· Plant modification
A plant modification occurred without a full assessment of the potential consequences. Only limited calculations were undertaken on the integrity of the bypass line. No calculations were undertaken for the dog-legged shaped line or for the bellows. No drawing of the proposed modification was produced.
· Maintenance procedures
No pressure testing was carried out on the installed pipework modification.
· Plant layout
Those concerned with the design, construction and layout of the plant did not consider the potential for a major disaster happening instantaneously.
· Control room design
Control rooms should be designed to withstand major hazards events. 18 fatalities occurred in the control room.
· Operating procedures
The incident happened during start up when critical decisions were made under operational stress. In particular, the shortage of nitrogen for inerting would tend to inhibit the venting of off-gas as a method of pressure control/reduction.
· Limit inventory in plant
The large inventory of flammable material in the plant contributed to the scale of the disaster. Limiting inventory is part of the inherently safer design principle.