Recommended resources
The freely available resources this lesson will direct you to.
Hello again. Last lesson followed the well stream through separation, treatment, and export. Now consider what the plant needs to know and do along those routes: measure what is happening, regulate normal operation, alert people to changes, and act when a hazardous condition develops.
This lesson gives you a working distinction between measurement, control, monitoring, and safeguarding. They often use similar instruments, but they are not interchangeable functions. Allow about 40 minutes for the lesson, including the selected video and readings.
A measurement can serve more than one purpose
At a separator, a pressure transmitter might report vessel pressure; a level transmitter might report the height of liquid inside. Elsewhere, instruments measure temperature, flow, or a property such as water content. Measurement is the acquisition of a process value. A sensor and transmitter do not, by themselves, tell you what the plant will do with that value.
One use is control: keeping a process variable near a desired value during normal operation. In a separator level-control loop, the level transmitter supplies the measured level to a controller. The controller compares it with its target and adjusts an outlet control valve. As incoming liquid flow changes, the outlet valve changes position to help maintain the level. This is continuous regulation, not an emergency shutdown.
Read a short explanation of that basic loop before looking at the equipment example.
Read the opening feedback explanation in ISA’s Loop Checking: A Technician’s Guide to connect a measurement, controller, and final control element.
In Chapter 1, under “Defining the Loop” (printed p. 4), begin where the discussion says “Basic to any discussion of control loops is ‘feedback’ control.” Read the loop explanation, stopping after the three-element list, just before the discussion of Figure 1-3. Focus on what the transmitter reports, what the controller compares, and what receives the controller’s output.
The final control element is what changes the process: often a valve, but potentially a pump drive or another device. It is worth keeping “measuring” and “acting” separate in your mind. If a displayed level changes but the valve does not move as expected, the problem could lie in the measurement, controller, output path, final element, or process itself. Later lessons will help you distinguish those possibilities.
See the functions around a separator
The separator from the previous lesson is a useful place to see several functions together. Watch these selected portions of an upstream instrumentation walkthrough. The presentation shows particular commercial devices; concentrate on their jobs, not their model names or the assumption that every facility uses the same arrangement.
Oil and Gas 101 - Typical SOR Instrumentation Applications
Watch “Oil and Gas 101 - Typical SOR Instrumentation Applications” from SOR Controls Group for concrete examples of instruments around a production separator.
In the first-stage separation discussion, watch separator instruments for the pressure measurement, local indications, high-level indication, and liquid-discharge control. Then watch instrument roles for the summary of measurements, alerts, equipment protection, and data use. Distinguish what merely reports a condition from what commands a valve or stops equipment; the exact actions depend on the facility design.
Consider a simplified oil-and-gas separator. Its pressure measurement tells the control system how much pressure is in the vessel. A pressure controller may adjust a gas-outlet valve to regulate that pressure. Its level measurement can similarly support an oil-outlet control valve. These loops help keep the process stable as the inlet mixture varies.
Other devices may have narrower jobs. A local level indicator lets a person at the vessel see the liquid height. A high-level switch may signal that liquid is approaching an unacceptable height. A low-flow switch might initiate a specified equipment-protection action. The switch is the detecting device; whether its signal produces an alarm, a trip, or both is a matter of the documented control and protection design, not something you can infer from the word switch.
This gives you a practical way to describe an instrument without overclaiming. “The device measures separator level” identifies its measurement function. “Its signal is used to regulate the outlet valve” identifies a control function. “It initiates a high-level shutdown” identifies a safeguarding function—and is a claim you should make only when the relevant design shows that connection.
Distinguish warning from protective action
Normal control aims to operate within intended limits. Safeguarding addresses conditions that could exceed safe limits or initiate a hazard. Depending on the plant design, an instrumented protective function might detect an excessively high separator level and close an inlet shutdown valve, or detect an unsafe equipment condition and stop a pump. An interlock may instead prevent an unsafe start or valve operation.
An alarm is different from an automatic trip. It brings a condition to an operator’s attention so they can assess and respond. An alarm does not automatically shut equipment down merely because its label says high or high-high. If a protective function relies on an operator responding to an alarm, that response and its reliability need to be accounted for in the safety design.
The following concise guidance sets out these distinctions.
Read the UK Health and Safety Executive’s Control systems guidance for a clear account of what instrumented systems do during normal and abnormal operation.
Under “Introduction,” read the function list, from the definition through the sentence identifying alarm, protection, and process-control systems. Under “Alarm systems,” begin at “Alarm systems alert operators to plant conditions” and read the opening paragraphs, stopping before the discussion of alarms with a formally claimed risk reduction. Under “Protection systems (Trips and Interlocks),” read trips and interlocks, stopping before the next paragraph about indicating a demand. Finally, under “Independence,” read the opening paragraph. Focus on the difference between notifying an operator and automatically taking protective action, and on why protection cannot simply be assumed to be independent of control.
Imagine a separator whose normal level controller opens the liquid outlet valve as level rises. A high-level alarm could call for operator investigation before the situation becomes critical. A separately designed high-high level trip could, if specified for that vessel, stop incoming flow by closing a shutdown valve. The alarm provides an opportunity to intervene; the trip performs its specified action without waiting for that intervention. Neither a particular alarm setting nor this trip arrangement is universal.
The illustration below shows the same broad distinction on a reactor rather than a separator. It depicts process-control and safety-system paths with their own illustrated transmitters and valves. It helps you see their different purposes, but a simplified drawing alone cannot establish that a real installation meets every independence requirement.
Instrumented protection is also not the whole of plant safety. A pressure relief device, for example, is a different kind of safeguard. Later in the course you will examine safety-system architecture in more detail; for now, the essential distinction is regulating normal operation versus responding to a defined hazardous condition.
Monitoring makes plant conditions visible
Monitoring uses measurements and equipment-status signals to make plant behavior visible to people and to records. An operator display might show separator pressure now, while a trend shows whether it has been rising over the past hour. An export flow measurement can contribute to production records. A recorded alarm or pump-stop event can help explain what happened during a disturbance.
Monitoring can be local, such as a gauge beside a vessel, or available at a control-room display. A transmitter may supply both a live controller input and a recorded trend; the underlying measurement is shared, but the functions differ. The controller adjusts the process. The trend helps people observe its behavior and investigate changes. A displayed value does not itself constitute control or protection.
In a drawing or scenario, identify each function by asking what happens to the information:
| Function | What it accomplishes |
|---|---|
| Measurement | Obtains a value or detects a state, such as vessel pressure or high level |
| Control | Adjusts a process element to maintain normal operation |
| Monitoring | Displays, trends, records, or reports conditions for assessment |
| Safeguarding | Prevents an unsafe action or responds to a defined hazardous condition |
One instrument signal can support several of these purposes, but do not assume they all share the same sensor or that a monitoring or control signal is adequate for a required protective function. The plant’s drawings and functional documentation establish the actual connections and actions.
Key takeaways
Plant instrumentation does more than display numbers. Measurements establish what is happening; control adjusts normal operation; monitoring makes conditions and history visible; and safeguarding prevents or responds to specified hazards. An alarm calls for assessment or action, whereas an automatic trip takes a defined protective action. Always confirm an instrument’s actual role from the documented design rather than its device type alone.
Next, the course turns to hazards you may encounter around these instruments—including pressure, electricity, and hazardous gas—before considering how instrumentation work is carried out safely.