- What is a HAZOP Study?
- When is HAZOP Required in Malaysia?
- Step 1 — Pre-Study Prerequisites
- Step 2 — Assembling the Right Team
- Step 3 — Node Identification
- Step 4 — Guide Words & Parameters
- Step 5 — Worked Example (Node Analysis)
- Step 6 — Documentation & Action Items
- HAZOP Study Deliverables
- Why HAZOP Studies Fail in Malaysia
- Why Choose PNA Risk Management
- Frequently Asked Questions
A HAZOP study (Hazard and Operability Study) is the most widely used and most rigorous method for identifying major accident hazards in process plants. For Malaysian oil and gas, petrochemical, and chemical facilities, it is not only best practice — it is a legal requirement under CIMAH Regulations 1996 and a mandatory element of PETRONAS process safety standards.
Yet despite being widely required, HAZOP studies in Malaysia frequently fail to deliver their purpose. The study gets done — the report is produced, the action register is filed — but the hazards that matter are missed because the team wasn’t right, the P&IDs were outdated, or the facilitator lacked the experience to push past superficial answers. This guide explains how to get it right.
This is a technical, practical guide — not a marketing overview. It covers every step of how to conduct a proper HAZOP study in Malaysia, from pre-study prerequisites through to post-study deliverables, including a complete guide word table and a worked node analysis example that most HAZOP guides omit entirely.
1. What is a HAZOP Study?
A HAZOP (Hazard and Operability Study) is a structured, systematic, team-based examination of a process facility’s P&IDs (Piping and Instrumentation Diagrams) that uses defined guide words to identify credible deviations from design intent — and then assesses the causes, consequences, existing safeguards, and required actions for each deviation.
The methodology was developed by ICI in the 1960s and is now standardised in IEC 61882 (HAZOP Studies — Application Guide). It is the primary process hazard analysis (PHA) method used in Malaysia’s oil and gas, petrochemical, and chemical industries — and the most commonly accepted basis for the Process Hazard Analysis section of a CIMAH Safety Report submitted to DOSH.
The critical word in HAZOP is operability. HAZOP does not only identify hazards that can cause accidents — it also identifies operating problems that reduce efficiency, cause unwanted shutdowns, or create conditions that eventually lead to hazardous situations. This dual focus makes it the most comprehensive PHA method available.
2. When is a HAZOP Study Required in Malaysia?
In Malaysia, a HAZOP study is required in the following circumstances:
- New process plants — Before startup. HAZOP must be completed during detailed design or pre-commissioning, with all safety-critical actions resolved before plant operations begin.
- CIMAH Safety Report submission — Under CIMAH Regulations 1996, Major Hazard Installations must conduct a Process Hazard Analysis — and HAZOP is the most widely accepted method for DOSH submissions.
- Significant process modifications — Any change to process conditions, equipment, or piping that affects the hazard profile must trigger a HAZOP review of the affected nodes.
- Periodic revalidation — CIMAH requires PHA revalidation every five years. PETRONAS and international best practice recommend every three years for high-hazard facilities.
- PETRONAS mandatory requirement — All major process facilities operated by or contracted to PETRONAS must conduct HAZOP studies aligned to PETRONAS process safety technical standards.
- After serious incidents or near-misses — Where an incident reveals a hazard not captured in the previous HAZOP, a targeted revalidation of the affected nodes is required.
The CIMAH Safety Report submitted to DOSH must demonstrate that a suitable PHA has been conducted by a recognised Competent Person. DOSH reviewers will examine the HAZOP methodology, team composition, and action closeout records. A HAZOP conducted without a qualified independent facilitator may be rejected and require costly re-study.
3. Step 1 — Pre-Study Prerequisites
The quality of a HAZOP study is largely determined before the first session begins. The following prerequisites must be in place before the team convenes:
1. Current, Accurate P&IDs
The single most critical prerequisite. P&IDs must reflect the plant as it is actually built and operated — not the original design. Every modification made since commissioning must be captured. A HAZOP conducted against outdated P&IDs is technically invalid — it examines a plant that no longer exists. In Malaysian facilities, P&ID currency is the most common gap found during pre-study preparation. Verify revision numbers and confirm with operations that diagrams match the field.
2. Process Safety Information (PSI) Package
The team needs: Process Flow Diagrams (PFDs), equipment data sheets, chemical hazard data (MSDS/SDS — toxicity, flammability, reactivity), safe operating limits for all key parameters, cause and effect diagrams for safety interlock systems, and previous HAZOP reports if this is a revalidation study.
3. Design Intent Documentation
Each node needs a documented design intent — the purpose of that section of the process, the intended operating conditions, and the basis for each control and safeguard. Without knowing the design intent, the team cannot evaluate whether a deviation is credible or consequential.
4. HAZOP Terms of Reference
A scoping document defining: the study boundaries, the P&ID revision to be used, the node identification approach, the risk ranking criteria to be applied, the action follow-up process, and the required study deliverables. This prevents scope creep and ensures the study output meets DOSH and PETRONAS requirements.
5. Team Availability Confirmed
All required team members must have confirmed, uninterrupted availability for the full study duration. Partial team attendance — where key members miss sessions — creates coverage gaps. Missing the operations representative for the day covering the most complex unit is not recoverable. Block the time in advance.
4. Step 2 — Assembling the Right HAZOP Team
HAZOP is a team exercise. Its value comes from combining multiple disciplines around a shared examination of the process. The right team composition is essential — missing a discipline creates blind spots that the study will never recover.
HAZOP Facilitator
Guides the team through the study systematically. Ensures every credible deviation is examined. Challenges superficial answers. Keeps the team focused without rushing. Must be independent (not employed by the facility) and ideally TÜV-certified for DOSH and PETRONAS acceptance. This is the most important role in the study.
Scribe / Recorder
Records every finding, cause, consequence, safeguard, and action item in real time. Must be technically competent enough to capture the technical content accurately. The scribe record is the legally defensible evidence of the study. Poor scribing produces a poor report.
Process Engineer
Provides detailed knowledge of the process chemistry, thermodynamics, and design basis. Explains the design intent for each node. Identifies technically credible deviations and their expected process response. Typically the most knowledgeable person in the room about what the plant does.
Operations Representative
The most undervalued team member. Provides knowledge of how the plant actually operates — the deviations that occur routinely, the workarounds operators use, the procedural gaps. Without an experienced operator in the room, the HAZOP identifies hazards in the design but not in the operation.
Instrument / Control Engineer
Provides expertise on control system responses, alarm settings, safety interlock trip logic, and instrument failure modes. Critical for evaluating the adequacy of existing control and safety instrumented system safeguards.
Mechanical / Piping Engineer
Provides knowledge of equipment design limits, material selection, corrosion allowances, and piping system constraints. Essential for evaluating consequence severity for mechanical failure scenarios and identifying maintenance-related deviations.
A HAZOP team of 6 to 8 members typically achieves the best balance — enough disciplines to catch all hazard types, small enough to maintain focused discussion. Teams larger than 10 become difficult to manage and tend to reduce participation depth. Specialist advisors (e.g. materials expert, environmental advisor) can join for specific nodes rather than attending the full study.
5. Step 3 — Node Identification
Before the HAZOP sessions begin, the facilitator and process engineer divide the plant’s P&IDs into nodes — defined sections of the process where parameters have a consistent design intent.
How to define HAZOP nodes
Each node should represent a logical section of the process with a clear purpose. Nodes are typically defined by:
- A single piece of major equipment (a reactor, a vessel, a heat exchanger)
- A process line between two pieces of equipment
- A utility system serving a defined function (cooling water supply, instrument air header)
- A defined operating mode (startup, normal operation, shutdown, emergency)
Node boundaries must be clearly marked on the P&IDs before sessions begin. The facilitator numbers each node, documents the design intent, and identifies which process parameters are relevant to that node. Node definition is a critical pre-study activity — poorly defined nodes either make sessions too long (nodes too large) or miss interconnections (nodes too small).
6. Step 4 — HAZOP Guide Words & Parameters
The core of HAZOP methodology is the systematic application of guide words to process parameters. Each combination generates a candidate deviation that the team evaluates for credibility, cause, consequence, and safeguard adequacy.
| Guide Word | Meaning | Example deviation | Typical causes |
|---|---|---|---|
| NO / NONE | Complete negation of design intent | No Flow — no flow where flow is intended | Pump failure, closed valve, blocked line, loss of suction pressure |
| MORE | Quantitative increase of a parameter | High Flow, High Temperature, High Pressure | Control valve failure open, cooling failure, heat exchanger fouling, runaway reaction |
| LESS | Quantitative decrease of a parameter | Low Flow, Low Temperature, Low Pressure | Pump degradation, partial blockage, heat loss, control valve failure closed |
| REVERSE | Opposite direction or intent | Reverse Flow — flow in wrong direction | Pump failure with no check valve, pressure reversal across a boundary, siphoning |
| AS WELL AS | Additional component or activity | Contamination — wrong material also present | Cross-connection, valve misalignment, incorrect material batch, corrosion products |
| PART OF | Only part of the design intent achieved | Partial composition — only some components present | Incomplete mixing, phase separation, incomplete reaction, reagent starvation |
| OTHER THAN | Complete substitution — something different occurs | Wrong fluid, wrong phase, wrong material | Wrong chemical delivered, phase change, condensation where vapour expected |
Not every guide word applies to every parameter — the facilitator exercises judgement to focus on credible deviations. For each credible deviation, the team records: Cause → Consequence → Existing Safeguards → Recommended Action.
7. Step 5 — Worked Example: Node Analysis
This is the section most HAZOP guides skip. Here is a simplified worked example showing how a HAZOP team would analyse a single node — the feed pump to a distillation column.
Worked Node Example
Node: Feed pump P-101A/B → Distillation Column T-201 feed line (6″ CS, design 15 barg, 120°C max) · Parameter: Flow · Design intent: Continuous feed of hydrocarbon feed stock at 50 m³/hr
| Guide Word | Deviation | Credible Causes | Consequence | Existing Safeguards | Actions Required |
|---|---|---|---|---|---|
| NO | No Flow | Pump failure (P-101A/B), suction valve inadvertently closed, loss of feed tank level, pipe blockage | Loss of column feed → column flooding or dry tray damage → potential for pressure upset | Low flow alarm FAL-101; pump auto-standby switch P-101B; operator response | Verify low-low flow trip FSLL-101 setpoint is adequate. Confirm auto-standby logic tested. Action: I&E to verify. |
| MORE | High Flow | Control valve FCV-101 fails open, bypassed, or instrument fault | Column flooding, entrainment to overhead condenser, potential for overpressure of downstream equipment | High flow alarm FAH-101; pressure relief valve PRV-201 on column | Confirm PRV-201 sizing accounts for maximum FCV-101 open flow scenario. Action: Process Eng to verify. |
| REVERSE | Reverse Flow | Both pumps stopped while column remains pressurised; no check valve on pump discharge | Back-flow of hot process fluid into pump casing → pump damage, potential seal failure, hydrocarbon release at pump | Check valve CV-101 on pump discharge line | Verify CV-101 is included in mechanical integrity inspection programme and tested at each turnaround. Action: Maintenance to confirm. |
| AS WELL AS | Contamination in Feed | Cross-connection to water service during maintenance; incorrect chemical batch; corrosion products from upstream tank | Water contamination → vaporisation in hot column → sudden pressure surge; corrosion products → tray blockage or fouling | Sampling point SP-101 upstream; operator periodic sampling; commissioning blinds | Confirm sampling frequency is defined in operating procedure and result actioned. Action: Operations to confirm. |
This single parameter (flow) for this single node generates four action items — all of them real and meaningful. A plant with 100 nodes and 6 parameters per node generates hundreds of similarly specific findings. This is why HAZOP takes time and why the quality of the facilitator directly determines the quality of the output.
8. Step 6 — Documentation & Action Item Management
The HAZOP study is only as good as its documentation. Every session must be recorded in real time by the scribe. The HAZOP record must capture, for each deviation examined:
- Node number and description
- Design intent
- Guide word + parameter = deviation
- Credible causes
- Consequence (with severity assessment)
- Existing safeguards
- Recommendation / action (if additional safeguards are needed)
- Action number, responsible party, and target date
Every action item must be tracked to closure. This is where most Malaysian HAZOP programmes fail — the study produces 80–150 action items, the report is filed, and three years later 40% of actions remain open with no tracking system. A HAZOP study that generates actions but doesn’t close them provides no safety improvement.
For CIMAH-regulated facilities, DOSH expects evidence that HAZOP actions have been closed out before the CIMAH Safety Report is finalised. An open action item register is a finding in DOSH inspections. Establish an action tracking system before the study begins — not after.
9. What a HAZOP Study Delivers
A properly conducted HAZOP study by PNA Risk Management produces the following documented outputs:
| Deliverable | What it Contains |
|---|---|
| HAZOP Report | Scope, methodology, team members, node list, all deviations examined with causes / consequences / safeguards / recommendations — the complete record of the study. Formatted for DOSH CIMAH submission. |
| Action Item Register | All recommendations with unique action number, responsible party, target date, and status. Exported in Excel format for tracking. Updated when actions are closed and provided to client as a controlled document. |
| Marked-Up P&IDs | P&IDs annotated to show node boundaries and study coverage — demonstrating to DOSH that all sections of the plant have been reviewed. |
| Node Index | Complete list of all nodes examined, with design intent statements and cross-references to the HAZOP report. |
| HAZOP Closeout Record | Evidence of action completion — provided at study close or at project completion review. Required for CIMAH Safety Report finalisation and PETRONAS verification. |
10. Why HAZOP Studies Fail in Malaysia — The Most Common Pitfalls
Many Malaysian facilities conduct HAZOP studies that technically comply with regulatory requirements but fail to deliver the risk reduction they should. These are the most common failure modes:
P&IDs not current before the study begins
The most consequential failure. If the P&IDs have not been updated after process modifications, the HAZOP examines a process that no longer exists and misses hazards in the process that does. Verify P&ID currency before committing to a study date.
Facilitator lacks independence or certification
An internal facilitator — even a highly capable one — is subject to organisational pressures that compromise objectivity. An uncertified external facilitator may not be accepted by DOSH or PETRONAS auditors. TÜV certification is the standard that eliminates both risks.
Operations representative absent or marginalised
HAZOP teams often have strong engineering representation but weak operations input. The operator who runs the unit every day knows things the process engineer doesn’t — the deviations that happen routinely, the shortcuts taken under time pressure, the alarms that are always acknowledged and ignored. Their knowledge is irreplaceable.
Team rushes to avoid over-running the schedule
Pressure to complete the study in fewer days than the complexity warrants. Nodes are rushed. “No action required” is agreed too quickly. Complex deviations are parked rather than resolved. The consequence is a report that looks complete but misses real hazards.
Consequence severity is systematically underestimated
Teams sometimes rate consequences as minor to avoid generating actions that are expensive to close. An experienced independent facilitator challenges these assessments and maintains the integrity of consequence ratings throughout the study.
Action items not tracked or closed
The study ends, the report is filed, and the action register is never followed up. Years later, the same hazards are identified in the next HAZOP revalidation — because nothing was done after the last one. Action management must be built into the HAZOP programme before the first session.
11. Why Choose PNA Risk Management to Facilitate Your HAZOP
PNA Risk Management is Malaysia’s leading independent process hazard analysis consultant. Our HAZOP studies are different from generic process safety consultants in ways that matter for Malaysian facilities and DOSH submissions.
| 🏅 TÜV-Certified Facilitators | All PNA Risk HAZOP studies are facilitated by TÜV-certified engineers — the internationally recognised standard accepted by PETRONAS, DOSH, and international operators without qualification. |
| 🇲🇾 Malaysia Regulatory Experience | 20+ years of direct experience with DOSH CIMAH submissions and PETRONAS process safety requirements. Our reports are structured to meet DOSH reviewer expectations — reducing revision cycles and accelerating Safety Report approval. |
| ⚡ Fully Independent | No affiliations with EPC contractors, equipment vendors, or software companies. Our HAZOP findings reflect what we actually find — not what any third party wants us to say. |
| 🔗 Integrated with QRA & CIMAH | HAZOP findings feed directly into our QRA and consequence analysis and CIMAH Safety Report preparation — one integrated team, one consistent hazard register, no gaps between study outputs. |
| 📋 CIMAH-Ready Documentation | Every HAZOP report, action register, and node index is produced in a format explicitly structured for DOSH CIMAH review — not a generic template adapted after the fact. |
| 🤝 Proven Malaysian Track Record | Past HAZOP studies for Dialog Terminals, Chemsain Konsultant, Storm Technical Services, AGV Environment, Innoveam and EeHSSE — across oil and gas, petrochemical, and chemical process industries in Peninsular Malaysia and East Malaysia. |
Ready to Commission a HAZOP Study for Your Facility?
Whether you need a new plant HAZOP, a periodic revalidation, a post-modification targeted review, or HAZOP output integrated into a CIMAH Safety Report — PNA Risk Management is ready to scope and deliver.
Email: adnan@pnarisk.com · Phone: 013-207 1952 · Shah Alam, Selangor
12. Frequently Asked Questions
What is a HAZOP study and why is it required in Malaysia?
A HAZOP (Hazard and Operability Study) is a structured, team-based review of a process plant’s P&IDs using guide words to identify deviations from design intent and their consequences. In Malaysia, HAZOP is required under CIMAH Regulations 1996 for Major Hazard Installations as part of the Process Hazard Analysis obligation in the CIMAH Safety Report. PETRONAS additionally mandates HAZOP for all major process facilities under its operations and supply chain.
Who should be in a HAZOP team in Malaysia?
A HAZOP team should include: a qualified independent facilitator (TÜV-certified for DOSH and PETRONAS acceptance), a scribe, process engineer, operations representative, instrument/control engineer, mechanical/piping engineer, and a safety representative. A team of 6–8 members is optimal. Missing any key discipline creates blind spots. For CIMAH-regulated facilities, the HAZOP must be facilitated by a recognised Competent Person.
What are HAZOP guide words and how are they used?
Guide words are structured terms applied to process parameters to generate credible deviations for examination. The standard HAZOP guide words are: No/None, More, Less, Reverse, As Well As, Part Of, and Other Than. For each combination of guide word and parameter (e.g. “No Flow”, “High Temperature”, “Reverse Flow”), the team identifies the cause, consequence, existing safeguards, and recommended actions. Not every guide word applies to every parameter — the facilitator focuses on credible deviations only.
How long does a HAZOP study take in Malaysia?
Duration depends on plant complexity and number of nodes. A simple process unit may require 3 to 5 days of review. A complex refinery or petrochemical unit requires 10 to 20 days. Pre-study preparation adds 2 to 5 days. PNA Risk Management scopes duration accurately during project kick-off so clients can plan team availability without over-running or under-resourcing the study.
When must a HAZOP study be repeated in Malaysia?
CIMAH requires PHA revalidation every five years. PETRONAS and international best practice recommend every three years for high-hazard plants. A HAZOP must also be updated following significant process modifications, after serious incidents or near-misses that reveal uncaptured hazards, or when new chemicals or significant operating condition changes are introduced.
What qualifications should a HAZOP facilitator in Malaysia have?
A HAZOP facilitator should hold TÜV certification or equivalent — the internationally recognised standard accepted by DOSH and PETRONAS. They must have extensive hands-on facilitation experience across multiple process industries, direct familiarity with Malaysian CIMAH and PETRONAS requirements, and the ability to manage complex multi-day review sessions with multidisciplinary teams. All PNA Risk Management HAZOP facilitators are TÜV-certified with 20+ years of Malaysian industry experience.
