Beruflich Dokumente
Kultur Dokumente
Protection
Analysis
NHT Reformer Unit
TOTAL Petrochemicals USA, Inc.
Port Arthur Facility
October 2008
Project No. 07-099
R R S ENGINEERING
6455 South Shore Blvd., Suite 400
League City, Texas
TEL 281.334.4220
www.rrseng.com
77573
FAX 281.334.5809
TOTAL Petrochemicals
Port Arthur Refinery
Makes any warranty or representation, express or implied, (all of which are hereby expressly disclaimed) with
respect to the accuracy, completeness, or usefulness of the information contained herein or the work, or that
the use of any information, method, apparatus, or process contained herein, does not infringe on any rights of
others; nor
2.
Will have any liability arising by, through, or under Client with respect to the use of, or for special, incidental, or
consequential damages related to or arising directly or indirectly out of the use of any information, method,
apparatus, or process disclosed herein or the work; nor
3.
Assumes any liability to client or any third party, with respect to the use of any information, method, apparatus,
or process disclosed herein or in the work.
Client agrees that RRS has made reasonable efforts to perform the Work contained herein in a manner consistent with high
professional standards. However, Client agrees that the Work was conducted on the basis of information made available to
RRS by Client and is dependent on the accuracy of the information provided. Client agrees that all observations, conclusions
and recommendations contained herein are relevant only to this work, and will not be applied to any other facility or operation.
Client agrees that the Work RRS performed is advisory in nature only and that the responsibility for use and implementation
of conclusions and recommendations contained herein rests entirely with Client. Client agrees that it will independently
evaluate any actions taken to address the results of this effort to ensure they will not create unacceptable hazards and that
safe practices are followed when any change is implemented.
Furthermore Client agrees that federal and state regulations are subject to interpretations and no one can guarantee how
they will be interpreted in the future. Client agrees that RRS will have no liability for any incident or regulatory action that
occurs at Client.
Client agrees that it will be solely responsible for disclosure of the Work to any third-party or the use of the work, or any
information or conclusions contained therein.
Page i
TOTAL Petrochemicals
Port Arthur Refinery
TABLE OF CONTENTS
PAGE
1.0
2.0
INTRODUCTION............................................................................................................................... 1
1.1
1.2
2.2
2.3
2.4
2.5
2.6
2.7
3.0
4.0
RECOMMENDATIONS.................................................................................................................... 15
5.0
Page ii
TOTAL Petrochemicals
Port Arthur Refinery
LIST OF TABLES
PAGE
Table 1.
Table 2.
Review Team................................................................................................................... 2
Table 3.
Table 4.
Table 5.
Table 6.
Probability of Failure on Demand (PFD) for Independent Protection Layers (IPLs) .... 9
Table 7.
Table 8.
Table 9.
Recommendations ........................................................................................................16
LIST OF FIGURES
PAGE
Figure 1.
Page iii
TOTAL Petrochemicals
Port Arthur Refinery
1.0
INTRODUCTION
TOTAL Petrochemicals contracted Risk, Reliability and Safety Engineering, LLC (RRS) to conduct
a Layer of Protection Analysis (LOPA) of the NHT Reformer Unit at TOTAL Petrochemicals Port
Arthur Refinery. The LOPA methodology used is defined in the TOTAL Petrochemical LOPA
Procedure 14 and follows the guidance in the Center for Chemical Process Safety (CCPS) book,
Layer of Protection Analysis, 1995. The methodology used in this study meets the requirements of
ANSI/ISA S84.00.01, Functional Safety: Safety Instrumented Systems for the Process Industry.
The objectives of the LOPA study were to:
1.1
Determine the Safety Integrity Level (SIL) for the Safety Instrumented Systems (SIS)
at the plant
Study Team
Study Team
Company
Job Title
Norman Borne
Instrument Supervisor
Richard Loupe
NAC Operator
Douglas Dornier
Process Engineer
Ryan Riffer
Ops Superintendent
Roger Allison
Olson Engineering
Instrument Reliability
Allen Runte
Geoffrey Kret
David Montondon
Gulfcon, Inc.
Systems Group
John Darwin
Systems Group
Sheng-Yen Fletcher
PSI/PHA Coordination
Danny Roy
Corrosion Specialist
Dennis Ferrell
Olson Engineering
Page 1
TOTAL Petrochemicals
Port Arthur Refinery
Name
Company
Job Title
Paul Pardaen
Dwayne Austin
Systems Group
Rich Hudgins
Systems Group
John Pruitt
RRS Engineering
Facilitator
John Alderman
RRS Engineering
Facilitator
Cassie Slough
RRS Engineering
Scribe
1.2
Study Dates
The LOPA was conducted onsite at the TOTAL Petrochemicals Port Arthur Refinery on May 3,
2007.
An additional meeting was held on June 21, 2007 to re-evaluate SIL, EIL, and CIL rankings. A
review team was assembled to revisit LOPA scenarios, including 39.1, 72.2, 72.9, and 73.8. The
review team determined that the commercial severity for these scenarios should be reduced from
catastrophic to major. The review team is identified in Table 2.
Table 2.
Review Team
Name
2.0
Job Title
Ed Bergmann
HSEQ
Shen-Yen Fletcher
HSEQ
Kelly Nite
Operations
Ryan Riffer
Operations
Geoff Kret
Reliability
Dwayne Austin
Systems
John Darwin
Systems
Clint Gibbs
Systems
Rich Hudgins
Systems
Allen Runte
Systems
David Montondon
Systems
LOPA METHODOLOGY
Page 2
TOTAL Petrochemicals
Port Arthur Refinery
Figure 1.
LOPA Flowchart
Page 3
TOTAL Petrochemicals
Port Arthur Refinery
2.1
Scenario Identification
The Study Team began by identifying scenarios of concern based on results from the previous
PHA. For an existing PHA, only those scenarios with a shutdown system were reviewed. In some
cases, further definition of the consequence was required. In a LOPA, a scenario is an initiating
cause, a description of the consequence (assuming all safeguards fail), and a list of all protection
layers in place to prevent the consequence from occurring. The LOPA consists of assigning
numerical frequency numbers to the initiating cause and each protection layer, then determining if
protection layers in place are adequate. Additionally, scenarios were added based on shutdowns
in the cause and effect charts.
Some scenarios were reviewed and identified as a moderate severity. Since these scenarios were
considered a moderate severity, they did not meet the criteria for using LOPA. These scenarios
are contained in Appendix A.
Note: A scenario has only one cause and only one consequence. If multiple causes for the same
consequence are identified in the PHAs, then each cause was analyzed separately using LOPA.
2.2
The Study Team assigned a severity ranking to the consequences. Each consequence severity
was also assigned a Targeted Frequency (TF) based on Table 3.
Table 3.
Severity
Level
Moderate
Safety
Environmental
Commercial
Not required to
conduct LOPA
Onsite:
-
Recordable, TRIR
Medical treatment
Target
Frequency
(1/Yr)
Offsite:
Serious
No effect
Onsite:
-
Permanent injury
Recordable environmental
event
< $2,000,000
Not required to
conduct LOPA
Offsite:
-
No permanent
effects
Page 4
TOTAL Petrochemicals
Port Arthur Refinery
Severity
Level
Major
Onsite:
-
Lethal effect on 1
person
Multiple recordable
injuries
Environmental
Commercial
Target
Frequency
(1/Yr)
Reportable environmental
event
$2,000,000$10,000,000
10-4
Reportable environmental
event with offsite impact
$10,000,000 $100,000,000
10-5
> 100,000,000
10-6
Offsite:
Catastrophic
Shelter in place
Onsite:
-
Multiple fatalities
Offsite:
Disastrous
Recordable injuries
Onsite:
-
Multiple fatalities
Offsite:
-
2.3
Multiple fatalities
The Study Team assigned an Initiating Cause Likelihood (ICL) based on the numerical values
defined in Table 4. These values are based on industry consensus as presented in the CCPS
Concept Book on LOPA. The CCPS Concept Book provides the following guidance on causes:
Control loop failure - includes all components of the control loop, as well as the
possibility that the control loop could be set in error to a dangerous state by the
operator
Routine human error - includes a task in the field or at the operator console that is
performed on a routine basis by the operator and that, if done improperly, could
result in the process deviation under review
Non-routine human error - tasks that are not done on a routine basis but are
possible actions by an operator for some event, such as startup or shutdown that, if
done improperly, could result in the process deviation under review
Pumps and other rotating equipment - includes any piece of equipment with
normal moving parts
Fixed equipment - involves failures in non-moving equipment that would lead to the
process condition under review; for example, tube failure on a high-pressure steam
exchanger leading to high process pressure
Page 5
TOTAL Petrochemicals
Port Arthur Refinery
Table 4.
1 x 10-1
Regulator failure
1 x 10-1
1 x 10-2
1 x 10-1
1 x 10-1
1 x 10-1
1 x 100
1 x 10-1
1 x 10-1
1 x 100
1 x 10-2
1 x 10-4
1 x 10-2
Lightning strike
1 x 10-3
1 x 10-2
1 x 10-1
1 x 10-1
Source: Table 5.1, p 71 of the 2001 CCPS Concept Book Layers of Protection Analysis.
Page 6
TOTAL Petrochemicals
Port Arthur Refinery
2.4
The defining characteristic of a protection layer is that it prevents the consequence from
happening. Each IPL must function such that the defined consequence will not occur. Each
protection layer counted must be independent of other protection layers. That is, there must be no
failure that can deactivate two or more protection layers. If a protection layer is believed to be
more reliable (a lower value for Probability of Failure on Demand - PFD), a quantitative method
should be used to confirm the PFD. For example, if the team desires to improve the unavailability
of risk reduction logic in the Basic Process Control System (BPCS) by adding additional sensors or
final elements, the impact event should be reviewed by a quantitative method such as fault tree.
The protection layer is:
The Study Team identified which protection layers meet the definition of IPLs as given in this
section. This is often the most difficult part of LOPA. Table 5 contains safeguards that are not
typically given credit as IPLs.
Page 7
TOTAL Petrochemicals
Port Arthur Refinery
Table 5.
Comments
May be considered in assessing the PFD for operator action, but are not, of
themselves, IPLs
Procedures
May be considered in assessing the PFD for operator action, but are not, of
themselves, IPLs
Assumed to be in place for all hazard evaluations and form the basis for
judgment to determine IPLs and PFDs; normal testing and inspection
affects the PFD of certain IPLs, thus, lengthening testing and inspection
intervals may increase the PFD of an IPL
Maintenance
Assumed to be in place for all hazard evaluations and forms the basis for
judgment to determine the PFDs of IPLs.
Communications
Signs
Fire Protection
Active fire protection often is not considered as an IPL as it is post event for
most scenarios and its availability and effectiveness may be affected by the
fire / explosion which it is intended to contain; however, if the LOPA team
can demonstrate it meets the requirements of an IPL for a given scenario, it
may be used (e.g., if an activating system such as plastic piping or frangible
switches are used)
Note: Fire protection is identified as a mitigation IPL as it attempts to
prevent a larger consequence subsequent to an event that has already
occurred. This may be considered when assigning cost to commercial
severity levels.
Fireproof insulation can be used as an IPL for some scenarios if it meets
the requirements of API and corporate standards
Source: Table 6.1, p 79 of the 2001 CCPS Concept Book Layers of Protection Analysis
Page 8
TOTAL Petrochemicals
Port Arthur Refinery
Table 6.
Probability of Failure on
Demand (PFD)
Basic process control system, if not associated with the initiating event being
considered
1 x 10-1
1 x 10-1
Relief valve
1 x 10-2
Rupture disc
1 x 10-2
1 x 10-2
Tandem seals
1 x 10-1
Dike
1 x 10-2
1 x 10-2
1 x 10-2
Fireproofing
1 x 10-2
Blast-wall / bunker
1 x 10-3
1 x 10-1 to 1 x 10-2
1 x 10-1 to 1 x 10-2
Other events
Use experience of
personnel
Source: Table 6.3, page 92; Table 6.4, p 96; Table 6.5, page 103 of the 2001 CCPS Concept Book Layers of Protection
Analysis.
Page 9
TOTAL Petrochemicals
Port Arthur Refinery
2.5
Each protection layer counted must be truly independent of the other protection layers. This
means there must be no failure that can deactivate two or more protection layers.
If a Safety Instrumented System (SIS) is initiated by more than one sensor, the consequence of
failure may be different for each sensor and therefore, each failure is considered separately. If the
consequences are different for each failure, the function is separated into more than one function
and the IPL determined for each.
If an SIS initiates more than one action, the consequences of failure may be different for each final
actuation and therefore, each failure shall be considered separately. If consequences are different
for each failure, the function is separated into more than one function and the IPL determined for
each.
2.5.1
There may be some hazards that are only present during certain job tasks, such as startup,
shutdown, regeneration, etc.
The following equation is used to determine the credit for this type of protection layer:
ICL = ICL x [(time at risk)/(total time)]
2.5.2
The following rules apply to the use of relief valves as protection layers:
Relief system is sized for all reasonably foreseeable failures of process and process
control to completely mitigate the scenario under consideration
Operating experience indicates that the relief valves to be used are satisfactory for
the process application with the appropriate test intervals
When there are two relief devices, each 100% sized for the scenarios, then an
additional credit can be taken (should be at least an order of magnitude lower than
that used for the first, generally 1x 10-1).
Page 10
TOTAL Petrochemicals
Port Arthur Refinery
2.5.3
Check Valves
Check valves are notoriously unreliable, but can be considered a LOPA safeguard on a
case-by-case basis. Some of the considerations include:
2.5.4
Clean service
High differential pressure (< 100 psi) to hold valve closed and prevent leakage
BPCS
The Basis Process Control System (BPCS) has several rules associated with their use as IPLs:
2.5.5
If a BPCS control loop is a cause, the alarms generated by that control loop cannot
be counted as a protection layer. Alarms separate from the control loop may be
used as protection for the failure of that control loop if the operator response time is
adequate.
A control loop in the BPCS, whose normal action would compensate for the initiating
event, can be considered as a protection layer. For example, an initiating cause for
high reactor pressure could be failure of a local upstream pressure regulator; the
normal action of the reactor pressure controller would be to close the inlet PV, thus
providing protection against the impact event.
Risk reduction for Operator Response to Alarms can only be counted once. Alarms are identified
for all causes of the initiating event. The following must be confirmed as true before allowing credit
for operator response:
Alarm is independent of the cause and BPCS control loop claimed as a protection
layer
Operator will detect the alarm among potentially many other alarms
Operator has time to diagnose and take corrective action (within 10 minutes)
Operator is trained in the proper procedures and response associated with the alarm
state and the response steps are identified as critical in the procedure
Page 11
TOTAL Petrochemicals
Port Arthur Refinery
2.6
Vulnerability Factors
2.6.1
Ignition Probability
There are many releases that are not ignited. Ignition probabilities used in this study are:
Person Present
To qualify as a safety related scenario, a person must be in the area where the incident occurs.
Credit is taken for time not in the hazard zone. For example, during operator rounds, if a pump
seal fire were to occur, in order for there to be an injury, the operator must be near the pump. The
operator may only be near the pump for 30 minutes out of his shift.
The following vulnerability factors should be applied when appropriate:
VFp = 1.0 if people are present in the hazard zone all the time
VFp = 0.5 if people are present in the hazard zone for less than 12 hours per day
VFp = 0.1 if people are present in the hazard zone for less than 1-2 hours per day
For environmental and commercial scenarios, the person present is not used.
2.7
LOPA Calculation
Using the numerical values identified in the preceding steps, a simple calculation is performed to
determine the LOPA ratio. LOPA is limited to evaluating a single cause-consequence pair as a
scenario. The numerator of the LOPA ratio is the Target Frequencies (TF), which is the companys
risk tolerance for that scenario. The denominator of the LOPA ratio is the product of the Initiating
Cause Likelihood (ICL), the Probability of Failure on Demand (PFD) of each Independent
Protection Layer (IPL) identified and the Vulnerability Factor (VF). The formula for calculating the
LOPA ratio is presented below:
TFSafety
ICL PFD1 PFD2 PFD3... VFi VFp
TFEnvironmen tal
ICL PFD 1 PFD 2 PFD 3...
TFCommercial
ICL PFD1 PFD 2 PFD 3... * VFi
Page 12
TOTAL Petrochemicals
Port Arthur Refinery
If the LOPA ratio is greater than or equal to one, then the scenario passes LOPA. Existing
protection layers in place are adequate.
If the LOPA ratio is less than one, then the scenario fails LOPA. Additional protection layers are
needed.
3.0
SIS EVALUATION
LOPA was used to determine the required and Safety Integrity Level (SIL) for a Safety
Instrumented System (SIS). To do this, the LOPA ratio was calculated without giving any credit to
the existing SIS. The required SIL was then found by using Table 7.
Table 7.
10-0 - 10-1
10-1 - 10-2
10-2 - 10-3
10-3 - 10-4
The LOPA worksheets for this project are contained in Section 5. The SIL determinations derived
from the study are shown in Table 8.
Table 8.
LOPA Ref.
2.1
LSHH-592 High high level switch that closes blanket fuel gas
valve PV-593B on high high level in the drum.
4.2
5.8
PSLL-1389 Interlock that isolates the fuel gas from the heater
on low low fuel gas pressure.
5.11
PSLL-1379 Interlock that isolates the pilot gas from the heater
on low low pilot gas pressure.
12.2
13.8
PSLL-1399 Interlock that isolates the fuel gas from the heater
on low low fuel gas.
13.11
PSLL-1393 Interlock that isolates the pilot gas from the heater
on low low pilot gas pressure.
Page 13
TOTAL Petrochemicals
Port Arthur Refinery
LOPA Ref.
19.2
23.2
25.2
19.2
23.2
25.2
19.8
PSLL-1732 Interlock that isolates the fuel gas from the heater
on low low fuel gas pressure.
28.1
29.2
30.9
30.9
32.1
33.8
33.8
39.1
49.2
72.2
72.2
LSL-57 that starts the auxiliary lube oil pump on low level in the
overhead seal oil tank.
*This scenario was revisited during the June 21st meeting.
72.9
PSL-40 Interlock that starts the spare pump on low lube oil
pressure.
*This scenario was revisited during the June 21st meeting.
73.8
Page 14
TOTAL Petrochemicals
Port Arthur Refinery
LOPA Ref.
4.0
73.12
80.10
RECOMMENDATIONS
If during the LOPA study, the LOPA analysis indicated there were not enough safeguards or an
additional SIS was needed, then the Study Team made additional recommendations. Table 9
identifies the recommendations from the LOPA Study.
Page 15
TOTAL Petrochemicals
Port Arthur Refinery
Table 9.
Recommendations
Rec.
No.
Scenario
Number
1.1
2.1
2.1
Ensure that interlock LSHH-592 that closes blanket fuel gas valve PV-593B
on high high level in the drum is designed for EIL 1.
4.2
4.2
Ensure that interlocks FSLL-915 through 918 are designed for SIL 1.
5.8
5.11
12.2
12.2
10
13.8
11
13.11
Review the revalidation from MOC to change pilot gas to Purchased Natural
Gas.
12
19.2
13
19.8
14
28.1
15
28.1
Ensure that Interlock LSHH-256 that shuts down the compressors on high
high level is designed for SIL 1.
16
28.1
17
29.2
18
30.9
19
32.1
20
32.1
Ensure that LSHH-179 that shuts down the booster compressor on high-high
level is designed for SIL 1.
21
32.1
Recommendation
Page 16
TOTAL Petrochemicals
Port Arthur Refinery
Rec.
No.
Scenario
Number
Recommendation
22
33.8
23
39.1
Confirm the level alarm for the Unibon Compressor Suction Drum (13C1A/B)
is independent of the level control valve and is on a routine testing schedule.
24
39.1
25
39.1
Confirm the level alarm for the TDP Compressor Suction Drum is
independent of the level control valve and is on a routine testing schedule.
26
39.1
27
49.2
28
49.2
29
72.2
Consider bringing a low seal oil level alarm into DCS (independent of LV1437).
30
72.2
Ensure that Interlock LSLL-38 that shuts down the compressor and prevents
restart on low-low level in the overhead seal oil tank and/or Interlock LSL-57
that starts the auxiliary lube oil pump on low level in the overhead seal oil
tank are designed for SIL 2.
31
72.2
32
72.9
33
72.9
Ensure that Interlock Interlock PSLL-32 shuts down compressor on low lube
oil pressure is designed for SIL 1.
34
72.9
35
73.8
Ensure that low lube oil pressure alarm PAL-77/78 is on a routine testing
schedule.
36
73.8
Ensure Interlock PSL-79/80 that shuts down Compressor is designed for SIL
1.
37
73.8
38
73.12
Ensure that jacket water discharge temperature alarms TAH85/86/87/88/89/90/91/92 (local compressor panel and TDC) located on the
first-stage compressor are on a routine testing schedule.
39
73.12
Page 17
TOTAL Petrochemicals
Port Arthur Refinery
5.0
LOPA WORKSHEETS
Page 18
PHA Ref.
Consequence
Description
Target Frequency
Safety:
1.00E-04
Env:
1.00E-03
Com:
Initiating Cause
Intermittent Hazard
P&ID: 3165-1-50-023
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
1.1
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
None
Other
None
LOPA Ratio
Recommendation
Safety:
0.010
1.00E-04
Env:
0.010
Com:
0.00
SIS No:
SIS Function:
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
2.1
Target Frequency
Safety:
Initiating Cause
0.00E+00
Env:
1.00E-04
Intermittent Hazard
Com:
1.00E-02
1 1.00E-01
None
Vulnerability Factors
Ignition Probability
Person Present
Independent
Protection
Layers
None
Process Design
BPCS
1.00E-01
None
PSV
Op Response
None
None
Other
LOPA Ratio
Safety:
Recommendation
1.000
Env:
0.010
Com:
SIS No:
LSHH-592
SIS Function:
High high level switch LSHH-592 that closes blanket fuel gas valve PV-593B on
high high level in the drum.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
High level in feed surge drum. Tube failure in Charge Heater (H-101)
resulting in release of hydrocarbon that could cause (a) a fire and/or
explosion that may injure personnel in a medium-sized area and (b)
environmental impact in a small area.
Target Frequency
Safety:
1.00E-04
Env:
1.00E-04
Initiating Cause
Intermittent Hazard
P&ID: 3165-1-50-002
Loop: F-0915, F-0916, F-0917, F-0918
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
4.2
1 1.00E-01
None
BPCS
None
PSV
None
Flow indication FC-595 with low flow
alarm.
Other
LOPA Ratio
None
None
Safety:
Recommendation
1.00E-04
1 1.00E-01
Process Design
Op Response
Com:
0.010
Env:
0.001
Com:
0.00
SIS No:
FSLL-915-918
SIS Function:
Flow indication FI-915-918 with low flow alarms and interlocks FSLL-915-918 that
shuts down the heater on low low flow through a heater pass.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
High level in feed surge drum. Tube failure in Charge Heater (H-101)
resulting in release of hydrocarbon that could cause (a) a fire and/or
explosion that may injure personnel in a medium-sized area and (b)
environmental impact in a small area.
Target Frequency
Safety:
1.00E-04
Env:
1.00E-04
Initiating Cause
Intermittent Hazard
P&ID: 3165-1-50-002
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
4.2
1 1.00E-01
None
BPCS
None
PSV
None
Flow indication FC-595 with low flow
alarm.
None
None
Other
LOPA Ratio
1.00E-04
1 1.00E-01
Process Design
Op Response
Com:
Safety:
Recommendation
0.010
Env:
0.001
Com:
0.00
SIS No:
FI-915-918
SIS Function:
Flow indication FI-915-918 with low flow alarms and interlocks FSLL-915-918 that
shuts down the heater on low low flow through a heater pass.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
High level in feed surge drum. Tube failure in Charge Heater (H-101)
resulting in release of hydrocarbon that could cause (a) a fire and/or
explosion that may injure personnel in a medium-sized area and (b)
environmental impact in a small area.
Target Frequency
Safety:
1.00E-04
Env:
1.00E-04
Initiating Cause
Intermittent Hazard
P&ID: 3165-1-50-002
None
Vulnerability Factors
Ignition Probability
None
None
BPCS
None
PSV
None
Flow indication FC-595 with low flow
alarm.
None
None
Other
LOPA Ratio
1.00E-04
1 1.00E-01
Process Design
Op Response
Com:
1 1.00E-01
Person Present
Independent
Protection
Layers
4.2
Safety:
Recommendation
0.010
Env:
0.001
Com:
0.00
SIS No:
FI-915-918
SIS Function:
Flow indication FI-915-918 with low flow alarms and interlocks FSLL-915-918 that
shuts down the heater on low low flow through a heater pass.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
High level in feed surge drum. Tube failure in Charge Heater (H-101)
resulting in release of hydrocarbon that could cause (a) a fire and/or
explosion that may injure personnel in a medium-sized area and (b)
environmental impact in a small area.
Target Frequency
Safety:
1.00E-04
Env:
1.00E-04
Initiating Cause
Intermittent Hazard
P&ID: 3165-1-50-002
None
Vulnerability Factors
Ignition Probability
None
None
BPCS
None
PSV
None
Flow indication FC-595 with low flow
alarm.
None
None
Other
LOPA Ratio
1.00E-04
1 1.00E-01
Process Design
Op Response
Com:
1 1.00E-01
Person Present
Independent
Protection
Layers
4.2
Safety:
Recommendation
0.010
Env:
0.001
Com:
0.00
SIS No:
FI-915-918
SIS Function:
Flow indication FI-915-918 with low flow alarms and interlocks FSLL-915-918 that
shuts down the heater on low low flow through a heater pass.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
High level in feed surge drum. Tube failure in Charge Heater (H-101)
resulting in release of hydrocarbon that could cause (a) a fire and/or
explosion that may injure personnel in a medium-sized area and (b)
environmental impact in a small area.
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Com:
Intermittent Hazard
Vulnerability Factors
Ignition Probability
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
None
None
Other
LOPA Ratio
1.00E-04
None
Person Present
Independent
Protection
Layers
4.2
Safety:
Recommendation
0.010
Env:
0.001
Com:
0.00
SIS No:
FI-915-918
SIS Function:
Flow indication FI-915-918 with low flow alarms and interlocks FSLL-915-918 that
shuts down the heater on low low flow through a heater pass.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
1.00E-04
Env:
1.00E-04
Com:
Initiating Cause
Intermittent Hazard
P&ID: 3165-1-50-055A
Loop: F-0890
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
5.2
Process Design
1 1.00E-01
1.00E-02
Blowout doors.
BPCS
None
PSV
None
Op Response
1.00E-04
1.00E-01
Other
LOPA Ratio
Safety:
10.000
Env:
1.000
Com:
1.00
Recommendation
SIS No:
FSLL-890
SIS Function:
Interlock FSLL-890 that switches the heater to natural draft operation on low low
combustion air flow.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
1.00E-04
Env:
1.00E-04
Initiating Cause
Intermittent Hazard
P&ID: 3165-1-50-055A
Loop: F-0890
None
Vulnerability Factors
Ignition Probability
None
Process Design
1.00E-04
1 1.00E-01
1.00E-02
Blast doors.
BPCS
None
PSV
None
Op Response
Com:
1 1.00E-01
Person Present
Independent
Protection
Layers
5.2
1.00E-01
Other
LOPA Ratio
Safety:
10.000
Env:
1.000
Com:
1.00
Recommendation
SIS No:
FSLL-890
SIS Function:
Interlock FSLL-890 that switches the heater to natural draft operation on low low
combustion air flow.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
1.00E-04
Env:
1.00E-04
Initiating Cause
Intermittent Hazard
P&ID: 3165-1-50-055A
Loop: F-0890
None
Vulnerability Factors
Ignition Probability
None
Process Design
1.00E-04
1 1.00E-01
1.00E-02
Blast doors.
BPCS
None
PSV
None
Op Response
Com:
1 1.00E-01
Person Present
Independent
Protection
Layers
5.2
1.00E-01
Other
LOPA Ratio
Safety:
10.000
Env:
1.000
Com:
1.00
Recommendation
SIS No:
FSLL-890
SIS Function:
Interlock FSLL-890 that switches the heater to natural draft operation on low low
combustion air flow.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
1.00E-04
Env:
1.00E-04
Initiating Cause
Intermittent Hazard
P&ID: 3165-1-50-055A
Loop: F-0890
None
Vulnerability Factors
Ignition Probability
None
Process Design
1.00E-04
1 1.00E-01
1.00E-02
Blast doors.
BPCS
None
PSV
None
Op Response
Com:
1 1.00E-01
Person Present
Independent
Protection
Layers
5.2
1.00E-01
Other
LOPA Ratio
Safety:
10.000
Env:
1.000
Com:
1.00
Recommendation
SIS No:
SSL-1042
SIS Function:
Interlock SSL-1042 that opens the stack damper on shutdown of the induced draft
fan.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
1.00E-04
Env:
1.00E-04
Com:
Initiating Cause
Intermittent Hazard
P&ID: 3165-1-50-055A
Loop: F-0890
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
5.2
Process Design
1 1.00E-01
1.00E-02
Blast doors.
BPCS
None
PSV
None
Op Response
1.00E-04
1.00E-01
Other
LOPA Ratio
Safety:
10.000
Env:
1.000
Com:
1.00
Recommendation
SIS No:
FSLL-890
SIS Function:
Interlock FSLL-890 that switches the heater to natural draft operation on low low
combustion air flow.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Com:
1.00E-04
1 1.00E-01
Intermittent Hazard
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
5.8
Process Design
None
BPCS
None
PSV
None
Op Response
None
Other
None
LOPA Ratio
Safety:
Recommendation
0.001
Env:
0.001
Com:
0.00
SIS No:
PSLL-1389
SIS Function:
Interlock PSLL-1389 that isolates the fuel gas from the heater on low low fuel gas
pressure.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Intermittent Hazard
Com:
1.00E-04
1 1.00E-01
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
5.8
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
None
Other
None
LOPA Ratio
Safety:
Recommendation
0.010
Env:
0.001
Com:
0.00
SIS No:
PSLL-1389
SIS Function:
Interlock PSLL-1389 that isolates the fuel gas from the heater on low low fuel gas
pressure.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Intermittent Hazard
Com:
1.00E-04
1 1.00E-01
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
5.8
Process Design
None
BPCS
None
PSV
None
Op Response
None
Other
None
LOPA Ratio
Safety:
Recommendation
0.001
Env:
0.001
Com:
0.00
SIS No:
PSLL-1389
SIS Function:
Interlock PSLL-1389 that isolates the fuel gas from the heater on low low fuel gas
pressure.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Com:
Intermittent Hazard
Vulnerability Factors
Ignition Probability
Process Design
None
BPCS
None
PSV
None
Op Response
None
Other
None
LOPA Ratio
Safety:
Recommendation
0.001
1.00E-04
None
Person Present
Independent
Protection
Layers
5.8
Env:
0.001
Com:
0.00
SIS No:
PSLL-1389
SIS Function:
Interlock PSLL-1389 that isolates the fuel gas from the heater on low low fuel gas
pressure.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Com:
1.00E-04
1 1.00E-01
Intermittent Hazard
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
5.11
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
None
Other
None
LOPA Ratio
Safety:
Recommendation
0.010
Env:
0.001
Com:
0.00
SIS No:
SIS Function:
Interlock PSLL-1379 that isolates the pilot gas from the heater on low low pilot gas
pressure.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Com:
1.00E-04
Intermittent Hazard
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
5.11
Process Design
None
BPCS
None
PSV
None
Op Response
None
Other
None
LOPA Ratio
Safety:
Recommendation
0.001
Env:
0.001
Com:
0.00
SIS No:
PSLL-1379
SIS Function:
Interlock PSLL-1379 that isolates the pilot gas from the heater on low low pilot gas
pressure.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Com:
1.00E-04
1 1.00E-01
Intermittent Hazard
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
5.11
Process Design
None
BPCS
None
PSV
None
Op Response
None
Other
None
LOPA Ratio
Safety:
Recommendation
0.001
Env:
0.001
Com:
0.00
SIS No:
PSLL-1379
SIS Function:
Interlock PSLL-1379 that isolates the pilot gas from the heater on low low pilot gas
pressure.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Com:
1.00E-04
1 1.00E-01
Intermittent Hazard
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
5.11
Process Design
None
BPCS
None
PSV
None
Op Response
None
Other
None
LOPA Ratio
Safety:
Recommendation
0.001
Env:
0.001
Com:
0.00
SIS No:
PSLL-1379
SIS Function:
Interlock PSLL-1379 that isolates the pilot gas from the heater on low low pilot gas
pressure.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Com:
1.00E-04
Intermittent Hazard
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
5.11
Process Design
None
BPCS
None
PSV
None
Op Response
None
Other
None
LOPA Ratio
Safety:
Recommendation
0.001
Env:
0.001
Com:
0.00
SIS No:
PSLL-1379
SIS Function:
Interlock PSLL-1379 that isolates the pilot gas from the heater on low low pilot gas
pressure.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Com:
Intermittent Hazard
Vulnerability Factors
Ignition Probability
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
None
Other
None
LOPA Ratio
Safety:
Recommendation
0.010
1.00E-04
None
Person Present
Independent
Protection
Layers
5.11
Env:
0.001
Com:
0.00
SIS No:
SIS Function:
Interlock PSLL-1379 that isolates the pilot gas from the heater on low low pilot gas
pressure.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Com:
1.00E-04
Intermittent Hazard
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
5.11
Process Design
None
BPCS
None
PSV
None
Op Response
None
Other
None
LOPA Ratio
Safety:
Recommendation
0.001
Env:
0.001
Com:
0.00
SIS No:
PSLL-1379
SIS Function:
Interlock PSLL-1379 that isolates the pilot gas from the heater on low low pilot gas
pressure.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
1.00E-04
Env:
1.00E-04
Initiating Cause
P-103A/B stops.
Intermittent Hazard
P&ID: 3165-1-50-007
Loop: F-0645, F-0647, F-0655
None
Vulnerability Factors
Ignition Probability
None
None
BPCS
None
PSV
None
Op Response
None
Other
None
Safety:
Recommendation
0.010
1.00E-04
1 1.00E-01
Process Design
LOPA Ratio
Com:
1 1.00E-01
Person Present
Independent
Protection
Layers
12.2
Env:
0.001
Com:
0.00
SIS No:
FSLL-645/647/655
SIS Function:
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
1.00E-04
Env:
1.00E-04
Initiating Cause
Intermittent Hazard
P&ID: 3165-1-50-007
Loop: F-0645, F-0647, F-0655
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
12.2
1 1.00E-01
None
BPCS
None
PSV
None
Op Response
None
Other
None
Safety:
Recommendation
0.010
1.00E-04
1 1.00E-01
Process Design
LOPA Ratio
Com:
Env:
0.001
Com:
0.00
SIS No:
FSLL-645/647/655
SIS Function:
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
1.00E-04
Env:
1.00E-04
Initiating Cause
Intermittent Hazard
P&ID: 3165-1-50-055B
Loop: F-0898
None
Vulnerability Factors
Ignition Probability
None
Process Design
1.00E-04
1 1.00E-01
1.00E-02
Blast doors.
BPCS
None
PSV
None
Op Response
Com:
1 1.00E-01
Person Present
Independent
Protection
Layers
13.2
1.00E-01
Other
LOPA Ratio
Safety:
10.000
Env:
1.000
Com:
1.00
Recommendation
SIS No:
FSLL-898
SIS Function:
Interlock FSLL-898 that switches the heater to natural draft on low low combustion
air flow.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
1.00E-04
Env:
1.00E-04
Initiating Cause
Intermittent Hazard
P&ID: 3165-1-50-055B
Loop: F-0898
None
Vulnerability Factors
Ignition Probability
None
Process Design
1.00E-04
1 1.00E-01
1.00E-02
Blast doors.
BPCS
None
PSV
None
Op Response
Com:
1 1.00E-01
Person Present
Independent
Protection
Layers
13.2
1.00E-01
Other
LOPA Ratio
Safety:
10.000
Env:
1.000
Com:
1.00
Recommendation
SIS No:
FSLL-898
SIS Function:
Interlock FSLL-898 that switches the heater to natural draft on low low combustion
air flow.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
1.00E-04
Env:
1.00E-04
Initiating Cause
Intermittent Hazard
P&ID: 3165-1-50-055B
Loop: F-0898
None
Vulnerability Factors
Ignition Probability
None
Process Design
1.00E-04
1 1.00E-01
1.00E-02
Blast Doors.
BPCS
None
PSV
None
Op Response
Com:
1 1.00E-01
Person Present
Independent
Protection
Layers
13.2
1.00E-01
Other
LOPA Ratio
Safety:
10.000
Env:
1.000
Com:
1.00
Recommendation
SIS No:
FSLL-898 or SSL-1042
SIS Function:
Interlock FSLL-898 that switches the heater to natural draft on low low combustion
air flow.
Interlock SSL-1042 that opens the stack damper on shutdown of the induced draft
fan.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
1.00E-04
Env:
1.00E-04
Com:
Initiating Cause
Intermittent Hazard
P&ID: 3165-1-50-055B
Loop: F-0898
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
13.2
Process Design
1 1.00E-01
1.00E-02
Blast Doors.
BPCS
None
PSV
None
Op Response
1.00E-04
1.00E-01
Other
LOPA Ratio
Safety:
10.000
Env:
1.000
Com:
1.00
Recommendation
SIS No:
FSLL-898
SIS Function:
Interlock FSLL-898 that switches the heater to natural draft on low low combustion
air flow.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Com:
1.00E-04
Intermittent Hazard
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
13.2
Process Design
1 1.00E-01
1.00E-02
Blast Doors.
BPCS
None
PSV
None
Op Response
1.00E-01
Other
LOPA Ratio
Safety:
10.000
Env:
1.000
Com:
1.00
Recommendation
SIS No:
FSLL-898
SIS Function:
Interlock FSLL-898 that switches the heater to natural draft on low low combustion
air flow.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Intermittent Hazard
Com:
1.00E-04
1 1.00E-01
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
13.8
Process Design
None
BPCS
None
PSV
None
Op Response
None
Other
None
LOPA Ratio
Safety:
Recommendation
0.001
Env:
0.001
Com:
0.00
SIS No:
PSLL-1399
SIS Function:
Interlock PSLL-1399 that isolates the fuel gas from the heater on low low fuel gas
pressure.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Intermittent Hazard
Com:
1.00E-04
1 1.00E-01
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
13.8
Process Design
None
BPCS
None
PSV
None
Op Response
None
Other
None
LOPA Ratio
Safety:
Recommendation
0.001
Env:
0.001
Com:
0.00
See LOPA Recommendation 10 to ensure that Interlock PSLL-1399 is designed for SIL
2.
SIS No:
PSLL-1399
SIS Function:
Interlock PSLL-1399 that isolates the fuel gas from the heater on low low fuel gas
pressure.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Intermittent Hazard
Com:
1.00E-04
1 1.00E-01
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
13.8
Process Design
None
BPCS
None
PSV
None
Op Response
None
Other
None
LOPA Ratio
Safety:
Recommendation
0.001
Env:
0.001
Com:
0.00
See LOPA Recommendation 10 to ensure that Interlock PSLL-1399 is designed for SIL
2.
SIS No:
PSLL-1399
SIS Function:
Interlock PSLL-1399 that isolates the fuel gas from the heater on low low fuel gas
pressure.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Com:
Intermittent Hazard
Vulnerability Factors
Ignition Probability
Process Design
None
BPCS
None
PSV
None
Op Response
None
Other
None
LOPA Ratio
Safety:
Recommendation
0.001
1.00E-04
None
Person Present
Independent
Protection
Layers
13.8
Env:
0.001
Com:
0.00
See LOPA Recommendation 10 to ensure that Interlock PSLL-1399 is designed for SIL
2.
SIS No:
PSLL-1399
SIS Function:
Interlock PSLL-1399 that isolates the fuel gas from the heater on low low fuel gas
pressure.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Intermittent Hazard
Com:
1.00E-04
1 1.00E-01
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
13.11
Process Design
1 1.00E-01
1.00E-02
Blast doors.
BPCS
None
PSV
None
Op Response
None
Pilots are fueled by Purchased Natural
Gas.
Other
LOPA Ratio
Safety:
Recommendation
1.000
Env:
None
0.100
Com:
0.10
11. Review the revalidation from MOC to change pilot gas to Purchased Natural Gas.
SIS No:
PSLL-1393
SIS Function:
Interlock PSLL-1393 that isolates the pilot gas from the heater on low-low pilot gas
pressure
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Com:
1.00E-04
Intermittent Hazard
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
13.11
Process Design
1 1.00E-01
Blast doors.
None
BPCS
None
PSV
None
Op Response
1.00E-01
Other
None
LOPA Ratio
Safety:
Recommendation
0.100
Env:
0.010
Com:
0.01
See LOPA Recommendation 11 to review the revalidation from MOC to change pilot
gas to Purchased Natural Gas.
SIS No:
PSLL-1393
SIS Function:
Interlock PSLL-1393 that isolates the pilot gas from the heater on low-low pilot gas
pressure
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Com:
1.00E-04
Intermittent Hazard
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
13.11
Process Design
1 1.00E-01
1.00E-02
Blast doors.
BPCS
None
PSV
None
Op Response
None
Other
None
LOPA Ratio
Safety:
Recommendation
1.000
Env:
0.100
Com:
0.10
See LOPA Recommendation 11 to review the revalidation from MOC to change pilot
gas to Purchased Natural Gas.
SIS No:
PSLL-1393
SIS Function:
Interlock PSLL-1393 that isolates the pilot gas from the heater on low-low pilot gas
pressure
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Com:
Intermittent Hazard
Vulnerability Factors
Ignition Probability
Process Design
1 1.00E-01
1.00E-02
Blast doors.
BPCS
None
PSV
None
Op Response
1.00E-01
Other
None
LOPA Ratio
Safety:
Recommendation
1.00E-04
None
Person Present
Independent
Protection
Layers
13.11
10.000
Env:
1.000
Com:
1.00
See LOPA Recommendation 11 to review the revalidation from MOC to change pilot
gas to Purchased Natural Gas.
SIS No:
PSLL-1393
SIS Function:
Interlock PSLL-1393 that isolates the pilot gas from the heater on low-low pilot gas
pressure
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Com:
1.00E-04
Intermittent Hazard
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
13.11
Process Design
1 1.00E-01
1.00E-02
Blast doors.
BPCS
None
PSV
None
Op Response
None
Other
None
LOPA Ratio
Safety:
Recommendation
1.000
Env:
0.100
Com:
0.10
See LOPA Recommendation 11 to review the revalidation from MOC to change pilot
gas to Purchased Natural Gas.
SIS No:
PSLL-1393
SIS Function:
Interlock PSLL-1393 that isolates the pilot gas from the heater on low-low pilot gas
pressure
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
1.00E-04
Env:
1.00E-04
Initiating Cause
Intermittent Hazard
P&ID: 3165-1-50-052A
Loop: F-0862
None
Vulnerability Factors
Ignition Probability
None
1.00E-04
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
Com:
1 1.00E-01
Person Present
Independent
Protection
Layers
19.2
1.00E-01
Other
LOPA Ratio
Safety:
Recommendation
0.100
Env:
0.010
Com:
0.01
12. Ensure that interlock PSL-837 or SSL-1294 are designed for SIL 1.
SIS No:
SIS Function:
Interlock PSL-837 that start the spare combustion air blower fan on low
combustion air pressure.
Interlock SSL-1294 that shuts down the heater on shutdown of the induced draft
fan.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
1.00E-04
Env:
1.00E-04
Initiating Cause
Intermittent Hazard
P&ID: 3165-1-50-052A
Loop: F-0862
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
19.2
1.00E-04
1 1.00E-01
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
Com:
1.00E-01
Other
LOPA Ratio
Safety:
Recommendation
0.100
Env:
0.010
Com:
0.01
SIS No:
SIS Function:
Interlock PSL-837 that start the spare combustion air blower fan on low
combustion air pressure.
Interlock SSL-1294 that shuts down the heater on shutdown of the induced draft
fan.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Com:
Intermittent Hazard
Vulnerability Factors
Ignition Probability
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
1.00E-04
None
Person Present
Independent
Protection
Layers
19.2
1.00E-01
Other
LOPA Ratio
Safety:
Recommendation
0.100
Env:
0.010
Com:
0.01
SIS No:
SIS Function:
Interlock PSL-837 that start the spare combustion air blower fan on low
combustion air pressure.
Interlock SSL-1294 that shuts down the heater on shutdown of the induced draft
fan.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
1.00E-04
Env:
1.00E-04
Com:
Initiating Cause
Intermittent Hazard
P&ID: 3165-1-50-052A
Loop: F-0862
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
19.2
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
1.00E-04
1.00E-01
Other
LOPA Ratio
Safety:
Recommendation
0.100
Env:
0.010
Com:
0.01
SIS No:
SIS Function:
Interlock PSL-837 that start the spare combustion air blower fan on low
combustion air pressure.
Interlock SSL-1294 that shuts down the heater on shutdown of the induced draft
fan.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Com:
1.00E-04
Intermittent Hazard
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
19.2
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
1.00E-01
Other
LOPA Ratio
Safety:
Recommendation
0.100
Env:
0.010
Com:
0.01
SIS No:
SIS Function:
Interlock PSL-837 that start the spare combustion air blower fan on low
combustion air pressure.
Interlock SSL-1294 that shuts down the heater on shutdown of the induced draft
fan.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
1.00E-04
Env:
1.00E-04
Initiating Cause
Intermittent Hazard
P&ID: 3165-1-50-052A
Loop: F-0858
None
Vulnerability Factors
Ignition Probability
None
1.00E-04
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
Com:
1 1.00E-01
Person Present
Independent
Protection
Layers
19.2
1.00E-01
Other
LOPA Ratio
Safety:
Recommendation
0.100
Env:
0.010
Com:
0.01
SIS No:
SIS Function:
Interlock PSL-837 starts the spare combustion air blower fan on low combustion
air pressure.
Interlock SSL-1294 shuts down the heater on shutdown of the induced draft fan.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Intermittent Hazard
Com:
1.00E-04
1 1.00E-01
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
19.8
Process Design
1 1.00E-01
1.00E-02
Blast doors.
BPCS
None
PSV
None
Op Response
None
Other
LOPA Ratio
None
Safety:
Recommendation
1.000
Env:
0.100
Com:
0.10
13. Ensure that pressure indication PI-868 with low pressure alarm is on a routine
testing schedule.
SIS No:
PSLL-1732
SIS Function:
Interlock PSLL-1732 that isolates the fuel gas from the heater on low-low fuel gas
pressure.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Intermittent Hazard
Com:
1.00E-04
1 1.00E-01
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
19.8
Process Design
1 1.00E-01
None
Blast doors.
BPCS
None
PSV
None
Op Response
None
Other
LOPA Ratio
None
Safety:
Recommendation
0.010
Env:
0.001
Com:
0.00
See LOPA Recommendation 13 to ensure that pressure indication PI-868 with low
pressure alarm is on a routine testing schedule.
SIS No:
PSLL-1732
SIS Function:
Interlock PSLL-1732 that isolates the fuel gas from the heater on low-low fuel gas
pressure.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Com:
Intermittent Hazard
Vulnerability Factors
Ignition Probability
Process Design
1 1.00E-01
1.00E-02
Blast doors.
BPCS
None
PSV
None
Op Response
None
None
Other
LOPA Ratio
1.00E-04
None
Person Present
Independent
Protection
Layers
19.8
Safety:
Recommendation
1.000
Env:
0.100
Com:
0.10
See LOPA Recommendation 13 to ensure that pressure indication PI-868 with low
pressure alarm is on a routine testing schedule.
SIS No:
PSLL-1732
SIS Function:
Interlock PSLL-1732 that isolates the fuel gas from the heater on low-low fuel gas
pressure.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Com:
1.00E-04
Intermittent Hazard
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
19.11
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
None
Other
LOPA Ratio
None
Safety:
Recommendation
0.010
Env:
0.001
Com:
0.00
See LOPA Recommendation 11 to review the revalidation from MOC to change pilot
gas to Purchased Natural Gas.
SIS No:
PSLL-1724
SIS Function:
Interlock PSLL-1724 that isolates the pilot gas from the heater on low-low pilot gas
pressure.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Com:
1.00E-04
Intermittent Hazard
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
19.11
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
None
Other
LOPA Ratio
None
Safety:
Recommendation
0.010
Env:
0.001
Com:
0.00
See LOPA Recommendation 11 to review the revalidation from MOC to change pilot
gas to Purchased Natural Gas.
SIS No:
PSLL-1732
SIS Function:
Interlock PSLL-1732 that isolates the fuel gas from the heater on low-low fuel gas
pressure.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Com:
Intermittent Hazard
Vulnerability Factors
Ignition Probability
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
Other
LOPA Ratio
1.00E-04
None
Person Present
Independent
Protection
Layers
19.11
None
None
Safety:
Recommendation
0.010
Env:
0.001
Com:
0.00
See LOPA Recommendation 11 to review the revalidation from MOC to change pilot
gas to Purchased Natural Gas.
SIS No:
PSLL-1732
SIS Function:
Interlock PSLL-1732 that isolates the fuel gas from the heater on low-low fuel gas
pressure.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Com:
1.00E-04
Intermittent Hazard
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
19.11
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
None
Other
LOPA Ratio
None
Safety:
Recommendation
0.010
Env:
0.001
Com:
0.00
See LOPA Recommendation 11 to review the revalidation from MOC to change pilot
gas to Purchased Natural Gas.
SIS No:
PSLL-1732
SIS Function:
Interlock PSLL-1732 that isolates the fuel gas from the heater on low-low fuel gas
pressure.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Com:
1.00E-04
Intermittent Hazard
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
19.11
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
None
Other
LOPA Ratio
None
Safety:
Recommendation
0.010
Env:
0.001
Com:
0.00
See LOPA Recommendation 11 to review the revalidation from MOC to change pilot
gas to Purchased Natural Gas.
SIS No:
PSLL-1732
SIS Function:
Interlock PSLL-1732 that isolates the fuel gas from the heater on low-low fuel gas
pressure.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Intermittent Hazard
Com:
1.00E-04
1 1.00E-01
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
19.11
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
None
Other
LOPA Ratio
None
Safety:
Recommendation
0.010
Env:
0.001
Com:
0.00
See LOPA Recommendation 11 to review the revalidation from MOC to change pilot
gas to Purchased Natural Gas.
SIS No:
PSLL-1732
SIS Function:
Interlock PSLL-1732 that isolates the fuel gas from the heater on low-low fuel gas
pressure.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Intermittent Hazard
Com:
1.00E-04
1 1.00E-01
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
19.11
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
None
Other
LOPA Ratio
None
Safety:
Recommendation
0.010
Env:
0.001
Com:
0.00
See LOPA Recommendation 11 to review the revalidation from MOC to change pilot
gas to Purchased Natural Gas.
SIS No:
PSLL-1732
SIS Function:
Interlock PSLL-1732 that isolates the fuel gas from the heater on low-low fuel gas
pressure.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
1.00E-04
Env:
1.00E-04
Initiating Cause
Intermittent Hazard
P&ID: 3165-1-50-052A
Loop: F-0862
None
Vulnerability Factors
Ignition Probability
None
Process Design
1.00E-04
1 1.00E-01
1.00E-02
Blast doors.
BPCS
None
PSV
None
Op Response
Com:
1 1.00E-01
Person Present
Independent
Protection
Layers
21.2
1.00E-01
Other
LOPA Ratio
Safety:
10.000
Env:
1.000
Com:
1.00
Recommendation
SIS No:
SIS Function:
Interlock PSL-837 that start the spare combustion air blower fan on low
combustion air pressure.
Interlock SSL-1294 that shuts down the heater on shutdown of the induced draft
fan.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Com:
Intermittent Hazard
Vulnerability Factors
Ignition Probability
Process Design
1 1.00E-01
1.00E-02
Blast doors.
BPCS
None
PSV
None
Op Response
1.00E-04
None
Person Present
Independent
Protection
Layers
21.2
1.00E-01
Other
LOPA Ratio
Safety:
10.000
Env:
1.000
Com:
1.00
Recommendation
SIS No:
SIS Function:
Interlock PSL-837 starts the spare combustion air blower fan on low combustion
air pressure.
Interlock SSL-1294 shuts down the heater on shutdown of the induced draft fan.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
1.00E-04
Env:
1.00E-04
Com:
Initiating Cause
Intermittent Hazard
P&ID: 3165-1-50-052A
Loop: F-0858
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
21.2
Process Design
1 1.00E-01
1.00E-02
Blast doors.
BPCS
None
PSV
None
Op Response
1.00E-04
1.00E-01
Other
LOPA Ratio
Safety:
10.000
Env:
1.000
Com:
1.00
Recommendation
SIS No:
SIS Function:
Interlock PSL-837 starts the spare combustion air blower fan on low combustion
air pressure.
Interlock SSL-1294 shuts down the heater on shutdown of the induced draft fan.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Intermittent Hazard
Com:
1.00E-04
1 1.00E-01
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
21.2
Process Design
1 1.00E-01
Blast doors.
1.00E-02
BPCS
None
PSV
None
Op Response
1.00E-01
Other
LOPA Ratio
Safety:
10.000
Env:
1.000
Com:
1.00
Recommendation
SIS No:
SIS Function:
Interlock PSL-837 starts the spare combustion air blower fan on low combustion
air pressure.
Interlock SSL-1294 shuts down the heater on shutdown of the induced draft fan.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Com:
1.00E-04
1 1.00E-01
Intermittent Hazard
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
21.2
Process Design
1 1.00E-01
Blast doors.
1.00E-02
BPCS
None
PSV
None
Op Response
1.00E-01
Other
LOPA Ratio
Safety:
10.000
Env:
1.000
Com:
1.00
Recommendation
SIS No:
SIS Function:
Interlock PSL-837 starts the spare combustion air blower fan on low combustion
air pressure.
Interlock SSL-1294 shuts down the heater on shutdown of the induced draft fan.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
1.00E-04
Env:
1.00E-04
Com:
Initiating Cause
Intermittent Hazard
P&ID: 3165-1-50-052A
Loop: F-0858
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
21.2
Process Design
1 1.00E-01
1.00E-02
Blast doors.
BPCS
None
PSV
None
Op Response
1.00E-04
1.00E-01
Other
LOPA Ratio
Safety:
10.000
Env:
1.000
Com:
1.00
Recommendation
SIS No:
SIS Function:
Interlock PSL-837 that start the spare combustion air blower fan on low
combustion air pressure.
Interlock SSL-1294 that shuts down the heater on shutdown of the induced draft
fan.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
1.00E-04
Env:
1.00E-04
Com:
Initiating Cause
Intermittent Hazard
P&ID: 3165-1-50-052A
Loop: F-0862
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
21.2
Process Design
1 1.00E-01
1.00E-02
Blast doors.
BPCS
None
PSV
None
Op Response
1.00E-04
1.00E-01
Other
LOPA Ratio
Safety:
10.000
Env:
1.000
Com:
1.00
Recommendation
SIS No:
SIS Function:
Interlock PSL-837 that start the spare combustion air blower fan on low
combustion air pressure.
Interlock SSL-1294 that shuts down the heater on shutdown of the induced draft
fan.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
1.00E-04
Env:
1.00E-04
Initiating Cause
Intermittent Hazard
P&ID: 3165-1-50-052A
Loop: F-0858
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
21.2
Process Design
1.00E-04
1 1.00E-01
1 1.00E-01
1.00E-02
Blast doors.
BPCS
None
PSV
None
Op Response
Com:
1.00E-01
Other
LOPA Ratio
Safety:
10.000
Env:
1.000
Com:
1.00
Recommendation
SIS No:
PSL-837
SIS Function:
Interlock PSL-837 that starts the spare combustion air blower fan on low
combustion air pressure.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
1.00E-04
Env:
1.00E-04
Initiating Cause
Intermittent Hazard
P&ID: 3165-1-50-052A
Loop: F-0858
None
Vulnerability Factors
Ignition Probability
None
Process Design
1.00E-04
1 1.00E-01
1.00E-02
Blast doors.
BPCS
None
PSV
None
Op Response
Com:
1 1.00E-01
Person Present
Independent
Protection
Layers
21.2
1.00E-01
Other
LOPA Ratio
Safety:
10.000
Env:
1.000
Com:
1.00
Recommendation
SIS No:
SIS Function:
Interlock PSL-837 starts the spare combustion air blower fan on low combustion
air pressure.
Interlock SSL-1294 that shuts down the heater on shutdown of the induced draft
fan.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Intermittent Hazard
Com:
1.00E-04
1 1.00E-01
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
21.8
Process Design
1 1.00E-01
1.00E-02
Blast doors.
BPCS
None
PSV
None
Op Response
1.00E-01
Other
LOPA Ratio
Safety:
10.000
Env:
1.000
Com:
1.00
Recommendation
SIS No:
PSLL-1731
SIS Function:
Interlock PSLL-1731 that isolates the fuel gas from the heater on low-low fuel gas
pressure.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Com:
1.00E-04
Intermittent Hazard
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
21.8
Process Design
1 1.00E-01
1.00E-02
Blast doors.
BPCS
None
PSV
None
Op Response
1.00E-01
Other
LOPA Ratio
Safety:
10.000
Env:
1.000
Com:
1.00
Recommendation
SIS No:
SIS Function:
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Com:
Intermittent Hazard
Vulnerability Factors
Ignition Probability
Process Design
1 1.00E-01
1.00E-02
Blast doors.
BPCS
None
PSV
None
Op Response
1.00E-04
None
Person Present
Independent
Protection
Layers
21.8
1.00E-01
Other
LOPA Ratio
Safety:
10.000
Env:
1.000
Com:
1.00
Recommendation
SIS No:
SIS Function:
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Intermittent Hazard
Com:
1.00E-04
1 1.00E-01
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
21.11
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
None
Other
LOPA Ratio
None
Safety:
Recommendation
0.010
Env:
0.001
Com:
0.00
See LOPA Recommendation 11 to review the revalidation from MOC to change pilot
gas to Purchased Natural Gas.
SIS No:
PSLL-1724
SIS Function:
Interlock PSLL-1724 that isolates the pilot gas from the heater on low-low pilot gas
pressure.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Com:
1.00E-04
Intermittent Hazard
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
21.11
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
None
Other
LOPA Ratio
None
Safety:
Recommendation
0.010
Env:
0.001
Com:
0.00
See LOPA Recommendation 11 to review the revalidation from MOC to change pilot
gas to Purchased Natural Gas.
SIS No:
PSLL-1724
SIS Function:
Interlock PSLL-1724 that isolates the pilot gas from the heater on low-low pilot gas
pressure.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Com:
Intermittent Hazard
Vulnerability Factors
Ignition Probability
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
Other
LOPA Ratio
1.00E-04
None
Person Present
Independent
Protection
Layers
21.11
None
None
Safety:
Recommendation
0.010
Env:
0.001
Com:
0.00
See LOPA Recommendation 11 to review the revalidation from MOC to change pilot
gas to Purchased Natural Gas.
SIS No:
PSLL-1724
SIS Function:
Interlock PSLL-1724 that isolates the pilot gas from the heater on low-low pilot gas
pressure.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Com:
1.00E-04
Intermittent Hazard
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
21.11
Process Design
None
BPCS
None
PSV
None
Op Response
None
Other
LOPA Ratio
None
Safety:
Recommendation
0.001
Env:
0.001
Com:
0.00
See LOPA Recommendation 11 to review the revalidation from MOC to change pilot
gas to Purchased Natural Gas.
SIS No:
PSLL-1724
SIS Function:
Interlock PSLL-1724 that isolates the pilot gas from the heater on low-low pilot gas
pressure.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Potential high firebox pressure if the induced draft fan trips or the
stack damper is closed. Burner/pilot flameout.
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Com:
Intermittent Hazard
Vulnerability Factors
Ignition Probability
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
1.00E-04
None
Person Present
Independent
Protection
Layers
23.2
1.00E-01
None
Safety:
Recommendation
0.100
Env:
0.010
Com:
0.01
SIS No:
SIS Function:
Interlock PSL-837 starts the spare combustion air blower fan on low combustion
air pressure.
Interlock SSL-1294 shuts down the heater on shutdown of the induced draft fan.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Potential high firebox pressure if the induced draft fan trips or the
stack damper is closed. Burner/pilot flameout.
Target Frequency
Safety:
1.00E-04
Env:
1.00E-04
Com:
Initiating Cause
Intermittent Hazard
P&ID: 3165-1-50-051B
Loop: F-0840
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
23.2
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
1.00E-04
1.00E-01
Other
LOPA Ratio
Safety:
Recommendation
0.100
Env:
0.010
Com:
0.01
SIS No:
SIS Function:
Interlock PSL-837 starts the spare combustion air blower fan on low combustion
air pressure.
Interlock SSL-1294 shuts down the heater on shutdown of the induced draft fan.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Potential high firebox pressure if the induced draft fan trips or the
stack damper is closed. Burner/pilot flameout.
Target Frequency
Safety:
1.00E-04
Env:
1.00E-04
Com:
Initiating Cause
Intermittent Hazard
P&ID: 3165-1-50-051B
Loop: F-0840
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
23.2
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
1.00E-04
1.00E-01
Other
LOPA Ratio
Safety:
Recommendation
0.100
Env:
0.010
Com:
0.01
SIS No:
SIS Function:
Interlock PSL-837 starts the spare combustion air blower fan on low combustion
air pressure.
Interlock SSL-1294 shuts down the heater on shutdown of the induced draft fan.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Potential high firebox pressure if the induced draft fan trips or the
stack damper is closed. Burner/pilot flameout.
Target Frequency
Safety:
1.00E-04
Env:
1.00E-04
Initiating Cause
Intermittent Hazard
P&ID: 3165-1-50-051B
Loop: F-0840
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
23.2
1.00E-04
1 1.00E-01
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
Com:
1.00E-01
None
Safety:
Recommendation
0.100
Env:
0.010
Com:
0.01
SIS No:
SIS Function:
Interlock PSL-837 starts the spare combustion air blower fan on low combustion
air pressure.
Interlock SSL-1294 shuts down the heater on shutdown of the induced draft fan.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Potential high firebox pressure if the induced draft fan trips or the
stack damper is closed. Burner/pilot flameout.
Target Frequency
Safety:
1.00E-04
Env:
1.00E-04
Initiating Cause
Intermittent Hazard
P&ID: 3165-1-50-051B
Loop: F-0840
None
Vulnerability Factors
Ignition Probability
None
1.00E-04
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
Com:
1 1.00E-01
Person Present
Independent
Protection
Layers
23.2
1.00E-01
None
Safety:
Recommendation
0.100
Env:
0.010
Com:
0.01
SIS No:
SIS Function:
Interlock PSL-837 starts the spare combustion air blower fan on low combustion
air pressure.
Interlock SSL-1294 shuts down the heater on shutdown of the induced draft fan.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Potential high firebox pressure if the induced draft fan trips or the
stack damper is closed. Burner/pilot flameout.
Target Frequency
Safety:
1.00E-04
Env:
1.00E-04
Initiating Cause
Intermittent Hazard
P&ID: 3165-1-50-051B
Loop: F-0840
None
Vulnerability Factors
Ignition Probability
None
1.00E-04
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
Com:
1 1.00E-01
Person Present
Independent
Protection
Layers
23.2
1.00E-01
None
Safety:
Recommendation
0.100
Env:
0.010
Com:
0.01
SIS No:
SIS Function:
Interlock PSL-837 starts the spare combustion air blower fan on low combustion
air pressure.
Interlock SSL-1294 shuts down the heater on shutdown of the induced draft fan.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Intermittent Hazard
Com:
1.00E-04
1 1.00E-01
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
23.8
Process Design
1 1.00E-01
1.00E-02
Blast doors.
BPCS
None
PSV
None
Op Response
1.00E-01
Other
LOPA Ratio
Safety:
10.000
Env:
1.000
Com:
1.00
Recommendation
SIS No:
SIS Function:
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Intermittent Hazard
Com:
1.00E-04
1 1.00E-01
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
23.8
Process Design
1 1.00E-01
1.00E-02
Blast doors.
BPCS
None
PSV
None
Op Response
1.00E-01
Other
LOPA Ratio
Safety:
10.000
Env:
1.000
Com:
1.00
Recommendation
SIS No:
PSLL-1729
SIS Function:
Interlock PSLL-1729 that isolates the fuel gas from the heater on low-low fuel gas
pressure.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Com:
Intermittent Hazard
Vulnerability Factors
Ignition Probability
Process Design
1 1.00E-01
1.00E-02
Blast doors.
BPCS
None
PSV
None
Op Response
1.00E-04
None
Person Present
Independent
Protection
Layers
23.8
1.00E-01
Other
LOPA Ratio
Safety:
10.000
Env:
1.000
Com:
1.00
Recommendation
SIS No:
SIS Function:
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Intermittent Hazard
Ignition Probability
1 1.00E-01
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
Other
Recommendation
1.00E-04
None
Person Present
LOPA Ratio
Com:
None
Vulnerability Factors
Independent
Protection
Layers
23.11
1.00E-01
None
Safety:
0.100
Env:
0.010
Com:
0.01
See LOPA Recommendation 11 to review the revalidation from MOC to change pilot
gas to Purchased Natural Gas.
SIS No:
SIS Function:
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Com:
1.00E-04
Intermittent Hazard
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
23.11
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
None
Other
LOPA Ratio
1.00E-01
Safety:
Recommendation
0.100
Env:
0.010
Com:
0.01
See LOPA Recommendation 11 to review the revalidation from MOC to change pilot
gas to Purchased Natural Gas.
SIS No:
PSLL-1724
SIS Function:
Interlock PSLL-1724 that isolates the pilot gas form the heater on low-low pilot gas
pressure.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Intermittent Hazard
Ignition Probability
1 1.00E-01
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
1.00E-01
None
Other
Recommendation
1.00E-04
None
Person Present
LOPA Ratio
Com:
None
Vulnerability Factors
Independent
Protection
Layers
23.11
Safety:
0.100
Env:
0.010
Com:
0.01
See LOPA Recommendation 11 to review the revalidation from MOC to change pilot
gas to Purchased Natural Gas.
SIS No:
SIS Function:
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Com:
Intermittent Hazard
Vulnerability Factors
Ignition Probability
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
Other
LOPA Ratio
Recommendation
1.00E-04
None
Person Present
Independent
Protection
Layers
23.11
1.00E-01
None
Safety:
0.100
Env:
0.010
Com:
0.01
See LOPA Recommendation 11 to review the revalidation from MOC to change pilot
gas to Purchased Natural Gas.
SIS No:
SIS Function:
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Com:
1.00E-04
Intermittent Hazard
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
23.11
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
1.00E-01
Other
LOPA Ratio
Recommendation
Safety:
0.100
Env:
0.010
Com:
0.01
See LOPA Recommendation 11 to review the revalidation from MOC to change pilot
gas to Purchased Natural Gas.
SIS No:
SIS Function:
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Potential high firebox pressure if the induced draft fan trips or the
stack damper is closed. Burner/pilot flameout.
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Com:
Intermittent Hazard
Vulnerability Factors
Ignition Probability
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
1.00E-04
None
Person Present
Independent
Protection
Layers
25.2
1.00E-01
Other
LOPA Ratio
Safety:
Recommendation
0.100
Env:
0.010
Com:
0.01
SIS No:
SIS Function:
Interlock PSL-837 starts the spare combustion air blower on low combustion air
pressure.
Interlock SSL-1294 shuts down the heater on shutdown of the induced draft fan.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Potential high firebox pressure if the induced draft fan trips or the
stack damper is closed. Burner/pilot flameout.
Target Frequency
Safety:
1.00E-04
Env:
1.00E-04
Com:
Initiating Cause
Intermittent Hazard
P&ID: 3165-1-50-051-B
Loop: F-0850
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
25.2
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
1.00E-04
1.00E-01
Other
LOPA Ratio
Safety:
Recommendation
0.100
Env:
0.010
Com:
0.01
SIS No:
SIS Function:
Interlock PSL-837 starts the spare combustion air blower on low combustion air
pressure.
Interlock SSL-1294 shuts down the heater on shutdown of the induced draft fan.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Potential high firebox pressure if the induced draft fan trips or the
stack damper is closed. Burner/pilot flameout.
Target Frequency
Safety:
1.00E-04
Env:
1.00E-04
Com:
Initiating Cause
Intermittent Hazard
P&ID: 3165-1-50-051-B
Loop: F-0850
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
25.2
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
1.00E-04
1.00E-01
Other
LOPA Ratio
Safety:
Recommendation
0.100
Env:
0.010
Com:
0.01
SIS No:
SIS Function:
Interlock PSL-837 starts the spare combustion air blower on low combustion air
pressure.
Interlock SSL-1294 shuts down the heater on shutdown of the induced draft fan.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Potential high firebox pressure if the induced draft fan trips or the
stack damper is closed. Burner/pilot flameout.
Target Frequency
Safety:
1.00E-04
Env:
1.00E-04
Initiating Cause
Intermittent Hazard
P&ID: 3165-1-50-051-B
Loop: F-0850
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
25.2
1.00E-04
1 1.00E-01
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
Com:
1.00E-01
Other
LOPA Ratio
Safety:
Recommendation
0.100
Env:
0.010
Com:
0.01
SIS No:
SIS Function:
Interlock PSL-837 starts the spare combustion air blower on low combustion air
pressure.
Interlock SSL-1294 shuts down the heater on shutdown of the induced draft fan.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Potential high firebox pressure if the induced draft fan trips or the
stack damper is closed. Burner/pilot flameout.
Target Frequency
Safety:
1.00E-04
Env:
1.00E-04
Initiating Cause
Intermittent Hazard
P&ID: 3165-1-50-051-B
Loop: F-0850
None
Vulnerability Factors
Ignition Probability
None
1.00E-04
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
Com:
1 1.00E-01
Person Present
Independent
Protection
Layers
25.2
1.00E-01
Other
LOPA Ratio
Safety:
Recommendation
0.100
Env:
0.010
Com:
0.01
SIS No:
SIS Function:
Interlock PSL-837 starts the spare combustion air blower on low combustion air
pressure.
Interlock SSL-1294 shuts down the heater on shutdown of the induced draft fan.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Potential high firebox pressure if the induced draft fan trips or the
stack damper is closed. Burner/pilot flameout.
Target Frequency
Safety:
1.00E-04
Env:
1.00E-04
Initiating Cause
Intermittent Hazard
P&ID: 3165-1-50-051-B
Loop: F-0850
None
Vulnerability Factors
Ignition Probability
None
1.00E-04
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
Com:
1 1.00E-01
Person Present
Independent
Protection
Layers
25.2
1.00E-01
Other
LOPA Ratio
Safety:
Recommendation
0.100
Env:
0.010
Com:
0.01
SIS No:
SIS Function:
Interlock PSL-837 starts the spare combustion air blower on low combustion air
pressure.
Interlock SSL-1294 shuts down the heater on shutdown of the induced draft fan.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Intermittent Hazard
Com:
1.00E-04
1 1.00E-01
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
25.8
Process Design
1 1.00E-01
1.00E-02
Blast doors.
BPCS
None
PSV
None
Op Response
None
Other
LOPA Ratio
1.00E-01
Safety:
10.000
Env:
1.000
Com:
1.00
Recommendation
SIS No:
PSLL-1730
SIS Function:
Interlock PSLL-1730 that isolates the fuel gas from the heaters on low-low fuel gas
pressure.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Intermittent Hazard
Com:
1.00E-04
1 1.00E-01
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
25.8
Process Design
1 1.00E-01
1.00E-02
Blast doors.
BPCS
None
PSV
None
Op Response
None
Other
LOPA Ratio
1.00E-01
Safety:
10.000
Env:
1.000
Com:
1.00
Recommendation
SIS No:
PSLL-1730
SIS Function:
Interlock PSLL-1730 that isolates the fuel gas from the heaters on low-low fuel gas
pressure.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Com:
Intermittent Hazard
Vulnerability Factors
Ignition Probability
Process Design
1 1.00E-01
1.00E-02
Blast doors.
BPCS
None
PSV
None
Op Response
1.00E-01
None
Other
LOPA Ratio
1.00E-04
None
Person Present
Independent
Protection
Layers
25.8
Safety:
10.000
Env:
1.000
Com:
1.00
Recommendation
SIS No:
PSLL-1730
SIS Function:
Interlock PSLL-1730 that isolates the fuel gas from the heaters on low-low fuel gas
pressure.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Intermittent Hazard
Ignition Probability
1 1.00E-01
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
1.00E-01
None
Other
Recommendation
1.00E-04
None
Person Present
LOPA Ratio
Com:
None
Vulnerability Factors
Independent
Protection
Layers
25.11
Safety:
0.100
Env:
0.010
Com:
0.01
See LOPA Recommendation 11 to review the revalidation from MOC to change pilot
gas to Purchased Natural Gas.
SIS No:
SIS Function:
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Com:
1.00E-04
Intermittent Hazard
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
25.11
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
None
Other
LOPA Ratio
Recommendation
1.00E-01
Safety:
0.100
Env:
0.010
Com:
0.01
See LOPA Recommendation 11 to review the revalidation from MOC to change pilot
gas to Purchased Natural Gas.
SIS No:
SIS Function:
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Com:
1.00E-04
Intermittent Hazard
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
25.11
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
None
Other
LOPA Ratio
1.00E-01
Safety:
Recommendation
0.100
Env:
0.010
Com:
0.01
See LOPA Recommendation 11 to review the revalidation from MOC to change pilot
gas to Purchased Natural Gas.
SIS No:
PSLL-1724
SIS Function:
Interlock PSLL-1724 that isolates the pilot gas from the heater on low-low pilot gas
pressure.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Com:
Intermittent Hazard
Vulnerability Factors
Ignition Probability
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
Other
LOPA Ratio
Recommendation
1.00E-04
None
Person Present
Independent
Protection
Layers
25.11
1.00E-01
None
Safety:
0.100
Env:
0.010
Com:
0.01
See LOPA Recommendation 11 to review the revalidation from MOC to change pilot
gas to Purchased Natural Gas.
SIS No:
SIS Function:
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Com:
1.00E-04
Intermittent Hazard
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
25.11
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
None
Other
LOPA Ratio
Recommendation
None
Safety:
0.010
Env:
0.001
Com:
0.00
See LOPA Recommendation 11 to review the revalidation from MOC to change pilot
gas to Purchased Natural Gas.
SIS No:
SIS Function:
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Intermittent Hazard
Ignition Probability
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
1.00E-01
None
Other
Recommendation
1.00E-04
None
Person Present
LOPA Ratio
Com:
None
Vulnerability Factors
Independent
Protection
Layers
25.11
Safety:
0.010
Env:
0.010
Com:
0.01
See LOPA Recommendation 11 to review the revalidation from MOC to change pilot
gas to Purchased Natural Gas.
SIS No:
SIS Function:
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-05
Env:
1.00E-04
Com:
1.00E-05
Intermittent Hazard
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
28.1
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
None
None
Other
LOPA Ratio
Safety:
Recommendation
0.001
Env:
0.001
Com:
0.00
14. Ensure that high level alarm LH-257 is on a routine testing schedule.
15. Ensure that Interlock LSHH-256 that shuts down the compressors on high high
level is designed for SIL 1.
16. Evaluate if Interlock LSHH-256 should be designed for Environmental EIL 2 and
Commercial CIL 3.
SIS No:
LSHH-256
SIS Function:
Interlock LSHH-256 that shuts down the compressors on high high level.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-05
Env:
1.00E-04
Com:
1.00E-05
1 1.00E-01
Intermittent Hazard
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
28.1
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
None
None
Other
LOPA Ratio
Safety:
Recommendation
0.001
Env:
0.001
Com:
0.00
See LOPA Recommendation 14 to ensure that high level alarm LH-257 is on a routine
testing schedule.
See LOPA Recommendation 15 ensure that Interlock LSHH-256 that shuts down the
compressors on high high level is designed for SIL 2.
See LOPA Recommendation 16 to evaluate if Interlock LSHH-256 should be designed
for Environmental EIL 2 and Commercial CIL 2.
SIS No:
LHH-256; LSHH-256
SIS Function:
High-high level alarm LHH-256 and interlock LSHH-256 that shuts down the
compressors on high-high level.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
28.1
Target Frequency
Safety:
Initiating Cause
1.00E-05
Env:
1.00E-04
Com:
1.00E-05
Intermittent Hazard
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
None
None
Other
LOPA Ratio
Safety:
Recommendation
0.000
Env:
0.000
Com:
0.00
See LOPA Recommendation 14 to ensure that high level alarm LH-257 is on a routine
testing schedule.
See LOPA Recommendation 15 ensure that Interlock LSHH-256 that shuts down the
compressors on high high level is designed for SIL 2.
See LOPA Recommendation 16 to evaluate if Interlock LSHH-256 should be designed
for Environmental EIL 2 and Commercial CIL 2.
SIS No:
LSHH-256
SIS Function:
High-high level alarm LHH-256 and interlock LSHH-256 that shuts down the
compressors on high-high level.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
1.00E-04
Env:
1.00E-04
Com:
Initiating Cause
1 1.00E-01
Intermittent Hazard
P&ID: 3165-1-50-013B
Loop: F-0106
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
29.2
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
None
Other
None
LOPA Ratio
Safety:
Recommendation
0.010
1.00E-04
Env:
0.001
Com:
0.00
SIS No:
FSLL-106
SIS Function:
Interlock FSLL-106 that isolates the fuel gas to the charge heater and interheaters
on low low recycle hydrogen flow.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
1.00E-04
Env:
1.00E-04
Initiating Cause
Intermittent Hazard
P&ID: 3165-1-50-013B
Loop: F-0106
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
29.2
1 1.00E-01
None
BPCS
None
PSV
None
Op Response
None
Other
None
Safety:
Recommendation
0.010
1.00E-04
1 1.00E-01
Process Design
LOPA Ratio
Com:
Env:
0.001
Com:
0.00
See LOPA Recommendation 17 to ensure that interlock FSLL-106 is designed for SIL
1.
SIS No:
FSLL-106
SIS Function:
Interlock FSLL-106 that isolates the fuel gas to the charge heater and interheaters
on low low recycle hydrogen flow.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
1.00E-04
Env:
1.00E-04
Initiating Cause
Intermittent Hazard
P&ID: 3165-1-50-013B
Loop: F-0106
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
29.2
1 1.00E-01
None
BPCS
None
PSV
None
Op Response
None
Other
None
Safety:
Recommendation
0.010
1.00E-04
1 1.00E-01
Process Design
LOPA Ratio
Com:
Env:
0.001
Com:
0.00
See LOPA Recommendation 17 to ensure that interlock FSLL-106 is designed for SIL
1.
SIS No:
FSLL-106
SIS Function:
Interlock FSLL-106 that isolates the fuel gas to the charge heater and interheaters
on low low recycle hydrogen flow.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-05
Env:
1.00E-04
Com:
1.00E-05
1 1.00E-01
Intermittent Hazard
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
30.9
1 1.00E-01
Process Design
None
BPCS
None
PSV-1157 or PSV-1150.
PSV
1.00E-02
Op Response
None
Other
None
LOPA Ratio
Safety:
Recommendation
0.100
Env:
0.100
Com:
0.01
18. Ensure that Interlock PDSHH-171 that shuts down compressor C-2A on high-high
differential pressure between the suction and discharge of the first-stage and/or
Interlock PDSHH-175 that shuts down compressor C2-B on high high differential
pressure between the suction and discharge of the first stage are designed for SIL 1.
SIS No:
PHH-171; PDSHH-171
SIS Function:
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-05
Env:
1.00E-04
Com:
1.00E-05
Intermittent Hazard
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
32.1
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
None
None
Safety:
Recommendation
0.001
Env:
0.001
Com:
0.00
SIS No:
LSHH-179
SIS Function:
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-05
Env:
1.00E-04
Com:
1.00E-05
1 1.00E-01
Intermittent Hazard
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
33.8
1 1.00E-01
Process Design
None
BPCS
None
PSV
1.00E-02
PSV-1156R or PSV-1149R.
Op Response
None
Other
None
LOPA Ratio
Safety:
Recommendation
0.100
Env:
0.100
Com:
0.01
22. Ensure that PDSHH-173 that shuts down compressor C-2A on high-high
differential pressure between the suction and discharge lines and/or PDSHH-177 that
shuts down compressor C-2B on high-high differential pressure between the suction
and discharge lines is designed for SIL 1.
SIS No:
PDSHH-173/177
SIS Function:
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
1.00E-04
Env:
1.00E-04
Com:
Initiating Cause
Intermittent Hazard
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
39.1
1 1.00E-01
None
Process Design
TDP Compressor Suction Drum (50C101) Level Control.
BPCS
1.00E-04
PSV
None
None
Op Response
None
None
Other
LOPA Ratio
Safety:
Recommendation
0.010
Env:
0.001
Com:
0.00
See LOPA Recommendation 25 to confirm the level alarm for the TDP Compressor
Suction Drum is independent of the level control valve and is on a routine testing
schedule.
See LOPA Recommendation 26 to ensure that LSH-180 high level alarm is on a
routine testing schedule.
SIS No:
LSHH-181
SIS Function:
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
1.00E-04
Env:
1.00E-04
Com:
Initiating Cause
Intermittent Hazard
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
39.1
1 1.00E-01
Process Design
None
TDP Compressor Suction Drum (50C101) Level Control.
BPCS
1.00E-04
None
None
PSV
Op Response
None
Other
LOPA Ratio
None
Safety:
Recommendation
0.010
Env:
0.001
Com:
0.00
25. Confirm the level alarm for the TDP Compressor Suction Drum is independent of
the level control valve and is on a routine testing schedule.
26. Ensure that LSH-180 high level alarm is on a routine testing schedule.
SIS No:
LSHH-181
SIS Function:
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
1.00E-04
Env:
1.00E-04
Com:
Initiating Cause
Intermittent Hazard
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
39.1
1 1.00E-01
None
Process Design
Unibon Compressor Suction Drum
(13C1A/B) Level Control.
BPCS
1.00E-04
PSV
None
None
Op Response
None
None
Other
LOPA Ratio
Safety:
Recommendation
0.010
Env:
0.001
Com:
0.00
See LOPA Recommendation 23 to confirm the level alarm for the Unibon Compressor
Suction Drum (13C1A/B) is independent of the level control valve and is on a routine
testing schedule.
See LOPA Recommendation 24 to ensure that LSH-180 high level alarm is on a
routine testing schedule.
SIS No:
LSHH-181
SIS Function:
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
1.00E-04
Env:
1.00E-04
Com:
Initiating Cause
1 1.00E-01
Intermittent Hazard
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
39.1
1 1.00E-01
Process Design
None
Unibon Compressor Suction Drum
(13C1A/B) Level Control.
BPCS
1.00E-04
None
None
PSV
Op Response
None
Other
LOPA Ratio
None
Safety:
Recommendation
0.010
Env:
0.001
Com:
0.00
23. Confirm the level alarm for the Unibon Compressor Suction Drum (13C1A/B) is
independent of the level control valve and is on a routine testing schedule.
24. Ensure that LSH-180 high level alarm is on a routine testing schedule.
SIS No:
LSHH-181
SIS Function:
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
1.00E-04
Env:
1.00E-04
Initiating Cause
Intermittent Hazard
P&ID:3165-1-50-021
Loop: F-0783, F-0784, F-0785, F-0786
None
Vulnerability Factors
Ignition Probability
None
None
BPCS
None
PSV
None
Op Response
None
Other
None
Safety:
Recommendation
0.010
1.00E-04
1 1.00E-01
Process Design
LOPA Ratio
Com:
1 1.00E-01
Person Present
Independent
Protection
Layers
49.2
Env:
0.001
Com:
0.00
27. Consider adding an additional alarm to indicate loss of hydrogen and hydrocarbon
flow to (H-5) on each pass and ensure it is on a routine testing schedule.
28. Ensure that interlocks FSLL-783/784/785/786 are designed for SIL 1.
SIS No:
FSLL-783/784/785/786
SIS Function:
Interlocks FSLL-783/784/785/786 isolate the flue gas from the charge heater,
interheaters, and depentanizer reboiler trim heater on low low flow.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
1.00E-04
Env:
1.00E-04
Initiating Cause
Intermittent Hazard
P&ID:3165-1-50-021
Loop: F-0783, F-0784, F-0785, F-0786
None
Vulnerability Factors
Ignition Probability
None
None
BPCS
None
PSV
None
Op Response
None
Other
None
Safety:
Recommendation
0.010
1.00E-04
1 1.00E-01
Process Design
LOPA Ratio
Com:
1 1.00E-01
Person Present
Independent
Protection
Layers
49.2
Env:
0.001
Com:
0.00
SIS No:
FSLL-783/784/785/786
SIS Function:
Interlocks FSLL-783/784/785/786 isolate the flue gas from the charge heater,
interheaters, and depentanizer reboiler trim heater on low low flow.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
1.00E-04
Env:
1.00E-04
Com:
Initiating Cause
1 1.00E-01
Intermittent Hazard
P&ID:3165-1-50-021
Loop: F-0783, F-0784, F-0785, F-0786
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
49.2
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
None
Other
None
LOPA Ratio
Safety:
Recommendation
0.010
1.00E-04
Env:
0.001
Com:
0.00
SIS No:
FSLL-783/784/785/78
SIS Function:
Interlocks FSLL-783/784/785/786 isolate the flue gas from the charge heater,
interheaters, and depentanizer reboiler trim heater on low low flow.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
1.00E-04
Env:
1.00E-04
Com:
Initiating Cause
Intermittent Hazard
P&ID:3165-1-50-021
Loop: F-0783, F-0784, F-0785, F-0786
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
49.2
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
None
Other
None
LOPA Ratio
Safety:
Recommendation
0.010
1.00E-04
Env:
0.001
Com:
0.00
SIS No:
FSLL-783/784/785/78
SIS Function:
Interlocks FSLL-783/784/785/786 isolate the flue gas from the charge heater,
interheaters, and depentanizer reboiler trim heater on low low flow.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
1.00E-04
Env:
1.00E-04
Initiating Cause
Intermittent Hazard
P&ID:3165-1-50-021
Loop: F-0783, F-0784, F-0785, F-0786
None
Vulnerability Factors
Ignition Probability
None
None
BPCS
None
PSV
None
Op Response
None
Other
None
Safety:
Recommendation
0.010
1.00E-04
1 1.00E-01
Process Design
LOPA Ratio
Com:
1 1.00E-01
Person Present
Independent
Protection
Layers
49.2
Env:
0.001
Com:
0.00
SIS No:
FSLL-783/784/785/78
SIS Function:
Interlocks FSLL-783/784/785/786 isolate the flue gas from the charge heater,
interheaters, and depentanizer reboiler trim heater on low low flow.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Com:
Intermittent Hazard
Vulnerability Factors
Ignition Probability
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
None
Other
None
LOPA Ratio
Safety:
Recommendation
0.010
1.00E-04
None
Person Present
Independent
Protection
Layers
49.2
Env:
0.001
Com:
0.00
SIS No:
FSLL-783/784/785/78
SIS Function:
Interlocks FSLL-783/784/785/786 isolate the flue gas from the charge heater,
interheaters, and depentanizer reboiler trim heater on low low flow.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Com:
1.00E-04
1 1.00E-01
Intermittent Hazard
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
50.8
Process Design
1 1.00E-01
Blast doors.
1.00E-02
BPCS
None
PSV
None
Op Response
None
Other
LOPA Ratio
1.00E-01
Safety:
10.000
Env:
1.000
Com:
1.00
Recommendation
SIS No:
PSLL-1350
SIS Function:
Interlock PSLL-1350 that isolates the fuel gas from the heater on low-low fuel gas
pressure.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Intermittent Hazard
Com:
1.00E-04
1 1.00E-01
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
50.8
Process Design
1 1.00E-01
Blast doors.
1.00E-02
BPCS
None
PSV
None
Op Response
None
Other
LOPA Ratio
1.00E-01
Safety:
10.000
Env:
1.000
Com:
1.00
Recommendation
SIS No:
PSLL-1350
SIS Function:
Interlock PSLL-1350 that isolates the fuel gas from the heater on low-low fuel gas
pressure.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Com:
1.00E-04
1 1.00E-01
Intermittent Hazard
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
50.8
Process Design
1 1.00E-01
Blast doors.
1.00E-02
BPCS
None
PSV
None
Op Response
1.00E-01
Other
LOPA Ratio
Safety:
10.000
Env:
1.000
Com:
1.00
Recommendation
SIS No:
PSLL-1350
SIS Function:
Interlock PSLL-1350 that isolates the fuel gas from the heater on low-low fuel gas
pressure.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Com:
Intermittent Hazard
Vulnerability Factors
Ignition Probability
Process Design
1 1.00E-01
Blast doors.
1.00E-02
BPCS
None
PSV
None
Op Response
1.00E-01
None
Other
LOPA Ratio
1.00E-04
None
Person Present
Independent
Protection
Layers
50.8
Safety:
10.000
Env:
1.000
Com:
1.00
Recommendation
SIS No:
PSLL-1350
SIS Function:
Interlock PSLL-1350 that isolates the fuel gas from the heater on low-low fuel gas
pressure.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Com:
1.00E-04
Intermittent Hazard
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
50.11
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
None
Other
LOPA Ratio
None
Safety:
Recommendation
0.010
Env:
0.001
Com:
0.00
See LOPA Recommendation 11 to review the revalidation from MOC to change pilot
gas to Purchased Natural Gas.
SIS No:
PSLL-1351
SIS Function:
Interlock PSLL-1351 that isolates the pilot gas from the heater on low-low pilot gas
pressure.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Intermittent Hazard
Com:
1.00E-04
1 1.00E-01
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
50.11
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
Other
LOPA Ratio
None
None
Safety:
Recommendation
0.010
Env:
0.001
Com:
0.00
See LOPA Recommendation 11 to review the revalidation from MOC to change pilot
gas to Purchased Natural Gas.
SIS No:
PSLL-1351
SIS Function:
Interlock PSLL-1351 that isolates the pilot gas from the heater on low-low pilot gas
pressure.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Com:
1.00E-04
1 1.00E-01
Intermittent Hazard
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
50.11
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
Other
LOPA Ratio
None
None
Safety:
Recommendation
0.010
Env:
0.001
Com:
0.00
See LOPA Recommendation 11 to review the revalidation from MOC to change pilot
gas to Purchased Natural Gas.
SIS No:
PSLL-1351
SIS Function:
Interlock PSLL-1351 that isolates the pilot gas from the heater on low-low pilot gas
pressure.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Com:
1.00E-04
Intermittent Hazard
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
50.11
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
Other
LOPA Ratio
None
None
Safety:
Recommendation
0.010
Env:
0.001
Com:
0.00
See LOPA Recommendation 11 to review the revalidation from MOC to change pilot
gas to Purchased Natural Gas.
SIS No:
PSLL-1351
SIS Function:
Interlock PSLL-1351 that isolates the pilot gas from the heater on low-low pilot gas
pressure.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Com:
Intermittent Hazard
Vulnerability Factors
Ignition Probability
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
Other
LOPA Ratio
1.00E-04
None
Person Present
Independent
Protection
Layers
50.11
None
None
Safety:
Recommendation
0.010
Env:
0.001
Com:
0.00
See LOPA Recommendation 11 to review the revalidation from MOC to change pilot
gas to Purchased Natural Gas.
SIS No:
PSLL-1351
SIS Function:
Interlock PSLL-1351 that isolates the pilot gas from the heater on low-low pilot gas
pressure.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Com:
1.00E-04
Intermittent Hazard
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
50.11
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
None
Other
LOPA Ratio
None
Safety:
Recommendation
0.010
Env:
0.001
Com:
0.00
See LOPA Recommendation 11 to review the revalidation from MOC to change pilot
gas to Purchased Natural Gas.
SIS No:
PSLL-1351
SIS Function:
Interlock PSLL-1351 that isolates the pilot gas from the heater on low-low pilot gas
pressure.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Com:
1.00E-04
Intermittent Hazard
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
50.11
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
None
Other
LOPA Ratio
None
Safety:
Recommendation
0.010
Env:
0.001
Com:
0.00
See LOPA Recommendation 11 to review the revalidation from MOC to change pilot
gas to Purchased Natural Gas.
SIS No:
PSLL-1351
SIS Function:
Interlock PSLL-1351 that isolates the pilot gas from the heater on low-low pilot gas
pressure.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Intermittent Hazard
Com:
1.00E-04
1 1.00E-01
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
50.11
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
None
Other
LOPA Ratio
None
Safety:
Recommendation
0.010
Env:
0.001
Com:
0.00
See LOPA Recommendation 11 to review the revalidation from MOC to change pilot
gas to Purchased Natural Gas.
SIS No:
PSLL-1351
SIS Function:
Interlock PSLL-1351 that isolates the pilot gas from the heater on low-low pilot gas
pressure.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Com:
1.00E-04
1 1.00E-01
Intermittent Hazard
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
60.8
Process Design
1 1.00E-01
Blast doors.
1.00E-02
BPCS
None
PSV
None
Op Response
1.00E-01
Other
LOPA Ratio
Safety:
10.000
Env:
1.000
Com:
1.00
Recommendation
SIS No:
PSLL-1361
SIS Function:
Interlock PSLL-1361 that isolates the fuel gas from the heater on low-low fuel gas
pressure.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Intermittent Hazard
Com:
1.00E-04
1 1.00E-01
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
60.8
Process Design
1 1.00E-01
Blast doors.
1.00E-02
BPCS
None
PSV
None
Op Response
1.00E-01
Other
LOPA Ratio
Safety:
10.000
Env:
1.000
Com:
1.00
Recommendation
SIS No:
PSLL-1361
SIS Function:
Interlock PSLL-1361 that isolates the fuel gas from the heater on low-low fuel gas
pressure.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Com:
1.00E-04
1 1.00E-01
Intermittent Hazard
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
60.8
Process Design
1 1.00E-01
Blast doors.
1.00E-02
BPCS
None
PSV
None
Op Response
None
Other
LOPA Ratio
1.00E-01
Safety:
10.000
Env:
1.000
Com:
1.00
Recommendation
SIS No:
PSLL-1361
SIS Function:
Interlock PSLL-1361 that isolates the fuel gas from the heater on low-low fuel gas
pressure.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Com:
Intermittent Hazard
Vulnerability Factors
Ignition Probability
Process Design
1 1.00E-01
Blast doors.
1.00E-02
BPCS
None
PSV
None
Op Response
1.00E-01
None
Other
LOPA Ratio
1.00E-04
None
Person Present
Independent
Protection
Layers
60.8
Safety:
10.000
Env:
1.000
Com:
1.00
Recommendation
SIS No:
PSLL-1361
SIS Function:
Interlock PSLL-1361 that isolates the fuel gas from the heater on low-low fuel gas
pressure.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Com:
1.00E-04
Intermittent Hazard
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
60.11
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
Other
LOPA Ratio
None
None
Safety:
Recommendation
0.010
Env:
0.001
Com:
0.00
See LOPA Recommendation 11 to review the revalidation from MOC to change pilot
gas to Purchased Natural Gas.
SIS No:
PSLL-1362
SIS Function:
Interlock PSLL-1362 that isolates the pilot gas from the heater on low-low pilot gas
pressure.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Intermittent Hazard
Com:
1.00E-04
1 1.00E-01
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
60.11
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
Other
LOPA Ratio
None
None
Safety:
Recommendation
0.010
Env:
0.001
Com:
0.00
See LOPA Recommendation 11 to review the revalidation from MOC to change pilot
gas to Purchased Natural Gas.
SIS No:
PSLL-1362
SIS Function:
Interlock PSLL-1362 that isolates the pilot gas from the heater on low-low pilot gas
pressure.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Com:
1.00E-04
Intermittent Hazard
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
60.11
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
Other
LOPA Ratio
None
None
Safety:
Recommendation
0.010
Env:
0.001
Com:
0.00
See LOPA Recommendation 11 to review the revalidation from MOC to change pilot
gas to Purchased Natural Gas.
SIS No:
PSLL-1362
SIS Function:
Interlock PSLL-1362 that isolates the pilot gas from the heater on low-low pilot gas
pressure.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Com:
1.00E-04
Intermittent Hazard
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
60.11
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
Other
LOPA Ratio
None
None
Safety:
Recommendation
0.010
Env:
0.001
Com:
0.00
See LOPA Recommendation 11 to review the revalidation from MOC to change pilot
gas to Purchased Natural Gas.
SIS No:
PSLL-1362
SIS Function:
Interlock PSLL-1362 that isolates the pilot gas from the heater on low-low pilot gas
pressure.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Intermittent Hazard
Com:
1.00E-04
1 1.00E-01
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
60.11
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
None
Other
LOPA Ratio
None
Safety:
Recommendation
0.010
Env:
0.001
Com:
0.00
See LOPA Recommendation 11 to review the revalidation from MOC to change pilot
gas to Purchased Natural Gas.
SIS No:
PSLL-1362
SIS Function:
Interlock PSLL-1362 that isolates the pilot gas from the heater on low-low pilot gas
pressure.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Com:
1.00E-04
Intermittent Hazard
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
60.11
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
Other
LOPA Ratio
None
None
Safety:
Recommendation
0.010
Env:
0.001
Com:
0.00
See LOPA Recommendation 11 to review the revalidation from MOC to change pilot
gas to Purchased Natural Gas.
SIS No:
PSLL-1362
SIS Function:
Interlock PSLL-1362 that isolates the pilot gas from the heater on low-low pilot gas
pressure.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Com:
1.00E-04
Intermittent Hazard
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
60.11
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
Other
LOPA Ratio
None
None
Safety:
Recommendation
0.010
Env:
0.001
Com:
0.00
See LOPA Recommendation 11 to review the revalidation from MOC to change pilot
gas to Purchased Natural Gas.
SIS No:
PSLL-1362
SIS Function:
Interlock PSLL-1362 that isolates the pilot gas from the heater on low-low pilot gas
pressure.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Intermittent Hazard
Com:
1.00E-04
1 1.00E-01
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
60.11
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
Other
LOPA Ratio
None
None
Safety:
Recommendation
0.010
Env:
0.001
Com:
0.00
See LOPA Recommendation 11 to review the revalidation from MOC to change pilot
gas to Purchased Natural Gas.
SIS No:
PSLL-1362
SIS Function:
Interlock PSLL-1362 that isolates the pilot gas from the heater on low-low pilot gas
pressure.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-04
Env:
1.00E-04
Intermittent Hazard
Com:
1.00E-04
1 1.00E-01
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
60.11
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
Other
LOPA Ratio
None
None
Safety:
Recommendation
0.010
Env:
0.001
Com:
0.00
See LOPA Recommendation 11 to review the revalidation from MOC to change pilot
gas to Purchased Natural Gas.
SIS No:
PSLL-1362
SIS Function:
Interlock PSLL-1362 that isolates the pilot gas from the heater on low-low pilot gas
pressure.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
1.00E-05
Env:
1.00E-04
Com:
Initiating Cause
1 1.00E-01
Intermittent Hazard
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
72.2
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
None
Other
None
LOPA Ratio
Safety:
Recommendation
0.001
1.00E-04
Env:
0.001
Com:
0.00
29. Consider bringing a low seal oil level alarm into DCS (independent of LV-1437).
30. Ensure that Interlock LSLL-38 that shuts down the compressor and prevents
restart on low-low level in the overhead seal oil tank and/or Interlock LSL-57 that starts
the auxiliary lube oil pump on low level in the overhead seal oil tank are designed for
SIL 2.
31. Evaluate if Interlock LSLL-38 and/or LSL-57 should be designed for Environmental
EIL 2 and Commercial CIL 3.
SIS No:
LSLL-38; LSL-57
SIS Function:
Interlock LSLL-38 that shuts down the compressor and prevents restart on low-low
level in the overhead seal oil tank. Interlock LSL-57 that starts the auxiliary lube
oil pump on low level in the overhead seal oil tank.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
1.00E-05
Env:
1.00E-04
Initiating Cause
Intermittent Hazard
None
Vulnerability Factors
Ignition Probability
None
None
BPCS
None
PSV
None
Local low level alarms LAL-57/58.
Local low-low level alarm LALL-38
Other
LOPA Ratio
1.00E-01
None
Safety:
Recommendation
1.00E-04
1 1.00E-01
Process Design
Op Response
Com:
1 1.00E-01
Person Present
Independent
Protection
Layers
72.2
0.010
Env:
0.010
Com:
0.01
See Recommendation 29 to consider bringing a low seal oil level alarm into DCS
(independent of LV-1437).
See Recommendation 30 to ensure that Interlock LSLL-38 that shuts down the
compressor and prevents restart on low-low level in the overhead seal oil tank and/or
Interlock LSL-57 that starts the auxiliary lube oil pump on low level in the overhead seal
oil tank are designed for SIL 2.
See Recommendation 31 to evaluate if Interlock LSLL-38 and/or LSL-57 should be
designed for Environmental EIL 2 and Commercial CIL 3.
SIS No:
LSLL-38; LSL-57
SIS Function:
Interlock LSLL-38 that shuts down the compressor and prevents restart on low-low
level in the overhead seal oil tank. Interlock LSL-57 that starts the auxiliary lube
oil pump on low level in the overhead seal oil tank.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
1.00E-04
Env:
1.00E-04
Initiating Cause
Filter plugging.
Intermittent Hazard
None
Vulnerability Factors
Ignition Probability
None
None
BPCS
None
PSV
None
None
Other
LOPA Ratio
None
Safety:
Recommendation
1.00E-04
1 1.00E-01
Process Design
Op Response
Com:
1 1.00E-01
Person Present
Independent
Protection
Layers
72.9
0.010
Env:
0.001
Com:
0.00
32. Ensure that PAL-33 low pressure alarm is on a routine testing schedule.
33. Ensure that Interlock Interlock PSLL-32 shuts down compressor on low lube oil
pressure is designed for SIL 1.
34. Evaluate if Interlock PSL-40 should be designed for Environmental EIL 2 and
Commercial CIL3.
SIS No:
PSL-40
SIS Function:
Interlock PSL-40 that starts the spare pump on low lube oil pressure.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
1.00E-04
Env:
1.00E-04
Initiating Cause
Intermittent Hazard
None
Vulnerability Factors
Ignition Probability
None
None
BPCS
None
PSV
None
None
Other
LOPA Ratio
1.00E-04
1 1.00E-01
Process Design
Op Response
Com:
1 1.00E-01
Person Present
Independent
Protection
Layers
72.9
None
Safety:
Recommendation
0.010
Env:
0.001
Com:
0.00
SIS No:
PSLL-32
SIS Function:
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
1.00E-04
Env:
1.00E-04
Initiating Cause
Intermittent Hazard
None
Vulnerability Factors
Ignition Probability
None
None
BPCS
None
PSV
None
None
Other
LOPA Ratio
None
Safety:
Recommendation
1.00E-04
1 1.00E-01
Process Design
Op Response
Com:
1 1.00E-01
Person Present
Independent
Protection
Layers
72.9
0.010
Env:
0.001
Com:
0.00
SIS No:
PSL-40
SIS Function:
Interlock PSL-40 that starts the spare pump on low lube oil pressure.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
1.00E-04
Env:
1.00E-04
Com:
Initiating Cause
Intermittent Hazard
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
73.8
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
Other
LOPA Ratio
1.00E-04
None
None
Safety:
Recommendation
0.010
Env:
0.001
Com:
0.00
See LOPA Recommendation 35 to ensure that low lube oil pressure alarm PAL-77/78
is on a routine testing schedule.
See LOPA Recommendation 36 ensure Interlock PSL-79/80 that shuts down
Compressor is designed for SIL 1.
See LOPA Recommendation 37 to evaluate if PSL-77 should be designed for
Environmental EIL 2 and Commercial CIL 2.
SIS No:
PSL-77/78
SIS Function:
Low lube oil pressure alarm PAL-77/78 (local compressor panel and TDC) located
on C-2B with interlock PSL-79/80 that shuts down the Compressor.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
1.00E-04
Env:
1.00E-04
Initiating Cause
Intermittent Hazard
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
73.8
1 1.00E-01
None
BPCS
None
PSV
None
Low lube oil pressure alarm PAL-77/78.
None
None
Other
LOPA Ratio
1.00E-04
1 1.00E-01
Process Design
Op Response
Com:
Safety:
Recommendation
0.010
Env:
0.001
Com:
0.00
See LOPA Recommendation 35 to ensure that low lube oil pressure alarm PAL-77/78
is on a routine testing schedule.
See LOPA Recommendation 36 ensure Interlock PSL-79/80 that shuts down
Compressor is designed for SIL 1.
See LOPA Recommendation 37 to evaluate if PSL-77 should be designed for
Environmental EIL 2 and Commercial CIL 2.
SIS No:
PSL-77/78
SIS Function:
Low lube oil pressure alarm PAL-77/78 (local compressor panel and TDC) located
on C-2B with interlock PSL-79/80 that shuts down the Compressor.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
1.00E-04
Env:
1.00E-04
Initiating Cause
Filters plugging.
Intermittent Hazard
None
Vulnerability Factors
Ignition Probability
None
None
BPCS
None
PSV
None
Low lube oil pressure alarm PAL-77/78.
Other
LOPA Ratio
1.00E-03
1 1.00E-01
Process Design
Op Response
Com:
1 1.00E-01
Person Present
Independent
Protection
Layers
73.8
None
None
Safety:
Recommendation
0.010
Env:
0.001
Com:
0.01
35. Ensure that low lube oil pressure alarm PAL-77/78 is on a routine testing schedule.
36. Ensure Interlock PSL-79/80 that shuts down Compressor is designed for SIL 1.
37. Evaluate if PSL-77 should be designed for Environmental EIL 2 and Commercial
CIL 2.
SIS No:
PSL-77/78
SIS Function:
Low lube oil pressure alarm PAL-77/78 (local compressor panel and TDC) located
on C-2B with interlock PSL-79/80 that shuts down the Compressor.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
1.00E-04
Env:
1.00E-04
Initiating Cause
Intermittent Hazard
None
Vulnerability Factors
Ignition Probability
None
None
BPCS
None
PSV
None
Low lube oil pressure alarm PAL-77/78.
None
None
Other
LOPA Ratio
1.00E-04
1 1.00E-01
Process Design
Op Response
Com:
1 1.00E-01
Person Present
Independent
Protection
Layers
73.8
Safety:
Recommendation
0.010
Env:
0.001
Com:
0.00
See LOPA Recommendation 35 to ensure that low lube oil pressure alarm PAL-77/78
is on a routine testing schedule.
See LOPA Recommendation 36 ensure Interlock PSL-79/80 that shuts down
Compressor is designed for SIL 1.
See LOPA Recommendation 37 to evaluate if PSL-77 should be designed for
Environmental EIL 2 and Commercial CIL 2.
SIS No:
PSL-77/78
SIS Function:
Low lube oil pressure alarm PAL-77/78 (local compressor panel and TDC) located
on C-2B with interlock PSL-79/80 that shuts down the Compressor.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
0.00E+00
Env:
1.00E-03
Intermittent Hazard
Com:
1.00E-03
1 1.00E-01
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
73.12
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
None
Other
LOPA Ratio
Safety:
Recommendation
1.000
Env:
0.010
Com:
0.01
38. Ensure that jacket water discharge temperature alarms TAH85/86/87/88/89/90/91/92 (local compressor panel and TDC) located on the first-stage
compressor are on a routine testing schedule.
39. Evaluate if TSHH-107/108/109/110 that shut down the compressor and prevent
compressor restart if there is a high-high gas discharge temperature from the secondstage should be designed for EIL 1 and CIL 1.
SIS No:
TSHH-107/108/109/110
SIS Function:
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
0.00E+00
Env:
1.00E-03
Com:
1.00E-03
1 1.00E-01
Intermittent Hazard
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
73.12
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
None
Other
LOPA Ratio
Safety:
Recommendation
1.000
Env:
0.010
Com:
0.01
SIS No:
TSHH-107/108/109/110
SIS Function:
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-03
Env:
1.00E-02
Intermittent Hazard
Com:
1.00E-02
1 1.00E-01
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
76.3
1 1.00E-01
None
Process Design
Master controller verifies valve positions
and shuts down the CCR if verification is
not obtained.
BPCS
1.00E-01
PSV
None
Op Response
None
Other
None
LOPA Ratio
Safety:
1.000
Env:
1.000
Com:
1.00
Recommendation
SIS No:
FSH-318; FSH-308
SIS Function:
FSH-318 that shuts down the CCR on high off-gas flow from vent drum No. 3;
FSH-308 that shuts down the CCR on high off-gas flow from vent drum No. 4
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-02
Env:
1.00E-02
Intermittent Hazard
Com:
1.00E-02
1 1.00E-01
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
76.24
Process Design
1 1.00E-01
1.00E-01
BPCS
None
PSV
None
Op Response
None
None
Other
LOPA Ratio
Safety:
10.000
Env:
1.000
Com:
1.00
Recommendation
SIS No:
PSH-305-1/305-2
SIS Function:
FSL-304 that stops the purge cycle timer on low nitrogen flow to lock hopper No.
1; PSH-305-1/305-2 that shutdown the CCR if purge pressure permissives are not
net.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-02
Env:
1.00E-02
Com:
1.00E-03
1 1.00E-01
Intermittent Hazard
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
77.3
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
None
Other
None
LOPA Ratio
Safety:
1.000
Env:
0.100
Com:
0.01
Recommendation
SIS No:
PSL-354
SIS Function:
PSL-354 that shuts down the regenerator on low differential pressure between the
disengaging hopper and the regenerator.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-02
Env:
1.00E-02
Intermittent Hazard
Com:
1.00E-03
1 1.00E-01
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
77.4
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
1.00E-01
Other
None
LOPA Ratio
Safety:
10.000
Env:
1.000
Com:
0.10
Recommendation
SIS No:
FSL-396
SIS Function:
FSL-396 that shuts down the regenerator on low nitrogen flow from the fines
remover blower.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-02
Env:
1.00E-02
Intermittent Hazard
Com:
1.00E-02
1 1.00E-01
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
78.1
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
None
Other
LOPA Ratio
1.00E-01
Safety:
10.000
Env:
1.000
Com:
1.00
Recommendation
SIS No:
TSHH-371; TSHL-365
SIS Function:
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-02
Env:
1.00E-02
Com:
1.00E-03
Intermittent Hazard
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
78.6
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
None
Other
LOPA Ratio
1.00E-01
Safety:
10.000
Env:
1.000
Com:
0.10
Recommendation
SIS No:
FSL-384
SIS Function:
FSL-384 located on the outlet of the regenerator heater that shuts down the
regenerator on low regeneration vapor flow.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-02
Env:
1.00E-02
Com:
1.00E-02
1 1.00E-01
Intermittent Hazard
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
78.8
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
None
Other
None
LOPA Ratio
Safety:
1.000
Env:
0.100
Com:
0.10
Recommendation
SIS No:
FSL-363
SIS Function:
FSL-363 that shuts down the regenerator on low flow from the chlorination blower.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-02
Env:
1.00E-02
Intermittent Hazard
Com:
1.00E-02
1 1.00E-01
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
78.9
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
None
Other
None
LOPA Ratio
Safety:
1.000
Env:
0.100
Com:
0.10
Recommendation
SIS No:
XSL-385
SIS Function:
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-02
Env:
1.00E-02
Intermittent Hazard
Com:
1.00E-02
1 1.00E-01
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
78.10
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
None
Other
None
LOPA Ratio
Safety:
1.000
Env:
0.100
Com:
0.10
Recommendation
SIS No:
PDSL-354
SIS Function:
PDSL-354 that shuts down the regenerator on low differential pressure between
the disengaging hopper and the regenerator
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-02
Env:
1.00E-02
Com:
1.00E-03
Intermittent Hazard
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
78.17
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
None
Other
LOPA Ratio
None
Safety:
1.000
Env:
0.100
Com:
0.01
Recommendation
SIS No:
TSH-377; FSL-341
SIS Function:
TSH-377 that shuts down the air heaters on high temperature; FSL-341 that shuts
down the CCR on low nitrogen purge gas flow.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
0.00E+00
Env:
0.00E+00
Com:
0.00E+00
1 1.00E-01
Intermittent Hazard
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
80.9
Process Design
1 1.00E-01
None
BPCS
None
PSV
None
Op Response
None
None
Other
LOPA Ratio
1.000
Safety:
Env:
1.000
Com:
1.00
Recommendation
SIS No:
PSH-345-1/345-2; FSL-304
SIS Function:
PSH-345-1/345-2 that shutdown the CCR if purge pressure permissives are not
met; FSL-304 that stops the purge cycle timer on low nitrogen flow to lock hopper
No. 1
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
1.00E-03
Env:
1.00E-02
Com:
1.00E-02
1 1.00E-01
Intermittent Hazard
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
80.10
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
None
Other
None
LOPA Ratio
Safety:
0.100
Env:
0.100
Com:
0.10
Recommendation
SIS No:
FSL-394
SIS Function:
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
80.11
Target Frequency
Safety:
0.00E+00
Env:
0.00E+00
Initiating Cause
Intermittent Hazard
None
Vulnerability Factors
Ignition Probability
None
Process Design
1 1.00E-01
1.00E-01
BPCS
None
PSV
None
Op Response
1.00E-01
None
Other
LOPA Ratio
0.00E+00
1 1.00E-01
Person Present
Independent
Protection
Layers
Com:
Safety:
1.000
Env:
1.000
Com:
1.00
Recommendation
SIS No:
FSL-346
SIS Function:
FSL-346 that shuts down the CCR on low hydrogen lift gas flow.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
80.21
Target Frequency
Safety:
0.00E+00
Env:
0.00E+00
Initiating Cause
Intermittent Hazard
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
1 1.00E-01
None
BPCS
None
PSV
None
Level indication LI-309 with low level
alarm
1.00E-01
None
Other
LOPA Ratio
0.00E+00
1 1.00E-01
Process Design
Op Response
Com:
Safety:
1.000
Env:
1.000
Com:
1.00
Recommendation
SIS No:
LSL-309
SIS Function:
LSL-309 that shuts down the CCR on low level in the reduction zone of reactor
No. 1
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
80.22
Potential oxygen carry through from lock hopper No. 2 into the
reduction zone of reactor No. 1, resulting in formation of an explosive
mixture in the regenerator, leading to an explosion that may injure
personnel in a medium-sized area, potential environmental impacts
in a small area.
Team agrees there is no credible consequences identified.
Target Frequency
Safety:
0.00E+00
Env:
0.00E+00
Initiating Cause
Intermittent Hazard
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
Process Design
1 1.00E-01
1.00E-01
None
PSV
None
1.00E-01
None
Other
LOPA Ratio
0.00E+00
1 1.00E-01
BPCS
Op Response
Com:
1.000
Safety:
Env:
1.000
Com:
1.00
Recommendation
SIS No:
FSL-304; PSH-305-1/305-2
SIS Function:
FSL-304 that stops the purge cycle timer on low nitrogen flow to lock hopper No.1;
PSH-305-1/305-2 that shutdown the CCR if purge pressure permissives are not
met
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
80.29
Target Frequency
Safety:
0.00E+00
Env:
0.00E+00
Com:
Initiating Cause
Intermittent Hazard
None
Vulnerability Factors
Ignition Probability
None
Person Present
Independent
Protection
Layers
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
Other
LOPA Ratio
0.00E+00
1.00E-01
None
Safety:
1.000
Env:
1.000
Com:
1.00
Recommendation
SIS No:
TSH-311
SIS Function:
TSH-311 that shuts down the CCR on high reduction zone temperature.
EIL Level:
CIL Level:
PHA Ref.
Consequence
Description
Target Frequency
Safety:
Initiating Cause
0.00E+00
Env:
0.00E+00
Com:
Intermittent Hazard
Vulnerability Factors
Ignition Probability
1 1.00E-01
Process Design
None
BPCS
None
PSV
None
Op Response
1.00E-01
None
Other
LOPA Ratio
0.00E+00
None
Person Present
Independent
Protection
Layers
80.30
Safety:
1.000
Env:
1.000
Com:
1.00
Recommendation
SIS No:
FSL-344
SIS Function:
Low nitrogen flow switch FSL-344 that alarms and shuts down the CCR
EIL Level:
CIL Level: