Master Functional Safety: SIS Design and SIL Calculations

Explore how safety-related systems protect equipment and processes, define risk, and guide a risk-based safety life cycle under IEC 61,508 with parts 1–3.

Explore the scope of IEC 61508, detailing functional safety, safety related systems, and the role of electrical, electronic, and programmable electronic devices in achieving SIL levels.

Define risk as the product of frequency and consequences in functional safety. Assess hazards, hazardous situations, and harmful events to determine tolerable risk per IEC standards.

Review the IEC 61,508 standard through a detailed breakdown of the safety life cycle, hardware and software requirements, and the annexes guiding functional safety management.

Explore safety instrumented systems (SIS) in the process industry and the key standards guiding their design, risk assessment, and SIL determination.

Explore functional safety through SIS design and SIL calculations, and prepare to proceed to the next section with practical insights.

Learn how accidents arise from multiple overlapping failures and apply lopar concepts, the safety instrumented system, and sil calculations to design robust safety layers—prevention and mitigation.

Identify and mitigate hazards in industrial plants through hazop (hazard and operability studies), fault tree analysis, and what-if reviews, emphasizing simplicity and risk reduction for safe design.

Explore process control system (BPCS) as safety layer that keeps process variables within safe limits to optimize energy use and production quality, while promoting operator involvement to avoid automation overreliance.

Alarm systems constitute prevention layer three, monitoring for early detection while staying independent from the process control and easy to maintain. They involve operators, but information overload can impair action.

Understand safety instrumented systems (SIS) as the fourth safety layer with independent sensors, logic, and final control elements that automatically move the process to a safe state.

Explore passive physical protections in layer five, including pressure relief valves and rupture discs, to prevent overpressure while considering potential secondary hazards and environmental protection law implications.

Activate the physical containment layer to perform first mitigation actions and contain or neutralize releases, using passive protections like asphalt tank dikes while coordinating fire, gas, and evacuation responses.

Explore mitigation layer seven: scrubbers neutralize toxic releases and flare towers burn off excess gas, illustrating their role as physical protections and mitigative safeguards.

Fire and gas systems form the eighth layer of protection, are normally de-energized, and detect fires and gases with sensors, logic solvers, and final elements; trigger alarms to protect people.

Mitigation layer #9 outlines the internal emergency plan—an organizational structure with skilled staff and equipment to mitigate hazards inside and outside the plant, including evacuation alarms and sirens.

Inform the external community about potential hazards and coordinate with authorized bodies through a carefully prepared external emergency plan, mapping risk areas and outlining evacuation procedures for rapid, effective response.

Assess protection levels by evaluating risk, plant structure, control and safety instrumentation, physical protections, and prevention levels to balance risk with appropriate prevention and mitigation layers.

Master functional safety concepts by focusing on SIS design and SIL calculations, and prepare to proceed to the next section.

Explore IEC part six guidelines for applying part two and part three, and refresh MTBF and mean time between failures, probability of failure on demand, safe failure fraction, and SIL.

Explain how reliability measures the probability a device performs its intended function under defined limits and on demand, using exponential decay with a constant failure rate.

Unreliability is the probability of failure from time zero to t and equals one minus reliability. A Maclaurin expansion provides approximation, while MTTF equals mission time divided by failed units.

Define availability and unavailability for repairable systems, show how they depend on MTTF, MTBF and MTTR, and illustrate with a transmitter example achieving 99.984% availability and 0.016% unavailability.

Explore how availability and reliability relate in safety instrumented systems, distinguishing safe versus dangerous failures and using the risk reduction factor to quantify performance and inform decisions.

Explore achievable availability, using mean time between maintenance as uptime, including planned and unplanned maintenance, excluding supply delays, and applying the M/(M+1) formula for maintenance turnarounds with available spare parts.

Operational availability extends achievable availability, including downtime from spare parts, supply delays, and maintenance delays to measure effectiveness and efficiency; MTB and MSD may be expressed in hours or days.

Show how MTBF equals MTTF plus MTTR and that MTBF applies to repairable systems while MTTF reflects successful operation, and differentiate safe and dangerous failure rates in safety instrumented systems.

Understand failure rate (fit) as a reliability metric, meaning failures per unit time per exposed components; use its reciprocal as mean time to failure and apply the exponential probability approximation.

Explore the bathtub curve of electronic reliability, highlighting infant mortality, wear-out, and a constant failure-rate middle region. Learn how MTBF, MTTF, and risk reduction factors guide SIL one assessments.

Explore failure rate categories in functional safety, separating safe and dangerous failures into detected and undetected, and examine diagnostic coverage and lambda due effects on safe failure fraction and sil.

Learn how common cause failures affect the safety instrumented system and apply the beta model to split failure rates into normal and common mode components.

Explore reliability block diagrams, fault tree analysis, and Markov diagrams to estimate system reliability, evaluate common-cause failures with beta factors, and model failure and repair rates for availability.

Master the essential concepts of SIS design and SIL calculations, and confirm readiness before proceeding to the next section.

Explore how safety instrumented systems detect hazards, implement safety instrumented functions, and trigger de-energized to trip actions using sensors, a logic solver, and final elements.

Explain how a safety instrumented system, per IEC 61,511, defines functional safety requirements, safety functions, safe states, demand rates, proof test intervals, and response times to ensure safe operation.

Assess safety integrity levels for safety instrumented functions by calculating failure on demand and risk reduction across architectures such as one out of one and one out of two.

Examine architectures from one out of one to two out of three, exploring redundancy, M out of N, safety instrumented function, safe and dangerous failure rates, and diagnostic coverage.

Illustrates the 1oo1 non-redundant system architecture, showing safe failures causing nuisance trips at 0.04 per year and dangerous failures where relay contacts weld shut on demand at 0.02 per year.

Analyze the one out of two (1oo2) safety architecture with series outputs, quantify nuisance trips and the rare two-channel dangerous failure probability, and assess production impact.

Two-out-of-two architectures wire outputs in parallel; for nuisance trips, both channels must suffer safe failure, yielding 0.0016 per year, while dangerous failures double to 0.04 per year.

Two out of three systems use majority voting to enhance safety; one out of two with diagnostic enables channel diagnosis, balancing nuisance trips and fail-to-function with 2oo3, 1oo2D, and 2oo2.

Explore how common cause failures and beta factors shape PFDavg in redundant architectures, and how beta limits risk reduction for one-out-of-two vs one-out-of-one designs.

Explore a 1oo1 minimum system architecture for a safety instrumented function, including a sensor, barrier, plc, final element, and analyze mtbf and ppfd across components.

Analyze how periodic proof testing affects pfdavg in a 1oo1 architecture, showing how testing effectiveness e and system lifetime SL shift SIL from two to one.

Analyze how manual proof test duration impacts PFDavg in 1oo1 architectures, using bypass testing and the revised equation with d and TD. Discover how longer tests degrade sea level.

Analyze pfdavg interpretation for one-out-of-one architectures, linking bfd average, proof testing, and mttr to safety unavailability in safety instrumented systems.

Examine a one out of two system architecture with two channels, each housing a sensor, barrier, and PLC, driving two elements in series to achieve SIL 3.

Analyze a one out of two architecture with redundancy limited to the final element, and quantify the BFD and risk reduction factor, achieving SIL 2 while reducing hardware and cost.

Two out of three architecture uses three controllers with voting to tolerate safe and dangerous failures, maintaining SIL two with annual proof tests and a high risk reduction factor.

Compare CIF values across architectures—one out of one, one out of two, and two out of three—and evaluate SIL implications, PSF values, test intervals, and IEC tables for functional safety.

Demonstrate practical cell calculations for safety functions using two on/off shut down valves, one-out-of-two configuration, calculating ppfd average, lambda values, risk reduction, and SIL three suitability per IEC standards.

Calculate the two-out-of-three average value for three thermocouples with different failure rates, consider a one-year proof test interval, and compute the risk reduction factor for the cell level.

Calculate BFD average of total safety loop, combining valves, thermocouples, and a PLC with BFD 0.0005 per year; sum FDS to yield a risk reduction factor of 673 for Cl2.

Prepare for the next section by reviewing core concepts in functional safety, SIS design, and SIL calculations.

Guides implementing bypasses for online testing of SIS loops, detailing bypass valves, limit switches, shutdown paths, testing procedures, and returning all components to their original positions.

Investigate partial stroke testing for valves in safety instrumented systems, using PST to boost diagnostic coverage with DCS data, smart positioners, and baseline performance.

Advance your understanding of partial stroke tests (pst) within functional safety by examining their role in SIS design and SIL calculations.

Perform a stroke test: open and close valve, record response times and leaks, boosting diagnostic coverage and seal performance. Interval drives BFD averages and SIL decisions, with 5–10 year ideals.

Explore how full stroke and partial stroke tests influence PFDavg and SIL, illustrating BFD degradation over time and how CPT-driven PSTs can extend testing intervals while maintaining safety.

Master functional safety through SIS design and SIL calculations, and learn essential steps before proceeding to the next section.

Design requirements for safety instrumented systems per IEC 61,508 and 61 511, cover sensors, logic solvers, final elements, and redundancy across SIL 1–3.

Review prerequisites before proceeding to the next section to set the stage for mastering SIS design and SIL calculations in functional safety.

Examine the safety life cycle and safety integrity levels defined by IEC 61,508, detailing planning, execution, validation, and documentation to achieve functional safety and manage changes throughout the system’s life.

Identify the four safety integrity levels from SIL 1 to SIL 4, the risk reduction they provide, and the three modes—low demand, high demand, and continuous—used by SIS.

Explore how hardware fault tolerance and component types affect safety integrity levels in SIS design. Learn how type A and type B components influence HFT needs and system reliability.

Learn how functional safety management uses hardware fault tolerance concepts—single channel versus redundant designs, dangerous and detected faults, and mtbf calculations—to prevent systematic faults and ensure safe operation.

Master safe failure fraction and psf concepts, compare type a and type b components against 60% and 90% thresholds, and apply redundancy to meet sil two.

Calculate hazard frequency and consequences to compare risk with tolerable levels and select a C level using the IEC risk graph for determining the required SIL.

Review prerequisites before proceeding to the next section in a course on functional safety, SIS design, and SIL calculations.

Explore the SIL calculation method for safety functions, using practical examples to link target cell, safety loop, HFT, SF, lambda du, and test interval D to PFD and SIL.

Illustrates a hydrogen compressor safety loop using nitrogen inerting to prevent ignition, and designs a single-channel safety function with SIL two, guiding CFD and FD calculations.

Demonstrate a safety function for continuous atomizing air supply in a rotary kiln, with risk analysis and SIL 2 design considerations for safe incineration.

Explore diagnostic coverage in oxygen-based safety loops for inerting to prevent dust explosions, using a practical example with flow meters, oxygen meters, and safety devices verified by IEC standards.

Demonstrates a diverse redundant level measurement design for a gas kiln cooling water system, using guided microwave analog measurement and a tuning fork level switch to achieve sil 3.

Explore a temperature monitoring safety function in a chemical paper process, using a downstream flow meter for diagnostic coverage to detect valve shaft damage and prevent hot medium leaks.

Watch me guide you through mastering functional safety with SIS design and SIL calculations, applying practical techniques for safer industrial systems.