ExamFinch.com My Study

Study guide

8.3 Risk Uncertainty, Sensitivity Analysis, and Risk Acceptance Thresholds

Practice this exam

API 580 Risk Based Inspection Professional Exam

Track your progress as you read

Finished sections get a check mark.

1 Chapter 1: Terms, Definitions, Acronyms, and RBI Scope

1.1 Fundamental RBI Terminology and Acronyms 1.2 Absolute vs. Relative Risk and Risk Acceptability Criteria 1.3 Scope, Objectives, and Integration with Fixed Equipment Mechanical Integrity (MI) Programs

2 Chapter 2: RBI Program Elements, Implementation, and Management

2.1 Essential Steps of an RBI Assessment and Implementation Plan 2.2 RBI Program Limitations, Assumptions, and Boundaries 2.3 Management of Change (MOC) Integration and Life-Cycle Sustainment

3 Chapter 3: Roles, Responsibilities, Training, and Qualifications

3.1 RBI Team Composition and Roles 3.2 Member Qualifications, Training, and Experience Requirements 3.3 Team Decision Ownership, Review, and Approval Responsibilities

4 Chapter 4: Data Collection, Quality, and Validation

4.1 Required Data Types: Design, Operating, Process, Maintenance, and Inspection Records 4.2 Data Completeness, Quality Assessment, and Handling Data Gaps 4.3 Validation and Evergreening of Physical and Operating Data

5 Chapter 5: Damage Mechanisms and Failure Modes

5.1 Credible Damage Mechanism Identification in Refineries and Petrochemical Plants 5.2 Thinning, Stress Corrosion Cracking (SCC), High-Temperature, and Environmental Degradation Modes 5.3 Failure Modes, Leak vs. Rupture Morbidities, and Degradation Rate Determination

6 Chapter 6: Probability of Failure (POF) Analysis

6.1 POF Methodologies: Qualitative, Semi-Quantitative, and Quantitative Modeling 6.2 Structural Damage Factors, Technical Modules, and Time-Dependent vs. Independent POF 6.3 Effect of Past Inspection Effectiveness (Categories A through E) on POF Determination

7 Chapter 7: Consequence of Failure (COF) Analysis

7.1 COF Dimensions: Safety, Environmental, Equipment Damage, and Business Interruption 7.2 Release Scenarios, Hole Sizes, Inventory Isolation, and Fluid Phase Behavior 7.3 Quantitative Consequence Areas (Flammable/Toxic) vs. Financial Cost Estimation

8 Chapter 8: Risk Assessment, Matrix Representation, and Plotting

8.1 Combining POF and COF: Risk Calculation and Risk Plotting 8.2 Qualitative and Quantitative Risk Matrix Structures (e.g., 5x5 Matrix) 8.3 Risk Uncertainty, Sensitivity Analysis, and Risk Acceptance Thresholds

9 Chapter 9: Risk Management and Inspection Planning

9.1 Risk-Driven Inspection Strategy: What, Where, When, and How to Inspect 9.2 Inspection Interval Determination and Non-Inspection Risk Mitigation 9.3 Risk Reduction Optimization and Cost-Benefit Analysis

10 Chapter 10: RBI Documentation, Reassessment, and Recordkeeping

10.1 Required Documentation, Audit Trails, and Rationale Tracking 10.2 Reassessment Triggers: Periodic Updates, MOC Events, Out-of-Limit Operations, and Inspection Results 10.3 Long-Term Record Retention and Reporting to Asset Integrity Management (AIM)

8.3 Risk Uncertainty, Sensitivity Analysis, and Risk Acceptance Thresholds

Key Takeaways Explain This Topic AI

API RP 580 Sections 12 and 13 govern data uncertainty across equipment, process history, damage mechanisms, NDE effectiveness, and consequence modeling, requiring conservative risk assumptions when data gaps exist.

Sensitivity analysis systematically varies key input parameters to evaluate shifts in POF, COF, and risk classification, identifying critical risk drivers that control equipment degradation.

Facility Target Risk thresholds establish the maximum allowable risk before mandatory inspection or mitigation, defining the calculated target inspection date (t_target).

High-effectiveness NDE inspections (Categories A and B) directly reduce POF data uncertainty, shifting calculated damage factors closer to actual physical conditions.

The ALARP (As Low As Reasonably Practicable) principle classifies risk into Intolerable, ALARP, and Broadly Acceptable regions, mandating risk reduction unless mitigation costs are grossly disproportionate to the risk reduction achieved.

Last updated: August 2026

  • 8.3 Risk Uncertainty, Sensitivity Analysis, and Risk Acceptance Thresholds
  • Understanding Data Uncertainty in RBI Assessments (API RP 580 Sections 12 & 13)

In API Recommended Practice 580 (4th Edition, August 2023 with Addenda 1, March 2025) , Section 12 ("Risk Determination, Assessment, and Management") and Section 13 ("Risk Management with Inspection Activities") address the fundamental reality that all risk assessments operate under conditions of imperfect knowledge and data uncertainty. Risk calculations are estimates of future physical events; therefore, quantifying, managing, and reducing uncertainty is a core requirement of a compliant RBI program.

Uncertainty directly expands the probability density functions of both POF and COF. When data quality is poor, API RP 580 requires risk analysts to apply conservative assumptions. This conservatism inflates calculated risk values, ensuring that data gaps do not result in unmitigated physical hazards.

Sources of Risk Uncertainty

API RP 580 classifies data uncertainty into five primary operational domains:

Equipment Design and Construction Data Uncertainty :

Missing Material Test Reports (MTRs), unverified trace chemistry (e.g., carbon equivalent, trace elements like tramp elements affecting hydrogen attack susceptibility).

Unknown original wall thickness due to missing fabrication drawings or vessel nameplate data.

Process and Operating History Uncertainty :

Incomplete recording of past operating excursions outside established Integrity Operating Windows (IOWs, per API RP 584).

Unmonitored process chemistry variations (e.g., sudden spikes in feed sulfur content, chloride levels, or naphthenic acid concentration).

Damage Mechanism Kinetics Uncertainty :

Variable corrosion rates caused by fluid velocity turbulence, multi-phase flow regimes, or localized condensation zones.

Uncertain initiation thresholds for environmental cracking mechanisms (e.g., Wet H 2 S \text{H}_2\text{S} H 2 ​ S cracking, Amine SCC, Polythionic Acid SCC, Caustic SCC).

Inspection and NDE Uncertainty :

Low-effectiveness historical inspections (e.g., Category D or E inspections with minimal coverage percentage or non-calibrated tools).

Detection limits of non-destructive testing techniques (e.g., spot ultrasonic thickness testing failing to detect localized pitting or CUI).

Consequence Modeling Uncertainty :

Simplifying assumptions in fluid release rates, atmospheric dispersion modeling, toxic threshold limits (IDLH vs ERPG-2), and financial downtime cost projections.

Sensitivity Analysis Methodology and Risk Drivers

Sensitivity Analysis is the analytical technique used to evaluate how changes in specific input variables affect the calculated POF, COF, and overall risk classification. API RP 580 Section 12 mandates performing sensitivity analysis to identify Risk Drivers —the critical parameters that exert the strongest control over equipment risk.

Execution Protocol for RBI Sensitivity Analysis

Identify Key Input Parameters : Select variables subject to operational fluctuation or data uncertainty (e.g., corrosion rate, fluid temperature, toxic chemical percentage, NDE inspection effectiveness).

Apply Parameter Variances : Systematically adjust each input variable above and below its baseline value (e.g., ± 25 % \pm 25\% ± 25% , ± 50 % \pm 50\% ± 50% , 2 × 2\times 2 × , or 5 × 5\times 5 × ).

Recalculate Risk Profiles : Run the RBI quantitative model to observe shifts in calculated POF, COF, and matrix cell assignments.

Identify Primary Risk Drivers : Categorize parameters based on their impact severity. If a 20% increase in corrosion rate shifts an asset from Medium Risk (2C) to High Risk (4C), corrosion rate is established as the primary risk driver. ┌───────────────────────────────────────────────────────────────────────────┐

  • │ SENSITIVITY ANALYSIS WORKFLOW │
  • ├───────────────────────────────────────────────────────────────────────────┤
  • │ 1. Baseline Input Data ──► POF(t) & COF Baseline Risk (e.g., Cell 2C) │
  • ├───────────────────────────────────────────────────────────────────────────┤
  • │ 2. Vary Inputs (±50%) ──► Corrosion Rate, Fluid H2S %, NDE Confidence │
  • ├───────────────────────────────────────────────────────────────────────────┤
  • │ 3. Evaluate Output ──► Assess Matrix Shift (e.g., Cell 2C ➔ Cell 4C) │
  • ├───────────────────────────────────────────────────────────────────────────┤
  • │ 4. Focus Mitigation ──► Implement Targeted NDE or IOW Alert Limits │
  • └───────────────────────────────────────────────────────────────────────────┘
  • Establishing Facility Risk Acceptance Thresholds (Target Risk)

An Acceptable Risk Threshold (also called Target Risk , Risk target \text{Risk}_{\text{target}} Risk target ​ ) is the maximum level of risk a facility is willing to accept for an operating equipment item or piping circuit. API RP 580 does not dictate a single universal numerical risk limit; rather, it requires each operating company to formally define its own risk acceptance criteria aligned with corporate safety guidelines, environmental standards, and financial risk tolerance.

Types of Target Risk Limits

Area Target Risk ( ft 2 / yr \text{ft}^2/\text{yr} ft 2 / yr or m 2 / yr \text{m}^2/\text{yr} m 2 / yr ) : Typically established between 10 ft 2 / yr 10 \text{ ft}^2/\text{yr} 10 ft 2 / yr and 100 ft 2 / yr 100 \text{ ft}^2/\text{yr} 100 ft 2 / yr for flammable or toxic releases to protect plant personnel.

Financial Target Risk ( $ / yr \text{\textdollar}/\text{yr} $ / yr ) : Typically established between $ 10 , 000 / yr \text{\textdollar}10,000/\text{yr} $ 10 , 000/ yr and $ 100 , 000 / yr \text{\textdollar}100,000/\text{yr} $ 100 , 000/ yr per equipment item to limit business interruption and property loss.

Determining Inspection Intervals via Target Risk

The RBI target inspection date ( t target t_{\text{target}} t target ​ ) is calculated as the exact future operating time when calculated equipment risk intersects the Target Risk threshold: Risk ( t target ) = Risk target \text{Risk}(t_{\text{target}}) = \text{Risk}_{\text{target}} Risk ( t target ​ ) = Risk target ​

API RP 580 requires that the planned inspection interval shall not exceed t target t_{\text{target}} t target ​ . Furthermore, jurisdictional standards (API 510, API 570, API 653) impose maximum calendar interval caps (e.g., 10 years or half remaining life for pressure vessels) as outer safety limits even if calculated t target t_{\text{target}} t target ​ exceeds those limits.

The ALARP (As Low As Reasonably Practicable) Principle in RBI

API RP 580 incorporates the ALARP (As Low As Reasonably Practicable) principle to guide risk reduction decisions. Under ALARP, risks are divided into three distinct regions:

Intolerable Risk Region : Risk levels above corporate upper thresholds. Risk reduction is mandatory regardless of financial cost. Operations must be shut down, depressured, or immediately mitigated.

ALARP (Tolerable) Region : Risk levels fall between the intolerable threshold and the broadly acceptable limit. Risk reduction measures (such as targeted NDE, chemical injection, or material upgrades) MUST be implemented UNLESS the cost of mitigation is grossly disproportionate to the risk reduction achieved.

Broadly Acceptable Region : Low risk levels where routine monitoring is sufficient and additional expenditure for risk reduction is unwarranted.

  • Worked Engineering Case Study: Sensitivity Analysis and ALARP Trade-Off Evaluation
  • Scenario Statement

A Hydrotreater Reactor Effluent Air Cooler (REAC) piping circuit constructed of Carbon Steel operates under active Ammonium Bisulfide ( NH 4 HS \text{NH}_4\text{HS} NH 4 ​ HS ) Corrosion and Alkaline Sour Water Corrosion.

Baseline Corrosion Rate : 12 mpy 12 \text{ mpy} 12 mpy ( 0.305 mm/yr 0.305 \text{ mm/yr} 0.305 mm/yr ).

Nominal Wall Thickness : 0.375 in 0.375 \text{ in} 0.375 in ( 9.525 mm 9.525 \text{ mm} 9.525 mm ); Minimum Required Thickness ( t min t_{\text{min}} t min ​ ): 0.180 in 0.180 \text{ in} 0.180 in ( 4.572 mm 4.572 \text{ mm} 4.572 mm ).

Current Wall Thickness : 0.255 in 0.255 \text{ in} 0.255 in ( 6.477 mm 6.477 \text{ mm} 6.477 mm ).

Consequence of Failure : Toxic H 2 S \text{H}_2\text{S} H 2 ​ S / Flammable area COF = 45 , 000 ft 2 \text{COF} = 45,000 \text{ ft}^2 COF = 45 , 000 ft 2 (Category D).

Facility Area Target Risk : Risk target = 50 ft 2 / yr \text{Risk}_{\text{target}} = 50 \text{ ft}^2/\text{yr} Risk target ​ = 50 ft 2 / yr .

Step 1: Sensitivity Analysis of Corrosion Rate Variations

The process team evaluates the sensitivity of equipment risk to process fluid velocity and NH 4 HS \text{NH}_4\text{HS} NH 4 ​ HS concentration spikes:

Scenario Assumed Corrosion Rate Calculated POF ( 5 yrs ) \text{POF}(5\text{ yrs}) POF ( 5 yrs ) Calculated Risk at 5 Yrs ( ft 2 / yr \text{ft}^2/\text{yr} ft 2 / yr ) Target Risk Threshold ( 50 ft 2 / yr 50 \text{ ft}^2/\text{yr} 50 ft 2 / yr )

Baseline Service 12 mpy 12 \text{ mpy} 12 mpy 8.0 × 10 − 4 8.0 \times 10^{-4} 8.0 × 1 0 − 4 36.0 ft 2 / yr 36.0 \text{ ft}^2/\text{yr} 36.0 ft 2 / yr Acceptable ( ≤ 50 \le 50 ≤ 50 )

Excursion (+50% Velocity) 18 mpy 18 \text{ mpy} 18 mpy 2.2 × 10 − 3 2.2 \times 10^{-3} 2.2 × 1 0 − 3 99.0 ft 2 / yr 99.0 \text{ ft}^2/\text{yr} 99.0 ft 2 / yr Exceeds Target ( > 50 > 50 > 50 )

Severe Excursion (2x Rate) 24 mpy 24 \text{ mpy} 24 mpy 6.5 × 10 − 3 6.5 \times 10^{-3} 6.5 × 1 0 − 3 292.5 ft 2 / yr 292.5 \text{ ft}^2/\text{yr} 292.5 ft 2 / yr Severe Intolerable Violation

Sensitivity Finding : Corrosion rate is an extreme risk driver. A 50% increase in corrosion rate nearly triples calculated risk and accelerates the target inspection date from 6.2 years down to 2.5 years.

Step 2: ALARP Mitigation Option Evaluation

The engineering team evaluates three ALARP risk reduction options:

Option A: High-Effectiveness NDE Inspection

Perform 100% PAUT profile thickness mapping across all high-turbulence elbows every 2 years.

Cost : $ 25 , 000 \text{\textdollar}25,000 $ 25 , 000 per inspection.

Risk Impact : Reduces POF uncertainty, lowering calculated risk back to 30 ft 2 / yr 30 \text{ ft}^2/\text{yr} 30 ft 2 / yr (ALARP Region).

Option B: Integrity Operating Window (IOW) Process Control

Install continuous wash water injection flow transmitters and online pH \text{pH} pH / velocity monitoring (API RP 584).

Cost : $ 60 , 000 \text{\textdollar}60,000 $ 60 , 000 capital expenditure.

Risk Impact : Prevents corrosion rate excursions, capping corrosion rate at 12 mpy 12 \text{ mpy} 12 mpy and maintaining risk at 36 ft 2 / yr 36 \text{ ft}^2/\text{yr} 36 ft 2 / yr .

Option C: Material Upgrade to Duplex Stainless Steel (2205 SS)

Replace REAC piping circuit with 2205 Duplex Stainless Steel during next turnaround.

Cost : $ 450 , 000 \text{\textdollar}450,000 $ 450 , 000 .

Risk Impact : Eliminates NH 4 HS \text{NH}_4\text{HS} NH 4 ​ HS corrosion mechanism ( POF ≈ 1.0 × 10 − 6 \text{POF} \approx 1.0 \times 10^{-6} POF ≈ 1.0 × 1 0 − 6 ), reducing risk to 0.045 ft 2 / yr 0.045 \text{ ft}^2/\text{yr} 0.045 ft 2 / yr (Broadly Acceptable Region).

Decision Rationale under API RP 580 ALARP

Implementing Option B (IOW controls) combined with Option A (targeted PAUT inspections) reduces equipment risk below the target threshold of 50 ft 2 / yr 50 \text{ ft}^2/\text{yr} 50 ft 2 / yr at a total cost of $ 85 , 000 \text{\textdollar}85,000 $ 85 , 000 . Option C ( $ 450 , 000 \text{\textdollar}450,000 $ 450 , 000 material upgrade) is determined to be disproportionately costly relative to the risk reduction achieved while the asset remains in the ALARP region, validating the selection of Option A + B as the optimal RBI mitigation strategy.