LOPA Calculations Guide
LOPA calculations are used to determine whether existing Independent Protection Layers (IPLs) reduce risk sufficiently to achieve an acceptable level. During a Layer of Protection Analysis, these calculations identify any remaining risk gap, establish the performance required from safety barriers, and calculate the demand rates that support Safety Instrumented Function (SIF) design.
Mangan Software Solutions’ Safety Lifecycle Manager (SLM) automatically performs these calculations throughout the LOPA process, helping teams reduce manual effort while maintaining consistency across every scenario. By automating risk gap, barrier target and demand rate calculations, facilitators can focus on validating assumptions rather than performing complex mathematical calculations.
This guide explains the key LOPA calculations, how they are performed, and how SLM uses them to support faster, more accurate LOPA studies.
Understanding LOPA Calculations
LOPA calculations combine several pieces of risk information to determine whether a hazardous scenario has been reduced to an acceptable level. Rather than considering only the initiating event frequency, LOPA evaluates the effectiveness of each Independent Protection Layer (IPL), along with enabling events and conditional modifiers, to calculate the final mitigated event frequency.
The principal calculations performed during a LOPA study include:
- Risk gap calculations
- Mitigated Event Frequency (MEF)
- Target Mitigated Event Likelihood (TMEL)
- Barrier target calculations
- Risk Reduction Factor (RRF)
- Probability of Failure on Demand (PFD)
- Barrier demand rate calculations
Understanding how these values relate to one another allows facilitators to determine whether additional protection layers or recommendations are required before a scenario can be considered acceptable.
If you’re new to the methodology, our What Is LOPA? guide explains the overall process before exploring the calculations in greater detail.
How the LOPA Gap Is Calculated
The primary result produced during a LOPA study is the LOPA gap. This value represents the difference between the calculated mitigated event frequency and the organisation’s acceptable target likelihood.
The calculation compares:
- Initiating Event Frequency (IEF)
- Target Mitigated Event Likelihood (TMEL)
- Independent Protection Layer PFD values
- Enabling Event probabilities
- Conditional Modifier probabilities
Each protection layer progressively reduces the initiating event frequency until the mitigated event frequency (MEF) is calculated.
The LOPA gap is then determined using:
LOPA Gap = Mitigated Event Frequency ÷ Target Mitigated Event Likelihood
A value less than or equal to one indicates the scenario has achieved its target risk level. Any value greater than one indicates additional risk reduction is still required.
Conditional modifier probabilities can significantly influence these calculations. Learn more in our LOPA Conditional Modifiers guide.
LOPA Risk Gap Colour Coding
Many organisations use colour coding to quickly identify scenarios requiring further action.
- Green – Gap ≤ 1 (acceptable risk)
- Yellow – Gap > 1 but < 10 (additional protection with RRF 10 required)
- Orange – Gap ≥ 10 but < 100 (typically requires SIL 1 performance)
- Red – Gap ≥ 100 (typically requires SIL 2 or higher performance)
This visual approach enables facilitators to prioritise scenarios requiring immediate attention and quickly identify where additional Independent Protection Layers or recommendations may be necessary.
Within SLM, scenario summaries display these calculated gaps automatically, allowing facilitators to review an entire study without manually calculating individual scenarios.
LOPA Barrier Target Calculations
Once a risk gap has been identified, the required performance of each Safety Instrumented Function (SIF) can be calculated automatically.
SLM calculates:
- Target Risk Reduction Factor (RRF)
- Target Probability of Failure on Demand (PFD)
- Required Safety Integrity Level (SIL)
Two calculation methods are available:
Cause Summation
This method combines the required risk reduction across every applicable scenario to determine the overall target performance for the barrier.
Highest Gap
This method identifies the scenario with the largest remaining risk gap and sizes the barrier to satisfy that single highest requirement.
Once calculated, these targets can be transferred directly into the Instrumented Systems module to support Safety Instrumented Function design and verification.
LOPA Barrier Demand Rate Calculations
Demand rate calculations estimate how frequently each protection layer is expected to operate.
The calculation considers:
- The initiating event frequency
- The Probability of Failure on Demand (PFD) for upstream barriers
- The order in which barriers activate within each scenario
For every scenario, the initiating event frequency is multiplied by the PFD values of all barriers activated beforehand. The resulting demand rates are then combined to produce the calculated demand rate for the barrier.
Accurate demand rates are valuable because they can be used when designing Safety Instrumented Functions and later compared with actual operational demand data.
Understanding enabling events is equally important when determining realistic demand rates. See our LOPA Generic Enabling Events guide for further information.
How SLM Automates LOPA Calculations
Performing LOPA calculations manually across dozens or hundreds of scenarios can be time-consuming and prone to error.
SLM automates the complete calculation process by:
- Calculating the LOPA gap for every scenario
- Applying enabling event and conditional modifier probabilities
- Determining mitigated event frequencies
- Calculating target RRF, PFD and SIL requirements
- Calculating barrier demand rates
- Passing calculated targets directly into Instrumented Systems where appropriate
Automation improves consistency, reduces calculation errors and ensures every scenario is evaluated using the same methodology throughout the study.
For a broader understanding of how these calculations fit within an overall study, see our LOPA Facilitation Guide.
Best Practices for Deleting Objects
What are LOPA calculations?
LOPA calculations determine whether existing protection layers reduce risk sufficiently to meet an acceptable target likelihood by calculating the remaining risk gap.
What is the LOPA gap?
The LOPA gap is the ratio between the Mitigated Event Frequency (MEF) and the Target Mitigated Event Likelihood (TMEL). Values greater than one indicate additional risk reduction is required.
What is a Target Risk Reduction Factor (RRF)?
The Target Risk Reduction Factor defines how much additional risk reduction a barrier must provide to close the remaining LOPA gap.
Why are demand rate calculations important?
Demand rates help determine the expected operating frequency of safety barriers and support the design and validation of Safety Instrumented Functions.
External Reference
For internationally recognised guidance on functional safety and Layer of Protection Analysis, refer to the International Electrotechnical Commission (IEC), publisher of IEC 61511.
Calculations
0:06
Welcome to this application explainer video, part of our low per topic range.
0:10
In this video, we’ll cover the subject of low PER calculations in SLM.
0:16
SLM performs a series of calculations in the low per module to streamline the facilitation process, namely the risk gap for scenarios, barrier targets for Sifts, and barrier demand rates.
0:29
The following information will be covered in this training.
0:32
Chapter one will be scenarios, Chapter 2 will be barrier targets and Chapter 3 will be demand rates.
0:42
In Chapter 1, we will cover the values that create the Lope A gap, adding the following to close the Lope A gap, barriers, enabling events, conditional modifiers and recommendations, and Lope A gap colour coding.
0:56
The main calculation with the LOPA scenario is the LOPA gap.
1:00
The LOPA scenario shows all values that contribute to the LOPA gap calculation, starting with the initiating event frequency.
1:11
The target mitigated event likelihood values for each of the consequence categories, probabilities for your enabling events and conditional modifiers, the PFDS for your Ipls, the mitigated event frequencies for the scenario, the low per gap value before the recommendation is applied, and the low per GAAP value after the recommendation is applied.
1:41
The low per gap is the value of the gap between the mitigated event frequency or MEF and the target mitigated event likelihood, TMEL.
1:53
It’s calculated by dividing the mitigated event frequency by the target mitigated event likelihood.
2:00
When the value of the gap has been reduced to one or less than one, the gap is considered closed or the scenario passes.
2:08
Any value greater than one means that the likelihood for the scenario has not yet been reduced down to an acceptable level to meet the target likelihood.
2:17
The gap is made-up of the TMEL and the initiating cause likelihood or initiating event frequency.
2:25
The gap is made-up of the TMEL and the initiating event frequency, which is equal to the mitigating event frequency before any conditional modifiers, enabling events and Ipls or barriers are applied to reduce the mitigated event frequency down to the target likelihood value, multiply your initiating event frequency by the probability of failure on demand for your barriers and the probabilities of your enabling events and conditional modifiers.
2:58
All these values multiplied together equal the mitigated event frequency.
3:03
If the looper gap still exists, the value of the PFD for the recommendation can be included in the mitigating event frequency calculation to show the value of the LOPE A gap.
3:17
With the recommendation included, the value of the gap showing in a particular scenario will be the value of the highest gap between any of the consequence categories.
3:29
The LOPE A gap is colour coded according to the sill needed to close the gap.
3:34
If the loper gap is less than or equal to 1, the colour is green and the gap is considered closed.
3:40
If the Loper gap is greater than one but less than 10, the colour is yellow and the barrier with a risk reduction factor of 10 will close the gap.
3:49
If the gap is greater than or equal to 10 but less than 100, the colour is orange and the seal One barrier will close the gap.
3:57
If the gap is greater than or equal to 100, the colour is red and a barrier of seal 2 or greater is needed to close the gap.
4:05
A great summary view to see all of the gaps will be found in your LOPA study object on the LOPA Sheet List tab.
4:16
This displays the PFD gaps for each of the LOPA scenarios.
4:24
In Chapter 3 we will cover selecting a target RRF calculation method and calculating the target RRF for a SIF applied to one or more scenarios.
4:35
Barrier targets can be calculated for Sifs applied to LOPA scenarios.
4:39
SLM will automatically calculate the target, PFD, RRF and sill of a SIF barrier based on the remaining Loper gap.
4:47
For each scenario it is applied to.
4:50
The calculation and result are found on the barrier object that has been classified as a SIF.
4:56
There are two ways that SLM makes this calculation, which is selected at the Site object.
5:01
In the Global module.
5:02
On the Site Overview tab, look for the Loper Barrier Target Calculations field and select between cause summation or highest gap.
5:14
The selection made applies to the entire site on the barrier objects in the risk reduction factor for the particular barrier.
5:22
ID section is a great way to see the maths behind the calculation or result shown here as the calculated target risk reduction factor Cause summation adds up all risk reduction factors for the consequence category for all scenarios the barrier is applied to, the sum of these RRFS is the target RRF.
5:44
The second option, highest gap, looks at all scenarios the barrier is applied to and determines which scenario has the highest gap.
5:52
If the barrier was not applied, in this case the highest gap, the target risk reduction factor would be 50.
5:59
Once the target risk reduction factor, PFD and seal are calculated, if the barrier is connected to a sieve in the instrumented systems module, the target information will be passed on to the instrumented systems to ensure the targets have been met in the SIFT design.
6:16
For more information on where to find these values in instrumented systems, see the video on barrier connections or module connections.
6:28
In Chapter 3, we will cover the values required to calculate the demand rate of a barrier and how to calculate the demand rate.
6:37
The demand rates of each barrier can also be calculated in the local process.
6:42
If these demand rates are known, they can be used to determine a barrier’s designed demand rate in the instrumented systems module and the measured demand rate calculated by demands recorded in Operate and maintain.
6:55
The calculated demand rate is recorded by three pieces of information, all of which can be seen here on the barrier diagrams.
7:05
For the barrier object, the initiate and cause likelihood of the scenario, the probability of failure on demand for any barriers that are activated before the activation of the barrier we’re looking at.
7:18
And 3rd the order of activation seen on the Applicable Values tab of the local worksheet.
7:27
The order of activation shows the order in which each barrier will be activated on a given scenario.
7:33
Barrier diagrams on the barrier objects are a great place to find these values needed.
7:39
So to calculate the demand rate for a barrier, multiply the initiating cause likelihood with the probability of failure on demand for all barriers, which will be activated before the desired barrier for each scenario.
7:52
Then add the demand rate for each scenario altogether to get the total calculated demand rate for that barrier.
8:00
SLM automatically calculates this value and displays it on the barrier object along with barrier targets.
8:06
See the Barrier Connections video and Module Connections video For more information on how to connect these values to functions in the Instrumented Systems module and where in that module these calculated values can be found.