9.1 Risk-Driven Inspection Strategy: What, Where, When, and How to Inspect

9.1 Risk-Driven Inspection Strategy: What, Where, When, and How to Inspect

Translating the outputs of a Risk-Based Inspection (RBI) assessment into an executable, field-ready inspection plan is the fundamental bridge between risk analysis and asset integrity management. Under API RP 580 (4th Edition, Section 13), an effective risk-driven inspection plan must replace generic, calendar-based inspection schedules with targeted strategies designed around four core questions: What damage mechanisms are present, Where will damage manifest, When must the inspection occur to manage risk, and How should the inspection be executed to ensure reliable detection?

---

Traditional vs. Risk-Driven Inspection Planning

Historically, pressure equipment inspection intervals were governed by prescriptive code maximums or simple corrosion rate half-life rules (such as the standard API 510/570 rule setting maximum internal inspection at $I_{\text{max}} = \frac{\text{Remaining Life}}{2}$ or 10 years). While easy to administer, this approach treats all equipment with similar corrosion rates identically, regardless of fluid toxicity, flammability, operating pressure, or specific cracking mechanisms.

By contrast, a Risk-Driven Inspection Strategy dynamically allocates inspection resources based on total risk ($R = \text{PoF} \times \text{CoF}$). High-consequence or high-probability equipment receives intensive NDE coverage at shorter intervals, whereas low-risk equipment is assigned streamlined monitoring or longer intervals within statutory limits.

---

The "What" Dimension: Identifying Damage Mechanisms

API RP 580 Section 13 dictates that the "What" parameter must define the exact damage mechanisms targeted by the inspection. Rather than searching generically for metal loss, the inspection scope must be tailored to active and potential degradation modes defined in API RP 571.

Screening Factors for Mechanism Identification

1. Process Fluid Chemistry: Presence of $\text{H}_2\text{S}$, $\text{CO}_2$, chlorides, amines, cyanides, ammonia, hydrogen, or organic acids.
2. Operating Parameters: Temperature ranges (e.g., creep above 800°F, HTHA above 400°F for carbon steel in hydrogen service, CUI between 25°F and 350°F), operating pressures, and cyclic thermal/mechanical stresses.
3. Materials of Construction: Carbon steel, low-alloy steels (1.25Cr-0.5Mo, 2.25Cr-1Mo, 9Cr-1Mo), austenitic stainless steels (304/316 series), duplex stainless steels, or nickel-base alloys.
4. Equipment Geometry & Fabrication: Presence of cold work, post-weld heat treatment (PWHT) status, socket welds, dissimilar metal welds (DMWs), and internal linings.

Common damage mechanisms addressed in refinery and chemical process units include:

• Uniform and Localized Thinning: Sulfidic corrosion, naphthenic acid corrosion, hydrochloric acid corrosion.
• Environmental Cracking: Wet $\text{H}_2\text{S}$ cracking (HIC/SOHIC/SSC), Amine Stress Corrosion Cracking (Amine SCC), Chloride Stress Corrosion Cracking (Cl-SCC), Polythionic Acid Cracking (PTASC).
• High-Temperature Degradation: High-Temperature Hydrogen Attack (HTHA), Creep/Stress Rupture, Hydrogen Embrittlement.
• External Corrosion: Corrosion Under Insulation (CUI), Soil-to-Air Interface (SAI) corrosion.

---

The "Where" Dimension: High-Susceptibility Locations

API RP 580 Section 13 requires inspection plans to pinpoint specific Condition Monitoring Locations (CMLs) and Inspection Test Points (ITPs) where damage is most likely to initiate or progress rapidly. Broad-brush NDE across an entire vessel shell is often both economically wasteful and technically ineffective for localized mechanisms.

Critical High-Susceptibility Target Zones

+-----------------------------------------------------------------------------------+
|                           HIGH-SUSCEPTIBILITY TARGET ZONES                         |
+------------------------------------+----------------------------------------------+
| Target Zone                        | Dominant Damage Mechanism                    |
+------------------------------------+----------------------------------------------+
| Injection & Mixing Points          | Severe localized erosion-corrosion, acid dew  |
|                                    | point corrosion, ammonium salt deposition    |
| Deadlegs & Unflushed Stubs         | Stagnant water accumulation, MIC, acid       |
|                                    | concentration, localized pitting             |
| Liquid-Vapor Interfaces            | Dew-point corrosion, splashing-zone CUI,     |
|                                    | wet H2S cracking at liquid level lines       |
| Soil-to-Air Interfaces (SAI)       | Atmospheric oxygen/moisture concentration    |
|                                    | cell corrosion on buried lines at grade      |
| Support Touchpoints & Insulation   | Moisture entrapment beneath insulation,      |
| Crevices                           | accelerated CUI, pipe shoe wear              |
| High-Turbulence Bends & Tees       | Flow-Assisted Corrosion (FAC), erosion-      |
|                                    | corrosion, impingement attack                |
+------------------------------------+----------------------------------------------+

---

The "When" Dimension: Risk-Based Inspection Timing

API RP 580 Section 13 replaces static calendar dates with dynamic risk trajectories. Inspection timing is governed by the point in time ($t_{\text{target}}$) at which the equipment's unmitigated or projected risk intersects the organization's Maximum Allowable Risk Limit ($R_{\text{limit}}$).

Mathematical formulation of risk progression over time:

$R(t) = \text{PoF}(t) \times \text{CoF} = \left[ \text{g}(t) \cdot D_f(t) \right] \times \text{CoF}$

Where:

• $D_f(t)$ is the time-dependent Damage Factor calculated per API 581 (accounting for corrosion rates, cracking susceptibility, and time in service).
• $\text{g}(t)$ is the management systems factor / generic failure frequency component.
• $\text{CoF}$ is the Consequence of Failure (expressed in financial loss $ $ $ or flammable/toxic impact area $\text{ft}^2$).

The next inspection date (NID) must be scheduled prior to $t_{\text{target}}$:

$NID = t_0 + \min \left( t_{\text{risk\_limit}}, t_{\text{code\_max}} \right)$

---

The "How" Dimension: NDE Selection & API 581 Effectiveness Categories

API RP 580 Section 13 mandates that selected NDE methods must possess adequate capability to detect and size the targeted damage mechanism. API RP 581 quantifies NDE capability into Five Effectiveness Categories (Category A through E), which directly modify the posterior Probability of Failure calculation.

API 581 NDE Effectiveness Categories

• Category A (Highly Effective): $80%$ to $100%$ confidence of detecting and sizing damage. Standard application provides high statistical certainty (e.g., full-coverage PAUT for environmental cracking or HTHA).
• Category B (Usually Effective): $60%$ to $80%$ confidence. Good capability for detecting damage with moderate uncertainty in sizing (e.g., Shear Wave UT for internal cracking, PEC for CUI screening).
• Category C (Fairly Effective): $40%$ to $60%$ confidence. Confirms presence of general damage but limited localized sizing capability (e.g., spot UT thickness grid for uniform wall loss).
• Category D (Poorly Effective): $20%$ to $40%$ confidence. Low probability of detection; useful only for screening gross defects (e.g., visual inspection VT for fine surface cracking).
• Category E (Ineffective): $<20%$ confidence. Minimal or no capability to detect the specific mechanism (e.g., visual VT for internal micro-fissuring or HTHA prior to macro-cracking).

NDE Method Selection Matrix

---

Worked Technical Example: Hydrocracker Separator Overhead Line

Operational Parameters & Risk Assessment Input

• Equipment: 12-inch Sch 80 Carbon Steel Piping (Hydrocracker High-Pressure Cold Separator Overhead Line).
• Operating Environment: Process fluid containing $\text{H}_2\text{S}$, $\text{NH}_4\text{HS}$ solution ($3.2\text{ wt}%$), operating temperature $155^\circ\text{F}$, pressure $1,250\text{ psig}$, velocity $28\text{ ft/s}$.
• Identified Damage Mechanisms (What): Ammonium Bisulfide ($\text{NH}_4\text{HS}$) erosion-corrosion (localized wall thinning) and Wet $\text{H}_2\text{S}$ HIC/SOHIC cracking.
• Critical Locations (Where): 90-degree long-radius elbows immediately downstream of the wash-water injection point, plus low-point deadleg drains.
• Risk Threshold (When): Consequence of Failure is calculated at $\text{CoF} = $4,500,000$ (flammable release + production interruption). The company's Maximum Allowable Financial Risk Limit is $R_{\text{limit}} = $50,000/\text{year}$.
• Current PoF Trajectory: Baseline $\text{PoF}(t)$ reaches $0.015/\text{year}$ at Year 3.5. Baseline Risk at Year 3.5 = $0.015 \times $4,500,000 = $67,500/\text{year}$ (exceeds $R_{\text{limit}}$).

Inspection Planning Decision (How & When)

1. Scheduling the inspection at Year 3.0, prior to exceeding $R_{\text{limit}}$.
2. Specifying Automated UT (AUT) matrix grid scanning over $100%$ of the elbow extents (Category A for $\text{NH}_4\text{HS}$ localized thinning) combined with Time-of-Flight Diffraction (TOFD) over the circumferential welds (Category A for HIC/SOHIC cracking).
3. Executing this Category A inspection reduces the posterior Damage Factor $D_f$, resetting the projected $\text{PoF}$ trajectory and extending the safe operating period to the next turnaround.