(a) For each scenario where a PHA identifies the potential for a major incident, the owner or operator shall have a SPA team perform a written SPA to determine (1) the effectiveness of existing individual safeguards; (2) the combined effectiveness of all existing safeguards for each failure scenario in the PHA; (3) the individual and combined effectiveness of safeguards recommended in the PHA; and (4) the individual and combined effectiveness of additional or alternative safeguards that may be needed.

(b) All independent protection layers (IPLs) for each failure scenario shall be independent of each other and independent of initiating causes.

(c) The SPA shall use a quantitative or semi-quantitative method, such as Layer of Protection Analysis (LOPA) or an equally effective method. The risk reduction obtainable by each IPL shall be based on site-specific failure rate data, or in the absence of such data, industry failure rate data for each device, system, or human factor.

(d) The owner or operator shall complete all SPAs for the PHA within six (6) months of completion of the PHA.

(e) The SPA shall be performed by a team with expertise in engineering and process operations and the team shall include at least one operating employee who has experience and knowledge specific to the process being evaluated. The team shall also include one member knowledgeable in the specific SPA methodology being used. As necessary, the team shall consult with individuals with expertise in damage mechanisms, process chemistry, or an engineer specializing in controls systems and instrumentation. The owner or operator shall provide for employee participation in this process, pursuant to section 2762.10. The PHA team may perform the SPA if the PHA team meets the requirements of this subsection.

(f) The SPA team shall document the following: (1) potential initiating events and their likelihood and possible consequences, including equipment failures, human errors, loss of flow control, loss of pressure control, loss of temperature control, loss of level control, excess reaction or other conditions that may lead to a loss of containment; (2) the risk reduction achieved by each IPL for each initiating event; (3) necessary maintenance and testing to ensure that all IPLs function as designed; and (4) recommendations to address any deficiencies identified by the SPA.

(g) The SPA findings and recommendations shall be appended to the PHA report.

(h) The owner or operator shall follow the corrective action work process documented in subsections 2762.16 (d) and (e) when resolving the SPA team's findings and recommendations, determining action items for implementation, tracking to completion, and documentation of closeout.

(i) All SPA documentation shall be retained for the life of the process.