Add to homescreen

If you want to add this app to home screen tap and then ‘Add to Home Screen’.

Tank overfill due to high level alarm miscalculation

  • What happened?

    During a pipeline delivery, an operator noticed that the secondary seal on the external floating roof of a diesel tank was exposed above the tank shell height.

    The high-level alarm had not activated.

    The pipeline delivery was immediately stopped and the tank was isolated.

    Near miss: tank overflow could have resulted in product release, fire and explosion.

    The outdoor diesel tank with exposed roof seal.
  • Why did it happen?

    Level alarms had recently been re-calculated, but the thickness of the external floating roof and seals were not accounted for.

    The new normal fill level was set 3 feet above the old normal fill level .

    The tank level did not reach the new alarm set point, so the alarm did not activate.

    A diagram of the inside of the tank with level alarm points.
  • What did they learn?

    Accurate calculation of level alarm settings is critical to operation integrity.

    Compare new vs. old settings.

    Significant changes should be carefully reviewed and managed with a robust process.

    Do not let other priorities stand in the way of reviewing critical process changes.

    What learn - icon
  • Ask yourself or your crew

    How can something like this happen here?

    What other actions could have been taken?

    What could have been the outcome of this incident?

    How do we know that high level alarms are working?

    Do we have any standing/disabled alarms?  What should we do about them?

    Ask your crew - icon
Published on 10/04/19 4649 Views

During a pipeline delivery, an operator noticed that the secondary seal on the external floating roof of a diesel tank was exposed above the tank shell height. The high-level alarm had not activated.