Introduction
In high-hazard industries such as oil and gas, petrochemical, LNG, refinery, and chemical facilities, some systems are more important than normal plant equipment because their failure can lead to major accidents. These systems are called Safety Critical Elements (SCEs) and they play a key role in preventing, detecting, controlling, or reducing events such as fire, explosion, toxic release, loss of containment, and emergency escalation.
SCE Identification helps facilities clearly identify which equipment, systems, structures, and barriers are essential for major accident hazard control. Once these SCEs are identified, Performance Standards define how they must function, how often they should be inspected or tested, and what level of reliability and availability is required. Together, SCE Identification and Performance Standards support a focused, risk-based safety assurance approach instead of treating all equipment with the same priority.
What are Safety Critical Elements?
A Safety Critical Element is any equipment, system, structure, or component whose failure could cause, contribute to, or escalate a major accident. It may also be a system required to prevent or reduce the consequences of a major accident.
In simple terms:
An SCE is something that must work when needed to prevent or control a major accident hazard.
Examples of Safety Critical Elements include:
| SCE Category | Typical Examples |
| Detection Systems | Fire detectors, gas detectors, smoke detectors |
| Protection Systems | Firewater system, deluge system, passive fire protection |
| Shutdown Systems | Emergency shutdown system, shutdown valves, blowdown system |
| Containment Systems | Pressure vessels, pipelines, storage tanks, seals, flanges |
| Relief and Vent Systems | Pressure safety valves, rupture discs, flare system |
| Control and Instrumentation | Safety instrumented systems, critical alarms, trip functions |
| Structural Safety | Offshore structures, supports, blast walls, escape routes |
| Emergency Systems | PA/GA system, emergency lighting, escape and evacuation systems |
Not every item in a plant is safety critical. SCE Identification helps separate normal equipment from those elements that are essential for major accident prevention, control, or mitigation.
What is a Major Accident Hazard?
A Major Accident Hazard, or MAH, is a hazardous event with the potential to cause serious harm to people, assets, environment, production, or business reputation.
Typical major accident hazards include:
- Large hydrocarbon release
- Fire or explosion
- Toxic gas release
- Loss of containment
- Vessel rupture
- Structural collapse
- Escalation from one unit to another
- Failure of emergency response systems
- Loss of safe escape, evacuation, or rescue arrangements
Major accident hazard control is about identifying these events and ensuring the required barriers are available, reliable, and effective.
Why SCE Identification Matters
Major accidents rarely happen because of one failure alone. They usually occur when several protection layers fail, are unavailable, or are not properly maintained. This is why identifying safety critical systems is so important.
If a critical safeguard is treated like ordinary equipment, it may not receive the right inspection, testing, maintenance, or management attention. Over time, this can weaken the facility’s ability to prevent or respond to a major accident.
A proper SCE Identification study helps answer important questions such as:
Which systems are essential for controlling major accident hazards?
Which barriers must be maintained with higher priority?
What happens if a safety critical system is bypassed or unavailable?
Who is responsible for verifying its performance?
How do we know the system will work when required?
By answering these questions clearly, companies can improve asset integrity, strengthen process safety management, and reduce the risk of barrier failure.
What is a Performance Standard?
A Performance Standard defines the expected performance of a Safety Critical Element (SCE). It explains what the SCE must do, how well it must perform, and how its performance will be verified.
Key points:
- It defines the safety function of the SCE.
- It explains the minimum performance requirement expected from the system.
- It includes inspection, testing, and maintenance requirements.
- It provides acceptance criteria to check whether the SCE is fit for purpose.
- It helps operations, maintenance, inspection, and engineering teams understand their responsibilities.
- It supports assurance and verification of safety critical systems.
- It helps identify what action is needed if the SCE is unavailable, bypassed, or not performing as required.
In simple terms, a Performance Standard ensures that safety critical systems remain available, reliable, effective, and ready to perform when needed.
Main Elements of an SCE Performance Standard
A strong SCE Performance Standard usually covers four key areas: functionality, availability, reliability, and survivability.
- Functionality explains what the system must do. For example, an emergency shutdown system must detect a hazardous condition and initiate actions to bring the plant to a safe state.
- Availability confirms that the system is ready for operation when required. If an SCE is bypassed, isolated, or under maintenance, the risk must be reviewed and temporary controls may be required.
- Reliability focuses on whether the SCE will perform correctly when demanded. This is normally supported through inspection, testing, proof testing, maintenance records, and failure history.
- Survivability considers whether the SCE can continue to perform during harsh or hazardous conditions such as fire, explosion, vibration, corrosion, or severe weather.
These requirements make the performance standard useful as a working document, not just a compliance record.
How SCE Identification is Carried Out
SCE Identification should be carried out in a structured way. The process usually starts by identifying credible major accident hazards for the facility. These may include hydrocarbon release, fire, explosion, toxic gas release, vessel rupture, structural failure, or emergency evacuation failure.
The next step is to identify the barriers that prevent, detect, control, or mitigate each major accident hazard. These barriers may come from studies such as HAZID, HAZOP, Bow-Tie Analysis, QRA, FERA, EERA, SIL Assessment, or other process safety reviews.
Once the barriers are identified, the study team screens them to determine which ones qualify as Safety Critical Elements. The selected SCEs are then recorded in an SCE Register, which becomes an important reference for inspection, testing, maintenance, verification, and management of change.
After the SCE Register is developed, performance standards are prepared for each SCE or SCE group. These standards are then linked to assurance activities such as preventive maintenance, inspection plans, testing schedules, audit programs, and verification requirements.
What Should an SCE Register Include?
An SCE Register should be clear and usable by the people who manage the asset. It should not be prepared only for documentation purposes.
A practical SCE Register may include the SCE name, tag number, system description, related major accident hazard, safety function, location, performance standard reference, inspection requirement, testing frequency, responsible department, and impairment control requirements.
The register should also be reviewed whenever there is a plant modification, process change, equipment replacement, operating mode change, or new hazard identified. If the SCE Register is not updated, the facility may unknowingly operate with outdated safety assumptions.
Examples of SCEs and Their Performance Expectations
For a Fire and Gas Detection System, the performance expectation may include early detection of flammable gas, toxic gas, flame, smoke, or heat in identified hazard zones. The system should initiate alarms and executive actions where required.
For an Emergency Shutdown System, the expectation may include safe isolation of the process, shutdown of selected equipment, prevention of escalation, and defined response time.
For a Pressure Safety Valve, the expectation may include opening at the required set pressure and relieving the required capacity to protect equipment from overpressure.
For a Firewater System, the expectation may include reliable pump start, adequate flow and pressure, sufficient water supply, and coverage of protected areas.
These examples show why SCE management must be specific. Each system has a different role, and its performance standard must reflect that role.
Common Weaknesses in SCE Management
- Too many systems marked as safety critical.
- Real priorities become unclear.
- Performance standards are too generic.
- Testing requirements are not clearly defined.
- Acceptance criteria are missing.
- Bypass control is weak.
- Ownership is not clear.
- Maintenance linkage is poor.
- Testing records are incomplete.
- SCE Register is not updated after changes.
- These gaps can weaken major accident hazard barriers.
Benefits of SCE Identification and Performance Standards
- Helps control major accident hazards.
- Focuses on the most important safety systems.
- Improves maintenance planning.
- Supports asset integrity management.
- Strengthens safety case documentation.
- Improves emergency response readiness.
- Helps management track safety critical equipment health.
- Useful during shutdowns, inspections, audits, and MOC reviews.
- SCE Identification shows what is safety critical.
- Performance Standards show how safety critical systems must perform.
Who Should Be Involved?
SCE Identification should not be done by one discipline alone. It requires input from people who understand the process, the equipment, the controls, the hazards, and the day-to-day operation of the facility.
The team may include process safety engineers, operations personnel, maintenance engineers, inspection engineers, instrumentation engineers, mechanical engineers, electrical engineers, HSE specialists, fire and gas specialists, emergency response representatives, and asset integrity personnel.
The quality of the outcome depends heavily on the experience of the team and the quality of available plant information.
Conclusion
SCE Identification and Performance Standards help high-hazard facilities control major accident hazards by identifying the systems that are truly critical for preventing, detecting, controlling, or reducing serious incidents. A good SCE framework goes beyond creating a register; it links each Safety Critical Element with performance expectations, inspection and maintenance requirements, verification activities, and clear ownership. This ensures that critical safety barriers remain effective throughout the facility life cycle, protecting people, assets, the environment, and business continuity.
