Safety Norms: Industrial Safety and Process Engineering

1Purpose, Scope, and Safety Principles

These norms set minimum expectations for people who design, operate, maintain, and support industrial process systems. Process systems include reactors, distillation columns, storage tanks, piping, pumps, compressors, boilers, heat exchangers, pressure relief devices, and the utilities that support them. The primary goal is to prevent fatalities, injuries, releases of hazardous material, fires, explosions, and environmental damage while keeping production reliable.

The norms apply to employees, contractors, visitors, and engineers working on design changes, commissioning, startup, normal operation, shutdown, and decommissioning. They also consider the public living or working near facilities, including people affected by flare events, vapor clouds, noise, wastewater discharges, and chemical transport routes.

• Eliminate or reduce hazards where practical before relying on personal protective equipment.
• Treat process safety and personal safety as equal priorities. Production pressure never overrides a stop-work decision.
• MUST rules are mandatory under site policy. SHOULD items are recommended practice that the site may adapt with documented justification.
• Local laws and standards govern. Verify current versions with the competent authority and a qualified process safety professional.

2Roles, Competence, and Accountability

The site leader is accountable for providing resources, approving the safety management system, and ensuring that process safety performance is reported to senior management. Process engineers are accountable for the design basis, process hazard analyses, operating limits, and management of change. Operations supervisors own day-to-day compliance with operating procedures, permits, and shift handovers. Maintenance supervisors own isolation planning, work packages, and inspection scheduling. Safety and environmental professionals provide independent review, audit findings, and incident investigation support.

Competence is demonstrated, not assumed. Only trained and authorized people may operate controls, open process equipment, perform hot work, or enter confined spaces. Authorization must be written, time limited where appropriate, and renewed when a person changes task or equipment.

• MUST: Every operator holds a current authorization for each unit they run, signed by the operations manager.
• MUST: Permit issuers and permit receivers complete documented training on the permit system before signing any permit.
• MUST: Contractors are verified for competence before mobilization, not after an incident.
• SHOULD: Engineers spend time on the operating floor regularly to compare drawings with actual equipment and field conditions.

3Hazard Identification and Risk Assessment

Hazard identification begins with the process itself. Common hazards include flammable liquids and gases, toxic or reactive chemicals, high pressure and high temperature, stored mechanical energy, rotating equipment, electrical energy, confined spaces, noise, falls from elevation, and runaway reactions. Recognized methods include process hazard analysis, hazard and operability studies, what-if reviews, and layer of protection analysis. The method is selected by the organization and should follow applicable standards in its jurisdiction.

Risk is judged by combining likelihood and consequence. A risk matrix places each scenario on a grid so the team can compare it against a defined tolerance. High-consequence, low-frequency events such as a vessel rupture still require strong safeguards even when they are rare. Risk ranking is a decision aid, not a substitute for engineering judgment.

Hazard assessments must be revisited when feedstock, operating ranges, equipment condition, staffing, or procedures change. Incident data, inspection findings, and near-miss reports are inputs to each review. A hazard that appears in a near miss but was absent from the original study shows the study needs updating.

• Toxic release from a leaking flange on a chemical line: severe consequence, requires leak detection, containment, and tested emergency response.
• Overpressure of a vessel blocked in by closed valves: requires a verified relief device and a documented review of blocked-in conditions.
• Static ignition during drum transfer of flammable solvent: requires bonding and grounding checks before transfer begins.
• Thermal runaway in an exothermic batch: requires temperature alarms, interlocks, and a documented emergency cooling or quench plan.
• MUST: Hazard assessment outputs are recorded, assigned an owner, and tracked to closure.

4Machine and Process Safeguards

Safeguards prevent hazards from reaching people. Engineering controls are preferred because they do not depend on human behavior alone. Examples include guarding of moving parts, interlocks, safety instrumented systems, pressure relief valves, rupture discs, flame arresters, containment dikes, and fixed gas detection. Administrative controls such as procedures and alarms support safeguards but do not replace them.

Safety devices must be designed, installed, tested, and maintained as part of the process. Bypassing a safeguard is a controlled exception, never routine practice. Testing and inspection should confirm that a device performs its function, not merely that it is present. A transmitter that reads correctly but is wired to the wrong logic solver provides no protection, so functional tests are documented with as-found and as-left values.

Alarm management also acts as a safeguard. Operators need to recognize critical alarms quickly, so nuisance alarms are reviewed and rationalized against the process hazard study.

• MUST: Guards on rotating equipment remain in place during operation. Removal requires a documented permit and temporary controls.
• MUST: Safety instrumented functions are proof tested at the interval defined in the safety requirements specification, and results are retained.
• MUST: Overrides and bypasses require written authorization, a stated time limit, compensating measures, and removal once the reason ends.
• MUST: Relief devices are sized, installed, and inspected to the applicable code and manufacturer data. Isolation valves under a relief device are locked open or otherwise controlled.
• SHOULD: Alarm rationalization reviews are repeated after process changes so operators can respond to critical alarms.

5Permits, Maintenance, and Safe Work Practices

A work permit is a written authorization that defines the job, hazards, isolation boundaries, precautions, and duration. Permits are required for hot work, confined space entry, line breaking, excavation, electrical work, and work at height where site procedure applies. Permits are not signed for convenience. The issuer must verify isolation physically in the field before approval, and the receiver must confirm understanding of the conditions before starting.

Lockout and tagout control hazardous energy. Energy sources such as electricity, steam, compressed air, hydraulic pressure, stored chemical energy, gravity, and residual pressure must be isolated, locked, tagged, and verified at zero energy before work begins. Lock removal is performed only by the person who applied it or through a documented procedure with supervisor and safety approval.

Contractors work under the same permit and isolation rules as employees. Before work starts, the host site confirms contractor competence, provides a site orientation, and ensures the contractor supervisor understands the permitted scope. Any change in scope requires a new permit.

• MUST: Pressure equipment is depressurized, drained, purged, and tested for absence of hazardous material before opening.
• MUST: Gas testing is performed by trained personnel using calibrated instruments before and during confined space entry.
• MUST: A permit ends at shift change or job completion. Reissue is required when conditions change.
• MUST: Hot work near flammable vapor sources does not proceed without gas testing, fire watch, and extinguishing equipment in place.
• SHOULD: Maintenance planners review isolation boundaries on current drawings during job preparation, not only in the field.

6PPE, Hygiene, and Environmental Protection

Personal protective equipment is the last line of defense after hazards are eliminated, isolated, or controlled. Required PPE is selected from the task hazard assessment. Typical items include safety glasses or goggles, face shields, flame resistant clothing, chemical resistant gloves, hearing protection, respirators, fall protection, and protective footwear. Selection must consider the specific chemical, its concentration, and manufacturer compatibility or permeation data. Respirator use requires a program that includes medical evaluation, fit testing, and training as required by applicable rules in the jurisdiction. Medical determinations are made only by qualified health professionals.

Hygiene controls reduce exposure through pathways PPE cannot fully address. Eating and drinking are prohibited in process areas where chemicals are handled. Contaminated clothing is removed before leaving the work zone. Where a recognized exposure hazard exists, the employer monitors exposure and follows occupational exposure limits set by the authority having jurisdiction.

Environmental protection covers releases to air, water, and soil. Spill containment, stormwater management, flare and vent management, and waste segregation prevent harm to people downwind or downstream. Environmental permits and discharge limits are jurisdiction dependent and must be checked with the authority having jurisdiction.

• MUST: PPE is inspected before each use and removed from service when damaged or contaminated.
• MUST: Chemical storage has secondary containment sized according to the site spill plan and applicable rules.
• MUST: Waste and spilled material are labeled, stored, and disposed of only through licensed handlers.
• SHOULD: Handwashing, eyewash, and decontamination stations are provided where workers handle hazardous material.
• MUST NOT: Venting, flaring, or discharge outside permit limits proceeds without notification under site procedures.

7Information, Emergency Response, and Incident Escalation

Process safety information includes safety data sheets, process flow diagrams, piping and instrumentation diagrams, equipment datasheets, relief case calculations, and operating limits. Access is controlled through document management. Information must be current, and superseded drawings must be withdrawn from the field. Control system details and process data are protected from unauthorized access. Cybersecurity of industrial control systems is treated as a safety control and follows the site information security policy and applicable standards.

Emergency response plans identify alarms, evacuation routes, muster points, shelter-in-place instructions, emergency shutdown actions, and notification contacts. Only trained responders enter a hazardous area. Emergency services are called before any rescue beyond trained capability is attempted. Drills test the plan. Shift teams practice responses to fire, toxic release, and loss of utilities at a frequency set by the site plan and applicable rules, and gaps found in drills are corrected.

• MUST: Any injury, release, fire, or near miss is reported immediately to the shift supervisor through the site reporting system.
• MUST: Emergency stop and evacuation actions are never delayed to confirm a fault.
• MUST: Incident investigation starts within the time set by site procedure and identifies root causes, not only operator error.
• SHOULD: Regulatory and community notification requirements are checked for releases and reportable events, as set by the jurisdiction.

8Records, Training, Monitoring, and Review

Records prove that controls are working. Keep permits, inspection reports, proof test results, training records, management of change approvals, and incident investigations for the retention period required by local rules and site policy. Records should be retrievable and legible. Records showing that a control was bypassed are as important as those showing compliance.

Monitoring uses leading indicators such as overdue inspections, open bypasses, alarm floods, and near-miss reporting, alongside lagging indicators such as injuries and releases. Review occurs after incidents, after process changes, and at scheduled intervals. Results feed corrective actions with named owners and due dates.

• MUST: Management of change is completed before any process, material, or equipment change goes live, including temporary changes.
• MUST: Training is refreshed when procedures change and after any incident that reveals a gap.
• SHOULD: Audits sample actual permits and isolations in the field, not only paperwork.
• SHOULD: Lessons learned are shared across the site in plain language summaries that name the failed control.

Implementation checklist

• Confirm the hazard assessment covers the current process, including recent changes.
• Verify your authorization and training cover the exact equipment you will operate.
• Check that no safeguard is bypassed without a signed, time limited override.
• Issue or receive a permit only after physical isolation is verified in the field.
• Apply lockout and tagout and test for zero energy before opening equipment.
• Select PPE from the task hazard assessment and inspect it before use.
• Report every near miss, release, and injury immediately to the shift supervisor.
• Know the evacuation route, muster point, and emergency stop location for your area.
• Confirm containment and waste handling before any spill or drain activity.
• Verify current laws, standards, and manufacturer instructions with the competent authority.