Mechanical, Electrical, Fire and Process Safety

Introduction

Industrial safety is the systematic control of hazards that can injure people, damage equipment, interrupt production, or harm the environment. In mechanical and process industries, incidents rarely arise from a single unsafe act. They usually result from interactions among hazardous energy, equipment design, operating procedures, maintenance, human factors, and organizational decisions.

This chapter examines four closely connected safety domains: mechanical safety, electrical safety, fire safety, and process safety. It also develops practical controls for lifting operations, pressure systems, lockout–tagout, confined spaces, work at height, hot work, combustible materials, and hazardous chemicals. The central principle is that safety should be designed into a system rather than added after an incident.

Learning Objectives

After studying this chapter, a student should be able to:

1. Identify mechanical, electrical, fire, chemical, and process hazards in industrial workplaces.
2. Select suitable engineering and administrative controls using the hierarchy of controls.
3. Explain guarding, lifting, pressure-system, electrical, and hazardous-energy requirements.
4. Apply safe principles for confined-space entry, work at height, hot work, and chemical handling.
5. Describe fire prevention, detection, suppression, and emergency-response systems.
6. Explain the purpose and structure of permit-to-work systems.
7. Apply inherently safer design principles to process and equipment decisions.
8. Analyze an industrial safety case and recommend corrective actions.

1. Safety as a System of Risk Control

A hazard is a source or situation with the potential to cause harm. Risk combines the likelihood of harm with its severity. A qualitative risk matrix may classify risk as low, medium, high, or extreme. A quantitative representation is:

where R is risk, P is the probability or frequency of an unwanted event, and C is the consequence severity. This expression is a conceptual model, not a precise physical law. It is useful only when the scales for probability and consequence are defined consistently.

Risk assessment normally follows these steps:

1. Define the task, equipment, boundaries, and people exposed.
2. Identify hazards and credible initiating events.
3. Estimate existing risk.
4. Select controls according to the hierarchy of controls.
5. Reassess residual risk.
6. Communicate controls, verify implementation, and review changes.

The hierarchy of controls, from most to least reliable, is:

Personal protective equipment is essential in many operations, but it depends heavily on correct selection, fit, use, maintenance, and worker behavior. It should not substitute for feasible engineering controls.

2. Mechanical Safety

2.1 Mechanical hazards

Mechanical hazards include crushing, shearing, cutting, entanglement, drawing-in, impact, abrasion, puncture, and unexpected movement. Common sources are rotating shafts, gears, belts, chain drives, flywheels, presses, conveyors, robots, machine tools, and mobile equipment.

A hazard exists whenever a person can reach a danger zone during normal operation, adjustment, cleaning, unjamming, maintenance, or foreseeable misuse. Risk assessment must therefore consider more than the normal production cycle.

2.2 Machine guarding

A suitable guard should:

• prevent access to the danger zone;
• be strong enough for foreseeable impact and operating conditions;
• not create new sharp edges, pinch points, or visibility problems;
• remain securely attached;
• permit inspection and maintenance without unnecessary removal;
• prevent bypassing where practicable; and
• work with an interlock when access is required during operation.

Fixed guards are preferred where frequent access is unnecessary. Movable guards may be interlocked so that opening the guard stops hazardous motion and prevents restart until the guard is closed. Presence-sensing devices, two-hand controls, light curtains, and pressure-sensitive mats can supplement physical guarding, but their reliability and stopping distance must be verified.

A guard is ineffective if a worker can reach over, under, around, or through it. Designers should consider body-part dimensions, access frequency, tool requirements, and the machine’s stopping time. Control systems should be designed so that a single fault does not create an unacceptable loss of the safety function.

2.3 Safe machine operation and maintenance

Operators should be trained in start-up, normal operation, abnormal conditions, emergency stopping, cleaning, and reporting of defects. Before maintenance, all hazardous energy must be isolated. A stop button is not an energy-isolation device because stored electrical, hydraulic, pneumatic, gravitational, thermal, or chemical energy may remain.

A safe machine-management program includes pre-use inspections, preventive maintenance, inspection of guards and interlocks, authorized adjustment procedures, and management of change. Defeating an interlock or removing a guard for production convenience is a serious control failure.

2.4 Lifting operations

Lifting hazards arise from dropped loads, overturning, sling failure, crush zones, struck-by events, and contact with overhead electrical lines. A lifting plan should specify the load mass, center of gravity, lifting points, equipment capacity, sling configuration, ground condition, weather limitations, exclusion zone, communication method, and competent personnel.

For a symmetrical two-leg sling with each leg making an angle θ from the horizontal, the ideal tension in each leg is:

where T is the tension in each sling leg, W is the load weight, and θ is the sling angle measured from the horizontal. This formula assumes a centered, static load, equal leg lengths, and ideal load sharing. It does not account for shock loading, friction, unequal loading, sling deformation, or acceleration. As the angle becomes smaller, sling tension increases substantially.

For example, if a 20 kN load is carried by two equal sling legs at 60° to the horizontal:

T = 20 ÷ (2 × sin 60°) = 11.55 kN

The sling, shackle, hook, and lifting machine must each have suitable rated capacity, and the weakest component governs the safe system capacity. No person should stand beneath a suspended load. Tag lines, barriers, and controlled signaling reduce exposure but do not replace proper equipment selection.

2.5 Pressure systems

Pressure vessels, boilers, compressed-gas cylinders, hydraulic accumulators, and pneumatic systems can release stored energy violently. Controls include sound design, material compatibility, pressure relief devices, inspection, corrosion management, safe isolation, and competent operation.

A pressure relief device must discharge to a safe location and be correctly sized for credible overpressure scenarios such as blocked outlets, fire exposure, thermal expansion, runaway reaction, or control-valve failure. Isolation valves around relief devices require strict control because inadvertent isolation can defeat protection.

Compressed-gas cylinders should be secured upright, capped when not connected, segregated according to compatibility, protected from heat and impact, and moved using appropriate carts. Cylinders must not be lifted by their valves or used as rollers.

3. Electrical Safety and Hazardous Energy

3.1 Electrical hazards

Electrical injury mechanisms include electric shock, arc flash, arc blast, burns, falls caused by shock, and fires resulting from overheating or faults. Shock severity depends on current, path through the body, duration, frequency, and environmental conditions. Wet locations and conductive surroundings increase risk.

Electrical work requires suitable design, installation, inspection, earthing or grounding, overcurrent protection, insulation, enclosure, and competent personnel. Residual-current protection can reduce shock risk in appropriate applications, but it is not a substitute for isolation or sound installation.

Arc-flash risk is associated with high-energy fault currents and can produce intense heat, molten metal, pressure, and toxic products. Risk assessment may require equipment labeling, approach boundaries, remote operation, current-limiting devices, arc-rated clothing, face and hand protection, and specialized energized-work procedures.

3.2 Lockout–tagout

Lockout–tagout (LOTO) prevents the unexpected release of hazardous energy during servicing. A robust procedure includes:

1. Identify all energy sources, including electrical, mechanical, hydraulic, pneumatic, thermal, chemical, gravitational, and stored pressure.
2. Notify affected workers.
3. Shut down the equipment using the normal control.
4. Isolate every energy source with an approved isolation device.
5. Apply an individual lock and identification tag.
6. Dissipate or restrain stored energy.
7. Verify zero energy using appropriate tests and a try-start attempt.
8. Perform the work.
9. Inspect the area, replace guards, remove tools, and confirm personnel are clear.
10. Each person removes their own lock; the authorized person restores energy in a controlled manner.

Verification is the critical step. A circuit may appear dead but remain energized through back-feeds, incorrect identification, or failed isolation. Test instruments must be checked before and after use. Group work requires a controlled group-lockbox or equivalent arrangement so that every worker maintains personal control.

4. Confined Spaces and Work at Height

4.1 Confined spaces

A confined space is an enclosed or partially enclosed area not designed for continuous occupancy and presenting hazards such as oxygen deficiency, toxic gases, engulfment, flooding, heat, restricted movement, or difficult rescue. Examples include tanks, silos, pits, sewers, and vessels.

Entry requires an evaluation of whether the space can be avoided. If entry is necessary, controls may include isolation of lines and energy, cleaning and purging, atmospheric testing, ventilation, an entry permit, communication, an attendant, retrieval equipment, and a rescue plan. Testing should normally address oxygen concentration, flammable atmosphere, and toxic contaminants relevant to the process. Ventilation must not create additional hazards or spread contaminants.

An attendant must understand that calling emergency services alone is not a rescue plan. Non-entry rescue is preferred where feasible. Rescuers require training, equipment, and practice; unplanned entry by would-be rescuers is a common cause of multiple fatalities.

4.2 Work at height

Falls are controlled first by avoiding work at height, then by using permanent platforms, guardrails, or other collective protection. Ladders are access equipment and should not be used as a substitute for a properly designed work platform when prolonged or forceful work is required.

A personal fall-arrest system includes an anchorage, connecting subsystem, and full-body harness. The total clearance distance must account for lanyard deployment, body length, harness stretch, equipment deflection, and a safety margin. A fall-arrest system that allows contact with a lower level is not adequate. Rescue after a fall must be planned because suspension trauma and secondary hazards may develop.

5. Fire Safety and Combustible Materials

Fire requires fuel, an oxidizer, and an ignition source. The familiar fire triangle becomes a tetrahedron when the chemical chain reaction is included. Fire prevention therefore controls at least one of these elements.

Common industrial ignition sources include open flames, hot surfaces, welding arcs, static discharge, electrical faults, friction, and self-heating materials. Combustible dusts can form explosive clouds when dispersed in air. Dust control requires preventing accumulation, using suitable electrical equipment, controlling ignition sources, and avoiding cleaning methods that disperse dust.

Flammable-liquid controls include minimizing inventory, using closed containers and transfer systems, bonding and grounding where appropriate, controlling ventilation, separating incompatibles, and storing materials in approved cabinets or areas. Containers should be labeled and kept closed when not in use.

5.1 Fire protection systems

Fire protection consists of prevention, detection, alarm, containment, suppression, emergency access, and evacuation. Detection may use smoke, heat, flame, or gas detectors. Suppression may involve water sprinklers, hydrants, foam, carbon dioxide, inert gas, dry chemical, or water mist. The agent must match the fuel and the hazard. For example, applying water to some energized electrical equipment or reactive chemicals may increase danger.

Portable extinguishers should be selected according to fire class, located accessibly, inspected, and used only by trained personnel when escape remains safe. Emergency plans should define alarm methods, evacuation routes, assembly points, accountability, shutdown responsibilities, and liaison with emergency services.

5.2 Hot work

Hot work includes welding, cutting, brazing, grinding, and other activities producing flame, heat, sparks, or hot particles. A hot-work permit should confirm removal or protection of combustibles, gas testing when flammable atmospheres are possible, isolation of process lines, availability of suitable extinguishers, fire watch arrangements, and post-work monitoring. Openings, drains, wall penetrations, and adjacent floors must be checked because sparks can travel beyond the immediate work area.

6. Process Safety and Hazardous Chemicals

Process safety manages major-accident hazards arising from the release of hazardous substances or energy. It differs from personal safety, which focuses mainly on individual injuries. A process may have few routine injuries yet remain capable of causing a catastrophic release.

Important process-safety elements include:

• process hazard analysis;
• operating limits and alarm management;
• relief and flare systems;
• equipment integrity and inspection;
• emergency shutdown systems;
• management of change;
• contractor control;
• operating and maintenance procedures;
• competency assurance;
• incident investigation; and
• emergency and business-continuity planning.

Hazard identification methods include checklists, what-if analysis, failure mode and effects analysis, hazard and operability study, fault-tree analysis, and layers-of-protection analysis. Each method has limitations. A checklist may miss novel interactions; a HAZOP depends on the quality of design information and team discussion; quantitative analysis depends on credible data and assumptions.

6.1 Inherently safer design

Inherently safer design removes or reduces hazards at their source. Four classic principles are:

• Minimize: use smaller inventories of hazardous material.
• Substitute: replace a hazardous substance or condition with a safer alternative.
• Moderate: reduce concentration, temperature, pressure, or energy.
• Simplify: eliminate unnecessary complexity and opportunities for error.

Inherently safer design is stronger than relying only on alarms, procedures, or protective equipment. However, substitution may introduce new hazards, and simplification must not remove necessary safeguards. Design decisions should be evaluated over the full life cycle, including manufacture, transport, operation, maintenance, emergency response, and disposal.

6.2 Chemical safety

A chemical safety program requires an inventory, current safety data sheets, container labeling, compatibility assessment, exposure controls, spill procedures, waste management, and worker training. Chemicals should be segregated by hazard and compatibility, not merely alphabetically. Acids, bases, oxidizers, reducers, water-reactive materials, and flammable liquids may require separate storage.

The preferred exposure-control sequence is enclosure or substitution, local exhaust ventilation, administrative limits and hygiene, and PPE. Respirators require a formal program covering hazard assessment, medical suitability, fit testing, cartridge selection, maintenance, and storage.

7. Permit-to-Work Systems

A permit-to-work system is a formal communication and authorization process for non-routine or high-risk work. Typical permits cover hot work, confined-space entry, electrical work, line breaking, excavation, work at height, and work on live or potentially hazardous systems.

An effective permit identifies the job, location, hazards, isolations, gas-test results, required controls, PPE, responsible persons, validity period, simultaneous activities, emergency arrangements, and hand-back requirements. The permit does not make unsafe work safe by itself. It is effective only when supported by field verification, competent authorization, clear ownership, and suspension when conditions change.

Permit systems can fail through routine approval, copying old permits, unclear boundaries, poor shift handover, inadequate gas testing, or simultaneous incompatible work. A permit should be revalidated after interruption, weather change, process change, alarm, loss of ventilation, or any deviation from the original plan.

8. Integrated Safety Management

Safety barriers may be grouped into prevention barriers, control barriers, and mitigation barriers. For example, in a flammable-process scenario, prevention may include material substitution and temperature control; control may include alarms and automatic shutdown; mitigation may include containment, fire protection, evacuation, and emergency response.

A bow-tie analysis places the hazardous event at the center, with threats on the left and consequences on the right. Preventive barriers act before the event; mitigating barriers act afterward. Barrier management requires performance standards, inspection, testing, maintenance, and clear responsibility.

Human factors should be addressed through good layout, readable displays, ergonomic controls, realistic procedures, adequate staffing, fatigue management, and learning-oriented incident investigation. Blaming an operator often conceals design and organizational weaknesses.

9. Illustrative Case Study: Solvent Transfer and Maintenance Incident

Background

A small manufacturing plant transferred a flammable solvent from a storage tank to a mixing vessel. A pump frequently blocked because of filter fouling. Maintenance workers opened the filter housing during production without a formal permit. The pump was stopped from the control panel, but the tank isolation valve was not closed and the filter remained pressurized.

Problem

When the housing was loosened, solvent sprayed onto a nearby electric motor. Vapour formed, and an ignition occurred at an electrical contact. One worker suffered burns, production was stopped, and contaminated firewater entered a drain.

Analysis

The immediate causes were inadequate isolation, residual pressure, and an ignition source in a flammable-vapour area. Deeper causes included:

• no written line-breaking procedure;
• inadequate hazardous-area classification and equipment selection;
• production pressure to avoid shutdown;
• incomplete identification of stored energy;
• weak permit-to-work control;
• insufficient drainage and spill containment; and
• failure to treat repeated filter blockage as a process-design problem.

Approach and solution

The plant introduced a verified LOTO procedure requiring isolation, draining, depressurization, and try-before-touch verification. A permit was required for line breaking. The motor and electrical equipment were reviewed for suitability in the classified area. The filter was redesigned for safer access, and differential-pressure indication was added to predict fouling. A less hazardous solvent was evaluated under the substitution principle. Bunding and drain isolation were improved, and operators practiced emergency shutdown and spill response.

Outcome

The revised arrangement reduced maintenance exposure, prevented routine release during filter service, and improved process reliability. The redesign also reduced unplanned downtime because fouling was detected earlier.

Learning points

1. Stopping equipment is not the same as isolating hazardous energy.
2. Repeated maintenance problems may indicate a design defect.
3. Fire prevention requires control of both fuel release and ignition sources.
4. Permit systems must be supported by physical verification.
5. Process safety, environmental protection, and production reliability can be improved together.

10. Challenges, Ethics, and Contemporary Practice

Safety decisions involve ethical duties to protect workers, contractors, communities, and the environment. Production targets, cost reduction, and schedule pressure must not override legal requirements or reasonably practicable risk controls. Engineers have a professional responsibility to communicate unacceptable risks, stop unsafe work, maintain accurate records, and avoid approving systems they know to be inadequate.

Contemporary facilities increasingly use sensors, digital permits, condition monitoring, machine vision, and remote inspection. Artificial intelligence can support anomaly detection, maintenance prioritization, and video-based identification of missing PPE or unsafe access. It must not be treated as an autonomous safety authority. Data quality, false alarms, cybersecurity, privacy, model limitations, and human oversight require explicit management. A digital permit cannot compensate for a missing isolation or an unverified field condition.

The most effective safety programs combine sound engineering, competent people, disciplined work control, learning from near misses, and visible management commitment. Audits should examine whether barriers function in practice, not merely whether documents exist.

Chapter Summary

Mechanical, electrical, fire, and process safety are interconnected disciplines concerned with preventing harmful energy release and limiting its consequences. Machine guards, interlocks, lifting plans, pressure protection, electrical isolation, and LOTO control hazardous energy. Confined-space entry and work at height require specialized assessment, permits, atmospheric control, fall protection, and rescue planning. Fire safety depends on controlling fuel, oxygen, ignition sources, and chemical chain reactions through prevention, detection, containment, suppression, and emergency response. Process safety uses hazard analysis, equipment integrity, management of change, operating limits, and layers of protection to prevent major accidents. Inherently safer design—minimizing, substituting, moderating, and simplifying hazards—should be considered before administrative controls and PPE. Permit-to-work systems provide structured authorization but are effective only when supported by competent people and field verification.

Key Terms

Hazard: A source or condition with potential to cause harm.

Risk: A combination of likelihood and consequence of harm.

Hierarchy of controls: Ordered method for selecting controls from elimination to PPE.

Machine guarding: Physical or engineered protection preventing access to dangerous motion.

Interlock: A device that prevents or stops operation when a protective condition is not satisfied.

Lockout–tagout: Procedure for isolating and controlling hazardous energy during work.

Stored energy: Energy remaining in electrical, pressure, thermal, gravitational, chemical, or mechanical form.

Rated capacity: Maximum permitted load for specified equipment and conditions.

Pressure vessel: Enclosed equipment designed to contain fluid at a pressure different from atmospheric pressure.

Confined space: Enclosed space with restricted access and potential atmospheric or physical hazards.

Hot work: Work producing flame, heat, sparks, or hot particles.

Combustible dust: Fine solid particles capable of burning or exploding when dispersed.

Arc flash: Rapid electrical fault producing intense heat, light, pressure, and molten material.

Process safety: Management of hazards capable of causing major releases, fires, explosions, or toxic exposure.

Inherently safer design: Reducing hazards through design rather than relying mainly on add-on safeguards.

Permit-to-work: Formal authorization and communication system for hazardous work.

Management of change: Controlled evaluation and approval of changes affecting safety.

Barrier: A control that prevents an initiating event or mitigates its consequences.

Safety data sheet: Document describing chemical hazards, handling, storage, and emergency measures.

Review Questions

Short Answer Questions

1. Distinguish between a hazard and a risk.
2. Why is a machine stop button not sufficient for maintenance isolation?
3. State the four principles of inherently safer design.
4. List four essential elements of a confined-space entry program.
5. What information should a hot-work permit contain?

Long Answer Questions

1. Explain the hierarchy of controls and discuss why engineering controls generally provide more reliable protection than PPE.
2. Describe the complete lockout–tagout process, including verification and restoration of energy.
3. Explain the design and operational requirements for safe industrial lifting.
4. Discuss the relationship between fire prevention, detection, suppression, and emergency evacuation.
5. Compare personal safety and process safety, using industrial examples.

Analytical / Application Questions

1. A two-leg sling supports a 30 kN centered load, with each leg at 45° to the horizontal. Calculate the ideal tension in each leg and explain the assumptions and limitations of the result.
2. A maintenance team plans to enter a vessel previously containing solvent. Develop a permit-to-work and rescue strategy, identifying energy, atmospheric, chemical, and access hazards.
3. A plant experiences repeated solvent-pump failures and workers frequently bypass an interlock to maintain production. Analyze the immediate and systemic causes and propose an inherently safer redesign and management response.

Multiple Choice Questions with Answers

Question 1

Which control is highest in the hierarchy of controls?

A. Personal protective equipment

B. Administrative procedure

C. Elimination

D. Warning sign

Correct Answer: C. Elimination

Question 2

For a two-leg sling, what happens to ideal sling tension as the sling angle from the horizontal decreases?

A. It decreases to zero

B. It increases

C. It remains constant

D. It becomes independent of load weight

Correct Answer: B. It increases

Question 3

Which action is essential for verifying lockout–tagout?

A. Pressing the emergency stop only

B. Checking that the warning sign is visible

C. Attempting a controlled start and testing for absence of energy

D. Asking an operator whether the equipment is off

Correct Answer: C. Attempting a controlled start and testing for absence of energy

Question 4

Which condition is a major confined-space hazard?

A. Excessive office lighting

B. Oxygen deficiency

C. Low production rate

D. High paperwork volume

Correct Answer: B. Oxygen deficiency

Question 5

What is the primary purpose of a hot-work permit?

A. To authorize overtime

B. To document equipment purchases

C. To control ignition sources and combustible exposures during hot work

D. To replace fire detection systems

Correct Answer: C. To control ignition sources and combustible exposures during hot work

Question 6

Which is an example of inherently safer design?

A. Adding a larger warning label

B. Reducing the inventory of a hazardous chemical

C. Issuing more gloves

D. Increasing the number of disciplinary notices

Correct Answer: B. Reducing the inventory of a hazardous chemical

Question 7

Which device is intended to protect a pressure system from excessive pressure?

A. Pressure relief device

B. Sight glass only

C. Drain plug

D. Temperature label

Correct Answer: A. Pressure relief device

Question 8

What is a key limitation of a permit-to-work system?

A. It cannot authorize any work

B. It is effective even without field verification

C. It does not itself make an unsafe physical condition safe

D. It eliminates the need for competent workers

Correct Answer: C. It does not itself make an unsafe physical condition safe

Question 9

Which fire-protection principle involves controlling fuel, oxygen, and ignition sources?

A. Fire prevention

B. Production scheduling

C. Inventory accounting

D. Ergonomic assessment

Correct Answer: A. Fire prevention

Question 10

A 20 kN load is supported symmetrically by two sling legs at 60° to the horizontal. Using T = W ÷ (2 sin θ), what is the ideal tension in each leg?

A. 5.77 kN

B. 10.00 kN

C. 11.55 kN

D. 20.00 kN

Correct Answer: C. 11.55 kN