Process safety versus personal safety

A plant can go years without a single lost-time injury and still be one bad shift away from a disaster. That is the central lesson of process safety. Personal safety deals with slips, trips, cuts, strains and falls: frequent events that usually hurt one person. Process safety deals with the loss of containment of hazardous materials and energy: fires, explosions and toxic releases that are rare but can kill many people, destroy a plant and harm the surrounding community. HSE-310 introduced chemical and process hazards at the plant level. This course goes deeper into how process plants prevent major accidents, and this first lesson explains why process safety needs its own methods, its own metrics and its own attention from leaders.

Two different kinds of risk

Personal safety hazards are mostly visible and local. A trailing cable, a missing guard or an oily floor can be seen and fixed by the people who work there. The consequences are usually limited to the person doing the task. Process safety hazards are often invisible and systemic. A corroded pipe wall, a bypassed trip, a relief valve that was never sized for a new reaction or a level transmitter that has drifted out of calibration may give no sign at all until the day containment is lost. The consequences can reach far beyond the person who made the last mistake.

Why good injury rates can mislead

Many organizations measure safety with injury frequency rates such as total recordable injuries per 200,000 hours. These numbers matter, but they say almost nothing about process safety. A refinery can have an excellent injury rate because its contractors wear their glasses and hold the handrail, while its relief system is undersized, its alarms flood the control room every upset and its inspection program is years behind. When leaders celebrate injury rates and assume the plant is safe, they can miss the warning signs of a major accident.

The best-known example is the 2005 explosion at the BP Texas City refinery, which killed 15 people and injured about 180. In the years before the explosion the site's personal injury rate had improved, and managers were rewarded for it. Meanwhile, maintenance budgets had been cut, the raffinate splitter tower's level instruments were unreliable, operators were fatigued, and trailers for contractors had been placed close to process units. The US Chemical Safety and Hazard Investigation Board (CSB) and an independent panel led by James Baker both concluded that the company had confused personal safety performance with process safety performance. Lesson 2 looks at this accident in more detail.

What process safety is

Process safety is a disciplined framework for managing the integrity of operating systems and processes that handle hazardous substances. It relies on good design, sound engineering, operating and maintenance practices, and management systems that keep all of these working over decades. The Center for Chemical Process Safety (CCPS), part of the American Institute of Chemical Engineers, and the Canadian Society for Chemical Engineering (CSChE) both publish widely used guidance. The core idea is simple: keep the hazardous material inside the pipes and vessels, keep the energy under control, and have reliable barriers ready in case something goes wrong.

The vocabulary of process safety

A few terms come up again and again in this course. A hazard is something with the potential to cause harm, such as a tank of flammable liquid or a reactor that can run away. Risk combines how likely a harmful event is with how bad it would be. A loss of primary containment (LOPC) is an unplanned or uncontrolled release of material from its normal container, such as a pipe, vessel or tank. A safeguard or barrier is anything that prevents an event or reduces its consequences: a relief valve, a high-level trip, a dike, an operating procedure, a gas detector. A major accident is a loss of containment with serious consequences: fatalities, serious injuries, significant community or environmental harm or major asset damage.

Measuring process safety

Because injury rates do not measure process safety, industry developed separate indicators. The most widely used is API Recommended Practice 754, Process Safety Performance Indicators for the Refining and Petrochemical Industries, first published after the Texas City inquiry and now in its fourth edition (published August 2026). Many Canadian operators report against it, and CSChE's process safety guidance uses a similar tiered approach. It classifies events and measures in four tiers. Tier 1 and Tier 2 are lagging indicators: process safety events (PSEs) of greater and lesser consequence, defined by thresholds such as release quantity, injuries, fires and direct cost. Tier 3 covers challenges to safety systems, such as demands on relief devices or trips and excursions beyond safe operating limits. Tier 4 covers the health of the management system, such as overdue inspections, training completion and procedure reviews.

Tier 1 and Tier 2 events are counted and normalized per 200,000 hours worked, the same base used for injury rates, so that sites of different sizes can be compared. The normalization is the same, but the events counted are completely different. A site with no injuries can still have a high Tier 2 rate if it keeps having small flange leaks and minor fires.

# Compare personal injury rates with process safety event (PSE) rates for two sites.
# Illustrative numbers only.
sites = {
    "Site A": {"hours": 1_400_000, "recordables": 3, "tier1": 2, "tier2": 9},
    "Site B": {"hours": 900_000, "recordables": 7, "tier1": 0, "tier2": 2},
}
for name, d in sites.items():
    trir = d["recordables"] * 200_000 / d["hours"]
    t1 = d["tier1"] * 200_000 / d["hours"]
    t2 = d["tier2"] * 200_000 / d["hours"]
    print(f"{name}: recordable rate {trir:.2f}, Tier 1 rate {t1:.2f}, Tier 2 rate {t2:.2f}")

Site A: recordable rate 0.43, Tier 1 rate 0.29, Tier 2 rate 1.29
Site B: recordable rate 1.56, Tier 1 rate 0.00, Tier 2 rate 0.44

Site A has the better injury rate but the worse process safety record. If its leaders looked only at recordables, they would think it was the safer site. The two Tier 1 events at Site A deserve investigation as possible precursors of something worse, and the nine Tier 2 events suggest a pattern of small losses of containment that the management system is not catching.

Who is responsible

Personal safety is often framed as everyone looking after themselves and their co-workers. Process safety needs that too, but it depends just as heavily on decisions made far from the hazard: the engineer who sizes a relief valve, the manager who approves a change, the planner who defers an inspection, the executive who sets a maintenance budget. That is why process safety frameworks put so much weight on management systems, competence and leadership. The operator who catches a rising temperature is the last line of defence, not the first.

Where process safety applies

Process safety began in refineries and chemical plants, but the same principles apply wherever large amounts of hazardous material or energy are stored or processed: pulp and paper mills, mining and mineral processing, fertilizer plants, ammonia refrigeration in food plants and arenas, water treatment plants using chlorine, pharmaceutical manufacturing, battery plants, LNG and hydrogen facilities, and oil and gas production (covered in HSE-330 to HSE-333). Even a small brewery with an ammonia chiller or a metal finisher with acid tanks has process safety hazards. Lesson 5 explains how the law decides which sites must have a formal process safety management program.

A preview of the course

The rest of this course follows the logic of preventing major accidents. Lesson 2 looks at what history teaches. Lessons 3 and 4 explain how process materials burn, react and poison, and what fires, explosions and toxic releases do. Lesson 5 covers process safety management systems and the law in Canada and the United States. Lessons 6 to 8 deal with identifying hazards, assessing risk and choosing safeguards. Lessons 9 to 11 cover the disciplines that keep safeguards working over time: management of change, mechanical integrity, procedures, alarms and human factors. Lesson 12 brings it together with process safety culture and a capstone review of an invented chemical unit.