Pressure Vessel Risk Assessment in Service

A pressure vessel can appear serviceable from the outside while deterioration progresses at the wetted surface, beneath insulation, or within a local high-stress area. For plant owners, the consequence is not merely an unplanned outage. Loss of containment can expose people to stored energy, hot fluids, toxic process media and serious production disruption. A pressure vessel risk assessment provides the disciplined basis for deciding where inspection attention is required, what evidence is needed and whether equipment can remain in safe service.

Risk assessment does not replace the prescribed in-service inspection and certification process. It strengthens it by connecting the vessel’s design, operating duty, known condition and credible degradation mechanisms. The outcome should be a documented, defensible inspection strategy that is proportionate to the hazards and supported by competent technical judgement.

What a pressure vessel risk assessment should establish

For operating pressure equipment, risk is not a generic score applied to a nameplate. It is the relationship between the likelihood of a failure mechanism progressing and the consequence if containment, pressure control or a protective device does not perform as intended.

A sound assessment first defines the pressure boundary and its duty. This includes the vessel’s design and construction details, maximum allowable working pressure, temperature limits, contents, corrosion allowance, connected pipework and safety devices. It also considers how the asset is actually operated, rather than relying solely on original design assumptions. Changes to product chemistry, pressure cycles, batch frequency, cleaning regimes or operating temperature can materially alter the risk profile.

The assessment then identifies credible damage mechanisms and the locations where they are most likely to occur. It should determine whether existing examination methods can detect those mechanisms at an appropriate stage of development. Finally, it should set controls, inspection scope and timing, and the conditions that would require engineering review before continued operation.

AS 3788 provides the central Australian framework for in-service inspection of pressure equipment. The applicable inspection requirements, along with workplace health and safety duties and any jurisdictional registration obligations, must be considered for the particular plant and location. A risk-based approach should complement these obligations, not be used to defer mandatory examination without technical justification.

Begin with reliable asset and operating data

The quality of the assessment cannot exceed the quality of the available information. Missing drawings, uncertain materials, incomplete repair records or absent operating history create uncertainty that must be treated conservatively. A vessel with limited records may require additional examination before its condition and remaining service suitability can be established.

Useful information includes the manufacturer’s data report, design registration details where applicable, fabrication drawings, material specifications, weld records, past inspection reports, thickness readings, repair documentation, pressure test history and records for safety valves or other protective devices. Current process information is equally significant. Inspectors need to understand normal and upset pressures and temperatures, start-stop frequency, media composition, contaminants, cleaning chemicals and periods out of service.

For example, a compressed-air receiver operating in a dry, controlled environment presents a different inspection problem from a process vessel exposed to chlorides, acidic washdown, product residues or wet insulation. Both may have similar pressure ratings, but their deterioration pathways and inspection priorities can be very different.

Confirm the equipment’s service history

Risk rises when service has changed without a corresponding review of the equipment. Common triggers include increased production rates, altered cleaning-in-place chemistry, a change in feedstock, recurring pressure excursions, modifications to nozzles, replacement of a relief valve, or a vessel returned to operation after extended lay-up.

These changes do not automatically make the vessel unsafe. They do, however, require the operator to confirm that the original design basis, inspection plan and protective systems remain suitable. Management of change is therefore an essential input to risk assessment, not an administrative afterthought.

Identify credible deterioration mechanisms

An effective assessment distinguishes plausible mechanisms from every theoretical defect that could exist. This requires knowledge of materials, fabrication details, service conditions and previous findings. It also requires independence: the inspection conclusion should be based on evidence and recognised engineering principles, not production pressure or a preferred repair outcome.

For carbon steel pressure vessels, general corrosion and localised pitting are common concerns, particularly at low points, liquid-vapour interfaces, under deposits and around nozzles. Corrosion under insulation can remain concealed until significant wall loss has occurred. Internal coatings and linings may reduce exposure, but their condition and continuity must be verified rather than assumed.

Other mechanisms may include erosion, fatigue from pressure or thermal cycling, stress corrosion cracking, caustic attack, hydrogen-related damage, creep at elevated temperature, refractory deterioration, weld defects or distortion. External factors matter as well. Inadequate supports, vibration, impact damage, poor drainage, corroded platforms and inaccessible safety devices can affect the safe operation and inspectability of the asset.

The purpose is to develop a credible damage map. That map identifies the areas most likely to deteriorate, the expected form of damage, the consequence of missed deterioration and the most suitable examination method. A blanket thickness survey may be appropriate for some vessels, but it may miss localised cracking or attack concentrated in a small, process-specific area.

Match inspection methods to the risk

Inspection planning should answer a practical question: what evidence is required to make a safe decision about continued service? The answer may involve external visual examination, internal visual examination, ultrasonic thickness measurement, targeted non-destructive testing, verification of safety devices, or an engineering assessment of remaining thickness and allowable pressure.

The inspection method must suit the anticipated mechanism. Ultrasonic thickness testing is valuable for quantifying wall loss, but it does not by itself establish the absence of cracking, lining failure or defects concealed by inaccessible geometry. Internal inspection can reveal process deposits, corrosion patterns and local conditions that are not visible externally, yet access constraints may require planning during a shutdown. The trade-off between production availability and examination scope should be made explicitly, with the residual risk understood by the asset owner.

Inspection intervals also require judgement. A fixed interval may be appropriate where condition is stable, service is well understood and prior records are reliable. Shorter intervals or condition monitoring may be warranted where deterioration rates are uncertain, the consequence of failure is high, or service conditions have changed. Conversely, extending an interval requires reliable evidence, not an assumption that previous good condition will continue indefinitely.

Assess consequences beyond vessel rupture

The highest-consequence event is often assumed to be catastrophic rupture, but a useful assessment considers more credible loss-of-containment scenarios as well. A leaking manway gasket, failed instrument connection, blocked relief path or corroded nozzle can still cause injury, release hazardous media and interrupt operations.

Consequence assessment should account for the stored energy, fluid properties, vessel location, occupancy, nearby ignition sources, access arrangements and potential escalation to adjacent plant. A vessel in a segregated outdoor area may have a different personnel consequence from an equivalent vessel located within a processing room. However, reduced exposure does not remove the need for compliant inspection, maintenance and certification.

Protective measures need verification. Pressure relief devices must be correctly selected, maintained and installed so that they can protect the equipment under foreseeable conditions. Pressure controls, alarms, interlocks, isolation arrangements and operating procedures should be considered as layers of protection, while recognising that they do not compensate for an unacceptable pressure boundary condition.

Turn findings into clear actions

A risk assessment has limited value if its findings are not converted into accountable actions. Inspection reports should state the condition observed, the basis for conclusions, limitations of the examination and any recommendations for repair, further testing, monitoring or engineering review. Actions should be prioritised according to safety significance and assigned a clear completion pathway.

Where wall loss is identified, an engineering assessment may be required to determine remaining strength, allowable operating conditions and the next examination date. Where cracking, distortion, significant corrosion, deficient safety devices or uncertain repairs are found, continued operation should not be presumed. The appropriate response depends on the evidence and may include isolation, repair to an approved procedure, alteration, de-rating, more frequent inspection or replacement.

Records are part of the control system. Trendable thickness data, photographs, inspection drawings, repair records and certificates enable future inspectors and plant managers to recognise change over time. They also provide evidence that the asset owner has exercised due diligence in managing regulated pressure equipment.

Independent competence supports defensible decisions

Pressure equipment assessments are often undertaken during shutdown windows, when production demands are acute and decisions may have significant cost implications. This is precisely when impartial inspection advice matters. The person assessing condition must be able to identify a concern clearly, explain its significance and recommend the appropriate next step without a conflict arising from manufacture, repair or asset ownership.

An in-service inspector working to AS 3788 requirements brings the necessary inspection discipline, while AICIP accreditation provides recognised assurance of competence in pressure equipment inspection. More complex cases may also require engineering input informed by ASME or National Board experience, particularly where repair history, imported equipment, altered service conditions or non-standard construction complicate the assessment.

A pressure vessel risk assessment should leave the asset owner with more than a rating. It should establish what is known, what remains uncertain and what must be done to keep the equipment safe, compliant and available for its intended duty. That clarity supports sound shutdown planning long before a condition issue becomes an emergency.