Why Change Causes Incidents

A process plant is designed as one system. The pipe wall thickness, the relief valve size, the alarm set points, the operating procedure and the number of people on shift were all chosen together, for one set of conditions. When one part changes, the others do not change with it. The plant can then be operating outside the conditions its safeguards were designed for, and nobody has noticed.

This is why management of change (MOC) exists. It is a disciplined way to ask, before a change is made: what does this change touch, what could go wrong because of it, and what must be updated so the rest of the system still fits?

Three ways a change creates a hazard

• It defeats a safeguard directly. A trip is bypassed, a relief path is blocked, or a gas detector is moved to a place where gas does not collect.
• It moves the process outside its design envelope. Higher flow, higher temperature or a new chemical puts more demand on equipment than it was built for.
• It breaks the link between the plant and the information about it. The drawing, the procedure or the training no longer describes reality, so the next decision is made on wrong information.

The third way is the most common and the least visible. Its effect is often delayed by months or years.