In the control room of a typical Malaysian oil and gas or petrochemical plant, operators manage hundreds — sometimes thousands — of process alarms. When these alarms are poorly designed, incorrectly prioritised, or simply unnecessary, they stop being safety signals and become noise. Operators learn to ignore them. And when a genuine abnormal situation develops, the real alarm is buried under dozens of nuisance alerts that trigger at the same time.
This is the problem that an alarm rationalization study solves. It is a systematic review of every alarm in a facility’s control system — determining whether each alarm is necessary, correctly prioritised, and providing the operator with actionable information at the right time.
For Malaysian oil and gas and petrochemical facilities, alarm rationalization is increasingly required by PETRONAS process safety standards and is an important component of a comprehensive process safety management programme.
1. What is an Alarm Rationalization Study?
An alarm rationalization study is a structured, systematic review of every alarm in a facility’s Distributed Control System (DCS), Safety Instrumented System (SIS), or SCADA system. Its purpose is to ensure that each alarm:
- ✓ Is necessary — it detects a real, credible abnormal condition that requires operator action
- ✓ Is correctly set-pointed — the alarm threshold gives the operator sufficient time to respond before the situation escalates
- ✓ Is properly prioritised — the urgency reflects the consequence of missing the alarm and the time available to respond
- ✓ Has a defined operator response — the operator knows exactly what action to take and has time to take it
- ✓ Is documented — the rationalization basis is recorded in an alarm database for future review and management of change
ISA-18.2 defines an alarm as “an audible and/or visible means of indicating to the operator an equipment malfunction, process deviation, or abnormal condition requiring a timely response.” If an alarm does not require a timely operator response — it is not an alarm. It is an annunciation, and it should not be configured as an alarm.
2. Why Alarm Management Matters for Process Safety
Poor alarm management is not merely an operations efficiency problem. It is a process safety issue. When operators are overwhelmed by alarm floods during abnormal situations, they cannot identify the initiating cause, cannot determine the correct response, and cannot stop an escalating event before it becomes a major accident.
Alarm flooding and poor alarm management have been identified as contributing factors in major industrial accidents including the Texas City Refinery explosion (2005) and the Buncefield explosion (2005). The common thread: operators received an unmanageable volume of alarms in the minutes before the accident and could not identify the critical ones.
In Malaysian oil and gas and petrochemical plants, the alarm problem is widespread. Facilities that have operated for years accumulate alarms — every engineer who adds a new instrument adds alarms, often without removing or reviewing the ones already there. The result is DCS systems where 60–80% of the alarms in steady-state operation are either unnecessary, incorrectly set-pointed, or generate no operator action.
An alarm rationalization study resets this baseline — eliminating unnecessary alarms, correcting priorities, and ensuring the remaining alarms are meaningful, actionable, and manageable.
3. ISA-18.2 and IEC 62682 — The Governing Standards
Two international standards govern alarm rationalization studies. Both are referenced by PETRONAS and used as the basis for alarm management programmes in Malaysian industrial facilities.
ISA-18.2
Management of Alarm Systems for the Process Industries
Published by the International Society of Automation (ISA). The primary reference standard for alarm management worldwide. Defines the alarm management lifecycle, performance benchmarks, rationalization methodology, and documentation requirements.
Key benchmarks:
Steady state: ≤1 alarm per 10 minutes · Peak: ≤10 alarms per minute · Alarm flood: >10 alarms per minute for >1 minute
IEC 62682
Management of Alarm Systems for the Process Industries
The IEC equivalent of ISA-18.2, adopted internationally and recognised by PETRONAS and major international oil companies. Technically identical in scope to ISA-18.2 with minor regional variations. Both standards are used in Malaysian facility alarm studies.
Malaysian context:
PETRONAS references ISA-18.2/IEC 62682 in its process safety technical standards. Alarm rationalization is expected as part of PSM programmes for major process facilities.
Steady state (target): ≤1 alarm per 10 minutes per operator · Manageable: ≤1 alarm per 5 minutes · Very busy: >1 alarm per 2 minutes · Overloaded: >1 alarm per minute · Flood: >10 alarms per minute for >1 minute. Most Malaysian facilities in their current state operate well above the “overloaded” threshold during abnormal events.
4. Alarm Categories & Rationalization Outcomes
During a rationalization study, each alarm is reviewed against defined criteria and assigned one of the following outcomes:
| Outcome | Definition | Action Required |
|---|---|---|
| Keep | Alarm is valid, necessary, correctly set-pointed, correctly prioritised, and has a defined operator response. | Document in Master Alarm Database. No DCS change required. |
| Modify | Alarm is valid but requires correction — wrong priority, incorrect setpoint, missing or inadequate operator response guidance. | Change DCS configuration per rationalization recommendations. Update alarm database. |
| Delete | Alarm is not necessary — no actionable operator response, duplicate of another alarm, equipment no longer in service, or the condition it detects is better managed through another means. | Remove from DCS. Record deletion basis and justification in Master Alarm Database. |
| Reclassify as Annunciation | Condition is worth communicating to the operator but does not require a timed response. Does not meet the ISA-18.2 definition of an alarm. | Remove from alarm system. Add to event log or annunciation display if still needed for information. |
| Defer | Alarm requires further engineering investigation before a rationalization decision can be made — typically where process data or consequence information is unavailable. | Document in action register. Assign responsible engineer with target date. Track to closure. |
In our experience across Malaysian oil and gas and petrochemical facilities, a typical alarm rationalization study results in 20–40% of alarms being deleted or reclassified, with a further 30–40% requiring modification to setpoints or priority. Facilities that have never conducted a rationalization study often see even higher deletion rates.
5. Alarm Rationalization Study Methodology
PNA Risk Management conducts alarm rationalization studies using a structured methodology aligned to ISA-18.2 and IEC 62682. The process typically follows these phases:
1. DCS Alarm Database Extraction & Baseline Assessment
Extract all current alarms from the DCS system — setpoints, priorities, descriptions, and historical alarm activation frequency. Calculate current alarm rates against ISA-18.2 benchmarks. Identify the worst-performing tags (chattering alarms, nuisance alarms, standing alarms) using alarm history data.
2. Alarm Philosophy Document Review
Review the facility’s existing Alarm Philosophy Document against ISA-18.2 requirements. Many Malaysian facilities have no Alarm Philosophy at all — or one that hasn’t been updated in years. If missing or inadequate, a new Alarm Philosophy is prepared before rationalization begins to establish the criteria for all decisions.
3. Structured Team Review Sessions (Alarm-by-Alarm)
A multidisciplinary team — process engineers, operations staff, control engineers, and the PNA Risk facilitator — reviews each alarm individually. For each alarm, the team determines: Is this alarm necessary? Is the setpoint correct? What is the consequence of missing this alarm? What is the required operator response? What priority should it be? This is the core of the rationalization study.
4. Priority Assignment
Each retained alarm is assigned a priority — typically a three-tier system per ISA-18.2: Priority 1 (Critical / Safety) requiring operator action within 5 minutes, Priority 2 (High) within 15 minutes, Priority 3 (Low) within 60 minutes. Priority assignment must reflect actual consequence severity and available operator response time — not just engineering judgement.
5. Master Alarm Database (MAD) Development
All rationalization decisions are documented in a Master Alarm Database — the governing record for the facility’s alarm system. The MAD includes: alarm tag, description, setpoint basis, priority justification, operator response instruction, and rationalization outcome. The MAD becomes the source of truth for future alarm Management of Change reviews.
6. DCS Implementation Recommendations
A prioritised list of DCS configuration changes — deletions, priority changes, setpoint modifications — is prepared and reviewed with the client’s control systems team. Changes are typically implemented in phases to manage risk and allow operator familiarisation.
7. Post-Implementation Performance Monitoring
After DCS changes are implemented, alarm performance is measured against ISA-18.2 benchmarks — alarm rates per shift, flood frequency, standing alarms, chattering alarms. Performance monitoring confirms that the rationalization has achieved the target improvement and identifies any residual issues for further action.
6. Common Alarm Management Findings in Malaysian Facilities
Based on alarm rationalization studies conducted across Malaysian oil and gas and petrochemical facilities, these problems appear most frequently:
-
No Alarm Philosophy Document exists
The majority of Malaysian facilities have either no Alarm Philosophy, or one that was written during commissioning and never updated. Without a clear philosophy, alarms are added by different engineers using different criteria — creating an inconsistent, poorly structured alarm system.
-
Chattering alarms in steady-state operation
Alarms that activate and clear repeatedly — sometimes hundreds of times per shift — because the process setpoint is set too close to normal operating range. These consume operator attention constantly and train operators to silence alarms rather than respond to them.
-
All alarms set at the same priority
Facilities where 90%+ of alarms are configured at “High” priority — meaning the priority conveys no information about urgency. When everything is high priority, nothing is high priority.
-
Alarms with no defined operator response
Alarms that activate but have no documented operator response — no procedure, no corrective action, no guidance. The operator acknowledges and ignores. These are not alarms — they are events, and they should be removed from the alarm system.
-
Alarms from decommissioned or bypassed equipment
Equipment taken out of service years ago but whose alarms were never removed from the DCS. These generate standing alarms that desensitise operators to real alerts.
-
Consequence-alarm priority mismatch
Alarms with safety-critical consequences configured at low priority — and nuisance alarms configured at high priority. Priority assignments made without consequence analysis, or copied from another facility without site-specific review.
-
Alarm rationalization never conducted or not updated
Many Malaysian facilities have never conducted a formal alarm rationalization. Systems commissioned 10–20 years ago have had alarms added continuously without any systematic review — and the alarm management problem compounds over time.
7. Alarm Rationalization Study Deliverables
A PNA Risk Management alarm rationalization study produces the following documented deliverables:
| Deliverable | Description |
|---|---|
| Alarm Philosophy Document | The governing document defining alarm design principles, priority criteria, setpoint methodology, performance targets, and alarm management lifecycle requirements — aligned to ISA-18.2 and IEC 62682. |
| Baseline Alarm Performance Report | Analysis of current DCS alarm data — alarm rates, worst actors (chattering, standing), priority distribution, and benchmark comparison against ISA-18.2 targets. |
| Master Alarm Database (MAD) | Complete documented record of every alarm reviewed — setpoint basis, priority justification, operator response instruction, rationalization outcome, and responsible engineer. The single source of truth for the facility’s alarm system. |
| DCS Change Implementation List | Prioritised list of all recommended DCS configuration changes — deletions, priority modifications, setpoint changes — with justification and implementation sequence. |
| Post-Implementation Monitoring Plan | Alarm performance metrics to track after DCS changes, with target values per ISA-18.2 benchmarks and schedule for follow-up monitoring reports. |
| Alarm Management Improvement Roadmap | Recommendations for ongoing alarm management — Alarm Management of Change procedure, periodic re-rationalization schedule, training for control room operators, and DCS alarm reporting setup. |
8. Why Choose PNA Risk Management for Alarm Rationalization in Malaysia
PNA Risk Management conducts alarm rationalization studies as part of our comprehensive technical safety consultancy services for oil & gas and petrochemical facilities across Malaysia. Our studies are delivered by experienced process safety engineers with direct knowledge of DCS alarm management, ISA-18.2 methodology, and Malaysian PETRONAS requirements.
| 🔧 ISA-18.2 / IEC 62682 Compliant | Every alarm rationalization study is structured and documented in full alignment with ISA-18.2 and IEC 62682 — the standards referenced by PETRONAS and international clients. |
| 🏭 Malaysia Process Industry Experience | Our team understands Malaysian DCS environments — including common platforms used in oil & gas and petrochemical facilities — and the operational realities of Malaysian plant operations. |
| ⚙️ Integrated with PSM & HAZOP | Alarm rationalization integrated with our HAZOP and PHA services — alarm setpoints informed by consequence analysis, and rationalization outcomes cross-referenced with process safety barriers. |
| 📋 Complete Documentation | Alarm Philosophy Document, Master Alarm Database, DCS change list, and performance monitoring plan — all delivered in formats acceptable for PETRONAS and DOSH process safety submissions. |
| ⚡ Fully Independent | No affiliations with DCS vendors or control systems contractors. Our alarm rationalization recommendations are driven purely by safety and operability — not by what a vendor wants to sell. |
| 🤝 Proven Track Record | Past alarm management studies for oil & gas, petrochemical, and chemical facilities across Peninsular Malaysia and East Malaysia, including PETRONAS-related assets. |
Ready to Conduct an Alarm Rationalization Study for Your Facility?
Whether you need a full alarm rationalization study, an Alarm Philosophy Document, a DCS alarm baseline assessment, or alarm management training for your control room team — PNA Risk Management is ready to scope your project.
Email: adnan@pnarisk.com · Phone: 013-207 1952 · Shah Alam, Selangor
9. Frequently Asked Questions
1. What is an alarm rationalization study?
An alarm rationalization study is a structured, systematic review of every alarm in a facility’s DCS or SCADA system to determine whether each alarm is necessary, correctly configured, properly prioritised, and providing actionable information to the operator. The goal is to eliminate nuisance alarms, reduce alarm floods, and ensure operators receive only meaningful, prioritised alarms during abnormal situations — aligned to ISA-18.2 and IEC 62682 standards.
What is ISA-18.2 and why does it matter?
ISA-18.2 is the internationally recognised standard for the Management of Alarm Systems for the Process Industries. It defines alarm performance benchmarks, methodology for alarm rationalization, and the alarm management lifecycle. In Malaysia, ISA-18.2 is referenced by PETRONAS and is the accepted basis for alarm rationalization studies submitted as part of process safety management systems.
What is an alarm flood and why is it dangerous?
An alarm flood occurs when an abnormal situation triggers a cascade of alarms overwhelming the operator — often dozens or hundreds of alarms per minute. ISA-18.2 defines an alarm flood as more than 10 alarms per minute for more than one minute. When operators cannot process this volume, they cannot identify the underlying cause or take the right corrective action. Alarm floods have been identified as a contributing factor in several major industrial accidents globally.
How long does an alarm rationalization study take in Malaysia?
Duration depends on the number of alarms and DCS complexity. A typical facility with 3,000 to 10,000 alarms may require 4 to 12 weeks for a full rationalization study, including data extraction, team review sessions, documentation, and implementation recommendations. PNA Risk Management provides a detailed scope and timeline during initial project scoping. Contact adnan@pnarisk.com to discuss your facility.
What is a Master Alarm Database (MAD)?
A Master Alarm Database (MAD) is the governing documentation record for a facility’s alarm system. It records every alarm — setpoint basis, priority justification, operator response instruction, and rationalization outcome — and serves as the source of truth for future alarm Management of Change decisions. Maintaining a current MAD is a requirement of ISA-18.2 and a key deliverable of every PNA Risk alarm rationalization study.
Does PNA Risk Management conduct alarm rationalization studies in Malaysia?
Yes. PNA Risk Management conducts alarm rationalization studies for oil and gas, petrochemical, and chemical facilities across Malaysia. Our studies are structured to ISA-18.2 and IEC 62682 and delivered by experienced process safety engineers with direct knowledge of DCS alarm management principles and Malaysian PETRONAS safety requirements. Contact adnan@pnarisk.com to discuss your facility’s alarm management needs.
