5.2 Prevention through Design (PtD) Principles, Life-Cycle Safety & Design Reviews

5.2 Prevention through Design (PtD) Principles, Life-Cycle Safety & Design Reviews

Historically, occupational safety programs intervened only after machinery was installed, buildings were erected, and workers were already stationed at their posts. Safety professionals were brought into projects as an afterthought—tasked with taping warning stripes on low pipe headers, purchasing machine guards from aftermarket catalogs, or drafting operating procedures for equipment that was ergonomically unworkable.

This reactive approach is fundamentally flawed, expensive, and dangerous. Once physical concrete has cured and structural steel has been welded, eliminating a design-induced hazard requires disruptive capital retrofits or resigns the organization to decades of relying on fallible administrative procedures and PPE.

To overcome this systemic failure, the National Institute for Occupational Safety and Health (NIOSH) launched the Prevention through Design (PtD) national initiative in 2007. Codified in the United States through ANSI/ASSP Z590.3-2021 (Prevention through Design: Guidelines for Addressing Occupational Hazards and Risks in Design and Redesign Processes), PtD establishes a proactive methodology to design out hazards and minimize occupational risks at the earliest possible stages of facility, equipment, and workflow engineering.

---

The Szymberski Design Curve: Time vs. Ability to Influence Safety

The foundational economic and engineering justification for PtD is articulated by the Szymberski Design Curve (developed by Robert Szymberski in 1997 for construction project safety). The curve models the inverse relationship between the ability to influence safety and the project timeline.

  HIGH  ▲
        │\  ABILITY TO INFLUENCE SAFETY
        │ \ (Szymberski Curve)
        │  \
        │   \
        │    \
        │     \                                      / COST OF DESIGN
        │      \                                    /  CHANGES & RETROFITS
        │       \                                  /
        │        \                                /
        │         \                              /
        │          \                            /
        │           \                          /
  LOW   ┼────────────\────────────────────────/───────────────────►
       CONCEPT    PRELIMINARY   DETAILED   PROCUREMENT &  OPERATION
       & SCHEMATIC  DESIGN     ENGINEERING  CONSTRUCTION

Key Phases of the Szymberski Model:

1. Conceptual & Preliminary Design: During initial feasibility studies and Front-End Loading (FEL), the project exists only as sketches, flow diagrams, and 3D computer models. The ability to influence safety is at its absolute maximum (approaching 100%). Changing the location of a toxic chemical transfer pump to ground level, eliminating a roof penetration, or substituting a dangerous flammable solvent costs literally the price of updating a CAD file.
2. Detailed Engineering & Procurement: As specifications are finalized, piping and instrumentation diagrams (P&IDs) are frozen, and purchase orders for long-lead equipment are cut, the flexibility to make safety changes drops rapidly. Altering structural footprints now requires engineering recalculations, vendor renegotiations, and change orders.
3. Construction & Erection: Changing safety configurations during physical construction requires field demolition, structural rework, project schedule delays, and contractor delay claims.
4. Operations & Maintenance: By the time a facility enters commercial operation, the ability to influence safety has fallen to its lowest point, while the cost to retrofit controls reaches its peak—often 10 to 100 times more expensive than implementing the identical control during preliminary design.

---

The Full Lifecycle Safety Architecture (The 9 Lifecycle Phases)

Under ANSI/ASSP Z590.3, PtD is not a one-time safety check; it is an integrated governance model spanning the entire nine-phase life cycle of an asset:

  ┌────────────────────────────────────────────────────────────────────────┐
  │                   THE 9 ASSET LIFECYCLE PHASES (PtD)                   │
  ├───────────────┬────────────────────────────────────────────────────────┤
  │ 1. CONCEPT    │ Establish safety charter; set risk criteria; assess    │
  │               │ site selection, geology, and high-level tech choices   │
  ├───────────────┼────────────────────────────────────────────────────────┤
  │ 2. PRELIMINARY│ Apply Inherent Safety Principles (Minimize, Substitute);│
  │    DESIGN     │ execute Preliminary Hazard Analysis (PHA) / HAZID      │
  ├───────────────┼────────────────────────────────────────────────────────┤
  │ 3. DETAILED   │ Multidisciplinary reviews (HAZOP, FMEA, ChOP); safe    │
  │    ENGINEERING│ access, human factors, electrical classifications       │
  ├───────────────┼────────────────────────────────────────────────────────┤
  │ 4. PROCUREMENT│ EHS specifications in vendor RFPs; pre-award audits;   │
  │               │ Factory Acceptance Testing (FAT) with safety sign-off  │
  ├───────────────┼────────────────────────────────────────────────────────┤
  │ 5. CONSTRUCT- │ Constructability reviews; prefabrication off-site;     │
  │    ION        │ ground-level assembly; temporary works safety design   │
  ├───────────────┼────────────────────────────────────────────────────────┤
  │ 6. COMMISSION-│ Pre-Startup Safety Review (PSSR); Site Acceptance      │
  │    ING        │ Testing (SAT); validation of interlocks, E-stops, LEV  │
  ├───────────────┼────────────────────────────────────────────────────────┤
  │ 7. OPERATION  │ Management of Change (MOC); safe operating limits;     │
  │               │ baseline IH monitoring; human performance integration  │
  ├───────────────┼────────────────────────────────────────────────────────┤
  │ 8. MAINTENANCE│ Maintainability reviews; permanent lifting lugs/davits;│
  │    & OUTAGE   │ isolation blinding points; zero-entry cleaning nozzles │
  ├───────────────┼────────────────────────────────────────────────────────┤
  │ 9. DECOMMIS-  │ Design for safe demolition; abatement of hazardous     │
  │    SIONING    │ materials; structural deconstruction sequence modeling │
  └───────────────┴────────────────────────────────────────────────────────┘

Stage-Gate Governance

To operationalize PtD across these phases, organizations implement formal Stage-Gate Reviews. A capital project cannot pass from one phase to the next (e.g., from Preliminary Design to Detailed Engineering) without formal sign-off from the EHS design authority confirming that all identified safety risks have been resolved using the Hierarchy of Controls.

---

Multidisciplinary Design Safety Reviews

A successful PtD program depends on rigorous, structured hazard identification techniques conducted by multidisciplinary teams during design phases. Safety professionals must facilitate these reviews, bringing together process engineers, mechanical designers, electrical engineers, ergonomics specialists, operations supervisors, and frontline maintenance technicians.

1. Hazard and Operability (HAZOP) Studies

Originating in the chemical process industry, a HAZOP is a highly structured, systematic examination of a planned or existing process.

• The multidisciplinary team applies standardized Guide Words (e.g., No, More, Less, As Well As, Part Of, Reverse, Other Than) to process Parameters (e.g., Flow, Pressure, Temperature, Level, Viscosity, Reaction).
• Example Deviation: "More Pressure" in a reactor line.
• The team identifies causes (e.g., control valve failure closed, downstream blockage), assesses consequences (e.g., line rupture, toxic release), evaluates existing safeguards, and recommends design changes (e.g., installing a dual rupture disk and pressure safety valve [PSV] routed to an automated flare header).

2. Failure Modes and Effects Analysis (FMEA)

FMEA is a bottom-up, inductive analytical tool widely used in mechanical and equipment design.

• The team breaks a system down into its individual components (valves, pumps, switches, gaskets, microcontrollers) and identifies every potential failure mode.
• For each failure mode, a Risk Priority Number (RPN) is calculated: $\text{RPN} = \text{Severity (S)} \times \text{Occurrence (O)} \times \text{Detection (D)}$
• Where:
  • Severity (S): Impact on worker safety or system integrity (1 = minor to 10 = catastrophic fatality).
  • Occurrence (O): Probability or frequency of failure (1 = extremely rare to 10 = inevitable).
  • Detection (D): Ability of current controls to detect the failure before it manifests harm (1 = certain detection to 10 = undetectable).
• High RPN failure modes demand redesign (e.g., adding redundancy, fail-safe spring-return actuators, or automated vibration diagnostics).

3. Constructability and Maintainability Safety Reviews

Two frequently neglected disciplines in industrial design are constructability and maintainability.

---

Procurement Safety Specifications and Vendor Acceptance Protocols

An organization cannot achieve world-class safety if its purchasing department buys machinery based strictly on the lowest purchase price without evaluating the safety lifecycle costs. Hazards are routinely imported into facilities through unvetted equipment procurement.

  ┌─────────────────────────────────────────────────────────────────┐
  │            PROCUREMENT SAFETY INTEGRATION LIFECYCLE             │
  ├─────────────────────────────────────────────────────────────────┤
  │  STEP 1: ENGINEERING DATASHEET & RFP                            │
  │  • Explicit EHS specifications embedded in bid packages         │
  │  • Noise limit: Max 80 dBA at 1 meter under full load           │
  │  • Machine guarding: ANSI B11 / ISO 12100 compliance            │
  │  • Electrical: NFPA 79, UL 508A, Cat 4 / PLe safety circuits   │
  │  • Ergonomics: SEMI S8 / ANSI B11.TR1 guidelines                │
  ├────────────────────────────────┬────────────────────────────────┘
  │                                ▼
  │  STEP 2: VENDOR SELECTION & BID EVALUATION                      │
  │  • Technical safety scoring weighted equally with price/lead time
  │  • Vendor must submit safety schematics and preliminary FMEA    │
  ├────────────────────────────────┬────────────────────────────────┘
  │                                ▼
  │  STEP 3: FACTORY ACCEPTANCE TESTING (FAT)                       │
  │  • Formal on-site inspection at vendor manufacturing facility   │
  │  • 100% functional test of interlocks, E-stops, and light curtains
  │  • Noise and thermal mapping; verification of zero energy states│
  │  • No shipment authorized until safety punch-list is 100% closed│
  ├────────────────────────────────┬────────────────────────────────┘
  │                                ▼
  │  STEP 4: SITE ACCEPTANCE TESTING (SAT) & COMMISSIONING (PSSR)   │
  │  • Field verification after installation and utility connection │
  │  • Pre-Startup Safety Review (PSSR) sign-off prior to energizing│
  └─────────────────────────────────────────────────────────────────┘

Factory Acceptance Testing (FAT) vs. Site Acceptance Testing (SAT)

• Factory Acceptance Testing (FAT): Conducted at the equipment manufacturer's facility before the machinery is crated and shipped. The client's safety professional and lead electrical engineer inspect the machine against the purchase specification.
  • Crucial verification items: Testing all Emergency Stop (E-Stop) buttons to ensure they operate via hardwired, fail-safe safety relays (or certified safety PLCs) rather than standard programmable software; testing light curtains for optical alignment and muting logic; checking that all mechanical nip points, drive chains, and rotating shafts possess fixed or interlocked physical guards per OSHA 1910.212 and ANSI B11.0; verifying that all energy isolation valves and disconnects are lockable in the off position with standardized padlock hasps.
  • The Golden Rule of FAT: Never allow equipment to leave the vendor's floor with an open safety deficiency. Once the machine is delivered to your plant, vendor leverage evaporates, and correcting deficiencies in the field costs 5 to 10 times more.
• Site Acceptance Testing (SAT): Conducted after the equipment is installed and connected to facility utilities (power, compressed air, process piping, ventilation). SAT verifies that dynamic field interactions—such as local exhaust duct airflow velocities, acoustic reflections from building walls, and interface with building fire suppression—conform to safe operating limits.

---

Real-World Case Study: Bulk Solids Material Handling Redesign

A multinational consumer foods manufacturer planned a $45 million expansion involving a new pneumatic conveying and batch blending line for flour, sugar, and dry flavoring powders.

• The Traditional Proposal: The original engineering design featured 50-lb manual bag dumping stations where operators climbed 6-step rolling ladders to pour powder into elevated hopper openings. The design would require 12 operators wearing N95 respirators, handling 800 bags per shift, with dust extraction provided by small, flexible elephant-trunk hoods.
• PtD Intervention: During the preliminary design phase (Phase 2), the corporate safety manager facilitated a 2-day PtD review with mechanical engineering and frontline operations:
  1. Elimination & Ergonomics: The manual bag-dumping scheme was completely eliminated. The project was redesigned to utilize bulk Super-Sacks (FIBCs) unloaded at floor level using automated hoist-assisted bulk bag unloader stations with integrated vibratory discharge hoppers.
  2. Inherent Dust & Explosion Safety (NFPA 652 / 654): Instead of open pouring that generates respirable, explosive combustible dust clouds (Class II, Div 1 hazard), the material was transferred via dense-phase, low-velocity pneumatic conveying operating under negative pressure.
  3. Maintainability: Rotary airlock valves and diverter gates were repositioned from 18 feet in the air to an engineered mezzanine accessible via an OSHA-compliant stairway (sloped at 45 degrees with uniform 9-inch risers and 11-inch treads per OSHA 1910.25), complete with dedicated monorails overhead for motor removal.
• The Measurable Impact:
  • Manual lifting exposure was reduced by 96% (eliminating an estimated $340,000 in projected cumulative musculoskeletal workers' compensation claims over 5 years).
  • Ambient dust levels remained below 0.5 mg/m³ (1/30th of the OSHA PEL for total nuisance dust), allowing operators to work without respirators.
  • The risk of a combustible dust flash fire or secondary explosion was virtually engineered out of the facility.

---

Senior Safety Manager Pitfalls

Pitfall 1: Excluding Maintenance and Frontline Crafts from Design Reviews
Conducting design reviews with only degreed engineers and project managers. Professional engineers understand thermodynamics and mechanical stress, but maintenance mechanics and operators understand how machines fail in the field. When maintenance technicians are excluded, designs routinely end up with lubrication points placed behind structural I-beams, filter housings that require contortionism to access, and instruments located 20 feet above the floor without safe access.

Pitfall 2: Permitting "Value Engineering" (VE) to Gut Safety Infrastructure
When a capital project faces budget overruns during detailed design, project managers frequently initiate a "Value Engineering" (VE) exercise to cut costs. In poorly governed organizations, VE targets safety features that are viewed as "non-productive" overhead—such as replacing permanent steel access platforms with ladder cages, downgrading stainless steel LEV ductwork to galvanized sheet metal, or cutting automated interlocks in favor of manual procedural locks. Safety professionals must establish a mandatory gate rule: Safety-critical engineering controls cannot be eliminated or downgraded through Value Engineering without a formal PtD risk assessment and EHS executive sign-off.

Pitfall 3: Signing Off on Vendor Equipment Delivery Without On-Site FAT
Waiving the Factory Acceptance Test to accelerate delivery schedules, assuming deficiencies can be caught during commissioning. Once machinery arrives on site, production managers face overwhelming commercial pressure to begin commissioning. Safety deficiencies discovered on site are almost invariably met with temporary workarounds, procedural bypasses, and deferred maintenance, creating severe latent hazards that plague the facility for years.