Alarm Shelving in DCS: 6 Crucial Rules From ISA 18.2

Share:
DCS
Alarm Shelving in DCS: 6 Crucial Rules From ISA 18.2

A chattering transmitter can fill the alarm banner and hide the one alarm that really matters. Temporarily parking that nuisance alarm, with a timer and a record, restores the operator view without losing control of the risk.

ISA 18.2 Shelved Alarms Time Limit Audit Trail

Operators sometimes need to silence an alarm that is known to be false or already being handled. ISA 18.2 defines a controlled way to do this, so the alarm returns automatically and every action is recorded.

Hello everyone, today we are going to learn how alarm shelving works in a DCS, how it differs from suppression and out of service states, and which rules keep it safe under ISA 18.2.
alarm shelving

What Is Alarm Shelving?

Alarm shelving is an operator initiated, time limited suppression of a single alarm, controlled by the alarm system and recorded in an audit trail. ISA 18.2 describes it as one of three suppression methods, as covered in alarm management ISA 18.2.

iFactory notes that an operator or supervisor shelves a specific alarm for a defined period with authorisation. The alarm then returns automatically when the period expires.

Alarm management overview graphic based on ISA 18.2
Image credit: iFactory

Alarm shelving is used for nuisance, chattering or stale alarms while a fix is arranged. It is not a way to hide real problems, and it never applies to safety function bypasses.

The shelved alarm still appears on a dedicated list, so supervisors can see what is hidden at any time.

Shelving vs Other Suppression

MethodWho Starts ItDurationExample
ShelvingOperator, with authorityLimited, auto returnChattering level switch
Suppressed by designLogic in the systemWhile the condition existsLow flow on a stopped pump
Out of serviceMaintenance, with permitUntil work is completeTransmitter being replaced

Suppression by design uses process state logic, for example hiding low pressure alarms while a unit is shut down. Out of service is tied to maintenance permits, much like the controls in force vs override.

All three must be visible and reviewed, because hidden alarms remove a layer of protection.

How Alarm Shelving Works on the Console

Select AlarmOperator picks one alarm, not a group
Choose DurationFor example 1, 4 or 8 hours
Enter ReasonShort text or reason code
Alarm ShelvedMoves to the shelved list
Auto UnshelveReturns at time out or shift change

The console should show a shelved icon and count on every operator screen. Good graphics follow ISA 101 HMI design.

Most modern platforms such as those described in distributed control systems include shelving in the operator station.

6 Crucial Alarm Shelving Rules

1
Single Alarms Only
Never shelve a whole area or unit.
2
Maximum Duration
Limit to one shift unless a supervisor extends it.
3
Exclude Safety Alarms
Highest priority and SIS alarms cannot be shelved.
4
Record Everything
Who, when, why and for how long.
5
Review Each Shift
Hand over the shelved list at shift change.
6
Fix the Cause
Raise a work order for every shelved alarm.

These rules follow the ISA 18.2 guidance summarised in the PAS paper. The aim is to reduce distraction without creating blind spots.

Repeated shelving of the same alarm shows it needs rationalisation or a maintenance fix. Track it with the DCS alarm types classification.

Alarm Rate Targets

Average rate per 10 min = Alarms per day ÷ 144

Common targets per operator:
About 1 alarm per 10 min is very likely acceptable
About 2 per 10 min is the maximum manageable
More than 10 in 10 min is an alarm flood

Example: 432 alarms per day ÷ 144 = 3.0 per 10 min
Overloaded, so rationalise before relying on shelving

iFactory reports that ISA 18.2 rationalisation can cut alarm floods by up to 80 percent. Alarm shelving only treats symptoms while rationalisation removes causes.

Track the number of shelved alarms as a key performance indicator. A steady rise signals maintenance backlogs.

Alarm Rate Calculator

Operator Alarm Load
Result
3.0 alarms per 10 min, overloaded, 6 shelved, review the shelved list

Run this for each console, not the whole plant, since load differs between operators.

Benefits
  • Removes nuisance alarms quickly.
  • Keeps operators focused.
  • Automatic return prevents forgotten alarms.
  • Full audit trail.
Risks
  • Real alarms hidden too long.
  • Overuse instead of fixing causes.
  • Poor shift handover.
  • Group shelving by mistake.

Alarm history and events can be correlated with sequence of events records after incidents.

Understanding ISA 18.2 PDF

PDF
Understanding and Applying the ANSI ISA 18.2 Standard
PAS white paper hosted by ISA, including shelving

Alarm Management Lifecycle Video

Alarm Shelving FAQ

What is alarm shelving?
It is a temporary, operator initiated suppression of one alarm with a time limit and an audit record. The alarm returns automatically when the time expires.
How is it different from out of service?
Out of service is a maintenance state linked to a permit and repair work. Shelving is a short operator action for nuisance or known alarms.
Can safety alarms be shelved?
Good practice excludes the highest priority and SIS related alarms. Those need formal bypass procedures with engineering approval instead.
How long can an alarm stay shelved?
Most sites limit it to one shift, often 8 or 12 hours. A supervisor may extend it with a recorded reason.
Who reviews shelved alarms?
Operators hand over the list at shift change and supervisors review it daily. Alarm engineers use the history to target rationalisation.
What alarm rate is acceptable?
Around 1 alarm per 10 minutes per operator is very likely acceptable. More than 10 in 10 minutes is considered a flood.
Does alarm shelving fix nuisance alarms?
No, it only hides them for a while. Every shelved alarm should lead to a work order or a rationalisation review.

Related Articles

External References

What We Learn Today

  • Alarm shelving hides one alarm for a limited time with a record.
  • It differs from suppression by design and out of service.
  • Limit duration, exclude safety alarms and fix the root cause.
I hope you like above blog. There is no cost associated in sharing the article in your social media. Thanks for reading!! Happy Learning!!

Leave a Reply

Your email address will not be published. Required fields are marked *