Blog

Alarms your operators will actually believe

ISA-18.2 for people who don't have time to read ISA-18.2.

Every operator has seen the wall of red. A unit trips, forty alarms fire in ten seconds, thirty-eight of them are consequences of the first two, and by the time the board is quiet nobody is sure which alarm was the one that mattered. Do that a few times and the crew learns the only rational response: stop reading.

The industry has known this for decades; the standard is ANSI/ISA-18.2, and it is long. Here is the part of it that we built into the KNOCE platform, in operator terms.

Priorities that mean something

Five tiers — critical, high, medium, low, journal — assigned by consequence, not by how loud the sensor is. A tripped unit is critical. A rising fluid-end vibration is high. A heat-rate deviation on a genset is medium: real, but not this minute. A stage-started event is journal — recorded, never shouted. If everything is critical, nothing is.

Acknowledge with a name

An alarm moves from active-unacknowledged to acknowledged only when a person accepts it, and the record keeps who and when. That sounds bureaucratic until the shift handover, when "did anyone see the bearing temp on PU-12?" has an answer with a name on it.

Shelve, don't silence

Some alarms are true and not actionable right now — lube-oil temperature drifting high on a 105°F afternoon. Silencing it forever is how alarms disappear until they matter. Shelving puts it aside with a timer; it returns on its own. The operator gets a quiet board and the alarm doesn't get lost.

Suppress by state

A unit in maintenance should not generate process alarms; its low discharge pressure is a fact, not a fault. State-based suppression ties alarm behavior to the equipment state, so the flood never starts. This single mechanism removes more nuisance alarms than any threshold tuning.

Cleared is not the same as gone

An alarm that clears before anyone acknowledged it — suction pressure dipped during a rate ramp and recovered — is kept in a distinct state, cleared-unacknowledged, so the transient still gets seen. Transients are how failures introduce themselves.

The point

None of this is exotic. It is discipline encoded so that operators don't have to supply it at 3 a.m. An alarm system earns belief by being right about priority, honest about state, and quiet about things that don't matter — and a crew that believes its alarms is the cheapest reliability improvement a spread can buy.