Documente Academic
Documente Profesional
Documente Cultură
ControlENGINEERING
Engineering
PLANT ENGINEERING
and Control magazines
Engineering magazines
You oughta check out AttaBox!
High quality enclosures starting at $28.00
starting at:
$28.00
CO332
AttaBox Enclosures
We are proud to announce our new line of Seven AttaBox Series Available:
AttaBox quality-built enclosures from Robroy Freedom Series: Provides flexibility, pleasing aesthetics, and
Industries. AttaBox enclosures are reliable, low-cost are excellent for industrial applications involving high-end
electronics and harsh corrosive environments.
enclosures that provide excellent chemical and
corrosion resistance. MachoBox Series: Feature a modest overhang cover on
Features: a flange mounted base. Offers unobstructed side walls
• AttaBox non-metallic enclosures feature 304 stainless steel and built-in mounting capabilities with a protective
hardware and are available with clear covers or windows, wrap-around cover that is hinged, latched or screwed
various lock styles, and accessories. down. The Raised Cover Series provides extra space for
• Lightweight, eco-friendly, impact resistant, UV resistant, cover mounted components and the Extra Deep Series
easy to install and modify with a clam shell design has almost equal capacity in the
• NEMA ratings of 1, 3, 3R, 3S, 4, 4X, 6P, and 12 cover and base.
• Available sizes range from 3” x 3” x 2” up to 60” x 36” x 16” Commander Series: Ideal for use as junction boxes for
industrial applications requiring non-corrosive UV resistant
and/or submersible enclosures.
YEAR
1 Centurion Series: Built for chemical resistance and where
watertight protection is required. Ideal for industrial and
commercial applications and for general electrical and
electronic applications with environmental concerns.
Also Available Triton Series: Watertight and corrosion-resistant, designed
Hubbell/Wiegmann & Integra Enclosures for indoor and outdoor use with electric, electronic,
mechanical controls, and instrumentation.
P
roduct specifications have been cen- corresponding heavy reliance on OEM suppli-
tral to the decision-making process of ers, often including support contracts.”
purchasing equipment since the dawn The author of the second article in this issue
of equipment procurement. How many connects the concepts of alarm management
times have end users been locked into using and process safety management. “‘Alarm man-
systems from a single source because the agement’ is the application of human factors to
spec called for specific hardware and/or soft- design and maintain an alarm system to maxi-
ware from that vendor? The author of the cover mize its effectiveness. ‘Process safety manage-
Jack Smith story in this issue of AppliedAutomation dis- ment (PSM)’ is a disciplined framework for man-
Edit or cusses the concept of specifying performance aging the integrity of systems and processes
instead of parts or equipment. The author that handle hazardous substances. It relies on
writes, “Many plants and facilities purchase good design principles, well-implemented auto-
machines and process skids from OEM sup- mation systems and engineering, operating and
pliers. The temptation often is to specify parts maintenance practices,” he writes.
and vendors down to a very detailed level, Alarm management and process safety man-
but this can result in higher costs, longer lead agement are about managing risk. The author
times and no performance guarantees from the writes, “There are many interactions between
OEM. A better approach in many instances is alarm management and process safety man-
to specify performance, while giving the OEM agement. Each discipline requires a rigorous
as much leeway as possible in terms of parts methodology to properly implement, yet under-
and vendors. This is particularly true for plants standing how they interact is equally important
and facilities with limited onsite staff, and a to ensure a safe and productive process.”
OUT OF
CONTROL
CALL TRIDENT.
ou1olrѴ;|;ruo71|-m7v;ub1;bm=oul-ঞomķ
visit |ub7;m|-|ol-ঞomĺ1ol
or call 920.759.7477
If your systems are not operating at peak efficiency, seize
control with help from Trident. As a top DCS designer and
integrator, we’re ready to create specialized control strategies
for your specific needs. From incremental upgrades to complete
control system replacement, we’re proud to call ourselves
control freaks.
seweurodrive.com / 864-439-7537
Contents
A6 Specifying performance
instead of parts
Specifying performance instead of parts when purchasing
machines and process skids will cut costs, reduce lead
time and guarantee operation.
Specifying performance
instead of parts
specifying performance instead of parts when purchasing machines and process
skids will cut costs, reduce lead time and guarantee operation.
M
AutomationDirect Specifying preferred parts and vendors can make it dif-
ficult to create a bid specification because excessive detail
any plants and facilities purchase is required, very little of which directly influences the most
machines and process skids from OEM important attribute: performance of the machine or pro-
suppliers. The temptation often is to cess skid (see Figure 1). It may stop OEMs in their tracks,
specify parts and vendors down to a very resulting in fewer bidders, or sometimes only one.
detailed level, but this can result in higher Boxing in the brands that can be used will often push an
costs, longer lead times and no perfor- OEM out of its comfort zone (see Figure 2). For example,
mance guarantees from the OEM. if the OEM can’t use its preferred controller or human-
A better approach in many instances is to specify per- machine interface (HMI), the design and schematics will
formance, while giving the OEM as much leeway as pos- need to be changed, which will cause higher costs and
sible in terms of parts and vendors. This is particularly delays in other areas. The learning curve will remain in
true for plants and facilities with limited onsite staff, and effect throughout the project, adding even more delays,
a corresponding heavy reliance on OEM suppliers, often along with longer lead times for parts.
including support contracts. Focusing on parts and vendors instead of performance
in the bid spec may require a new programmable logic
controller (PLC) program to be written, one never tested in
use before. This required software development time may
or may not extend the project schedule, but either way
someone must be paid to write it. The OEM often must
outsource programming for unfamiliar controllers, adding
another layer of risk and complexity. Regardless of who
writes the software, it likely will need extensive debugging
as it hasn’t been proven in use, which will extend the time
needed for startup and commissioning.
Limiting vendor and OEM options is like requiring the
wheel to be reinvented. What the OEM knows and has
proven in use for years turns into a custom control sys-
tem, which may result in less reliable operation. All the
tuning, tweaks and optimization performed on the OEM’s
preferred control system must now be repeated. Some of
this can be done during design, test and startup—but other
issues will inevitably crop up later.
Combining detailed part and vendor specifications with
the changes needed to an OEM’s control system also may
lead to delays in support, and/or a much more expensive
support contract. Most of the OEM’s technical personnel
Figure 1: Innovative Treatment Products selected AutomationDirect will not be able to support the unfamiliar control system,
products for the control system on this water treatment skid, in the worst case leading to reliance on a single person
allowing the company to provide performance guarantees to its within the OEM’s organization, or within one of its subcon-
customers. Courtesy: Innovative Treatment Products tractors.
$VLQJOHSRLQWSODQWFRQQHFWLRQVKDOOEHSURYLGHG
for a 3-phase, 480 V ac, 60 Hz supply.
$PDLQGLVFRQQHFWZLWKHOHFWULFDOORFNRXWIHDWXUH
shall be provided.
&RQWUROZLULQJVKDOOEH9GFRUOHVV
3URJUDPPDEOHORJLFFRQWUROOHUVKDOOKDYHDPLQLPXP
H[SDQVLRQRILQSXWRXWSXW,2SRLQWV
6XSSOLHUPXVWSURYLGHSURJUDPPLQJVRIWZDUHIRU
all programmed devices. Figure 2: OEMs have invested time and effort to design, build and test
their control system to meet the performance requirements of their
'LVFUHWHLQSXWVVKDOOEH9GFVLQNLQJSRLQW machine or process. Courtesy: AutomationDirect
modules.
Microsoft
Amazon Web
Azure
Services
IBM
Other Cloud BLUEMIX
Services
IIoEATDY
R
www.wago.us/IIoT
A l A r m , p r o c e s s sA f e t y mAnA g e m e n t
T
unit. This is typically done in a team setting performing
a process hazard analysis (PHA) with the most common
wo highly specialized areas of expertise in the method being a hazard and operability (HAZOP) study.
process automation industry are alarm manage- Hazards are identified and individually evaluated to deter-
ment and process safety management. While mine the probability of occurrence along with the severity
you might think these are separate topics, they of consequences if the hazard is realized. In most com-
actually go hand-in-hand. Let’s examine the panies, the overall risk is defined as the probability times
relationship. To get us all on the same page, the severity.
here is a definition of each: Step 2: For each identified hazard, the team must
Alarm management is the application of human factors then evaluate any safeguards that mitigate those hazards
(ergonomics) to design and maintain an alarm system to (e.g., the alarm system) to determine how much residual
maximize its effectiveness. A common problem is hav- risk remains after taking credit for the safeguards. The
ing too many alarms annunciated during a plant upset, safeguards are called independent protection layers
commonly referred to as an “alarm flood.” However, (IPLs). Independence is important because if one safe-
other problems can exist with an alarm system, such as guard fails, it should not affect any other safeguard’s abil-
poor prioritization, improperly set alarm points, ineffec- ity to mitigate risk. Several methods are used to evaluate
tive annunciation, unclear alarm meanings and so on. the safeguards with the most common being a layer of
Improper alarm management is one of the leading causes protection analysis (LOPA).
of unplanned downtime, contributing to more than $20 bil- Step 3: After taking credit for the IPLs, the team will
lion in lost production every year, and to major industrial compare the residual risk to the company-defined toler-
incidents, such as the 2005 Texas City refinery explosion. able risk level to determine if action needs to be taken.
Process safety management (PSM) is a disciplined If residual risk is greater than tolerable, either the pro-
framework for managing the integrity of systems and pro- cess needs to be redesigned or additional safeguards
cesses that handle hazardous substances. It relies on good installed. A common safeguard is to install a safety
design principles, well-implemented automation systems instrumented system (SIS) to reduce the residual risk
and engineering, operating and maintenance practices. It to acceptable levels. The size of the gap between the
deals with the prevention and control of events that have residual risk and the tolerable risk determines the safety
the potential to release hazardous materials and energy. integrity level (SIL), which is a measure of how “safe” the
For the process industry, emphasis is placed on process SIS needs to be (see Figure 1).
safety to prevent unplanned releases that could result in a In the case shown in Figure 1, the residual risk level
major incident, which typically is initiated by a hazardous exceeds the tolerable risk level even after taking credit
release. It also may result from a structural failure or loss of for IPLs, such as the basic process control system
stability that potentially escalates into a major incident. (BPCS) and mechanical protection (e.g., relief valves
or rupture disks). To fill this gap in protection, a SIS
It’s about risk can be implemented to reduce the residual risk to a
How does alarm management impact process safety? tolerable level.
In addition to keeping a facility operating better, it comes Note the BPCS IPL is usually a credit for a safety
into play when determining the risk, or more precisely the alarm that triggers an operator response preventing the
residual risk, in a given process. PSM risk analysis can be hazardous event, or some type of automated control,
broken down into three steps: which keeps the process from reaching the hazardous
Gaining independence
As mentioned, the BPCS only
can be counted on for one IPL
credit for reasons of indepen-
dence. But what if you are already taking credit for auto- 2. Auditable. You need to test the alarm, including asso-
mated control and also would like to have credit for a ciated instrumentation, at an appropriate frequency to
safety IPL alarm? Is there a way of implementing alarms verify that the alarm will work.
that need to be kept separate from the BPCS? Well, yes,
there is. Here are two common approaches: 3. Independent. The alarm must be independent from
1. You can directly wire a field instrument to a lightbox other IPLs and not disabled by the initiating event for
annunciator. This was the traditional approach for alarming the hazard.
in the “old days” of panel board control systems and still
is used today. Because the signal and annunciation are 4. Dependable. The likelihood that the alarm will annun-
kept separate from the BPCS, you can take IPL credit for ciate, and the operator will respond properly meets
operator action from the alarm in addition to the automated the requirements to be counted as an IPL. The
control in the BPCS. overall alarm function (sensor + logic solver + HMI +
2. To avoid the limitations of using a lightbox annuncia- operator response) needs to have a PFD of less than
tor, a field instrument instead can be routed to an indepen- or equal to 0.1. This subject is addressed in detail in
dent monitoring system with a human-machine interface various Center for Chemical Process Safety (CCPS)
(HMI) separate from the BPCS. The SIS or a dedicated books, such as “Guidelines for Safe Automation
programmable logic controller (PLC) can feed the indepen- of Chemical Processes and Layer of Protection
dent HMI. Note the overall availability for this independent Analysis.”
system needs to have probability of failure on demand
(PFD) of 0.1 or less. PHA team responsibilities
The key is to have the safety IPL alarm function com- When performing the PHA, it is essential that the team
pletely separate from the BPCS such that no single failure, properly evaluates and documents every alarm that has
including cybersecurity attack, could jeopardize the func- been designated for IPL credit. This includes the following
tion of both systems. This independence includes the field responsibilities:
instrument, which cannot be shared with the BPCS.
• Does the alarm meet the four requirements defined
Requirements for safety IPL alarms above for safety IPL alarms?
Several requirements need to be met to use an alarm as
a safety IPL: • Will the operator have adequate time to recognize the
alarm and take necessary action before the hazard is
1. Specific. The alarm must be designed to work for a realized?
specific initiating event that leads to the hazard you
are trying to prevent. • What should the alarm setpoint be?
• What does the test frequency need to be? Auditing is an ANSI/ISA-18.2 lifecycle requirement
that requires a comprehensive assessment of the alarm
• What is the proper operator action required to system, including evaluation of the alarm system perfor-
mitigate the hazard? mance and work practices used to administer the alarm
system. Periodic reviews of how frequently safety IPL
All this information needs to be entered into the alarm alarms have been triggered along with the timing and
management system with a designated class for safety IPL accuracy of the associated operator response will reveal
alarms to ensure they are not modified unless a PHA is gaps not apparent from routine monitoring and will allow
conducted. Regardless of what sort of alarm management identification of necessary improvements.
system is used, the IPL alarms need to be clearly desig-
nated because they require special handling. Safer processes
As you can see, there are many interactions between
Impact on alarm management alarm management and process safety management.
Using alarms as safeguards for process safety hazards Each discipline requires a rigorous methodology to
increases their importance and adds another dimension of properly implement, yet understanding how they interact
importance for performing proper alarm management. Proper is equally important to ensure a safe and productive
alarm management becomes more imperative than ever. process.
Maintaining the performance of the alarm system is criti-
cal to ensure that operator response is timely and accurate. Lee Swindler is an industry manager with Maverick
Alarm floods, chattering or an excessive number of active Technologies. He has 31 years of automation industry
alarms will reduce the chance that the safety IPL alarm will experience, including 21 years in manufacturing and 10
receive the attention needed. Alarm response procedures years on the engineering services side. He has a PMP
should be clear and easily accessible (ideally in the HMI) so certification along with being a TÜV certified functional
operators can respond quickly and effectively. safety engineer.
Whether enrolled students Our course catalog is RCEP After finishing each course,
need a refresher course on a Accredited, as well as certified participants will receive a
particular topic or need to know by the American Institute of certificate of completion. Each
more about the latest engineering Architects (AIA) for continuing course will educate and test
industry issues, CFE Edu offers education. AIA CES credits participant knowledge via a
courses that touch on a wide (learning unit hours) are earned mix of reading, video clips, and
variety of topics. for each course upon completion. interactive elements.
Want to drive your career forward with CFE Edu? View the course catalog at:
cfeEdu.cfemedia.com
cfeEDU_house ad_halfHZ.indd 1 4/29/2019 12:58:55 PM
A DV E R T I S E M E N T
AutomationDirect
We ship super-fast (and FREE on
orders over $49). The majority of our
products are stocked for same-day
shipping, when you place your order
by 6p.m. E.T. (with approved company
credit or credit card). Plus, you get
free two day (transit) shipping on
orders over $49 within the U.S.,
Canada and Puerto Rico; shipped via
ground service or LTL (certain heavy
items are excluded). We guarantee it.
1-800-633-0405 | AutomationDirect.com
A DV E R T I S E M E N T
About SEW-EURODRIVE
Engineering excellence and customer responsiveness
distinguish SEW-EURODRIVE, a leading manufacturer
of integrated power transmission and motion control
systems. SEW-EURODRIVE sets the global standard
for high performance and rugged reliability in the
toughest operating conditions. With global headquar-
Complete Drive Maintenance and Management ters in Germany, its U.S. operations include a state-
SEW-EURODRIVE now offers a full complement of of-the-art manufacturing center, five regional assembly
drive maintenance and management services. Our plants, more than 63 technical sales offices and
CDM® Maintenance Management service provides a hundreds of distributors and support specialists.
24/7 online portal as well as a complete overview of This enables SEW-EURODRIVE to provide local
your drive components, the condition of your units, manufacturing, service and support, coast-to-coast
drive usage, and service details. Plus, our new on-site and around the world.
Pick-Up Box Service will free up your maintenance
team for other tasks. Just place your drives that need
repair in the supplied box and we’ll handle the pick-up
and return of your units. P: 864-439-7537
F: 864-439-7830
www.seweurodrive.com
POWER HAS
COME FULL
CIRCLE
NEW!
Introducing the
GA800 AC Drive
Your time is valuable. The new, easy-to-use GA800 AC
Drive from Yaskawa gives you the power to make all of your
operations better.
Yaskawa America, Inc. Drives & Motion Division 1-800-YASKAWA yaskawa.com For more info: http://go.yaskawa-america.com/yai1293
Less means more!