Asset integrity management: what it covers, the standards behind it, and how it fits with maintenance
Asset integrity management keeps the equipment that contains, controls or protects against a hazard fit for purpose across its life. The three legs it stands on, safety critical elements and performance standards, the assurance tools, how it fits with maintenance and the asset management system, and the Australian regulatory frame.
Key takeaways
- Asset integrity management is the discipline of making sure the equipment that contains, controls or protects against a hazard is fit for purpose across its life: designed right, built right, kept right and proven right.
- It rests on three legs. Design integrity, technical integrity and operating integrity, and a facility is only as sound as the weakest of the three.
- Safety critical elements are the centre of it. Each one carries a performance standard, and the assurance tasks that prove the standard is met are evidence, not routine maintenance.
- Risk based inspection, condition monitoring and proof testing are the main tools, chosen per degradation mechanism rather than applied by default.
- Integrity management and maintenance share the same CMMS, the same hierarchy and the same people. The difference is that integrity tasks cannot be deferred without a documented decision.
Asset integrity management is the work of making sure the equipment that contains a hazard, controls it or protects against it is fit for purpose for as long as it is in service. Pressure vessels and piping, structures, pipelines, relief and isolation, fire and gas systems, safety instrumented systems and the control functions that keep a process inside its safe envelope: if one of them fails, the consequence is not lost production but a release, a fire, a collapse or an injury.
That changes how the work is managed. Routine maintenance can be reprioritised on cost and availability. Integrity work cannot, because the equipment has a performance standard it has to be proven against and a regulator, insurer or safety case that expects the evidence. The two share the same CMMS, the same hierarchy and usually the same people, but they answer to different rules.
This guide covers what asset integrity management includes, the three legs it stands on, how safety critical elements and performance standards work, the main assurance tools, how it fits with maintenance and the asset management system, the standards that frame it, and where integrity programs go wrong.
The three legs of integrity
The common way to describe the discipline is as three kinds of integrity, each proven in a different way. A facility is only as sound as the weakest of the three, which is why a well maintained plant can still be unsafe if it is run outside its design envelope, and why a conservatively designed plant can fail if its corrosion allowance is used up without anyone noticing.
Design integrity
Was it designed and built to contain and control the hazard?
Proven by · codes, hazard studies, verification, change control
Technical integrity
Is it still in the condition the design assumed?
Proven by · inspection, testing, monitoring, anomalies
Operating integrity
Is it run within the limits the design and inspections rely on?
Proven by · envelopes, procedures, competency, overrides
↑ A facility is as sound as the weakest of the three ↑
- 1Performance standard
- 2Assurance task
- 3Finding or anomaly
- 4Fix, accept or defer
The assurance loop · each safety critical element, against its performance standard
| Leg | The question it answers | How it is proven |
|---|---|---|
| Design integrity | Was the equipment designed and built to contain and control the hazard, with the right materials, margins and protective functions? | Design codes, hazard studies, verification during construction, and management of change for anything altered since |
| Technical integrity | Is the equipment still in the condition its design assumed? | Inspection, testing, condition monitoring and anomaly management against performance standards |
| Operating integrity | Is it being operated within the limits the design and the inspections rely on? | Operating envelopes, procedures, competency, alarm management and the handling of excursions and overrides |
An inspection interval is a promise about operating conditions. Change the conditions and the interval is no longer valid.
Safety critical elements and performance standards
The centre of an integrity program is the register of safety critical elements. An SCE is any part of the facility, including software, whose failure could cause or contribute substantially to a major accident, or whose job is to prevent one or limit its effect. The barrier model from the hazard studies, often drawn as a bow tie, is what identifies them: each barrier that stops a hazard becoming an event, or an event becoming a disaster, is made of elements, and those elements are critical.
Each SCE carries a performance standard. It states what the element must do, how well, how reliably and for how long: a relief valve that opens at a set pressure and passes a stated flow, a fire pump that reaches pressure within a stated time, a safety instrumented function with a stated probability of failure on demand. The assurance tasks follow from the standard, and the records of those tasks are the evidence the safety case rests on.
This is where integrity work differs from ordinary maintenance. A task that verifies a performance standard cannot be deferred on cost or convenience. If it has to be, the deferral is a recorded decision with a risk assessment, compensating measures and an owner, and a pattern of deferrals is itself a finding.
- Derive the SCE list from the hazard and barrier studies, not from an equipment class list. The same pump can be critical on one duty and not another.
- Write performance standards that can be tested. A standard that says the element shall work is not a standard.
- Link each assurance task in the CMMS to the SCE and the performance standard it verifies, so the evidence can be found.
- Treat a failed assurance test as an anomaly with its own process, separate from the repair work order.
The assurance tools, and which fits what
Integrity is proven by a small set of tools, and the skill is in matching each to the way the equipment degrades. Applying one by default, such as a fixed internal inspection interval on every vessel, spends effort where it is not needed and misses the mechanisms that do not follow a calendar.
| Tool | What it suits | Reference point |
|---|---|---|
| Risk based inspection | Static equipment: vessels, piping, tanks, where corrosion, cracking and erosion set the life | API RP 580 for the method, with the owner's corrosion study underneath it |
| Non-destructive testing | Finding and sizing defects without opening or damaging the equipment, on a plan set by RBI | The NDT methods and personnel qualification schemes the site adopts |
| Condition monitoring | Rotating machinery and structures that give measurable warning, such as vibration, strain or thickness trends | ISO 17359 for program design |
| Proof testing | Safety instrumented functions, relief devices, fire and gas, isolation, where failure is hidden until demanded | IEC 61511 for safety instrumented systems |
| Structural inspection | Civil and steel structures, including the large bulk handling machines, where fatigue and corrosion act slowly | The design standard the structure was built to, such as AS 4324.1 for bulk handling machines |
| Fitness for service assessment | Equipment found with a defect, to decide whether it can keep running, at what conditions and for how long | The owner's assessment procedure, with the design code as the baseline |
Choose the tool per degradation mechanism. A calendar interval is a guess about a mechanism nobody has named.
Anomalies, deferrals and life extension
The tests will find things. An anomaly process is what happens next: the finding is recorded against the element, assessed for whether the performance standard is still met, given a temporary measure if it is not, and tracked to a permanent fix or a documented acceptance. The register of open anomalies, by criticality and age, is one of the most honest measures of an integrity program.
Deferral is the other process that needs discipline. Assurance tasks slip for good reasons, such as a shutdown that moved, and bad ones, such as a budget. Either way the deferral is a decision with a risk assessment, compensating measures, an approver and an expiry. The pattern across deferrals is what an auditor or regulator reads first.
Ageing changes the question. Equipment running beyond its original design life is common across Australian mining, oil and gas and rail, and it is acceptable when the integrity case has been remade for the extension: the degradation mechanisms reassessed, the margins recalculated, the inspection program adjusted and the obsolescence of control and protective systems managed. The UK regulator's ageing and life extension program is the most referenced body of practice on what that case has to cover.
How integrity fits with maintenance and asset management
Integrity management is not a separate organisation. It runs through the same CMMS, the same asset hierarchy and the same planners and tradespeople as the rest of the maintenance work. What marks it out is the flag on the task, the performance standard behind it and the rules about deferral and evidence.
Inside the asset management system, integrity is part of the risk and the lifecycle decisions. The strategic asset management plan sets how risk is treated, the asset management plans carry the inspection and replacement programs and their cost, and the performance measures report the state of the barriers alongside availability and cost. Criticality is the shared language: the consequence scale used to rank maintenance effort should include the safety and environmental consequences that define an SCE, so the two rankings agree.
For new assets, integrity arrives with the project. Performance standards, assurance tasks, proof test intervals and inspection baselines belong in the CMMS before start-up, which is part of what operational readiness has to deliver.
If the maintenance criticality ranking and the SCE register disagree about what matters, one of them is wrong, and it is usually the ranking.
The regulatory frame in Australia
The obligations depend on the asset and the jurisdiction. Offshore petroleum facilities operate under safety cases accepted by NOPSEMA, which expects the operator to identify safety critical elements, set performance standards and verify them. Onshore, a facility holding hazardous chemicals above threshold quantities can be determined a major hazard facility under the model WHS Regulations, with safety case and safety management system obligations, and some states run their own regimes.
Mine sites answer to their state mines regulator and its requirements for principal hazard management, including tailings storage, structures, pressure equipment and fire. Rail operators work under the Rail Safety National Law and its regulator, with integrity of track, structures, signalling and rolling stock safety systems part of the safety management system. In every case the integrity program is the operator's own, and the regulator judges whether it is adequate.
Standards and reference points
There is no single asset integrity standard. The references below are the ones an integrity program is usually built against, and each is an option to adopt rather than a requirement in itself.
| Reference | What it covers | Where it helps |
|---|---|---|
| ISO 55001 | Requirements for an asset management system | The planning, risk and review cycle the integrity program sits inside |
| API RP 580 | Risk based inspection | Inspection planning for vessels, piping and tanks |
| IEC 61511 | Functional safety of safety instrumented systems in the process industry | Proof testing and performance of safety instrumented functions |
| ISO 14224 | Equipment taxonomy and reliability data | The hierarchy and failure data that assurance records attach to |
| ISO 17359 | Condition monitoring and diagnostics of machines | Monitoring programs for rotating and structural elements |
| Energy Institute SCE guidelines | Management of safety critical elements across the facility life cycle | SCE identification, performance standards, assurance and ageing |
| HSE KP4 | The UK regulator's ageing and life extension inspection program and findings | What a life extension case needs to cover |
Where integrity programs go wrong
- An SCE list copied from a template rather than derived from the site's own hazard and barrier studies.
- Performance standards that cannot be tested, so assurance tasks verify nothing.
- Assurance tasks mixed in with routine maintenance in the CMMS, deferred on the same rules and invisible in the backlog.
- Inspection intervals set by calendar with no degradation mechanism named behind them.
- Anomalies closed by the repair work order, with no assessment of whether the barrier was ever compromised.
- Operating envelopes known to engineering and unknown to the control room.
- Life extension by silence: equipment past design life with no remade integrity case.
- Evidence that exists but cannot be found, because the records are not linked to the element they verify.
Setting up an integrity program
Identify the hazards and barriers
Hazard studies and bow ties that show which elements stop an event.
Register the safety critical elements
Each with an owner, in the asset hierarchy, linked to its barrier.
Write performance standards
What each element must do, how well, how reliably, and how it will be proven.
Plan the assurance
RBI, proof tests, monitoring and inspection, chosen per degradation mechanism.
Run anomaly and deferral processes
Findings assessed against the standard, deferrals decided and tracked.
Review and audit
Barrier health reported with availability and cost, and the system audited.
Identify the hazards and barriers
Hazard studies and bow ties that show which elements stop an event.
Register the safety critical elements
Each with an owner, in the asset hierarchy, linked to its barrier.
Write performance standards
What each element must do, how well, how reliably, and how it will be proven.
Plan the assurance
RBI, proof tests, monitoring and inspection, chosen per degradation mechanism.
Run anomaly and deferral processes
Findings assessed against the standard, deferrals decided and tracked.
Review and audit
Barrier health reported with availability and cost, and the system audited.
Common questions
What is asset integrity management?
Asset integrity management is the systematic work of making sure that the equipment whose failure could cause a major accident, an environmental release or a serious production loss is designed, built, operated and maintained so that it stays fit for purpose across its life. It covers pressure systems, structures, pipelines, safety instrumented systems, fire and gas detection, relief and isolation, and the barriers that stop a hazard becoming an event.
What is the difference between asset integrity and maintenance?
Maintenance keeps equipment working. Integrity management proves that the equipment protecting against a major hazard will work when demanded, and keeps the evidence. The two overlap heavily and run through the same systems, but an integrity task has a performance standard behind it and cannot be deferred without a recorded decision, where a routine maintenance task can be reprioritised on cost and availability.
What is a safety critical element?
A safety critical element, or SCE, is any part of a facility, including software, whose failure could cause or contribute substantially to a major accident, or whose purpose is to prevent or limit the effect of one. Each SCE has a performance standard stating what it must do, how well, how reliably and for how long, and assurance tasks that verify it.
What is an asset integrity management system?
The organised set of policies, roles, processes, data and tools that an operator uses to manage integrity: the hazard and barrier model, the register of safety critical elements and their performance standards, the inspection, testing and monitoring programs, the handling of anomalies and deferrals, management of change, competency, and the audits and reviews that check the system is working. On a major hazard facility it is part of the safety case.
What is risk based inspection?
Risk based inspection, or RBI, sets the inspection scope, method and interval for static equipment such as vessels, piping and tanks from the likelihood and consequence of each degradation mechanism, rather than from a fixed calendar. API RP 580 sets out the method. It concentrates effort where corrosion, cracking or erosion is most likely and most damaging, and it records the reasoning so an interval can be defended.
Which standards apply to asset integrity management?
ISO 55001 for the asset management system around it, API RP 580 for risk based inspection, IEC 61511 for safety instrumented systems and their proof testing, ISO 14224 for the equipment data, and the Energy Institute guidelines for managing safety critical elements. In Australia the regulatory frame comes from the safety case regimes run by NOPSEMA offshore and the state regulators for major hazard facilities onshore, with mine sites answering to their state mines regulator.
How does asset integrity apply to mining and rail?
The same logic applies wherever a failure could hurt people or the environment. On a mine it covers tailings facilities, structures, pressure systems, lifting equipment, fire systems and the protective functions on fixed plant. On rail it covers track, structures, signalling and rolling stock safety systems under the rail safety regime. The vocabulary of safety critical elements and performance standards comes from the process industries, and it transfers well.
Key terms
Plain-language definitions from our glossary for the concepts this article leans on.
Standards and further reading
- ISO 55001:2024 Asset management system requirements (ISO)
- IEC 61511-1:2016+AMD1:2017 Functional safety, safety instrumented systems for the process industry (IEC)
- ISO 14224:2016 Collection and exchange of reliability and maintenance data for equipment (ISO)
- ISO 17359:2018 Condition monitoring and diagnostics of machines, general guidelines (ISO)
- Guidelines for the management of safety critical elements, 3rd edition (Energy Institute)
- Ageing and life extension of offshore installations (KP4) (UK Health and Safety Executive)
- Safety cases and validation (NOPSEMA)
- Guide for major hazard facilities, safety management systems (Safe Work Australia)
- AS 4324.1:2025 Mobile equipment for continuous handling of bulk materials, general requirements for the design of steel structures (Standards Australia)
Related case studies and tools
- Asset management planning and the system behind it (case study)
- Reliability engineering and asset strategy program (case study)
- Oil and gas solutions (solution)
- Criticality Matrix Calculator (tool)
Related reading
Working through something like this?
See how we approach these initiatives, or tell us what you are dealing with.