Machinery, Electrical and Equipment Breakdown Risks

Introduction and context

Machinery and equipment breakdown is a central concern in property and engineering insurance because modern organisations depend on interconnected physical systems. A failure of a motor, transformer, boiler, compressor, refrigeration unit, control system or utility supply may cause direct physical damage, business interruption, product loss, environmental harm and liability claims. The insurer therefore evaluates not only whether an item can fail, but also how failure can propagate through the insured’s operations.

Equipment breakdown risk engineering combines mechanical, electrical, process-safety, reliability and insurance disciplines. Its purpose is to identify credible failure modes, estimate their consequences, assess the adequacy of safeguards and recommend controls that reduce frequency, severity and recovery time. The resulting analysis informs underwriting, risk improvement, policy conditions, deductibles, sums insured, business-interruption values and claims preparedness.

Learning objectives

After studying this chapter, the learner should be able to:

1. Classify mechanical, pressure-vessel, electrical, rotating-machinery, refrigeration and utility risks.
2. Explain common failure mechanisms and their consequences.
3. Assess inspection, testing, maintenance and human-factor controls.
4. Apply preventive, predictive and condition-based maintenance principles.
5. Evaluate redundancy, protection systems and business-continuity arrangements.
6. Interpret reliability indicators and basic equipment-breakdown calculations.
7. Develop an insurance-oriented risk-engineering recommendation.

1. Equipment breakdown as a systems risk

An equipment breakdown is more than the visible failure of a component. It is an event in which a machine or system suffers sudden or accidental physical loss or damage, or progressive deterioration that ultimately prevents its intended function. Insurance wording determines whether a particular event is covered; engineering analysis determines why it occurred, how severe it may become and how it can be prevented.

A useful systems view separates four layers:

• Asset: the physical item, such as a pump, boiler, motor or transformer.
• Function: the service delivered, such as pumping, heating, cooling or power conversion.
• Process: the production or service activity dependent on that function.
• Business consequence: property damage, interruption, spoilage, safety impact, environmental release or liability.

A small component may therefore create a large loss. Failure of a low-cost bearing can destroy a turbine rotor; failure of a single control card can shut down an entire production line; loss of a cooling-water pump can force an emergency shutdown of a chemical process.

Failure modes and effects

Failure-mode-and-effects analysis (FMEA) examines an item’s possible failure modes, causes, local effects, system effects and controls. A simplified risk-priority approach may rank each failure by severity, occurrence and detectability. Numerical rankings are useful for prioritisation but are not objective probabilities unless supported by reliable data. The analysis should consider common-cause failures, dependency between systems and failures that remain hidden until a demand occurs.

Typical failure mechanisms include:

• wear, fatigue, corrosion and erosion;
• overheating, lubrication failure and misalignment;
• insulation deterioration, arcing and short circuits;
• overpressure, thermal shock and brittle fracture;
• contamination, vibration and resonance;
• software, instrumentation and communication failures;
• incorrect operation, maintenance error and deferred defects.

2. Mechanical failure risks

Bearings, shafts and couplings

Bearings fail through inadequate lubrication, contamination, incorrect installation, overload, electrical fluting or misalignment. Excessive vibration, rising temperature, abnormal noise and lubricant debris are important warning signs. Shafts may fail through fatigue at stress concentrations, torsional overload or corrosion. Couplings transmit torque and accommodate limited misalignment; incorrect alignment increases bearing and seal loads.

Risk engineering should verify shaft alignment, soft-foot checks, balancing, lubrication selection, contamination control, bearing installation methods and vibration-monitoring practices. Spare bearings should be stored in clean, dry conditions and installed using suitable tools rather than impact loading.

Gears and drive systems

Gear damage may involve pitting, scuffing, tooth fracture, backlash changes and lubricant degradation. Enclosed drives require correct oil level, filtration, cooling and breathers. Overload protection and torque limitation reduce the likelihood of catastrophic tooth failure. Inspection should examine contact patterns, temperature, vibration and metallic particles in oil.

Pumps and compressors

Pumps are exposed to cavitation, dry running, seal failure, blockage, excessive differential pressure and hydraulic shock. Cavitation occurs when local liquid pressure falls near or below vapour pressure, producing bubbles that collapse and erode surfaces. Adequate net positive suction head, clean strainers, correct suction design and stable operating conditions are essential.

Compressors face lubrication failure, liquid carryover, high discharge temperature, valve damage, surge, overspeed and pressure excursions. Interlocks, anti-surge systems, high-temperature trips and gas detection may prevent a mechanical defect from becoming a major event.

Maintenance and mechanical integrity

Mechanical integrity programmes should include equipment registers, criticality ranking, maintenance strategies, defect management, inspection intervals, change control and documented acceptance criteria. “Run to failure” may be rational for inexpensive, non-critical items but is inappropriate where failure threatens life safety, high-value equipment or long recovery periods.

3. Boilers and pressure vessels

Boilers, unfired pressure vessels, storage tanks, heat exchangers and compressed-gas systems store energy. Their failure can produce blast effects, fragments, steam release, fire, toxic exposure and major business interruption. Risk assessment must address design, fabrication, operating limits, inspection, relief protection and competency.

Principal hazards

• overpressure caused by blocked outlets, failed controls, fire exposure or thermal expansion;
• corrosion, erosion and thinning;
• fatigue from repeated pressure or temperature cycles;
• creep at elevated temperature;
• brittle fracture at low temperature or in unsuitable materials;
• tube failure, flame impingement and burner malfunction;
• vacuum collapse of vessels not designed for external pressure.

Every pressure system requires a defined safe operating envelope. Pressure-relief devices must be correctly sized, set, installed, protected from isolation and discharged to a safe location. Relief devices are not substitutes for effective control systems and competent operation.

Inspection and testing

Inspection programmes should combine visual examination, thickness measurement, non-destructive testing, internal inspection and functional testing of safety devices. Methods may include ultrasonic thickness testing, radiography, magnetic-particle testing, dye-penetrant testing and eddy-current examination. The method must match the suspected defect: surface cracks, volumetric defects, corrosion thinning and tube degradation require different techniques.

Inspection intervals should be based on law, recognised engineering standards, manufacturer guidance, operating history and a documented risk assessment. Records should identify the item, location, measurement method, calibration status, result, acceptance criterion and follow-up action.

4. Electrical risks

Electrical breakdown may arise from short circuits, earth faults, overloads, insulation ageing, loose connections, harmonics, transients, moisture, contamination, lightning and inadequate coordination of protective devices.

Transformers and switchgear

Transformers are vulnerable to winding faults, insulation deterioration, overheating, bushing failure, oil contamination and through-fault mechanical stress. Important controls include temperature alarms, oil-level monitoring, dissolved-gas analysis where appropriate, surge protection, fire separation and electrical protection.

Switchgear risks include arc flash, contact wear, insulation failure, incorrect racking, loss of interlocks and inadequate short-circuit rating. Arc-flash assessment should inform equipment labelling, approach boundaries, operating procedures, remote switching and personal protective equipment. PPE reduces injury severity but does not prevent the initiating fault.

Motors and power quality

Motors may fail due to overload, single phasing, voltage imbalance, undervoltage, overvoltage, harmonics, poor cooling, bearing damage or moisture ingress. Variable-frequency drives introduce useful control but may also create harmonic, bearing-current and compatibility concerns. Power-quality monitoring should be applied to critical systems, particularly where sensitive electronic controls and large nonlinear loads coexist.

Protection should be coordinated so that the smallest practical section is isolated while essential services remain energised. Coordination studies should consider available fault current, breaker interrupting capacity, selectivity, motor starting and generator operation.

5. Rotating machinery and condition monitoring

Rotating equipment frequently provides the earliest measurable indication of deterioration. Condition monitoring should be selected according to failure mechanism, criticality and the decision that will be made from the information.

A condition-monitoring programme should define baseline readings, alarm and trip levels, sampling frequency, responsible personnel and escalation rules. Data without an intervention process has little risk-reduction value.

Reliability indicators

For a repairable item operating for total observed time T with n failures, the observed failure rate is commonly estimated as:

Here λ̂ is the estimated failure rate, usually expressed per operating hour. This estimate assumes the observation period and operating population are reasonably representative and that failures are defined consistently. It should not be treated as a universal constant when equipment is undergoing infant mortality, wear-out or changing operating conditions.

Mean time between failures (MTBF), for a repairable item, is often estimated as:

MTBF is an average, not a guaranteed operating life. For a constant failure-rate approximation, the reliability over mission time t is:

This exponential model assumes a constant hazard rate and independent failures; it is unsuitable for many ageing mechanisms unless used as a limited approximation.

Availability and redundancy

If an item has mean time to repair MTTR, steady-state inherent availability may be approximated by:

This assumes repeated cycles, stable average rates and that logistics, preventive maintenance and waiting time are represented consistently. A standby arrangement can improve availability, but only if switching, common utilities, control systems and maintenance practices are reliable. Two identical units sharing the same cooling-water supply do not provide full independence.

For two independent components arranged in parallel, where each has availability A, system availability is:

The independence assumption is often unrealistic because common-cause events—fire, flood, contaminated fuel, common control logic or human error—can defeat both units.

6. Refrigeration and utility systems

Refrigeration systems support food storage, pharmaceuticals, data centres, chemical processing and comfort services. Risks include refrigerant leakage, compressor failure, liquid slugging, loss of lubrication, condenser fouling, power interruption, control failure and inadequate defrosting. Consequences may include spoilage, pressure release, environmental harm and prolonged interruption.

Controls include refrigerant detection, ventilation, emergency isolation, pressure relief, temperature alarms, calibrated sensors, backup power and documented response procedures. Critical cold stores should have alarm escalation to a continuously attended location and should verify that alarms are tested rather than merely installed.

Utilities such as electricity, steam, compressed air, chilled water, cooling water, fuel, process water and information networks should be mapped as dependencies. A utility single point of failure is often more important than the apparent reliability of individual production machines. Risk assessment should examine alternate feeds, emergency generation, fuel autonomy, manual bypass, spare transformers, black-start capability and restoration contracts.

7. Preventive, predictive and reliability-centred maintenance

Corrective maintenance restores function after failure. It is appropriate where consequences are low or where no effective preventive task exists, but it can create high interruption and secondary damage.

Preventive maintenance is performed at predetermined intervals or usage levels. Time-based replacement is useful for known wear-out mechanisms but may cause unnecessary intervention or introduce maintenance-induced defects.

Predictive or condition-based maintenance uses measured condition to determine when intervention is required. It is effective when deterioration is detectable and there is sufficient warning time.

Reliability-centred maintenance (RCM) selects maintenance tasks by analysing functions, functional failures, failure modes, consequences and technically feasible tasks. RCM distinguishes safety, environmental, operational and non-operational consequences and avoids treating every asset identically.

A mature programme contains:

1. an accurate asset hierarchy and criticality assessment;
2. failure-mode analysis for critical equipment;
3. written job plans and competent personnel;
4. calibrated instruments and quality assurance;
5. management of overdue work and temporary repairs;
6. post-maintenance testing and return-to-service controls;
7. learning from defects, near misses and claims.

8. Human factors and management systems

Human error is rarely an isolated personal failing. It is often shaped by design, workload, training, supervision, communication, procedures and organisational priorities. Common exposures include incorrect valve line-up, bypassed interlocks, wrong lubricant, inadequate isolation, energised work, poor shift handover and failure to act on alarms.

Controls include permit-to-work systems, lockout/tagout, isolation verification, competency assessment, pre-job briefings, clear labelling, standard operating procedures, independent checks and control of overrides. Procedures should be usable at the point of work and should reflect actual operating conditions.

Management should monitor leading indicators such as overdue critical inspections, repeat defects, disabled alarms, overdue safety-device tests and maintenance-induced incidents. Lagging indicators such as breakdown frequency and claim cost remain useful but may reveal weakness only after loss has occurred.

9. Insurance and risk-engineering evaluation

The engineer and underwriter should evaluate:

• age, design, duty and operating environment;
• inspection and maintenance quality;
• protection, detection and emergency shutdown;
• spare-parts availability and repair lead time;
• business-interruption values and maximum foreseeable loss;
• dependence on utilities, suppliers and specialist contractors;
• previous failures, near misses and claims;
• compliance with applicable law and recognised standards.

The maximum foreseeable loss analysis should consider direct damage plus the period required for investigation, procurement, manufacture, shipping, installation, testing and recommissioning. A low-probability failure may warrant substantial attention when replacement equipment has a long lead time.

Business-interruption analysis should distinguish gross profit or revenue exposure, dependent properties, spoilage, increased cost of working and potential denial of access. Redundancy must be tested under realistic scenarios, including simultaneous failure, unavailable operators, fuel shortage and delayed specialist support.

Illustrative case: cooling-water failure at a process plant

Background

A fictional chemical plant used two electrically driven cooling-water pumps, each rated for the normal process flow. One pump operated while the other was described as standby. The plant had experienced repeated bearing-temperature alarms but had not changed its maintenance strategy.

Problem

The operating pump suffered a bearing seizure. The standby pump failed to start because its suction isolation valve was partially closed and its motor starter had an unresolved electrical defect. Process temperature rose, causing an emergency shutdown and product solidification in a heat exchanger. The physical pump damage was moderate, but production was interrupted for twelve days.

Analysis

The apparent 100% capacity redundancy was not effective redundancy. The pumps shared a suction header, electrical room and control logic. The standby unit was not functionally tested under load, and alarm history was not linked to a work-order escalation process. The business-interruption loss was driven by cleaning, specialist repair, replacement seals and the time required to restore stable process conditions.

Approach and solution

The plant established criticality-based maintenance, weekly automatic start tests, quarterly loaded performance tests, vibration and bearing-temperature trending, verified valve positions and an independent starter inspection. It also installed an alarm-management procedure, maintained critical seals and bearings on site, reviewed electrical selectivity and assessed temporary rental-pump connections. A management-of-change review addressed the control logic and the possibility of common-cause utility failure.

Outcome

The measures reduced hidden standby failures and shortened expected restoration time. The insurer recommended evidence-based testing rather than accepting the existence of a nominal standby unit as proof of resilience.

Learning points

1. Redundancy is a functional property, not merely a count of installed machines.
2. Alarm data must produce timely maintenance action.
3. Utility and control dependencies can defeat otherwise sound mechanical design.
4. Business-interruption severity depends heavily on repair logistics and process recovery.

Challenges, limitations and contemporary developments

Condition monitoring creates large volumes of data, but false alarms, inconsistent sensors and poor data governance can undermine trust. Artificial intelligence and machine-learning tools may identify abnormal patterns, but they require representative historical data, explainable thresholds, cybersecurity controls and human validation. A model trained on normal operation may fail after a process change or unusual environmental condition.

Digitised assets also increase exposure to cyber-physical events. Unauthorised changes to programmable logic controllers, remote access misuse or loss of industrial networks may cause machinery to operate outside safe limits. Asset inventories, network segmentation, secure authentication, change control, tested backups and manual fallback procedures should accompany digital monitoring.

Environmental transition introduces further engineering questions. Variable renewable power can affect power quality and operating profiles; refrigerant substitution changes pressure, flammability and compatibility considerations; electrification may increase reliance on transformers, converters and battery systems. Risk assessment must therefore remain technically current rather than relying only on historical loss experience.

Best-practice framework

A practical equipment-breakdown risk review should:

1. map critical assets and dependencies;
2. identify credible failure modes and consequences;
3. verify design limits, relief systems and protective coordination;
4. inspect and test safety-critical equipment;
5. match maintenance tasks to failure mechanisms;
6. trend condition data and define action thresholds;
7. test standby equipment and emergency utilities under realistic load;
8. control human factors, permits, overrides and contractors;
9. assess spares, specialist resources and restoration time;
10. document recommendations, owners, deadlines and evidence of closure.

Chapter Summary

Machinery, electrical and equipment breakdown risks arise from interacting mechanical, electrical, process, utility and human systems. Important failure mechanisms include wear, fatigue, corrosion, overheating, lubrication loss, insulation breakdown, overpressure, cavitation, contamination and control-system failure. Boilers and pressure vessels require disciplined control of operating limits, relief protection and inspection. Electrical systems require sound protection coordination, power-quality management, insulation assessment and arc-flash controls. Rotating machinery benefits from vibration, thermography, oil, ultrasonic, motor-current and performance monitoring, provided the results lead to defined action.

Preventive maintenance, predictive maintenance and reliability-centred maintenance should be selected according to failure mechanism and consequence. Availability and reliability calculations are useful approximations, but their assumptions—constant failure rate, representative data and independence—must be made explicit. Redundancy is effective only when switching, utilities, controls, spares and human procedures are also resilient. For insurance purposes, the analysis must connect equipment failure to direct damage, restoration time, business interruption and claims severity. Human factors, cybersecurity, climate transition and data quality are increasingly important parts of equipment-breakdown risk engineering.

Key Terms

Equipment breakdown: Physical failure or damage that prevents equipment from performing its intended function.

FMEA: Structured analysis of failure modes, causes, effects and controls.

Criticality: Relative importance of an asset based on safety, environmental, operational and financial consequences.

Cavitation: Formation and collapse of vapour bubbles caused by insufficient local liquid pressure.

Pressure vessel: A container designed to hold fluid under pressure.

Pressure-relief device: Device that limits pressure by releasing fluid at a defined setting.

Arc flash: Explosive electrical discharge through air that produces heat, light, pressure and molten material.

Insulation deterioration: Loss of electrical insulating capability due to heat, moisture, contamination, ageing or stress.

Condition monitoring: Measurement of equipment condition to detect deterioration.

Predictive maintenance: Maintenance scheduled using condition or performance information.

Preventive maintenance: Planned maintenance performed at predetermined intervals or usage levels.

Reliability-centred maintenance: Consequence- and function-based method for selecting maintenance tasks.

MTBF: Mean time between failures for a repairable item.

MTTR: Mean time to repair and restore an item to service.

Availability: Proportion of time an item or system is capable of performing its function.

Common-cause failure: Failure of supposedly independent elements due to a shared cause.

Redundancy: Provision of alternative capacity or components to maintain function after failure.

Business interruption: Financial loss caused by interruption or reduction of operations.

Management of change: Formal process for assessing and controlling changes to equipment, process or organisation.

Human factors: Effects of human capabilities, limitations, organisation and work design on performance and risk.

Review Questions

Short Answer Questions

1. Why can failure of a low-cost bearing produce a high-severity insurance loss?
2. Identify four common failure mechanisms in electrical equipment.
3. What is the difference between preventive and predictive maintenance?
4. Why must pressure-relief devices be supported by control and inspection systems?
5. State two limitations of relying on nominal standby equipment.

Long Answer Questions

1. Explain how an insurer should evaluate a boiler and pressure-vessel risk, including design, relief protection, inspection and operating competence.
2. Compare vibration analysis, thermography, oil analysis and ultrasonic inspection as condition-monitoring techniques.
3. Discuss the relationship between maintenance quality, human factors and equipment-breakdown frequency.
4. Explain how common-cause failure can undermine redundancy in electrical and utility systems.
5. Develop a risk-engineering framework for a facility whose production depends on refrigeration and emergency power.

Analytical / Application Questions

1. A repairable pump records 6 failures during 48,000 operating hours. Estimate its observed failure rate and MTBF, state the units, and explain why the results should not automatically be treated as future guarantees.
2. Two identical pumps each have an availability of 0.95 and are assumed independent. Calculate the parallel availability using A_parallel = 1 − (1 − A)², then identify two real-world factors that could invalidate the independence assumption.
3. A plant has repeated high-temperature alarms on a motor but no formal escalation process. Analyse the technical, managerial and insurance consequences, and recommend a layered corrective programme.

Multiple Choice Questions with Answers

Question 1

Which condition is most directly associated with pump cavitation?

A. Insufficient suction pressure causing vapour bubbles

B. Excessive transformer oil level

C. Low electrical resistance in a cable

D. Over-tightened coupling bolts

Correct Answer: A. Insufficient suction pressure causing vapour bubbles

Question 2

Which technique is particularly useful for detecting hot electrical connections?

A. Radiography

B. Infrared thermography

C. Dye-penetrant testing

D. Shaft alignment measurement

Correct Answer: B. Infrared thermography

Question 3

A repairable item operates for 10,000 hours and fails 5 times. Using MTBF = T ÷ n, its estimated MTBF is:

A. 50 hours

B. 500 hours

C. 2,000 hours

D. 50,000 hours

Correct Answer: C. 2,000 hours

Question 4

Which statement best describes reliability-centred maintenance?

A. Replacing every component at the same fixed interval

B. Selecting maintenance tasks according to functions, failure modes and consequences

C. Repairing equipment only after catastrophic failure

D. Using condition monitoring without considering consequences

Correct Answer: B. Selecting maintenance tasks according to functions, failure modes and consequences

Question 5

Which event is an example of common-cause failure?

A. One bearing fails independently

B. Two pumps fail because both lose their shared cooling-water supply

C. A technician replaces one filter

D. A motor receives routine lubrication

Correct Answer: B. Two pumps fail because both lose their shared cooling-water supply

Question 6

What is the primary purpose of a pressure-relief device?

A. To increase vessel operating pressure

B. To eliminate the need for inspection

C. To limit pressure by releasing fluid at a defined setting

D. To measure electrical insulation

Correct Answer: C. To limit pressure by releasing fluid at a defined setting

Question 7

For a constant failure-rate model, reliability over time t is represented by:

A. R(t) = e^(−λt)

B. R(t) = λ + t

C. R(t) = MTTR ÷ MTBF

D. R(t) = nT

Correct Answer: A. R(t) = e^(−λt)

Question 8

Which practice most directly reduces the risk of maintenance-induced error?

A. Removing equipment labels

B. Using isolation verification and independent checks

C. Disabling all alarms permanently

D. Increasing the number of undocumented temporary repairs

Correct Answer: B. Using isolation verification and independent checks

Question 9

If each of two independent parallel units has availability 0.90, system availability is:

A. 0.09

B. 0.81

C. 0.90

D. 0.99

Correct Answer: D. 0.99

Question 10

Why is a nominal standby pump not necessarily effective redundancy?

A. Standby equipment never requires testing

B. It may share controls, utilities or defects with the operating unit

C. Redundancy applies only to electrical equipment

D. A standby unit always increases failure probability

Correct Answer: B. It may share controls, utilities or defects with the operating unit