HAZOP Study: A Practical Guide for Process Engineers in Oil & Gas

A HAZOP study that misses one high-consequence deviation doesn’t fail quietly. It fails during a compressor surge, a runaway reaction, or an undetected pressure excursion your relief system was never sized to handle. In oil and gas, the gap between a rigorous HAZOP study and a documentation exercise is measured in incident reports. This guide breaks down IEC 61882 methodology, guide words, P&ID node structure, and the deliverables your team needs to produce a study that holds up to regulatory scrutiny and feeds a defensible LOPA.

What Is a HAZOP Study? (IEC 61882 Definition)

A HAZOP study applies IEC 61882 methodology to systematically identify process deviations using structured guide words MORE, LESS, NONE, REVERSE, OTHER THAN applied to defined design intentions at each process node. Recognized under OSHA 29 CFR 1910.119 as a valid process hazard analysis method, a typical refinery unit requires 3–8 facilitated days. Without a compliant HAZOP study, high-consequence scenarios routinely remain undetected until a near-miss or a Tier 1 process safety event.

HAZOP stands for Hazard and Operability Study. Developed by ICI in the 1960s and formalized through IEC 61882 (revised 2016), the methodology was adopted by oil and gas operators faster than any other sector a direct consequence of Flixborough (1974) and Piper Alpha (1988), both of which exposed systemic failures in hazard identification on process plants.

What separates a HAZOP study from other process hazard analysis methods is its node-by-node P&ID structure. Each section is examined in sequence. The team applies every guide word to every design parameter flow, pressure, temperature, composition, level and documents causes, consequences, existing safeguards, and required actions for every credible deviation. The output is a structured deviation register, not a risk ranking exercise.

How a HAZOP Study Fits Within the PHA Hierarchy

OSHA 29 CFR 1910.119 lists acceptable process hazard analysis methods: HAZOP, What-If, Checklist, FMEA, Fault Tree Analysis, and equivalents. For oil and gas facilities, refineries, gas plants, offshore platforms, LNG terminals the HAZOP study is the de facto standard. Regulators, insurers, and LOPA practitioners all expect it as the hazard identification foundation. CCPS “Guidelines for Hazard Evaluation Procedures” codifies this expectation and complements IEC 61882 for U.S.-based operators.

HAZOP Guide Words The Engine of Process Deviation Identification

IEC 61882 mandates seven primary HAZOP guide words applied systematically to design parameters at each node: MORE OF, LESS OF, NONE, REVERSE, OTHER THAN, AS WELL AS, and PART OF. Missing or misapplying even one guide word at a high-consequence node constitutes a methodology gap that invalidates that node’s review. A single node with five parameters generates up to 35 guide word combinations the team filters credible from non-credible, then documents every credible deviation with full traceability.

Three failure modes invalidate HAZOP study guide word application in practice. First, node boundary ambiguity when boundaries are undefined, deviations fall into gaps between nodes. Second, parameter incompleteness teams frequently apply guide words to flow, pressure, and temperature but omit composition. OTHER THAN deviations are the source of most reactive chemistry incidents in refining. Third, consequence under-specification recording “equipment damage” without specifying failure mode and escalation pathway produces a deviation record that cannot support downstream LOPA, halving the study’s value before action items are even assigned.

Common HAZOP Deviations in Oil & Gas Process Systems 

The eight process deviations that appear most frequently across oil and gas HAZOP studies refinery units, offshore platforms, and gas processing plants are consistent regardless of the specific P&ID under review. IEC 61882 guide word application generates these deviations at virtually every node where the relevant parameter is a design intention. Each deviation below is shown with its guide word origin and its primary consequence class in continuous hydrocarbon process systems:

Deviation	Guide Word + Parameter	Primary Consequence Class
No Flow	NONE + Flow	Downstream starvation; furnace tube overheating; pump cavitation
Less Flow	LESS OF + Flow	Reduced heat transfer; off-spec product; column flooding risk
More Flow	MORE OF + Flow	Exchanger overpressure; control valve saturation; downstream flooding
High Pressure	MORE OF + Pressure	Vessel overpressure; relief device actuation; potential loss of containment
Low Pressure	LESS OF + Pressure	Air ingress (oxygen contamination); pump cavitation; loss of liquid seal
High Temperature	MORE OF + Temperature	Thermal degradation; tube rupture; runaway reaction initiation
Low Temperature	LESS OF + Temperature	Hydrate formation; brittle fracture risk; loss of reaction
Reverse Flow	REVERSE + Flow	Backflow of hot or hazardous fluid; check valve single-barrier failure; cross-contamination

Reverse Flow and Low Temperature are the two deviations most frequently underweighted during HAZOP facilitation in upstream oil and gas scopes. Reverse Flow scenarios involving check valve single-barrier failure have contributed to multiple major hydrocarbon releases in offshore operations. Low Temperature deviations particularly hydrate formation in gas service and brittle fracture in carbon steel at sub-zero conditions are routinely missed when the HAZOP team treats temperature as a secondary parameter rather than a primary design intention at cryogenic or cold-service nodes.

How to Conduct a HAZOP Study: Step-by-Step Methodology

A HAZOP study per IEC 61882 follows six defined steps: scope and node definition, team assembly, guide word application at each node, consequence and safeguard documentation, action item assignment, and report issue. For a mid-size refinery process unit, this sequence requires 4–8 weeks from kick-off to final report. Starting before P&IDs reach the IFR (Issued for Review) stage is the single most common cause of study rework.

A compliant HAZOP study workflow:

1. Define scope and node list establish system boundaries and confirm that all HAZOP input documents are at the correct revision state before the first facilitated session. 
2. Confirm P&ID readiness drawings must be at IFR stage minimum; findings on superseded P&IDs carry no regulatory standing
3. Assemble the HAZOP team minimum per IEC 61882: process engineer, operations representative, instrument engineer, safety engineer, independent facilitator
4. Apply guide words node by node document every credible deviation with cause, consequence, existing safeguard, and risk ranking
5. Assign action items named discipline, target closeout date, tracked in the project action register
6. Issue the HAZOP study report signed by facilitator and study leader; includes node register, deviation worksheets, and action item register

HAZOP study inputs determine the ceiling of what the study can find. A facilitation team working from incomplete or superseded documents cannot produce a complete deviation register the gaps in the inputs become gaps in the action item register. A compliant IEC 61882 HAZOP study requires six categories of input document, each verified at the correct revision before session one:

A complete HAZOP study input package includes: Process Flow Diagrams (PFDs) establishing the overall mass and energy balance; Piping and Instrumentation Diagrams (P&IDs) at IFR stage or above as the primary node reference; Cause and Effect Diagrams (C&E diagrams) defining the instrument response logic at each interlock; Control Narratives describing the intended automatic and manual control sequences; Equipment and instrument datasheets specifying design limits, materials, and rated conditions; and Operating Procedures confirming how the plant is intended to start up, operate, and shut down. Missing any one of these at study commencement forces the team to make assumptions — and every assumption is a deviation the register didn’t catch.

HAZOP Team Roles and Competency Requirements per IEC 61882

IEC 61882 requires the HAZOP study team to include personnel with knowledge of process design, operations, instrumentation, and safety with the facilitator independent of the design team. Minimum effective team size is five members; beyond nine, facilitation efficiency drops and guide word application pace falls below one node per hour, the minimum rate to complete a 20-node study in five days.

Role	Core Responsibility
HAZOP Facilitator	Leads guide words; independent of design team
Process Engineer	Confirms design intentions; evaluates deviations
Operations Representative	Identifies realistic causes; assesses operator response
Instrument / Controls Engineer	Evaluates SIS safeguard adequacy per IEC 61511
Process Safety Engineer	Assesses consequence severity; flags LOPA candidates

How Long Does a HAZOP Study Take? Field Benchmarks by Unit Type

A HAZOP study for a mid-size refinery process unit 15 to 25 nodes requires 4 to 6 facilitated days and generates 60 to 150 action items. Compressed schedules that skip pre-session node definition routinely add 30–50% to total study duration through rework. Brownfield HAZOP studies consistently generate 20–40% more action items per node than greenfield equivalents not because greenfield designs are safer, but because brownfield plants carry accumulated modifications, temporary bypasses, and MOC gaps that the HAZOP study surfaces.

Unit Type	Node Count	Facilitated Days	Action Items
Refinery process unit (CDU, HDS)	15–25	4–6	60–150
Offshore platform process system	20–35	5–8	80–180
LNG liquefaction train	30–50	8–14	120–250
Gas processing plant (full facility)	40–70	10–18	180–350
Utility system (cooling water, steam)	5–10	1–2	15–45

HAZOP vs. FMEA vs. What-If Choosing the Right Process Hazard Analysis Method

A HAZOP study is the preferred process hazard analysis method for continuous process systems in oil and gas, but OSHA 29 CFR 1910.119 does not mandate it exclusively. The distinction between methods matters: selecting the wrong PHA method for a given scope produces a study that satisfies the documentation requirement but misses the hazard classes most relevant to the system under review.

Method	Best Applied To	Key Limitation
HAZOP Study	Continuous process systems; P&ID-based	High resource demand; not suited to simple batch systems
FMEA	Equipment and component failure analysis	Misses process deviations from design intention
What-If Analysis	Simple systems; early-stage design	Completeness depends entirely on team experience
Fault Tree Analysis	Top-event probability quantification	Requires a defined top event; not a discovery tool

The HAZOP study and FMEA address different failure spaces. A HAZOP study examines what happens when the process deviates from design intention across a P&ID system. FMEA examines what happens when an individual component fails in a defined mode. For a gas compressor on an offshore platform, the HAZOP study evaluates the process consequence of a compressor trip; FMEA evaluates the failure modes of the compressor seal system, bearings, and control logic. Both are valid neither replaces the other.

PSM auditors treat the HAZOP study as the expected method for complex continuous process systems. Facilities that submit a What-If or checklist for a distillation or reaction system face heightened scrutiny not a regulatory violation, but a significant audit burden to demonstrate equivalent rigor against OSHA 29 CFR 1910.119’s five required PHA elements.

HAZOP Study Deliverables and the Path to LOPA and Revalidation

The HAZOP study output set drives four downstream engineering and safety activities simultaneously. Recommendations the engineering changes, procedural updates, and additional safeguards identified during the study feed directly into the project action register and must be closed before startup under OSHA PSM requirements. LOPA Candidates are the subset of HAZOP deviations where existing safeguards are judged potentially insufficient to meet the facility’s tolerable risk criteria; these scenarios are extracted from the deviation worksheets and carried forward for independent protection layer quantification. SIL Candidates are further subset deviations where a Safety Instrumented Function is identified as a required independent protection layer; each SIL candidate triggers a SIL verification study per IEC 61511. Design Modifications are the engineering change requests raised directly from HAZOP action items P&ID revisions, relief device resizing, interlock logic changes that must pass through the MOC process before implementation. A HAZOP study that does not explicitly tag LOPA and SIL candidates in the action item register forces downstream engineers to reconstruct the hazard logic from scratch, adding weeks to the safety lifecycle. 

A HAZOP study per IEC 61882 produces four mandatory deliverables retained for the operational life of the facility: a Node Register documenting each node boundary and its design intention; Deviation Worksheets recording every guide word combination, cause, consequence, and safeguard for every credible deviation; an Action Item Register with responsible discipline, priority ranking, and target closeout date; and an Assumptions Register capturing every engineering assumption made during the study that requires verification before closeout. OSHA 29 CFR 1910.119(e)(5) requires written resolution of all findings before startup.

The Assumptions Register is the deliverable most frequently omitted on abbreviated HAZOP studies and the one most likely to surface during a PSM audit. When a facilitation team cannot confirm a design limit, a material specification, or an interlock setpoint during the session, that uncertainty must be captured formally. An unrecorded assumption is an undocumented risk. IEC 61882 treats the Assumptions Register as a mandatory companion to the deviation worksheets, not an optional appendix.

Closing

A HAZOP study is the process hazard analysis method oil and gas facilities depend on to surface what P&IDs cannot show the deviation pathways that lead from normal operation to loss of containment or personnel injury. IEC 61882 defines the framework. OSHA 29 CFR 1910.119 sets the regulatory floor. Node definition discipline, guide word rigor, and a team with genuine process safety depth determine whether your HAZOP study delivers defensible action items or a document that won’t survive the next PSM audit.