Refinery MOC Safety Review and Closure Workflow

Refineries run on tightly coupled systems feed composition, heat integration, relief networks, control strategies, and human procedures all interact. When a change occurs, the Management of Change (MOC) process is the refinery’s mechanism for preventing unintended consequences. However, the value of MOC is realized only when safety review and closure are executed with rigor, traceability, and clear accountability. This workflow describes how a refinery can structure MOC safety review and closure so that hazid, hazop, and risk assessment outcomes translate into measurable risk management controls embedded in daily operations and sustained by process safety management.

Read: What is Process Safety Management

1) MOC Initiation and Risk Screening

Every MOC begins with a clear change definition: purpose, affected unit boundaries, equipment tags, control logic touched, and the operating modes impacted (startup, normal, upset, shutdown). A refinery should apply an initial screening to determine the level of review required. Screening considers process safety criticality: hydrocarbons under pressure, hydrogen service, high-temperature corrosion risk, flare/relief impacts, and any potential for loss of containment.

This step assigns the MOC category (minor/standard/major) and sets mandatory deliverables: whether a full hazop is required, a targeted hazid, or a structured risk assessment using a site-approved risk matrix.

Deliverables: MOC request form, screening record, review level decision.

2) Assemble the Review Team and Define Boundaries

The safety review needs the right expertise: operations, process engineering, mechanical, inspection, instrumentation/controls, and process safety. The team defines study boundaries and “nodes” for analysis, ensuring the review is neither too narrow (missing interface risks) nor too broad (diluting focus). For changes that affect multiple units, an interface map helps identify tie-ins, shared utilities, and common relief/flare constraints.

Deliverables: team roster, study boundary map, node list or equipment scope list.

3) Execute Hazid/Hazop and Document Safeguard Decisions

Depending on the screening outcome, the refinery conducts hazid (early-stage hazard identification) and/or hazop (systematic deviation analysis). The output should be more than a list of actions—each recommendation must link to a scenario and a risk ranking from the risk assessment. A refinery-grade workflow records:

initiating causes (control failure, blocked flow, tube rupture, corrosion/erosion, human error)
consequences (fire, explosion, toxic exposure, equipment damage, environmental release)
existing safeguards (SIS, PSV, alarms, procedures, inspection)
additional safeguards required and their intended risk reduction

This creates a traceable chain from scenario → risk ranking → safeguard selection, strengthening risk management and later closure verification.

Deliverables: hazid/hazop report, scenario register, action list with owners and due dates.

4) Design Finalization and “Safety Requirements” Lock-In

After the hazard study, the design is finalized with explicit safety requirements: instrument functions, trip setpoints, relief sizing basis, metallurgy decisions, and operating limits. For control-system changes, this includes cause-and-effect logic and any alarm philosophy impacts. For mechanical changes, define inspection requirements and integrity operating windows.

A key refinery discipline is preventing late-stage changes from bypassing review. If engineering deviates from what the safety review assumed, the workflow triggers a re-review or a focused addendum.

Deliverables: approved design package, safety requirement specification, deviation log (if any).

5) Implementation Controls and Work Execution Readiness

During execution, the workflow manages hazards introduced by the work itself—simultaneous operations, hot work, confined space, tie-in planning, and temporary bypasses. MOC governance should explicitly track temporary states (jumpers, blinded lines, inhibited trips) and ensure each temporary risk is time-limited and controlled.

This is also where procurement substitutions are controlled: a “like-for-like” rule must be defined, and anything beyond it routes back through MOC review.

Deliverables: execution plan, temporary change register, substitution approvals.

6) Closure Readiness Gate: Evidence-Based Verification

For closure, the refinery establishes an evidence standard: closure requires proof, not intent. Verification includes:

functional testing of safety instrumented functions, interlocks, and alarms
calibration and loop check records
relief device installation confirmation and documentation of sizing basis alignment
updated operating procedures and abnormal response guidance
completed training and competency sign-off for affected roles
updated drawings, line lists, and control narratives

A refinery may use a closure dossier format so audits can confirm that process safety management expectations are met without reconstructing decisions months later.

Deliverables: test packs, updated documents, training records, closure dossier.

7) Operational Start-Up Authorization and Post-Start Monitoring

Start-up authorization is granted only after closure prerequisites are satisfied (or formally risk-accepted through governance). For high-risk changes, require a defined monitoring window after start-up tracking alarms, control stability, relief/flare behavior, and any emergent reliability issues. If performance issues occur, the workflow ensures fixes remain inside MOC governance rather than turning into untracked “tuning.”

Deliverables: start-up authorization record, monitoring log, follow-up actions (if needed).

Conclusion

A refinery MOC safety review and closure workflow is a structured, governance-driven path that converts Hazid, Hazop, and risk assessment findings into durable barriers and operational readiness. By enforcing traceability, controlling deviations, requiring evidence-based closure, and aligning documentation and competence, refineries achieve practical risk management that stands up to scrutiny. Ultimately, this workflow is a core pillar of process safety management, ensuring that every change strengthens—not silently weakens the refinery’s integrity and resilience.

—-----------------------------------------------------

Search This Blog

SynergenOG