Tripod Beta Defences BRF — When a Detection System Stops Defending Against the Actual Hazard

Fixed gas detection systems exist for one specific reason: human senses are not a reliable primary defence against many industrial exposure hazards. When an investigation’s finding leans on what a person should have smelled or noticed, it’s worth asking why the facility installed an instrumented system in the first place — and whether that system was still doing the job it was installed for.

A Detector That Worked Exactly as Programmed

A specialty chemicals facility had substituted one solvent for a lower-odour-threshold alternative two years before an exposure incident occurred. The substitution was approved through a standard process change review focused on yield and product quality. The facility’s fixed gas detection system in that area had been commissioned years earlier, calibrated and alarm-set for the exposure limit of the original solvent. The process change review checked containment, ventilation rates, and material compatibility. It never reached the detection system’s calibration.

When the exposure occurred, the detector’s alarm stayed silent — reading correctly against a threshold that no longer corresponded to what was actually present in the air. The investigation’s finding leaned on the operator: he should have recognised something was different before the instrument confirmed it.

Why That Standard Doesn’t Hold

A facility installs fixed detection specifically because it does not want to rely on a person’s senses as the primary defence against this category of hazard. Asking that same person to out-perform the very instrument installed to replace his senses is not a fair standard to apply after the fact — it treats a policy-level protection gap as an attentiveness problem.

Defences BRF: A Policy-Level Protection Gap

In Tripod Beta’s framework, a Defences Basic Risk Factor describes a systemic failure in the detection, warning, or protective systems an organisation relies on as a policy-level layer of defence — distinct from a hardware fault, where the physical item itself was wrong for the job, and distinct from a maintenance failure, where something adequate degraded over time. In this scenario the equipment was fine. It did precisely what it was calibrated to do. The specification behind it — what it was supposed to be defending against — had simply gone two years without being updated to match what the facility actually handled in that area.

The Gap in Process Change Reviews

Most process substitution reviews in Malaysian facilities are built around containment, ventilation, and material compatibility — questions that a standard process safety review is well equipped to answer. Few of these reviews include a step that asks whether a chemical substitution changes the calibration requirements of the facility’s existing detection and alarm systems. Without that step built into the review, a technically sound and fully approved substitution can silently leave a detection system defending against a hazard that no longer matches what’s in the area.

DOSH’s Expectations for Process Safety Management

DOSH’s expectations for process safety management in Malaysia treat detection and alarm systems as safeguards that must be verified against current process conditions — not simply tested against their original commissioning baseline. A detector that passes every function test since commissioning has demonstrated that its mechanism works. It has not demonstrated that its calibration still matches what the facility currently processes in that location.

What Gets Missed When the Investigation Blames the Senses

An investigation that concludes a worker should have noticed a hazard his facility’s own instrumentation was specifically designed to catch instead of him is not identifying a training gap. It is documenting that the detection system had quietly stopped functioning as a defence for two years, and disguising that finding as a lapse in someone’s attentiveness.

Closing the Gap

The structural fix connects the chemical substitution or process change review to a mandatory recalibration check: any substitution that changes the substance present in a monitored area should automatically trigger a review of that area’s detection and alarm calibration before the substitution takes effect, not after an exposure reveals the mismatch.

The Question Worth Asking

When your facility last substituted a chemical in a monitored area, did the review reach the detection and alarm system’s calibration — or did it stop at containment, ventilation, and material compatibility?

Want an investigation process that finds Defences BRFs before an exposure incident does? Cikgu Barrier’s Tripod Beta Incident Investigation program teaches HSE teams and investigation leads to trace causation to policy-level protection gaps — not just the person standing closest when the gap was finally exposed. Malaysia’s only accredited Tripod Beta training.

Leave a Comment

Your email address will not be published. Required fields are marked *

Scroll to Top