Читать книгу Surviving the Spare Parts Crisis - Joel Levitt - Страница 15
ОглавлениеCHAPTER 6
SPARE PARTS INVENTORY AND RISK MANAGEMENT
What do your car insurance, backups of your computer files, and spare parts inventory have in common? They are each an example of risk management. According to author and researcher Douglas W. Hubbard, risk management is “the identification, assessment, and prioritization of risks followed by coordinated and economical application of resources to minimize, monitor, and control the probability and/or impact of events.”
Just like your car insurance minimizes the financial consequence of a car crash, backing up your files minimizes the consequence of a computer crash and spare parts inventory minimizes the consequence of an equipment crash. They are all about risk management.
RISK MANAGEMENT FUNCTIONS
Four basic functions help manage risk:
• risk identification
• risk quantification
• risk probability
• risk response
The first three — identification, quantification and probability — are sometimes grouped together under Risk Analysis or Risk Assessment. With these four functions completed, the last step is to exercise:
• risk vigilance
Risk vigilance is simply the recognition of the risk conditions, the ongoing response to the risk conditions on the ground, and implementation of the appropriate risk responses. Vigilance requires you to identify an appropriate trigger and this trigger defines the parameters for your vigilance. We say appropriate risk responses because different risks require different approaches. For example, you might have a smoke detector to monitor for the risk of fire and machine guards to manage the risk of injury.
Here is an example of this approach:
• Risk identification: Failure of the bearings on a turbine is a risk.
• Risk quantification: In the event of a failure, will anyone get hurt and how hurt? How much money will the event cost in downtime per hour or per day? What is the cost if the repair takes a few weeks or months instead of a few hours or days?
• Risk probability: What is the chance this risk will happen? Has it happened before? Does the manufacturer warn us about the risk? Do we have statistics about MTBF (Mean Time Between Failures) for the bearings in question?
• Risk response: Can we eliminate, mitigate, or anticipate the failure? What PM will extend life? What parts will be needed if the breakdown does occur? How costly is the kit? Can the risk be transferred to someone else (by using supply contracts or buying insurance)? Does the waiting time for the part introduce any unanticipated risk?
• Risk vigilance: How do we organize our team and maintenance strategy so that an event becomes apparent quickly enough that we have time to respond? In addition to vigilance, this aspect includes responding to changes in the character of the risks over the life span of the plant.
RISK MANAGEMENT OPTIONS
In all cases of risk, you have four options for managing that risk. As you evaluate each risk, you need to adopt a management strategy based on the option you choose. The risk management options are presented here in the order in which they should be considered.
You can mix and match options to get the loss level you want. For example, the probability of losing small tools when you let outsiders into the plant is fairly high, but the loss consequence is generally more of a nuisance than a catastrophe. Typical strategies include placing a guard and an entry gate (partial mitigation), but that is pretty much it, you don’t scan or search the workers. You just accept the loss of some items. If the loss level gets too high, you can add weight to the mitigation strategy perhaps by locking up more tools or adding surveillance cameras. Your response could escalate until the losses are reduced to an acceptable level.
1. Avoid the risk. One way to avoid risk is to re-design the work. In many circumstances, this might involve reengineering, choosing long-lived assets, or even replacing the asset. The best way to avoid the risk of an iatrogenic failure (failure caused by the mechanic or electrician) is to design the system to not break down! Of course, that is tough, but improvements in reliability that are based on equipment design are made every day. If you can’t eliminate the risk, the next step is to mitigate it.
Most plants have an Environmental Health and Safety (EHS) department that reviews requests from contractors to bring specialized chemicals on-site. If a chemical is exceptionally risky, EHS can reject the request and literally eliminate the risk posed by that chemical completely. However, that chemical might be the best of the bunch; the others may add other problems.
2. Mitigate the risk. Mitigation involves reducing the probability of the risk happening (using existing technology instead of new technology) or reducing the consequence of the risk or some combination of both.
Most types of PPE are mitigation in action. Hard hats, steel toes boots, safety glasses, and arc flash suits are all examples of mitigation of various (relatively common) hazards.
In the aircraft industry, the risk of incorrect repairs has both safety and economic consequences. The industry mitigates this risk through rigorous repair procedures, certification of operators and mechanics, and close-in inspection. While these actions mitigate the risk, they do not eliminate it.
In an industrial situation, one way to minimize the consequence of a breakdown risk is to have backup systems in place (such as a backup generator on a truck) or to have a trusted vendor on call. Another way to reduce risk is to follow the concept of precision maintenance. This is maintenance with all the specifications included for a proper repair (such as torque, belt tension, tolerance allowances, etc.).
3. Insure the risk. Insurance is a form of risk mitigation in that it minimizes the economic consequence of the risk.
Modern insurance started around 1691 in a coffeehouse frequented by ship owners, sailors, and investors in London. When a ship went on a voyage, the owner could insure the value. Different investors would insure the amount of the ship they were comfortable losing until the ship’s value was covered.
The investors literally wrote the risk they were willing to underwrite by writing it under the ship’s name on a chalkboard. The premium was collected and split proportionally to the amount of the risk. The coffee shop, which was called Lloyds, is still in operation (although it doesn’t still serve coffee) as an insurance market. The partners covering the risk are still called names. The Lloyds syndicate works together to pool and spread risk.
Insurance is included here as a separate option; its purpose is to shift the financial impact of the risk from you to the insurer. Here are some common types of insurance:
a. Fire insurance for fires
b. Liability insurance for accidents to visitors or users of product
c. Workmen’s compensation insurance for employee injuries
d. Business continuity insurance to cover catastrophic interruptions to business activity.
e. Stop loss insurance (see below)
4. Accept the risk. You decide that the risk probability or consequence is sufficiently low that you can handle it without help, active mitigation, or additional systems. Sometimes this approach is referred to as “self-insurance.”
As an example, companies with large vehicle fleets often do not take out external collision insurance. They accept that they will need to repair/replace vehicles involved in an accident on the basis that, in the long run, the cost is less expensive (because of the large population) than the insurance would be. The problem — the greatest risk — with self-insurance is the possibility of disaster; for example, if the trucks are parked in one yard, a fire could destroy all the trucks in one swoop. To limit your risk, you might buy a “stop loss policy” that pays only after $1 million of loss. You also might not want to park the trucks close together (risk reduction strategy).
Another reason to accept the risk is that the chance of the problem has been examined and it is so remote that mitigation might not be cost effective. Geological events such as earthquakes are remote risks for people living in Pennsylvania or New Jersey. If we were planning a refinery in that region we might not worry too much about earthquake risks. On the other hand, New Jersey is close to the Atlantic Ocean; therefore, storm events must be included in the risk review.
WHAT IS THE RISK IN RISK MANAGEMENT?
Understand the consequences of a loss of function. For our purposes, loss of function can be and usually is the result of a breakdown. Other causes could be operational error, problems with raw material, etc. If a spare part is used to “fix” the loss of function, then we assume something broke down (or wore out and had to be replaced).
Loss of function has several consequences, usually classified as safety, environmental, and economic. Some loss of function — for example, Bhopal India’s leak of MIC gas, which killed upwards of 2,500 civilians and wounded over 100,000 others — are completely unacceptable at any cost. (Current thought is that a breakdown did not cause Bhopal, but rather an act of an angry employee who did not get a coveted promotion.)
Others such as the battery fires (true breakdowns) experienced during the rollout of the Boeing 787, are unacceptable from the view of both safety and loss of asset.
In almost all cases, after the safety and environmental consequences are evaluated and eliminated as much as possible, all the subsequent consequences are really variations on economic themes. Here are some examples of the cost of downtime:
Power plant downtime | $160,000 hour |
Oil Refinery 400,000/ b/d | $100,000 hour (just the refiner’s margin) |
Automobile assembly line | $500,000 hour |
Cigarette manufacturing | $240,000 hour |
From a risk management perspective, the evaluation of consequence goes like this: With the right parts in stock (or otherwise available), it may take two days to put a failed power plant back on-line. Without the part available, it takes four weeks (lead time) and two days (for the repair). If the kit of parts needed for the repair costs $100,000, is it worth it to stock? The answer really depends on the probability. Would you pay $100,000 as an insurance premium against that particular failure? Is the cost worth incurring even if we never have the failure?
Having the right parts helps keep the consequences of breakdown to a manageable level. This type of thinking is the same you use for making decisions about insurance. You contract with a company to pay the premium in order to have them shoulder the consequences you are unwilling to take. If you are willing to take the risk, then you don’t insure it. Questions and considerations like these are at the heart of risk management.
This is Not About Owning the Part, But Having Timely Access to the Part
Here is one thing you need to know before we go ahead: Having the part available does not necessarily mean that you are stocking it. In all the scenarios that follow, having the part available is what is important — not actual ownership of the part. It is critical that this distinction is understood.
Here are two often-used strategies you can use to have a part available without having it in stock: