1/63
Overview of Process Safety,
Green Engineering, and
Inherently Safer Design
Harry J. Toups LSU Department of Chemical Engineering with
significant material from SACHE 2003 Workshop presentation
entitled: Inherently Safer Design, by
Dennis Hendershot
Rohm and Haas Company
2/63
Three Elements of Process Safety
Behavior
Systems Process
Process
Safety
3/63
Process Safety Milestone Practices
Pre-1930’s Identify who caused the loss
and punish the guilty
Pre-1970’s Find breakdown in, and fix
man-machine interface
1970’s, 80’s Development of risk
assessment techniques and
systematic approaches
1980’s + Performance-, risk-based
standards, regulations;
‘green’ and ‘inherent’ designs
Behavior
Process
Mgmt Systems
Comprehensive
4/63
Causes of Losses in Large Plant
Accidents
44
22
12 11
5 5
1
Mechanical Operator
Error
Unknown Process
Upsets
Natural
Hazards
Design Sabotage
and Arson
Accidents
(%)
Process
Design
5/63
Green chemistry and engineering –
A Definition
The design, commercialization, and
use of chemical processes and
products, which are feasible and
economical while minimizing:
1) generation of pollution at the source,
and
2) risk to human health and the
environment.
6/63
New paradigm for the environment
• Traditional environmental approach
– “End of pipe” waste treatment
– “Waste minimization” – an advance,
but we can go further
• Green chemistry and engineering
– Eliminate or dramatically reduce
hazards to the environment
7/63
– “Once you get something dirty, the
only way to get it clean is to make
something else dirty.”
– The best way to keep the world clean is
to not get it dirty to begin with.
Many of us learned this as children
• Dr. Suess –
The Cat in the Hat
Comes Back
8/63
Inherently Safer Design –
A Definition
The design of chemical processes and
products with specific attention to
eliminating hazards from the
manufacturing process rather than
relying on the control of these hazards
Notice the common philosophy to
Green Engineering?
9/63
New paradigm for safety
• Traditional safety approach
– “Add on” safety features
• Prevent - alarms, safety interlocks,
procedures, training
• Mitigate – sprinkler systems, water
curtains, emergency response
systems and procedures
• Inherently safer design
– Eliminate or significantly reduce
process hazards
10/63
Inherently safer design, green
chemistry, and green engineering
Green Chemistry
and Engineering
Inherently
Safer
Design
11/63
Why are we interested in
inherently safer design?
12/63
Flixborough, England (1974)
13/63
Flixborough, England (1974)
14/63
Henderson, Nevada, (1988)
15/63
What is inherently safer design?
• Inherent - “existing in something as a
permanent and inseparable element...”
– safety “built in”, not “added on”
• Eliminate or minimize hazards rather
than control hazards
• More a philosophy and way of thinking
than a specific set of tools and methods
– Applicable at all levels of design and
operation from conceptual design to plant
operations
• “Safer,” not “Safe”
16/63
Hazard
• An inherent physical or chemical
characteristic that has the potential for
causing harm to people, the
environment, or property (CCPS, 1992).
• Hazards are intrinsic to a material, or its
conditions of use.
• Examples
– Phosgene - toxic by inhalation
– Acetone - flammable
– High pressure steam - potential energy due
to pressure, high temperature
17/63
To eliminate hazards:
• Eliminate the material
• Change the material
• Change the conditions of use
18/63
Chemical Process Safety
Strategies
19/63
Inherent
• Eliminate or reduce the hazard by
changing to a process or materials which
are non-hazardous or less hazardous
• Integral to the product, process, or plant -
cannot be easily defeated or changed
without fundamentally altering the
process or plant design
• EXAMPLE
– Substituting water for a flammable solvent
(latex paints compared to oil base paints)
20/63
Passive
• Minimize hazard using process or
equipment design features which
reduce frequency or consequence
without the active functioning of
any device
• EXAMPLE
– Containment dike around a
hazardous material storage tank
21/63
Active
• Controls, safety interlocks, automatic shut down
systems
• Multiple active elements
– Sensor - detect hazardous condition
– Logic device - decide what to do
– Control element - implement action
• Prevent incidents, or mitigate the consequences
of incidents
• EXAMPLE
– High level alarm in a tank shuts automatic feed
valve
• Caution: Even protective systems can cause
incidents! (See Hendershot et al handouts)
22/63
Procedural
• Standard operating procedures,
safety rules and standard
procedures, emergency response
procedures, training
• EXAMPLE
– Confined space entry procedures
23/63
Batch Chemical Reactor Example
Hazard of concern
• Runaway reaction causing high
temperature and pressure and
potential reactor rupture
24/63
Passive
• Maximum adiabatic pressure for
reaction determined to be 150 psig
• Run reaction in a 250 psig design
reactor
• Hazard (pressure) still exists, but
passively contained by the
pressure vessel
25/63
Active
• Maximum adiabatic pressure for
100% reaction is 150 psig, reactor
design pressure is 50 psig
• Gradually add limiting reactant with
temperature control to limit
potential energy from reaction
• Use high temperature and pressure
interlocks to stop feed and apply
emergency cooling
• Provide emergency relief system
26/63
Procedural
• Maximum adiabatic pressure for
100% reaction is 150 psig, reactor
design pressure is 50 psig
• Gradually add limiting reactant with
temperature control to limit
potential energy from reaction
• Train operator to observe
temperature, stop feeds and apply
cooling if temperature exceeds
critical operating limit
27/63
Inherent
• Develop chemistry which is not
exothermic, or mildly exothermic
– Maximum adiabatic exotherm
temperature < boiling point of all
ingredients and onset temperature of
any decomposition or other
reactions
28/63
Which strategy should we use?
• Generally, in order of robustness
and reliability:
– Inherent
– Passive
– Active
– Procedural
• But - there is a place and need for
ALL of these strategies in a
complete safety program
29/63
Inherently Safer Design
Strategies
30/63
Inherently Safer Design Strategies
• Minimize
• Moderate
• Substitute
• Simplify
31/63
Minimize
• Use small quantities of hazardous
substances or energy
– Storage
– Intermediate storage
– Piping
– Process equipment
• “Process Intensification”
32/63
Benefits
• Reduced consequence of incident
(explosion, fire, toxic material
release)
• Improved effectiveness and
feasibility of other protective
systems – for example:
– Secondary containment
– Reactor dump or quench systems
33/63
Semi-batch nitration process
Batch Reactor
~6000 gallons
Organic Substrate and
solvents pre-charge
Nitric acid gradual
addition
Catalyst (usually
sulfuric acid) feed
or pre-charge
34/63
How can Process Intensification
be used in this reaction?
• Mixing – bringing reactants into
contact with each other
• Mass transfer – from aqueous
phase (nitric acid) to organic phase
(organic substrate)
• Heat removal
35/63
CSTR Nitration Process
Product
Raw
Material
Feeds
Organic substrate
Catalyst
Nitric Acid
Reactor ~ 100 gallons
36/63
One step further:
Do this reaction in a pipe reactor?
Raw
Material
Feeds
Organic substrate
Catalyst
Nitric Acid
Cooled continuous
mixer/reactor
37/63
Scale up
38/63
Scale out
39/63
On-demand phosgene generation
• Continuous process to produce phosgene
• Phosgene consumers are batch processes
• No phosgene storage
• Engineering challenges
– Rapid startup and shutdown
– Quality control
– Instrumentation and dynamic process
control
– Disposal of “tail gas” and inerts
40/63
Moderate
• Dilution
• Refrigeration
• Less severe processing conditions
• Physical characteristics
• Containment
– Better described as “passive” rather
than “inherent”
41/63
Dilution
• Aqueous ammonia instead of
anhydrous
• Aqueous HCl in place of anhydrous
HCl
• Sulfuric acid in place of oleum
• Wet benzoyl peroxide in place of dry
• Dynamite instead of nitroglycerine
42/63
Effect of dilution
43/63
Less severe processing conditions
• Ammonia manufacture
– 1930s - pressures up to 600 bar
– 1950s - typically 300-350 bar
– 1980s - plants operating at pressures
of 100-150 bar were being built
• Result of understanding and
improving the process
• Lower pressure plants are cheaper,
more efficient, as well as safer
44/63
Substitute
• Substitute a less hazardous
reaction chemistry
• Replace a hazardous material with
a less hazardous alternative
45/63
Substitute materials
• Water based coatings and paints in
place of solvent based alternatives
– Reduce fire hazard
– Less toxic
– Less odor
– More environmentally friendly
– Reduce hazards for end user and
also for the manufacturer
46/63
Simplify
• Eliminate unnecessary complexity
to reduce risk of human error
– QUESTION ALL COMPLEXITY! Is it
really necessary?
47/63
Simplify - eliminate equipment
• Reactive distillation methyl acetate
process (Eastman Chemical)
• Which is simpler?
Reactor
Splitter
Extractive
Distillaton
Solvent
Recovery
Methanol
Recovery
Extractor
Azeo
Column
Decanter
Flash
Column
Color
Column
Flash
Column
Water
Water
Heavies
Methyl
Acetate
Water
Catalyst
Methanol
Acetic Acid
Reactor
Column
Impurity
Removal
Columns
Water
Heavies
Acetic Acid
Methanol
Sulfuric
Acid
Methyl
Acetate
48/63
Modified methyl acetate process
• Fewer vessels
• Fewer pumps
• Fewer flanges
• Fewer instruments
• Fewer valves
• Less piping
• ......
49/63
But, it isn’t simpler in every way
• Reactive distillation column itself is
more complex
• Multiple unit operations occur
within one vessel
• More complex to design
• More difficult to control and
operate
50/63
Single, complex batch reactor
Condenser
Distillate
Receiver
Refrigerated
Brine
Large
Rupture
Disk
A
B
C
D
E
Condensate
Water Supply
Steam
Water Return
51/63
A sequence of simpler batch reactors
for the same process
A
B
C
D
E
Distillate
Receiver
Condenser
Water Supply
Water Return
Refrigerated
Brine
Steam
Condensate
Large Rupture
Disk
52/63
Inherent safety conflicts
• In the previous example
– Each vessel is simpler
• But
– There are now three vessels, the
overall plant is more complex in some
ways
– Compare to methyl acetate example
• Need to understand specific hazards
for each situation to decide what is
best
53/63
Conflicts and Tradeoffs
54/63
Some problems
• The properties of a technology which
make it hazardous may be the same as
the properties which make it useful:
– Airplanes travel at 600 mph
– Gasoline is flammable
• Any replacement must have the ability to store
a large quantity of energy in a compact form
– Chlorine is toxic
• Control of the hazard is the critical issue
in safely getting the benefits of the
technology
55/63
Multiple hazards
• Everything has multiple hazards
– Automobile travel
• velocity (energy), flammable fuel,
exhaust gas toxicity, hot surfaces,
pressurized cooling system,
electricity......
– Chemical process or product
• acute toxicity, flammability,
corrosiveness, chronic toxicity,
various environmental impacts,
reactivity.......
56/63
What does inherently safer mean?
• Inherently safer is in the context of
one or more of the multiple hazards
• There may be conflicts
– Example - CFC refrigerants
• low acute toxicity, not flammable
• potential for environmental damage,
long term health impacts
• Are they inherently safer than
alternatives such as propane
(flammable) or ammonia (flammable
and toxic)?
57/63
Inherently safer hydrocarbon
based refrigerators?
• Can we redesign the refrigeration
machine to minimize the quantity of
refrigerant sufficiently that we
could still regard it as inherently
safer?
– Home refrigerators – perhaps (<120
grams)
– Industrial scale applications –
probably not, need to rely on
passive, active, procedural risk
management strategies
58/63
Multiple impacts
• Different populations may perceive the
inherent safety of different technology
options differently
• Example - chlorine handling - 1 ton
cylinders vs. a 90 ton rail car
– A neighbor two miles away?
– An operator who has to connect and
disconnect cylinders 90 times instead
of a rail car once?
• Who is right?
59/63
Inherently safer = safer
• Air travel
– several hundred people
– 5 miles up
– control in 3 dimensions
– 600 mph
– thousands of gallons of
fuel
– passengers in a
pressure vessel
– .........
• Automobile travel
– a few people
– on the ground
– control in 2 dimensions
– 60 mph
– a few gallons of fuel
– might even be a
convertible
– .........
 Automobile travel is inherently safer
 But, what is the safest way to travel from
Washington to Los Angeles?
 Why?
60/63
At what level of design should
engineers consider inherently
safer design?
• Selecting Technology? Plant Design?
Equipment Details? Operations?
• Best answer?– All levels!
• Inherently safer design is not a meeting.
• Inherently safer design is a way of
thinking, a way of approaching
technology design at every level of detail
– part of the daily thought process.
61/63
Questions a designer should ask
when he has identified a hazard
In this order
1. Can I eliminate this hazard?
2. If not, can I reduce the magnitude of the
hazard?
3. Do the alternatives identified in questions 1
and 2 increase the magnitude of any other
hazards, or create new hazards?
4. At this point, what technical and management
systems are required to manage the hazards
which inevitably will remain?
62/63
The Future: Inherently safer design
• Some hazardous materials and processes
can be eliminated or the hazards
dramatically reduced.
• The useful characteristics of other
materials or processes make their
continued use essential to society for the
foreseeable future … we will continue to
manage the risks.
• E.g., Air travel
63/63
0
2
4
6
8
10
12
1973 1983 1993 2003
Total
Recordable
Injury/Illness
Rate
Is It Worth the Effort?
Number of US workplace injuries/illnesses
per 100 employees continues to drop …
… due to comprehensive safety strategies,
including Inherently Safer Design
64/63
END OF
PRESENTATION

inherently safer design for engineering.ppt

  • 1.
    1/63 Overview of ProcessSafety, Green Engineering, and Inherently Safer Design Harry J. Toups LSU Department of Chemical Engineering with significant material from SACHE 2003 Workshop presentation entitled: Inherently Safer Design, by Dennis Hendershot Rohm and Haas Company
  • 2.
    2/63 Three Elements ofProcess Safety Behavior Systems Process Process Safety
  • 3.
    3/63 Process Safety MilestonePractices Pre-1930’s Identify who caused the loss and punish the guilty Pre-1970’s Find breakdown in, and fix man-machine interface 1970’s, 80’s Development of risk assessment techniques and systematic approaches 1980’s + Performance-, risk-based standards, regulations; ‘green’ and ‘inherent’ designs Behavior Process Mgmt Systems Comprehensive
  • 4.
    4/63 Causes of Lossesin Large Plant Accidents 44 22 12 11 5 5 1 Mechanical Operator Error Unknown Process Upsets Natural Hazards Design Sabotage and Arson Accidents (%) Process Design
  • 5.
    5/63 Green chemistry andengineering – A Definition The design, commercialization, and use of chemical processes and products, which are feasible and economical while minimizing: 1) generation of pollution at the source, and 2) risk to human health and the environment.
  • 6.
    6/63 New paradigm forthe environment • Traditional environmental approach – “End of pipe” waste treatment – “Waste minimization” – an advance, but we can go further • Green chemistry and engineering – Eliminate or dramatically reduce hazards to the environment
  • 7.
    7/63 – “Once youget something dirty, the only way to get it clean is to make something else dirty.” – The best way to keep the world clean is to not get it dirty to begin with. Many of us learned this as children • Dr. Suess – The Cat in the Hat Comes Back
  • 8.
    8/63 Inherently Safer Design– A Definition The design of chemical processes and products with specific attention to eliminating hazards from the manufacturing process rather than relying on the control of these hazards Notice the common philosophy to Green Engineering?
  • 9.
    9/63 New paradigm forsafety • Traditional safety approach – “Add on” safety features • Prevent - alarms, safety interlocks, procedures, training • Mitigate – sprinkler systems, water curtains, emergency response systems and procedures • Inherently safer design – Eliminate or significantly reduce process hazards
  • 10.
    10/63 Inherently safer design,green chemistry, and green engineering Green Chemistry and Engineering Inherently Safer Design
  • 11.
    11/63 Why are weinterested in inherently safer design?
  • 12.
  • 13.
  • 14.
  • 15.
    15/63 What is inherentlysafer design? • Inherent - “existing in something as a permanent and inseparable element...” – safety “built in”, not “added on” • Eliminate or minimize hazards rather than control hazards • More a philosophy and way of thinking than a specific set of tools and methods – Applicable at all levels of design and operation from conceptual design to plant operations • “Safer,” not “Safe”
  • 16.
    16/63 Hazard • An inherentphysical or chemical characteristic that has the potential for causing harm to people, the environment, or property (CCPS, 1992). • Hazards are intrinsic to a material, or its conditions of use. • Examples – Phosgene - toxic by inhalation – Acetone - flammable – High pressure steam - potential energy due to pressure, high temperature
  • 17.
    17/63 To eliminate hazards: •Eliminate the material • Change the material • Change the conditions of use
  • 18.
  • 19.
    19/63 Inherent • Eliminate orreduce the hazard by changing to a process or materials which are non-hazardous or less hazardous • Integral to the product, process, or plant - cannot be easily defeated or changed without fundamentally altering the process or plant design • EXAMPLE – Substituting water for a flammable solvent (latex paints compared to oil base paints)
  • 20.
    20/63 Passive • Minimize hazardusing process or equipment design features which reduce frequency or consequence without the active functioning of any device • EXAMPLE – Containment dike around a hazardous material storage tank
  • 21.
    21/63 Active • Controls, safetyinterlocks, automatic shut down systems • Multiple active elements – Sensor - detect hazardous condition – Logic device - decide what to do – Control element - implement action • Prevent incidents, or mitigate the consequences of incidents • EXAMPLE – High level alarm in a tank shuts automatic feed valve • Caution: Even protective systems can cause incidents! (See Hendershot et al handouts)
  • 22.
    22/63 Procedural • Standard operatingprocedures, safety rules and standard procedures, emergency response procedures, training • EXAMPLE – Confined space entry procedures
  • 23.
    23/63 Batch Chemical ReactorExample Hazard of concern • Runaway reaction causing high temperature and pressure and potential reactor rupture
  • 24.
    24/63 Passive • Maximum adiabaticpressure for reaction determined to be 150 psig • Run reaction in a 250 psig design reactor • Hazard (pressure) still exists, but passively contained by the pressure vessel
  • 25.
    25/63 Active • Maximum adiabaticpressure for 100% reaction is 150 psig, reactor design pressure is 50 psig • Gradually add limiting reactant with temperature control to limit potential energy from reaction • Use high temperature and pressure interlocks to stop feed and apply emergency cooling • Provide emergency relief system
  • 26.
    26/63 Procedural • Maximum adiabaticpressure for 100% reaction is 150 psig, reactor design pressure is 50 psig • Gradually add limiting reactant with temperature control to limit potential energy from reaction • Train operator to observe temperature, stop feeds and apply cooling if temperature exceeds critical operating limit
  • 27.
    27/63 Inherent • Develop chemistrywhich is not exothermic, or mildly exothermic – Maximum adiabatic exotherm temperature < boiling point of all ingredients and onset temperature of any decomposition or other reactions
  • 28.
    28/63 Which strategy shouldwe use? • Generally, in order of robustness and reliability: – Inherent – Passive – Active – Procedural • But - there is a place and need for ALL of these strategies in a complete safety program
  • 29.
  • 30.
    30/63 Inherently Safer DesignStrategies • Minimize • Moderate • Substitute • Simplify
  • 31.
    31/63 Minimize • Use smallquantities of hazardous substances or energy – Storage – Intermediate storage – Piping – Process equipment • “Process Intensification”
  • 32.
    32/63 Benefits • Reduced consequenceof incident (explosion, fire, toxic material release) • Improved effectiveness and feasibility of other protective systems – for example: – Secondary containment – Reactor dump or quench systems
  • 33.
    33/63 Semi-batch nitration process BatchReactor ~6000 gallons Organic Substrate and solvents pre-charge Nitric acid gradual addition Catalyst (usually sulfuric acid) feed or pre-charge
  • 34.
    34/63 How can ProcessIntensification be used in this reaction? • Mixing – bringing reactants into contact with each other • Mass transfer – from aqueous phase (nitric acid) to organic phase (organic substrate) • Heat removal
  • 35.
    35/63 CSTR Nitration Process Product Raw Material Feeds Organicsubstrate Catalyst Nitric Acid Reactor ~ 100 gallons
  • 36.
    36/63 One step further: Dothis reaction in a pipe reactor? Raw Material Feeds Organic substrate Catalyst Nitric Acid Cooled continuous mixer/reactor
  • 37.
  • 38.
  • 39.
    39/63 On-demand phosgene generation •Continuous process to produce phosgene • Phosgene consumers are batch processes • No phosgene storage • Engineering challenges – Rapid startup and shutdown – Quality control – Instrumentation and dynamic process control – Disposal of “tail gas” and inerts
  • 40.
    40/63 Moderate • Dilution • Refrigeration •Less severe processing conditions • Physical characteristics • Containment – Better described as “passive” rather than “inherent”
  • 41.
    41/63 Dilution • Aqueous ammoniainstead of anhydrous • Aqueous HCl in place of anhydrous HCl • Sulfuric acid in place of oleum • Wet benzoyl peroxide in place of dry • Dynamite instead of nitroglycerine
  • 42.
  • 43.
    43/63 Less severe processingconditions • Ammonia manufacture – 1930s - pressures up to 600 bar – 1950s - typically 300-350 bar – 1980s - plants operating at pressures of 100-150 bar were being built • Result of understanding and improving the process • Lower pressure plants are cheaper, more efficient, as well as safer
  • 44.
    44/63 Substitute • Substitute aless hazardous reaction chemistry • Replace a hazardous material with a less hazardous alternative
  • 45.
    45/63 Substitute materials • Waterbased coatings and paints in place of solvent based alternatives – Reduce fire hazard – Less toxic – Less odor – More environmentally friendly – Reduce hazards for end user and also for the manufacturer
  • 46.
    46/63 Simplify • Eliminate unnecessarycomplexity to reduce risk of human error – QUESTION ALL COMPLEXITY! Is it really necessary?
  • 47.
    47/63 Simplify - eliminateequipment • Reactive distillation methyl acetate process (Eastman Chemical) • Which is simpler? Reactor Splitter Extractive Distillaton Solvent Recovery Methanol Recovery Extractor Azeo Column Decanter Flash Column Color Column Flash Column Water Water Heavies Methyl Acetate Water Catalyst Methanol Acetic Acid Reactor Column Impurity Removal Columns Water Heavies Acetic Acid Methanol Sulfuric Acid Methyl Acetate
  • 48.
    48/63 Modified methyl acetateprocess • Fewer vessels • Fewer pumps • Fewer flanges • Fewer instruments • Fewer valves • Less piping • ......
  • 49.
    49/63 But, it isn’tsimpler in every way • Reactive distillation column itself is more complex • Multiple unit operations occur within one vessel • More complex to design • More difficult to control and operate
  • 50.
    50/63 Single, complex batchreactor Condenser Distillate Receiver Refrigerated Brine Large Rupture Disk A B C D E Condensate Water Supply Steam Water Return
  • 51.
    51/63 A sequence ofsimpler batch reactors for the same process A B C D E Distillate Receiver Condenser Water Supply Water Return Refrigerated Brine Steam Condensate Large Rupture Disk
  • 52.
    52/63 Inherent safety conflicts •In the previous example – Each vessel is simpler • But – There are now three vessels, the overall plant is more complex in some ways – Compare to methyl acetate example • Need to understand specific hazards for each situation to decide what is best
  • 53.
  • 54.
    54/63 Some problems • Theproperties of a technology which make it hazardous may be the same as the properties which make it useful: – Airplanes travel at 600 mph – Gasoline is flammable • Any replacement must have the ability to store a large quantity of energy in a compact form – Chlorine is toxic • Control of the hazard is the critical issue in safely getting the benefits of the technology
  • 55.
    55/63 Multiple hazards • Everythinghas multiple hazards – Automobile travel • velocity (energy), flammable fuel, exhaust gas toxicity, hot surfaces, pressurized cooling system, electricity...... – Chemical process or product • acute toxicity, flammability, corrosiveness, chronic toxicity, various environmental impacts, reactivity.......
  • 56.
    56/63 What does inherentlysafer mean? • Inherently safer is in the context of one or more of the multiple hazards • There may be conflicts – Example - CFC refrigerants • low acute toxicity, not flammable • potential for environmental damage, long term health impacts • Are they inherently safer than alternatives such as propane (flammable) or ammonia (flammable and toxic)?
  • 57.
    57/63 Inherently safer hydrocarbon basedrefrigerators? • Can we redesign the refrigeration machine to minimize the quantity of refrigerant sufficiently that we could still regard it as inherently safer? – Home refrigerators – perhaps (<120 grams) – Industrial scale applications – probably not, need to rely on passive, active, procedural risk management strategies
  • 58.
    58/63 Multiple impacts • Differentpopulations may perceive the inherent safety of different technology options differently • Example - chlorine handling - 1 ton cylinders vs. a 90 ton rail car – A neighbor two miles away? – An operator who has to connect and disconnect cylinders 90 times instead of a rail car once? • Who is right?
  • 59.
    59/63 Inherently safer =safer • Air travel – several hundred people – 5 miles up – control in 3 dimensions – 600 mph – thousands of gallons of fuel – passengers in a pressure vessel – ......... • Automobile travel – a few people – on the ground – control in 2 dimensions – 60 mph – a few gallons of fuel – might even be a convertible – .........  Automobile travel is inherently safer  But, what is the safest way to travel from Washington to Los Angeles?  Why?
  • 60.
    60/63 At what levelof design should engineers consider inherently safer design? • Selecting Technology? Plant Design? Equipment Details? Operations? • Best answer?– All levels! • Inherently safer design is not a meeting. • Inherently safer design is a way of thinking, a way of approaching technology design at every level of detail – part of the daily thought process.
  • 61.
    61/63 Questions a designershould ask when he has identified a hazard In this order 1. Can I eliminate this hazard? 2. If not, can I reduce the magnitude of the hazard? 3. Do the alternatives identified in questions 1 and 2 increase the magnitude of any other hazards, or create new hazards? 4. At this point, what technical and management systems are required to manage the hazards which inevitably will remain?
  • 62.
    62/63 The Future: Inherentlysafer design • Some hazardous materials and processes can be eliminated or the hazards dramatically reduced. • The useful characteristics of other materials or processes make their continued use essential to society for the foreseeable future … we will continue to manage the risks. • E.g., Air travel
  • 63.
    63/63 0 2 4 6 8 10 12 1973 1983 19932003 Total Recordable Injury/Illness Rate Is It Worth the Effort? Number of US workplace injuries/illnesses per 100 employees continues to drop … … due to comprehensive safety strategies, including Inherently Safer Design
  • 64.