HAZOP Study: What It Is, When You Need One and What You Get

A lender, an insurer or the engineering, procurement and construction (EPC) contract calls for a HAZOP study, and nobody explains what it involves. A HAZOP study is a structured team review that examines each section of a process design, using guide words, for deviations from its intended operation, recording causes, consequences and safeguards. Finding a flaw on paper costs a drawing revision, while finding the same flaw after construction costs rework and downtime. This guide explains what a HAZOP study means and when the US Occupational Safety and Health Administration (OSHA) requires one under 29 CFR 1910.119. It also covers the team, the session and the action register, drawing on the International Electrotechnical Commission (IEC) 61882 guide and Center for Chemical Process Safety (CCPS) guidance. The approach reflects the HAZOP facilitation and process hazard analysis support that Global Formulation provides to plant owners.

HAZOP Study Meaning: What a Hazard and Operability Study Is

HAZOP stands for hazard and operability, and the method rests on one idea: a process goes wrong when it departs from what its designers intended. A hazard and operability study therefore starts from design intent and asks, in a fixed order, how each section can deviate from it. IEC 61882:2016, the international application guide, describes a technique that uses guide words and covers the whole procedure, from preparation and examination sessions to documentation and follow-up. That scope matters to an owner, because a study is judged by its follow-up as much as by its meetings.

Six terms carry the whole method, and every worksheet uses them in the same order:

• Node — a section of the plant, marked on the piping and instrumentation diagram (P&ID), with one clear purpose such as a transfer line.
• Design intent — what that section is meant to do, stated before any deviation is discussed.
• Parameter and guide word — a process variable such as flow, temperature, pressure or level, combined with a prompt such as no, more, less or reverse.
• Deviation — the combination of the two, for example no flow or more pressure.
• Cause, consequence and safeguard — how the deviation arises, what follows if it does, and what the design already provides against it.
• Recommendation — a change or a further study the team asks for, which becomes an action with an owner and a due date.

The technique appears in standards and contracts as hazard and operability studies, HAZOP analysis or simply HAZOP. It is generally considered to have originated in the Heavy Organic Chemicals Division of Imperial Chemical Industries (ICI) in the United Kingdom. Lawley's 1974 paper in Chemical Engineering Progress was its first description in the open literature, and the HAZOP reference article lists that paper and the early guides. The CCPS book Guidelines for Hazard Evaluation Procedures (3rd edition, 2008) sets HAZOP beside the other hazard evaluation methods and adds layer of protection analysis (LOPA) and human-factors material.

Whether the review is optional depends on where the plant sits and what it handles, which is the question owners ask first.

When a HAZOP Study Is Required, and When You Need One Anyway

The honest answer to whether a HAZOP study is mandatory is that it depends on the jurisdiction and on the process. In the United States, the process safety management standard 29 CFR 1910.119 requires a process hazard analysis for covered processes, and it names HAZOP as one permitted method. Elsewhere the legal trigger is a national major-hazard regime, while a lender, insurer or parent company often sets the requirement by contract. Separating the legal triggers from the commercial ones tells you what record the study must leave.

The United States text, as published in the Code of Federal Regulations, sets out five points that matter to an owner:

• Coverage — paragraph (a)(1): the standard applies to a process involving a listed chemical at or above its threshold quantity. The standard also applies to a Category 1 flammable gas, or a flammable liquid with a flashpoint below 100 °F (37.8 °C). The trigger is 10,000 pounds (4,535.9 kg) or more held on site in one location, with listed exceptions.
• Method — paragraph (e)(2): the employer uses one or more of What-If, Checklist, What-If/Checklist, HAZOP, Failure Mode and Effects Analysis, Fault Tree Analysis or an appropriate equivalent. HAZOP is therefore a permitted choice, not a named mandate.
• Before start-up — paragraph (i)(2)(iii): for a new facility, the pre-startup safety review confirms that a process hazard analysis has been performed and its recommendations resolved or implemented before startup.
• Revalidation — paragraph (e)(6): the analysis is updated and revalidated at least every five years by a team that meets the team requirements.
• Records — paragraph (e)(7): the analyses, updates and the documented resolution of recommendations are kept for the life of the process.

Other jurisdictions run their own major-accident regimes, for example the Seveso III Directive (2012/18/EU) in the European Union and the Control of Major Accident Hazards Regulations 2015 in Great Britain. Confirm which regime applies to the site before relying on a United States description. Where no law applies, a study is still warranted in four common situations:

• New plant at detailed design — the P&IDs exist and can still be changed at the cost of a revision. This is the usual point for a HAZOP study of a new chemical plant.
• Modification of an existing plant — a new product, reactant, capacity or control philosophy changes the hazards, and the site's change-control process decides how much of the plant to re-examine.
• First plant-scale operation of a pilot or laboratory route — scale-up moves the process to equipment that nobody has yet operated.
• An outside requirement — a lender, insurer, parent company or contract names the study as a condition.

Reactive-chemistry plants show why the second and third situations matter. In an ethoxylation unit handling ethylene oxide, the hazards sit in the interaction of reaction, cooling and control. The guide to ethoxylation reactor design and ethylene oxide safety sets this out. A node-by-node review is built to expose exactly that kind of interaction.

Who Sits on a HAZOP Study Team

A HAZOP study has no calculation to fall back on, so its quality is the quality of the people in the room. The team supplies the knowledge of how the plant will really be operated, maintained and upset. OSHA sets a minimum in paragraph (e)(4). The team needs expertise in engineering and process operations, at least one employee with experience specific to the process, and one member who knows the method.

OSHA requires method knowledge, not independence. Appointing a leader who did not design the plant is the better practice, because the design is then questioned rather than defended. A specialist, such as a reaction chemist or a vendor representative, joins for the nodes that need one. The roles above cover OSHA's minimum and the usual practice beyond it. The next section shows what the team does once it is seated.

How a HAZOP Study Session Works, Node by Node

A session moves through the P&ID one node at a time and puts the same questions to every node. That repetition is deliberate, because it stops the team from discussing only the hazards it already worries about. The leader states the design intent, applies each guide word to each relevant parameter, and the team records what follows. Figure 1 shows the loop, and the table beneath it defines each worksheet column.

Time, composition, agitation, start-up, shutdown and utility failure are common additions to the parameter list. IEC 61882:2016 also includes a case study of a procedural HAZOP. That variant applies the guide words to the steps of an operating procedure instead of to a line on a drawing. Batch plants rely on that variant, because their hazards sit in sequences as much as in pipework. A site-specific study fixes the exact parameter and guide-word set before the first session.

HAZOP vs HAZID, What-If and LOPA: Which Study Answers Which Question

Owners often receive a quotation that names several studies and cannot tell which one the project needs. The studies differ in stage, in the information they need and in how deep they go, so they complement each other more than they compete. OSHA's list in paragraph (e)(2) shows the range, from lightly structured questioning to formal failure logic. The table compares them on the points that decide the choice.

HAZOP vs PHA is a question of scope rather than of method. In OSHA's wording a process hazard analysis is the required activity, and HAZOP is one way of performing it. Do not confuse it with the preliminary hazard analysis used in other fields, which is an early screening technique. HAZOP vs LOPA is a question of sequence: the HAZOP finds the scenarios, and LOPA tests whether the safeguards credited for the severe ones are independent and sufficient. Layer of protection analysis is outside the scope of this guide.

What You Get: the HAZOP Report and Action Register

The study ends with documents, and those documents are what an auditor, a lender or the next shift will actually read. A complete package records what was examined, who examined it and what was decided. Its central item is the action register, because OSHA requires that the team's recommendations be resolved in a timely manner and that the resolution be documented. A report without a closed register is an unfinished study.

A complete HAZOP report should contain six items:

1. Scope and node list — which drawings, at which revision, were divided into which nodes.
2. Team record — names, roles and attendance for each session.
3. Worksheets — deviation, cause, consequence, safeguard and recommendation for every node.
4. Action register — each recommendation with an owner, a due date and a closure status.
5. Study basis — the design information and assumptions used, so a later reader knows what the team saw.
6. Revalidation date — when the study next falls due under the applicable rule, which is five years under United States process safety management.

Receiving the documents is not the same as being safe, so the next section looks at how studies fail even when the paperwork exists.

Why HAZOP Studies Fail: Outdated P&IDs, Narrow Scope and Open Actions

The common ways a HAZOP study disappoints are gaps in preparation, scope and follow-through rather than flaws in the method. Each carries a plant consequence that appears later, when the study is relied upon and found hollow. The table lists these failures and what each one costs.

The first and last rows deserve emphasis. A study of the wrong drawing or the wrong chemistry produces confident worksheets about a plant that does not behave that way. Preparation, not the sessions, decides whether the output can be trusted.

Commissioning a HAZOP Study: A Decision Framework and Owner's Checklist

Commissioning a study well takes a handful of decisions made before the first session. They determine whether the output is a defensible record or a stack of worksheets. Work through them in order, because each depends on the one before. The competent-assessment statement that follows the list applies to the whole section.

1. Confirm the trigger — legal, contractual or good practice, and which regime applies to the site. This decides the form of the record.
2. Fix the design status — issue the P&IDs at a frozen revision and compile the process safety information. Paragraph (d) of the OSHA standard requires that information, including P&IDs, to be compiled before any process hazard analysis.
3. Decide the scope — nodes, operating modes, procedures and interfaces with other units.
4. Choose the leader — method knowledge is the minimum, and independence from the design team is the better practice.
5. Seat the right people — include operations and maintenance, and release them from their duties for the sessions.
6. Agree the outputs — the report contents above, the action register format and who owns closure.
7. Plan the follow-through — an owner for each action, a tracking method, a closure review before start-up and the revalidation date.
8. Decide what else is needed — thermal hazard data, LOPA on severe scenarios and relief and venting design. A HAZOP shows that these are needed; it does not supply them.

When a facilitator is proposed, ask to see a sample worksheet and the method description. Ask how start-up, shutdown and maintenance will be treated, and how actions will be tracked to closure. On receipt, check that the drawing revisions in the report match those you issued. Then sample a handful of actions at random and confirm that each has an owner, a date and a status.

Owners who need a HAZOP facilitator, or a process safety consultant to supply measured thermal data for the study, can start from our process safety and thermal hazard assessment service. It covers HAZOP facilitation, process hazard analysis, thermal hazard assessment and pre-startup safety reviews. The checklist above is the brief to bring to that conversation.