How safe are emergency shutdowns in real life?

Decisions in the design of process and control systems are often based on the assumption that emergency shutdowns are always the safe response to upsets and maintain the asset integrity. However, they may impose significant risks to the plant and personnel. Alternative intervention actions and design decisions may provide less risky solutions.