Introduction
In Layer of Protection Analysis (LOPA), once you have developed scenarios and identified independent protection layers (IPLs), the next crucial step is to determine the frequency of those scenarios. This calculation translates qualitative hazard discussions into measurable, risk-based outcomes that drive decision-making.
Frequency analysis connects the dots between initiating events, safeguards, and consequences. Done correctly, it allows safety teams to:
- Compare calculated risks against corporate or regulatory tolerance criteria
- Identify when additional IPLs are necessary
- Demonstrate defensible, auditable reasoning to regulators and stakeholders
To understand how LOPA supports ALARP-based decision-making, it’s essential to first grasp the fundamentals of the method itself. “Understanding LOPA: Layers of Protection Analysis Explained” introduces the core concepts of initiating events, independent protection layers, and consequence evaluation that underpin every risk decision in process safety.
The General Frequency Equation
LOPA frequency analysis is fundamentally based on a simple and direct calculation method:
Scenario Frequency (fC) = Initiating Event Frequency (fI) × PFD of each IPL
Where:
- fI – Initiating event frequency (e.g., pump failure, operator error)
- PFD – PFD refers to the chance that an independent protection layer will not function as intended when called upon.
This “chain logic” ensures that every initiating event is directly tied to its consequence, accounting for safeguard reliability.
Example:
- Initiating Event: Loss of cooling (1 × 10⁻¹/yr)
- Independent Protection Layers include an interlock with a failure probability of 1 × 10⁻¹, and a relief valve with a PFD of 1 × 10⁻².
- The resulting consequence frequency is calculated as: (1 × 10⁻¹) × (1 × 10⁻¹) × (1 × 10⁻²), which equals 1 × 10⁻⁴ events per year.
Once initiating event frequencies are established, understanding how independent protection layers affect overall scenario outcomes is essential. “Independent Protection Layers (IPLs) in LOPA: Types, Rules, and PFD Values” explains how PFD data supports these calculations.
Beyond Simple Releases: Conditional Modifiers
Many organizations go further than just estimating release frequency. They calculate the probability of downstream outcomes such as:
- Fire or Explosion (requires release + ignition)
- Toxic Release Exposure (requires release + personnel present)
- Fatality (requires exposure + injury probability)
This is done by multiplying scenario frequency with conditional probabilities:
- Pignition – Probability that release ignites
- Pperson present – Likelihood that people are in the affected area
- Pinjury – Probability that exposure leads to injury/fatality
These modifiers make risk assessment more realistic and align it with corporate fatality or injury risk criteria.
Key Factors Influencing Probabilities
- Initiating Event Linkages
- Operator error → Person is always present (Pperson present = 1)
- Crane collision → Release + ignition occur together (Pignition = 1)
- Operator error → Person is always present (Pperson present = 1)
- Area Classification
- General process area → Pignition = 0.5
- Remote tank farm → Pignition = 0.1
- General process area → Pignition = 0.5
- Event Type
- Pool fire → Lower injury probability
- Flash fire → High likelihood of injury if personnel are present
- Toxic cloud → Depends on detection, escape routes, and incapacitation rate
- Pool fire → Lower injury probability
High vs. Low Demand Mode
LOPA assumes most IPLs are tested at defined intervals. How often they are challenged matters:
- Low Demand Mode (initiating event < 2 × IPL test frequency): Use normal calculation (Eq. 7-1).
- High Demand Mode (initiating event > 2 × IPL test frequency): Use modified equation:
Consequence frequency (fC) is determined by multiplying 2 with the IPL’s testing frequency and its Probability of Failure on Demand (PFD):
fC = 2 × (Test Interval of IPL) × (PFD of IPL)
This adjustment prevents overestimating consequence frequencies in systems exposed to frequent demands.
Alternative Calculation Methods
Not every organization uses full equations. Three simplified approaches are common:
1. Look-Up Tables
Risk matrices combine:
- Initiating event frequency (e.g., frequent, occasional, rare)
- Consequence severity category
- Required number of IPLs or maximum tolerable frequency
These embed company rules into easy-to-use decision aids.
2. Integer Logarithm Method
Order-of-magnitude approach:
- fI = 1 × 10⁻²/yr → log = 2
- IPL PFD = 1 × 10⁻² → log = 2
- Add logs → Frequency exponent = 4 → 1 × 10⁻⁴/yr
Fast, but less precise ideal for screening.
3. Number of IPL Credits
Each IPL is given a credit (typically 1 IPL credit = 1 × 10⁻² PFD). The sum of credits is compared against company tolerance criteria.
Case Study: Hexane Tank Overflow
Two scenarios illustrate how safeguards alter risk:
| Scenario | Initiating Event | IPLs Considered | Consequence | Frequency Outcome |
| 1a – Spill not contained by dike | LIC failure (1 × 10⁻¹/yr) | Dike (PFD 1 × 10⁻²) | Fire outside containment | 1 × 10⁻³/yr |
| 1b – Spill contained by dike | LIC failure (1 × 10⁻¹/yr) | No IPL credit for dike | Fire inside containment | 1 × 10⁻²/yr |
Insight: Even with the same initiating event, safeguard performance drastically changes the calculated risk.
Conclusion
Determining scenario frequency in LOPA is the bridge between identifying hazards and making risk-based decisions. By systematically combining initiating event rates, IPL performance data, and outcome probabilities, organizations can quantify how often undesirable events may occur. This calculation does not aim for perfect precision but instead provides consistent, transparent, and defensible risk estimates.
Once the scenario frequency is established, the next challenge is deciding whether the resulting risk level is acceptable. This is where LOPA moves from calculation to judgment. “How to Use LOPA to Make Defensible Risk Decisions (ALARP Guide)” explains how to interpret calculated frequencies against corporate risk tolerability criteria, apply the ALARP principle, and document defensible decisions in compliance with international process safety standards.
FAQs
What does scenario frequency mean in LOPA?
Scenario frequency is the estimated rate at which an accident sequence could occur, combining the initiating event rate with the probability of independent protection layer (IPL) failures.
How is mitigated frequency calculated in LOPA?
Mitigated frequency is calculated by multiplying the initiating event frequency by the probability of failure on demand (PFD) of all credited IPLs in the scenario.
Why is scenario frequency important in process safety?
It helps determine whether the existing safeguards keep risk within acceptable limits and guides decisions on adding or improving safety layers.
What factors can affect scenario frequency values?
Key factors include initiating event rates, reliability of IPLs, human error likelihood, probability of ignition, and the presence of people in affected areas.
Can lookup tables be used instead of detailed calculations?
Yes, many organizations use lookup tables or risk matrices for simplicity, but numerical calculations are preferred when higher accuracy or regulatory compliance is required.