QRA Calculations: Frequency, Consequence and Risk Examples

QRA calculations multiply release frequency by consequence to estimate individual and societal risk, then compare results with tolerability criteria such as ALARP.
India’s MSIHC Rules, 1989 and Chapter IVA of the Factories Act, 1948 require hazardous-process occupiers to identify major-accident hazards, and the 1984 Bhopal disaster remains the reference case behind them. The UK HSE’s widely used criteria treat individual risk above 1 in 1,000 per year for workers, and 1 in 10,000 for the public, as intolerable.
Illustrative example: a Gujarat solvent terminal commissioned a ₹8 lakh QRA for its tank farm. Results showed the 1-in-100,000-per-year explosion contour crossing the boundary wall toward a village school. Moving the loading gantry and adding remote-operated isolation valves cost ₹42 lakh and pulled the contour back inside the fence, avoiding possible licence refusal.
A QRA runs in six steps: identify hazards, estimate release frequencies, model consequences, calculate individual and societal risk, compare with criteria, then recommend safeguards. HAZOP finds what can go wrong qualitatively. QRA puts numbers on how often and how badly, so decisions about layout and safeguards can be justified. Update the study when inventories, layouts or occupancy near the fence change, and record every assumption so regulators can audit the numbers.

Core QRA Risk Equations

Scenario frequency

For a simplified outcome branch:

Outcome frequency = initiating-event frequency × conditional probabilities

Conditional probabilities can represent successful or failed isolation, immediate ignition, delayed ignition, weather category or other mutually consistent branches. Probabilities must not be multiplied blindly: the event tree must conserve probability and avoid double counting.

Individual risk

At a location x, individual risk is commonly expressed conceptually as:

IR(x) = Σ [f_i × P_fatality,i(x)]

Here, f_i is the annual frequency of scenario i, and P_fatality,i(x) represents the probability of fatality at the location for that outcome. The calculation may also include directional, weather and occupancy weighting defined in the study basis.

Societal risk

Societal risk considers the number of people affected. An F-N curve plots cumulative annual frequency F against N, the number of fatalities or another defined harm measure. Each point represents the combined frequency of scenarios capable of producing at least N consequences.

Individual Risk, Societal Risk, F-N Curves and ALARP

How is an F-N curve calculated?

For each scenario, the analyst estimates the number of fatalities or other defined harm measure, N, and its annual frequency. The scenarios are ordered by consequence size. At each value of N, the cumulative frequency F is the sum of the frequencies of all scenarios causing N or more consequences. Both axes are normally logarithmic, and the curve must identify whether it represents onsite, offsite or combined populations.

How should a 10⁻⁶ per-year contour be interpreted?

A 10⁻⁶ per-year individual-risk contour represents a modelled annual probability of one in one million under the QRA’s stated assumptions for a hypothetical person at that location. It does not predict that one person will die every million years, and it should not be treated as a universal approval boundary without checking the applicable authority, endpoint and study basis.

What does ALARP mean in a QRA?

ALARP means As Low As Reasonably Practicable. It is not demonstrated merely because a calculated risk falls below a plotted line. The study should identify further risk-reduction options, estimate their safety benefit, test material measures where practicable, document good-practice requirements, and justify why any remaining options are not reasonably practicable within the governing legal framework.

Are QRA acceptance criteria universal?

No. Criteria can vary by country, authority, facility type, worker/public exposure, risk endpoint and project decision. UK HSE guidance, for example, discusses individual and societal risk within its own tolerability framework; those numerical examples must not be copied into an Indian or international project without confirming that the client and competent authority accept the same basis.

Minimum F-N curve quality checks

• State whether F is cumulative frequency of N or more consequences.
• Define the harm endpoint, population boundary, occupancy and day/night treatment.
• Use mutually consistent scenarios and avoid double counting event-tree branches.
• Show the effect of weather, ignition, isolation and vulnerability assumptions.
• Identify dominant scenarios and complete sensitivity checks for material uncertainties.
• Name and justify the project’s acceptance criteria instead of presenting unlabeled diagonal lines.

Authoritative background: UK HSE’s QRA guidance for explosives in ports explains individual risk, societal risk and the ALARP/tolerability framework. Its values are jurisdiction-specific examples, not universal QRA criteria.

Worked QRA Frequency Example

The following numbers are illustrative only and are not suitable for a real facility.

The illustrative jet-fire branch frequency is:

2 × 10⁻⁴ × 0.20 × 0.10 = 4 × 10⁻⁶ per year

This does not yet equal risk at a person’s location. Consequence modelling must determine the thermal dose at that location, and the vulnerability relationship converts the exposure into a harm probability. Other event-tree branches must also be calculated and aggregated.

Step-by-Step QRA Calculation Workflow

1. Freeze the study basis: define boundaries, operating cases, weather categories, population treatment, risk criteria and required outputs.
2. Build the scenario register: connect each release case to equipment, material, hole size, pressure, temperature, isolation and release duration.
3. Assign initiating frequencies: use the project-approved database or study, with units and equipment population stated explicitly.
4. Construct event trees: represent detection, isolation, ignition and alternative outcomes without overlapping branches.
5. Calculate source terms: estimate release rate, duration, flashed fraction and inventory discharged.
6. Model physical effects: calculate toxic concentration, thermal radiation or explosion overpressure as applicable.
7. Apply exposure and vulnerability: account for occupancy, location and the project-approved harm relationships.
8. Aggregate risk: sum compatible scenario contributions into individual-risk and societal-risk outputs.
9. Test sensitivity: vary material assumptions such as weather, ignition, isolation time and population.
10. Recalculate material safeguards: demonstrate residual risk after feasible mitigation where the data allow it.

QRA Input Data and Units

Consequence Calculations

QRA software may calculate toxic dispersion, flammable-cloud extent, jet fire, pool fire, fireball or BLEVE, and vapour-cloud explosion. The US EPA states that ALOHA can model these six broad hazard categories and display threat zones. More complex geometry, congestion, terrain or dense-gas behaviour may require a different validated tool and specialist review.

See the QRA software selection guide for PHAST, SAFETI and ALOHA considerations.

Uncertainty and Sensitivity

A risk value should not be presented as exact. Frequency data, ignition probabilities, human actions, weather, source terms, population and vulnerability all introduce uncertainty. The UK Health and Safety Executive cautions against assigning precise human-failure probabilities without documenting the assumptions and data sources.

At minimum, the report should identify the parameters that control the result and show how reasonable alternatives change risk contours, scenario rankings or F-N curves.

Why Data Quality Matters

The US Chemical Safety Board’s FY 2025 report states that, from March 2020 through 30 September 2025, it received reports of more than 555 serious chemical incidents across 43 US states. Those reports involved fatalities at 87 facilities, serious injuries at 308 facilities and/or substantial property damage at 260 facilities. These incident statistics do not provide universal failure rates, but they demonstrate why scenario data, safeguards and assumptions require evidence rather than generic templates.

QRA Calculation Review Checklist

• Are all frequencies traceable to a source, population and unit?
• Do event-tree branches cover the defined outcomes without double counting?
• Are release duration and isolation assumptions consistent with the design?
• Are weather and directional probabilities applied consistently?
• Can key consequence results be reproduced from the stated inputs?
• Are individual and societal risk calculated using the approved population basis?
• Are dominant scenarios and uncertainty drivers visible?
• Are recommendations linked to scenarios and recalculated where material?

Use the QRA report review checklist for the complete deliverable structure.

FAQs

Q1: How much does a QRA study cost in India and what does it typically prevent?

The cost of a Quantitative Risk Assessment (QRA) study depends on the facility’s size, process complexity, hazardous-material inventory, number of accident scenarios, modelling requirements and regulatory scope. As an indicative reference, Elion lists QRA services at ₹30,000 per day, while actual project fees depend on the agreed scope and duration. Public procurement examples also show substantial variation between projects.

A QRA does not guarantee that accidents will be prevented. It helps identify and quantify major-accident risks involving toxic releases, fires and explosions, so organisations can prioritise safeguards, improve emergency planning and reduce the likelihood or consequences of serious incidents. Typical outputs include consequence distances, individual-risk contours, societal-risk estimates and risk-reduction recommendations.

Q2: What are the steps and inputs for a QRA study?

A Quantitative Risk Assessment follows a structured engineering process that combines accident frequency analysis with consequence modelling. The main steps are:

1. Define the scope: Establish the facility boundaries, purpose of the study and applicable risk criteria.

2. Identify hazards: Review process flow diagrams (PFDs), piping and instrumentation diagrams (P&IDs), chemical inventories, safety data sheets, HAZOP findings and incident records.

3. Develop accident scenarios: Identify credible leaks, ruptures, toxic releases, fires, explosions and other major accident events.

4. Analyse event frequencies: Use relevant equipment failure-rate data, reliability information and safeguard performance to estimate event probabilities.

5. Model consequences: Assess toxic dispersion, thermal radiation, explosion overpressure and other relevant effects using appropriate modelling methods.

6. Calculate risk: Estimate individual risk and, where required, societal risk and risk contours.

7. Recommend risk reduction: Evaluate safeguards, emergency arrangements and additional controls, and prioritise recommendations.

Key inputs include chemical properties and inventories, operating pressure and temperature, equipment dimensions, leak scenarios, site layout, weather data, surrounding population, occupancy patterns and existing safety systems. The methodology should document assumptions and data sources so that the results can be reviewed and reproduced.

Q3: When is a QRA required and when should it be updated?

A QRA may be required for hazardous industrial installations, major accident hazard facilities, certain environmental clearance submissions, project approvals or regulatory reviews, depending on the applicable legislation, facility type and authority’s requirements. There is no single nationwide rule requiring every industrial facility to conduct a QRA at the same interval. For example, the Directorate General Factory Advice Service and Labour Institutes explains that statutory safety reports and safety audit reports are required for certain higher-tier factories, rather than every major accident hazard installation.

A QRA should be reviewed or updated when there are material changes to:

• Hazardous-material inventories, process conditions or equipment.

• Plant layout, storage arrangements or distances to nearby populations.

• Safety-critical systems, isolation arrangements or emergency controls.

• Production capacity, operating modes or accident history.

• Applicable regulations, risk criteria or project approval conditions.

An update may also be needed when the original assumptions or data are no longer representative. The required review frequency should be confirmed against the applicable regulatory conditions and the facility’s management-of-change process.

Q4: What is the difference between QRA, HAZOP and HIRA?

• QRA (Quantitative Risk Assessment): Numerically estimates the likelihood and consequences of major accident scenarios. Outputs may include individual-risk contours, societal-risk curves and consequence distances.

• HAZOP (Hazard and Operability Study): Systematically examines deviations from intended process conditions using guide words such as No, More, Less and Reverse to identify causes, consequences, safeguards and recommendations.

• HIRA (Hazard Identification and Risk Assessment): Identifies workplace or operational hazards and evaluates their risks, commonly using qualitative or semi-quantitative likelihood and severity ratings.

These methods complement one another. HIRA helps manage general workplace risks, HAZOP examines process deviations in detail, and QRA quantifies the risks associated with selected major-accident scenarios. HAZOP findings can provide important inputs to a QRA.

Q5: What common QRA problems reduce accuracy, and how are they fixed?

QRA results can be misleading when important inputs are incomplete, failure rates are poorly selected or credible accident escalation is overlooked. Common problems and corrective measures include:

• Poor plant data: Missing or outdated P&IDs, inventory records and operating conditions can distort the scenarios. Verify inputs against current drawings, site inspections and operating records.

• Unsuitable failure rates: Generic failure data may not represent the equipment type, operating conditions or maintenance history. Use recognised, relevant databases and document why the selected rates are appropriate.

• Ignored domino effects: A fire, explosion or vessel failure may damage nearby equipment and trigger secondary accidents. Identify credible escalation pathways and model them where they could materially affect risk.

• Unrepresentative weather data: Generic wind and atmospheric-stability assumptions can alter dispersion predictions. Use suitable site-specific meteorological data where available.

• Incorrect population assumptions: Average headcounts can miss shift patterns, contractor populations, nearby communities and occupancy variations. Map exposed populations by location and time.

• Overestimated safeguards: Assuming alarms, detectors, shutdown systems or emergency responses always work can understate risk. Verify safeguard availability, reliability, independence and maintenance evidence.

The final report should clearly state limitations, assumptions, uncertainty and sensitivity checks. Where data is uncertain, show how alternative reasonable assumptions affect the risk results instead of presenting a single estimate as exact.