What the PEMEX Deer Park Incident Teaches Us About Conduct of Operations
The recent U.S. Chemical Safety Board investigation into the fatal hydrogen sulfide release at the PEMEX Deer Park refinery is difficult to read. Two workers died. Over 27,000 pounds of toxic gas were released. Communities were placed under shelter-in-place. The refinery reported $12.3 million in loss of use damage.
And the root cause?
A flange was opened on the wrong section of piping.
But let’s be clear — this was not a “worker mistake.”
This was a Conduct of Operations failure.
The Real Issue Was Operational Discipline
The CSB findings point to systemic breakdowns:
- Positive equipment identification was inadequate.
- Work permits were overly broad and lacked enforced hold points.
- Contractors were reassigned without proper hazard re-briefing.
- Deviations from established procedures were occurring.
- There was a gap between written policy and actual field execution.
None of these are unusual in industry. That’s the uncomfortable truth.
Opening the wrong equipment. Permits being treated as paperwork. Assumptions about unit status. Shortcuts normalized over time. These are not rare events. They are signs of gaps in operational conduct and operational discipline.
What Conduct of Operations Really Means
Conduct of Operations is a management system that ensures:
- Work is performed exactly as written.
- Hazards are verified before execution.
- Responsibilities are clearly defined.
- Deviations are identified immediately.
- Assumptions are eliminated.
- Leadership reinforces expectations consistently.
It makes discipline measurable. And when that system weakens, incidents follow.
Do You Have Gaps in Conduct of Operations?
Conduct of Operations Gap Assessment is an evaluation of behavior, reinforcement systems, and execution risk across five dimensions:
1️⃣ Field Execution vs. Written Policy
- Are permits followed exactly as written?
- Are hold points enforced?
- Is operator presence verified when required?
- Are identification steps documented and confirmed?
Observe live work, sample permits, and interview supervisors. The output is a deviation matrix ranked by risk exposure.
2️⃣ Equipment Identification & Isolation Controls
- Is positive identification verified before opening?
- Are tags visible and unambiguous?
- Is there independent confirmation?
- Are markings consistent and standardized?
Conduct field walkdowns and contractor interviews. The output is an equipment identification risk heatmap.
3️⃣ Permit-to-Work System Integrity
- Are permits task-specific?
- Are SIMOPS conflicts evaluated?
- Are reassignment controls in place?
- Are hazard controls explicit and enforceable?
Review permit samples and shift handoffs. The output is a Permit System Robustness Score.
4️⃣ Contractor Management & Reassignment Controls
- Are contractors briefed when moving between units?
- Is unit operational status clearly defined?
- Are hazards re-established when scope changes?
Evaluate onboarding systems and turnaround execution practices. The output is a Contractor Exposure Risk Model.
5️⃣ Leadership Reinforcement & Accountability
This is where most failures originate.
- Are deviations tolerated?
- Are metrics leading or lagging?
- Are audits behavioral or administrative?
- Is discipline consistently enforced?
Assess leadership reinforcement systems and KPI structure. The output is an Operational Discipline Maturity Index.
What Executives Receive
A true Conduct of Operations Gap Assessment produces:
- Executive Risk Summary (Board-ready)
- Risk-ranked gap register
- Immediate high-risk corrective actions (0–90 days)
- 12–24 month discipline roadmap
- Measurable performance metrics
- Audit reinforcement framework
This is measurable risk reduction.
The ROI Is Not Subtle
The Deer Park incident resulted in:
- $12.3 million in reported loss of use damage
- Two fatalities
- Community exposure
- Regulatory scrutiny
- Reputational damage
- Insurance implications
A comprehensive Conduct of Operations Gap Assessment costs a fraction of 1% of a moderate incident. Preventing one serious release can produce 50× to 200× return on investment. And that does not even include the human cost.
Why Many Facilities Believe They’re Fine
Most sites:
- Have procedures.
- Have policies.
- Pass audits.
- Are technically compliant.
But they also have:
- Normalized deviation.
- Informal shortcuts.
- Permit generalization.
- Contractor assumption.
- Drift between written systems and lived behavior.
That drift is where fatalities occur.
Final Thought
Fatal hydrogen sulfide releases are not new. Opening the wrong flange is not rare. Permit deviations are not uncommon.
What is rare is disciplined execution every single time.
Conduct of Operations is the system that makes discipline measurable.
A Gap Assessment is how you find the cracks before someone dies in one.
Please join us in Prescott Arizona at our conference in September: https://upacsummit.com/
