Criterion 3.2 "The safety report should demonstrate that the Operator has used information and data that are suitable and sufficient for risk analysis".
A key requirement of the regulations is that information provided about the site and its hazardous substances is suitable and sufficient for a risk assessment. Table 1 provides some examples of where such information may be found. When considering this part of the safety report the assessor should ask if it provides answers to the following questions:-
The site description must describe the location and type of each warehouse and provide information on the maximum inventories of all hazardous substances and the conditions (temperature and pressure) under which they are stored. This probably means accounting for seasonal variations in stock levels and the toxicity of different products. It is important that the report adequately addresses the requirements of Schedule 1 of COMAH and considers all substances qualifying under the aggregation rules. The hazard from each qualifying substance must be assessed.
The safety report should describe plant and plant operations so that failures and errors that result in a fire can be identified. The detail provided needs to be sufficient to enable Assessors to determine if the accident analysis is thorough and complete. Of particular concern are spills, the separation of incompatible substances and hot work such as shrink wrapping.
The standard of maps and plans is likely to vary from one report to another, but all the information needed to determine risk should be present. Maps and plans should clearly show the location of all warehouses and populated areas at risk from the installation. Particular attention should be given to elevated structures such as railway viaducts and high rise buildings that may be at risk from buoyant releases such as the smoke plume from a fire, or even the flames themselves when tilted by a strong wind.
Some accidents at the chemical warehouses have the potential to affect the natural environment, and in particular aquatic systems, SSSI's or SBI's that may lie some considerable distance from the site but are connected to it by a water course.
Therefore, in addition to assessing the consequences of fire, the safety report should describe the potential effects of contaminated fire fighting water run-off. In this context the location of warehouses with respect to watercourses is particularly important.
The information in a safety report must be sufficient to enable the Assessor to deduce the approximate source term for each major accident. In other words, sufficient information should be given to allow the Assessor to determine 'how much, for how long and from where?' This includes the rate of plume seeding in the event of a fire, and the quantity of chemicals that could, under worst circumstances, leave the site in fire fighting water.
A safety report that fails to supply all of this information, is unlikely to comply with the assessment criteria.
The assumptions referred to here do not relate to mathematical modelling of an accident, but are connected with the operation of a site. They include assumptions such as the local fire brigade will reach the site within 10 minutes, that the sprinklers will extinguish most fires and/or that the site isolation system will function perfectly.
Of particular concern are:-
Key documents that the safety report relies on should be available to the Assessor, ideally by being included as an annex to the main report. Fault tree analysis, for example, should not be based on failure probabilities given in a confidential report unless the company is prepared to provide HSE with a copy.
The minimum requirements in this respect is references to published work. An Operator's failure to provide any supporting evidence should be considered a failure to comply with the criteria.
Source documents are targets for the follow-up inspection to validate the report, but Assessors should bear in mind their right to request further information from an Operator to help them assess his safety report.
The safety report should provide information on the methods and models used to predict the consequences of major accidents. If a well known computer program such as PHAST has been used, then only details of the input data and the version number are required. If an in-house computer program is used to calculate the consequences of accidents, then the physics on which the predictions are based should be described or reference made to a published article.
A safety report should present wind rose data (wind speed, wind direction and atmospheric stability) for the site in order to establish the frequency and direction of adverse atmospheric conditions. This is particularly important for pool fire hazard.
Operators should demonstrate awareness of the changes in accident consequences with weather conditions by presenting results for different atmospheric stability and wind speed. They should recognise that the wind direction can vary over 360oC and that D5 and F2 do not necessarily encompass the full range of consequences of an accident.
An intense fire generates a buoyant smoke plume which, under certain weather conditions, will rise high into the air. Ground level concentrations of dangerous substances are then very low and the hazard range for the fire may not extend off-site. A high-speed wind (15m/s) tends to prevent a buoyant plume rising, therefore a safety report should evaluate the consequences of fires for a range of weather conditions.
If a passive dispersion model is used to predict down wind concentrations of dangerous substances, weather conditions used to calculate the hazard range should include D5.
Operators should not reduce the frequency of an event or the severity of the consequences of an accident on the grounds of the presence of a safety system. For example, the Operator should not claim that a release will be terminated early by a shutdown system that may fail on demand. Nor should he discount an initiating event on the grounds that a permit-to-work system precludes the necessary conditions.
Ideally, the safety report should quantify the consequences of events with an without safety features operating so that their 'value' can be assessed and balanced against their reliability.
A safety report should present the entire chemical, physical, toxicological and eco-toxicological information that is needed to calculate risk to people and the environment. In the case of agrochemicals this means: -
Toxicity data should also be provided for any toxic substances produced by combustion together with their production ratio in (kg of combustion product)/(kg of compound burnt).
Table 1 : Sources of Data for Off-site accident initiators
| Initiator | Method of model |
|---|---|
| Aircraft impact | AEA methodology |
| Seismic event | British geological survey data |
| Lightning strike | Electricity council data and methodology, BS 6651: 1999 |
| Severe environmental
conditions:-
Abnormal rainfall |
Historical data plus reasoned argument |
| Flooding | Site and met office data plus reasoned argument |
| Subsidence | Historical data plus reasoned argument |
| Land slip | Historical data plus reasoned argument |
| Fire or explosion at adjoining plant | Site environs information plus relevant data where relevant |
| Missile from off-site | Site environs information plus relevant data |
| Hazardous substance pipeline rupture | Site environs information plus relevant data |
| Collapse of high voltage cable | Site environs information plus relevant data |
| Impact by out of control road or rail vehicle | Site environs information plus relevant data |
| Other |
J.P. Byrne, "The calculation of aircraft risk in the UK", prepared by AEA Technology plc for the Health and Safety Executive 1997. Contact Research Report 150/1997
The method of measuring the frequency of accidents caused by off-site events should be fit for purpose. In other words it should be proportionate to the level of risk. Thus, if a site is located far away from any airport or flight path (military or civil), then it is acceptable for the safety report to refer to the background crash rate for the UK. On the other hand, if the site is located close to a busy airport then a much more detailed assessment of aircraft impact should be carried out.