🎓 Lesson 13
D5
Designing Prioritized Alarm Displays in HMIs
A prioritized alarm display is an HMI screen that shows only the most urgent alarms first, so operators can respond quickly to the biggest problems without getting overwhelmed.
🎯 Learning Objectives
- ✓ Design a three-tier alarm priority scheme (Critical/High/Medium) aligned with ISA-18.2 severity definitions
- ✓ Analyze alarm rationalization data to calculate alarm flood index (AFI) and identify candidates for suppression or re-prioritization
- ✓ Apply dynamic priority weighting using time-since-activation and safety instrumented system (SIS) status to recalculate real-time alarm ranks
- ✓ Explain the relationship between alarm priority, operator response time thresholds, and mine safety performance indicators (SPIs)
📖 Why This Matters
In underground and open-pit mining operations, a single PLC-controlled blast initiation system may generate 200+ alarms during a fault cascade—yet operators have <15 seconds to recognize and act on life-threatening events like gas accumulation or misfire detection. Without intelligent prioritization, critical alarms drown in noise, leading to delayed responses, missed shutdowns, and catastrophic incidents. Prioritized alarm displays aren’t just UI polish—they’re a frontline defense in functional safety.
📘 Core Principles
Alarm prioritization rests on three interdependent layers: (1) Static severity classification (e.g., Critical = immediate danger to personnel/equipment), defined per ISA-18.2 Annex A; (2) Dynamic context weighting—where alarms gain or lose priority based on real-time conditions (e.g., an overpressure alarm gains Critical status if SIS bypass is active); and (3) Human factors integration—leveraging cognitive load theory to limit simultaneous high-priority alarms to ≤3 per display, per EEMUA 191 guidelines. Prioritization logic must be implemented in the PLC/SCADA alarm server—not the HMI—ensuring deterministic behavior independent of display refresh rate or network latency.
📐 Dynamic Alarm Priority Index (DAPI)
The Dynamic Alarm Priority Index (DAPI) quantifies real-time urgency by combining static severity weight (S), time decay factor (T), and contextual multiplier (C). It enables adaptive ranking without manual reconfiguration during evolving fault scenarios.
Dynamic Alarm Priority Index (DAPI)
DAPI = S × e^(−α·t) × CQuantifies real-time alarm urgency by combining static severity, exponential time decay, and hazard-context multiplier.
Variables:
| Symbol | Name | Unit | Description |
|---|---|---|---|
| S | Static Severity Weight | dimensionless | Assigned per ISA-18.2 severity level (1.0 = Low, 4.0 = Critical) |
| α | Time Decay Coefficient | s⁻¹ | Rate at which urgency decays if no new context triggers; typically 0.008–0.025 s⁻¹ based on mine response SLAs |
| t | Time Since Activation | s | Elapsed seconds since alarm transitioned to ACTIVE state |
| C | Contextual Multiplier | dimensionless | Product of all active hazard-context factors (e.g., SIS bypass × gas exceedance × personnel proximity) |
Typical Ranges:
Critical alarm at t=0: 3.8 – 4.0
High alarm after 120 s with no escalation: 0.9 – 1.4
💡 Worked Example
Problem: A ventilation failure alarm (static severity = 4.0) activates at t=0. At t=90 s, methane concentration exceeds 1.2% LEL (triggering C=1.8), and the local SIS is in manual bypass mode (C multiplies further by 1.5). Calculate DAPI at t=90 s using α=0.015 s⁻¹.
1.
Step 1: Identify static severity S = 4.0 (ISA-18.2 Level 4: 'Immediate threat to safety')
2.
Step 2: Compute time-decay factor T = e^(−α·t) = e^(−0.015×90) = e^(−1.35) ≈ 0.259
3.
Step 3: Determine contextual multiplier C = 1.8 × 1.5 = 2.7
4.
Step 4: Apply DAPI = S × T × C = 4.0 × 0.259 × 2.7 ≈ 2.797
Answer:
The DAPI is 2.80 (rounded), exceeding the Critical threshold of 2.5—confirming automatic promotion to top-tier display position.
🏗️ Real-World Application
At Newmont’s Boddington Gold Mine (Western Australia), a 2022 alarm rationalization project reduced average alarm count per shift from 1,842 to 217 by implementing ISA-18.2–compliant prioritization. Critical alarms (e.g., 'Blast Initiation Circuit Open During Arming') were assigned fixed top-row positions on all HMIs; High-priority alarms (e.g., 'Dust Suppression Pump Failure') appeared only after Critical clearance; and Medium alarms were deferred to a scrollable secondary panel. Response time for Critical events improved from 42 s to 8.3 s (verified via control room video analytics), directly contributing to a 37% reduction in unplanned blast delays.
📋 Case Connection
📋 Chemical Plant Reactor Pressure Safety Interlock Retrofit
Electro-mechanical interlocks failed twice in 3 years, risking runaway reaction and BLEVE