is unknown.

Please see this link for a pdf version powerpoint presentation of BOP (large file-be patient!).

Organisational culture and Process Safety

I always keep wondering why companies spend so much money on implementing behaviour based safety systems when in real life, what is actually required is the behaviour of top management towards process safety! If top management are able to track and recognize the process safety issues that need attending to, then the organizational culture will be conducive for the success of PSM. A walk around by top management to every nook and corner of their plant once in 6 months is adequate for them to understand the PSM issues!Organizational safety culture must come from the top and it is free to implement!
A recent OSHA report mentions the following:
Since the BP Texas City explosion in 2005, OSHA has counted over 20 serious incidents in refineries across the country.
Last year, OSHA completed an investigation of a naphtha piping failure and release, in which the resulting explosion and fire seriously injured three workers; two other workers, relatively young at 49 and 53 years old, died. One of these two workers was killed in the explosion; the other struggled for 13 days in the hospital before dying from severe burns. Within the unit where this rupture occurred, OSHA discovered multiple pipes that were operating below their retirement wall thickness. In fact, the very line that ruptured had previously ruptured and had to be replaced a decade earlier. As this tragedy makes clear, this type of breakdown maintenance is simply unacceptable. Good mechanical integrity programs are absolutely essential to safe refinery operation.
In 2007, water freezing in liquid propane piping resulted in a jet fire and a rapid evacuation of the entire refinery. Three workers, aged 33, 35, and 42 were seriously burned and hospitalized. Investigators found that a Process Hazard Analysis team had recommended installing remotely operable shut-off valves, yet the recommendation was improperly closed as "complete" by the previous owner. In fact, the valves had not been installed at all. The lack of these shut-off valves impeded workers' ability to control the propane release before it ignited. The refinery learned a hard lesson: It is essential to rigorously follow up on PHA findings to ensure that hazards are adequately controlled. Failure to abate serious hazards can have deadly consequences.
In 2008, at another facility, an explosion in a hydrocracking unit blew the head off a process water filter. The debris struck and killed a foreman; he was 53 and had been with the company for 30 years. OSHA's investigation revealed that an inadequate start-up procedure had allowed hydrogen gas and air to accumulate in the top of the filter where it was likely ignited by pyrophoric deposits. OSHA learned that some operators had recognized the hazard and used an undocumented alternate approach that was actually safer, but the procedure had never been updated to incorporate the safer practice. The result of following the faulty procedure was a violent explosion and the needless death of a refinery worker ? and a reminder that having safe, complete, and accurate operating procedures is essential to safe operations in process units.

May 22, 2010

Facility siting and hazardous chemicals

Greenpeace has sent a blimp over a chemical plant in Delaware, as part of a worldwide campaign to eliminate toxic chemicals. Their focus is on toxic chemicals that could spread in an airborne plume if released suddenly by an accident or terrorist attack. The article mentions that "Federal risk management reports indicate that up to 660,000 people live in potential “downwind” areas at risk in the event of a sudden, complete release from one of the 90-ton chlorine tank cars routinely parked at Edge Moor in east Wilmington.A similar accident at the Chambers Works operation, near the Delaware Memorial Bridge, could endanger 2 million people, by federal estimates".
In India, the problem is more acute.Residential dwellings are allowed to come up in the no man zone surrounding hazardous chemical factories.
Read the full article in this link

May 21, 2010

Cyclone Laila and Headcount procedures

Today's Times of India carries an article mentioning that cyclone Laila uprooted one of the anchors of the ONGC oil rig Sagar Vijay in the Bay of Bengal, thus destabilising the rig. The article also mentions that ONGC could not give the exact number of people on board at the time of the incident.How robust are your headcount procedures? Test them in surprise tests. During mock drills everything is hunky dory but when an emergency strikes, are your systems telling you the exact number of personnel inside your facility? A proper head count system prevents body counts.
When I worked in the Middle East, I was also a volunteer firefighter for the plant firefighting team. We had an elaborate head count system for firefighters also, to ensure that all firefighters are accounted for. It is better to plan for the worst.It does not cost much but can save lives!

Dust explosions and vacuum cleaners

The CSB has been doing a great service by increasing awareness about dust explosions. Dust explosions can occur in sugar, sawdust, coal, and in fact anything that is combustible including combustible metals. Housekeeping plays a very important part in eliminating dust in the work area. Industrial vacuum cleaners are available to do the job safely. One such cleaner is given in this youtube link. I am not endorsing their product but I thought that the video was a good one!

Hydrogen incidents


Click here for the site. This site is a useful site for incidents connected with hydrogen. For those of you dealing with this dangerous gas, these incidents will help you understand its dangers. Hydrogen is handled in refineries,ammonia plants and chlor alkali industries.

May 20, 2010

Blowing of natural gas lines

Finally the CSB has released a statement about natural gas blowing of pipelines. A survey has been conducted by CSB. "According to the survey, using natural gas to clean pipes remains the most common single practice in industry, employed by 37% of respondents. The other respondents reported using nitrogen, which is nonflammable, or inherently safer alternatives such as air, steam, or cleaning pigs. On February 25, 2010, eighteen days after the explosion at Kleen Energy, the CSB stated that natural gas blows were “inherently unsafe” and urged industry to seek alternatives".
Even last week, I had warned a natural gas user to prevent the blowing of lines with natural gas itself instead of using nitrogen. Read more of the CSB statement in this link.
Read my earlier post on the topic in this link.

May 19, 2010

Confined spaces are deadly

Time and again, we realize how deadly a confined space can be but lives continue to be lost. The number of deaths we have read in newspapers involving conservancy workers entering sewers and asphyxiated by hydrogen sulfide are countless. In chemical plants,refineries,food industry, transportation industry, power generation, pulp, paper and other industries, deadly gases can accumulate inside confined spaces. No wonder they are called silent killers. CO, H2S, CO2,CH4, Ammonia, paint,thinners, solvents, nitrogen are all deadly inside a confined space. Reactions that take place inside confined spaces including fermentation can make the confined spaces deadly.
Treat your confined spaces with respect. Have a proper confined space entry permit that is enforced.Read some of the accidents in confined spaces in this link
The CSB video on hazards of nitrogen in confined spaces can be viewed in this link.
Read an interesting article on confined space threats to farmers in this link!

May 17, 2010

Oleum release incident - CSB findings

The CSB has released its final report on the uncontrolled oleum release from INDSPEC Chemical Corporation in Petrolia, Pennsylvania, which forced the evacuation of three surrounding towns in October 2008.Oleum was released when a tank transfer operation was left unattended during weekend operations and an oleum storage tank overflowed.
The CSB investigation has determined that the normal power supply for the three oleum transfer pumps was equipped with a safety interlock, which would automatically shut off the flow of oleum when the receiving tank was full, thus preventing a dangerous overflow. However, the oleum storage building also had an auxiliary or 'emergency' power supply that had been installed in the late 1970s. It was originally intended as a temporary measure to keep the pumps functioning during interruptions of the normal power supply but eventually the emergency power supply became a permanent fixture. Facility management never installed interlocks for the emergency power and written operating procedures did not address how or when the emergency power supply should be used.
The CSB case study report identifies four key safety lessons for companies:
- In the 1980s, the facility changed the structure of the emergency power supply from temporary wiring to permanent conduit. The facility did not evaluate the significance of this change.
- The facility installed the emergency power supply without the engineering controls that already existed on the normal power supply.
-The facility's storage system design required operators to transfer oleum on the weekend to ensure operations were unaffected during the week. Operators used a work practice developed years earlier to transfer oleum using two pumps concurrently. This work practice was never recorded in written operating procedures.Management must remain vigilant in evaluating how work is actually performed.
- The facility never included information on the emergency power supply in piping and instrumentation diagrams and written operating procedures. Personnel hazard assessment (PHA) teams were therefore unable to evaluate the consequences of emergency power supply use.

Read the report in this link

Importance of Near misses in process safety

A newspaper report (Hindu dated 14.5.10) indicates the following points about the oil spil in the Gulf of Mexico:"Oil executives ignored warning signs in the hours before the Deepwater rig explosion in the Gulf of Mexico last month, a congressional hearing heard on Wednesday.
In a second day of hearings, the U.S. House of Representatives' energy and commerce committee said documents and briefings suggested that BP, which owned the well; Transocean, which owned the rig; and Halliburton, which made the cement casing for the well, ignored tests in the hours before the 20 April explosion that indicated faulty safety equipment".

No major incident occurs without warning. Do not ignore your near misses!Read more of the article in this link

Bhopal Gas disaster and the recent BP oil spill

A newspaper report indicates that the verdict on the Bhopal Gas Disaster court case will be delivered on June 7th,2010 in a Bhopal Court in India. During the trial, 178 prosecution witnesses and 3008 documents were examined. The disaster happened in 1984 and the wheels of Justice move slowly! Cut to the recent BP oil spill in the Gulf of Mexico last month. Already the US house of representatives has begun an inquiry to pinpoint responsibility and accountability. In the Bhopal gas disaster, the entire liability was settled for 470 million US dollars. In 1989 a oil tanker called Exxon Valdez spilled oil in Alaska and the damages reportedly paid by Exxon was US dollar 5 billion. Exxon reportedly paid US dollar 940 each for every penguin that was contaminated with oil and had to be cleaned. In contrast, the Bhopal gas victims damaged for life received US Dollar 500 each!(Source: Greenpeace report).
Lets us wait for the verdict in the Bhopal Gas Disaster!!

May 10, 2010

Crisis management and the media

The BP oil spill and the media coverage about it throws up the powerful role of the internet in disseminating information. Companies must be fully prepared to handle such crisis. BP is also using twitter to keep the public updated on the oil spill containment efforts. In India, most of the the media coverage of any incident borders on the paranoid and is aimed at getting high viewership ratings at that instant. The Jaipur oil depot fire is a classic example of this. Companies must have a crisis management plan ready and test it periodically.

May 9, 2010

BP oil spill videos from youtube

Please see these videos for info on the BP oil leak.
1.Oil spill
2.Containment

Process Safety and Leadership

After the BP Texas disaster in 2005, the then CEO of BP Lord John Browne resigned and Mr Tony Hayward took over. An article mentions the following: 'When Mr. Hayward took over BP's leadership from John Browne three years ago this week, the company was at one of the lowest points in its history: badly run, accident-prone and accused in the aftermath of a deadly explosion at its Texas City refinery of putting profits before safety. Mr. Hayward turned BP around, boosting production, cutting costs and significantly reducing on-the-job injuries. Mr.Hayward set about radically simplifying the company and cutting costs. Senior executives were cut by a quarter. In all, 6,500 people, or just under 10% of its work force, lost their jobs. Last month, he was confident enough to talk of an irreversible "change of culture" at BP.None of that seems to matter now, as BP heads into the crisis grinder that has chewed up big names like Toyota and Goldman Sachs. And with about 5,000 barrels of oil leaking from the damaged well each day, Mr. Hayward knows it".
Read more about this interesting article in this link.
Read about the mitigation efforts in this link

Process safety information and BP incident

A number of articles are going around on the BP oil spill incident. In one of them, a whistleblower is supposed to have raised safety concerns about BP Atlantis, the world’s largest and deepest semi-submersible oil and natural gas platform. In this article it mentions the following "It was then that the whistle-blower, who was hired to oversee the company’s databases that housed documents related to its Atlantis project, discovered that the drilling platform had been operating without a majority of the engineer-approved documents it needed to run safely, leaving the platform vulnerable to a catastrophic disaster that would far surpass the massive oil spill that began last week following a deadly explosion on a BP-operated drilling rig.
BP’s own internal communications show that company officials were made aware of the issue and feared that the document shortfalls related to Atlantis “could lead to catastrophic operator error” and must be addressed.“The risk in turning over drawings that are not complete are: 1) The Operator will assume the drawings are accurate and up to date,” the email said. “This could lead to catastrophic Operator errors due to their assuming the drawing is correct,” said Duff’s email to BP officials Bill Naseman and William Broman. “Turning over incomplete drawings to the Operator for their use is a fundamental violation of basic Document control, [internal standards] and Process Safety Regulations.”
Read more of this article in this link.

May 2, 2010

BP Oil Spill

The latest BP oil spill in the Gulf of Mexico could turn out to be bigger than the Exxon Valdez spill. The President of the US himself has flown to Louisana for a first hand look. One would have thought that after the BP Texas Disaster in 2005, many checks and balances would have been put to prevent another disaster. We will have to wait and see the results of the investigation...
See photos of the spill in this link

May 1, 2010

Process safety in batch operations

What goes around comes around! As far as process safety incidents in batch process go, I sometimes despair whether we will ever learn from previous incidents. Last year I had investigated some batch process incidents, the causes of which are very very familiar - incompatibility,scale up issues, heat removal issues, MSDS issues and raw material storage issues. For those of you working in the batch process industry, the UK Chemical Reaction Hazards Forum is a good place to get information on batch incidents. Share these incidents with your operating personnel and check whether it could happen in your organization. For further details go to this link.

What I learnt in Process Safety – A tribute to my senior managers at Madras Fertilizers Ltd

32 years ago, I joined the ammonia plant in Madras Fertilizers as a graduate engineer trainee and then went on to be shift in charge and assistant manager in the ammonia plant. The lessons I learnt in process safety from the senior management* are still fresh in my mind. There was no PSM system, no ISO 14001, no OHSAS 18001, but in the ten years I was there, there was no serious process safety incident!
The senior management then were all experts in plant operation and maintenance – you could not fool them! Their decisions were taken appropriate to the risk involved and clearly communicated. They also made sure that critical jobs which had a process safety issue were always supervised by them by giving clear instructions and follow up. This way we knew when we were going off track and correct ourselves before anything happened. They were true “managers” – who played the fine line between process safety and production with such a finesse, you could not but admire and learn from them.
We did take a lot of “process safety risks” when there was a situation, but it was a calculated and clearly communicated risk – with the result, we were always under control.

Cut to today – Today in many plants, there are distinct gaps between what senior management think what is going on as far as process safety is concerned and what is actually happening at the ground level. Why is this happening? My own understanding of the situation leads to the following:

1.Some of the senior management do not have an understanding of the plant – they may be qualified MBA’s but in a chemical plant, what matters most at senior management level is their conceptualization of key process safety risks!
2.Many Senior management do not want to hear “bad news” related to process safety but welcome “bad news” related to sales and profits. I compare the senior management I started my career with many of the senior management today – the difference is that “bad news related to process safety” used to be ferreted out by the senior management I worked with, even though I may think it was not necessary to tell them!
3.Many boards of directors in present chemical companies do not have a clear understanding of the difference between process safety and occupational health and safety.
4.Senior management are led astray by the numerous certifications of ISO 14001/OHSAS18001 etc. leading to a false sense of complacency.
5.Many of the reactions of management today after a process safety incident are of a knee jerk reaction. A comprehensive long term approach is lacking. Everyone wants to safeguard their remaining time with the organization!

*I pay a strong tribute to my former senior managers at MFL: (Late) Mr P.N.Arunachalam, Mr Jacob Eapen, Mr N.Gajendran and (Late) Mr S.Rangaiah

April 30, 2010

Process safety and security


Dow Chemicals has beautifully pictured their "integrated approach to chemical security management" on their website in this link
I wonder when India will really wake up to chemical security threats and bring in legislation and enforce it. With the threats of naxalites and external terrorists and the fact that a number of hazardous chemical units are based on the coast,it becomes imperative that a coordinated approach to chemical plant security is implemented. Let us not wait for an attack to happen!

Fire at Pharma Plant at Ankleshwar

An article in economic times mentions the following "A fire at pharmaceutical major Wockhardt’s Rs 300-crore Ankleshwar facility damaged one of its six manufacturing plants. It will take six months to recommission the unit, a company spokesman said.
The incident adds to the woes of a debt-laden Wockhardt, which had defaulted on payment of its overseas convertible bonds last year, and was forced to accept a corporate debt restructuring package that included sale of some company assets".
Read the full article at this link.
While the cause is being investigated, it must be remembered that when companies go under loss, it requires a great effort to maintain safety systems.

April 29, 2010

Process safety - uncomplicate things!


In the Times of India April 28,2010, an article mentions that powerpoint is the US military's new enemy - A general is reported to have said "When we understand that slide (seen above), we would have won the war"! The same general has said that "Its dangerous because it can create the illusion of understanding and the illusion of control". Now what does this have to do with process safety? It is the same as the complicated powerpoint! Just because you perform a complex PHA, SIL study or conduct a management of change study does not mean everything is in control. I have seen many incidents occur even though such studies were conducted. Be practical while conducting these studies and do not go overboard!

April 28, 2010

Process Safety and Overflow protection

I read a nice article on high integrity overflow protection. In the article there is a statement that one of the key requirements of a high integrity overfill protection self certification program is "Acknowledged competency to review the design aspects of both mechanical- and/or electrical-components including component failure modes, fail-safe vs. fail-danger, any claimed automatic diagnostics, and internal redundancy in order to produce a quantitative failure rate (This number will eventually plug into calculations that determine if a particular design meets its defined SIL requirements".
I have observed many SIL (Safety Integrity Level) studies where the above competency becomes suspect. Many organisations think that just because they have completed a SIL study, they are safe. A SIL study starts from a good PHA (Process Hazard Analysis) study and here itself, if the competency of the people participating in the study is inadequate, then "garbage in, garbage out".
In many cases, there has been an overkill of recommendations from a SIL study, leading to the organization spending money unnecessarily.

Read more of the article in this link

Process Safety in LPG storage

At Vishakapatnam, the storage of LPG is being done in underground caverns as well as mounded storage. The underground storage facility is an engineering feat by itself.
"A safe method for the storage of large quantities of LPG is Cavern storage. In this method, LPG is stored in mined/artificial caverns at a depth of 160 m to 200 m below the sea level. Cavern is subjected to an external pressure by the saturated rock around the surface, which facilitates in the containment of LPG. The cavern storage is economical only for storage capacities above 50,000 mt and is feasible subject to the suitability of the rock, proximity to the ports with infrastructure for LPG receipt".
A nice description of the cavern is given by the company in this link.
For a draft paper on its construction and other details, please see this link.
HPCL, Visak has also constructed mounded storage of LPG. An article mentions that "Mounded storage of LPG i.e. creating a sand mound around the LPG storage vessels, which are placed above the ground level, is now increasingly being considered by HPCL as the best solution for protecting LPG vessels from BLEVE.
The mounded storage system provides the following advantages:
LPG stored in the form of mounded storage totally eliminates the possibility of BLEVE. The sand cover of 1 metre, which provides natural insulation from external heating, is adequate to outlast any fire in the surrounding areas. Water cooling systems are not required.
In addition, the mounding material provides good protection against most of the external influences like flying objects and pressure waves from explosions".

Read more of the article in this link

April 26, 2010

Process Safety Information

I was reading an article where it mentions that a company in the USA was penalized for not having proper process safety information. Specifically the article mentions the following:
"The piping system was not provided with labels to indicate the contents or direction of flow. The proposed penalty is $5,600.

• The process safety information pertaining to the equipment in the process did not include the piping and instrument diagrams. The proposed penalty is $5,600.
• The process hazard analysis did not address the hazards of the process. The proposed penalty is $5,600.
• The standard operating procedures for the anhydrous ammonia rail car offloading rack did not address how the operator was to inspect the coupling or ensure that the coupling was serviceable. The proposed penalty is $5,600.
• The employer did not establish and implement written procedures to maintain the ongoing mechanical integrity of process equipment. The proposed penalty is $5,600.
• The ammonia offloading rack, including the coupling on the liquid ammonia offloading arm, had threads that were worn, resulting in the coupling coming apart, releasing more than 8,000 pounds of ammonia.
• The alarm system for evacuation voice alert was unintelligible in all locations within buildings on the plant site. The proposed penalty is $2,400".

Read the complete article in this link.

April 22, 2010

Process Safety - Effects of a Natural gas line rupture

Belgium's worst ever industrial disaster occurred on on July 30, 2004. At about 8:30am local time, people felt a strong smell of gas. The gas was leaking from an underground natural gas pipeline. Emergency responders arrived and were clearing the area when the gas caught fire and exploded. The official death toll was reported as 24. Please see graphic descriptions of the incident and its effects in this link.

Process Safety - oil rig explosion

An explosion has been reported at an oil rig contracted by BP. It appears that the CSB is considering investigating this incident. Please read full article in this link.

April 18, 2010

Process Safety and the Union's view

I read an interesting article about Process Safety and behaviour based safety and the unions perspective on it.In India, behaviour based safety is being bandied about by many as the ultimate solutions to all problems. Organisations have to understand that not only is the worker's behaviour responsible, it is also the behaviour of the top management that is also responsible for process safety!

Read the full article by the Steelworkers  union in this link

April 10, 2010

Process Safety and Albert Einstein!

I read an interesting quote by Albert Einstein - " Only two things are infinite - the universe and human stupidity. And I am not so sure about the former."
Now how does this apply to Process Safety? Time and again, we see human errors and human factors being the root cause of incidents! The incidents I investigate tell me that Einstein is laughing in his grave! Will we ever learn from our past mistakes?
Lets wait and keep our fingers crossed.

Process Safety - Fire at Ankleshwar plant

A fire occurred at a pharma company in Ankleshwar. "The blaze at pharmaceutical major Wockhardt Ltd’s factory in Ankleshwar on Saturday was brought under control today. Additional fire tenders had to be called in from Vadodara, Ahmedabad and Surat and kept on standby.
“The fire was almost brought under control last night, but due to leakage of certain chemicals, there was re-ignition in some parts of the factory. The fire was completely extinguished by Sunday evening,” said Manoj Kutariya, Manager, Fire Safety, Disaster Prevention and Management Centre.
. Read more in this link.

Just last month, there was a fire in another unit at Ankleshwar. I had visited the Disaster Prevention and Management Center about 6 months back and I was very impressed with the facilities and the team headed by Mr Manoj. Kudos to them.

Process Safety - OSHA penalises plastics plant

OSHA has penalized a plastics plant for deficiencies. The article says "The violations include the company's failure to properly contain polyvinyl chloride dust particles; evaluate contractors' safety programs and procedures; properly inspect process equipment; provide fire retardant clothing for employees; require employees to wear adequate eye protection with side shields; provide proper training; and provide employees with an infirmary, clinic, or person trained in first aid. Additionally, inspectors identified hazards involving a lack of machine guarding; a deficient process safety management program; inadequate lockout/tagout procedures for energy sources; and unguarded machinery, floor holes, and walkways. OSHA issues a serious citation when there is substantial probability that death or serious physical harm could result and the employer knew, or should have known, of the hazard".

It is interesting to note that the investigation was launched on the basis of a complaint of an employee! Read the full article in this link.

April 4, 2010

Process Safety - Another day, another blast!

On Good Friday, another blast occurred in a refinery in the USA. The CSB will be investigating the incident but it appears that the CSB is now having its hands full with its investigators currently investigating other incidents. If this is the trend in the USA where PSM is mandatory, we must be very careful in India!

"A Washington state oil refinery hit by a deadly blast and fire early Friday was recently fined for safety violations amid what federal watchdogs call a troubling trend of serious accidents at refineries.
Three men died at the scene and two women died later at a Seattle hospital. Two other men were hospitalized with major burns over the majority of their bodies. It was the largest fatal refinery accident since a 2005 explosion at a BP American refinery in Texas killed 15 people and injured another 170.The Good Friday holiday blast rattled windows more than a mile away and has the most recorded fatalities since 15 workers were killed in a BP Plc incident in 2005 at that company’s Texas City, Texas, operations.
The Tesoro incident occurred as members of a seven-person crew were cleaning a heat exchanger in a unit handling naphtha, a volatile liquid chemically similar to jet fuel, Westfall told reporters.

The blast shook houses and woke people miles away, shooting flames as high as the refinery’s tower before the blaze was extinguished about 90 minutes later.
The blast occurred in a unit that was in the dangerous process of returning to operation, turning up heat and pressure, said Tesoro spokesman Greg Wright".

CSB Chairman and CEO John Bresland said, “The CSB has eighteen ongoing investigations. Of those, seven of these accidents occurred at refineries across the country. This is a significant and disturbing trend that the refining industry needs to address immediately.”

Read the complete article in this link

Process Safety – “Aging pipe fittings and plant mismanagement – a lethal combination”

An article mentions about aging pipe fittings and mismanagement. It mentions “Even the highest specification pipe fittings will fail, if they are not backed up with competent system management and the correct hardware. Too often, flanges are expected to carry more than their fair share of responsibility in preventing leaks and accidents”.
I have investigated a number of incidents where this exact reason has been the cause of a failure. This is a disturbing trend and it will help if plant management revisit their mechanical integrity program.
Read more of the article in this link

Process Safety – Shades of Bhopal?

“Bayer CropScience has agreed to pay a $143,000 fine to resolve safety citations stemming from a fatal explosion at its Institute plant in 2008.
A congressional committee report said the explosion came close to compromising a tank holding methyl isocyanate, or MIC. An MIC leak from a former Union Carbide plant in Bhopal, India, in 1984 killed thousands of people.
Union Carbide once operated the West Virginia plant, now owned by Bayer CropScience. MIC is used in the manufacture of insecticides at four different units at the sprawling 465-acre plant. One unit, the methomyl unit, was damaged in the explosion”.


Read the full article in this link

March 31, 2010

Process Safety - Storage tanks

An EPA study covering a ten-year period (1990 - 2000)reveals that of the 312 accidents at tank farms examined in this period it was found that operator error accounted for 22%. Additionally, 55% were attributable to tank failure, 10% to valve failure, 4% to pump failure and 3% to bolted fitting failure. Human error also accounted for 100% of accidents that resulted in fatalities, 88% involving stock loss and 87% of property damage, with the root cause attributed to overfilling/over-pressurisation.
Storage tanks fail due to a number of reasons including collapse due to vacuum,human error, poor maintenance, vapour ignition, settlement, earthquake,lightening and over-pressurisation.
Make sure your operators are trained in the safe operation of storage tanks.

March 26, 2010

Process safety - learn from these incidents

The Karnataka Department of Factories, Boilers and Industrial safety and health has posted accidents that have occurred in their state.
Four incidents are posted:
1. Confined space incident
2. Incompatible material incident
3. Accident in Urea plant
4. Toxic gas release in bulk drug manufacturing.
The details are available in this link. Please circulate to all your colleagues as the incidents can happen anywhere.
Some more accidents are given in a pdf file (large file) in this link

Process Safety and Emergency Preparedness

I was reading about the two recent incidents of fires in high rise buildings in Bangalore and Kolkata and the high number of fatalities involved. In both cases, emergency escape paths were either blocked or locked. In a chemical plant emergency, things are much worse - domino effects can have catastrophic effects.Events will snowball quickly and unless you are well prepared, it will be difficult to handle a major emergency. All plant personnel should understand that mock drills are conducted when there is no emergency.In an actual emergency, Murphy's law will apply: "Anything that can go wrong will go wrong". A mock drill mentally prepares you for the do's and dont's.
Plant operating and maintenance personnel, especially those on shift duty must always keep themselves familiar about emergency alarm activation, escape paths, emergency breathing air escape packs and self contained breathing apparatus, crash shutdown procedures,emergency communication systems, what to do in total power failure and other possible emergencies.Most of the emergencies uncannily happen in the early morning hours when all shift people are sleepy and the general shift people are sleeping!
In some of the chemical units that I visit, the people assume that emergency preparedness is the job of the safety officer!If you want to survive in an emergency, YOU have to take responsibility and be prepared. Do not think it will not happen to you.You will not have a second chance.

March 23, 2010

Process safety - 5 Years after the BP incident

On March 23rd, 2005, the worst industrial accident in the US for more than a decade occurred at the BP Texas refinery. 5 years after the incident a news article mentions the following:
“Since the disaster, the company has spent more than $1 billion on improvements at the refinery, and continues to invest more. It's spent another $1 billion or so settling about 1,000 civil lawsuits filed by the more than 170 workers injured in the blast and by families of the dead.
“Those systems require constant vigilance. You start to think you've got it fixed, and eventually you start to focus on other things. If you let your focus wander too far, you're system starts to slip without your realizing it.”
“The U.S. Chemical Safety and Hazard Investigation Board found in 2007 that the explosion resulted from a lethal combination of cost-cutting, a lack of investment in training and mechanical systems and a lack of vigilance in maintaining safety procedures. The company has implemented sweeping changes in process safety procedures and revamped how it operates refineries. Many of those changes have been adopted by BP's rivals as well.”
“The question that continues to dog BP and the refining industry: Has it done enough?It has rejected, for example, a Chemical Safety board recommendation that it add a process safety expert to its board of directors.”
“It took the explosion,” said Gary Beevers, international vice president for the United Steelworkers union, which represents more than 1,000 workers at the refinery. “As this industry has shown, it takes something terrible for changes to happen.”
My own observation of any big incident like this is that immediately after the incident there are a lot of things done. But the question is the sustainability of these actions. Time and again I have seen that unfortunately history tends to repeat itself unless top leadership are really and continuously committed to process safety.More and more boards of Chemical and refining companies are filled up with non technical persons, with the result that there is no one at the board level to explain to the board the repercussions of cost cutting without a proper assessment.
Read the whole article in this link

March 21, 2010

Boiler burst - cause of incident at NFL?

Please see news item from Tribune, Chandigarh:
NFL tragedy
Ropar admn not informed in time
Megha Mann
Tribune News Service
Nangal, March 20
While the boiler at ammonia plant burst at around 11:40 am today, district administration Ropar was informed after 40 to 50 minutes of the incidence.
Confirming this, deputy commissioner Priyank Bharti said that even area SDM Lakhmir Singh was not informed immediately after the incidence.
“As per the protocol, the NFL authorities should have informed us within minutes after the incidence. But it took at least 40 to 50 minutes for the news to reach us. Fortunately, there was no ammonia leakage. Had it been a gas leakage, more damage could have been caused and informing us untimely could have added to chaos,” he observed.
However, official spokesperson NFL Naya Nangal claimed that the SDM and DSP were informed within 15 minutes of tragedy.Sources said that injured Umesh Kumar’s timely action of switching off main gas connection helped in saving many lives. Had the ammonia spread around, more losses of life and property would have happened.
The plant, where tragedy struck, was to be closed on Monday for 25 days maintenance practice. Annual target of NFL for urea production was 4. 78 lac tonnes and NFL had already attained 4.73 lac tonnes production.Daily production of ammonia at the plant is 900 tonnes, while that of urea is 1450 tonnes. NFL spokesperson said that company would meet its target with the help of other units. The unit has been shut down three days before the scheduled time due to accident.
Nangal MLA Rana KP Singh too reached the spot. He held the NFL management responsible for this tragedy and demanded a high level probe. He said that the fire fighting equipments at factory were not up-to-date. SSP L K Yadav asked people not to panic as the accident was result of some technical failure.

Process Safety - Blast in ammonia plant

On Saturday, a blast was reported in the ammonia plant of the Nangal fertiliser plant.
It is reported that the saturator tower fell down as a result of the blast. Three people lost their lives and my heart goes out to the bereaved families. A news item in the Hindustan Times indicates that the incident took place at 1140 hrs in the shift conversion section. The gas in the shift conversion section in an ammonia plant will primarily consist of hydrogen.

March 20, 2010

Process Safety - Phosgene hose leak update

A news article on the EPA investigation of the phosgene hose leak at DuPont's Belle, US facility in January 2010,indicate the following:
1. "This type of hose should be replaced every two months "due to the extremely hazardous nature of phosgene," EPA said. At the time of the Belle plant leak, the hose had been in use for seven months.The hose was 5 months overdue for replacement"
2. "The flexible, braided-steel hose was also the wrong kind of equipment to use in the first place because of the extremely hazardous nature of phosgene"
3."EPA also said that this type of hose should be installed within six months of its fabrication. This particular hose was fabricated in May 2008, but was not installed by DuPont until June 2009".
DuPont is world renowned for their high safety standards and I wonder what went wrong.
Read the full article in this link

Process safety and societal risks in India

I was going through a risk assessment report prepared for an organization that was planning to increase production capacity using a toxic chemical as a raw material. This chemical is received through pipelines traversing through public areas. I found one thing startlingly out of place. The report used outdated population data in the vicinity of the pipelines. Unauthorized settlements were everywhere near the pipeline and this was not considered in the report. This is a peculiar problem in India. How can we rely on population statistics when the data itself is dynamic on a day to day basis! One other thing that always perturbs me is that I doubt if the user of the report understands the assumptions made and is really able to understand the report.
Just having a colorful report with a lot of drawings indicating toxic end points and red zones does not really mean you have identified the risks involved.While such reports are mandatory from a regulatory perspective, it is better that the organization revisit these reports periodically based on changes in population density.

Lord Tony Newton,independent chair of the Buncefield Investigation Board says "The system should in future consider the total population at risk – societal risk – at each new development application. We should not continue to allow surrounding populations to increase without considering the consequences". I really do not know how we can implement this in India unless there is strong enforcement by the regulatory agencies.

March 17, 2010

Process safety and fatigue

It is disturbing to note that fatigue probably played a part in the new US power plant explosion that occurred when lines were being blown with natural gas. It appears that one of the victims who died in the explosion was working 12 hours a day, seven days a week, for six months. If operators are being allowed to work without break even in the US, imagine the plight in India!The pressure of commissioning a plant to meet target deadlines often result in people working overtime. With more and more activities being outsourced, industry must be careful that this problem is tackled to avoid incidents. What is more worrying is that the aviation industry in India is reporting incidents of pilot fatigue due to inadequate rest periods.If it can happen in the aviation industry, it can happen in the chemical industry too!

March 11, 2010

Process safety -Pressure Relief and Flame out devices - Take care of them!

According to a news release dated 8.3.2010, "The U.S. Department of Labor's Occupational Safety and Health Administration has cited BP North American Inc. and BP-Husky Refining LLC's refinery in Oregon, Ohio, with 42 alleged willful violations, including 39 on a per-instance basis, and 20 alleged serious violations for exposing workers to a variety of hazards including failure to provide adequate pressure relief for process units. Proposed penalties total $3,042,000.Forty-two willful citations with proposed penalties totaling $2,940,000 are proposed as follows:

1. Thirty-eight (38) per-instance, willful citations with penalties totaling $2,660,000 allege as follows:
1. Twenty-six instances allege deficient pressure relief, a violation of 29 CFR parts 1910.119(d)(3) and 1910.119(j)(5), with total penalties of $1,820,000;
2. Three instances allege the lack of flame-out protection on heaters and a furnace, a violation of 29 CFR 1910.119(d)(3), with total penalties of $210,000; and
3. Nine instances allege facility-siting hazards, a violation of 29 CFR 1910.119(e)(5), with total penalties of $630,000.
2. Four willful citations with penalties totaling $280,000, allege as follows:
1. Lack of pressure vessel information, a violation of 29 CFR 1910.119(d)(3), with a penalty of $70,000;
2. Cross-connections between fire-emergency water supplies and process systems, a violation of 29 CFR parts 1910.119(d)(3) and 1910.119(e)(5), with a penalty of $70,000;
3. Failure to conduct thickness measurements at designated test sites and as required at the flare header, a violation of 29 CFR 1910.119(j)(4)(ii), with a penalty of $70,000; and
4. Failure to conduct thickness measurements in accordance with RAGAGEP, a violation of 29 CFR 1910.119(j)(4)(iii), with a penalty of $70,000".

Of particular interest is the twenty six instances of deficient pressure relief and three instances of lack of flame out protection.

March 8, 2010

Purging of Natural Gas Lines - Adding fuel to the fire?

The CSB had issued urgent recommendations on the natural gas explosion at Con Agra on June 9,2009. The incident occurred when natural gas lines were being purged free of air using natural gas itself.The CSB urgent recommendations include
(a) Purged fuel gases shall be directly vented to a safe location outdoors, away from personnel and ignition sources
(b) If it is not possible to vent purged gases outdoors, purging gas to the inside of a building shall be allowed only upon approval by the authority having jurisdiction of a documented risk evaluation and hazard control plan.The evaluation and plan shall establish that indoor purging is necessary and that adequate safeguards are in place such as:
• Evacuating nonessential personnel from the vicinity of the purging;
• Providing adequate ventilation to maintain the gas concentration at an established safe level, substantially below the lower explosive limit; and
• Controlling or eliminating potential ignition sources
(c) Combustible gas detectors are used to continuously monitor the gas concentration at appropriate locations in the vicinity where purged gases are released
(d) Personnel are trained about the problems of odor fade and odor fatigue and warned against relying on odor alone for detecting releases of fuel gases


It is not safe in the first place to allow purging of an air filled pipeline with natural gas. You can never control or eliminate all potential ignition sources. PERIOD!!
See the CSB recommendations in this link.
See my latest post on this subject

March 5, 2010

Domino effect and Process Safety

An interesting article on Domino Effects in the developed countries mentions the following "A study of 261 accidents involving domino effect has been carried out. The main features have been analyzed: origin, causes, consequences and most frequent sequences. The analysis has shown that the most frequent causes are external events (31%) and mechanical failure (30%). The storage areas (37%) and process plants (27%) are by far the most common places where domino accidents have occurred. The most common sequence in the event trees resulted to be explosion–fire (21%), followed by release– fire–explosion (15%) and fire–explosion (14%)".
While the study concludes that "The historical analysis has shown that the frequency of domino effect accidents has decreased over the last two decades. Most of these accidents have occurred –as could be expected– in the most industrialized countries (from which, furthermore, more information is available). The most frequent sequences are explosion–fire, release–fire– explosion and fire–explosion. From the analysis of the causes, although the most frequent ones are external events and mechanical failure, a relatively high frequency is found for human error. This would indicate the need to further promote the training of employees, as well as an additional improvement of safety measures, specially in storage areas".

As more and more chemical industries are coming up in India, it becomes very important to study facility siting issues.Incidents like the Jaipur fire clearly indicate the need for a stronger implementation of facility siting rules.
Read the whole article in this link.

March 2, 2010

Dangers of melting contents of drums

A chemical manufacturer in India has been asked to pay to pay $8.37 million for a fire that destroyed a Houston-based pesticides maker's warehouse and offices in Pasadena six years ago.
The fire apparently took place when Chloropyrifos drums were placed were placed in a “hot box” in the Houston company's Pasadena warehouse for melting, based on procedures provided by the manufacturer. However, during the melting process, the contaminated chemicals exploded and caught fire.It appears that the drums contained chloropyrifos contaminated with solvent.
It is quite common in pesticide manufacturing to put a drum in a steam bath or a hot box to melt the drum contents. But as this incident shows, you must understand the dangers before doing it.....
See this article for more details.

March 1, 2010

Process Safety in India -PCPIR's

To promote investment in the chemical sector and make the country an important hub for both domestic and international markets, the government is in the process of setting up Petroleum, Chemicals & Petrochemical Investment Regions (PCPIRs). As per the PCPIR policy ,this is to "attract major investment, both domestic and foreign, by providing a transparent and investment friendly policy and facility regime.These PCPIRs would reap the benefits of co-siting, networking and greater efficiency through the use of common infrastructure and support services. They would have high-class infrastructure, and provide a competitive environment conducive for setting up businesses. They would thus result in a boost to manufacturing, augmentation of exports and generation of employment".
Isn't the setting up of these PCPIR's a good opportunity for the Government to implement mandatory process safety norms in these PCPIR's?

February 28, 2010

The future of Process Safety in India

A recent news item on February 26th indicates that in the immediate future, Oil Industry Safety Directorate (OISD) is likely to be announced as the single window agency to ensure safety in the oil & gas sector and is also expected to be vested with all necessary statutory powers to fulfill its responsibilities. Several other regulatory changes and announcements that are in the pipeline and expected to be unveiled over the next few months.
What is the future of process safety in India? Do not be surprised if a Chemical Safety Board, similar to the US is set up. Do not be surprised if investigation reports of incidents are put up on the web. But for this to happen, I feel there has to be a strong impetus to the Government to bring in such changes. I am only hoping that another Bhopal is not the impetus!
While on the subject, let us visit the subject of awards and incidents. In my experience, many companies have won many safety awards but then there is a fatal accident. An award for process safety performance cannot be judged by visiting the unit for a few days. It requires commitment day in and day out from top management to really achieve top class process safety performance. I feel that an organization would be better off if it sits back and takes a good look at its performance in process safety periodically.

February 26, 2010

Natural Gas Blowing of pipelines causes accident

The CSB has released a statement that mentions that the explosion at the Kleen energy plant in the US occurred during the blowing of new pipelines with natural gas to clear them of debris. There were a number of possible ignition sources.It appears that this is a "common" practice in power plants. I wonder if people are forgetting the basics: flammable gas + air + ignition source = Fire or explosion!
It is very dangerous to assume that ignition sources will not be present!

February 24, 2010

Monitor your Pressure Safety valves for fugitive emissions

An incident in the US highlights the need to ensure that operational checks are conducted to detect any fugitive emissions from PSV’s. It was reported that about 1.5 tonne of a toxic chemical had leaked from the PSV over a period of two weeks. The leak was finally detected when mass balances did not match. If you have PSV’s discharging to the atmosphere that are mounted on top of vessels tanks and other equipment, ensure that you implement a fugitive emission monitoring program to detect any leak from the safety valve. Many large atmospheric ammonia storage tanks have their PSV’s located on the tank top and any leakage from these valves cannot be detected from the ground level. With more and more habitation coming up near maximum accident hazard units, it becomes imperative that you implement a proactive monitoring PSV leak monitoring program.

Process safety - Do not forget the human being in your design!

Some experts predict that in the future, there will not be any control rooms, but operators and managers individually wearing hi tech equipment like personalized visual displays and control units that will be networked and will be used to control plants. Whatever the future, one thing is sure - the human is going to be around! And continue to commit the same mistakes!! Some examples of design "googlies" are given below:
1. If you install an orifice plate to restrict flow as part of your design, be sure one day it will be removed.
2. If you install an instrument on top of a vessel or equipment and expect the operator to note down the reading, be sure that the reading one day will be noted without the operator going to the top.
3. If you design a tank for full pressure and not for vacuum, when there is a chance of vacuum formation, be sure that the tank will collapse one day due to vacuum.

If you forget to think like an operator, be sure your design will fail one day!!
This also raises another point. In the future is it possible to operate a plant that does not depend on human beings? Ultimately, there will have to be a human being who is looking after that technology and he can also make mistakes!

February 23, 2010

Advanced instrumentation at Refinery

Please read this article

The Worlds Largest Foundation Fieldbus Project
Reliance Petroleum Limited Needed Foundation Fieldbus to Manage the Most Complex Refinery in the World

A picture of the control room is also given in the article.The article also mentions that over 200 of the commissioning staff were given troubleshooting training.

February 20, 2010

Jaipur oil depot fire - Sharing of Incident Report

Kudos to the Oil Industry Safety Directorate for posting the independent investigation committee report on the Jaipur oil depot fire. (Click MB Lall report in their website).As far as I know this is a first in India for sharing incident reports and this is a very positive change for process safety in India.
On reading the report, the following points come out:(I am quoting from the report)
1."Uncontrolled Loss of Primary Containment in the form of a jet of gasoline:Policy issues - Safety not given adequate priority".
2."It was observed that safety shut down system envisaging closure of all Motor Operated Valves (MOV) at the inlet and outlet, immediate to the tanks was provided in design and installation but had been decommissioned, a few years ago, probably after 2003, due to some operational issues. The exact timing of the above is not known to the current operating officers".
3."No External Safety Audit for last 6 years.Internal Safety Audit inadequate as it could not point out any deficiency in design or procedures & practices".
4. "The certifications such as ISO, NSC awards, Greentech awards, Ministry of Labour awards etc., are all based on documentation submitted by the organizations and not on field verifications and safety practices. The awards/recognitions mesmerize the higher management besides giving wrong signals about safety management systems leading to complacencies. It is, therefore, recommended that time and efforts be directed towards annual safety audits by involving non-company experts so as to have unbiased reports. The companies should be cautioned to be circumspect about utilizing agencies and organizations who claim to be providing expert safety advice and assessment"
I THINK THE ABOVE STATEMENTS CLEARLY INDICATE WHERE THE PROBLEMS ARE!
Update 3.7.10:
A reader called Atul has sent me this query"But how can this be a case of individual fault ? My Brother in law was attending his fathers funeral at the time of accident and could do nothing about it.
In depot fires across the globe, its the Corporation which are at fault and fined. People are given compensation. In India, the employees are put into Jail! Is this a JUSTICE system which you are proud of?"
I request Atul to read my latest post on the subject in this link

February 19, 2010

Process Safety and Asset Integrity

Maintaining asset integrity is one of the key areas of process safety. As I observe more and more competition in the Indian Chemical Industry,I am beginning to observe a lack of long term focus towards maintaining asset integrity. With current high attrition rates in the chemical industry, it is only natural that a plant manager tends to "adjust" his focus on maintaining asset integrity to ensure that nothing happens during his tenure.This is also mentioned in the investigation report of the BP Texas refinery incident.Many organizations are implementing process safety management systems without a long term approach. Such systems will bring in more complacency than doing good.Another worrying factor is the lack of competency to manage asset integrity programs. I have observed many "in house" asset integrity teams influenced by their organizational culture in such a way that they get blinded to reality.Top management feels everything is hunky dory when suddenly something fails and everybody wakes up!The UK HSE chair has said "Never allow short-term business pressures to blind you to the real and potentially devastating human and business consequences of neglecting process safety and asset integrity"
I will end with a joke - I was chairing a HAZOP study for a Bio Ethanol Plant coming up in South Africa when one of the participants jokingly asked me "Does'nt all your negative thinking affect you?". Well, Process Safety is not about negativity, but about worrying about things that are so obvious to you but not obvious to others!

February 17, 2010

"Non observance of safety norms caused Jaipur oil depot fire"- investigation report

The investigation committee into the Jaipur oil depot fire has pointed out the lack of written operating procedures, absence of leak stopping devices and lack of understanding of hazards and risks as root causes of the incident. See this report for further details.
The committee also has recommended improving operating discipline. This requires a lot of commitment from top management. Operating discipline is easy to bypass in times of cost pressures. I have observed many times that incidents are caused when operating discipline is set aside even though management knows that it is being bypassed. Process Safety Audit reports should be given due weightage by management. The observations pointed out in the audit report are indicators that something is wrong and unless they are attended and root causes are found out, a big incident could occur. How many times can we be lucky?
See other opinions in this link

February 15, 2010

Hazards of natural gas - explosion in an US Power plant

On 7th February, an explosion was reported in a US power plant. The mayor of that place put it very nicely when he said "Something happened that should not have happened and something did not happen which should have happened".
The explosion involved natural gas. Many facilities use natural gas for power generation, heating and in furnaces. Natural gas is also a raw material for the manufacture of ammonia. Natural gas is like electricity - a bad master but a good servant. For it to be a good servant, your operators must know the hazards of inadequate purging (removal of oxygen from pipelines/vessels) before admitting natural gas.In fact the US Chemical safety Boards had just three days before the incident issued a warning about the hazards involved in natural gas purging - see this safety bulletin
See this link for a video posted on youtube about the incident.
My book details the various methods of purging of equipment and pipelines.

Separate your shutdown system from control systems

Today,for cutting costs,many plant owners are trying to incorporate shutdown actions using the control system itself. For example, if there is a control valve that has to close when a predetermined shutdown point is reached, the instrument air to this valve is cut off using a solenoid valve and the valve is designed to "fail close".You must always keep your shutdown system independent from the control system. This is important from an emergency safe shutdown point of view. There is an interesting case study presented in this link where the shutdown system was designed to be independent from the control system. The control system valve did not close during an emergency due to a failure of a solenoid valve but the separate shutdown system acted safely.
I have investigated many process incidents where the shutdown system was connected through the control system and it failed to operate. In fact in one of the Ammonia plants in Europe a friend told me that every critical shutdown valve is provided with redundant solenoids for greater reliability. Have a relook at all your critical shutdown systems. Its better to be safe than to be sorry!

February 13, 2010

Reacting in an emergency - Lessons from the Hudson River Landing

On 15th January, 2009, an airbus flight suffered bird hits on both engines after take off. The pilots had to react quickly and they landed the plane safely on the Hudson river thus saving lives. Split second decisions had to be taken and they took the right decisions. A beautiful simulation of the incident is given in this youtube link.
In a chemical plant emergency, all the years of training and experience will come into play. A wrong decision taken during the emergency could lead to an unsafe condition. Of course, if you have your shutdown systems working well, they will automatically shutdown the plant safely. But there are many other things the DCS operator has to do after a shutdown. This is where his training comes in. How are you training your plant operators to handle emergencies? Is experience from actual emergencies shared and lessons learnt? In India, many of us do not take mock drills seriously. Your lives may depend on it!
Plant operators and shift engineers are the first line of defense against a catastrophe and are you investing in their training?

Runaway Reactions - Run away if you do not have data!

A runaway reaction is an uncontrolled reaction that does not stop. It can cause catastrophic consequences like rupture of reactors and release of toxic gases. The understanding of reactive chemistry plays a big role in avoiding runaway reactions. Avoid the mistake of scaling up from R & D to plant production without understanding all the details of the reactions and its side reactions. The effect of change in operating parameters and batch recipe or quantity must also be understood. Recently a speaker at a seminar mentioned that many batch processes in India are being operated without complete knowledge of the reaction chemistry. I have also investigated number of incidents involving runaway reactions where operators were operating the batch without proper information on reaction kinetics.There are various scientific tools available to determine these data. Accelerating rate calorimeters, differential scanning calorimetry etc are some of them. Just because you have not experienced a runaway reaction incident, do not be complacent. The only hope of survival in a runaway reaction incident is to run away!
Watch this excellent CSB safety video on the hazards of reactions.

February 12, 2010

Don't Alarm your operator!

I have been following the subject of alarm management in a DCS (Distributed control system) with great interest. In many process incidents that I investigate (batch and continuous processes), I observe that the flood of alarms that appeared during the emergency effectively negates the usefulness of the alarm. The irony is that we bring in the DCS with its enormous capability and then realize that alarm management in the DCS is a big issue. The root cause of the problem is the misuse of the enormous capability of the DCS. When installing the DCS it is human tendency to assign all probable alarms, thinking that we are using the capability of the DCS! Now the International Society of Automation has brought out a standard called ISA 18.2 - management of alarms in process industries on June 23rd,2009. The definition of alarm as stated in the standard is "an audible and/or visible means of indicating to the operator and equipment malfunction,process deviation or abnormal condition requiring a response". How did we manage to forget this definition?

I was part of a team of process engineers and process operators in a World Scale methanol plant, where we sat down identifying whether each alarm that was provided was really necessary or not. To our surprise, at the end of the exercise, we had reduced the alarms by over 50%!. Today, there are alarm suppression software sold by various vendors, but I feel the solution is simple - DO NOT COMPLICATE THINGS AT THE BEGINNING ITSELF BY PROVIDING TOO MANY ALARMS!
To achieve the goal process Safety I am of the opinion that things must be kept simple. In other words, KEEP IT SIMPLE & SAFE (KISS!)

While on the topic of alarm management, I have also observed the other extreme in few cases - there weren't enough alarms provided. Such issues crop up not in process plants but in storage and transfer facilities where enough thought was not applied in identifying the alarms required.

February 11, 2010

Cars can be recalled but Chemical Plants cannot!

The papers are full of news stories about the car recalls for certain models by Toyota and Honda due to design glitches. In one incident, it was reported that a boy was killed when a fire occurred due to water entering a power window motor. In chemical plants, do we have the luxury of recalls? A design mistake may show up in a devastating way, killing many people. In todays plants, modifications are carried out for capacity increase, energy saving etc. But how sure are you that these modifications do not have design glitches? Cutting costs at the design stage has serious repercussions for process safety. Investment in good design costs money, but cutting costs in design may cost lives. Cars can be recalled but plants cannot. Does your organization have the capability for designing changes or modifications? Are you keeping yourself abreast about the latest design codes and standards? Think about it!

Avoid making your operators into procedural robots

I was reading an incident report of a ammonia pipeline rupture in the USA. The pipeline ruptured and released a large amount of ammonia. The case study report available in NTSB website indicates that even though the operator was receiving a large amount of alarms indicating a pipeline rupture, he attributed the drop in line pressure to less supply and more delivery. This skewed his troubleshooting abilities. How many of you are ensuring that your plant operators are trained to analyze data from DCS and troubleshoot the problem? There is no better defense than a trained and informed operator and your plant training programs should ensure this. During an emergency an operator cannot refer to procedures and all his training and knowledge will come to the forefront in troubleshooting the problem correctly.

February 9, 2010

The dangers of decommissioned equipment

Today's Times of India carries a news article mentioning that 7 workers were injured in a boiler blast when they were removing an abandoned boiler from the premises of an Industrial Explosive factory. It is reported that chemical residues on the floor caught fire and exploded when the workers were attempting to cut the pedestal of the boiler using hot work. How many of your plants, especially old ones, have decommissioned equipment that are not yet removed from service, while the rest of the plant is in operation? Decommissioned equipment that are left in situ pose dangers if they are not properly isolated by blinds. The best option is to remove the decommissioned equipment safely. Many incidents have also been reported in dead legs (piping that have stagnant liquid in them that corrode and leak after some time) after decommissioned equipment have been removed. These dead legs must be removed at the next available opportunity.
Study your complete plant to identify decommissioned equipment and develop a plan to safely remove them from service.

February 1, 2010

1 out of 1 or 2 out of 3?

Today many organisations are going in for two out of three redundant logic systems for trips. I often wonder how I managed to operate an ammonia plant 25 years ago, fitted with standalone pneumatic instrumentation and no DCS! With modern day electronics, isn't it expected that the reliability of an electronic transmitter will be better? Do not go in for two out of three transmitters just because it is more "reliable". Have you obtained data on mean time between failures of electronic transmitters? When you do a LOPA analysis do not go overboard. The risk criteria used in LOPA should reflect your organizations past incidents also. I have seen many overkills of LOPA studies done by consultants who just recommend two out of three systems at the drop of a hat!

January 31, 2010

Sharing of process incidents in India

I really lament the lack of sharing of information and investigations of process incidents in India. The US Chemical Safety Board is doing excellent work by posting videos of incidents for the whole world to see! I can get more information about the BP Texas incident from the internet than I can get about the reasons for the Jaipur Oil depot fire! I was browsing around for details about incident reporting system in India and I chanced upon this website www.cairs.nic.in
I hope the site is kept updated and the information shared.
I am in the process of collecting incidents from friends and colleagues to share with all, without mentioning the organization's name. Unless we learn from past mistakes, the same incident will keep repeating. If any one of you feel like sharing some process incidents without mentioning the name of your organization, please send the details to me. I will put it up on the blog.

Off site chemical disaster management in India

My opinion about off site disaster management in India for chemical disasters is that a lot needs to be done. When I worked in Saudi Arabia, I volunteered to be part of the on site emergency team.The training I underwent for 5 years for just being a member of the on site emergency team was stupendous! We had not only to undergo 4 hours of practical training every month, but weekly refresher trainings also. I was also sent to a 5 day course on advanced emergency response course for hazardous materials and rescue where we learnt to deal with actual emergencies with live fires, gas leaks and personnel rescue techniques from top of distillation columns!!
In India, the off site response to a chemical accident is governed by the Chemical Accidents (emergency planning, preparedness and response) rules 1996.
However, I have seen videos of off site mock drills conducted in India and there is a lot of scope for improvement. I hope the NDMA (National Disaster Management Authority) will soon improve the situation.

MSDS availability and hamonisation

Today in the process safety seminar, a participant asked about the plethora of MSDS available on the net and which one to follow. There is work going on to standardize the MSDS internationally. Please visit this link for further details.

There is also an ISO standard ISO 11014:2009 available for MSDS.
But how many of your personnel know how to interpret the MSDS terms from a view of process safety? My book deals with such practical issues.

January 29, 2010

Learnings from Process Safety Seminar

Today I attended the Process Safety Seminar conducted by ICC at Chennai, where I had presented a paper on "Management of Change". The learning's from the seminar are as follows:
1. In an incident involving a blast wave, a magnetic hatch on the top of an ethylene tank flew open due to the blast wave as the hatch cover was facing the blast wave and the hinge was on the other side. This allowed ethylene to come out and add to the fire. One of the lessons learnt is - during a HAZOP study look at these issues. It may be a simple issue but an important one.
2. In another incident, a fired heater was supported on fireproofed support legs. During an incident of a coil rupture and a fire, the fire proofed support legs withstood the fire but the vertical metallic stack which was about 20 m in height could not and toppled on other equipment.
3. In a runaway reaction incident where the reactor exploded, the investigator was trying to determine the thermo chemistry of the reaction in a experimental set up. Unfortunately, the reaction temperature increased so rapidly that it destroyed the equipment in the lab! Luckily no one was injured.
4. IS14489:98 (Bureau of Indian Standards - Code of practice on Occupational health and safety audit)- this focuses mainly on OHS issues. However, a committee has updated it with process safety elements also, but the updated code of practice is yet to be released.
5. There was also talk about behaviour based safety, but I am not a fan of BBS. There is a good article from a union's perspective. See the pdf file "the steelworker perspective on behavioral safety"in this link

January 26, 2010

Hoses and Process Safety

The US Chemical safety board has reported an accident at a DuPont facility at Belle, West Virginia on Saturday. Apparently a braided hose connected to a one tonne phosgene tank ruptured. An operator who was exposed to the gas died the next day. For details see http://www.csb.gov/newsroom/detail.aspx?nid=302.
I am always wary of hoses in a chemical plant. They are silent killers. They may look good on the outside but may have been damaged inside. A facility that wants to ensure process safety must make a list of such hoses, their service and plan a program for replacement. Visual inspection of hoses may offer tell tale signs of hose damage. However, it is best that these hoses are replaced at a certain frequency even if they do not leak. Another option is to consider getting rid of the hoses altogether by replacing with properly designed piping.
I have witnessed a large fire due to a oil hose rupture in a gas compressor which happened in my shift about 25 years ago!The consequences were terrible.The whiplash effect of the ruptured hose sprayed oil over a wide area, contributing to the spread of the fire.

January 23, 2010

Pilot Error and Process Safety Management - The human connection

Today's paper indicates that Pilot's error caused the helicopter carrying Chief Minister Y.S.R to crash.The investigation report indicates "The cockpit voice recorder showed that there was poor crew resource management among them at any given stage of flying". They noticed a snag in transmission pressure on the instrument displays but failed to co-relate it with other indications associated with the snag. Both of them were busy trying to find out the cause of the snag, with the result that they were not aware that they were veering off course. Crew Resource Management (CRM) is a big issue in the cockpit of a plane or a helicopter. In simple terms, it is how jobs are shared during an emergency.
CRM is very relevant in chemical plant control rooms also. I have witnessed incidents due to wrong actions taken by control room personnel as there was no clear direction who would do what. Having said that, it becomes very difficult to compartmentalize actions during an emergency in a chemical plant. The practical solution to this is to have a senior control room operator monitoring the actions of the DCS operators and guiding them. The senior control room operator's job is like a conductor in an orchestra. Control Room Resource Management is one area where plant simulators can be used to train the personnel.
Another point which is in my mind is the provision of a voice recorder similar to that of a cockpit voice recorder and a CCTV camera in the control room monitoring the actions of the personnel during an emergency. Now I know this is going to get a lot of brickbats thrown at me but the purpose is not to spy on them. It is to make improvements in Control Room Resource Management after emergencies.

Emergency response to terror threats

Terrorism has brought about an added dimension to Process Safety Management. Recently an article mentioned that terrorists may target Indian refineries. Is your organization prepared to handle terror threats? The starting point for determining weak links in your security is by conducting a security vulnerability assessment. Do not assume your current security framework can take care of such threats. Also, prepare an emergency response plan in case the worst takes place. How are you maintaining your emergency isolation valves to shut off feed to the plant and to isolate affected sections? How good are your flare and venting systems protected against collapse during a major fire? How quickly can you safely shut off your plant and evacuate personnel? These are some of the questions that need to be answered.

January 17, 2010

Are you thinking about implementing PSM?

Twelve years ago, when I was a Dy. General Manager (PSM) in a large organization in India implementing PSM, there were hardly a few industries in India that had heard about PSM.Later, when I became a PSM consultant to the Industry in 2001, I had to struggle a lot to create awareness about PSM.Today the awareness about PSM has tremendously increased. But I am afraid that if organizations are not careful, PSM also will go the way of ISO 14001 and OHSAS 18001. In my opinion, the quality of certification audits for ISO 14001 and OHSAS 18001 has drastically reduced. PSM also should not go that way. To begin with, organizations must be careful when they get into PSM, because they need to know what they are getting into. Wherever I implement PSM, I first check whether the organization is ready - both from a cultural perspective and adequacy of technical competency for PSM. If these are lacking, the organization first needs to attack these issues. PSM is a never ending journey - the scope for continual improvement is immense. Technical competency is a big issue in PSM. Today I see some organizations that are operating hazardous plants who do not have the basic knowledge of chemical engineering principles and reaction chemistry! So, if you are thinking about implementing PSM in your organization, know what you are getting into!

January 16, 2010

Are your back up systems available?

On Thursday 14th January, it was reported that the entire radar systems at the Air Traffic Control (ATC) at the Indira Gandhi International airport at Delhi failed in the evening for about an hour. It was also reported that no takeoffs or landings could take place for more than two hours following the systems crash. The back up system also failed.The ATC system was finally restored at around 2030 hrs after reloading the system, with the entire procedure taking about three hours. The radar system collapse led to massive delays.
The above incident raises the importance of keeping back up systems always ready. A back up system is just that – it must back up when needed. Obviously something went wrong with the back up also. The only silver lining is that there must have been procedures for manual operation which was obviously put into place as there was no safety of flight issue. How good are your back ups for power supply for the DCS system? How often do you check them? Do not think that it will not happen. I had the personal experience of all 7 DCS screens of a methanol plant operating at full capacity, going blank all of a sudden! Develop procedures and train personnel for handling such situations.

January 14, 2010

Fire near refinery destroys shanties

It was reported that about 100 shanties were gutted in a fire near the Guwahati refinery on 11.1.2010. Luckily there were no casualties. The cause of the fire is yet to be ascertained. Local residents allege that the effluents released from the refinery in a bypass drain caught fire. The incident raises the question of facility siting and how did the shanties come up near the refinery? The Bhopal disaster was an epitome in facility siting. Shanties were allowed to spring up near the plant leading to greater number of deaths when the gas leaked. In today's scenario, allowing dwellings to come up near hazardous installations poses two risks - one is the exposure of people living in the shanties to the hazards from the installation and the other is from the security and terrorism point of view. The Jaipur oil depot fire also pointed out the hazards of allowing development close to hazardous installations. When will we wake up?

Accidents during transportation of Hazardous Chemicals - learning from NTSB

On12.1.2010, a 55 year old woman died when a chlorine cylinder that was being transported in a mini lorry, reportedly "exploded" at Thirumullaivoyal, near Chennai.
The newspaper photo depicts a mangled mini lorry with remnants of the cylinder that "exploded". I am sure that the investigation will be carried out. But what about the disclosure of the results of the investigation? We must learn from the National Transportation Safety Board of the USA who investigate transportation incidents. They investigate incidents involving aviation, road transport, pipeline and hazardous materials,marine, rail transport etc.Their investigators are on call 24 hours a day, 365 days a year. The results of investigations are posted on their website www.ntsb.gov. Why don't we learn from them? Information shared about the lessons learnt help to prevent another similar incident from happening and lives can be saved.
Another aspect of process safety that has been brought out by the incident is that it was reported that the chlorine was being transported for usage as a disinfectant. Today there are less hazardous alternatives to chlorine for the purpose of disinfection of water. The concept of inherent safety proposed originally by Dr Trevor Kletz propounds exactly this.

January 10, 2010

Process Safety -Fatigue and training

Between 2007 and 2009, at least 6 commercial aircraft in India landed on the wrong runway. Fatigued crew and lack of training are supposed to be the reasons. Just ponder for a moment - if incidents like these can happen in the aviation industry, can we in the Chemical Industry ignore these issues? Fatigue and training are issues which are relevant to process safety and a lot of work has been done on shift schedules and circadian rhythms.Overtime in a process plant brings about its own problems. My own experience is that a number of incidents happen when the operator is on overtime. We cannot blame the operator. The bigger issue is whether the organisation has a training program that always has manpower in the pipeline - to replace sudden resignations. Just like the software industry, the chemical process industry in India needs to have trained people "on the bench". But this always has its costs. It finally depends on how much risk the organization is prepared to take.

25 Years after the Bhopal Gas Disaster

The bhopal gas disaster on the night of December 2nd/3rd, 1984 led to a number of changes in legislation regarding the management of chemical process safety.
The recent massive blaze at the petroleum storage facility at Jaipur indicates the need for improvement in managing chemical process safety in India.
A comparison of the changes in legislation made in the USA after the Bhopal Gas Disaster with the changes made in India is given below:
Changes made in USA:
1.After the Bhopal Gas Disaster and other accidents in the 1980’s amendments were made to the Clean Air Act (1991). OSHA (Occupational Safety and Health Administration) was authorized to develop its 29 CFR 1910.119 rule of 1992, Process Safety Management. This system is mandatory in the USA since 1992 for chemical industries, storing or processing highly hazardous chemicals, above a threshold quantity. After the implementation of this rule, there was a major incident at the BP Texas refinery in 2005. A thorough investigation about the reasons for the incident and follow up actions are clearly visible to the public. The investigation reports of the incident are made available to the public on the web.
2.The US Environmental Protection Agency also implemented the Risk Management Program in 1996 to prevent an off –site disaster (An off-site disaster is an event that has repercussions outside the boundary walls of the chemical industry in which the incident took place).
3.The US Chemical Safety Board was set up in January 1998 by an amendment of the Clean Air act. It is authorized to investigate chemical accidents in the USA and publish its investigation reports on its website www.csb.gov. The board cannot impose fines or promulgate regulations. It creates public awareness by publishing its investigation reports on the web.
Changes Made in India:
1.After the Bhopal gas disaster, the Factories Act was amended to assign the responsibility of the “occupier”, who is legally responsible for the safety of the workplace and workers, to the highest level of management in an organization. For a public limited company, one of the directors on the board had to be designated as “occupier”. The Environmental legislation also underwent changes, with the Environment Protection Act introduced in 1986. Under this act, a number of new legislations were framed. The Manufacture, Storage and Import of Hazardous Chemical rules, 1989 required safety audits to be carried out in hazardous chemical factories, storing more than a threshold limit of hazardous chemicals.
2.The Chemical Accidents (Emergency Planning, Preparedness and Response) Rules, 1996 was also introduced. Preparation of on-site Emergency Plan by the Industry and Off-site Plan by the District Collector and the constitution of four-tier Crisis Groups at the Centre, State, District and Local level for management of chemical accidents are mandatory under these Rules.
Recommendations to improve chemical process safety management in India:
1.The enforcement of existing legislation regarding chemical process safety by the Indian authorities must be made effective by training the law enforcers in the latest developments in prevention of chemical accidents, inspection and management system audit techniques.
2.While statutory safety audits continue to be performed in the chemical industries, the public should also be informed about the status of implementation of the recommendations of the safety audit.
3.The investigation of Chemical Process Incidents in India should be carried out by an independent body similar to the Chemical Safety Board of USA and their investigation reports must be made public.

PS: Regarding Sriram's comment below, there is a requirement in Factories rules Sec 41 C for hazardous operations that "the occupier must appoint persons who possess qualifications and experience in handling hazardous substances and are competent to supervise such handling within factory..."

January 9, 2010

Vacuum - the frequent killer!

During the last one year I came across 4 cases of tanks/pressure vessels collapsing/buckling due to vacuum developing inside. Why do we forget so easily that tanks/vessels that are not designed for vacuum will fail if vacuum develops inside? Time and again operating personnel make the mistake of either draining the tank/vessel, with the vent valve or vacuum breaker blocked in, or allow the tank/vessel to cool without ensuring the vent valve or vacuum breaker is lined up. The reason for this, I think, is due to human psychology. When we look a a large tank/vessel, we tend to believe it is very strong! If the tank/vessel is not designed for vacuum, this is a dangerous thought! It is a matter of education and all organizations must train their personnel on the hazards of vacuum. Why must be keep repeating the same mistakes?
Watch a beautiful youtube video about a rail tank car implosion due to vacuum at
http://www.youtube.com/watch?v=E_hci9vrvfw

January 7, 2010

Process Safety Management Vs Experience

There is a school of thought that systems corrupt the people's ability to think. Recently I was in a debate with one of my friends in the Chemical Industry who was arguing that his organization has people with tremendous experience and there is no necessity for him to implement any system.
Trevor Kletz has said it very beautifully "Organizations do not have memory". What happens when these people leave or retire? Having spent my whole career in the chemical industry, I am convinced that the phrase "History repeats itself" can be adpated to "Incidents repeat themselves". I keep investigating incidents of tank ruptures,fires and explosions, runaway reactions that uncannily had happened either to me or my friends decades ago.Having a robust process safety management system that captures organizational memory and integrates it with day to day decision making is what is needed to prevent these incidents from recurring.

January 3, 2010

Training in the Aviation and Chemical Process Industry - why different approaches?

With the advancement of instrumentation in the chemical industry,today plants are operated by DCS systems. These systems are excellent from a data collection and control point of view. The more I look at it, it appears that plant control rooms are now beginning to look like a plane's cockpit! While a pilot (similar to a control room operator) is put through mandatory rigorous training before he commands a plane, there are no mandatory requirements for the qualification of a control room operator. I was earlier a simulator trainer in a methanol plant in Saudi Arabia and I realized the enormous benefits of the benefits of investing in a chemical plant simulator. We could study and give feedback on the trainees response to various artificially created abnormal scenarios. In India, the concept of simulator training is yet to catch on. With the software experts available in India cannot we provide simulators that are cost effective?
I believe the simulator training is mandatory in the Indian Nuclear Industry but not in the chemical industry. Comments are welcome.

January 1, 2010

Process Safety and Behaviour Based Safety

There's a lot of buzz to day in behavior based safety. My experience indicates that as far as any safety is concerned, the behavior of top management is what dictates the behavior of the entire workforce.If top management keeps on talking about cost cutting and not talking about safety, that's what they will get - cost cutting measures getting implemented without analyzing the effect of the change on process safety! The BP Texas refinery incident is an example of this. The behavior of top management towards process safety does not involve rocket science. However, presently, a dangerous trend is taking place in the Industry. The board of directors in many of the chemical facilities do not have a technical person. My problem is not with the board of directors but with the information that reaches them. The president and other members of the top management who report to the board sometimes do not clearly communicate the risks involved in the implementation of certain decisions.This is a recipe for disaster.
I'm happy that the Baker Panel report has recommended that a person with adequate process safety experience must be on the board to explain to top management the effects of certain decisions on process safety.

LPG Tanker fire on NH47 - Lessons to be learnt

Yesterday a LPG tanker caught fire after colliding with a car on NH 47 near Kochi. The news article and pictures from the site indicate a total lack of disregard for safety by the public. The picture shows people milling around the tanker which is on fire and there is even a guy with a handycam, taking videos, standing barely 15 feet from the burning tanker. The fire department personnel are also not wearing any protective clothing. The only silver lining is that they were warned about the BLEVE phenomenon and were cooling the tanker. While India claims to be a superpower in software industry, why do we not imbibe the best practices in fire fighting and rescue? Its not that we cannot, but requires a change in mindset!
Lets hope for a safe New Year 2010!