ASC - LRN - HSE - MGT - LHN - 9110-11 - HEMP-Basics v1.0

HSE Management
Hazard Identification & Risk Management
Hazards and Effects Management Process [HEMP]

Basic Principles and Practices
Hazard Identification and Risk Management 9110-11 HEMP Basics 1
HSE and Working Protocols for the Course
• Alarms and Escape Routes

• There are no planned alarms for your location
• Any alarm must be treated as ‘live’
• Advise the Trainer with an ‘Alarm’ chat message
• Quickly leave the room in an orderly manner
• Proceed to your designated Muster Point
• Await further instructions
• Comfort Breaks
• We will take a 14 minute break approximately every hour
• Please return promptly so we can finish on time
• Mobile Phones
• Please turn them off.
• If you are ‘On Call’ please turn to Vibrate Only.
• Please leave room to answer (advise Trainer with a ‘Chat’ message)
• Please decline social calls
Hazard Identification and Risk Management 2

HSE and Working Protocols for the Course
• Maintain Your Attention on the Lesson

• Online training is different to Face-to-Face training
It is very easy to be distracted, or have your ‘mind wander’ to other topics
• Do not have other applications (such as e-mail or social media or work) open
• Please avoid external distractions
• Do not read the Lesson Handout too far ahead of the Lesson in progress
• The trainer will be providing addition knowledge, or context, you may miss critical information
• Posing Questions
• Please open ‘Chat’ facility
It will be globally set to ‘Host only’
• Type in a short clear question to raise the issue
If it is complicated then you can just type “Question, and your name”
• If more clarity is needed the Trainer/Facilitator will ask you to provide

Introspection Moment
• In our Industry we are constantly faced with Risk.

Daily we encounter hazards and threats that can cause harm;
whether thru a simple trip, fall, dropped object, leak, spill, or an explosion and fire.
• One of our key responsibilities, and a clear duty of care,
is to manage such risk, and ensure that we protect:
• Our Selves
• Our Colleagues
• Our Company
• Our Future
• What do we need to help us

What are the ’Critical Enablers’?
achieve a goal of zero accidents?
• A Systematic Approach
• Clear understanding of what can cause harm and the risk of it happening.
• Clear, unambiguous language and terms when discussing managing risk,
• So that everyone understands what is required to avoid incidents and accidents.
• Clear and simple process to determine the risks and actions to minimise them.
• Easy to use tools, techniques and practices.
The Cullen report, following the Piper Alpha accident, basically concluded
that ”managing safety risk was in a mess and needed to be fixed”.
• One outcome from the investigation was the development of the

• Hazards and Effects Management Process [HEMP]

• Defines four key Stages for Risk Management
• Establishes a Common Process
• Sets Standard Terminology
to avoid going from this to this. What hazards are present? Are
people, the environment, Shell’s
Identify
reputation, or assets exposed to
these hazards?
Identify
Desert Gas Plant How to recover? What are the Can the hazard be eliminated or Longford Gas Plant
Hazards? minimized? What are the threats
What if it happens?
that can release the hazard? What
Recover What could
are the credible scenarios and
happen? Assess how likely are they? What are the
potential consequences? What is
the potential likelihood of the
HEMP
HSE Critical
Procedures, Equipment How serious hazardous event? What is the
& Tasks will it be? risk?
How are the hazards and their

Risk Reduction Ideas Assess risks managed? What are the
Is there
Control controls and barriers? How
a better effective are the barriers and
How likely is it?
way? controls?
Control When a hazard is released, what
How to prevent
it?
are the recovery measures in
Recover place? How can the
consequences be mitigated or
minimized?
Piper Alpha Al Jubail Texas City Macondo

• Hazards and Effects Management Process [HEMP]:

Is a key element of the HSE Management System [HSE-MS]
Is a Safety Critical Process and Safety Critical Competence
Hence, this Training Course
Element 1 Leadership Commitment

Hence, this Training Course
HSE Management System
Element 2 Policy and Strategic Objectives
Organisation, Responsibilities,
Element 3
Resources, Standards and Docs
Element 4 Hazards & Effects Management and the Need

Element 5 Planning and Procedures
to Pay Attention
Element 6 Implementation and Monitoring
Element 7 Audit
Element 8 Review and Upgrade It is for Your Safety

Introduction
• Course Scope
• Learning Objectives
• Course Structure

Scope
The Scope for this Learning Module is:

Hazards and Effects Management Process [HEMP],
comprising the following subject areas:
• Hazards and Effects Management Process
• Hazards
• Threats
• Risk: Consequence
• Risk: Probability
• Controls
• Barriers
• Recovery Measures
• ALARP
• Barrier Thinking

Learning Objectives
By the end of this session you will be able to:

• Explain the potential consequences of not effectively managing Risk in work activities
• List and describe the main building blocks of the Hazards and Effects Management Process
• Describe Hazards & Threats and list those commonly found at our sites and work areas
• Describe Risk Consequence & Probability and the process to determine Risk categories
• Describe Controls, Barriers & Recovery actions
• Describe ALARP and the basic requirements to achieve and prove it
• Describe the concept of Barrier Thinking and the concept of ‘sequential’ coverage.

Learning Objectives
A copy of the Learning Objectives is in the course handout.

It is your responsibility to ensure that you will be able to do all of these.
There are quizzes throughout the training to help and reinforce learning
There will be a basic test at the end of the training: requires a score of 80% to pass

Course Structure
1. Overview 2.Identify 6. ALARP

• HEMP Process Components • Hazards
• Threats
7. Barrier Thinking
• Standard Terminology
Basic language of HSE • Top Event 8. Summary
• ‘Bow-Tie’ Model 3.Assess 9. Test
• Consequence
• Probability
4.Control
• Controls
• Barriers
5.Recover
• Protective
• Corrective
• Restorative
measures

Process Overview
• HEMP Process Stages

• The HSE Control Framework

requires
• management to have effective
controls and barriers in place,
and
• workforce to apply those
controls and barriers,
to
• manage workplace risks to be
as low as reasonably practicable

• Identify the Hazards

and fully understand how they can harm:
• People P
• Plant [Assets] A
• Planet [Environment] E
• Profile [Reputation] R
• Recognise the Threats
that can release Hazards and cause an Event

• Assess the Risks

fully evaluating:
• Probability [Likelihood]
that a Threat may release a Hazard
and cause an Event
(Incident or Accident)
• Consequence [Severity]
of the Harm arising from the Hazard
being released.

• Control the Risk

• Put in place Controls
to eliminate or minimise Risk Potential
that a Threat may release a Hazard and
cause an Event
• Put in place Barriers
to eliminate or minimise Risk Consequence
of releasing a Hazard and causing Harm

• Recover from an Event

• Have Recovery Measures
available to neutralise the Consequences in
case an Event (Incident or Accident) happens.
• Protective Measures
Protect people, planet, plant or reputation by
limiting the extent of the Consequence; i.e.
stopping Escalation.
• Corrective Measures
To return the situation back to ‘normal
conditions/operations’.
• Restorative Measures
To remove any residual Consequences after
an Event (e.g. contamination).
Includes implementing ‘Lessons Learnt’
from incident investigations.

• HEMP
Hazard and Effect Management Process
is a structured, sequential methodology
(process) for effectively managing Health,
Safety and Environmental Risks in our
works.
It uses well-defined standard terminology
to avoid communication confusion.

• ALARP
HEMP requires Controls and Barriers to
be defined, implemented, maintained
to reduce the assessed Risk to ALARP:
As Low As Reasonably Practicable
Unacceptable Region
ALARP
Tolerable Region
Acceptable Region

HEMP ‘Bow-Tie’ Model
• The ‘Bow-Tie’ model

presents the HEMP Process as a diagram to simply show the role of,
Controls to prevent the Threats releasing Hazards to cause an Event;
Barriers to protect against Consequences of an Event;
Recovery measures to minimise Escalation of Consequences.
Recovery measures to restore Normal Conditions.
THREAT
Overfill
Recovery
Control
Top
Event
Control
Barrier
Consequences
Hazards
Threats
Recovery
Control
Barrier
Control
Loss of
Control
Control
Barrier
Recover
Control
Gasoline in
HAZARD
Tank

HEMP ‘Bow-Tie’ Model
• Top Event
is the first Event from a release of a Hazard.
An Incident is a release of a Hazard that (luckily) does not cause Harm;
also called a ‘near miss’.
An Accident is a release of a Hazard that (unfortunately) does cause Harm.
THREAT
Overfill
Recovery
Control
Top
Event
Control
Barrier
Consequences
Consequences
Accident
Hazards
Threats
Recovery
Control
Barrier
Control
Loss of
Control
Control
Barrier
Incident
Recover
Control
Gasoline in
HAZARD
Tank

Review Quiz
The first stage in the HEMP process is?

[choose all applicable]
a) Assess
b) Control
ü c) Identify
d) Recover
Which stage(s) focus on Protecting?

a) Identify
b) Assess
ü c) Control
ü d) Recover
The ‘Bow-Tie’ Model shows?
a) Relationship between Hazards and Threats
ü b) How to use Controls, Barriers and Recovery measures
c) Relationship between Hazard-Threat and Consequence
d) How to plan work activities safely

Identify
• Hazard Identification
• Threat Recognition
Hazards

Hazards
Identify
• Hazards
Something that can cause harm to:
• People [People] P
What could cause harm?

Moving Vehicles Rotating Machinery Personnel at Height
FlammableHydrocarbons
Temperature, Pressure, Chemical Motion, Chemical Mechanical, Motion Gravity, Motion

Moving HeavyEquipment RaisedObjects Treatment Chemicals Gas Compressor
Motion, Mechanical Gravity, Motion Chemical Temperature, Motion, Pressure

Hazards
Identify
• Hazards
Something that can cause harm to:
• People [People] P
Energy Sources:
• Gravity
• Motion
• Mechanical Ga
G as • Electrical so
c See lin
eni • Temperature ei
n
g It! HA
ryo A
RD
• Pressure ZA Ta
nk
re
C AZ RD
tu
Ch
H
• Chemical
ra
em
pe
ica
m
• Biological
Te
l
• Radiation
• Sound
Hazard Checklist
Identify
• Hazards Registry and Checklist
Hazards are usually systematically identified
using a standard checklist based upon a
registry of all Hazards on the facility [Hazard
Register, HazReg].
The process consists of going through the
list and identifying those items that are
relevant to the situation.

Threats
Identify
• Threats
Situation or condition that could cause the release of a Hazard.
It is important to differentiate Hazards and Threats.
Hazards generally cannot be eliminated, (e.g. Hydrocarbons, Pressure, Gravity )
whereas
Threats can be eliminated or controlled or have work practices modified to compensate.
What could cause a Hazard to be released?

Corrosion Rain - Slippery Road Loss of Balance - Fall Impact with Structure
Poor Visibility Crane Overload Improper Mixing Defective Seal

Top Event
Identify
• The Top Event
is the first event to release the Hazard.
It is the thing that we do not want to happen!
Common ‘Top Events’ in our industry are:
• Loss of Containment
• Loss of Control
• Exposure
THREAT
Overfill
Recovery
Control
Top
Event
Control
Barrier
Consequences
Hazards
Threats
Loss of
Recovery
Control
Control
Barrier
Control
Containment
TOP EVENT
Control
Barrier
Recover
Control
Gasoline in
HAZARD
Tank

Top Event
Identify
• The Top Event
is the first event to release the Hazard.
It is the thing that we do not want to happen!
Common ‘Top Events’ in our industry are:
• Loss of Containment
• Loss of Control
• Exposure
Loss of Containment Loss of Control Loss of Control Loss of Control

Loss of Control Loss of Control Exposure Loss of Containment

Review Quiz
Identify
A Hazard is?
a) Something that slows work
b) Something used to protect people
ü c) Something that can cause harm
d) Something used to warm people of danger
Which of the following are Hazards?

ü a) Gravity
b) Rain causing a slippery surface
ü c) Motion
d) Injured Back
Which of the following are Threats?
a) Gravity
ü b) Rain causing a slippery surface
ü c) Motion
d) Injured Back

Assess
• Assess Risks
• Determine Probability – Likelihood
• Determine Consequences – Severity

Assess Risks
Assess
• Assessing Risk
is a combined process of evaluating
• Probability, or Likelihood that a Hazard can be released by the Threat and cause harm
‘What is the chance that it may happen?’
• Consequence, or Severity, is the ultimate harm arising from the release of the Hazard
‘If it does happen, what harm could it cause?’
Fire Impact Impact Fall, Dropped Object

Injury, Death, Damage Injury, Death, Damage Injury, Loss of Limb Injury, Death
Impact Falling Object Leak, Overflow Leak, Ignition

Injury, Death Injury, Death, Damage Medical, Death, Spill Injury, Death, Damage
Assess Risks
Assess
• Assessing Risk
• Common credible Consequences

• Injury: Physical impact
• Exposure: Health impact
• Fatality
• Ignited release
• Fire, Explosion
• Unignited release
• To Air: Emission, to Ground & Water: Spill

Assess Risks
Assess
• Assessing Risk
CONSEQUENCE PROBABILITY - LIKELIHOOD

SEVERITY
A B C D E
People Assets Environment Reputation Never heard of Heard of in Has happened Has happened Has happened
in industry industry in the at the Location more than once
organisation or or more than per year at the
0 No injury or No No No
more than once once per year in Location
health effect damage effect impact
per year in the the
1 Slight injury or Slight Slight Slight industry Organisation
2 Minor injury or Minor Minor Minor Note: Reputation is essentially an indirect effect
as a result of causing harm (people or environment)
3 Moderate injury or
health effect
Moderate
damage
Moderate
effect
Moderate
impact
Note: Some companies use ‘Community’ instead of ‘Reputation’
4 Major Injury or Major Major Major
up to 3 fatalities damage effect impact
5 More than 3
fatalities
Massive
damage
Massive
effect
Massive
impact
Risk Assessment Matrix
Assess
• The Risk Assessment Matrix [RAM]
is a simple tool and methodology to evaluate the combination of Probability and
Consequence to categorise the criticality of Risk, and the mitigation measures that must be
taken to effectively reduce the Risk to ALARP and can be effectively managed on site.

Assess
• Example
n A plane crashing into a gas processing plant due to loss of control may cause massive harm.
However it is very (very) unlikely to happen.
n AThe Riskmeter
three is therefore
fall duemoderate
to loss of control or balance may result in a single fatality.
Statistics show many individuals die every year as a result of such falls.
The Risk with working at height is (potentially) high

Assess
• The RAM is used for Assessing Risk both in planning works and investigating incidents.
• The RAM is a qualitative screening tool for prioritising the mitigation (Controls, Barriers,
Recovery) measures that must be in place, and be effective, to enable safe work
execution.
• The RAM approach gives common terminology for clear communication of Risk

Assess
• The Risk Assessment Matrix Process
• Estimate the Likelihood of the hazard being released to do harm.
• Estimate the Severity of harm likely to be caused with the release of the hazard.
Note: These two step are interchangeable, either can be done first.
• Determine the Risk category by combining Likelihood and Severity codes from the
RAM.
Note: This should be done for the situation under review, not what happened somewhere else.
Estimate
Likelihood
Estimate
Severity
Determine
Risk Type
Assess Risks
Assess
• Assessing Risk Process
• Estimate the Severity of the harm for each potential Consequence
• Consider the most serious credible harm [to PAER]
Do not consider what happened before, only what could happen this time.
• Exercise:
Estimate Consequence - Severity for ‘Dropped Object’ when working at height.
CONSEQUENCE
SEVERITY
People Assets Environment Reputation

?
0 No injury or health No No No
effect damage effect impact
1 Slight injury or Slight Slight Slight

2 Minor injury or Minor Minor Minor

health effect damage 2 effect impact
3 Major injury or
health effect
Moderate
damage
Moderate
effect
Moderate
impact
4 PTD or up to 3
4
Major Major Major
fatalities damage effect impact
5 More than 3
fatalities
Massive
damage
Massive
effect
Massive
impact
Assess Risks
Assess
• Exercise:

SEVERITY
A B C D
D E
? in industry industry in the at the Location more than once
more than once once per year in Location
per year in the the
health effect damage effect impact ?
2 Minor injury or Minor Minor Minor
health effect damage 2 effect impact
3 Major injury or
health effect
Moderate
damage
Moderate
effect
Moderate
impact
4 PTD or up to 3
4
Major Major Major
5 More than 3
fatalities
Massive
damage
Massive
effect
Massive
impact
Assess Risks
Assess
• Exercise:

SEVERITY
A B C D E
in industry industry in the at the Location more than once
more than once
D
once per year in
E
Location
per year in the the
2 Minor injury or Minor

2
Minor Minor
Risk = People 4 D
3 Major injury or
health effect
Moderate
damage
Moderate
effect
Moderate
impact
Asset 2 E
4 PTD or up to 3
4
Major Major Major
5 More than 3
fatalities
Massive
damage
Massive
effect
Massive
impact
Assess Risks
Assess
• Determine the Mitigation Measures as a result of determining the Risks.
• Controls to reduce Likelihood
• Barriers to reduce Severity
• Exercise:
What are the Implications of the Risks for ‘Dropped Object’ when working at height?
Risk = People 4 D
Asset 2 E
Ensure workplace Controls and Barriers are in place, known

2 and fully complied with by all.
Must implement and manage appropriate controls and

4 barriers to reduce Risk to ALARP before starting works.

Assess
Use only the approved RAM to ensure clear communication with all stakeholders.
There are other qualitative and quantitative risk assessment matrices; developed for specialist
application. These should not be used for determining HSE / Work Risks. They can cause confusion.
Note: It is not appropriate to assign numbers to Probability – Likelihood, two sets of numbers can
cause confusion of the order. Use the letters.

Hazards and Effects Register
Assess
• Hazards and Effects Register
A record of Hazards, Threats, Top Events (Incidents), Consequences and Potential Risk is maintained
as the Hazards and Effects Register for each plant facility.
Any Risks in the Yellow or Red bands of the RAM must have a Documented Demonstration of ALARP;
what controls and barriers must be implemented to ensure safe working.
Those in the Blue categories can be managed by the Work Crew or Person in Charge of Works [PICW,
Supervisor], using standard mitigation measures.
Exposure

Review Quiz
Assess
Probability is?
a) The degree of injury suffered
b) A calculation of how many people will be hurt
c) The likelihood that a hazard may be released
ü
d) Something used to warm people of danger
Consequence is?
ü a) A calculation of incident monetary impact
ü b) An estimate of likely harm caused
ü c) An estimate of possible severity of harm
d) Loss of containment of hydrocarbon
Risk is?
ü
a) Categorised by using the RAM
b) The likelihood of an event occurring
ü c) The severity of harm caused
d) A determined combination of estimated probability and consequence
Control
• Controls to Reduce Probability

• Barriers to Minimise Consequences

Controlling Risk
Control
• Managing and Mitigating Risk
• Controls
are preventative measures to reduce the Likelihood of releasing a Hazard and causing an
Event.
• Barriers
are protective (responsive) measures to reduce the severity of the potential Consequence
arising from a Top Event happening.
CONTROLS
BARRIERS

Control
Control
• Initiating Action
The objective of a Control is to act as a preventative measure to avoid a Threat releasing a
Hazard and causing a Top Event.
An Initiating Action is a failure of a Control
• Human Error
• Failure of training and competence assurance
• Equipment Failure
• Maintenance Management, Inspection Failure
Human Hazard-to-Consequence Line

Error
Gasoline in
Initiating Action
HAZARD
Over Filling Loss of Spill

Tank
Overflow Containment Fire

THREAT Consequence
Shut-off Valve Top Event
Failure
Initiating Action
Controlling Risk
Control
• Example of Controls
• Procedures, Working Instructions
• Safe-Systems-of-, Control-of-, Permit-to-Work
• LOTO procedures & practices
• LOLC procedures & practices
• Instrumentation
• Automated Control
• Measurement & Detection
• Warning Alarms [H/L, HH/LL]
• Maintenance Management
• Barricades CONTROLS
• Access Control
• Hand-rails & Guards
• Training & Learning
• Competence Assurance

Controlling Risk
Control
• Example of Barriers
• Personal Protection Equipment
• Fall Protection Systems
• Blast & Fire Walls
• Fires Systems
• Automatic Blanketing
• Automatic Sprinklers
• Fire Extinguishers
• Gas Escape Sets
BARRIERS
Review Quiz
Control
Controls are?
a) Hard Hat
ü b) Tool Belt
c) Safety Boots
ü d) Gas Detector
Barriers are?
ü a) Safety Gloves
b) Kick-board on scaffolding
ü c) Safety Glasses
ü d) Blast wall
Initiating Action is?

ü a) Damage to a level control device
ü b) A failure of a control that initiates a threat
c) Extinguishing a fire
ü d) Overriding a safety critical system without permission

Recover

Recover
Recovery
are steps taken to:
• Control the release of the Hazard
Minimise any escalation of the Consequence
• Avoid further spread of the consequence
• Avoid ‘knock-on’ effects causing other events
• Remove people from harms way
• Return conditions to normal
Includes investigation and implementing ‘Lessons Learnt’ to prevent a recurrence

of the event (incident / accident).

• Recover from an Event

• Have Recovery Measures
available to neutralise the Consequences
in case an Incident or Accident happens.
• Protective Measures
Protect people, planet, plant or reputation by
limiting the extent of the Consequence; e.g.
Emergency Shut-down System, Fire
Suppression System, Spill Containment.
• Corrective Measures
To return the situation to ‘as normal as
possible’ as quickly: e.g. Spill Clean-up.
• Restorative Measures
To remove any residual consequence of the
event: e.g. Bio-remediation of Spill site

ALARP
• As Low As Reasonably Practicable

• Determining
• Demonstrating
• Demonstrating As Low As
Reasonably Practicable

ALARP

is defined as:
The point at which the effort in terms of
• Cost
• Time
• Resources
for further Risk reduction is grossly disproportionate to the possible reduction.
Reasonable Practicable Disproportionate
Where effort required to .

Would a judge believe that it was Can it physically be accomplished
implement a measure
reasonable to implement a with existing technology or know-
significantly outweighs
safety measure, or not? how?
benefit to be gained.
Extreme Examples
§ Proportionate: Spending US$1m to prevent a major explosion capable of killing 150 persons.
§ Disproportionate: Spending US$1m to prevent 5 staff from suffering bruised knees.

ALARP

Unacceptable Region
Risk cannot be accepted.
Measures must be introduced to reduce the likelihood and consequence to a tolerable level and
preferably lower before work can be authorised.
Tolerable Region
Risk cannot be justified without detailed study of all possible reduction measures.
Work can only be undertaken by competent personnel who can dynamically assess condition
changes, or other threats, and manage the risk.
Acceptable Region
Applied Controls and Barriers are regarded as sufficient to enable safe work execution.
Supervising personnel must ensure ongoing application and integrity of control measures.

ALARP
• Demonstrating ALARP
The hierarchy for Tolerability and ALARP demonstration is as follows:
1. Legal requirements (local laws, regulations)
2. Stakeholder/Public perception
3. Company’s minimum guidance along with national and international standards
4. Consistency across business
5. The ALARP mindset: Doing the Right Thing
• Are we comfortable with the decision?
• Have we done enough?
• Is the effort (cost, time, resources) of further risk reduction disproportionate to the risk
reduction possibly achieved?
Ultimately ALARP determination is based on expert and professional experience, judgment and Company/Society values
However, if you did not examine alternate options and document your choice, you have not demonstrated ALARP

ALARP
• ALARP vs Risk Category

The key to a convincing ALARP Risk management assessment lies in the considerations
made. These will vary according to the determined level of Risk.
Risk Assessment Risk Management ALARP Demonstration
Demonstrate effectiveness of
existing Business Management System
to locally manage risk
Reference ALARP demonstration process

in Hazards and Effects Register
Document ALARP decisions
Individual risk assessment and Directly reference ALARP demonstration

detailed, robust, mitigation plan process in Hazards and Effects Register
with well defined controls and
reviews Document clear demonstration of ALARP
Review Quiz
ALARP is?
a) A best guess estimate
b) A professional determination based upon experience, judgment and Company values
ü c) A Governmental legal ruling
d) A stakeholder ruling
ALARP is?
a) Constantly variable
b) Dependent upon the work, worksite and generally prevailing conditions, and can be
ü changed if deemed not ALARP
c) Absolutely fixed
d) Not applicable to all activity risk assessments

Barrier Thinking
• Preparing for and guarding against the potential for

Control or Barrier Failure

Hierarchy of Control
Control
Most
effective Eliminate
Find an alternate way that eliminates
the hazard-threat combination
Substitute
Find an alternate way that substitutes
a high risk with a lower one
Isolate
Find a way to fully isolate the hazards
to avoid any risk from inability to control
Reduce
Provide additional or upgrade plant equipment Engineering Controls
to help control and protect: reducing the risk
Safe Systems
Provide Policies, Procedures, Practices and Training
to reduce exposure to risk, and provide ability to asses change
PPE
Least Provide Personal Protective Equipment
effective as a barrier to help minimise risk to personnel
Hierarchy of Control
Control
• Hierarchy of Controls and Barriers
Determine whether the work can be done in a way that better mitigates and manages the
Risk by applying the following simple Hierarchy of Controls and Barriers.
• First:
Eliminate or substitute Hazard-Threat-Risk by doing it another way.
• Second:
Implement ‘fail-safe’ Controls that cannot be over-ridden.
• Third:
Implement ‘effective’ Controls that can be managed by Person in Charge of Works
[PiCW].
• Fourth:
Ensure adequate Barriers to protect People, Plant, Assets and Environment are in
place, fully functionable and tested.

Barrier Thinking
Control
• Control Barrier Thinking
It is possible for a Control to fail.
Control ‘Barrier Thinking’ is applying sufficient sequential Controls that can provide enough
protection in the event of a Control failure.
For example a series of escalating ‘overpressure’ Controls that are initiated by the failure of
a preceding Control.
Hydrocarbon
under Pressure
Sequential Level of Control
HAZARD
Human Error
Close wrong Valve
Initiating Action High High
High
Pressure Pressure
Pressure Loss of
Overpressure Alarm and Automatic
Safety Relief Containment
Operator Shut-down
Valve
THREAT Intervention Valve
Plugged Line Top Event
CONTROL CONTROL CONTROL
Initiating Action
Barrier Thinking
Control
• Recovery Barrier Thinking
Equally Recovery measure can fail.
‘Barrier Thinking’ again, is applying sufficient sequential measures that can provide enough
response in the event of a failure of a barrier element.
Hydrocarbon
under Pressure
Sequential Level of Recovery
HAZARD
Gas
Loss of Detection
Automatic
Ignition
Overpressure Containment Alarm and
Blow-Down
Source Fire, Explosion
Operator Control
THREAT Intervention Consequence
Top Event
RECOVER RECOVER RECOVER

Barrier Thinking
Control
• Effectiveness
To be effective, a Control or Barrier must be able to:
• Stop the Threat from causing the Top Event
• Once the Top Event has happened, mitigate or reduce the Consequence Severity
me”
t ho
a
o this
ot d
n
“Do
Examplesof ineffective
(or missing)
barriers!

Barrier Thinking
Control
• ‘Swiss-Cheese’ Failure Model
Complete Control, Barrier and Recover failure
Longford Gas Plant
If e
ach
Co
Eve ntrol B
nt c a
an h rrier h
app as a
en, w
and eakne
the s
con s, and
seq t
uen hey co
ces in
may cide t
be m hen a
ajor Top
Texas City
Review Quiz
Barrier Thinking is?

a) A mindset to have multiple Controls and Barriers to guard against failure of one or more
ü measures.
b) About effectively installing barricades
c) About installing effective handrails
d) Ensuring all the right PPE is available
Hierarchy of Control is?

a) Allocation of authority at the right level
b) How to choose the right alarm system
c) Choosing which instrument system is best
d) A cascade of Control measures with decreasing effectiveness
ü

Summary
• What have we learned?

Learning Objectives
You should now be able to:

• Explain the potential consequences of not effectively managing Risk in our work activities
• List and describe the main building blocks of the Hazards and Effects Management Process
• Describe Hazards & Threats and list those commonly found at our sites and work areas
• Describe Risk Consequence & Probability and the process to determine Risk categories
• Describe ALARP and the basic requirements to achieve and prove it
• Describe the process of Barrier Thinking
and be able safely manage Hazards and their Effects in your workplace and
work activities.

Knowledge Test
• What have you learned?

Test of Acquired Knowledge
• Test of Acquired Knowledge

We shall now assess how much you have learnt.
The objective is to confirm that you have the knowledge and understanding to
effectively assess risk and perform your work duties safely.
• You can have up to 20 minutes to finish the test.
• You need to achieve a mark of 80% or higher to receive a positive record.
• Please write your ID, name & details clearly.
• Please do not disturb other people in the class while writing the test.
• When you have completed the test, please indicate and the instructor will collect it.
• It is a Multiple Choice Test.
Mark all the right answer(s) with a tick [ü] in the box.
If you wish to change an answer use an û over the ü.
• In all cases please read all answers and choose all that are correct.
There may be 1, 2, 3 or 4 correct answers.
We are testing that you do understand

Make it Safe,
Keep it Safe
Don’t Think it is Safe, Know Safety, No Pain

Know Why it is Safe No Safety, Know Pain
Identify
Assess
If You See It, Every Person,
then You Own It Safe, Every Day
Recovery
Control
If not You, then Who? Play by the Rules
If not Now, then When? and Stay Safe
There is Always time

Hazard Identification and Risk Management to do it Right 74

ASC - LRN - HSE - MGT - LHN - 9110-11 - HEMP-Basics v1.0

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

ASC - LRN - HSE - MGT - LHN - 9110-11 - HEMP-Basics v1.0

Uploaded by

Copyright:

Available Formats

HSE Management

Hazard Identification & Risk Management

Hazards and Effects Management Process [HEMP]

• Alarms and Escape Routes

Hazard Identification and Risk Management 2

• Maintain Your Attention on the Lesson

Hazard Identification and Risk Management 3

• In our Industry we are constantly faced with Risk.

• What do we need to help us

Hazard Identification and Risk Management 5

• Hazards and Effects Management Process [HEMP]

How are the hazards and their

Piper Alpha Al Jubail Texas City Macondo

• Hazards and Effects Management Process [HEMP]:

Hence, this Training Course

Element 1 Leadership Commitment

Element 2 Policy and Strategic Objectives

Element 4 Hazards & Effects Management and the Need

Element 6 Implementation and Monitoring

Element 8 Review and Upgrade It is for Your Safety

Hazard Identification and Risk Management 8

The Scope for this Learning Module is:

Hazard Identification and Risk Management 9

By the end of this session you will be able to:

Hazard Identification and Risk Management 10

A copy of the Learning Objectives is in the course handout.

Hazard Identification and Risk Management 11

1. Overview 2.Identify 6. ALARP

Hazard Identification and Risk Management 12

• HEMP Process Stages

Hazard Identification and Risk Management 13

• The HSE Control Framework

Hazard Identification and Risk Management 14

• Identify the Hazards

Hazard Identification and Risk Management 15

• Assess the Risks

Hazard Identification and Risk Management 16

• Control the Risk

Hazard Identification and Risk Management 17

• Recover from an Event

Hazard Identification and Risk Management 18

Hazard Identification and Risk Management 19

Hazard Identification and Risk Management 20

• The ‘Bow-Tie’ model

Hazard Identification and Risk Management 21

Hazard Identification and Risk Management 22

The first stage in the HEMP process is?

Which stage(s) focus on Protecting?

Hazard Identification and Risk Management 23

Hazard Identification and Risk Management 24

What could cause harm?

Temperature, Pressure, Chemical Motion, Chemical Mechanical, Motion Gravity, Motion

Motion, Mechanical Gravity, Motion Chemical Temperature, Motion, Pressure

Hazard Identification and Risk Management 27

What could cause a Hazard to be released?

Poor Visibility Crane Overload Improper Mixing Defective Seal

Hazard Identification and Risk Management 29

Moving Vehicles Rotating Machinery Personnel at Height

Loss of Containment Loss of Control Loss of Control Loss of Control

Loss of Control Loss of Control Exposure Loss of Containment

Which of the following are Hazards?

Hazard Identification and Risk Management 31

Hazard Identification and Risk Management 32