(69a) Expanding Known Process Safety and Risk Analysis Concepts to Manage Security Concerns

The generally accepted method for determining Risk by combining the probability that an incident will occur with the consequences of that occurrence can be upgraded and expanded to include security concerns with minor, yet significant, modifications in approach and avenues of analysis. For instance, when analyzing for process safety risk, the consequence and probability components of this equation are independent. But when analyzing for security risks, they interdependent. Another difference is in how Process Hazards Analysis is used. While the basic PHA analytical components are essentially the same, the management approach (prevent and/or mitigate consequences) for an identified security hazard is different than the approach for managing a process hazard.

This paper identifies both the similarities and then the differences and needed upgrades in approach for analysis of security concerns versus process safety concerns. It focuses on the challenging aspects of security and helps the reader understand how to determine which upgrades are needed and how to populate the appropriate fields in those upgrades. It then frames the hazard assessment and risk management process with security as the prime focus. All this is done with familiar terms and well known, yet modified, hazard assessment and risk analysis procedures.