BS EN 61511-1:2017+A1:2017

Functional safety. Safety instrumented systems for the process industry sector. Framework, definitions, system, hardware and application programming requirements | Status: Current

1 Scope This part of IEC 61511 gives requirements for the specification, design, installation, operation and maintenance of a safetyinstrumented system (SIS), so that it can be confidently entrusted to achieve or maintain a safe state of the process. IEC 61511‑1 has been developed as a process sector implementation of IEC 61508:2010. In particular, IEC 61511‑1:

1. a) specifies the requirements for achieving functional safety but does not specify who is responsible for implementing the requirements (e.g., designers, suppliers, owner/operating company, contractor). This responsibility will be assigned to different parties according to safety planning, project planning and management, and national regulations;
2. b) applies when devices that meets the requirements of the IEC 61508 series published in 2010, or IEC 61511‑1:2016 [11.5], is integrated into an overall system that is to be used for a process sector application. It does not apply to manufacturers wishing to claim that devices are suitable for use in SISs for the process sector (see IEC 61508‑2:2010 and IEC 61508‑3:2010);
3. c) defines the relationship between IEC 61511 and IEC 61508 (see Figures 2 and 3);
4. d) applies when application programs are developed for systems having limited variability language or when using fixed programming language devices, but does not apply to manufacturers, SIS designers, integrators and users that develop embedded software (systemsoftware) or use full variability languages (see IEC 61508‑3:2010);
5. e) applies to a wide variety of industries within the process sector for example, chemicals, oil and gas, pulp and paper, pharmaceuticals, food and beverage, and non-nuclear power generation;

   NOTE 1 Within the process sector some applications may have additional requirements that have to be satisfied.

6. f) outlines the relationship between SIFs and other instrumented functions (see Figure 4);
7. g) results in the identification of the functional requirements and safety integrity requirements for the SIF taking into account the risk reduction achieved by other methods;
8. h) specifies life-cycle requirements for systemarchitecture and hardware configuration, application programming, and system integration;
9. i) specifies requirements for application programming for users and integrators of SISs.
10. j) applies when functional safety is achieved using one or more SIFs for the protection of personnel, protection of the general public or protection of the environment;
11. k) may be applied in non-safety applications for example asset protection;
12. l) defines requirements for implementing SIFs as a part of the overall arrangements for achieving functional safety;
13. m) uses a SISsafety life-cycle (see Figure 7) and defines a list of activities which are necessary to determine the functional requirements and the safety integrity requirements for the SIS;
14. n) specifies that a H&RA is to be carried out to define the safety functional requirements and safety integrity levels (SIL) of each SIF;

    NOTE 2 Figure 9 presents an overview of risk reduction means.

15. o) establishes numerical targets for average probability of failure on demand (in demand mode) and average frequency of dangerous failures (in demand mode or continuous mode) for each SIL;
16. p) specifies minimum requirements for hardware fault tolerance (HFT);
17. q) specifies measures and techniques required for achieving the specified SIL;
18. r) defines a maximum level of functional safetyperformance (SIL 4) which can be achieved for a SIF implemented according to IEC 61511‑1;
19. s) defines a minimum level of functional safetyperformance (SIL 1) below which IEC 61511‑1 does not apply;
20. t) provides a framework for establishing the SIL but does not specify the SIL required for specific applications (which should be established based on knowledge of the particular application and on the overall targeted risk reduction);
21. u) specifies requirements for all parts of the SIS from sensor to final element(s);
22. v) defines the information that is needed during the SISsafety life-cycle;
23. w) specifies that the design of the SIS takes into account human factors;
24. x) does not place any direct requirements on the individual operator or maintenance person:

Figure 2 — Relationship between IEC 61511 and IEC 61508

NOTE 3 IEC 61508 is also used by safety instrumented designers, integrators and users where directed in IEC 61511.

Figure 3 — Detailed relationship between IEC 61511 and IEC 61508

NOTE 4 Subclause 7.2.2 in IEC 61511‑1:2016 and A.7.2.2 in IEC 61511‑2:2016 contain guidance on handling integration of sub-systems that comply with other standards (such as machinery, burner, etc.).

Figure 4 — Relationship between safety instrumented functions and other functions Standard specifies activities which are to be carried out but requirements are not detailed