monitor performance. identify bad actors. sustain … · 2020. 7. 13. · actors previously...

1
MONITOR PERFORMANCE. IDENTIFY BAD ACTORS. SUSTAIN MINIMAL RISK. Monitor. Identify. Sustain. © 2019 Honeywell International Inc. All rights reserved. Day 1 – interface design with historian Day 2 – import historical trip events Day 3 – analyze and identify bad actors Day 4 – take action to fix inoperable SIFs Day 5 – update MoC to handle in future ZERO – the number of test records on SIFs with excessive trip devices. Maintenance dispatched to test and replace immediately. SIL 1 SIF – unable to perform as required SIL 2 SIF – unable to perform as required 5 DAYS EFFORT 2 BAD ACTORS Previously invisible risk removed from the business. Without the SIFs in place, loss of containment events with significant safety, environmental, and/or commercial impacts were more probable. MILLION $100+ 5 years Until now the customer was unable to compare process historian data with design intention. During the 5 year review of the SIS Am I confident my protection layers will work? WHAT EVENT(S) AM I PREVENTING? SAFETY single fatality+ ENVIRONMENT restoration => 1 year COMMERCIAL $5-100 million 10x less likely with a SIL 1 SIF 100x less likely with a SIL 2 SIF HOW AM I PREVENTING? Industry typicals driving LOPA BACKGROUND Recent events have propelled major oil & gas companies to work towards an evergreen functional safety management plan, including monitoring the performance of protection layers. Work has been done to synchronize: Layer of Protection Analysis SIL Calculations & Verification Safety Requirements Specification Design Assumptions Actual Performance Process Hazard Analysis

Upload: others

Post on 03-Oct-2020

0 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: MONITOR PERFORMANCE. IDENTIFY BAD ACTORS. SUSTAIN … · 2020. 7. 13. · ACTORS Previously invisible risk removed from the business. Without the SIFs in place, loss of containment

MONITOR PERFORMANCE. IDENTIFY BAD ACTORS. SUSTAIN MINIMAL RISK.

Monitor. Identify. Sustain.

© 2019 Honeywell International Inc. All rights reserved.

Day 1 – interface design with historianDay 2 – import historical trip eventsDay 3 – analyze and identify bad actorsDay 4 – take action to fix inoperable SIFsDay 5 – update MoC to handle in future

ZERO – the number of test records on SIFs with excessive trip devices. Maintenance dispatched to test and replace immediately.SIL 1 SIF – unable to perform as requiredSIL 2 SIF – unable to perform as required

5 DAYS EFFORT 2BAD

ACTORSPreviously invisible risk removed from the business. Without the SIFs in place, loss of containment events with significant safety, environmental, and/or commercial impacts were more probable.

MILLION$100+

5 years Until now the customer was unable to compare process historian data with design intention. During the 5 year review of the SIS

Am I confident my protection layers will work?

WHAT EVENT(S) AM I PREVENTING?

SAFETYsingle fatality+

ENVIRONMENTrestoration => 1 year

COMMERCIAL$5-100 million

10xless likely with a SIL 1 SIF

100xless likely with a SIL 2 SIF

HOW AM I PREVENTING?

Industry typicals driving LOPA

BACKGROUNDRecent events have propelled major oil & gas companies to work towards an evergreen functional safety management plan, including monitoring the performance of protection layers.

Work has been done to synchronize:

Layer of Protection

Analysis

SIL Calculations &

Verification

Safety Requirements Specification

Design Assumptions Actual Performance

Process Hazard

Analysis