About Defining Components for a What If Analysis

To define components for a What If Analysis, the What If Analysis team will:

As part of defining the components, the What If Analysis team will:

For example, assume the What If Analysis team has discussed a process that is controlled by System 1A. During the discussion, the team defines the following scenario, which is a scenario that could occur.

When the pressure monitor stops working, the pressure switch is not be triggered to open or close appropriately, causing hazardous chemicals to leak out of the connector, which may result in environmental degradation. To prevent this condition, a toxicity detector is in place, which sounds an alarm when the toxicity levels in the facility reach a high-risk level.

To define this scenario within a hazards analysis, the team creates one record in each family described in the following table. The column In the example, this record represents contains an item from the previous example and serves as a reference for the type of information that record represents in the What If Analysis.

A record in this family...

Stores...

In this example, this record represents...

Hazards Analysis System/Node

Details on the asset, asset group, or functional location that is used to perform the process.

System 1A

What If

Details about the condition that may deviate from the normal behavior of that process and directly leads to a risk. This condition is referred to as a what if. A What If is linked to a Cause.

Pressure increases

Hazards Analysis Cause Details on what could cause the deviation described in the What If, including how frequently it may occur, and the asset that is associated with it. Causes can include human error, equipment failure, or other factors. Chemicals leak
Hazards Analysis Consequence Details on the negative outcome that results from the event that is defined in the Cause. Multiple fatalities
Hazards Analysis Safeguard Details on the safety precautions that are currently in place to prevent or lessen the impact of the negative outcome that is defined in the Consequence. Additional details about a safeguard defined in a Safeguard that is considered to be an independent layer of protection. Not all safeguards are independent layers of protection. Toxicity detector

Note: If the safeguard is an instrumented function that exists within a safety system and is represented by an Instrumented Function in the GE Digital APM database, you can link that Instrumented Function to the Safeguard. For more details on instrumented functions and safety systems, see the SIS Management section of this Help system.

In addition to the records described in the table, the What If Analysis team creates two Risk Assessments, where:

Once all the safeguards that are available have been applied, the team determines if additional risk mitigation is required to meet tolerable level of risk. If the risk is to be mitigated further, then the team proposes one or more recommendations to reduce the risk to tolerable limits. A Recommendation created in a Hazards Analysis is called a strategic recommendation. It can be leveraged within a strategy to define Actions that will mitigate the risk further.

Copyright © 2018 General Electric Company. All rights reserved.