Plain-English definitions for the terms an operator hears on shift. Free to use, free to share, written by someone who ran the board. No login, no ads.
Educational use only. Not compliance guidance. Full notice.
Free reference, expanding. Suggest a term via For Teams.
The vocabulary of what the controller does and what the operator does with it.
The current measured value of the controlled process. Flow, pressure, level, or temperature, depending on the loop. It is whatever the transmitter is reading right now.
PV is what you see on the gauge or the faceplate. The controller compares PV to SP, builds an error, and drives the output to close the gap. If PV looks wrong, suspect the transmitter before suspecting reality.
See also: SP, OP, PI controller
The target value the controller is trying to drive the PV to. Operator-adjustable in AUTO and CAS.
Changing SP is the safest move available to an operator: the controller takes the change and works the output to get there. In MAN mode, SP is just a number on the screen; it does nothing until you go back to AUTO.
The signal the controller sends to the final element. Usually a control valve position, expressed 0-100 %.
In AUTO the controller computes OP. In MAN the operator types OP directly. Output saturates at the configured limits, so if you hit 100 % output and PV still will not move, you have run out of valve.
See also: PV, control valve, PI controller
The controller runs its PI or PID algorithm on the SP-PV error and drives the output to close the gap.
Normal operating mode for most loops. The first move on a stable, in-spec process should usually be AUTO with a small SP nudge, not MAN.
See also: MAN, CAS, bumpless transfer
The operator drives the controller output directly. The PI algorithm is suspended.
Used during startup, troubleshooting, or when the process is doing something the controller cannot handle. A loop left in MAN for a long shift is a hand-off note for the next operator.
See also: AUTO, bumpless transfer
The controller takes its setpoint from another (master) controller, not from the operator.
Common pattern: a temperature controller sends its output as the setpoint to a downstream flow controller on the heating medium. Cascades let you control a slow variable (temperature) by manipulating a fast one (flow).
See also: AUTO, PI controller
A control algorithm that combines a proportional response to current error with an integral that removes long-term offset. The most common controller in process plants.
Tuning is the art: high gain reacts fast but oscillates, slow integral chases setpoint without overshoot but takes forever. PID adds a derivative term that anticipates rate of change; most loops do not need it.
See also: bumpless transfer, tuning
Switching a controller between AUTO and MAN (or between any two modes) without the output jumping.
Implemented by seeding the controller's internal state from the current output when the mode flips. Without it, switching to AUTO can cause a "kick" as the controller catches up to where it thinks it should be.
Adjusting a controller's gain, reset (integral time), and rate (derivative time) so the loop responds the way you want.
Field tuning is usually closed-loop step-test and observe. A loop that hunts, overshoots, or rings has too much gain or too little reset. A loop that takes forever to find setpoint has the opposite problem.
See also: PI controller, deadband
A band around setpoint within which the controller takes no action. Used to prevent valve hunting on noisy signals.
Wider deadband = quieter valve, sloppier control. Narrow deadband = tighter control, more valve wear. Pick based on how tight the spec is, not how clean the chart looks.
See also: tuning
A dedicated control loop that protects a centrifugal compressor from surge by opening a recycle valve when the compressor approaches its surge line. Discharge gas is dumped back to suction, raising flow to keep the machine out of the surge region.
Anti-surge usually runs on its own controller (often a dedicated UCP, Unit Control Panel) independent of the process DCS. Surge is fast and destructive; the anti-surge controller must react in milliseconds. Operators see the recycle valve open during low-flow startup and during process upsets; trying to override the anti-surge loop is how compressors get destroyed.
See also: compressor, compressor surge
Source: API Standard 617 [ref 44]
How instruments and control loops get named on a P&ID. ISA-5.1 is the canonical reference.
A controller that measures and controls flow. The "I" means it has a local indicator; the "C" means it can control (output to a valve).
FIC-101 reads as "flow indicating controller, loop 101." The numeric suffix is plant-specific. Pair it with FCV-101 (the control valve it drives) and FT-101 (the transmitter feeding it).
A controller that measures and controls pressure. Drives a PCV (pressure control valve) or vent path.
Tower overhead pressure, separator pressure, and compressor discharge are common PIC loops. A PIC that saturates open and still cannot hold pressure means vapor production is outrunning the vent path.
See also: FIC, FCV / PCV / LCV / TCV
A controller that measures and controls liquid level in a vessel. Drives an LCV (level control valve) on the inlet or outlet.
Separator and tower bottoms levels are the classic LIC duties. Level loops are slow and prone to overshoot; tune them gentle.
See also: FCV / PCV / LCV / TCV, separator
A controller that measures and controls temperature. Drives a TCV or, more commonly, cascades to a flow loop on the heating or cooling medium.
Reboiler outlet temperature is a classic TIC duty. Temperature is slow; cascading TIC to a flow loop on the hot medium is the standard way to make it behave.
Control valves named for the loop they belong to. FCV = flow, PCV = pressure, LCV = level, TCV = temperature.
The number suffix matches the controller (FCV-101 is driven by FIC-101). Look up the valve's fail position on the P&ID before changing it manually: fail-open valves move when the air is removed, fail-closed valves stay shut.
See also: FIC, control valve
The industry standard that defines how instruments and control loops are drawn on P&IDs. Specifies tag bubbles, line types, and the letter codes (F = flow, P = pressure, T = temperature, L = level, I = indicate, C = control).
Every P&ID you read in the US oil and gas industry follows ISA-5.1. Learning it once means you can read any plant's prints.
See also: FIC, control valve
Source: ISA-5.1-2009 Instrumentation Symbols and Identification [ref 10]
What the boxes on the P&ID actually do.
A pressure vessel that takes a mixed gas-liquid (and sometimes water) stream and separates the phases by letting them slow down enough for gravity to do the work.
Two-phase separators split gas from liquid. Three-phase separators add a water leg. Sizing is set by residence time and how much liquid you expect at peak. Pig arrivals can overwhelm a separator that is sized for steady flow only.
See also: KO drum, pig arrival, LIC
A vessel placed in a gas line to knock out (separate) any liquid carried by the gas. Smaller and simpler than a process separator; its job is downstream protection, not yield.
Compressor suction KO drums are the most common: liquid in a compressor inlet is a wreck-the-machinery event. The drum's level alarm is the early warning.
See also: separator, compressor
A heat exchanger that boils part of a tower's bottoms stream and sends the vapor back up the column. Provides the heat duty that drives the separation.
Kettle reboilers have a vapor space in the shell and feed via natural circulation. Thermosiphon reboilers loop liquid back to the tower through density-driven flow. On stabilizers, reboiler duty is the operator's main knob for RVP control.
See also: packed tower, RVP, TIC
A vertical vessel where vapor rises and liquid falls, exchanging heat and mass at each stage so that the overhead and bottoms streams have different compositions. Packed columns use structured or random packing; trayed columns use perforated plates.
Stabilizers and demethanizers are columns. Flooding (liquid backing up) and weeping (liquid falling through trays instead of across them) are the two failure modes. Differential pressure across the column is the first thing that moves when either starts.
See also: reboiler, demethanizer, flooding
A bed of synthetic zeolite that adsorbs water (and sometimes CO2, H2S) from a gas stream. Used upstream of cryogenic equipment where any moisture would freeze and form hydrates.
Run in a 3-bed cycle: one adsorbing, one regenerating with hot gas to drive water off, one cooling. The outlet moisture analyzer is the lifeline; breakthrough means switch beds immediately or risk an ice plug in the cold box.
See also: demethanizer
Source: GPSA Engineering Data Book §20 (Dehydration) [ref 22]
A cold tower that splits methane (overhead) from ethane-plus NGLs (bottoms) in a cryogenic gas plant.
Operates near minus 100 to minus 150 °F. Feed enters cold; reflux is internally generated. The recovery target is ethane recovery percentage, which trades against methane carryover in the bottoms.
See also: mol sieve, packed tower
Source: GPSA Engineering Data Book §16 (Hydrocarbon Recovery) [ref 22]
A heat exchanger that uses ambient air pulled or pushed across finned tubes by overhead fans. Used where cooling water is impractical.
Ambient-temperature dependent. A summer afternoon will limit your achievable cooling; a January morning will overcool and may need fan staging or louver control. Lots of moving fans means lots of vibration-monitor alarms.
See also: reboiler
A combustion-fired heat exchanger. Burns fuel gas to heat a process fluid (often hot oil, sometimes a process stream directly).
Hot oil heaters on a stabilizer cascade are critical: lose the heater, lose the reboiler, watch RVP drift off-spec within minutes. Modern fired heaters have a Burner Management System (BMS) that handles light-off and trip logic.
A spring-loaded valve that opens automatically when system pressure exceeds the PSV's set pressure. Vents to flare or atmosphere depending on service.
The last line of defense against vessel overpressure. PSVs are sized, certified, and inspected on a fixed cycle (usually 5 years). A leaking PSV ("simmering") is a maintenance event, not a normal condition.
See also: ESD
Source: API Standard 520, API 521 [refs 15, 16]
A valve whose position is set by a controller output, not by an operator's hand. Modulates flow continuously between 0 and 100 % open.
Different trim types (linear, equal-percentage, quick-opening) match different services. Fail position matters: a fail-closed feed valve and a fail-open feed valve behave opposite when the plant trips.
See also: FCV / PCV / LCV / TCV, OP
Source: ISA-75 / IEC 60534 [ref 17]
A machine that raises gas pressure. Reciprocating compressors use pistons in cylinders; centrifugal compressors spin impellers. Both rely on driver power (electric, gas-engine, or steam turbine).
Compressors trip on high discharge temperature, high suction liquid, low oil pressure, or vibration. A trip is rarely the compressor's fault; trace what changed upstream that pushed it over a limit.
See also: KO drum
A safety-instrumented system that manages light-off, flame supervision, and trip logic on a fired heater or boiler.
Independent of the process DCS. A BMS will trip a heater on flame loss, low fuel-gas pressure, low combustion air, or loss of pilot regardless of what the DCS thinks. Trying to defeat a BMS interlock is how people get hurt and operators get fired.
See also: fired heater, ESD
Source: NFPA 87 (fluid heaters), NFPA 85, NFPA 86 [refs 50, 18, 19]
A high-speed turbine that drops gas pressure and temperature simultaneously by extracting work from the expanding stream. The work comes out the shaft and is typically loaded back into a coupled compressor on the residue gas. Heart of a modern cryogenic gas plant.
The expander is what gets the inlet gas cold enough for ethane to drop out in the demethanizer. Operators watch inlet temperature, suction pressure, speed, vibration, and surge margin. Lose the expander and the plant either runs in J-T mode with reduced ethane recovery or shuts in.
See also: J-T valve, cold box, demethanizer, compressor surge
Source: GPSA Engineering Data Book §16 [ref 22]
A throttling valve that drops gas pressure and, through the Joule-Thomson effect, drops temperature. No rotating parts and no work extraction, just a controlled pressure cut.
The J-T path is the expander's understudy. During startup, expander trip, or low-flow operation, the J-T valve takes over and the plant runs in J-T mode with reduced ethane recovery. Swapping the plant between expander and J-T is a real operator skill, not a button press.
See also: turboexpander, cold box
Source: GPSA Engineering Data Book §16 [ref 22]
An insulated enclosure containing the brazed-aluminum heat exchangers that recover refrigeration from the cold residue gas and pre-cool the incoming feed. The structural heart of a cryogenic plant's heat-exchange network.
Operators do not normally touch what is inside the cold box. They manage what goes in. Water carryover from a failed mol sieve forms ice plugs inside the brazed aluminum that take days of warm-up to clear. "Ice in the cold box" is the upset that ends the day.
See also: mol sieve, turboexpander, hydrate
Source: GPSA Engineering Data Book §16 [ref 22]
A vertical absorber tower where sour gas containing H2S, CO2, or both flows up through descending lean amine solvent. The amine chemically binds the acid gases; sweet gas exits the top, rich amine exits the bottom.
Contactor pressure and temperature set the absorption efficiency. Foaming is the most common upset: contamination of the amine drops contact efficiency, slug-carries amine overhead, and H2S breaks through to downstream equipment. Anti-foam injection is the operator's first move.
See also: rich/lean amine, H2S, sour gas
Source: GPSA Engineering Data Book §21 (Hydrocarbon Treating) [ref 22]
A vertical absorber tower where wet gas flows up against descending lean triethylene glycol (TEG). The glycol absorbs water from the gas; dry gas exits the top, rich (wet) TEG exits the bottom and goes to the reboiler for regeneration.
Glycol dehydration is the cheaper alternative to mol sieve, used wherever the downstream process can tolerate a higher water dewpoint. Lean TEG concentration is the operator's primary tuning knob: 99.0 % is normal, 99.5 % is achievable with stripping gas, and the line between them is reboiler temperature.
Source: GPSA Engineering Data Book §20 (Dehydration) [ref 22]
ISA-18.2 is the canonical reference. Plain-language summary below.
Hi is the lower-priority high alarm, signaling that the PV has moved out of normal but the situation is still manageable. HiHi is the higher-priority alarm, signaling that the PV has crossed into the range where automated protective action may fire.
A Hi alarm asks for operator attention. A HiHi alarm demands operator action. The same priority pair exists on the low side as Lo / LoLo.
Source: ISA-18.2-2016 [ref 8]
The low-side mirror of Hi / HiHi. Lo is operator-attention, LoLo is operator-action-required and usually associated with a trip threshold.
A Lo level on a separator means catch it now before pump cavitation. A LoLo means the pump is about to trip or already has.
Source: ISA-18.2-2016 [ref 8]
The operator action that confirms an alarm has been seen. ACK silences the audible horn and changes the alarm's appearance (often from blinking to steady) but does not clear the alarm itself; the underlying condition still needs to resolve.
ACK is a witnessing action, not a fixing action. Acknowledging alarms without diagnosing them is how alarm floods become normal.
See also: alarm flood
Source: ISA-18.2-2016 [ref 8]
A burst of alarms arriving too fast for an operator to process. ISA-18.2 defines a flood as more than 10 alarms in 10 minutes.
Almost always caused by a single root upset triggering dozens of dependent alarms. The first alarm matters; the rest are echoes. A well-designed alarm system suppresses echoes during the upset and re-enables them on recovery.
See also: ACK, alarm rationalization
Source: ISA-18.2-2016 [ref 8]
A formal review process that decides whether each alarm should exist, what priority it deserves, and what action the operator should take when it fires.
Most plants discover during rationalization that 30 to 50 % of their configured alarms are noise. ISA-18.2 sets the methodology. A rationalized alarm has a documented "what does this mean and what do I do" entry that the operator can pull up at the console.
See also: ISA-18.2
Source: ISA-18.2-2016 [ref 8]
The industry standard for designing, operating, and maintaining alarm systems in process plants. Covers philosophy, rationalization, design, implementation, operation, monitoring, and management of change.
Cited heavily in incident investigations after process upsets. An operator does not need to memorize the standard, but the alarm system itself should be ISA-18.2 compliant and that work should already be done before they sit down at the board.
See also: alarm rationalization, ISA-101
Source: ISA-18.2-2016 Management of Alarm Systems for the Process Industries [ref 8]
The industry standard for designing HMI graphics in process plants. Defines color discipline (color = state, not decoration), trend display, navigation, and operator situational awareness principles.
If everything on a screen is colored, nothing stands out. ISA-101 screens use gray as the default and reserve color for alarm states. Cold Creek's simulator follows ISA-101.
See also: ISA-18.2
Source: ISA-101.01-2015 Human-Machine Interfaces for Process Automation Systems [ref 9]
The vocabulary of keeping people and equipment from getting hurt.
The OSHA standard governing facilities that handle highly hazardous chemicals above the threshold quantities in Appendix A (10,000 lbs of flammable liquids or gases in a single process is the most common trigger).
PSM has 14 elements: employee participation, process safety information, PHA, operating procedures, training, contractors, pre-startup safety review, mechanical integrity, hot work, MOC, incident investigation, emergency planning, compliance audits, trade secrets. Pass a PSM audit and you can run; fail one and you cannot.
Source: 29 CFR 1910.119 (OSHA) [ref 1]
The PSM element that requires every change to a process (other than replacement-in-kind) to be reviewed for hazards before implementation. Covers technical, procedural, and organizational changes.
"Replacement in kind" means a like-for-like swap that introduces no new hazard. Everything else is an MOC: changing a relief valve set point, swapping in a different model of pump, raising the SP on a pressure controller permanently. Skipping MOC is how plants blow up.
See also: PSM
Source: 29 CFR 1910.119(l) (OSHA) [ref 1]
The procedure for isolating energy sources before maintenance work. Each person working on the equipment hangs their own lock; the lock can only be removed by that person.
Every operator's first introduction to safety culture. The rule is "your lock, your work, your key." Removing someone else's lock is a firing offense at most plants.
See also: PSM
Source: 29 CFR 1910.147 (OSHA) [ref 2]
The federal regulation requiring pipeline operating personnel to be qualified on covered tasks. Part 192 covers natural gas transmission and distribution; Part 195 covers hazardous liquid pipelines.
"Qualified" means evaluated and judged able to perform the task and recognize and respond to abnormal operating conditions. Plants and pipelines maintain a covered task list and a qualification record for each operator.
See also: PSM
Source: 49 CFR Part 192 Subpart N, Part 195 Subpart G [refs 3, 4]
An automatic safety action that takes a process or unit to a safe state on detection of a hazardous condition. Implemented in a Safety Instrumented System separate from the DCS.
Operators do not "manage" an ESD; they witness it, secure what they can, and report. Trying to bypass or reset an ESD before the cause is understood is the kind of action that leads to investigations.
Source: ISA-84 / IEC 61511 [ref 5]
The concentration range in which a fuel-air mixture will ignite. Below LEL: too lean to burn. Above UEL: too rich. Between: explosive.
Gas detectors read in % of LEL. 10 % LEL is typically the alarm; 25 % is typically the trip. Methane LEL is roughly 5 % by volume in air, UEL roughly 15 %. Stay below 10 % LEL at all times.
See also: H2S
Source: NFPA 497 [ref 12]
A colorless, toxic, flammable gas that occurs naturally in some natural gas reservoirs and refinery streams. Smells like rotten eggs at low concentrations and overwhelms the sense of smell at high ones.
PEL is 10 ppm (8-hour); IDLH is 100 ppm. A single breath above 700 ppm is lethal. Sour gas service means H2S is present; amine treating is the standard way to remove it before processing.
See also: sour / sweet gas
Source: OSHA 1910.1000 Table Z-1, NIOSH IDLH for H2S [refs 6, 7]
Sour gas contains H2S above pipeline spec (typically 4 ppm). Sweet gas is below spec. The terms apply to both raw inlet streams and finished products.
Sour-service equipment uses different metallurgy than sweet service. Misrouting sour gas to sweet-service piping is a slow-motion failure waiting to happen.
See also: H2S
A systematic review of a process to identify hazards, assess their consequences, and verify that adequate safeguards exist. Required under PSM for every covered process and revalidated at least every 5 years.
Most common technique is HAZOP. PHAs produce a list of recommendations the facility tracks to completion. A plant that has open PHA recommendations from 5 years ago has a PSM audit finding waiting to happen.
Source: 29 CFR 1910.119(e) [ref 1]
A structured PHA technique that walks through a process node by node, applying guide words (no, more, less, reverse, as well as, part of, other than) to each design intent to surface deviations and consequences.
Slow but thorough. A typical gas plant HAZOP is days of meeting room with engineering, operations, maintenance, and a facilitator. The output is a node-by-node worksheet that survives audits.
Source: IEC 61882 [ref 36]
A semi-quantitative PHA technique that estimates the frequency of a specific hazardous consequence by combining the frequency of the initiating event with the probability of failure on demand (PFD) of each independent protection layer.
Where HAZOP identifies hazards qualitatively, LOPA puts numbers on them and tells you whether your existing protection layers add up to acceptable risk. Often used to justify or size SIL ratings on safety functions.
A protective device or system credited in a LOPA as reducing the frequency of a hazardous consequence. Must be independent of the initiating cause and of other IPLs claimed in the same analysis, and auditable (you can prove it works).
A relief valve is an IPL. A high-high level trip is an IPL. Two-out-of-three voting on a single transmitter is not (the transmitter is the common cause). LOPA discipline forces honesty about what truly counts.
A specific safety function implemented in a Safety Instrumented System (SIS): a sensor, a logic solver, and a final element that together take the process to a safe state when a defined hazard threshold is reached.
A high-high pressure trip that closes the inlet valve is a SIF. Each SIF has a SIL rating that defines how reliable it must be. SIFs are tested on a defined interval (proof testing) to verify the as-found reliability still meets the design SIL.
Source: ISA-84 / IEC 61511 [ref 5]
A discrete rating (SIL 1, 2, 3, or 4) describing the required risk reduction of a Safety Instrumented Function. SIL 1 = 10x to 100x reduction; SIL 3 = 1,000x to 10,000x; SIL 4 is rare in process plants.
Most process-industry SIFs are SIL 1 or SIL 2. SIL 3 starts to require redundant sensors, redundant logic, and complex maintenance discipline. The SIL is determined by LOPA, then proven by the SIF design.
Source: ISA-84 / IEC 61511 [ref 5]
PEL (Permissible Exposure Limit, 8-hour time-weighted average; OSHA enforcement value), IDLH (Immediately Dangerous to Life or Health; NIOSH; the concentration at which a 30-minute exposure could prevent self-rescue), STEL (Short-Term Exposure Limit; 15-minute TWA), TWA (Time-Weighted Average over a defined exposure period).
For H2S: PEL 10 ppm, STEL 15 ppm, IDLH 100 ppm. For benzene: PEL 1 ppm, STEL 5 ppm. Field gas monitors are typically configured with alarm thresholds tied to these limits. Knowing them by heart for your service is part of qualifying as an operator.
Source: OSHA 1910.1000 Table Z-1, NIOSH IDLH [refs 6, 7]
A written authorization required before any work that produces flame, sparks, or heat sufficient to ignite flammable materials (welding, cutting, grinding, brazing, soldering) inside a covered area. Requires gas testing, fire watch, isolation of nearby ignition sources.
PSM element. The permit names who can work, where, for how long, under what gas-test conditions, and who is on fire watch. Letting the permit expire while work continues is one of the most common PSM audit findings.
Source: 29 CFR 1910.252, 29 CFR 1910.119(k) [refs 37, 1]
Entry into any enclosed space with limited means of access and egress that is not designed for continuous occupancy. Permit-required if the space contains or could contain a hazardous atmosphere, engulfment hazard, configuration hazard, or other recognized serious hazard.
Common confined spaces in a gas plant: separator interiors during inspection, manways into towers, sumps, large pipe runs being purged. The entry crew has an attendant outside, continuous gas monitoring inside, rescue procedures pre-staged. Never enter alone.
Source: 29 CFR 1910.146 [ref 38]
An optical sensor that detects the radiation signature of an open flame. UV detectors see ultraviolet emission, IR detectors see infrared, multi-spectrum detectors combine bands to reject false positives (sun, welding, hot equipment).
Common at fired heaters (verifies flame is present), on flare stacks (verifies pilot is lit), at compressor stations, in process units around high-fire-load equipment. False trips from sunlight reflecting off a wet pipe are the operator's least favorite alarm.
See also: BMS, fired heater
Source: NFPA 72 [ref 39]
A catastrophic failure mode of a pressurized vessel containing a liquid above its atmospheric boiling point. When the vessel fails (often from fire impingement weakening the shell), the liquid flashes to vapor instantly, and the vapor cloud may ignite into a fireball.
The reason flare-impingement firewater deluge exists on LPG and propane vessels. A BLEVE creates a shrapnel field that has killed firefighters at well-documented distances. The defense is to keep the vessel cool with water spray until the fuel source is isolated.
A substance that ignites spontaneously in air at or below 130 °F (54 °C). In a gas plant, the practical concern is iron sulfide (FeS) scale that forms inside sour-service equipment from H2S corrosion. When the equipment is opened to air, the FeS can self-ignite.
Why sour-service vessels are kept wet or inerted before opening, and why turnaround procedures include "wash and steam" or controlled passivation before maintenance crews go inside. An operator turning over to maintenance for a sour-service entry should know whether the vessel has been treated.
See also: H2S, sour / sweet gas, inerting
Source: API 2217A [ref 41]
Displacing the oxygen in a vessel or piping with an inert gas (almost always nitrogen) so that any hydrocarbon left inside cannot form a flammable mixture. Used before maintenance entry, before steam-out, and during purge-to-flare evolutions.
Verified by gas testing at multiple sample points. The target is usually less than 4 % oxygen by volume (well below LEL for any hydrocarbon). Inerting failures kill people; gas-test before declaring inert and gas-test again before entry.
See also: confined space entry, pyrophoric, LEL / UEL
A respirator with its own portable compressed-air supply (typically 30 to 60 minutes of breathing time) that allows the wearer to work in atmospheres immediately dangerous to life or health.
The escape SCBA in a control room is for getting out, not for going in. Entry-rated SCBAs are stored at unit boundaries for rescue and emergency response. Fit-testing, training, and pressure-checks are annual minimums under OSHA 1910.134.
See also: confined space entry, H2S
Source: 29 CFR 1910.134 [ref 42]
A group of aromatic hydrocarbons that show up as trace contaminants in natural gas and condensate streams. Benzene is the most acutely toxic and is regulated separately by OSHA at 1 ppm PEL.
BTEX is the reason produced-water tanks and amine units get special venting and air-permit attention. Operators in BTEX-handling service have additional medical surveillance and respiratory protection requirements.
See also: PEL / IDLH / STEL
Source: 29 CFR 1910.1028 (Benzene) [ref 43]
The PSM requirement to consult with employees and their representatives on the conduct and development of PHAs and other PSM elements. Employees and contractors must have access to PSM-related documents.
In practice: operators sit on PHA teams, sign off on procedure revisions, and have access to the unit's PHA report and MOC log. A plant that runs PHAs without an operator in the room has a finding waiting to happen.
Source: 29 CFR 1910.119(c) [ref 1]
The PSM element requiring documented information on the chemicals (hazards, SDS), the technology (block flows, process chemistry, safe upper/lower limits), and the equipment (materials of construction, P&IDs, electrical classification, relief system design) of every covered process.
PSI is the package an incoming engineer or fresh PHA team reads to understand the unit. Out-of-date PSI is one of the most common PSM audit findings. Operators contribute by flagging when a field walkdown does not match the P&ID.
Source: 29 CFR 1910.119(d) [ref 1]
The PSM element requiring written procedures that cover every operating phase: initial startup, normal operations, temporary operations, emergency shutdown, emergency operations, normal shutdown, and startup after turnaround. Procedures must address safety limits, consequences of deviation, and steps required to correct or avoid deviation. They must be certified annually as current and accurate.
The procedure binder at the console is the operator's authoritative reference. It is also the document an investigator will pull first after any incident. The hardest part is the gap between written procedure and how the unit actually runs. Procedures drift the moment after they are signed: a control loop gets retuned, a setpoint changes, a startup step gets done differently because the original way did not work. If those changes never make it back into the procedure, the binder is wrong and the next operator who follows it strictly will be the one in trouble. "We don't do it that way anymore" said about a current procedure is the most common PSM audit finding in the industry.
Source: 29 CFR 1910.119(f) [ref 1]
The PSM element requiring initial training of each operator on the process overview, operating procedures, and emergency procedures before assignment, plus refresher training at least every 3 years (more often if the employer determines necessary). Training must be documented, and operator competence in performing the duties must be verified before independent work.
Training records are auditable, and a missing or expired record is the kind of paperwork finding that gets cited even when the operator clearly knows what they are doing. Each operator's file shows initial qualification on each unit, demonstrated competency, and refresher dates. The gap most plants fight is between "trained" and "ready" — the regulation lets a plant clear someone after a documented training and competency check, but staffing pressure can turn that check into a rubber stamp. PSM training is distinct from PHMSA OQ; a plant in pipeline service maintains both, with separate covered-task lists and separate qualification records.
See also: PSM, OQ, Operating Procedures
Source: 29 CFR 1910.119(g) [ref 1]
The PSM element requiring the host facility to assess contractor safety performance, inform contractors of known hazards, and oversee contractor work within the PSM-covered process. Contractors must train their employees in safe work practices and applicable emergency procedures.
Major turnarounds, plant-wide maintenance days, and projects pull in dozens of contractor crews. The PSM contractor element is what keeps the unfamiliar boots from walking past your LOTO without knowing what they are walking into.
Source: 29 CFR 1910.119(h) [ref 1]
The PSM element gating startup of a new or modified covered process. Confirms construction matches design, safety equipment is in place, operating procedures are current, training is complete, and recommendations from the PHA are resolved.
Operators sit on PSSR teams and field-walk the unit with the checklist. A PSSR is the last gate before introducing hydrocarbon. Skipping or rubber-stamping a PSSR after a major change is one of the highest-consequence PSM audit findings.
Source: 29 CFR 1910.119(i) [ref 1]
The PSM element requiring written procedures, qualified personnel, and a documented inspection and testing program for critical equipment in covered processes: pressure vessels, storage tanks, piping systems, relief and vent systems, emergency shutdown systems, controls, and pumps. Inspections and tests follow recognized and generally accepted good engineering practices (API 510 for vessels, API 570 for piping, API 653 for tanks, ASME PCC-2 for repairs). Findings drive corrective action before continued service.
"MI critical" is a designation operators see in CMMS work orders and on equipment files. Inspection intervals are set by the inspector based on remaining-life calculations, not by the operating crew. Operators contribute to MI by flagging conditions a thickness reading will not catch: leak history, vibration changes, packing weep, audible bearing changes, anything that says equipment is no longer behaving like it used to. Bypassing or deferring MI inspections is how slow-developing failures (corrosion under insulation, vessel wall thinning, relief valve weep, gasket creep) become the next major incident. An expired PSV inspection sticker is grounds for taking the equipment out of service until it is verified.
Source: 29 CFR 1910.119(j) [ref 1]
The PSM element requiring a documented investigation of every incident that resulted in, or could reasonably have resulted in, a catastrophic release of a highly hazardous chemical. Investigation must begin within 48 hours, identify root causes and contributing factors, and track resulting recommendations to closure.
"Could reasonably have resulted in" makes near-misses reportable. Operators are usually interviewed within 24 hours of any incident; getting the timeline right and writing facts (not opinions) is the discipline. Records are kept 5 years minimum.
Source: 29 CFR 1910.119(m) [ref 1]
The PSM element requiring an emergency action plan covering evacuation, accountability, rescue and medical duties, alarm procedures, and integration with local emergency responders. Coordinated with OSHA 1910.38 and 1910.120 (HAZWOPER) where applicable.
Operators run muster drills, know their assembly point by wind direction, and rehearse handoffs to local fire and ambulance. The plan exists on paper; the muster card on every operator's hard hat is where it actually lives.
Source: 29 CFR 1910.119(n) [ref 1]
The PSM element requiring a triennial audit verifying the facility's PSM program complies with each provision of 1910.119. Findings are tracked to closure; the two most recent reports must be retained.
A compliance audit is internal or third-party, not an OSHA inspection. Operators interact with audits during file reviews and unit walkdowns; auditors typically interview operators on procedure familiarity and recent MOC awareness.
See also: PSM
Source: 29 CFR 1910.119(o) [ref 1]
The PSM element requiring that employees and their representatives have access to trade-secret information relevant to PSM compliance, subject to confidentiality agreements. Trade secrets do not exempt a facility from the PSM rule.
Operators rarely see this element in practice; it is most relevant when proprietary chemistry or licensed process technology is involved and the facility owner needs a written confidentiality framework around PHA and procedure access.
See also: PSM
Source: 29 CFR 1910.119(p) [ref 1]
The framework that wraps every plant operating in the US.
The US federal agency that sets and enforces workplace safety standards. PSM (1910.119) is the OSHA standard most relevant to gas plants.
OSHA inspections can be scheduled (program audits) or unannounced (after an incident). Operators do not typically interact with OSHA directly; the EHS function does.
See also: PSM
Source: osha.gov [ref 20]
The US Department of Transportation agency that regulates pipeline safety under 49 CFR Parts 192 and 195. Operator Qualification (OQ) is the PHMSA rule most relevant to operators.
A gas plant typically falls under OSHA PSM at the plant boundary and under PHMSA OQ once the gas leaves the plant on a regulated pipeline.
See also: OQ
Source: phmsa.dot.gov [ref 21]
The EPA standard that mirrors OSHA PSM at the community-impact level. Required for facilities that handle listed substances above threshold quantities.
PSM Program 3 and RMP have largely identical requirements at this level. The PSM document is the OSHA filing; the RMP document is the EPA filing. Operators usually do not see the distinction in practice.
See also: PSM
Source: 40 CFR Part 68 (EPA) [ref 11]
The highest pressure at which a pipeline segment may be operated under federal regulation. Established by 49 CFR 192.619 for gas and 49 CFR 195.406 for hazardous liquids, based on the segment's pressure test, design factor, and class location.
Every pipeline has a documented MAOP. Operating above MAOP, even briefly, is a reportable event to PHMSA. Plant operators need to know the MAOP of every line that feeds their facility and every line that leaves it. Pressure-control setpoints and PSV settings are anchored to MAOP, not to convenience.
Source: 49 CFR 192.619 [ref 45]
The EPA's New Source Performance Standards for the oil and natural gas sector, regulating methane and VOC emissions from production, processing, and transmission. OOOO (2012) and OOOOa (2016) apply to specific construction-date windows; OOOOb (2024) is the current rule for new sources.
Operators see Quad-O in fugitive-emission survey schedules (EPA Method 21 / optical gas imaging), pneumatic-controller specs (zero-bleed or low-bleed), and compressor wet-seal monitoring. Quad-O compliance is increasingly written into permit conditions and audit checklists.
See also: EPA RMP, NESHAP Subpart HH
Source: 40 CFR Part 60 Subparts OOOO/OOOOa/OOOOb [ref 46]
The DOT regulation requiring drug and alcohol testing of pipeline operating personnel: pre-employment, random, reasonable-cause, post-accident, and return-to-duty conditions. Applies to operators who perform "covered functions" on regulated pipelines.
Plant operators in pipeline-regulated service are typically on a Part 199 program. Post-incident testing follows defined evidence-preservation procedures; the operator on shift at the time of a reportable incident will be tested.
Source: 49 CFR Part 199 [ref 47]
The DOT regulation requiring gas pipeline operators to report incidents to PHMSA on defined timelines: telephonic notice to the National Response Center within 1 hour for releases meeting reportable criteria; written incident report within 30 days; annual reports summarizing system data.
Reportable thresholds include fatalities, hospitalizations, property damage above the threshold, and unplanned releases above defined volumes. Operators on shift at the time of an incident are the source for the initial timeline; getting it right matters for the formal report that follows.
Source: 49 CFR Part 191 [ref 48]
The EPA's National Emission Standards for Hazardous Air Pollutants (NESHAP) applicable to oil and natural gas production facilities. Subpart HH covers facilities at major-source status (10 tons/year of a single HAP or 25 tons/year aggregate); requires control of glycol dehydrator vents, tank vents, and certain process equipment.
Plant operators encounter Subpart HH most often through glycol still-vent controls (incinerator or condenser), tank vapor-recovery requirements, and routine HAP-emission inventory work. A unit that loses its still-vent control device is in immediate non-compliance.
See also: EPA NSPS Quad-O, TEG, glycol contactor
Source: 40 CFR Part 63 Subpart HH [ref 49]
What operators actually say to each other on the radio.
A measurement of the vapor pressure of a liquid hydrocarbon (gasoline, condensate, NGL) at 100 °F under standard conditions. Reported in psi. The pipeline or tank spec for finished stabilized product is usually in the 9 to 11 psi range.
Too high: light ends in your tank, popping the relief and giving you a vapor cloud. Too low: you stripped product into the gas stream and gave money away. On a stabilizer, RVP is controlled by reboiler temperature.
Source: ASTM D323, ASTM D5191 [refs 13, 14]
A process that has reached steady state and is holding its setpoints with minimal operator intervention. The opposite of "still hunting."
A plant that is lined out is the goal. A lined-out unit can absorb small disturbances without the operator needing to touch anything. "Get it lined out before the next shift" is one of the most common turnover instructions.
See also: turnover
Product or stream that is outside its commercial or pipeline specification. Triggers either rerouting (to slop or recycle) or penalty deductions on the sales invoice.
Continuous-analyzer alarms (RVP, dewpoint, H2S, moisture) are the early warning. Off-spec is recoverable; off-spec-into-the-pipeline is a phone call to the next operator down the chain.
See also: RVP
The transfer of operating responsibility from the off-going operator to the on-coming operator. Usually 15 to 30 minutes of walking through the boards, the log, the active LOTO list, and anything strange that happened.
The handful of minutes that prevent most incidents. A rushed or skipped turnover is how the new shift inherits a setup they do not understand and react late to.
The event when a pipeline pig (a mechanical device that scrapes and inspects pipe walls) reaches the receiver at the plant inlet. Brings with it any liquid and debris the pig pushed ahead.
The inlet separator sees a slug of liquid that is often several times normal inlet rate. Levels spike, downstream pressures jump, and an unprepared operator gets a level alarm storm. Pipeline control gives ~20 minutes' warning; that warning exists to be acted on.
Two-phase flow where pockets of liquid and pockets of gas alternate down the pipe instead of moving as a smooth mixed flow. Hard on equipment, hard on level control.
Slug catchers exist to absorb the liquid pockets. A slugging line will swing pressures and levels rhythmically; if you see oscillation that matches a slug-flow period, that is what it is.
See also: pig arrival, separator
A distillation column failure mode where liquid backs up faster than it can drain, eventually filling the column and carrying liquid out the top with the vapor.
Differential pressure across the column is the first thing to climb. Operators recover by reducing reboiler duty (less vapor traffic) and letting the liquid clear. Sustained flooding wrecks the separation and pushes off-spec product downstream.
See also: packed tower, reboiler
The opposite failure mode of flooding. Vapor traffic in a trayed column is too low to hold the liquid up; liquid drips through the trays instead of flowing across them.
Loses separation efficiency without dramatic symptoms; harder to spot than flooding. The fix is more reboiler duty to get vapor traffic back up.
See also: packed tower, flooding
An ice-like crystalline solid that forms when water and light hydrocarbons (methane, ethane, propane) combine under pressure at temperatures cold enough but above 32 °F. Forms wherever wet gas hits cold metal: J-T valves, expander outlets, cryogenic exchangers.
The number-one cold-side threat in a cryogenic unit. Hydrate plugs block flow, foul exchangers, and can take days to clear. Prevention is upstream dehydration to a low water dewpoint, plus methanol or glycol injection as backup. If a line freezes shut and the gas behind it is at pressure, do not try to clear it with heat from one side. The plug can launch.
See also: mol sieve, cold box, TEG
Source: GPSA Engineering Data Book §20 (Hydrate Prediction) [ref 22]
The two sides of an amine treating loop. Lean amine is the regenerated solvent on its way back to the contactor; rich amine is the loaded solvent on its way from the contactor to the regenerator. The difference between them is the H2S and CO2 the unit is removing.
Operators talk in "loading," moles of acid gas per mole of amine. Common solvents are MDEA (methyldiethanolamine, selective for H2S) and DEA (diethanolamine, removes both H2S and CO2). Foaming, contamination, and degradation products are the running fights; reclaimer duty is the slow remedy.
See also: amine contactor, H2S
Source: GPSA Engineering Data Book §21 (Hydrocarbon Treating) [ref 22]
The dominant solvent used in glycol dehydration units. A hygroscopic liquid that absorbs water from gas and releases it under heat in a reboiler. Operators measure lean TEG concentration daily to confirm the regenerator is doing its job.
99.0 % lean TEG is normal; 99.5 % is achievable with stripping gas. Below 98 % the contactor stops meeting dewpoint and gas leaves the unit too wet. Reboiler temperature is the operator's main control. Too cold and lean concentration drops; too hot and TEG degrades into solids that foul the system.
See also: glycol contactor, hydrate, mol sieve
Source: GPSA Engineering Data Book §20 (Dehydration) [ref 22]
A violent flow reversal inside a centrifugal compressor that happens when discharge pressure overpowers what the machine can deliver at the current speed and flow. Gas momentarily flows backwards, then forwards, then backwards again, at several Hz.
You hear it before you see it: banging, vibration, alarm cascade. Sustained surge wrecks bearings, seals, and impellers. The anti-surge controller exists to keep the machine to the right of the surge line at all costs. Never bypass it.
See also: anti-surge recycle, compressor
Source: API Standard 617 [ref 44]
The measured exchange of gas or liquid at a commercial handoff between two parties: wellhead to gatherer, gatherer to processor, processor to pipeline, pipeline to end-user. Volume and composition at the custody-transfer meter set what gets paid.
Custody-transfer meters (orifice with EFM, ultrasonic, Coriolis) and the GCs feeding them are some of the most carefully calibrated instruments on site. A measurement error of 0.5 % at a 50 MMscfd interconnect is real money over a month. Operators log meter health daily; field auditors check the records.
See also: GC, orifice plate, Coriolis
Source: AGA Report No. 3 [ref 28]
The ethane-plus hydrocarbons recovered out of the inlet gas at a cryogenic plant. Sold as a mixed "Y-grade" stream to a fractionation facility, or fractionated on-site into purity products (ethane, propane, butane, natural gasoline).
NGL recovery is the whole reason a cryogenic plant exists. The plant runs in either ethane recovery mode (maximize C2+ to the NGL stream) or ethane rejection mode (let ethane go back to residue gas), and which mode pays better depends on the day's commodity prices.
See also: demethanizer, turboexpander
Source: GPSA Engineering Data Book §16 [ref 22]
Transmitters and the analog/digital signals they ride on.
The industry-standard analog signal for sending a sensor reading from a field instrument back to the control room. 4 mA represents 0 % of the calibrated range; 20 mA represents 100 %.
Current-loop signals are noise-tolerant and a broken wire reads as 0 mA, which is below the 4 mA "zero," so the DCS knows the wire is broken instead of thinking the process is at 0 %. Built-in diagnostic.
See also: HART, dP transmitter
Source: ANSI/ISA-50.00.01 [ref 23]
A digital communication layer that rides on top of the 4-20 mA analog signal. Lets a smart instrument send diagnostic info (sensor health, calibration data, multiple variables) over the same wire pair as the primary analog reading.
A modern transmitter has dozens of HART variables available beyond the primary process value. Plant engineers read them with handhelds or asset management software; operators rarely see them directly.
See also: 4-20 mA
Source: FieldComm Group HART [ref 24]
A temperature sensor whose electrical resistance changes predictably with temperature. PT100 = a platinum element with 100 ohms resistance at 0 °C. Wired in 2, 3, or 4 wire configurations to compensate for lead resistance.
More accurate and stable than thermocouples in their temperature range (roughly minus 200 to 600 °C). Slower to respond. Lead-wire breakage on a 2-wire RTD reads as high temperature; the DCS should catch this on a sanity check.
See also: thermocouple
Source: IEC 60751, ASTM E1137 [refs 25, 26]
A temperature sensor that produces a small voltage proportional to the difference between the measurement junction and a reference junction. Different metal pairs (Type K = chromel-alumel, Type J = iron-constantan, etc.) cover different temperature ranges.
Cheap, robust, and good across a wide range (Type K reads minus 200 to over 1200 °C). Drift over time. The lead wire matters: extension wire must match the thermocouple type or readings get junk.
See also: RTD
Source: ASTM E230 [ref 27]
A flow measurement element: a flat plate with a precisely-machined hole installed between two pipe flanges. The pressure drop across the plate is proportional to the square of the flow rate.
Still the most common flow measurement in gas plants because it is cheap, simple, and well-characterized. Limitations: needs straight pipe upstream, fixed turndown range, and the pressure drop is energy lost forever.
See also: dP transmitter, FIC
Source: AGA Report No. 3, ISO 5167 [refs 28, 29]
A flow meter that vibrates a U-shaped tube and measures the Coriolis-effect twist caused by fluid mass moving through it. Outputs true mass flow directly, independent of fluid density.
Highest-accuracy flow meter available. Expensive. Used for custody transfer where the dollar value of accuracy justifies the price. Also reads density and temperature as a side benefit.
See also: orifice plate
Source: ISO 10790 [ref 30]
A transmitter that measures the difference between two pressure taps and outputs the value as 4-20 mA. Used for orifice flow measurement, hydrostatic level measurement, and filter-fouling indication.
The Swiss Army knife of process measurement. One device, three jobs: flow, level, or filter-status. Calibration must match the application (the same physical hardware can read 0-100 inH2O for flow or 0-25 ft for level depending on how you scale it).
See also: orifice plate, 4-20 mA
A level measurement device that sends microwave pulses down a probe extending into the vessel and times the reflection off the liquid surface. Time-of-flight gives level.
Has displaced older displacer- and float-based level instruments in most new construction. Unaffected by density changes, foam can be a problem, and the probe can build coating in dirty service.
See also: LIC, dP transmitter
An analyzer that separates a gas sample into its component hydrocarbons by passing it through a packed column, then quantifies each peak. The output is a composition report, mol percent methane, ethane, propane, and heavier, plus a calculated heating value (BTU per scf).
Custody-transfer GCs run a cycle every 5 to 15 minutes; their result is what the customer is billed against. Operators read GC trends to catch composition shifts before they show up downstream. Heavier feed pushes the demethanizer warmer; lighter feed cools it off. A GC out of service for hours is a measurement event, not a safety event, but it is a billing event.
See also: custody transfer, NGL, demethanizer
How the field elements actually open and close.
The relationship between valve position and flow at constant pressure drop. The three common types: linear (flow tracks position 1:1), equal-percentage (small opening, small flow; opening matters more as you approach 100 %), and quick-opening (most flow happens in the first 25 % of travel).
Equal-percentage trim is the workhorse for temperature and pressure loops where the loop sees variable pressure drop. Linear is best for level. Quick-opening is for on-off duty disguised as a control valve.
See also: control valve, fail-safe position
Source: ISA-75 / IEC 60534 [ref 17]
What a control valve does when the actuator loses its driving signal or air supply. Fail-open valves open all the way; fail-closed valves shut; fail-last valves hold the last commanded position.
Picked at design time based on what is safer when control is lost. Fuel-gas to a heater: fail-closed (you do not want fuel going in with no control). Liquid level into a column: usually fail-open (better to flood the column than let it run dry). On a P&ID the fail position is on the valve symbol; check it before doing any work around the valve.
See also: control valve, actuator
A device mounted on a control valve that compares the controller's commanded position to the actual stem position and drives the actuator until they match. Closes a fast local loop around the valve.
Modern positioners are smart: they have HART communication, store calibration, and detect mechanical wear. A positioner that is "hunting" (cycling around setpoint) usually means actuator wear, low air supply, or wrong tuning on the controller above it.
The mechanism that physically moves a valve stem. Pneumatic (air-against-spring or air-against-air diaphragm or piston), electric (motor + gearbox), or hydraulic (high-force, slow).
Pneumatic dominates process plants because instrument air is everywhere and the actuator is intrinsically failsafe (lose air → known fail position). Electric is gaining ground for fail-last requirements and remote locations without compressed air.
See also: fail-safe position, positioner
A one-way valve. Allows flow in one direction; closes automatically when flow tries to reverse. No actuator, no operator action required.
A failed check valve (stuck open) is the most common single point of failure that lets a backflow event happen. Pump discharge checks are the workhorse. If a pump trips and the discharge check fails to seat, fluid drains back through the impeller.
See also: control valve
A pressure-relief device that physically bursts at a designed pressure. One-shot device: it must be replaced after every actuation.
Used standalone in services where a PSV would foul (corrosive, polymerizing, or particulate-laden fluid) or in series with a PSV to keep the PSV seat clean. The burst pressure is set below the PSV's set pressure by a defined margin.
See also: PSV
Source: API Standard 520 [ref 15]
An isolation pattern: two block (full-shutoff) valves in series with a vent (bleed) valve between them. Closing both blocks and opening the bleed gives positive isolation that can be verified.
The minimum isolation acceptable for LOTO on hazardous services in most plants. Some plants require Double Isolation and Bleed (DIB) for the worst services. If the bleed is dripping, one of the blocks is not sealing.
See also: LOTO
How electrical equipment lives safely in flammable environments.
NEC hazardous-area classification. A location where flammable gas or vapor is present continuously, intermittently, or periodically during normal operation. Requires intrinsically safe (IS) or explosion-proof (XP) equipment.
Inside a separator's vent path, around an open process drain, near a compressor seal: these are typical Div 1 locations. Putting Div 2 equipment in a Div 1 location is a violation and an audit finding.
See also: Class I, Division 2, IS barrier, explosion-proof
Source: NFPA 70 (NEC) Article 500 [ref 32]
NEC hazardous-area classification. A location where flammable gas is only present under abnormal conditions: a leak, an upset, a ventilation failure. Less stringent equipment requirements than Div 1.
Most of an outdoor process unit's "general area" is Div 2. Building HVAC rooms next to a process unit are usually Div 2 if the air intake is positioned correctly. Get this wrong at design time and your electrical contractor will hate you for it later.
See also: Class I, Division 1, IEC 60079
Source: NFPA 70 (NEC) Article 500 [ref 32]
A protection method for hazardous areas. Limits the energy available in field circuits below the minimum required to ignite a flammable atmosphere, even in fault conditions. The circuit cannot start a fire because it cannot release enough energy.
The most common approach for instrumentation in Class I Div 1. The instruments themselves carry an IS rating; an IS barrier in the safe area limits the voltage and current going out to the field.
See also: IS barrier, Class I, Division 1, explosion-proof
Source: ISA-RP12.6, ANSI/UL 913 [refs 33, 34]
A device mounted in the safe area that limits voltage and current going from the DCS down to a field-side IS circuit. Two common types: zener-diode barriers (passive, shunt voltage to ground) and galvanic isolators (transformer-isolated, more expensive, no ground bond required).
Galvanic barriers are taking over because they sidestep the grounding-system constraints that zener barriers require. Either way, an IS-rated instrument in the field still needs an IS-rated barrier in the safe area to keep the loop legitimately IS.
See also: Intrinsic Safety
Source: ISA-RP12.6 [ref 33]
A protection method using a sealed metal enclosure rated to contain an internal explosion without igniting the surrounding atmosphere. The enclosure does not prevent the explosion; it contains it and cools the escaping gas through narrow flame paths.
Different philosophy from IS: XP allows the failure (internal ignition) but contains the consequence. Heavier, less flexible, and more expensive than IS for instrumentation. Common for motors and switchgear in hazardous areas.
See also: Intrinsic Safety, Class I, Division 1
Source: NFPA 70, IEC 60079-1 [refs 32, 35]
The international standard family for classifying hazardous areas and rating equipment for them. Uses Zone 0/1/2 for gas (Zone 0 = continuous presence, Zone 1 = normal operation, Zone 2 = abnormal only) and Zone 20/21/22 for combustible dust.
The European and most-of-the-world classification. North America uses the NEC Division 1/2 system in parallel. Roughly: Zone 0 = no NEC equivalent, Zone 1 ≈ Div 1, Zone 2 ≈ Div 2. International equipment is increasingly dual-rated.
See also: Class I, Division 1, explosion-proof
Source: IEC 60079 series [ref 35]
An electronic drive that controls AC motor speed by varying the frequency (and voltage) of the power supplied to the motor. Replaces older methods like throttling valves, slip clutches, or fixed-speed motors with bypass.
Used in process plants for variable-speed pumps, compressors, and fans where the load varies. Energy savings are real but VFDs introduce harmonics that can interfere with sensitive instruments if the cabling and filtering are not done right.
References cited above. Standards bodies (ISA, ASTM, API, NFPA, IEC) publish the canonical text behind paywalls; the links below go to the public landing pages for each standard. Code of Federal Regulations citations link to the public eCFR. Where a standard is summarized in this glossary, the wording is in our own voice; consult the source directly for the authoritative text.
This glossary is a plain-language educational reference. It is not legal or regulatory guidance and does not constitute compliance advice. Regulatory citations and numerical values (exposure limits, threshold quantities, alarm setpoints, MAOP factors) reflect published standards as of the date below and may not reflect subsequent amendments. Always verify requirements against current regulatory text and with your compliance team.
This page does not satisfy any training, qualification, or recordkeeping requirement under OSHA, PHMSA, EPA, or any state standard.
Last reviewed: 2026-05-14
Cold Creek is a free browser-based simulator where you control the loops, watch RVP, respond to pig arrivals, and run the board on a real cascade. Every term on this page appears in context.
TRAINING USE ONLY · Not based on any operating facility or company standard