Question 6 of 7: Design Deficiencies Revisited, Back-Out and Recovery, and the Hierarchy of Hazard Control

Question 6: Design Deficiencies Revisited, Back-Out and Recovery, and the Hierarchy of Hazard Control (20 marks: 7/7/6)

Question text not reproduced: the examination questions are © Engineers and Geoscientists BC. Open the official past paper (linked at the top of this page) to read the question, then follow the worked solution below.

(i) Design Deficiencies or Defects Causing Product or Process Safety Hazards

• Inadequate factor of safety in structural, pressure, or load-bearing elements relative to actual and foreseeable operating conditions.
• Failure to anticipate foreseeable misuse — a design safe only under ideal conditions, not the way the equipment is actually used in the field.
• Inadequate or absent designed-in guarding, leaving points of operation or power transmission exposed.
• Poor human-factors/ergonomic design that invites an operator error the design should have made difficult or impossible.
• Incorrect material selection for the actual service environment.
• Absence of fail-safe behaviour on control or component failure.
• Missing or inadequate interlocks for unsafe configurations.
• Inadequate warnings/instructions for hazards that could not be designed out.
• Poor maintenance access, which pushes maintenance personnel toward defeating guards or adopting an unsafe working position simply to reach the equipment — the same design failure implicated in Question 7's ladder/flywheel case study.

(ii) Back-Out and Recovery in Accident Prevention

Back-out is the deliberate design or procedural provision that allows a process, task, or piece of equipment to be safely reversed or halted partway through an action, once a hazardous or abnormal condition is detected — before the action reaches an irreversible, unsafe state. An interlock that stops a press mid-stroke when a light curtain is broken, or a written step that lets an operator safely abort a startup sequence when a parameter drifts out of range, are both back-out provisions.

Recovery is the set of provisions, procedural and physical, that let the system or the worker return safely to a known-good state after a back-out (or an actual upset) has occurred, without introducing a second hazard in the process of recovering. Recovery includes clear restart procedures, verification steps confirming the abnormal condition has genuinely cleared before resuming, and physical means (a verified de-energized, zero-energy state) that make the recovery attempt itself safe.

Together, back-out and recovery form a defence-in-depth layer distinct from prevention: prevention tries to stop the hazardous condition from arising at all, while back-out/recovery accepts that an abnormal condition can still occur and ensures a designed, safe path out of it, rather than forcing the operator to either push through a developing hazard or intervene in an uncontrolled way.

(iii) Order of Preference for Eliminating and Controlling Hazards in Industry

The hierarchy of controls, in decreasing order of reliability and preference:

1. Elimination — physically remove the hazard from the workplace entirely (the only measure that removes risk rather than managing it).
2. Substitution — replace the hazard with something less hazardous (a less toxic chemical, a lower-energy process).
3. Engineering controls — isolate people from the hazard by design (guarding, ventilation, interlocks) without depending on human behaviour.
4. Administrative controls — change how people work (procedures, training, signage, job rotation, scheduling), which reduces but does not remove exposure and depends on consistent human compliance.
5. Personal protective equipment (PPE) — the last line of defence, protecting the individual worker only if selected, fitted, worn, and maintained correctly every time.

Every design deficiency in part (i) represents a hazard that was controlled at too low a level in this hierarchy (relying on a warning or PPE) when it could and should have been eliminated or engineered out at the design stage instead.