vaayaa Inclusive Education
Industrial risk assessment

Industrial Safety and Process Engineering Risk Assessment: Containment, Isolation and Control Risks

A worked example of how a process plant team identifies, scores and controls the hazards that threaten people, equipment and the environment, from loss of containment and isolation errors to design defects and procedural deviations.

Updated November 2026 8 hazards assessed Review every 6 months Highest risk: Critical to Medium
See the Industrial Safety and Process Engineering course

Executive summary

This assessment shows how a process plant team can find, rate and control the hazards that could harm people, damage equipment or release material into the environment. Eight hazards were selected because they are plausible in everyday operation, maintenance, design and supply work. Isolation errors and procedural deviations during start up and shutdown carry the highest inherent scores, with loss of containment and unverified safety functions close behind. Each hazard is scored before controls and again after existing and added controls. Most fall to Medium or Low once added controls are in place, but isolation error stays at Medium because the potential harm to people is severe. The first actions are a verified isolation procedure, a dated test schedule for safety functions, a formal change review and supplier acceptance checks. The plant is a teaching example, so every score illustrates method rather than a real operation.

Focus area
Industrial safety and process engineering
Setting
Continuous process plant with pressurized vessels, piping, rotating equipment, electrical distribution and contracted maintenance support
Method
Five by five likelihood and severity risk register with inherent and residual scoring

Scope

This assessment covers a process plant's operating area, its maintenance work, and the design and supply of the equipment it depends on, from start up and shutdown to routine operation. It considers risks to people, process integrity, assets and the environment. Jurisdiction, plant size, process chemistry and technology are not specified, so they are treated as assumptions for teaching. It is not a substitute for a formal site-specific process hazard review.

Context

The plant has a process unit with storage, pumps, heat exchangers and pressure vessels, a control system with safety instrumented functions, an electrical distribution network and a maintenance team that includes contractors. Operators run the unit from a control room and work on the plant under permits. Equipment comes from several suppliers, and design changes pass through an engineering review. Each risk is scored before controls to show its natural level, then again after the existing and added controls.

Objectives, assets and stakeholders

The objective is to run the plant safely and reliably, prevent loss of containment and injury, protect equipment and the environment, and meet legal duties to workers and the public. Assets in scope are process vessels and piping, rotating and static equipment, instrumentation and safety functions, electrical systems, stored materials and the control room. Stakeholders include operators, maintenance staff and contractors, site management, engineers, neighboring communities, regulators and suppliers. Each risk has one owner role, and the plant manager reviews the register with site leaders each quarter.

Risk matrix: before and after controls

Each cell shows hazard numbers placed by likelihood and impact. Compare the two grids to see how controls move each hazard.

Before controls

Inherent risk

Risk before controls: rows are likelihood from almost certain to rare, columns are impact from insignificant to catastrophic. Cells list hazard numbers.
1
Insignificant		 2
Minor		 3
Moderate		 4
Major		 5
Catastrophic
5 Almost certain
4 Likely Likelihood 4, impact 4, score 16, high: H05 Likelihood 4, impact 5, score 20, critical: H02
3 Possible Likelihood 3, impact 3, score 9, medium: H06 Likelihood 3, impact 4, score 12, high: H03 H08 Likelihood 3, impact 5, score 15, high: H01
2 Unlikely Likelihood 2, impact 4, score 8, medium: H07 Likelihood 2, impact 5, score 10, high: H04
1 Rare

After controls

Residual risk

Risk after controls: rows are likelihood from almost certain to rare, columns are impact from insignificant to catastrophic. Cells list hazard numbers.
1
Insignificant		 2
Minor		 3
Moderate		 4
Major		 5
Catastrophic
5 Almost certain
4 Likely
3 Possible
2 Unlikely Likelihood 2, impact 2, score 4, low: H06 Likelihood 2, impact 3, score 6, medium: H03 H05 H08 Likelihood 2, impact 4, score 8, medium: H01 H02
1 Rare Likelihood 1, impact 3, score 3, low: H07 Likelihood 1, impact 4, score 4, low: H04
  • Low 1 to 4
  • Medium 5 to 9
  • High 10 to 16
  • Critical 17 to 25

Hazard register

A summary first, then the detail for each hazard.

Summary of hazards with scores before and after controls
No.HazardBeforeAfterOwner
H01 Loss of containment from process equipment 15 High 8 Medium Mechanical integrity lead
H02 Isolation error during maintenance work 20 Critical 8 Medium Maintenance manager
H03 Design or specification mismatch in components 12 High 6 Medium Design engineering lead
H04 Electrical energy exposure during work and operation 10 High 4 Low Electrical engineering lead
H05 Procedural deviation during start up and shutdown 16 High 6 Medium Operations superintendent
H06 Supplier component quality and spares dependency 9 Medium 4 Low Supply chain manager
H07 Environmental release from drains or wastewater 8 Medium 3 Low Environmental advisor
H08 Unverified safety functions and open bypasses 12 High 6 Medium Instrumentation lead
H01

Loss of containment from process equipment

Safety Before 15 After 8

A vessel, pipe, seal or flange fails or leaks, releasing process fluid that may ignite, burn, poison or pollute.

Who or what is affected: Operators, maintainers, neighboring people and the environment

Causes

Corrosion, fatigue, vibration and seals used beyond their service life.

Consequences

Fire, toxic exposure, injury, environmental damage and unplanned shutdown.

Existing controls

  • Pressure vessels are inspected on a planned schedule.
  • Gas and vapor detectors alarm in the control room.

Control gaps

Inspection intervals are not tied to measured corrosion rates.

Additional controls

  • Prevent: Replace corroded or aging piping on a risk ranked basis and record each change.
  • Detect: Add leak checks on critical joints at each shift round and log the results.
Likelihood 3 x impact 5 before; 2 x 4 after Owner: Mechanical integrity lead Target: Within 60 days Early warning: Repeated weeping or leak alarms from the same joint or line within a month.
H02

Isolation error during maintenance work

Safety Before 20 After 8

Equipment is opened, energized or returned to service while stored energy or process fluid remains, because isolation is incomplete or misunderstood.

Who or what is affected: Maintenance staff, contractors and nearby operators

Causes

Time pressure, unclear drawings, shift changes and reliance on memory.

Consequences

Serious injury or death, release of fluid and loss of equipment.

Existing controls

  • Work permits name the equipment and the required isolation points.
  • Lockout tags are fitted to isolation valves and switches.

Control gaps

Isolation drawings are out of date, and verification is not always independent.

Additional controls

  • Prevent: Require independent verification of isolation by a second competent person before work starts.
  • Detect: Test for zero energy and zero pressure at the work point and record the result on the permit.
Likelihood 4 x impact 5 before; 2 x 4 after Owner: Maintenance manager Target: Within 30 days Early warning: Permits closed with open or unverified isolation points found during sampled audits.
H03

Design or specification mismatch in components

Operational Before 12 After 6

A component is installed with a rating, material or capacity that does not match the process conditions, so it fails under normal or upset operation.

Who or what is affected: Operators, maintainers, the process and nearby people

Causes

Inaccurate data sheets, process changes not carried into design, and unapproved substitutions.

Consequences

Premature failure, leaks, unsafe operation and costly rework.

Existing controls

  • Design packages are reviewed by a second engineer.
  • Equipment data sheets are filed with each asset record.

Control gaps

Substitutions are approved by maintenance without engineering review.

Additional controls

  • Prevent: Check every replacement against the original specification and current process conditions before purchase.
  • Detect: Compare as built drawings with the design basis at each commissioning.
Likelihood 3 x impact 4 before; 2 x 3 after Owner: Design engineering lead Target: Within 45 days Early warning: A substitution request for a part raised without an engineering sign off.
H04

Electrical energy exposure during work and operation

Safety Before 10 After 4

Energized equipment, arc flash or stored charge injures people working on switchgear, motors or control panels.

Who or what is affected: Electrical technicians, maintainers and operators

Causes

Live working, unclear labels and worn insulation.

Consequences

Burns, electrocution, arc flash injury and fire.

Existing controls

  • Electrical work is restricted to authorized and trained staff.
  • Arc rated protective clothing is issued for switchgear work.

Control gaps

Arc flash labels are not checked against current fault levels.

Additional controls

  • Prevent: Use remote racking and fixed barriers for switchgear wherever the design allows.
  • Respond: Keep a rehearsed first aid and rescue plan for electrical incidents, reviewed each year.
Likelihood 2 x impact 5 before; 1 x 4 after Owner: Electrical engineering lead Target: Within 30 days Early warning: Live work requests raised more than once in a month for the same equipment.
H05

Procedural deviation during start up and shutdown

People Before 16 After 6

Operators skip a step, use an outdated procedure or make a sequencing error during start up or shutdown, so the process moves outside its safe limits.

Who or what is affected: Operators, nearby staff and the plant

Causes

Fatigue, gaps at shift handover, pressure to restart and procedures not updated.

Consequences

Overpressure, runaway reaction, equipment damage and injury.

Existing controls

  • Written start up and shutdown procedures are kept in the control room.
  • Operators attend a yearly simulation of abnormal events.

Control gaps

Procedure changes are not always reflected in the control room copy.

Additional controls

  • Prevent: Use a checklist with second operator confirmation at each critical step.
  • Detect: Review alarm logs and deviation records after every start up and shutdown.
Likelihood 4 x impact 4 before; 2 x 3 after Owner: Operations superintendent Target: Within 45 days Early warning: Process readings outside the normal range during a start up that did not trigger a review.
H06

Supplier component quality and spares dependency

Supplier Before 9 After 4

A supplier delivers counterfeit, damaged or out of specification parts, or fails to deliver spares, so the plant runs with unsafe or unavailable equipment.

Who or what is affected: Maintenance, operators and the supply chain team

Causes

Single source supply, price pressure and weak incoming checks.

Consequences

Failure in service, delayed repair and extended shutdown.

Existing controls

  • An approved supplier list is maintained by procurement.
  • Incoming parts are visually inspected on arrival.

Control gaps

Certificates are filed but not checked against the actual part number.

Additional controls

  • Prevent: Require certificates of conformity and traceability for critical parts before acceptance.
  • Respond: Hold a list of two qualified alternative suppliers for each critical spare.
Likelihood 3 x impact 3 before; 2 x 2 after Owner: Supply chain manager Target: Within 60 days Early warning: Repeated late deliveries or certificate mismatches from the same supplier within a quarter.
H07

Environmental release from drains or wastewater

Environmental Before 8 After 3

Drains, bunds or wastewater systems fail to contain or treat material, so harmful substances reach air, water or soil outside the site.

Who or what is affected: Neighboring residents, wildlife, water users and site staff

Causes

Overfilling, blocked drains and failed monitoring equipment.

Consequences

Contamination, regulatory action, cleanup cost and harm to the community.

Existing controls

  • Drains and bunds are fitted around storage tanks.
  • Discharge levels are monitored at the outlet.

Control gaps

Monitoring is sampled weekly, so short release events can go unseen.

Additional controls

  • Prevent: Inspect bund integrity and drain valves monthly and record any repairs.
  • Detect: Install continuous monitoring at the discharge point with alarm thresholds set below the limit.
Likelihood 2 x impact 4 before; 1 x 3 after Owner: Environmental advisor Target: Within 90 days Early warning: Repeated drain or bund level alarms, or outlet readings close to the discharge limit.
H08

Unverified safety functions and open bypasses

Legal and compliance Before 12 After 6

Safety functions are not tested on schedule, or are bypassed for convenience and never restored, so protection fails when a demand arrives.

Who or what is affected: Operators, maintainers, neighboring people and the plant

Causes

Busy schedules, nuisance trips and unclear limits on bypass use.

Consequences

Failure to shut down, overpressure, release or fire.

Existing controls

  • Safety functions are listed in a register with test dates.
  • Bypasses need written approval from the shift supervisor.

Control gaps

Bypass duration is not tracked against the approval.

Additional controls

  • Prevent: Require every bypass to have an end time and a named approver, checked at each handover.
  • Detect: Review open bypasses and overdue tests at the weekly safety meeting.
Likelihood 3 x impact 4 before; 2 x 3 after Owner: Instrumentation lead Target: Within 45 days Early warning: Any bypass open beyond one shift, or a safety test past its due date.

Rating method and evaluation

Each risk is rated on two five-point scales. Likelihood runs from Rare to Almost certain, and severity runs from Negligible to Catastrophic. Multiplying them gives a score from 1 to 25, placed in one of four bands: Low from 1 to 4, Medium from 5 to 9, High from 10 to 16 and Critical from 17 to 25. The score orders work and does not measure risk. Inherent risk is the score before any controls. Residual risk is the score after existing and added controls are in place and tested. Severity is judged on harm to people first, then loss of containment, asset damage, environmental effect and disruption. A hazard is never rated down because it has not yet occurred, and a control counts only when it has been verified. Critical and High risks need senior attention and a dated plan, Medium risks need routine controls with a named owner, and Low risks are accepted and monitored. Operators, maintainers and engineers should challenge every rating, and each rating is reviewed when an indicator reaches its threshold or after an unplanned event.

Likelihood, impact and rating bands

Likelihood

  • 5 Almost certain: Expected to happen in most circumstances.
  • 4 Likely: Will probably happen in many circumstances.
  • 3 Possible: Could happen at some time.
  • 2 Unlikely: Not expected, but it could happen.
  • 1 Rare: Only in exceptional circumstances.

Impact

  • 1 Insignificant: No lasting effect. Handled within routine work.
  • 2 Minor: Small effect that is quickly corrected.
  • 3 Moderate: Noticeable effect that needs managed effort to correct.
  • 4 Major: Serious effect on people, delivery or reputation.
  • 5 Catastrophic: Severe or lasting effect that threatens the whole activity.

Bands (likelihood x impact)

  • Low (1 to 4): Accept and monitor.
  • Medium (5 to 9): Manage with routine controls.
  • High (10 to 16): Senior attention and a treatment plan.
  • Critical (17 to 25): Act first. Do not proceed until reduced.

Monitoring, escalation and review

Review this assessment every 6 months, and sooner when an indicator below reaches its threshold.

Early-warning indicators and escalation thresholds
Indicator to watchEscalate when
Open isolation points on permits closed without independent verification.Escalate to the maintenance manager at once and stop the job until verification is recorded.
Safety functions past their test date or bypassed beyond one shift.Escalate to the instrumentation lead when any test is overdue, and to the plant manager if a bypass runs beyond one shift.
Process readings outside the normal operating range during start up or shutdown.Escalate to the operations superintendent within the shift, and review the procedure if it happens twice in a month.
Certificate mismatches or late critical spare deliveries from a single supplier.Escalate to the supply chain manager when two occur in a quarter, and to site leaders if a critical spare is unavailable.
Repeated leak or drain alarms from the same line, or outlet readings near the discharge limit.Escalate to the environmental advisor at once, and to the plant manager if a reading reaches the limit.

Contingency arrangements

If a loss of containment, fire, electrical fault or serious injury occurs, the shift supervisor sounds the alarm, moves people to a safe assembly point and isolates the affected section using the emergency shutdown. Emergency responders are called and the site emergency plan is activated. The plant manager informs the regulator and the board as required in the relevant jurisdiction, and no restart happens until the cause is understood and an engineer has cleared the equipment. Records, samples and failed items are preserved for investigation, and affected staff receive support. Specialist advice is needed for any release or medical treatment decision.

Prioritized action plan

  1. Introduce a verified isolation procedure with independent check before any maintenance work, owner maintenance manager, within 30 days.
  2. Run a dated test schedule for safety instrumented functions and record every bypass, owner instrumentation lead, within 45 days.
  3. Apply a formal management of change review to every design and procedure change, owner process engineering lead, within 60 days.
  4. Set acceptance checks for critical spares and supplier certificates before installation, owner supply chain manager, within 60 days.
  5. Refresh operator training on start up and shutdown with a signed off practical test, owner operations superintendent, within 90 days.

Conclusion

Safe process operation depends on a few steady habits: verified isolation before work, controlled changes to design and procedures, tested safety functions, checked supplier parts and clear shift handovers. The highest scores sit with isolation error, procedural deviation and loss of containment, and each has actions that lower its residual score. Treat the register as a living record, review it on the stated cycle, and seek qualified engineering and safety advice for any real plant decision.

Assumptions and limitations

Assumptions

  • The plant handles hazardous process fluids under pressure and temperature, with the specific substances not named.
  • Operators and maintainers are trained and competent, but staffing levels vary during turnarounds.
  • The control system and safety functions were designed by qualified engineers, under a national framework that is not specified.

Limitations

  • Scores are teaching examples and do not describe any real plant, process or incident record.
  • Process safety rules, electrical codes and environmental permits vary by jurisdiction, so specialist review is needed.
  • This is educational content and is not engineering, safety or legal advice, and it does not replace a formal site-specific assessment.

Related frameworks to study

  • Hierarchy of controls
  • Bow tie risk analysis
  • Management of change process
  • Lockout and isolation procedures
  • Process hazard analysis methods

Industrial Risk Assessment

China, India, United States, Indonesia, Pakistan, Nigeria, Brazil, Bangladesh, Russia, Japan, Mexico, Philippines, Vietnam, Egypt, Turkey, Germany, United Kingdom, France, Italy, Canada, South Korea, Australia, Spain.

For Learning Reference Only: This assessment demonstrates how risk assessment principles are applied in a practical setting, providing a useful reference for learning and understanding. Actual assessments may be adapted to suit specific site conditions and circumstances.

Keep learning

Study the subject behind this assessment.

Industrial Safety and Process Engineering course Read the best practices for this course

More Industrial risk assessments

Hourly Active: 39,499 Learners