Skip to content

GCRI · Advanced Industry and Robotics

Industrial process safety

Process safety prevents the fires, explosions and toxic releases that can occur when plants handle hazardous substances at scale. Major accidents are rare, but their consequences for workers, neighbours and the environment can be catastrophic. This page sets out how major accidents develop, how process safety is managed and measured, and what evidence serves the operators, regulators and communities responsible.

01Canvas

How the work runs.

Systems · around this subjectIllustrative

Plant operations and safety

Industrial process safety · Plant 3 · Shift 1

  • OEE, % of planned
    752Watch
  • Safety-critical alarms active
    3Alert
  • Robot cell stops this shift
    9
  • Energy per unit
    1.3kWhNormal
Safety-critical alarm shelvedGCRI · Advanced Industry and Robotics

Barriers

layers of protection

High-pressure tripSISQ1Healthy
Relief valve RV-12MechanicalQ2Healthy
Gas detection zone 4DetectionQ3Bypassed
Robot cell light curtainSafeguardQ4Healthy

Reactor pressure

Plant operations and safety: the screen’s structure, terms and states for Industrial process safety.Example names and illustrative values; a design, not a record or a live system.

Fig.Plant operations and safety: example names and illustrative values, not a record or a live system.

02The question

Industrial process safety: how the risk develops.

Chemical and major accident hazards. The dossier below sets out how the risk develops, what is measured, where the data come from, how it is modelled and who decides.

Mechanism

Barriers fail together

Major accidents usually follow the failure of several safeguards at once: design, alarms, procedures, relief systems and emergency response.

Mechanism

Drift erodes margins

Deferred maintenance, small modifications and normalised deviations gradually erode safety margins until an initiating event finds a gap.

Mechanism

Natural hazards trigger accidents

Floods, earthquakes, lightning and heat can damage equipment and power, triggering releases at multiple points at once.

Mechanism

Neighbours carry consequences

Communities near hazardous sites face the consequences of releases. Land-use planning and public information reduce harm.

03Geography

Infrastructure exposure in Germany.

Night lights, population density and flood water over Germany, from NASA GIBS. Each layer carries its own date.

The interactive map needs JavaScript; the layer list and sources are below.

Layers 3

Infrastructure exposure, for this page

About this layer
Evidence
Observed
Source
VIIRS Black Marble (VNP46A2) (NASA LAADS DAAC)
Provider
NASA LAADS DAAC
Licence
NASA open data
Vintage
daily; Satellite radiance, corrected for moonlight and atmosphere
Newest at build
2026-10-12
Resolution
about 500 m grid
Uncertainty
Satellite night-time radiance for the date shown; lights are a proxy for electricity use and outages, not a measurement of supply or access.
Reached through
gibs.earthdata.nasa.gov, only after you allow the live map
About this layer
Evidence
Estimated
Source
Gridded Population of the World v4.11 (NASA SEDAC (CIESIN, Columbia University))
Provider
NASA SEDAC (CIESIN, Columbia University)
Licence
CC BY 4.0
Vintage
null; Census-based estimate, static (2020)
Resolution
about 1 km grid
Uncertainty
Census-based estimate of people per square kilometre in 2020, shown as exposure context; not a count of people affected by any hazard.
Reached through
gibs.earthdata.nasa.gov, only after you allow the live map
About this layer
Evidence
Observed (clouds leave gaps)
Source
VIIRS Global Flood Product (NASA LANCE)
Provider
NASA LANCE
Licence
NASA open data
Vintage
daily; Satellite detection; clouds leave gaps
Newest at build
2026-10-14
Resolution
about 250 m grid
Uncertainty
Satellite detection; clouds leave gaps. Satellite or model raster as the provider publishes it. Clouds, swath gaps and retrieval error leave gaps and noise; values are indicators, not measurements at a place.
Reached through
gibs.earthdata.nasa.gov, only after you allow the live map
About this layer
Evidence
Observed
Source
VIIRS NOAA-20 corrected reflectance (NASA LANCE)
Provider
NASA LANCE
Licence
NASA open data
Vintage
daily; Satellite image
Newest at build
2026-10-14
Resolution
about 250 m grid
Uncertainty
Satellite image. Satellite or model raster as the provider publishes it. Clouds, swath gaps and retrieval error leave gaps and noise; values are indicators, not measurements at a place.
Reached through
gibs.earthdata.nasa.gov, only after you allow the live map
About this layer
Evidence
Modelled (latest year GIBS publishes)
Source
MODIS Terra and Aqua land cover (MCD12Q1) (NASA LP DAAC)
Provider
NASA LP DAAC
Licence
NASA open data
Vintage
yearly; Satellite classification; latest year GIBS publishes
Newest at build
2024-01-01
Resolution
about 500 m grid
Uncertainty
Satellite land cover classes for the year shown, including croplands; a classification with known errors, not a farm register.
Reached through
gibs.earthdata.nasa.gov, only after you allow the live map
About this layer
Evidence
Observed (clouds and overpass timing leave gaps)
Source
VIIRS NOAA-20 375 m (FIRMS) (NASA LANCE FIRMS)
Provider
NASA LANCE FIRMS
Licence
NASA open data
Vintage
daily; Satellite detection; clouds and overpass timing leave gaps
Newest at build
2026-10-13
Resolution
about 500 m grid
Uncertainty
Satellite hot-spot detections for the day shown, including gas flares and industrial heat; not a confirmed fire, an incident report or a warning.
Reached through
gibs.earthdata.nasa.gov, only after you allow the live map

Latest available

NASA GIBS / EOSDIS · ASTER GDEM (METI, NASA) · Blue Marble (NASA) · © OpenStreetMap contributors (ODbL) · Natural Earth

Loading the latest NASA imagery.

Drag to move. Ctrl or ⌘ and scroll, pinch or the buttons to zoom; hover for the values under the pointer; reset returns to the region.

Infrastructure exposure, framed on Germany.Satellite and model products as NASA publishes them, each with its own date. They are indicators, not assessments of any place.

Data: NASA GIBS · ASTER GDEM · Blue Marble · © OpenStreetMap contributors · Natural Earth · NASA EONET · U.S. Geological Survey · NASA JPL OPERA DIST-ALERTSources and licences

  • We acknowledge the use of imagery provided by services from NASA’s Global Imagery Browse Services (GIBS), part of NASA’s Earth Science Data and Information System (ESDIS). Colours redrawn from the published colour map; values averaged into hexagonal cells where shown (modified). NASA open data
  • We acknowledge the use of imagery provided by services from NASA’s Global Imagery Browse Services (GIBS), part of NASA’s Earth Science Data and Information System (ESDIS). Colours redrawn from the published colour map; values averaged into hexagonal cells where shown (modified). NASA open data
  • VIIRS Black Marble night-time lights, NASA Goddard Space Flight Center; distributed by the NASA Level-1 and Atmosphere Archive and Distribution System (LAADS DAAC); imagery via NASA GIBS. Colours redrawn from the published colour map; values averaged into hexagonal cells where shown (modified). NASA open data
  • Center for International Earth Science Information Network (CIESIN), Columbia University. 2018. Gridded Population of the World, Version 4 (GPWv4): Population Density, Revision 11. NASA Socioeconomic Data and Applications Center (SEDAC). Licensed under CC BY 4.0. Colours redrawn from the published colour map; values averaged into hexagonal cells where shown (modified). doi:10.7927/H49C6VHW. CC BY 4.0
  • VIIRS near-real-time products (flood, land surface temperature, snow cover, corrected reflectance), NASA LANCE; imagery via NASA GIBS. Colours redrawn from the published colour map; values averaged into hexagonal cells where shown (modified). NASA open data
  • MODIS land products (vegetation indices, gross primary production, land cover), NASA LP DAAC and LANCE; imagery via NASA GIBS. Colours redrawn from the published colour map; values averaged into hexagonal cells where shown (modified). NASA open data
  • NASA Fire Information for Resource Management System (FIRMS), VIIRS 375 m active fire product, NASA LANCE; vector tiles via NASA GIBS. Colours redrawn from the published colour map; values averaged into hexagonal cells where shown (modified). NASA open data
  • ASTER GDEM is a product of METI and NASA (ASTER Global Digital Elevation Model V003, NASA LP DAAC); imagery via NASA GIBS. Colours redrawn from the published colour map; values averaged into hexagonal cells where shown (modified). Cite as: NASA/METI/AIST/Japan Spacesystems and U.S./Japan ASTER Science Team (2019). ASTER Global Digital Elevation Model V003. doi:10.5067/ASTER/ASTGTM.003. NASA open data
  • Made with Natural Earth. Free vector and raster map data @ naturalearthdata.com. Public domain
  • © OpenStreetMap contributors (ODbL), via NASA GIBS (coastlines, boundaries, roads and place names). Colours redrawn from the published colour map; values averaged into hexagonal cells where shown (modified). ODbL
  • Blue Marble, NASA Earth Observatory; imagery via NASA GIBS. Colours redrawn from the published colour map; values averaged into hexagonal cells where shown (modified). NASA open data
  • Context on the globe and flat map: coastlines, boundaries, roads and place names from NASA GIBS reference layers (OpenStreetMap data, ODbL, © OpenStreetMap contributors); Blue Marble imagery as an optional base; 3D terrain and the elevation read-out from the ASTER GDEM elevation colour index (5 m to 200 m classes, exaggerated for legibility). Boundaries are drawn as published and imply no position on any territory.
  • Live events: NASA Earth Observatory Natural Event Tracker (EONET); events are indicative and keep their original source links.
  • Live: NASA EONET Events are indicative, not authority warnings.
  • Live: U.S. Geological Survey Events are indicative, not authority warnings.
  • Observed (EO): NASA JPL OPERA DIST-ALERT (contains modified Copernicus Sentinel data 2026). We acknowledge the use of imagery provided by services from NASA’s Global Imagery Browse Services (GIBS), part of NASA’s Earth Science Data and Information System (ESDIS).
  • NASA GIBS: We acknowledge the use of imagery provided by services from NASA’s Global Imagery Browse Services (GIBS), part of NASA’s Earth Science Data and Information System (ESDIS).
  • River discharge forecast, 30 days with range (GloFAS via Open-Meteo): Contains modified Copernicus Emergency Management Service information 2026; not a flood warning.
  • Weather data by Open-Meteo.com (https://open-meteo.com/), licensed under CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/).
  • Optional layers (12 sources in the layer list: live, forecast, observed and context) print their provider credit on the map and here when switched on; forecasts are model output and derived indices are estimates.

Layers and dates

  • Night-time lights, daily: VIIRS Black Marble (VNP46A2), NASA LAADS DAAC · 12 Oct 2026
  • Population density, 2020: Population: CIESIN, Columbia University, Gridded Population of the World v4.11 (2018), NASA SEDAC, CC BY 4.0 · static
  • Flood water, 3-day composite: VIIRS Global Flood Product, NASA LANCE · 14 Oct 2026
  • True colour: VIIRS NOAA-20 corrected reflectance, NASA LANCE · 13 Oct 2026
  • Land cover type (IGBP), yearly: MODIS Terra and Aqua land cover (MCD12Q1), NASA LP DAAC · 2024
  • Active fires and thermal anomalies: VIIRS NOAA-20 375 m (FIRMS), NASA LANCE FIRMS · 13 Oct 2026

04Across the domains

Process safety failures reach water, air and communities.

Process safety lessons are designed for the Global Sector Risk and Resilience series. Seveso III, ILO Convention No. 174 and the OECD Guiding Principles (third edition, 2023) set the frame; operator lessons are published only with agreement.

  • Lessons learned from incidents.
  • Natech (natural hazard triggered) accident cases.
05Twin and cascade simulator

Model industrial process safety as a system. Run the cascade.

Assembled from the Nexus Standards area profile Industry and manufacturing: the hazards it names, the systems and sectors that carry the loss, the controls that dampen it and the data that observe it. Choose the components, pick an initiating hazard and step through the cascade. The Map view places the run on an example geography with open data. Every coupling weight is a stated assumption you can change. A teaching model, not a forecast, an assessment or a certification. To model a place of your own choosing, open the full System Builder.

Hazards

  • Natech event
  • Dam failure
  • River flood (set off downstream)
  • Flash flood (set off downstream)
  • Mass displacement (set off downstream)
  • Chemical spill or leak (set off downstream)
  • Emergency-response overload (set off downstream)
  • Widespread power outage (set off downstream)
  • Water supply shortfall (set off downstream)
  • Toxic gas release (set off downstream)
  • Industrial fire (set off downstream)

Controls

  • NS-0 Constitution and principles
  • NS-9 Contextual UNIs (deployments, instances, programme instances)
  • NS-11 Verification and monitoring (evidence, attestations, zero-trust conformance observation)
  • NS-12 Software, model and AI/ML artefacts (supply chain, model cards, dataset sheets)
  • NRS-H60 Hazard family: Supply-chain and flow disruption (NHS-1 sys.supply-chain)
  • NRS-H50 Hazard family: Industrial and process accidents (NHS-1 infra.industrial)
  • NRS-H109 Hazard family: Energy-transition technology failures (NHS-1 tech.energy-transition)
  • NRS-X10 Chemical, industrial, nuclear and radiological safety
  • NRS-H54 Hazard family: Signal and platform disruption (NHS-1 cyber.platform)
  • NRS-K14 Domain pack profile: Manufacturing industrial (DOMAIN-014)

Observation

  • eMARS Major Accident Reporting System (listed for reference)
  • World Development Indicators (listed for reference)
  • ILOSTAT (listed for reference)
  • Manufacturing value added as a proportion of GDP and per capita
  • CO2 emission per unit of value added
  • Manufacturing, value added (% of GDP)
  • Direct economic loss to all other damaged or destroyed productive assets attributed to disasters

Example geography

  • The Strait of Malacca: 227 hexagonal cells
  • Night lights tonight, outages (VIIRS Day/Night Band), NASA GIBS
  • Surface water through cloud, 30 m (OPERA DSWx-S1 radar), NASA GIBS
  • Rain rate, last half hour (IMERG), NASA GIBS
  • Surface soil moisture (SMAP), NASA GIBS
06Indicators

What is measured, and how well.

Each indicator carries its unit, its cadence, the kind of source behind it and the evidence label a value would carry. No values are shown: a programme supplies them under its own authority.

IndicatorUnitCadenceSource typeLabel
Process safety events by tiercount per million hours workedannualOperator reporting under API RP 754 or similarREPORTED
Major accidents notifiedcountannualeMARS and national databasesPublished statistics
Overdue safety-critical maintenancecountmonthlyMaintenance systemsOBSERVED
Upper-tier major hazard establishmentscountper updateSeveso registersPublished statistics
Safety instrumented functions tested on schedulepercentannualTest recordsOBSERVED
Population within hazard zones of major sitespeopleper assessmentLand-use planning analysesESTIMATED
07Methods and evidence

How industrial process safety is modelled, measured and tested.

The model, its assumptions, its data and its uncertainty, in the form a scientist or engineer would check. Structures follow published methods. The values drawn are illustrative, not findings.

System model

The couplings between the systems in industrial process safety: signs of influence, a reinforcing and a balancing loop, and cross-links where stress jumps.

++−++IndustryWorkTradeCommunitiesEconomyR reinforcingB balancing
Causal loop diagram from the page’s systems; signs show the direction of influence. Illustrative structure for a system dynamics or network model, not estimated couplings.
FAIR guiding principles · GO FAIR and FORCE11W3C PROV · World Wide Web ConsortiumGuidance on consistent treatment of uncertainties · IPCCCEOS Analysis Ready Data · Committee on Earth Observation Satellites
08Sources

Where the evidence comes from.

Named public datasets and institutional records, each with its licence class. Sources by agreement are used only under their terms and never republished.

SourceWhat it givesLicence class
eMARS major accident reporting system (European Commission JRC)Reported major accidents and lessonsPublic, EU terms
US Chemical Safety Board investigation reportsDetailed investigations of chemical accidentsPublic domain, US government
Seveso establishment registers (eSPIRS)Major hazard establishments in EuropePublic, EU terms
CCPS process safety resourcesIndustry guidance and metricsLicence per publication
OECD chemical accidents programmeGuidance and lessons learnedPublic, OECD terms
09Decisions

Who decides, and what the evidence serves.

Advanced Industry and Robotics prepares evidence. The decisions below are taken by the authorities named, under their own rules, and never by the platform.

Who decidesThe questionEvidence this page serves
Operators of hazardous facilitiesWhich barriers and maintenance to prioritiseBarrier reviews; event data
Major hazard regulatorsWhere to inspect and what to requireAccident and inspection evidence
Land-use planners and emergency servicesHow to plan around major sitesHazard zone and population evidence

Outputs this topic produces

  • Accident lesson syntheses from public investigations
  • Natural-hazard-triggered accident assessments
  • Barrier management reviews
  • Evidence notes for land-use planning near major sites
10Core questions

What experts ask.

  1. 01

    What could go wrong?

    Which loss-of-containment scenarios a facility faces and how severe they could be.

  2. 02

    Which barriers prevent them?

    The layers of protection, from design and control to relief systems and emergency response.

  3. 03

    Are the barriers working?

    How degradation, maintenance backlogs and change erode protection over time.

  4. 04

    Who is at risk beyond the site?

    How land-use planning and emergency arrangements protect neighbouring communities.

11Mechanisms

What drives the risk.

Major accidents rarely have a single cause. Investigations repeatedly find combinations of design flaws, failed or bypassed safeguards, poor management of change, production pressure and missed warnings. The image of aligned holes in successive barriers captures how latent weaknesses combine.

Low personal injury rates do not indicate good process safety. Organisations that measure only slips and trips can miss the degradation of critical safeguards. Leading indicators of barrier health are needed.

Natural hazards can trigger industrial accidents. Floods, earthquakes, extreme heat and lightning can damage containment and disable safeguards at the moment emergency services are stretched.

Transitions bring new hazards. Hydrogen, ammonia, batteries and new chemicals used in the energy transition have properties that existing practice may not fully address.

12Methods and limits

How evidence is gathered, and where it stops.

Method or dataWhat it showsIts limit
Hazard identification studiesCredible accident scenariosDepend on imagination and expertise
Consequence modellingExtent of fires, blasts and toxic cloudsSensitive to weather and release assumptions
Layer of protection analysisAdequacy of safeguardsUses generic failure data
Accident investigationRoot causes of past eventsLessons often not transferred across firms
14Where this page’s references

Where this page’s references lead.

The bodies and documents this page is read against. Status and editions change; each link goes to the issuing body.

15Questions

Questions and answers.

What is process safety?
The management of hazards in facilities that handle dangerous substances, to prevent fires, explosions and toxic releases through design, operation and maintenance.
What is the Seveso Directive?
The European Union law requiring operators of sites with dangerous substances to prevent major accidents and limit their consequences, with duties scaled by quantity.
What is a Natech accident?
A technological accident, such as a chemical release, triggered by a natural hazard like a flood or earthquake.
Does the platform investigate accidents?
No. Investigations are carried out by competent authorities and operators. The platform studies published findings for lessons.
Why distinguish process safety from occupational safety?
Because the causes and indicators differ. Major accidents can occur at sites with very low everyday injury rates.
Can a site share incident data with the platform?
Research designs protect confidential information, and sharing is voluntary. Write to the research collaboration form.
ReportsContribute

Contribute evidence from this page.

Reports is the Consortium’s quarterly publication. What you know about this subject can become evidence, a case or a correction in the next edition, credited to you and published under CC BY 4.0 where it is your own work.

GCRIAdvanced Industry and RoboticsExponential TechnologyGlobal Sector Risk and Resilience
Advanced Industry and Robotics

Bring a method, a dataset or a question.

Information and enquiries are open today. An enquiry receives a reference and names the next step; applications, payments, compute allocations and registrations open only when their team, terms and review capacity exist.