In modern industry, particularly in sectors handling hazardous chemicals, risk assessment serves as a cornerstone for operational safety, personnel protection, and environmental impact mitigation. Yet despite advances in methodologies and regulations, fundamental challenges persist in accurately identifying, analyzing, and managing risks. Conceptual and practical errors can create false security, underestimating high-impact scenarios with potentially catastrophic consequences.<\/p>\n
This article, based on work presented by\u00a0\u00c1lvaro Conde<\/strong>\u00a0at the\u00a010th Latin American Conference on Process Safety (LACPS 2024)<\/strong>, addresses critical difficulties in risk assessment\u2014from terminological confusion to effective implementation of\u00a0defenses-in-depth<\/em>\u00a0approaches. It also examines how misinterpretations of these concepts have contributed to historical industrial accidents and proposes strategies for more robust risk management.<\/p>\n Risk has evolved from its Renaissance origins\u2014linked to probability and games of chance\u2014into a pillar of modern industrial safety. However, its definition remains ambiguous and varies across disciplines and standards:<\/p>\n ISO 31000 (2018)<\/strong>: Defines it as the\u00a0\u00abeffect of uncertainty on objectives.\u00bb<\/em><\/p>\n<\/li>\n Colombian Legislation (Law 1523 of 2012)<\/strong>: Focuses on\u00a0\u00abdisaster risk\u00bb<\/em>\u00a0as potential damages from natural events.<\/p>\n<\/li>\n OSHA (U.S.)<\/strong>: Simplifies it to the formula\u00a0\u00abRisk = Hazard \u00d7 Exposure.\u00bb<\/em><\/p>\n<\/li>\n<\/ul>\n This definitional diversity often leads to contradictory interpretations in practice, especially when applying methodologies like\u00a0HAZOP<\/strong>,\u00a0WHAT IF<\/strong>, or\u00a0LOPA<\/strong>, where misclassification of inherent, mitigated, or projected risks distorts corrective action prioritization.<\/p>\n The risk assessment process comprises three key components:\u00a0identification<\/strong>,\u00a0analysis<\/strong>, and\u00a0evaluation<\/strong>. Common pitfalls include:<\/p>\n Delayed or incomplete applications<\/strong>: Conducting assessments\u00a0post hoc<\/em>\u00a0or omitting critical steps like protection barrier analysis.<\/p>\n<\/li>\n Incorrect perceptions<\/strong>: Underestimating \u00ablow-probability, high-consequence\u00bb scenarios (e.g., cascade failures).<\/p>\n<\/li>\n Confusing potential vs. mitigated risks<\/strong>: Failing to distinguish between\u00a0inherent risk<\/em>\u00a0(no controls) and\u00a0current risk<\/em>\u00a0(with existing barriers).<\/p>\n<\/li>\n<\/ol>\n A landmark example is the\u00a0Buncefield disaster (2005)<\/strong>, where simultaneous failure of multiple barriers\u2014including alarms and shut-off systems\u2014demonstrated how overreliance on non-independent safeguards can prove catastrophic.<\/p>\n The\u00a0defenses-in-depth<\/em>\u00a0strategy emerged in response to major industrial accidents, proposing multiple protection layers to:<\/p>\n Prevent<\/strong>\u00a0initiating events (e.g., operational controls).<\/p>\n<\/li>\n Mitigate<\/strong>\u00a0consequences if events occur (e.g., containment systems).<\/p>\n<\/li>\n<\/ol>\n Keys to effective implementation:<\/strong><\/p>\n Independence<\/strong>: Barriers shouldn\u2019t rely on one another to prevent cascade failures.<\/p>\n<\/li>\n Auditability<\/strong>: Must be verifiable through testing and documentation.<\/p>\n<\/li>\n Specificity<\/strong>: Each barrier should target a specific risk.<\/p>\n<\/li>\n<\/ul>\n James Reason\u2019s \u00abSwiss Cheese Model\u00bb<\/strong>\u00a0illustrates this principle: holes (weaknesses) in barriers only allow accidents when aligned. Thus, rigorous scenario evaluation must consider:<\/p>\n Potential risk<\/strong>: Without barriers.<\/p>\n<\/li>\n Mitigated risk<\/strong>: With existing barriers.<\/p>\n<\/li>\n Projected risk<\/strong>: With future improvements.<\/p>\n<\/li>\n<\/ul>\n Risk assessment isn\u2019t a theoretical exercise but a vital tool for organizational resilience. Application errors\u2014from ambiguous definitions to omitting critical barriers\u2014can lead to preventable disasters. As the author emphasizes:<\/p>\n \u00abAll IPLs (Independent Protection Layers) are safeguards, but not all safeguards are IPLs.\u00bb<\/em><\/p>\n<\/blockquote>\n To bridge gaps, organizations must:<\/p>\n Clarify terminology and criteria<\/strong>\u00a0(e.g., differentiate\u00a0risk assessment<\/em>\u00a0vs.\u00a0evaluation<\/em>).<\/p>\n<\/li>\n Implement systematic approaches<\/strong>\u00a0like LOPA and\u00a0defenses-in-depth<\/em>.<\/p>\n<\/li>\n Foster proactive safety cultures<\/strong>, managing risk from design through operations.<\/p>\n<\/li>\n<\/ol>\n
\nThe Complexity of Risk as a Concept<\/strong><\/h2>\n
\n
\nChallenges in Risk Assessment<\/strong><\/h2>\n
\n
\nThe \u00abDefenses-in-Depth\u00bb Approach<\/strong><\/h2>\n
\n
\n
\n
\nConclusion<\/strong><\/h2>\n
\n
\n