View Categories

LOPA Calculations Guide

LOPA calculations are used to determine whether existing Independent Protection Layers (IPLs) reduce risk sufficiently to achieve an acceptable level. During a Layer of Protection Analysis, these calculations identify any remaining risk gap, establish the performance required from safety barriers, and calculate the demand rates that support Safety Instrumented Function (SIF) design.

Mangan Software Solutions’ Safety Lifecycle Manager (SLM) automatically performs these calculations throughout the LOPA process, helping teams reduce manual effort while maintaining consistency across every scenario. By automating risk gap, barrier target and demand rate calculations, facilitators can focus on validating assumptions rather than performing complex mathematical calculations.

This guide explains the key LOPA calculations, how they are performed, and how SLM uses them to support faster, more accurate LOPA studies.

Understanding LOPA Calculations

LOPA calculations combine several pieces of risk information to determine whether a hazardous scenario has been reduced to an acceptable level. Rather than considering only the initiating event frequency, LOPA evaluates the effectiveness of each Independent Protection Layer (IPL), along with enabling events and conditional modifiers, to calculate the final mitigated event frequency.

The principal calculations performed during a LOPA study include:

  • Risk gap calculations
  • Mitigated Event Frequency (MEF)
  • Target Mitigated Event Likelihood (TMEL)
  • Barrier target calculations
  • Risk Reduction Factor (RRF)
  • Probability of Failure on Demand (PFD)
  • Barrier demand rate calculations

Understanding how these values relate to one another allows facilitators to determine whether additional protection layers or recommendations are required before a scenario can be considered acceptable.

If you’re new to the methodology, our What Is LOPA? guide explains the overall process before exploring the calculations in greater detail.

How the LOPA Gap Is Calculated

The primary result produced during a LOPA study is the LOPA gap. This value represents the difference between the calculated mitigated event frequency and the organisation’s acceptable target likelihood.

The calculation compares:

  • Initiating Event Frequency (IEF)
  • Target Mitigated Event Likelihood (TMEL)
  • Independent Protection Layer PFD values
  • Enabling Event probabilities
  • Conditional Modifier probabilities

Each protection layer progressively reduces the initiating event frequency until the mitigated event frequency (MEF) is calculated.

The LOPA gap is then determined using:

LOPA Gap = Mitigated Event Frequency ÷ Target Mitigated Event Likelihood

A value less than or equal to one indicates the scenario has achieved its target risk level. Any value greater than one indicates additional risk reduction is still required.

Conditional modifier probabilities can significantly influence these calculations. Learn more in our LOPA Conditional Modifiers guide.

LOPA Risk Gap Colour Coding

Many organisations use colour coding to quickly identify scenarios requiring further action.

  • Green – Gap ≤ 1 (acceptable risk)
  • Yellow – Gap > 1 but < 10 (additional protection with RRF 10 required)
  • Orange – Gap ≥ 10 but < 100 (typically requires SIL 1 performance)
  • Red – Gap ≥ 100 (typically requires SIL 2 or higher performance)

This visual approach enables facilitators to prioritise scenarios requiring immediate attention and quickly identify where additional Independent Protection Layers or recommendations may be necessary.

Within SLM, scenario summaries display these calculated gaps automatically, allowing facilitators to review an entire study without manually calculating individual scenarios.

LOPA Barrier Target Calculations

Once a risk gap has been identified, the required performance of each Safety Instrumented Function (SIF) can be calculated automatically.

SLM calculates:

  • Target Risk Reduction Factor (RRF)
  • Target Probability of Failure on Demand (PFD)
  • Required Safety Integrity Level (SIL)

Two calculation methods are available:

Cause Summation

This method combines the required risk reduction across every applicable scenario to determine the overall target performance for the barrier.

Highest Gap

This method identifies the scenario with the largest remaining risk gap and sizes the barrier to satisfy that single highest requirement.

Once calculated, these targets can be transferred directly into the Instrumented Systems module to support Safety Instrumented Function design and verification.

LOPA Barrier Demand Rate Calculations

Demand rate calculations estimate how frequently each protection layer is expected to operate.

The calculation considers:

  • The initiating event frequency
  • The Probability of Failure on Demand (PFD) for upstream barriers
  • The order in which barriers activate within each scenario

For every scenario, the initiating event frequency is multiplied by the PFD values of all barriers activated beforehand. The resulting demand rates are then combined to produce the calculated demand rate for the barrier.

Accurate demand rates are valuable because they can be used when designing Safety Instrumented Functions and later compared with actual operational demand data.

Understanding enabling events is equally important when determining realistic demand rates. See our LOPA Generic Enabling Events guide for further information.

How SLM Automates LOPA Calculations

Performing LOPA calculations manually across dozens or hundreds of scenarios can be time-consuming and prone to error.

SLM automates the complete calculation process by:

  • Calculating the LOPA gap for every scenario
  • Applying enabling event and conditional modifier probabilities
  • Determining mitigated event frequencies
  • Calculating target RRF, PFD and SIL requirements
  • Calculating barrier demand rates
  • Passing calculated targets directly into Instrumented Systems where appropriate

Automation improves consistency, reduces calculation errors and ensures every scenario is evaluated using the same methodology throughout the study.

For a broader understanding of how these calculations fit within an overall study, see our LOPA Facilitation Guide.

Best Practices for Deleting Objects

LOPA calculations determine whether existing protection layers reduce risk sufficiently to meet an acceptable target likelihood by calculating the remaining risk gap.

The LOPA gap is the ratio between the Mitigated Event Frequency (MEF) and the Target Mitigated Event Likelihood (TMEL). Values greater than one indicate additional risk reduction is required.

The Target Risk Reduction Factor defines how much additional risk reduction a barrier must provide to close the remaining LOPA gap.

Demand rates help determine the expected operating frequency of safety barriers and support the design and validation of Safety Instrumented Functions.

External Reference

For internationally recognised guidance on functional safety and Layer of Protection Analysis, refer to the International Electrotechnical Commission (IEC), publisher of IEC 61511.

Please complete the form below

Please complete the form below.

You will automatically be forwarded to a demonstration video