Bow-Tie Diagram Construction for Ammonia Storage Hazards - Chemical Engineering Knowledge Platform

Industry Applications

Fertilizer production, refrigeration plants, chemical synthesis

Key Standards

CCPS Guidelines, IEC 61511, NFPA 58, OSHA 1910.119

Typical Scale

Storage volumes range from 50 m³ (on-site refrigerated) to 20,000+ m³ (bulk terminals)

Regulatory Trigger

OSHA PSM applies to processes with ≥13,600 kg (30,000 lb) ammonia

⚠️ Why It Matters

1

Inadequate hazard identification

↓

2

Missed initiating causes (e.g., valve corrosion)

↓

3

Unmitigated release escalation

↓

4

Toxic vapor cloud formation

↓

5

Off-site exposure or acute health impact

↓

6

Regulatory enforcement (EPA RMP/OSHA PSM violations)

📘 Definition

The bow-tie diagram is a risk visualization methodology used in process safety management to structurally represent the causal pathways between a central hazardous event (e.g., ammonia release from storage), its potential causes (threats), and its possible consequences, while explicitly mapping preventive and mitigative barriers (controls) that interrupt those pathways. It conforms to ISO 31000 and CCPS guidelines for barrier-based risk assessment and supports Layer of Protection Analysis (LOPA) integration. The left side depicts threat escalation paths; the right side shows consequence propagation paths; the 'knot' is the top event — the undesired, intermediate hazardous state.

🎨 Concept Diagram

AI-generated illustration for visual understanding

💡 Engineering Insight

A bow-tie is not a static artifact — it’s a living interface between process knowledge and operational discipline. The most effective diagrams are co-developed by operators, instrument engineers, and safety specialists during turnaround planning, because barrier effectiveness collapses when maintenance schedules drift or alarm rationalization removes critical early warnings. Always validate barrier function *in situ*, not just on paper.

📖 Detailed Explanation

At its core, the bow-tie diagram organizes cause-and-effect logic around a single, well-defined top event — such as an ammonia release from a refrigerated storage tank. It separates threats (what starts the event) from consequences (what follows), making implicit assumptions about system behavior explicit and testable. This structure forces engineers to confront whether a given control truly interrupts a specific pathway — for example, does a pressure transmitter reading alone prevent overfill, or must it be linked to an auto-closing valve?

Deeper application requires quantifying barrier performance. A gas detector is not inherently reliable: its effectiveness depends on sensor location relative to dominant wind direction, calibration frequency, and response time. Bow-tie analysis therefore integrates with quantitative risk assessment (QRA) — assigning failure probabilities (e.g., 10⁻²/yr for a non-SIL-rated detector) and verifying independence (e.g., ensuring firewater pumps are powered separately from DCS).

Advanced use extends beyond static representation: modern digital twins embed dynamic bow-ties where barrier status updates in real time (e.g., PRV tagged 'out of service' automatically highlights associated threat paths in red). Integration with alarm management systems ensures that nuisance alarms don’t degrade operator trust in critical preventive layers — a key lesson from the 2013 West Fertilizer explosion, where multiple barriers failed sequentially due to unrecognized common-mode weaknesses.

🔄 Engineering Workflow

Step 1

Step 1: Define system boundaries and identify top event (e.g., 'Ammonia release from spherical tank')

→

Step 2

Step 2: Perform HAZOP/What-If analysis to identify credible threats (e.g., overpressure, corrosion, mechanical impact) and consequences (e.g., toxic inhalation, fire, environmental contamination)

→

Step 3

Step 3: Map existing barriers (e.g., PRV, DCS interlock, gas detector, emergency shutdown) and classify as preventive (left side) or mitigative (right side)

→

Step 4

Step 4: Assess barrier reliability using SIL verification (IEC 61511) or barrier failure frequency (CCPS QRA Guidance)

→

Step 5

Step 5: Identify barrier gaps and assign risk reduction actions (e.g., upgrade detector to SIL 2, add redundant PRV)

→

Step 6

Step 6: Integrate validated bow-tie into operating procedures, MOC, and training materials

→

Step 7

Step 7: Review and update annually or after process change (per OSHA 1910.119(j))

📋 Decision Guide

Rock/Field Condition	Recommended Design Action
Above-ground pressurized storage (>1.0 MPa), ambient temperatures >15°C	Install redundant pressure relief valves (PRVs) with rupture disk backup; implement real-time vapor concentration monitoring at tank perimeter; require automatic isolation on high-flow detection.
Refrigerated (-33°C) bulk storage (≥500 m³), located <1 km from residential area	Design secondary containment with ≥110% capacity; integrate ammonia-specific water deluge + scrubber system; mandate consequence modeling (PHAST/Aloha) for worst-case release scenarios.
Corrosive environment (coastal, high chloride), carbon steel piping >10 years old	Replace with 316 stainless steel or lined carbon steel; install ultrasonic thickness monitoring at elbows/flanges; add cathodic protection + coating integrity verification.

📊 Key Properties & Parameters

Vapor Pressure at 20°C

850–900 kPa

The pressure exerted by ammonia vapor in equilibrium with its liquid phase at ambient temperature — determines release rate and dispersion potential.

⚡ Engineering Impact:

Directly governs design of pressure relief systems, vent sizing, and overpressure protection for storage vessels.

Lower Flammability Limit (LFL)

15–25% vol

Minimum concentration (by volume) of ammonia vapor in air that can sustain combustion under standard conditions.

⚡ Engineering Impact:

Defines zoning for electrical classification (Class I, Division 2) and dictates gas detection alarm setpoints (typically 10–25% LFL).

Toxicity Threshold (IDLH)

300 ppm

Immediately Dangerous to Life or Health concentration — the airborne level above which immediate respiratory protection is required.

⚡ Engineering Impact:

Drives selection of emergency response PPE, shelter-in-place protocols, and dispersion modeling input for consequence analysis.

Thermal Expansion Coefficient

0.0025 /°C

Rate of volumetric expansion per degree Celsius rise in temperature for liquid ammonia.

⚡ Engineering Impact:

Determines required ullage volume in storage tanks and influences overfill prevention system design (e.g., high-level alarms at ≤85% capacity).

📐 Key Formulas

Ammonia Release Rate (Two-Phase Flash)

ṁ = C₀ × A × √(2 × ΔP / ρₗ)

Mass flow rate during catastrophic rupture assuming flashing liquid-vapor mixture.

Variables:

Symbol	Name	Unit	Description
ṁ	mass flow rate	kg/s	Ammonia release rate during catastrophic rupture
C₀	discharge coefficient	dimensionless	Empirical coefficient accounting for flow geometry and fluid properties
A	rupture area	m²	Cross-sectional area of the rupture opening
ΔP	pressure difference	Pa	Difference between upstream liquid pressure and downstream pressure (typically ambient)
ρₗ	liquid density	kg/m³	Density of the liquid phase (e.g., liquid ammonia)

Typical Ranges:

Spherical tank rupture (1.2 m diameter)

120–350 kg/s

⚠️ Must be modeled with PHAST or EFFECTS to ensure off-site concentrations remain <100 ppm at nearest receptor

Ullage Volume Requirement

V_ullage = V_tank × [α × (T_max − T_design)]

Minimum vapor space needed to accommodate thermal expansion without overpressure.

Variables:

Symbol	Name	Unit	Description
V_ullage	Ullage Volume	m³	Minimum vapor space needed to accommodate thermal expansion without overpressure
V_tank	Tank Volume	m³	Total internal volume of the tank
α	Coefficient of Thermal Expansion	1/°C	Volumetric expansion coefficient of the stored liquid
T_max	Maximum Operating Temperature	°C	Highest expected temperature of the liquid during operation
T_design	Design Temperature	°C	Reference temperature used in tank design

Typical Ranges:

Refrigerated ammonia storage (-33°C design, 40°C max ambient)

0.08–0.12 × V_tank

⚠️ Ullage ≥ 15% of total tank volume per NFPA 58 and IIAR Bulletin #117

🏭 Engineering Example

CF Industries Donaldsonville Complex

N/A (industrial facility on Mississippi River alluvium)

LFL

16% vol

IDLH

300 ppm

Storage Type

Refrigerated (-33°C), 12,000 m³ spherical tank

Barrier SIL Rating

SIL 2 for ESD system (IEC 61511)

Vapor Pressure @20°C

885 kPa

Secondary Containment Volume

13,200 m³ (110% of tank capacity)

🏗️ Applications

Process Safety Management (PSM) compliance audits
Layer of Protection Analysis (LOPA) input
Operator training on barrier interdependence
Mechanical Integrity program gap analysis

📋 Real Project Case

Ammonia Refrigeration System HAZOP & LOPA Integration at Midwest Food Processing Plant

Retrofit of legacy ammonia chiller system serving 300k sq ft food processing facility

Challenge: Unplanned releases during maintenance due to undocumented isolation points and missing P&IDs

Read full case study →

Ethylene Oxide Sterilization Facility QRA and Bow-Tie Implementation Grain Elevator Dust Explosion Mitigation Using ASTM E1226-Based Risk Model Offshore LNG Transfer System Fault Tree Analysis and SIS Architecture Optimization

🎨 Technical Diagrams

📚 References

[1]

Guidelines for Hazard Evaluation Procedures — Center for Chemical Process Safety (CCPS)

[2]

Risk Assessment Technical Reference Manual — UK Health and Safety Executive (HSE)

[3]

NFPA 58: Standard for Liquefied Petroleum Gases (LP-Gas) Code — National Fire Protection Association

🔗 Related Knowledge

Fault Tree Analysis for Chemical Release Scenarios Escalation Vector Analysis for Fire-Induced Domino Effects