🎓 Lesson 12
D5
Case Review: Nitric Acid Tank MOC Failure
A Management of Change (MOC) failure happens when a company makes a change to equipment, process, or procedure without properly reviewing the safety risks—like replacing a tank with one that can’t handle the chemical inside.
🎯 Learning Objectives
- ✓ Analyze a documented MOC failure using the Swiss Cheese Model to identify layered defense gaps
- ✓ Explain how material compatibility misjudgment violates OSHA 1910.119(l)(1) requirements
- ✓ Apply API RP 750 Section 4.3.2 criteria to evaluate whether a proposed change triggers formal MOC review
- ✓ Design a corrective action plan addressing both procedural and cultural deficiencies in MOC execution
📖 Why This Matters
In 2019, a nitric acid storage tank rupture at a U.S. fertilizer facility caused a toxic vapor cloud, evacuations, and $12M in losses—not due to equipment age, but because engineers replaced a carbon steel tank with stainless steel 304 *without* verifying its resistance to hot, concentrated nitric acid. This single MOC omission bypassed four independent safety barriers. Understanding MOC failure isn’t about paperwork—it’s about recognizing how procedural shortcuts become physical failures.
📘 Core Principles
MOC is not a standalone procedure—it sits at the intersection of mechanical integrity, process hazard analysis (PHA), and human factors. At its foundation lies the principle of *change-induced risk amplification*: even minor changes (e.g., material substitution, pressure rating adjustment, control logic update) can alter failure modes, corrosion mechanisms, or reaction kinetics. Effective MOC requires: (1) clear change classification (mechanical, procedural, organizational), (2) PHA revalidation if the change affects process safety information (PSI), (3) verification of material compatibility per NACE MR0175/ISO 15156 and ASTM G32/G102 standards, and (4) documented sign-off by authorized engineering and operations stakeholders. Cultural enablers—like psychological safety to challenge assumptions—are as critical as technical rigor.
📐 MOC Trigger Threshold Assessment
While MOC itself isn’t formula-driven, the decision to initiate formal MOC relies on objective technical thresholds defined in industry standards. API RP 750 Section 4.3.2 specifies quantitative triggers—most critically, changes exceeding ±10% of design basis parameters. This threshold-based assessment ensures consistency and reduces subjective judgment errors.
MOC Trigger Threshold
%Δ = |(New Value − Design Value)| / Design Value × 100%Quantitative criterion to determine whether a proposed change requires formal MOC review per API RP 750 and OSHA 1910.119.
Variables:
| Symbol | Name | Unit | Description |
|---|---|---|---|
| %Δ | Percent change | % | Magnitude of deviation from original design basis parameter |
| New Value | Proposed operating or design parameter | unit-specific (°C, %, psi, etc.) | Value after proposed change |
| Design Value | Original certified design basis parameter | unit-specific (°C, %, psi, etc.) | Baseline value documented in PSI and P&IDs |
Typical Ranges:
API RP 750 threshold: ≥10%
CCPS recommended sensitivity: ≥5% for highly reactive chemicals (e.g., HNO₃, Cl₂)
💡 Worked Example
Problem: A nitric acid storage system is designed for 68% w/w HNO₃ at 35°C and 1.2 atm gauge pressure. Operations propose switching to 70% w/w HNO₃ at 40°C. Does this require formal MOC under API RP 750?
1.
Step 1: Identify design basis parameters — concentration = 68%, temperature = 35°C, pressure = 1.2 atm.
2.
Step 2: Calculate % change in concentration: (70 − 68)/68 = 2.94% (<10%). Temperature change: (40 − 35)/35 = 14.3% (>10%). Pressure unchanged.
3.
Step 3: Per API RP 750 Section 4.3.2, any parameter change >10% of design basis triggers formal MOC — temperature exceeds threshold; therefore, MOC is required.
Answer:
Yes, formal MOC is required. The 14.3% increase in operating temperature exceeds the 10% trigger threshold, mandating revalidation of material compatibility, corrosion rate modeling, and relief system adequacy.
🏗️ Real-World Application
The 2019 Nitric Acid Tank Incident (CSB Report No. 2021-01-I-TX): A facility replaced a corroded carbon steel tank (lined with rubber) with an unlined 304 stainless steel tank to reduce maintenance. Engineers assumed 'stainless = corrosion-resistant' without consulting corrosion databases or performing ASTM G32 crevice corrosion testing. Hot 68–70% HNO₃ rapidly attacked weld heat-affected zones, causing intergranular stress corrosion cracking. The tank failed after 4 months of service. CSB determined the MOC package omitted PSI update, PHA revalidation, and metallurgical review—violating OSHA 1910.119(l)(1) and CCPS Guidelines.
🔧 Interactive Calculator
🔧 Open Process Safety & Risk Management Calculator📋 Case Connection
📋 Nitric Acid Storage Tank MOC Failure Root Cause Analysis at Fertilizer Facility
Post-MOC leak occurred due to incompatible gasket material (EPDM vs. concentrated HNO₃)