Risk-Based Process Safety Management: Moving Beyond Compliance to Real Protection

Risk-Based Process Safety Management

1. Why a Risk-Based Approach Outperforms Traditional Compliance

In a traditional model, HAZOP studies are applied equally to all units or nodes without considering the actual level of inherent process safety risk. This “one-size-fits-all” approach can waste time and resources on low-risk areas while leaving critical hazards under-addressed.

A risk-based process safety framework ranks installations by potential impact and inherent hazards. The depth and complexity of the analysis itself are also risk-based — lower-risk installations are assessed using simpler, easy-to-use tools, while full, detailed studies are reserved for high-risk installations. The framework not only determines if risk is tolerable but also defines how many barriers — and what degree of risk reduction — are needed. Actions are then prioritized by the size of the risk gap, ensuring engineering, operational, and financial resources deliver the greatest possible safety improvement.

2. When HAZOP Actions Mislead — And How to Fix It

Many organizations are overwhelmed by open HAZOP action lists, some stretching into the hundreds. While well-intentioned, these lists can create liability and even signal that process safety isn’t being managed effectively. In my experience, two common types of problematic actions appear:

• Actions that don’t create a valid barrier — These “nice-to-haves” can be misleading if they don’t deliver at least an order-of-magnitude risk reduction. Valid barriers must be effective, independent, and auditable.
• Actions requesting more study — Especially in projects this can be a sign that the HAZOP was conducted too early or that the design process was incomplete. In such cases, the HAZOP or analysis of that particular scenario should be paused until the necessary data is available. In general, the team should be capable or have the support at hand to resolve questions on the spot (for example, by performing quick PSV calculations or combining SIL classification with the HAZOP session).

It can be tempting to review or reassess existing HAZOP actions, but this approach does not address the root cause — and may create the perception that previously approved actions are being removed without valid justification. The real solution lies in improving the HAZOP procedure itself: defining clear criteria for what qualifies as a valid action and enabling teams to resolve uncertainties in real time. These updated criteria will help reduce the number of HAZOP actions to a level the organization can effectively manage, while also preventing future overdue items. 

3. Turning Studies into Operational Controls

One of the weakest links in many PSM systems is the handover between the HAZOP team and the people responsible for implementing recommendations. Without proper follow-up, actions remain on paper rather than becoming real-world controls.

To address this, I recommend a tiered management handshake process:

• Handshake 1: Agreement on what constitutes high risk, along with a confirmed list of Major Accident Hazards (MAHs) and credible scenarios. This is documented in a Risk Register and also defines which type of risk study is required.
• Handshake 2: Presentation of the study findings by the HAZOP lead to the responsible managers, who can challenge, agree with, and formally accept the approved actions.
• Handshake 3: Discipline-based review of the agreed actions to verify that proposed deadlines are realistic and achievable.

Action deadlines should then be risk-based and tracked in a formal action management system, ensuring ownership, accountability, and timely completion.

4. The Most Overlooked Process Safety Risk

HAZOPs are great at identifying missing barriers during design, but in reality, most major process safety incidents are caused by failure to maintain existing barriers. Hardware degrades, alarms fail, and human procedures drift — and without active monitoring, these deteriorations go unnoticed until it’s too late.

A Live Barrier Model — a system for continuously tracking the status of safety-critical barriers — is one of the best ways to prevent this. It provides real-time visibility, alerts when barriers are compromised and forms the foundation for cumulative risk monitoring. In my view, no PSM program is complete without it.

Conclusion

Shifting to a risk-based process safety approach transforms PSM from a document-heavy compliance exercise into a living, proactive safety system. By focusing on true risk drivers, ensuring HAZOP actions are meaningful, and maintaining existing barriers through tools like a Live Barrier Model, organizations can achieve lasting protection rather than a false sense of security.