Pakistan Institute of Incident InvestigationLahore · Karachi · Islamabad · International Insights Cases Q&A About WhatsApp
P3i — Pakistan Institute of Incident Investigation

Home  /  Investigations  /  Industrial & Process

Industrial & Process Incident Investigation — Pakistan & International

Process incidents rarely start with a failure. They start with a change.

A gasket swapped during a shutdown. A bypass fitted to keep production running. A detector left awaiting repair. We investigate releases, runaway reactions, utility failures and start-up events by testing every barrier that should have stopped them, and by finding the change that nobody reviewed.

Since the 1990s

30

years investigating

250+

investigations closed, incl. HiPOs

15

countries served

20+

countries of lead seminars

100+

nationalities trained

Process plant pipework and vessels in a Pakistani industrial facility
Fig. 1 — Every flange, valve and gasket is a barrier someone assumed was intact.

Switch the barriers off

Six layers stand between a leak and a disaster. Watch what happens as they fail.

A flange leaks gas during start-up. Tap each barrier to fail it, and see how the outcome changes. In real incidents, each of these failures is usually already in place before the day.

Barriers failed: 0 of 6

Contained

Every barrier held. Nobody notices anything happened.

An illustration of the layered-barrier model, often called the "Swiss cheese" model after the work of psychologist James Reason.

Had a release or an upset? A first call costs nothing, and tells you which logs and parts to secure today.

Talk to an investigator WhatsApp

The most dangerous hour

A plant is most at risk when it is starting up.

Industry studies consistently find that a disproportionate share of process incidents happen during start-up, shutdown and recovery from upsets. These are the times procedures are used least often, equipment has just been opened, and more people and contractors are on the unit.

In Pakistan, power interruptions and changes in gas pressure mean some plants restart many more times a year than their designers ever planned for. Each restart is a non-routine operation, and each one carries that extra risk.

Control room operator during a plant start-up
Standby generator used during power interruptions at a plant
Pressure gauge on a gas supply line

Three disasters, three small decisions

The worst process disasters began with an ordinary day's work.

Chemical plant process area

Overseas — chemical plant

A temporary pipe

A cracked reactor was removed and a temporary bypass pipe fitted to keep the plant running, without a proper engineering design. It failed, and the vapour cloud explosion killed 28 people. It is the reason "management of change" exists.

Offshore oil platform

Overseas — offshore platform

A permit at shift change

A pump's safety valve had been removed for maintenance. The night shift did not know, and started the pump. The release and fires that followed killed 167 people. The paperwork existed; the handover did not.

Chemical storage tanks

South Asia — pesticide plant

Safety systems switched off

Several of the plant's safety systems were out of service or unable to cope when a toxic gas release began. Thousands died. It remains the worst industrial disaster in history, in our own region.

A bypass, a handover, a system left switched off. Each one looked reasonable at the time, and each one is still found in plants today.

Older process equipment with modified pipework in a plant
Fig. 2 — The plant as built and the plant as it is are rarely the same plant.

What we find in Pakistani plants

The conditions behind most process incidents.

  1. 01Imported or second-hand plantEquipment relocated from abroad, with manuals in another language and design limits nobody on site knows.
  2. 02Changes made to keep producingBypasses, jumpers and replacement parts fitted to avoid a stoppage, with no review and no record.
  3. 03Detectors and trips left disabledInstruments that caused nuisance trips are bypassed, and the bypass becomes permanent.
  4. 04Shutdowns crowded with contractorsAnnual turnarounds bring hundreds of short-term workers onto live units, under permits signed in a hurry.
  5. 05Knowledge that retiredThe engineer who understood why a valve must never be opened has left, and nobody wrote it down.

You commission one investigation. You get a review of the whole system.

One leak tests the barriers every unit relies on.

If one barrier failed here, the same barrier is relied on in other units. After the cause is established, our process specialists check those barriers plant-wide and give you a short list of targeted actions, ranked by risk, instead of a generic register.

The event

A gas leak at a flange during start-up

No ignition. First recorded as "gasket failure — replaced".

Change control

No change review existed for "like-for-like" part swaps.

Stores

Gaskets of three different ratings sat in one unlabelled bin.

Instruments

Eleven detectors across the plant were bypassed or awaiting repair.

Start-up

The start-up procedure had no leak-test step at all.

Permits

Hot work and start-up permits were issued by different offices.

Staffing

Night shift covered two units with one operator during restarts.

A typical example, based on what we see across many process incident investigations. Not a single client’s case.

The P3i approach

How we investigate a process incident. Fact-finding, not fault-finding.

Every P3i investigation is led by a senior investigator and supported by internationally qualified process specialists. You will not receive a list of people to blame, or a long list of generic actions. You will receive the facts, the proven causes, and a short plan that closes the gaps, in this case and across your system.

Independent

No products, repairs or contracts to sell you afterwards.

Senior-led

Thirty years of investigation, from the first call to the final briefing.

Beyond the event

Process specialists find the other cracks before they fail.

Ready to present

Written for boards, buyers, insurers and regulators.

How P3i does it for you

  1. 01

    Secure trends and logs

    Control-system data, alarms and the failed part.

  2. 02

    Rebuild the upset

    What the process did, minute by minute.

  3. 03

    Test the barriers

    Trips, alarms, relief and procedures: which held, which did not.

  4. 04

    Find the unreviewed change

    Settings, materials, staffing or equipment changed without review.

  5. 05

    Fix process safety across units

    Our specialists check other units for the same gaps.

What you receive

Process timelineBarrier findingsChange reviewProcess safety gapsAction plan across unitsReport for leadership and regulator

Call us when

A loss of containment or releaseA process upset or tripA near miss in a hazardous unitA regulator or licensor asks for a report

Free 30-minute case assessment.

Tell us what happened. In confidence, we will tell you what the investigation should cover, how long it will take and what to preserve today.

How we work with you

What happens after you call.

After a process incident, the first call is about securing trends, logs and the failed part. From there, this is the usual pattern.

  1. First hour

    A call with a lead investigator. You leave it knowing what to preserve today and who to call next.

  2. Day one

    An investigator on site, anywhere in Pakistan. Scope and fixed fee agreed in writing.

  3. Week one

    A private briefing on early findings, so urgent risks are dealt with before the report is finished.

  4. Weeks three to four

    The final report, the wider system review and a remedial work plan, presented to your team.

  5. After

    We come back to check the actions were completed and actually worked.

Typical timings for a single-site event. Complex, multi-party matters take longer, and we tell you so on the first call.

What you receive

A full investigation report. This is only its first page.

The summary is what leadership reads first. Behind it sits the complete file: every witness heard, every document and record examined, and every finding tied to numbered evidence, so a board, an insurer, a buyer or a regulator can test it.

P3i Investigation Report · Summary Page 1 · Executive summary

1 · Established sequence

2 · Causes

Immediate
Underlying
Systemic

3 · Wider system findings

4 · Remedial work plan

ActionOwnerDateTest of effectiveness Fit personal locks for every operatorPlant Mgr30 daysSpot audit, 10 isolations

Illustrative summary page. Report length and structure depend on the scope of each case.

Inside the full report

  1. 01Executive summary SHOWNThe findings and actions leadership needs, on one page. This is the page shown here.
  2. 02Terms of reference & scopeThe questions asked, the boundaries of the investigation and who commissioned it.
  3. 03MethodHow evidence was gathered, and which analysis methods were chosen for this case, and why.
  4. 04Verified chronologyThe sequence of events, reconstructed from records, data and accounts, minute by minute where it matters.
  5. 05Site & technical examinationScene, equipment, failed parts, measurements and photographs, with specialists where needed.
  6. 06Witness evidenceInterview schedule, accounts in summary, and where the witnesses agree and where they conflict.
  7. 07Documents & recordsPermits, procedures, maintenance, training, rosters, CCTV, tracker and control-system data reviewed.
  8. 08Causal analysisImmediate, underlying and system causes, each one tied to numbered evidence.
  9. 09System reviewWhere the same weaknesses exist elsewhere in the operation.
  10. 10Findings & conclusionsWhat is proven, what is probable, and what remains open, stated plainly.
  11. 11Recommendations & work planTargeted actions, each with an owner, a date and a test of whether it worked.
  12. 12AppendicesEvidence register, photograph log, interview records, drawings and data extracts.

Every action has an owner, a date and a test of whether it worked. The evidence stays indexed, so any reader can check how each conclusion was reached.

From our files

CASE 03 · ANONYMISEDFatal industrial incident after fatigue and a bypassed safeguardRead the case →CASE 07 · ANONYMISEDSerious leg injury at an industrial facilityRead the case →

See all 16 cases →   Client names, people, locations and dates removed.

Questions after a process incident

What plant managers ask us first.

What counts as a process safety incident?

Any unplanned release of hazardous material or energy from a process: gas, vapour, chemical, steam or pressure, whether or not anyone is hurt. These events are rarer than personal injuries but carry far higher potential consequence.

Why do so many incidents happen at start-up?

Start-up and shutdown are non-routine. Procedures are used less often, equipment has just been opened, and more people are on the unit. Frequent power and gas interruptions mean some plants restart far more often than their design assumed.

What is management of change, and why does it matter?

It is the review of any change to equipment, materials, procedures or staffing before it is made. Many major process disasters trace back to a change that looked too small to review.

Can you work within our existing process safety system?

Yes. Where you already use an established process safety management system or incident method, we work within it and report against its elements.

Will you only look at this incident?

No. Our process specialists check the same barriers across other units and give you targeted actions, ranked by risk, for the gaps that would cause the next release.

Do you investigate outside Pakistan?

Yes. P3i has worked in 15 countries, including on process and energy facilities.

Related

Fire & Explosion Environmental Release Barrier Analysis Change Analysis Oil, Gas & Energy

Had a release or an upset?

Find the change before it is made again.

Report an incident 042 37135571-3