HUMAN RESPONSE IPLs and

HUMAN ERROR PREVENTION IPLs

(beyond administrative controls)
IPL RULES

INDEPENDENT + CAPABLE + MAINTAINED + AUDITED

USING HUMAN AS AN IPL

1. 2. 3. 4. 5.
Determine which Ensure human Develop a trouble- Perform initial training Validate human
parameters limits response action shooting guide on each human response
should have human meets the definition (general steps for response IPL and do success rates are
response, and why of a Human the operators to one timed drill of each high enough
human response is Response IPL take) for each Human Response IPL
best response per operator per year

VALIDATION APPROACHES FOR HUMAN IPLs

Is there Good to
Excellent control of
Human Factors?

Consensus
PFD = 1
of Op. and
NO (No Human IPL)
Maint staff YES

YES
DT+RT > HUMAN FACTORS
MART MULTIPLIER

# Criteria True/False
YES Is Test/Drill NO
1 Based on consensus of expert data being
opinion, the operator has less collected?
than 15 minutes to successfully
detect, diagnose, and perform YE 9
NO Use Generic Data +
the required action SITE SPECIFIC S 𝑷𝐻𝑢𝑚𝑎𝑛 = 𝑯𝑬𝑩 × ෑ 𝑯𝑭𝑴𝑖 × 𝑷𝑭
Predicted Data 𝑖=1
DATA
2 Operator response is required
without explicit criteria and Is site data
response instructions YES available for
non-drill (actual)
3 Critical or emergency responses HUMAN ERROR PRACTICE FACTOR
responses? NO BASELINE 0.6 2
involve multiple people PFD < 0.1 250 𝑃𝑃𝑌
Lowest baseline error 𝑃𝐹 = + 0,4 ×
NO 𝑃𝑃𝑌 1000
rate possible: 0.0008
4 Response actions provide no PPY: Number of
feedback that they are effective YES Practices per year

If all are Is Expert

false, Expert EXPERT YES Judgment NO
Judgment is JUDGEMENT allowed by
allowed
Round up
company? (order of magnitude)
(See Criteria)

TYPES OF PROTECTION LAYERS - BEYOND ADMINISTRATIVE CONTROLS

Type Specifics RRF Cost ($K)
Bar Code /Scanner Bar Code – w/o procedure imbedded; combined with interlocks 3-10 0.1
Bar Code /Scanner Bar Code – with procedure imbedded; combined with interlocks 3-10 0.3
Proof Switches RFID (radio frequency identification; the reader is hardwired) 100 5
Proof Switches Proximity Limit Switches (both ends are hardwired) 10-100 0.5
Stand-alone valve (spring loaded dead-man valves; for quick
Hardware 10-100 0.2 to 1
draining/venting)
Dry disconnects (auto-closing valve on hose end designed to have no
Hardware 10-100 TBD
leaks on disconnection)
Hardware Automated/interlocked valve 10-100 1 to 10
Hardware Captive Key (value depends on how captive key is administered onsite) 10-100 0.5 to 1

WILLIAM BRIDGES DOWNLOAD PROCESS IMPROVEMENT INSTITUTE

wbridges@piii.com PII FREE Risk and reliability specialists
RESOURCECS