UProcess
Process accident case · Inadequate isolation

The valves were closed.The reactor was not isolated.

No welding, no entry, so valves seemed enough. The cutting wheel was hot work.

From Trevor Kletz, What Went Wrong?Watch the case · 4 minUProcess on YouTube
Process accident case · Inadequate isolation

The valves were closed. The reactor was not isolated.

No welding, no entry, so valves seemed enough. The cutting wheel was hot work.

A reactor on a process deck; a worker cuts the pipeline at its base with an abrasive wheel, sparks flying, next to a closed valve; another man stands nearby.12345The moment before ignition
  1. 1The closed valves. Trusted as the isolation. Vapour passed through them.
  2. 2The reactor. Washed out for maintenance. About 7 kg of vapour was enough.
  3. 3The cut. A high-speed abrasive wheel through an attached line: it throws a flame and the pipe glows red.
  4. 4The flange. Where a slip-plate or a removed spool would have ended it.
  5. 5The men at the vessel. The head was blown off. Two men were killed.
What happened, in orderSeven kilograms of vapour. Two men killed. Every valve closed.
  1. Washed outReactor prepared for maintenance and washed out
  2. Valves relied onNo welding, no entry: valves relied on, no slip-plates
  3. Vapour leaksFlammable vapour leaks through the closed valves
  4. Abrasive cutAn abrasive wheel cuts a pipeline on the vessel
  5. IgnitionVapour ignites. Head blown off; two men killed
Bow-tie · none of the five barriers was in place on the day
HazardFlammable hydrocarbonHydrocarbon on thelive side of valvesValve seats passingduring the jobHead blown off,two men killedFlammable vapourinside the reactorPositive isolationIsolation ratedagainst the hazardIsolation provenbefore break-inHot work controlfor abrasive cuttingGas test beforeand during hot workCracked barrier = absent or failed on the day
The five barriers
BarrierWhat it isWhat happened insteadSystem element
1 · Positive isolationEvery line into the vessel slip-plated or physically disconnected before anyone works on it.Valves were relied on because no welding and no entry were planned.Safe work practices
2 · Isolation rated against the hazardThe isolation follows what the lines contain, not the task: a valve-only isolation is rated before anyone accepts it.Decided on the task — no welding, no entry — not on what the lines held.Hazard analysis
3 · Isolation proven before break-inBefore a line is cut, the isolation is proven: vented, drained, no flow, no vapour.No proof of isolation is described. Vapour leaked through the closed valves.Operating procedures
4 · Hot work control for abrasive cuttingCutting and grinding are hot work: the same permit and precautions as welding.Welding was counted as the ignition risk; the abrasive wheel was not.Safe work practices
5 · Gas test before and during hot workThe atmosphere at the cut and inside the vessel is measured before the work and repeated while it lasts.No gas test is described. About 7 kg of vapour was enough for the explosion.Safe work practices
The rule

A closed valve is not an isolation. Before anyone breaks into a line, it is blinded or disconnected.

Safety talk · ask the crew
  1. Which lines into our next vessel are only valved?
  2. Who decided the isolation — the hazard, or the task?
  3. Which of our tools make sparks without being called hot work?
Positive isolationSlip-plateBreak-inHot workGas test
Before breaking into a line
  • Every line blinded or disconnected
  • Any valve-only isolation rated and approved
  • Isolation proven before the cut
  • Cutting and grinding under a hot work permit
  • Gas test before and during the work
“A closed valve is not an isolation. Valves are not good enough.”After Trevor Kletz, What Went Wrong?
Made with UProcess
Click the sheet to read it full screen