{"id":73767,"date":"2026-09-01T11:06:38","date_gmt":"2026-09-01T14:06:38","guid":{"rendered":"https:\/\/a3aengenharia.com\/?post_type=articles&#038;p=73767"},"modified":"2026-09-01T11:06:38","modified_gmt":"2026-09-01T14:06:38","slug":"safety-instrumented-system-sis-architecture-sif-lifecycle","status":"publish","type":"articles","link":"https:\/\/a3aengenharia.com\/en-us\/content\/technical-articles\/safety-instrumented-system-sis-architecture-sif-lifecycle\/","title":{"rendered":"Safety Instrumented System (SIS): What It Is, Architecture, SIF, and Lifecycle"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">A Safety Instrumented System (SIS) is an instrumentation and automation system intended to execute one or more Safety Instrumented Functions (SIFs) to bring or maintain a process in a safe state when hazardous conditions are detected. In process-industry applications, the SIS is not merely a dedicated PLC: each SIF involves the complete chain of sensors, logic, final elements, interfaces, power supply, diagnostics, testing, procedures, and lifecycle management. IEC 61511 establishes requirements for the specification, design, installation, operation, and maintenance of these systems. The technical value of a SIS lies in demonstrable risk reduction, independence from the causes that may initiate the scenario, and the ability to perform the safety function when demanded.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What Is a Safety Instrumented System<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">A SIS is an instrumented protection layer used when risk analysis shows that process controls, alarms, mechanical barriers, procedures, and other safeguards do not reduce a particular risk to the criterion defined by the organization. Its purpose is not to optimize production, increase throughput, or perform normal regulatory control. Its purpose is to act under previously specified conditions to prevent or limit a hazardous consequence.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In Functional Safety terminology, a SIS may contain multiple SIFs. Each SIF addresses a specific safety scenario or requirement and has a required performance, frequently expressed as a SIL when applicable. Therefore, saying that a plant \u201chas a SIL 2 SIS\u201d without identifying which functions have that requirement may hide inadequate modeling. The integrity level is assigned to the function, not to the entire system as a commercial label.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">SIS, SIF, and SIL Are Different Concepts<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>SIS<\/strong> is the instrumented system that implements safety functions. <strong>SIF<\/strong> is a specific function that detects a condition and executes a safety action. <strong>SIL<\/strong> is a discrete measure of the integrity level required or achieved by a given SIF under the conditions established by the standard and the design.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Conceptual example: a transmitter detects excessive pressure in a vessel; the logic solver processes the signal; isolation valves close and a feed is interrupted. This chain may constitute a SIF. The set of several functions, their infrastructure, and associated resources make up the SIS.<\/p>\n\n\n\n<figure class=\"a3a-mermaid\"><svg id=\"a3a-diagram-7\" width=\"100%\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"flowchart\" style=\"max-width:min(876.578125px, 100%);height:auto;display:block;margin:0 auto\" viewBox=\"0 0 876.578125 171\" role=\"graphics-document document\" aria-roledescription=\"flowchart-v2\" aria-labelledby=\"chart-title-a3a-diagram-7\"><title id=\"chart-title-a3a-diagram-7\">Relationship between process, SIF, and Safety Instrumented System components<\/title><style>#a3a-diagram-7{font-family:Roboto,sans-serif;font-size:15px;fill:var(--a3a-diag-text, #0a0a0a);}@keyframes edge-animation-frame{from{stroke-dashoffset:0;}}@keyframes dash{to{stroke-dashoffset:0;}}#a3a-diagram-7 .edge-animation-slow{stroke-dasharray:9,5!important;stroke-dashoffset:900;animation:dash 50s linear infinite;stroke-linecap:round;}#a3a-diagram-7 .edge-animation-fast{stroke-dasharray:9,5!important;stroke-dashoffset:900;animation:dash 20s linear infinite;stroke-linecap:round;}#a3a-diagram-7 .error-icon{fill:var(--a3a-diag-canvas, #ffffff);}#a3a-diagram-7 .error-text{fill:#000000;stroke:#000000;}#a3a-diagram-7 .edge-thickness-normal{stroke-width:1px;}#a3a-diagram-7 .edge-thickness-thick{stroke-width:3.5px;}#a3a-diagram-7 .edge-pattern-solid{stroke-dasharray:0;}#a3a-diagram-7 .edge-thickness-invisible{stroke-width:0;fill:none;}#a3a-diagram-7 .edge-pattern-dashed{stroke-dasharray:3;}#a3a-diagram-7 .edge-pattern-dotted{stroke-dasharray:2;}#a3a-diagram-7 .marker{fill:var(--a3a-diag-stroke, #2e42a2);stroke:var(--a3a-diag-stroke, #2e42a2);}#a3a-diagram-7 .marker.cross{stroke:var(--a3a-diag-stroke, #2e42a2);}#a3a-diagram-7 svg{font-family:Roboto,sans-serif;font-size:15px;}#a3a-diagram-7 p{margin:0;}#a3a-diagram-7 .label{font-family:Roboto,sans-serif;color:var(--a3a-diag-text, #0a0a0a);}#a3a-diagram-7 .cluster-label text{fill:var(--a3a-diag-title, #0124af);}#a3a-diagram-7 .cluster-label span{color:var(--a3a-diag-title, #0124af);}#a3a-diagram-7 .cluster-label span p{background-color:transparent;}#a3a-diagram-7 .label text,#a3a-diagram-7 span{fill:var(--a3a-diag-text, #0a0a0a);color:var(--a3a-diag-text, #0a0a0a);}#a3a-diagram-7 .node rect,#a3a-diagram-7 .node circle,#a3a-diagram-7 .node ellipse,#a3a-diagram-7 .node polygon,#a3a-diagram-7 .node path{fill:var(--a3a-diag-fill, #eef2fd);stroke:var(--a3a-diag-stroke, #2e42a2);stroke-width:1px;}#a3a-diagram-7 .rough-node .label text,#a3a-diagram-7 .node .label text,#a3a-diagram-7 .image-shape .label,#a3a-diagram-7 .icon-shape .label{text-anchor:middle;}#a3a-diagram-7 .node .katex path{fill:#000;stroke:#000;stroke-width:1px;}#a3a-diagram-7 .rough-node .label,#a3a-diagram-7 .node .label,#a3a-diagram-7 .image-shape .label,#a3a-diagram-7 .icon-shape .label{text-align:center;}#a3a-diagram-7 .node.clickable{cursor:pointer;}#a3a-diagram-7 .root .anchor path{fill:var(--a3a-diag-stroke, #2e42a2)!important;stroke-width:0;stroke:var(--a3a-diag-stroke, #2e42a2);}#a3a-diagram-7 .arrowheadPath{fill:var(--a3a-diag-stroke, #0b0b0b);}#a3a-diagram-7 .edgePath .path{stroke:var(--a3a-diag-stroke, #2e42a2);stroke-width:2.0px;}#a3a-diagram-7 .flowchart-link{stroke:var(--a3a-diag-stroke, #2e42a2);fill:none;}#a3a-diagram-7 .edgeLabel{background-color:var(--a3a-diag-canvas, #ffffff);text-align:center;}#a3a-diagram-7 .edgeLabel p{background-color:var(--a3a-diag-canvas, #ffffff);}#a3a-diagram-7 .edgeLabel rect{opacity:0.5;background-color:var(--a3a-diag-canvas, #ffffff);fill:var(--a3a-diag-canvas, #ffffff);}#a3a-diagram-7 .labelBkg{background-color:rgba(255, 255, 255, 0.5);}#a3a-diagram-7 .cluster rect{fill:var(--a3a-diag-surface, #f8f8f8);stroke:var(--a3a-diag-border, #e2e8f0);stroke-width:1px;}#a3a-diagram-7 .cluster text{fill:var(--a3a-diag-title, #0124af);}#a3a-diagram-7 .cluster span{color:var(--a3a-diag-title, #0124af);}#a3a-diagram-7 div.mermaidTooltip{position:absolute;text-align:center;max-width:200px;padding:2px;font-family:Roboto,sans-serif;font-size:12px;background:var(--a3a-diag-canvas, #ffffff);border:1px solid hsl(0, 0%, 90%);border-radius:2px;pointer-events:none;z-index:100;}#a3a-diagram-7 .flowchartTitleText{text-anchor:middle;font-size:18px;fill:var(--a3a-diag-text, #0a0a0a);}#a3a-diagram-7 rect.text{fill:none;stroke-width:0;}#a3a-diagram-7 .icon-shape,#a3a-diagram-7 .image-shape{background-color:var(--a3a-diag-canvas, #ffffff);text-align:center;}#a3a-diagram-7 .icon-shape p,#a3a-diagram-7 .image-shape p{background-color:var(--a3a-diag-canvas, #ffffff);padding:2px;}#a3a-diagram-7 .icon-shape rect,#a3a-diagram-7 .image-shape rect{opacity:0.5;background-color:var(--a3a-diag-canvas, #ffffff);fill:var(--a3a-diag-canvas, #ffffff);}#a3a-diagram-7 .label-icon{display:inline-block;height:1em;overflow:visible;vertical-align:-0.125em;}#a3a-diagram-7 .node .label-icon path{fill:currentColor;stroke:revert;stroke-width:revert;}#a3a-diagram-7 :root{--mermaid-font-family:Roboto,sans-serif;}<\/style><g><marker id=\"a3a-diagram-7_flowchart-v2-pointEnd\" class=\"marker flowchart-v2\" viewBox=\"0 0 10 10\" refX=\"5\" refY=\"5\" markerUnits=\"userSpaceOnUse\" markerWidth=\"8\" markerHeight=\"8\" orient=\"auto\"><path d=\"M 0 0 L 10 5 L 0 10 z\" class=\"arrowMarkerPath\" style=\"stroke-width: 1; stroke-dasharray: 1, 0;\"><\/path><\/marker><marker id=\"a3a-diagram-7_flowchart-v2-pointStart\" class=\"marker flowchart-v2\" viewBox=\"0 0 10 10\" refX=\"4.5\" refY=\"5\" markerUnits=\"userSpaceOnUse\" markerWidth=\"8\" markerHeight=\"8\" orient=\"auto\"><path d=\"M 0 5 L 10 10 L 10 0 z\" class=\"arrowMarkerPath\" style=\"stroke-width: 1; stroke-dasharray: 1, 0;\"><\/path><\/marker><marker id=\"a3a-diagram-7_flowchart-v2-circleEnd\" class=\"marker flowchart-v2\" viewBox=\"0 0 10 10\" refX=\"11\" refY=\"5\" markerUnits=\"userSpaceOnUse\" markerWidth=\"11\" markerHeight=\"11\" orient=\"auto\"><circle cx=\"5\" cy=\"5\" r=\"5\" class=\"arrowMarkerPath\" style=\"stroke-width: 1; stroke-dasharray: 1, 0;\"><\/circle><\/marker><marker id=\"a3a-diagram-7_flowchart-v2-circleStart\" class=\"marker flowchart-v2\" viewBox=\"0 0 10 10\" refX=\"-1\" refY=\"5\" markerUnits=\"userSpaceOnUse\" markerWidth=\"11\" markerHeight=\"11\" orient=\"auto\"><circle cx=\"5\" cy=\"5\" r=\"5\" class=\"arrowMarkerPath\" style=\"stroke-width: 1; stroke-dasharray: 1, 0;\"><\/circle><\/marker><marker id=\"a3a-diagram-7_flowchart-v2-crossEnd\" class=\"marker cross flowchart-v2\" viewBox=\"0 0 11 11\" refX=\"12\" refY=\"5.2\" markerUnits=\"userSpaceOnUse\" markerWidth=\"11\" markerHeight=\"11\" orient=\"auto\"><path d=\"M 1,1 l 9,9 M 10,1 l -9,9\" class=\"arrowMarkerPath\" style=\"stroke-width: 2; stroke-dasharray: 1, 0;\"><\/path><\/marker><marker id=\"a3a-diagram-7_flowchart-v2-crossStart\" class=\"marker cross flowchart-v2\" viewBox=\"0 0 11 11\" refX=\"-1\" refY=\"5.2\" markerUnits=\"userSpaceOnUse\" markerWidth=\"11\" markerHeight=\"11\" orient=\"auto\"><path d=\"M 1,1 l 9,9 M 10,1 l -9,9\" class=\"arrowMarkerPath\" style=\"stroke-width: 2; stroke-dasharray: 1, 0;\"><\/path><\/marker><g class=\"root\"><g class=\"clusters\"><\/g><g class=\"edgePaths\"><path d=\"M98.301,69.25L105.988,63.417C113.675,57.583,129.048,45.917,140.235,40.083C151.422,34.25,158.422,34.25,161.922,34.25L165.422,34.25\" id=\"L_P_S_0\" class=\"edge-thickness-normal edge-pattern-solid edge-thickness-normal edge-pattern-solid flowchart-link\" style=\";\" data-edge=\"true\" data-et=\"edge\" data-id=\"L_P_S_0\" data-points=\"W3sieCI6OTguMzAxMzM5Mjg1NzE0MjgsInkiOjY5LjI1fSx7IngiOjE0NC40MjE4NzUsInkiOjM0LjI1fSx7IngiOjE2OS40MjE4NzUsInkiOjM0LjI1fV0=\" marker-end=\"url(#a3a-diagram-7_flowchart-v2-pointEnd)\"><\/path><path d=\"M298.891,34.25L303.057,34.25C307.224,34.25,315.557,34.25,323.224,34.25C330.891,34.25,337.891,34.25,341.391,34.25L344.891,34.25\" id=\"L_S_L_0\" class=\"edge-thickness-normal edge-pattern-solid edge-thickness-normal edge-pattern-solid flowchart-link\" style=\";\" data-edge=\"true\" data-et=\"edge\" data-id=\"L_S_L_0\" data-points=\"W3sieCI6Mjk4Ljg5MDYyNSwieSI6MzQuMjV9LHsieCI6MzIzLjg5MDYyNSwieSI6MzQuMjV9LHsieCI6MzQ4Ljg5MDYyNSwieSI6MzQuMjV9XQ==\" marker-end=\"url(#a3a-diagram-7_flowchart-v2-pointEnd)\"><\/path><path d=\"M489.219,34.25L493.385,34.25C497.552,34.25,505.885,34.25,513.552,34.25C521.219,34.25,528.219,34.25,531.719,34.25L535.219,34.25\" id=\"L_L_F_0\" class=\"edge-thickness-normal edge-pattern-solid edge-thickness-normal edge-pattern-solid flowchart-link\" style=\";\" data-edge=\"true\" data-et=\"edge\" data-id=\"L_L_F_0\" data-points=\"W3sieCI6NDg5LjIxODc1LCJ5IjozNC4yNX0seyJ4Ijo1MTQuMjE4NzUsInkiOjM0LjI1fSx7IngiOjUzOS4yMTg3NSwieSI6MzQuMjV9XQ==\" marker-end=\"url(#a3a-diagram-7_flowchart-v2-pointEnd)\"><\/path><path d=\"M691.375,34.25L695.542,34.25C699.708,34.25,708.042,34.25,715.708,34.25C723.375,34.25,730.375,34.25,733.875,34.25L737.375,34.25\" id=\"L_F_E_0\" class=\"edge-thickness-normal edge-pattern-solid edge-thickness-normal edge-pattern-solid flowchart-link\" style=\";\" data-edge=\"true\" data-et=\"edge\" data-id=\"L_F_E_0\" data-points=\"W3sieCI6NjkxLjM3NSwieSI6MzQuMjV9LHsieCI6NzE2LjM3NSwieSI6MzQuMjV9LHsieCI6NzQxLjM3NSwieSI6MzQuMjV9XQ==\" marker-end=\"url(#a3a-diagram-7_flowchart-v2-pointEnd)\"><\/path><path d=\"M119.422,95.5L123.589,95.5C127.755,95.5,136.089,95.5,146.75,98.485C157.411,101.471,170.4,107.442,176.895,110.427L183.389,113.413\" id=\"L_P_B_0\" class=\"edge-thickness-normal edge-pattern-solid edge-thickness-normal edge-pattern-solid flowchart-link\" style=\";\" data-edge=\"true\" data-et=\"edge\" data-id=\"L_P_B_0\" data-points=\"W3sieCI6MTE5LjQyMTg3NSwieSI6OTUuNX0seyJ4IjoxNDQuNDIxODc1LCJ5Ijo5NS41fSx7IngiOjE4Ny4wMjM0Mzc1LCJ5IjoxMTUuMDgzNTE0NzEzNTY0MzR9XQ==\" marker-end=\"url(#a3a-diagram-7_flowchart-v2-pointEnd)\"><\/path><path d=\"M187.023,142.002L179.923,142.794C172.823,143.585,158.622,145.167,145.523,142.149C132.424,139.131,120.426,131.513,114.427,127.703L108.427,123.894\" id=\"L_B_P_0\" class=\"edge-thickness-normal edge-pattern-solid edge-thickness-normal edge-pattern-solid flowchart-link\" style=\";\" data-edge=\"true\" data-et=\"edge\" data-id=\"L_B_P_0\" data-points=\"W3sieCI6MTg3LjAyMzQzNzUsInkiOjE0Mi4wMDI0ODEyODE1NjAxNn0seyJ4IjoxNDQuNDIxODc1LCJ5IjoxNDYuNzV9LHsieCI6MTA1LjA1MDY4NTk3NTYwOTc1LCJ5IjoxMjEuNzV9XQ==\" marker-end=\"url(#a3a-diagram-7_flowchart-v2-pointEnd)\"><\/path><\/g><g class=\"edgeLabels\"><g class=\"edgeLabel\"><g class=\"label\" data-id=\"L_P_S_0\" transform=\"translate(0, 0)\"><foreignObject width=\"0\" height=\"0\"><div xmlns=\"http:\/\/www.w3.org\/1999\/xhtml\" class=\"labelBkg\" style=\"display: table-cell; white-space: nowrap; line-height: 1.5; max-width: 200px; text-align: center;\"><span class=\"edgeLabel\"><\/span><\/div><\/foreignObject><\/g><\/g><g class=\"edgeLabel\"><g class=\"label\" data-id=\"L_S_L_0\" transform=\"translate(0, 0)\"><foreignObject width=\"0\" height=\"0\"><div xmlns=\"http:\/\/www.w3.org\/1999\/xhtml\" class=\"labelBkg\" style=\"display: table-cell; white-space: nowrap; line-height: 1.5; max-width: 200px; text-align: center;\"><span class=\"edgeLabel\"><\/span><\/div><\/foreignObject><\/g><\/g><g class=\"edgeLabel\"><g class=\"label\" data-id=\"L_L_F_0\" transform=\"translate(0, 0)\"><foreignObject width=\"0\" height=\"0\"><div xmlns=\"http:\/\/www.w3.org\/1999\/xhtml\" class=\"labelBkg\" style=\"display: table-cell; white-space: nowrap; line-height: 1.5; max-width: 200px; text-align: center;\"><span class=\"edgeLabel\"><\/span><\/div><\/foreignObject><\/g><\/g><g class=\"edgeLabel\"><g class=\"label\" data-id=\"L_F_E_0\" transform=\"translate(0, 0)\"><foreignObject width=\"0\" height=\"0\"><div xmlns=\"http:\/\/www.w3.org\/1999\/xhtml\" class=\"labelBkg\" style=\"display: table-cell; white-space: nowrap; line-height: 1.5; max-width: 200px; text-align: center;\"><span class=\"edgeLabel\"><\/span><\/div><\/foreignObject><\/g><\/g><g class=\"edgeLabel\"><g class=\"label\" data-id=\"L_P_B_0\" transform=\"translate(0, 0)\"><foreignObject width=\"0\" height=\"0\"><div xmlns=\"http:\/\/www.w3.org\/1999\/xhtml\" class=\"labelBkg\" style=\"display: table-cell; white-space: nowrap; line-height: 1.5; max-width: 200px; text-align: center;\"><span class=\"edgeLabel\"><\/span><\/div><\/foreignObject><\/g><\/g><g class=\"edgeLabel\"><g class=\"label\" data-id=\"L_B_P_0\" transform=\"translate(0, 0)\"><foreignObject width=\"0\" height=\"0\"><div xmlns=\"http:\/\/www.w3.org\/1999\/xhtml\" class=\"labelBkg\" style=\"display: table-cell; white-space: nowrap; line-height: 1.5; max-width: 200px; text-align: center;\"><span class=\"edgeLabel\"><\/span><\/div><\/foreignObject><\/g><\/g><\/g><g class=\"nodes\"><g class=\"node default\" id=\"flowchart-P-0\" transform=\"translate(63.7109375, 95.5)\"><rect class=\"basic label-container\" style=\"\" x=\"-55.7109375\" y=\"-26.25\" width=\"111.421875\" height=\"52.5\"><\/rect><g class=\"label\" style=\"\" transform=\"translate(-25.7109375, -11.25)\"><rect><\/rect><foreignObject width=\"51.421875\" height=\"22.5\"><div xmlns=\"http:\/\/www.w3.org\/1999\/xhtml\" style=\"display: table-cell; white-space: nowrap; line-height: 1.5; max-width: 200px; text-align: center;\"><span class=\"nodeLabel\"><p>Process<\/p><\/span><\/div><\/foreignObject><\/g><\/g><g class=\"node default\" id=\"flowchart-S-1\" transform=\"translate(234.15625, 34.25)\"><rect class=\"basic label-container\" style=\"\" x=\"-64.734375\" y=\"-26.25\" width=\"129.46875\" height=\"52.5\"><\/rect><g class=\"label\" style=\"\" transform=\"translate(-34.734375, -11.25)\"><rect><\/rect><foreignObject width=\"69.46875\" height=\"22.5\"><div xmlns=\"http:\/\/www.w3.org\/1999\/xhtml\" style=\"display: table-cell; white-space: nowrap; line-height: 1.5; max-width: 200px; text-align: center;\"><span class=\"nodeLabel\"><p>SIF sensor<\/p><\/span><\/div><\/foreignObject><\/g><\/g><g class=\"node default\" id=\"flowchart-L-2\" transform=\"translate(419.0546875, 34.25)\"><rect class=\"basic label-container\" style=\"\" x=\"-70.1640625\" y=\"-26.25\" width=\"140.328125\" height=\"52.5\"><\/rect><g class=\"label\" style=\"\" transform=\"translate(-40.1640625, -11.25)\"><rect><\/rect><foreignObject width=\"80.328125\" height=\"22.5\"><div xmlns=\"http:\/\/www.w3.org\/1999\/xhtml\" style=\"display: table-cell; white-space: nowrap; line-height: 1.5; max-width: 200px; text-align: center;\"><span class=\"nodeLabel\"><p>Logic solver<\/p><\/span><\/div><\/foreignObject><\/g><\/g><g class=\"node default\" id=\"flowchart-F-3\" transform=\"translate(615.296875, 34.25)\"><rect class=\"basic label-container\" style=\"\" x=\"-76.078125\" y=\"-26.25\" width=\"152.15625\" height=\"52.5\"><\/rect><g class=\"label\" style=\"\" transform=\"translate(-46.078125, -11.25)\"><rect><\/rect><foreignObject width=\"92.15625\" height=\"22.5\"><div xmlns=\"http:\/\/www.w3.org\/1999\/xhtml\" style=\"display: table-cell; white-space: nowrap; line-height: 1.5; max-width: 200px; text-align: center;\"><span class=\"nodeLabel\"><p>Final element<\/p><\/span><\/div><\/foreignObject><\/g><\/g><g class=\"node default\" id=\"flowchart-E-4\" transform=\"translate(804.9765625, 34.25)\"><rect class=\"basic label-container\" style=\"\" x=\"-63.6015625\" y=\"-26.25\" width=\"127.203125\" height=\"52.5\"><\/rect><g class=\"label\" style=\"\" transform=\"translate(-33.6015625, -11.25)\"><rect><\/rect><foreignObject width=\"67.203125\" height=\"22.5\"><div xmlns=\"http:\/\/www.w3.org\/1999\/xhtml\" style=\"display: table-cell; white-space: nowrap; line-height: 1.5; max-width: 200px; text-align: center;\"><span class=\"nodeLabel\"><p>Safe state<\/p><\/span><\/div><\/foreignObject><\/g><\/g><g class=\"node default\" id=\"flowchart-B-6\" transform=\"translate(234.15625, 136.75)\"><rect class=\"basic label-container\" style=\"\" x=\"-47.1328125\" y=\"-26.25\" width=\"94.265625\" height=\"52.5\"><\/rect><g class=\"label\" style=\"\" transform=\"translate(-17.1328125, -11.25)\"><rect><\/rect><foreignObject width=\"34.265625\" height=\"22.5\"><div xmlns=\"http:\/\/www.w3.org\/1999\/xhtml\" style=\"display: table-cell; white-space: nowrap; line-height: 1.5; max-width: 200px; text-align: center;\"><span class=\"nodeLabel\"><p>BPCS<\/p><\/span><\/div><\/foreignObject><\/g><\/g><\/g><\/g><\/g><\/svg><figcaption>Relationship between process, SIF, and Safety Instrumented System components<\/figcaption><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\">SIS Is Not the Same as BPCS<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">The BPCS, Basic Process Control System, performs basic process control: regulatory loops, normal sequences, supervision, recipes, operational permissives, and many functions required for production. The SIS acts as a protection layer for defined safety functions.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The architectural distinction matters because the same failure should not simultaneously invalidate normal control and the protection intended to respond to loss of that control. Sharing sensors, communications, power, software, engineering workstations, or infrastructure may introduce dependencies that need to be assessed. Absolute physical separation is not the only way to achieve independence, but any sharing must be technically justified and compatible with application requirements.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">How the Need for a SIS Is Identified<\/h2>\n\n\n\n<div class=\"wp-block-a3a-destaque\">\n<p class=\"wp-block-paragraph\">The need for a SIF should remain traceable from the risk scenario to the SRS. Engineering Consulting can organize studies, responsibilities, and criteria before the integrator is contracted.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/a3aengenharia.com.br\/servicos\/servicos-transversais\/consultoria-tecnica\/\">Learn about Technical Engineering Consulting<\/a><\/p>\n<\/div>\n\n\n\n<p class=\"wp-block-paragraph\">A SIS should not originate from selecting a manufacturer or preferring a \u201cSafety PLC.\u201d The need arises from the hazard-identification and risk-assessment process. HAZID can reveal hazards at early stages; HAZOP deepens the analysis of process deviations; LOPA can verify whether existing independent protection layers are sufficient and can semi-quantitatively determine the additional reduction required.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">When residual risk remains above the adopted criterion, a SIF may be specified to provide part of the required reduction. The decision should remain traceable from the risk scenario to the functional requirement.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">From Hazard Scenario to SIF<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">A technically sound sequence is:<\/p>\n\n\n\n<ol class=\"wp-block-list\"><li>identify the hazard and consequence;<\/li><li>define the scenario and its initiating events;<\/li><li>assess existing safeguards and independent protection layers;<\/li><li>compare mitigated risk with the tolerability criterion;<\/li><li>define the additional reduction required;<\/li><li>establish the appropriate safety function;<\/li><li>specify the required SIL when applicable;<\/li><li>record requirements in the SRS;<\/li><li>design, verify, test, and validate the function.<\/li><\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">Creating a SIF without this link can generate either under-protection or over-specification. An excessively complex function can increase unavailability, maintenance, spurious trips, and cost without a proportional risk benefit.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Architecture of a SIF<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The classic representation of a SIF has three subsystems: <strong>sensor<\/strong>, <strong>logic solver<\/strong>, and <strong>final element<\/strong>. This simplification is useful, but actual performance depends on auxiliary components and installation conditions that are often ignored in superficial analyses.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Sensor Subsystem<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">The sensor subsystem identifies the variable or condition that demands action. It may include pressure, temperature, level, or flow transmitters; gas and flame detectors; switches; positioners; digital inputs; signal conditioning; barriers; isolators; power supply; and field infrastructure.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The design needs to consider ranges, accuracy, response time, environment, diagnostics, test coverage, failure mode, calibration, installation, impulse lines, and the possibility of plugging, freezing, corrosion, or other conditions that make the measurement unrepresentative of the process.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Sensor redundancy can increase fault tolerance, but apparently independent sensors can suffer common-cause failures when they share a process tap, technology, location, power supply, cable route, or environmental vulnerability.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Logic Solver<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">The logic solver receives signals, executes the SIF logic, and commands actions. It may be a dedicated safety platform, an appropriate programmable electronic system, or another architecture accepted for the application. Its selection must be compatible with Functional Safety requirements, architecture, diagnostic capability, software lifecycle, and operating environment.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The logic must be controlled through a formal configuration process: approved requirements, versioning, access segregation, review, testing, backups, management of change, and traceability among the SRS, cause and effect, code, and test results.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Final Elements<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">The final element is often the dominant contributor to a SIF&#8217;s failure risk. Valves, actuators, solenoids, contactors, relays, dampers, trip systems, and other devices must actually drive the process to the safe state.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A valve may have a certified controller and still fail because of mechanical sticking, incorrect sizing, low air pressure, an unsuitable fail position, a degraded solenoid, an open bypass, or poor maintenance. Functional Safety cannot be reduced to the electronic certificate of a component.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Safe State and SIF Action<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The specification must define what \u201csafe state\u201d means for the analyzed scenario. In some cases it means closing a feed; in others, opening relief, stopping a compressor, de-energizing heating, starting ventilation, maintaining circulation, transferring material, or executing a coordinated sequence.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The safe state is not necessarily \u201ceverything off.\u201d An indiscriminate shutdown may create a worse consequence. The function must therefore derive from process analysis, transient conditions, and interfaces with other systems.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Process Safety Time<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">The SIF needs to respond within the time available before the hazardous condition develops. This includes detection, filtering, processing, communication, final-element actuation, and the physical dynamics of the process.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If the process reaches an intolerable condition within a few seconds, a chain with excessive delay is unsuitable even if its components are highly reliable. The timing requirement must be in the SRS and verified through testing.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Safety Requirements Specification \u2014 SRS<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The SRS is one of the central documents of the Functional Safety lifecycle. It transforms risk-analysis results into verifiable requirements for each SIF. It should not be confused with an I\/O list or a simplified cause-and-effect matrix.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A robust SRS normally establishes, as applicable:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>SIF identification and objective;<\/li><li>associated hazards and scenarios;<\/li><li>inputs and demand conditions;<\/li><li>actions and safe state;<\/li><li>required SIL;<\/li><li>response time;<\/li><li>logic and voting;<\/li><li>reset and rearming requirements;<\/li><li>bypass and override conditions;<\/li><li>behavior under detected faults;<\/li><li>independence requirements;<\/li><li>interfaces with the BPCS and other systems;<\/li><li>proof test and associated interval;<\/li><li>diagnostic and alarm requirements;<\/li><li>environment, power supply, and communications;<\/li><li>validation criteria;<\/li><li>operational and maintenance restrictions.<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">The SRS should allow another team to read the requirement and design, test, and verify the function without depending on informal memory from meetings.<\/p>\n\n\n\n<figure class=\"a3a-mermaid\"><svg id=\"a3a-diagram-8\" width=\"100%\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"flowchart\" style=\"max-width:min(266.15625px, 100%);height:auto;display:block;margin:0 auto\" viewBox=\"0 0 266.15625 786\" role=\"graphics-document document\" aria-roledescription=\"flowchart-v2\" aria-labelledby=\"chart-title-a3a-diagram-8\"><title id=\"chart-title-a3a-diagram-8\">Requirements flow from risk analysis to SIF validation<\/title><style>#a3a-diagram-8{font-family:Roboto,sans-serif;font-size:15px;fill:var(--a3a-diag-text, #0a0a0a);}@keyframes edge-animation-frame{from{stroke-dashoffset:0;}}@keyframes dash{to{stroke-dashoffset:0;}}#a3a-diagram-8 .edge-animation-slow{stroke-dasharray:9,5!important;stroke-dashoffset:900;animation:dash 50s linear infinite;stroke-linecap:round;}#a3a-diagram-8 .edge-animation-fast{stroke-dasharray:9,5!important;stroke-dashoffset:900;animation:dash 20s linear infinite;stroke-linecap:round;}#a3a-diagram-8 .error-icon{fill:var(--a3a-diag-canvas, #ffffff);}#a3a-diagram-8 .error-text{fill:#000000;stroke:#000000;}#a3a-diagram-8 .edge-thickness-normal{stroke-width:1px;}#a3a-diagram-8 .edge-thickness-thick{stroke-width:3.5px;}#a3a-diagram-8 .edge-pattern-solid{stroke-dasharray:0;}#a3a-diagram-8 .edge-thickness-invisible{stroke-width:0;fill:none;}#a3a-diagram-8 .edge-pattern-dashed{stroke-dasharray:3;}#a3a-diagram-8 .edge-pattern-dotted{stroke-dasharray:2;}#a3a-diagram-8 .marker{fill:var(--a3a-diag-stroke, #2e42a2);stroke:var(--a3a-diag-stroke, #2e42a2);}#a3a-diagram-8 .marker.cross{stroke:var(--a3a-diag-stroke, #2e42a2);}#a3a-diagram-8 svg{font-family:Roboto,sans-serif;font-size:15px;}#a3a-diagram-8 p{margin:0;}#a3a-diagram-8 .label{font-family:Roboto,sans-serif;color:var(--a3a-diag-text, #0a0a0a);}#a3a-diagram-8 .cluster-label text{fill:var(--a3a-diag-title, #0124af);}#a3a-diagram-8 .cluster-label span{color:var(--a3a-diag-title, #0124af);}#a3a-diagram-8 .cluster-label span p{background-color:transparent;}#a3a-diagram-8 .label text,#a3a-diagram-8 span{fill:var(--a3a-diag-text, #0a0a0a);color:var(--a3a-diag-text, #0a0a0a);}#a3a-diagram-8 .node rect,#a3a-diagram-8 .node circle,#a3a-diagram-8 .node ellipse,#a3a-diagram-8 .node polygon,#a3a-diagram-8 .node path{fill:var(--a3a-diag-fill, #eef2fd);stroke:var(--a3a-diag-stroke, #2e42a2);stroke-width:1px;}#a3a-diagram-8 .rough-node .label text,#a3a-diagram-8 .node .label text,#a3a-diagram-8 .image-shape .label,#a3a-diagram-8 .icon-shape .label{text-anchor:middle;}#a3a-diagram-8 .node .katex path{fill:#000;stroke:#000;stroke-width:1px;}#a3a-diagram-8 .rough-node .label,#a3a-diagram-8 .node .label,#a3a-diagram-8 .image-shape .label,#a3a-diagram-8 .icon-shape .label{text-align:center;}#a3a-diagram-8 .node.clickable{cursor:pointer;}#a3a-diagram-8 .root .anchor path{fill:var(--a3a-diag-stroke, #2e42a2)!important;stroke-width:0;stroke:var(--a3a-diag-stroke, #2e42a2);}#a3a-diagram-8 .arrowheadPath{fill:var(--a3a-diag-stroke, #0b0b0b);}#a3a-diagram-8 .edgePath .path{stroke:var(--a3a-diag-stroke, #2e42a2);stroke-width:2.0px;}#a3a-diagram-8 .flowchart-link{stroke:var(--a3a-diag-stroke, #2e42a2);fill:none;}#a3a-diagram-8 .edgeLabel{background-color:var(--a3a-diag-canvas, #ffffff);text-align:center;}#a3a-diagram-8 .edgeLabel p{background-color:var(--a3a-diag-canvas, #ffffff);}#a3a-diagram-8 .edgeLabel rect{opacity:0.5;background-color:var(--a3a-diag-canvas, #ffffff);fill:var(--a3a-diag-canvas, #ffffff);}#a3a-diagram-8 .labelBkg{background-color:rgba(255, 255, 255, 0.5);}#a3a-diagram-8 .cluster rect{fill:var(--a3a-diag-surface, #f8f8f8);stroke:var(--a3a-diag-border, #e2e8f0);stroke-width:1px;}#a3a-diagram-8 .cluster text{fill:var(--a3a-diag-title, #0124af);}#a3a-diagram-8 .cluster span{color:var(--a3a-diag-title, #0124af);}#a3a-diagram-8 div.mermaidTooltip{position:absolute;text-align:center;max-width:200px;padding:2px;font-family:Roboto,sans-serif;font-size:12px;background:var(--a3a-diag-canvas, #ffffff);border:1px solid hsl(0, 0%, 90%);border-radius:2px;pointer-events:none;z-index:100;}#a3a-diagram-8 .flowchartTitleText{text-anchor:middle;font-size:18px;fill:var(--a3a-diag-text, #0a0a0a);}#a3a-diagram-8 rect.text{fill:none;stroke-width:0;}#a3a-diagram-8 .icon-shape,#a3a-diagram-8 .image-shape{background-color:var(--a3a-diag-canvas, #ffffff);text-align:center;}#a3a-diagram-8 .icon-shape p,#a3a-diagram-8 .image-shape p{background-color:var(--a3a-diag-canvas, #ffffff);padding:2px;}#a3a-diagram-8 .icon-shape rect,#a3a-diagram-8 .image-shape rect{opacity:0.5;background-color:var(--a3a-diag-canvas, #ffffff);fill:var(--a3a-diag-canvas, #ffffff);}#a3a-diagram-8 .label-icon{display:inline-block;height:1em;overflow:visible;vertical-align:-0.125em;}#a3a-diagram-8 .node .label-icon path{fill:currentColor;stroke:revert;stroke-width:revert;}#a3a-diagram-8 :root{--mermaid-font-family:Roboto,sans-serif;}<\/style><g><marker id=\"a3a-diagram-8_flowchart-v2-pointEnd\" class=\"marker flowchart-v2\" viewBox=\"0 0 10 10\" refX=\"5\" refY=\"5\" markerUnits=\"userSpaceOnUse\" markerWidth=\"8\" markerHeight=\"8\" orient=\"auto\"><path d=\"M 0 0 L 10 5 L 0 10 z\" class=\"arrowMarkerPath\" style=\"stroke-width: 1; stroke-dasharray: 1, 0;\"><\/path><\/marker><marker id=\"a3a-diagram-8_flowchart-v2-pointStart\" class=\"marker flowchart-v2\" viewBox=\"0 0 10 10\" refX=\"4.5\" refY=\"5\" markerUnits=\"userSpaceOnUse\" markerWidth=\"8\" markerHeight=\"8\" orient=\"auto\"><path d=\"M 0 5 L 10 10 L 10 0 z\" class=\"arrowMarkerPath\" style=\"stroke-width: 1; stroke-dasharray: 1, 0;\"><\/path><\/marker><marker id=\"a3a-diagram-8_flowchart-v2-circleEnd\" class=\"marker flowchart-v2\" viewBox=\"0 0 10 10\" refX=\"11\" refY=\"5\" markerUnits=\"userSpaceOnUse\" markerWidth=\"11\" markerHeight=\"11\" orient=\"auto\"><circle cx=\"5\" cy=\"5\" r=\"5\" class=\"arrowMarkerPath\" style=\"stroke-width: 1; stroke-dasharray: 1, 0;\"><\/circle><\/marker><marker id=\"a3a-diagram-8_flowchart-v2-circleStart\" class=\"marker flowchart-v2\" viewBox=\"0 0 10 10\" refX=\"-1\" refY=\"5\" markerUnits=\"userSpaceOnUse\" markerWidth=\"11\" markerHeight=\"11\" orient=\"auto\"><circle cx=\"5\" cy=\"5\" r=\"5\" class=\"arrowMarkerPath\" style=\"stroke-width: 1; stroke-dasharray: 1, 0;\"><\/circle><\/marker><marker id=\"a3a-diagram-8_flowchart-v2-crossEnd\" class=\"marker cross flowchart-v2\" viewBox=\"0 0 11 11\" refX=\"12\" refY=\"5.2\" markerUnits=\"userSpaceOnUse\" markerWidth=\"11\" markerHeight=\"11\" orient=\"auto\"><path d=\"M 1,1 l 9,9 M 10,1 l -9,9\" class=\"arrowMarkerPath\" style=\"stroke-width: 2; stroke-dasharray: 1, 0;\"><\/path><\/marker><marker id=\"a3a-diagram-8_flowchart-v2-crossStart\" class=\"marker cross flowchart-v2\" viewBox=\"0 0 11 11\" refX=\"-1\" refY=\"5.2\" markerUnits=\"userSpaceOnUse\" markerWidth=\"11\" markerHeight=\"11\" orient=\"auto\"><path d=\"M 1,1 l 9,9 M 10,1 l -9,9\" class=\"arrowMarkerPath\" style=\"stroke-width: 2; stroke-dasharray: 1, 0;\"><\/path><\/marker><g class=\"root\"><g class=\"clusters\"><\/g><g class=\"edgePaths\"><path d=\"M133.078,60.5L133.078,64.667C133.078,68.833,133.078,77.167,133.078,84.833C133.078,92.5,133.078,99.5,133.078,103L133.078,106.5\" id=\"L_H_L_0\" class=\"edge-thickness-normal edge-pattern-solid edge-thickness-normal edge-pattern-solid flowchart-link\" style=\";\" data-edge=\"true\" data-et=\"edge\" data-id=\"L_H_L_0\" data-points=\"W3sieCI6MTMzLjA3ODEyNSwieSI6NjAuNX0seyJ4IjoxMzMuMDc4MTI1LCJ5Ijo4NS41fSx7IngiOjEzMy4wNzgxMjUsInkiOjExMC41fV0=\" marker-end=\"url(#a3a-diagram-8_flowchart-v2-pointEnd)\"><\/path><path d=\"M133.078,163L133.078,167.167C133.078,171.333,133.078,179.667,133.078,187.333C133.078,195,133.078,202,133.078,205.5L133.078,209\" id=\"L_L_R_0\" class=\"edge-thickness-normal edge-pattern-solid edge-thickness-normal edge-pattern-solid flowchart-link\" style=\";\" data-edge=\"true\" data-et=\"edge\" data-id=\"L_L_R_0\" data-points=\"W3sieCI6MTMzLjA3ODEyNSwieSI6MTYzfSx7IngiOjEzMy4wNzgxMjUsInkiOjE4OH0seyJ4IjoxMzMuMDc4MTI1LCJ5IjoyMTN9XQ==\" marker-end=\"url(#a3a-diagram-8_flowchart-v2-pointEnd)\"><\/path><path d=\"M133.078,265.5L133.078,269.667C133.078,273.833,133.078,282.167,133.078,289.833C133.078,297.5,133.078,304.5,133.078,308L133.078,311.5\" id=\"L_R_S_0\" class=\"edge-thickness-normal edge-pattern-solid edge-thickness-normal edge-pattern-solid flowchart-link\" style=\";\" data-edge=\"true\" data-et=\"edge\" data-id=\"L_R_S_0\" data-points=\"W3sieCI6MTMzLjA3ODEyNSwieSI6MjY1LjV9LHsieCI6MTMzLjA3ODEyNSwieSI6MjkwLjV9LHsieCI6MTMzLjA3ODEyNSwieSI6MzE1LjV9XQ==\" marker-end=\"url(#a3a-diagram-8_flowchart-v2-pointEnd)\"><\/path><path d=\"M133.078,368L133.078,372.167C133.078,376.333,133.078,384.667,133.078,392.333C133.078,400,133.078,407,133.078,410.5L133.078,414\" id=\"L_S_D_0\" class=\"edge-thickness-normal edge-pattern-solid edge-thickness-normal edge-pattern-solid flowchart-link\" style=\";\" data-edge=\"true\" data-et=\"edge\" data-id=\"L_S_D_0\" data-points=\"W3sieCI6MTMzLjA3ODEyNSwieSI6MzY4fSx7IngiOjEzMy4wNzgxMjUsInkiOjM5M30seyJ4IjoxMzMuMDc4MTI1LCJ5Ijo0MTh9XQ==\" marker-end=\"url(#a3a-diagram-8_flowchart-v2-pointEnd)\"><\/path><path d=\"M133.078,470.5L133.078,474.667C133.078,478.833,133.078,487.167,133.078,494.833C133.078,502.5,133.078,509.5,133.078,513L133.078,516.5\" id=\"L_D_V_0\" class=\"edge-thickness-normal edge-pattern-solid edge-thickness-normal edge-pattern-solid flowchart-link\" style=\";\" data-edge=\"true\" data-et=\"edge\" data-id=\"L_D_V_0\" data-points=\"W3sieCI6MTMzLjA3ODEyNSwieSI6NDcwLjV9LHsieCI6MTMzLjA3ODEyNSwieSI6NDk1LjV9LHsieCI6MTMzLjA3ODEyNSwieSI6NTIwLjV9XQ==\" marker-end=\"url(#a3a-diagram-8_flowchart-v2-pointEnd)\"><\/path><path d=\"M133.078,573L133.078,577.167C133.078,581.333,133.078,589.667,133.078,597.333C133.078,605,133.078,612,133.078,615.5L133.078,619\" id=\"L_V_T_0\" class=\"edge-thickness-normal edge-pattern-solid edge-thickness-normal edge-pattern-solid flowchart-link\" style=\";\" data-edge=\"true\" data-et=\"edge\" data-id=\"L_V_T_0\" data-points=\"W3sieCI6MTMzLjA3ODEyNSwieSI6NTczfSx7IngiOjEzMy4wNzgxMjUsInkiOjU5OH0seyJ4IjoxMzMuMDc4MTI1LCJ5Ijo2MjN9XQ==\" marker-end=\"url(#a3a-diagram-8_flowchart-v2-pointEnd)\"><\/path><path d=\"M133.078,675.5L133.078,679.667C133.078,683.833,133.078,692.167,133.078,699.833C133.078,707.5,133.078,714.5,133.078,718L133.078,721.5\" id=\"L_T_O_0\" class=\"edge-thickness-normal edge-pattern-solid edge-thickness-normal edge-pattern-solid flowchart-link\" style=\";\" data-edge=\"true\" data-et=\"edge\" data-id=\"L_T_O_0\" data-points=\"W3sieCI6MTMzLjA3ODEyNSwieSI6Njc1LjV9LHsieCI6MTMzLjA3ODEyNSwieSI6NzAwLjV9LHsieCI6MTMzLjA3ODEyNSwieSI6NzI1LjV9XQ==\" marker-end=\"url(#a3a-diagram-8_flowchart-v2-pointEnd)\"><\/path><\/g><g class=\"edgeLabels\"><g class=\"edgeLabel\"><g class=\"label\" data-id=\"L_H_L_0\" transform=\"translate(0, 0)\"><foreignObject width=\"0\" height=\"0\"><div xmlns=\"http:\/\/www.w3.org\/1999\/xhtml\" class=\"labelBkg\" style=\"display: table-cell; white-space: nowrap; line-height: 1.5; max-width: 200px; text-align: center;\"><span class=\"edgeLabel\"><\/span><\/div><\/foreignObject><\/g><\/g><g class=\"edgeLabel\"><g class=\"label\" data-id=\"L_L_R_0\" transform=\"translate(0, 0)\"><foreignObject width=\"0\" height=\"0\"><div xmlns=\"http:\/\/www.w3.org\/1999\/xhtml\" class=\"labelBkg\" style=\"display: table-cell; white-space: nowrap; line-height: 1.5; max-width: 200px; text-align: center;\"><span class=\"edgeLabel\"><\/span><\/div><\/foreignObject><\/g><\/g><g class=\"edgeLabel\"><g class=\"label\" data-id=\"L_R_S_0\" transform=\"translate(0, 0)\"><foreignObject width=\"0\" height=\"0\"><div xmlns=\"http:\/\/www.w3.org\/1999\/xhtml\" class=\"labelBkg\" style=\"display: table-cell; white-space: nowrap; line-height: 1.5; max-width: 200px; text-align: center;\"><span class=\"edgeLabel\"><\/span><\/div><\/foreignObject><\/g><\/g><g class=\"edgeLabel\"><g class=\"label\" data-id=\"L_S_D_0\" transform=\"translate(0, 0)\"><foreignObject width=\"0\" height=\"0\"><div xmlns=\"http:\/\/www.w3.org\/1999\/xhtml\" class=\"labelBkg\" style=\"display: table-cell; white-space: nowrap; line-height: 1.5; max-width: 200px; text-align: center;\"><span class=\"edgeLabel\"><\/span><\/div><\/foreignObject><\/g><\/g><g class=\"edgeLabel\"><g class=\"label\" data-id=\"L_D_V_0\" transform=\"translate(0, 0)\"><foreignObject width=\"0\" height=\"0\"><div xmlns=\"http:\/\/www.w3.org\/1999\/xhtml\" class=\"labelBkg\" style=\"display: table-cell; white-space: nowrap; line-height: 1.5; max-width: 200px; text-align: center;\"><span class=\"edgeLabel\"><\/span><\/div><\/foreignObject><\/g><\/g><g class=\"edgeLabel\"><g class=\"label\" data-id=\"L_V_T_0\" transform=\"translate(0, 0)\"><foreignObject width=\"0\" height=\"0\"><div xmlns=\"http:\/\/www.w3.org\/1999\/xhtml\" class=\"labelBkg\" style=\"display: table-cell; white-space: nowrap; line-height: 1.5; max-width: 200px; text-align: center;\"><span class=\"edgeLabel\"><\/span><\/div><\/foreignObject><\/g><\/g><g class=\"edgeLabel\"><g class=\"label\" data-id=\"L_T_O_0\" transform=\"translate(0, 0)\"><foreignObject width=\"0\" height=\"0\"><div xmlns=\"http:\/\/www.w3.org\/1999\/xhtml\" class=\"labelBkg\" style=\"display: table-cell; white-space: nowrap; line-height: 1.5; max-width: 200px; text-align: center;\"><span class=\"edgeLabel\"><\/span><\/div><\/foreignObject><\/g><\/g><\/g><g class=\"nodes\"><g class=\"node default\" id=\"flowchart-H-0\" transform=\"translate(133.078125, 34.25)\"><rect class=\"basic label-container\" style=\"\" x=\"-89.96875\" y=\"-26.25\" width=\"179.9375\" height=\"52.5\"><\/rect><g class=\"label\" style=\"\" transform=\"translate(-59.96875, -11.25)\"><rect><\/rect><foreignObject width=\"119.9375\" height=\"22.5\"><div xmlns=\"http:\/\/www.w3.org\/1999\/xhtml\" style=\"display: table-cell; white-space: nowrap; line-height: 1.5; max-width: 200px; text-align: center;\"><span class=\"nodeLabel\"><p>HAZID and HAZOP<\/p><\/span><\/div><\/foreignObject><\/g><\/g><g class=\"node default\" id=\"flowchart-L-1\" transform=\"translate(133.078125, 136.75)\"><rect class=\"basic label-container\" style=\"\" x=\"-120.4453125\" y=\"-26.25\" width=\"240.890625\" height=\"52.5\"><\/rect><g class=\"label\" style=\"\" transform=\"translate(-90.4453125, -11.25)\"><rect><\/rect><foreignObject width=\"180.890625\" height=\"22.5\"><div xmlns=\"http:\/\/www.w3.org\/1999\/xhtml\" style=\"display: table-cell; white-space: nowrap; line-height: 1.5; max-width: 200px; text-align: center;\"><span class=\"nodeLabel\"><p>LOPA or allocation method<\/p><\/span><\/div><\/foreignObject><\/g><\/g><g class=\"node default\" id=\"flowchart-R-2\" transform=\"translate(133.078125, 239.25)\"><rect class=\"basic label-container\" style=\"\" x=\"-109.84375\" y=\"-26.25\" width=\"219.6875\" height=\"52.5\"><\/rect><g class=\"label\" style=\"\" transform=\"translate(-79.84375, -11.25)\"><rect><\/rect><foreignObject width=\"159.6875\" height=\"22.5\"><div xmlns=\"http:\/\/www.w3.org\/1999\/xhtml\" style=\"display: table-cell; white-space: nowrap; line-height: 1.5; max-width: 200px; text-align: center;\"><span class=\"nodeLabel\"><p>Required risk reduction<\/p><\/span><\/div><\/foreignObject><\/g><\/g><g class=\"node default\" id=\"flowchart-S-3\" transform=\"translate(133.078125, 341.75)\"><rect class=\"basic label-container\" style=\"\" x=\"-54.6328125\" y=\"-26.25\" width=\"109.265625\" height=\"52.5\"><\/rect><g class=\"label\" style=\"\" transform=\"translate(-24.6328125, -11.25)\"><rect><\/rect><foreignObject width=\"49.265625\" height=\"22.5\"><div xmlns=\"http:\/\/www.w3.org\/1999\/xhtml\" style=\"display: table-cell; white-space: nowrap; line-height: 1.5; max-width: 200px; text-align: center;\"><span class=\"nodeLabel\"><p>SIF SRS<\/p><\/span><\/div><\/foreignObject><\/g><\/g><g class=\"node default\" id=\"flowchart-D-4\" transform=\"translate(133.078125, 444.25)\"><rect class=\"basic label-container\" style=\"\" x=\"-124.2578125\" y=\"-26.25\" width=\"248.515625\" height=\"52.5\"><\/rect><g class=\"label\" style=\"\" transform=\"translate(-94.2578125, -11.25)\"><rect><\/rect><foreignObject width=\"188.515625\" height=\"22.5\"><div xmlns=\"http:\/\/www.w3.org\/1999\/xhtml\" style=\"display: table-cell; white-space: nowrap; line-height: 1.5; max-width: 200px; text-align: center;\"><span class=\"nodeLabel\"><p>Design and implementation<\/p><\/span><\/div><\/foreignObject><\/g><\/g><g class=\"node default\" id=\"flowchart-V-5\" transform=\"translate(133.078125, 546.75)\"><rect class=\"basic label-container\" style=\"\" x=\"-68.5859375\" y=\"-26.25\" width=\"137.171875\" height=\"52.5\"><\/rect><g class=\"label\" style=\"\" transform=\"translate(-38.5859375, -11.25)\"><rect><\/rect><foreignObject width=\"77.171875\" height=\"22.5\"><div xmlns=\"http:\/\/www.w3.org\/1999\/xhtml\" style=\"display: table-cell; white-space: nowrap; line-height: 1.5; max-width: 200px; text-align: center;\"><span class=\"nodeLabel\"><p>Verification<\/p><\/span><\/div><\/foreignObject><\/g><\/g><g class=\"node default\" id=\"flowchart-T-6\" transform=\"translate(133.078125, 649.25)\"><rect class=\"basic label-container\" style=\"\" x=\"-64.3515625\" y=\"-26.25\" width=\"128.703125\" height=\"52.5\"><\/rect><g class=\"label\" style=\"\" transform=\"translate(-34.3515625, -11.25)\"><rect><\/rect><foreignObject width=\"68.703125\" height=\"22.5\"><div xmlns=\"http:\/\/www.w3.org\/1999\/xhtml\" style=\"display: table-cell; white-space: nowrap; line-height: 1.5; max-width: 200px; text-align: center;\"><span class=\"nodeLabel\"><p>Validation<\/p><\/span><\/div><\/foreignObject><\/g><\/g><g class=\"node default\" id=\"flowchart-O-7\" transform=\"translate(133.078125, 751.75)\"><rect class=\"basic label-container\" style=\"\" x=\"-125.078125\" y=\"-26.25\" width=\"250.15625\" height=\"52.5\"><\/rect><g class=\"label\" style=\"\" transform=\"translate(-95.078125, -11.25)\"><rect><\/rect><foreignObject width=\"190.15625\" height=\"22.5\"><div xmlns=\"http:\/\/www.w3.org\/1999\/xhtml\" style=\"display: table-cell; white-space: nowrap; line-height: 1.5; max-width: 200px; text-align: center;\"><span class=\"nodeLabel\"><p>Operation and maintenance<\/p><\/span><\/div><\/foreignObject><\/g><\/g><\/g><\/g><\/g><\/svg><figcaption>Requirements flow from risk analysis to SIF validation<\/figcaption><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">Cause-and-Effect Matrix in a SIS<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The cause-and-effect matrix is useful for summarizing relationships among events, conditions, and actions. In industrial projects, it improves communication among process, automation, instrumentation, electrical, operations, and the integrator.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">However, the matrix does not necessarily contain every functional requirement. It may omit response time, voting criteria, fault behavior, test intervals, bypasses, priorities, reset, independence requirements, or degraded-operation conditions. It should therefore be treated as part of the documentation, not as an automatic replacement for the SRS.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Interlock, Permissive, and SIF<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Not every interlock is a SIF. Many interlock logics exist for equipment protection, operating sequence, quality, availability, or prevention of incorrect operation. For a function to be treated as a SIF, it must be linked to a Functional Safety requirement within the risk-assessment process.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Likewise, a permissive that prevents startup outside an allowed condition may be important, but it does not automatically receive risk-reduction credit. Independence, reliability, specification, testing, and governance must be compatible with the role assigned to the function.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">SIL and SIF Performance<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">SIL specifies performance ranges for safety-related functions. In low-demand mode, analysis frequently uses PFDavg; in high-demand or continuous mode, other parameters apply. The required value derives from the necessary risk reduction, not from the maximum SIL a manufacturer can offer.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">SIF verification considers the entire chain. Failure rates, diagnostic coverage, proof-test interval, test coverage, architecture, common-cause failure, repair time, architectural constraints, and systematic capability influence the result.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">A Safety PLC Does Not Define the SIL by Itself<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">A controller capable of use in SIL 3 applications does not automatically make a function SIL 3. Sensors and final elements may not meet the required performance; test intervals may be incompatible; common-cause failure may invalidate an assumption; the SRS may be incomplete; or the application software may not have been properly developed and validated.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This is one reason why procurement based only on a product certificate is insufficient.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Independence Between SIS and BPCS<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Independence is an engineering property, not merely separation into different cabinets. It is necessary to examine whether the same cause can compromise the system that initiates or controls the scenario and the layer intended to protect against it.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Sources of dependency include:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>shared sensors or process taps;<\/li><li>common power supply;<\/li><li>common network or communications infrastructure;<\/li><li>shared engineering workstations;<\/li><li>common credentials and administration;<\/li><li>common software or libraries;<\/li><li>cable routes exposed to the same event;<\/li><li>common environmental conditions;<\/li><li>maintenance that simultaneously makes the BPCS and SIS unavailable.<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">The assessment must consider the specific scenario. Sharing may be acceptable in some architectures and unsuitable in others.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Safe Failure and Dangerous Failure<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">A failure that brings the process to a safe condition may reduce availability and cause a spurious trip, but it does not have the same meaning as an undetected dangerous failure in which the SIF remains apparently available and fails when demanded.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The design seeks to control both effects: maintain a low probability of dangerous failure while avoiding excessive unavailability. An architecture that trips continuously can become technically unsustainable because it encourages bypasses and erodes operator confidence.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Spurious Trips and Availability<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Functional Safety should not be optimized in isolation from operability. Frequent spurious trips can cause production losses, transients, equipment wear, and adverse operating behavior.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Redundancy, voting, and diagnostics can balance safety and availability, but each choice creates new dependencies and testing requirements. Architecture should be based on risk, reliability data, process conditions, and operating philosophy.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Proof Test and Periodic Testing<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Hidden dangerous failures need to be revealed by testing. A <em>proof test<\/em> is designed to detect failures that automatic diagnostics do not identify. The interval between tests directly influences the probability of failure on demand in many architectures.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A proof-test plan should specify:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>the function and components tested;<\/li><li>initial condition;<\/li><li>test sequence;<\/li><li>expected coverage;<\/li><li>acceptance criteria;<\/li><li>required instruments;<\/li><li>restoration after testing;<\/li><li>records and evidence;<\/li><li>treatment of failures found.<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Testing only whether \u201cthe PLC received the signal\u201d may leave transmitter, valve, solenoid, impulse-line, actuator, or interface-logic failures unverified.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Partial Stroke Test<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">For critical valves, a <em>partial stroke test<\/em> can reveal some failure modes without performing a full closure. It does not automatically replace the complete proof test. The PFD reduction credit depends on actual coverage, frequency, architecture, and the data used in verification.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The testing policy should avoid converting a diagnostic tool into unsupported \u201cmathematical credit.\u201d<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Bypass, Override, and Maintenance<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Real systems require maintenance, calibration, and testing. Bypasses may therefore be necessary. Risk arises when a bypass ceases to be a controlled temporary condition and becomes a normalized operating state.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Governance should establish authorization, justification, maximum time, compensating measures, alarms, records, risk review, and bypass removal. The control room should clearly know which functions are degraded.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">SIS Alarm Philosophy<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Diagnostic, failure, bypass, loss-of-power, voting-discrepancy, and other SIS alarms need to be rationalized. The objective is not simply to send every diagnostic bit to the operator.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Each alarm should have operational meaning, an appropriate priority, a defined response, and documentation. Critical alarms lost in an avalanche of messages compromise intervention capability.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Interfaces with SCADA, HMI, and Historian<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">SIS supervision may provide the status of SIFs, trips, bypasses, faults, and diagnostics, but integration must preserve the independence and security of the function. The path used to view information should not create an uncontrolled means of changing logic or setpoints.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Event histories, sequence-of-events records, and time synchronization assist investigation of trips and incidents. Temporal quality is particularly important for distinguishing the initiating cause from subsequent effects.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Cybersecurity Applied to SIS<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Modern instrumented systems use digital technologies, engineering workstations, networks, and interfaces that can introduce cyber risks. Functional Safety and cybersecurity are not substitute disciplines: a threat can become a cause of failure of the safety function and therefore needs to be considered in the lifecycle.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Relevant controls include segmentation, access management, hardening, media control, validated backups, patch management, monitoring, protection of engineering workstations, and change governance. The strategy needs to respect availability and process-safety requirements.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Application Engineering and Software<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Application software is part of the systematic performance of the function. Logic failures can arise from ambiguous requirements, incorrect implementation, unit conversion, timers, sequences, reset, degraded states, or improper handling of invalid signals.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Good practices include requirements traceability, programming standards, review, version control, unit testing where applicable, simulation, FAT, management of change, and segregation between development and production environments.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">FAT for a SIS<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The Factory Acceptance Test should verify the system before field installation, within the limits of the factory environment. A mature FAT tests logic, simulated I\/O, voting, failures, diagnostics, alarms, reset, bypasses, timing, interfaces, and scenarios defined in the SRS.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">FAT alone does not prove that the installed SIF works in the actual process. Sensors, final elements, cabling, utilities, and field conditions may not be represented.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">SAT and Field Testing<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The Site Acceptance Test verifies installation and integration at the site. Depending on scope, it should confirm identification, cables, signals, power, networks, loaded logic, interfaces, final-element actuation, and field conditions.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">It is essential to preserve the distinction between SAT and Functional Safety validation. A SAT may verify installation items without fully demonstrating that every SIF meets all SRS requirements.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Functional Safety Validation<\/h2>\n\n\n\n<div class=\"wp-block-a3a-destaque\">\n<p class=\"wp-block-paragraph\">FAT, SAT, validation, and startup need documented criteria and evidence. Independent commissioning reduces the risk of accepting a system merely because the hardware has been installed and energized.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/a3aengenharia.com.br\/servicos\/implementacao\/comissionamento\/\">Learn about Engineering Commissioning<\/a><\/p>\n<\/div>\n\n\n\n<p class=\"wp-block-paragraph\">Validation demonstrates that the installed and configured SIFs meet the specified requirements. It needs to be planned, performed using approved procedures, and documented with results, deviations, and evidence.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Testing should start from the requirements: demand condition, sensors, logic, voting, final action, response time, reset, diagnostics, bypasses, and behavior under faults. Incomplete validation is both a documentary and technical risk because a function may \u201ctrip\u201d and still not fully comply with its specification.<\/p>\n\n\n\n<figure class=\"a3a-mermaid\"><svg id=\"a3a-diagram-6\" width=\"100%\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"flowchart\" style=\"max-width:min(1432.703125px, 100%);height:auto;display:block;margin:0 auto\" viewBox=\"0 0 1432.703125 103.5\" role=\"graphics-document document\" aria-roledescription=\"flowchart-v2\" aria-labelledby=\"chart-title-a3a-diagram-6\"><title id=\"chart-title-a3a-diagram-6\">Test and evidence sequence from engineering through SIS operation<\/title><style>#a3a-diagram-6{font-family:Roboto,sans-serif;font-size:15px;fill:var(--a3a-diag-text, #0a0a0a);}@keyframes edge-animation-frame{from{stroke-dashoffset:0;}}@keyframes dash{to{stroke-dashoffset:0;}}#a3a-diagram-6 .edge-animation-slow{stroke-dasharray:9,5!important;stroke-dashoffset:900;animation:dash 50s linear infinite;stroke-linecap:round;}#a3a-diagram-6 .edge-animation-fast{stroke-dasharray:9,5!important;stroke-dashoffset:900;animation:dash 20s linear infinite;stroke-linecap:round;}#a3a-diagram-6 .error-icon{fill:var(--a3a-diag-canvas, #ffffff);}#a3a-diagram-6 .error-text{fill:#000000;stroke:#000000;}#a3a-diagram-6 .edge-thickness-normal{stroke-width:1px;}#a3a-diagram-6 .edge-thickness-thick{stroke-width:3.5px;}#a3a-diagram-6 .edge-pattern-solid{stroke-dasharray:0;}#a3a-diagram-6 .edge-thickness-invisible{stroke-width:0;fill:none;}#a3a-diagram-6 .edge-pattern-dashed{stroke-dasharray:3;}#a3a-diagram-6 .edge-pattern-dotted{stroke-dasharray:2;}#a3a-diagram-6 .marker{fill:var(--a3a-diag-stroke, #2e42a2);stroke:var(--a3a-diag-stroke, #2e42a2);}#a3a-diagram-6 .marker.cross{stroke:var(--a3a-diag-stroke, #2e42a2);}#a3a-diagram-6 svg{font-family:Roboto,sans-serif;font-size:15px;}#a3a-diagram-6 p{margin:0;}#a3a-diagram-6 .label{font-family:Roboto,sans-serif;color:var(--a3a-diag-text, #0a0a0a);}#a3a-diagram-6 .cluster-label text{fill:var(--a3a-diag-title, #0124af);}#a3a-diagram-6 .cluster-label span{color:var(--a3a-diag-title, #0124af);}#a3a-diagram-6 .cluster-label span p{background-color:transparent;}#a3a-diagram-6 .label text,#a3a-diagram-6 span{fill:var(--a3a-diag-text, #0a0a0a);color:var(--a3a-diag-text, #0a0a0a);}#a3a-diagram-6 .node rect,#a3a-diagram-6 .node circle,#a3a-diagram-6 .node ellipse,#a3a-diagram-6 .node polygon,#a3a-diagram-6 .node path{fill:var(--a3a-diag-fill, #eef2fd);stroke:var(--a3a-diag-stroke, #2e42a2);stroke-width:1px;}#a3a-diagram-6 .rough-node .label text,#a3a-diagram-6 .node .label text,#a3a-diagram-6 .image-shape .label,#a3a-diagram-6 .icon-shape .label{text-anchor:middle;}#a3a-diagram-6 .node .katex path{fill:#000;stroke:#000;stroke-width:1px;}#a3a-diagram-6 .rough-node .label,#a3a-diagram-6 .node .label,#a3a-diagram-6 .image-shape .label,#a3a-diagram-6 .icon-shape .label{text-align:center;}#a3a-diagram-6 .node.clickable{cursor:pointer;}#a3a-diagram-6 .root .anchor path{fill:var(--a3a-diag-stroke, #2e42a2)!important;stroke-width:0;stroke:var(--a3a-diag-stroke, #2e42a2);}#a3a-diagram-6 .arrowheadPath{fill:var(--a3a-diag-stroke, #0b0b0b);}#a3a-diagram-6 .edgePath .path{stroke:var(--a3a-diag-stroke, #2e42a2);stroke-width:2.0px;}#a3a-diagram-6 .flowchart-link{stroke:var(--a3a-diag-stroke, #2e42a2);fill:none;}#a3a-diagram-6 .edgeLabel{background-color:var(--a3a-diag-canvas, #ffffff);text-align:center;}#a3a-diagram-6 .edgeLabel p{background-color:var(--a3a-diag-canvas, #ffffff);}#a3a-diagram-6 .edgeLabel rect{opacity:0.5;background-color:var(--a3a-diag-canvas, #ffffff);fill:var(--a3a-diag-canvas, #ffffff);}#a3a-diagram-6 .labelBkg{background-color:rgba(255, 255, 255, 0.5);}#a3a-diagram-6 .cluster rect{fill:var(--a3a-diag-surface, #f8f8f8);stroke:var(--a3a-diag-border, #e2e8f0);stroke-width:1px;}#a3a-diagram-6 .cluster text{fill:var(--a3a-diag-title, #0124af);}#a3a-diagram-6 .cluster span{color:var(--a3a-diag-title, #0124af);}#a3a-diagram-6 div.mermaidTooltip{position:absolute;text-align:center;max-width:200px;padding:2px;font-family:Roboto,sans-serif;font-size:12px;background:var(--a3a-diag-canvas, #ffffff);border:1px solid hsl(0, 0%, 90%);border-radius:2px;pointer-events:none;z-index:100;}#a3a-diagram-6 .flowchartTitleText{text-anchor:middle;font-size:18px;fill:var(--a3a-diag-text, #0a0a0a);}#a3a-diagram-6 rect.text{fill:none;stroke-width:0;}#a3a-diagram-6 .icon-shape,#a3a-diagram-6 .image-shape{background-color:var(--a3a-diag-canvas, #ffffff);text-align:center;}#a3a-diagram-6 .icon-shape p,#a3a-diagram-6 .image-shape p{background-color:var(--a3a-diag-canvas, #ffffff);padding:2px;}#a3a-diagram-6 .icon-shape rect,#a3a-diagram-6 .image-shape rect{opacity:0.5;background-color:var(--a3a-diag-canvas, #ffffff);fill:var(--a3a-diag-canvas, #ffffff);}#a3a-diagram-6 .label-icon{display:inline-block;height:1em;overflow:visible;vertical-align:-0.125em;}#a3a-diagram-6 .node .label-icon path{fill:currentColor;stroke:revert;stroke-width:revert;}#a3a-diagram-6 :root{--mermaid-font-family:Roboto,sans-serif;}<\/style><g><marker id=\"a3a-diagram-6_flowchart-v2-pointEnd\" class=\"marker flowchart-v2\" viewBox=\"0 0 10 10\" refX=\"5\" refY=\"5\" markerUnits=\"userSpaceOnUse\" markerWidth=\"8\" markerHeight=\"8\" orient=\"auto\"><path d=\"M 0 0 L 10 5 L 0 10 z\" class=\"arrowMarkerPath\" style=\"stroke-width: 1; stroke-dasharray: 1, 0;\"><\/path><\/marker><marker id=\"a3a-diagram-6_flowchart-v2-pointStart\" class=\"marker flowchart-v2\" viewBox=\"0 0 10 10\" refX=\"4.5\" refY=\"5\" markerUnits=\"userSpaceOnUse\" markerWidth=\"8\" markerHeight=\"8\" orient=\"auto\"><path d=\"M 0 5 L 10 10 L 10 0 z\" class=\"arrowMarkerPath\" style=\"stroke-width: 1; stroke-dasharray: 1, 0;\"><\/path><\/marker><marker id=\"a3a-diagram-6_flowchart-v2-circleEnd\" class=\"marker flowchart-v2\" viewBox=\"0 0 10 10\" refX=\"11\" refY=\"5\" markerUnits=\"userSpaceOnUse\" markerWidth=\"11\" markerHeight=\"11\" orient=\"auto\"><circle cx=\"5\" cy=\"5\" r=\"5\" class=\"arrowMarkerPath\" style=\"stroke-width: 1; stroke-dasharray: 1, 0;\"><\/circle><\/marker><marker id=\"a3a-diagram-6_flowchart-v2-circleStart\" class=\"marker flowchart-v2\" viewBox=\"0 0 10 10\" refX=\"-1\" refY=\"5\" markerUnits=\"userSpaceOnUse\" markerWidth=\"11\" markerHeight=\"11\" orient=\"auto\"><circle cx=\"5\" cy=\"5\" r=\"5\" class=\"arrowMarkerPath\" style=\"stroke-width: 1; stroke-dasharray: 1, 0;\"><\/circle><\/marker><marker id=\"a3a-diagram-6_flowchart-v2-crossEnd\" class=\"marker cross flowchart-v2\" viewBox=\"0 0 11 11\" refX=\"12\" refY=\"5.2\" markerUnits=\"userSpaceOnUse\" markerWidth=\"11\" markerHeight=\"11\" orient=\"auto\"><path d=\"M 1,1 l 9,9 M 10,1 l -9,9\" class=\"arrowMarkerPath\" style=\"stroke-width: 2; stroke-dasharray: 1, 0;\"><\/path><\/marker><marker id=\"a3a-diagram-6_flowchart-v2-crossStart\" class=\"marker cross flowchart-v2\" viewBox=\"0 0 11 11\" refX=\"-1\" refY=\"5.2\" markerUnits=\"userSpaceOnUse\" markerWidth=\"11\" markerHeight=\"11\" orient=\"auto\"><path d=\"M 1,1 l 9,9 M 10,1 l -9,9\" class=\"arrowMarkerPath\" style=\"stroke-width: 2; stroke-dasharray: 1, 0;\"><\/path><\/marker><g class=\"root\"><g class=\"clusters\"><\/g><g class=\"edgePaths\"><path d=\"M162.219,41.748L166.385,40.498C170.552,39.249,178.885,36.749,186.552,35.5C194.219,34.25,201.219,34.25,204.719,34.25L208.219,34.25\" id=\"L_S_F_0\" class=\"edge-thickness-normal edge-pattern-solid edge-thickness-normal edge-pattern-solid flowchart-link\" style=\";\" data-edge=\"true\" data-et=\"edge\" data-id=\"L_S_F_0\" data-points=\"W3sieCI6MTYyLjIxODc1LCJ5Ijo0MS43NDgwODcyMjI2NDcyODV9LHsieCI6MTg3LjIxODc1LCJ5IjozNC4yNX0seyJ4IjoyMTIuMjE4NzUsInkiOjM0LjI1fV0=\" marker-end=\"url(#a3a-diagram-6_flowchart-v2-pointEnd)\"><\/path><path d=\"M294.438,34.25L298.604,34.25C302.771,34.25,311.104,34.25,318.771,34.25C326.438,34.25,333.438,34.25,336.938,34.25L340.438,34.25\" id=\"L_F_I_0\" class=\"edge-thickness-normal edge-pattern-solid edge-thickness-normal edge-pattern-solid flowchart-link\" style=\";\" data-edge=\"true\" data-et=\"edge\" data-id=\"L_F_I_0\" data-points=\"W3sieCI6Mjk0LjQzNzUsInkiOjM0LjI1fSx7IngiOjMxOS40Mzc1LCJ5IjozNC4yNX0seyJ4IjozNDQuNDM3NSwieSI6MzQuMjV9XQ==\" marker-end=\"url(#a3a-diagram-6_flowchart-v2-pointEnd)\"><\/path><path d=\"M482.063,34.25L486.229,34.25C490.396,34.25,498.729,34.25,506.396,34.25C514.063,34.25,521.063,34.25,524.563,34.25L528.063,34.25\" id=\"L_I_A_0\" class=\"edge-thickness-normal edge-pattern-solid edge-thickness-normal edge-pattern-solid flowchart-link\" style=\";\" data-edge=\"true\" data-et=\"edge\" data-id=\"L_I_A_0\" data-points=\"W3sieCI6NDgyLjA2MjUsInkiOjM0LjI1fSx7IngiOjUwNy4wNjI1LCJ5IjozNC4yNX0seyJ4Ijo1MzIuMDYyNSwieSI6MzQuMjV9XQ==\" marker-end=\"url(#a3a-diagram-6_flowchart-v2-pointEnd)\"><\/path><path d=\"M615.766,34.25L619.932,34.25C624.099,34.25,632.432,34.25,640.099,34.25C647.766,34.25,654.766,34.25,658.266,34.25L661.766,34.25\" id=\"L_A_V_0\" class=\"edge-thickness-normal edge-pattern-solid edge-thickness-normal edge-pattern-solid flowchart-link\" style=\";\" data-edge=\"true\" data-et=\"edge\" data-id=\"L_A_V_0\" data-points=\"W3sieCI6NjE1Ljc2NTYyNSwieSI6MzQuMjV9LHsieCI6NjQwLjc2NTYyNSwieSI6MzQuMjV9LHsieCI6NjY1Ljc2NTYyNSwieSI6MzQuMjV9XQ==\" marker-end=\"url(#a3a-diagram-6_flowchart-v2-pointEnd)\"><\/path><path d=\"M794.469,34.25L798.635,34.25C802.802,34.25,811.135,34.25,818.802,34.25C826.469,34.25,833.469,34.25,836.969,34.25L840.469,34.25\" id=\"L_V_O_0\" class=\"edge-thickness-normal edge-pattern-solid edge-thickness-normal edge-pattern-solid flowchart-link\" style=\";\" data-edge=\"true\" data-et=\"edge\" data-id=\"L_V_O_0\" data-points=\"W3sieCI6Nzk0LjQ2ODc1LCJ5IjozNC4yNX0seyJ4Ijo4MTkuNDY4NzUsInkiOjM0LjI1fSx7IngiOjg0NC40Njg3NSwieSI6MzQuMjV9XQ==\" marker-end=\"url(#a3a-diagram-6_flowchart-v2-pointEnd)\"><\/path><path d=\"M972.563,34.25L976.729,34.25C980.896,34.25,989.229,34.25,996.896,34.25C1004.563,34.25,1011.563,34.25,1015.063,34.25L1018.563,34.25\" id=\"L_O_P_0\" class=\"edge-thickness-normal edge-pattern-solid edge-thickness-normal edge-pattern-solid flowchart-link\" style=\";\" data-edge=\"true\" data-et=\"edge\" data-id=\"L_O_P_0\" data-points=\"W3sieCI6OTcyLjU2MjUsInkiOjM0LjI1fSx7IngiOjk5Ny41NjI1LCJ5IjozNC4yNX0seyJ4IjoxMDIyLjU2MjUsInkiOjM0LjI1fV0=\" marker-end=\"url(#a3a-diagram-6_flowchart-v2-pointEnd)\"><\/path><path d=\"M1155.641,34.25L1159.807,34.25C1163.974,34.25,1172.307,34.25,1179.991,35.051C1187.674,35.851,1194.707,37.452,1198.224,38.253L1201.74,39.053\" id=\"L_P_M_0\" class=\"edge-thickness-normal edge-pattern-solid edge-thickness-normal edge-pattern-solid flowchart-link\" style=\";\" data-edge=\"true\" data-et=\"edge\" data-id=\"L_P_M_0\" data-points=\"W3sieCI6MTE1NS42NDA2MjUsInkiOjM0LjI1fSx7IngiOjExODAuNjQwNjI1LCJ5IjozNC4yNX0seyJ4IjoxMjA1LjY0MDYyNSwieSI6MzkuOTQxMDU2OTEwNTY5MX1d\" marker-end=\"url(#a3a-diagram-6_flowchart-v2-pointEnd)\"><\/path><path d=\"M1205.641,89.809L1201.474,90.757C1197.307,91.706,1188.974,93.603,1169.551,94.551C1150.128,95.5,1119.615,95.5,1089.102,95.5C1058.589,95.5,1028.076,95.5,997.978,95.5C967.88,95.5,938.198,95.5,908.516,95.5C878.833,95.5,849.151,95.5,819.418,95.5C789.685,95.5,759.901,95.5,730.117,95.5C700.333,95.5,670.549,95.5,644.516,95.5C618.482,95.5,596.198,95.5,573.914,95.5C551.63,95.5,529.346,95.5,502.569,95.5C475.792,95.5,444.521,95.5,413.25,95.5C381.979,95.5,350.708,95.5,324.055,95.5C297.401,95.5,275.365,95.5,253.328,95.5C231.292,95.5,209.255,95.5,194.709,94.442C180.163,93.384,173.106,91.267,169.578,90.209L166.05,89.151\" id=\"L_M_S_0\" class=\"edge-thickness-normal edge-pattern-solid edge-thickness-normal edge-pattern-solid flowchart-link\" style=\";\" data-edge=\"true\" data-et=\"edge\" data-id=\"L_M_S_0\" data-points=\"W3sieCI6MTIwNS42NDA2MjUsInkiOjg5LjgwODk0MzA4OTQzMDl9LHsieCI6MTE4MC42NDA2MjUsInkiOjk1LjV9LHsieCI6MTA4OS4xMDE1NjI1LCJ5Ijo5NS41fSx7IngiOjk5Ny41NjI1LCJ5Ijo5NS41fSx7IngiOjkwOC41MTU2MjUsInkiOjk1LjV9LHsieCI6ODE5LjQ2ODc1LCJ5Ijo5NS41fSx7IngiOjczMC4xMTcxODc1LCJ5Ijo5NS41fSx7IngiOjY0MC43NjU2MjUsInkiOjk1LjV9LHsieCI6NTczLjkxNDA2MjUsInkiOjk1LjV9LHsieCI6NTA3LjA2MjUsInkiOjk1LjV9LHsieCI6NDEzLjI1LCJ5Ijo5NS41fSx7IngiOjMxOS40Mzc1LCJ5Ijo5NS41fSx7IngiOjI1My4zMjgxMjUsInkiOjk1LjV9LHsieCI6MTg3LjIxODc1LCJ5Ijo5NS41fSx7IngiOjE2Mi4yMTg3NSwieSI6ODguMDAxOTEyNzc3MzUyNzF9XQ==\" marker-end=\"url(#a3a-diagram-6_flowchart-v2-pointEnd)\"><\/path><\/g><g class=\"edgeLabels\"><g class=\"edgeLabel\"><g class=\"label\" data-id=\"L_S_F_0\" transform=\"translate(0, 0)\"><foreignObject width=\"0\" height=\"0\"><div xmlns=\"http:\/\/www.w3.org\/1999\/xhtml\" class=\"labelBkg\" style=\"display: table-cell; white-space: nowrap; line-height: 1.5; max-width: 200px; text-align: center;\"><span class=\"edgeLabel\"><\/span><\/div><\/foreignObject><\/g><\/g><g class=\"edgeLabel\"><g class=\"label\" data-id=\"L_F_I_0\" transform=\"translate(0, 0)\"><foreignObject width=\"0\" height=\"0\"><div xmlns=\"http:\/\/www.w3.org\/1999\/xhtml\" class=\"labelBkg\" style=\"display: table-cell; white-space: nowrap; line-height: 1.5; max-width: 200px; text-align: center;\"><span class=\"edgeLabel\"><\/span><\/div><\/foreignObject><\/g><\/g><g class=\"edgeLabel\"><g class=\"label\" data-id=\"L_I_A_0\" transform=\"translate(0, 0)\"><foreignObject width=\"0\" height=\"0\"><div xmlns=\"http:\/\/www.w3.org\/1999\/xhtml\" class=\"labelBkg\" style=\"display: table-cell; white-space: nowrap; line-height: 1.5; max-width: 200px; text-align: center;\"><span class=\"edgeLabel\"><\/span><\/div><\/foreignObject><\/g><\/g><g class=\"edgeLabel\"><g class=\"label\" data-id=\"L_A_V_0\" transform=\"translate(0, 0)\"><foreignObject width=\"0\" height=\"0\"><div xmlns=\"http:\/\/www.w3.org\/1999\/xhtml\" class=\"labelBkg\" style=\"display: table-cell; white-space: nowrap; line-height: 1.5; max-width: 200px; text-align: center;\"><span class=\"edgeLabel\"><\/span><\/div><\/foreignObject><\/g><\/g><g class=\"edgeLabel\"><g class=\"label\" data-id=\"L_V_O_0\" transform=\"translate(0, 0)\"><foreignObject width=\"0\" height=\"0\"><div xmlns=\"http:\/\/www.w3.org\/1999\/xhtml\" class=\"labelBkg\" style=\"display: table-cell; white-space: nowrap; line-height: 1.5; max-width: 200px; text-align: center;\"><span class=\"edgeLabel\"><\/span><\/div><\/foreignObject><\/g><\/g><g class=\"edgeLabel\"><g class=\"label\" data-id=\"L_O_P_0\" transform=\"translate(0, 0)\"><foreignObject width=\"0\" height=\"0\"><div xmlns=\"http:\/\/www.w3.org\/1999\/xhtml\" class=\"labelBkg\" style=\"display: table-cell; white-space: nowrap; line-height: 1.5; max-width: 200px; text-align: center;\"><span class=\"edgeLabel\"><\/span><\/div><\/foreignObject><\/g><\/g><g class=\"edgeLabel\"><g class=\"label\" data-id=\"L_P_M_0\" transform=\"translate(0, 0)\"><foreignObject width=\"0\" height=\"0\"><div xmlns=\"http:\/\/www.w3.org\/1999\/xhtml\" class=\"labelBkg\" style=\"display: table-cell; white-space: nowrap; line-height: 1.5; max-width: 200px; text-align: center;\"><span class=\"edgeLabel\"><\/span><\/div><\/foreignObject><\/g><\/g><g class=\"edgeLabel\"><g class=\"label\" data-id=\"L_M_S_0\" transform=\"translate(0, 0)\"><foreignObject width=\"0\" height=\"0\"><div xmlns=\"http:\/\/www.w3.org\/1999\/xhtml\" class=\"labelBkg\" style=\"display: table-cell; white-space: nowrap; line-height: 1.5; max-width: 200px; text-align: center;\"><span class=\"edgeLabel\"><\/span><\/div><\/foreignObject><\/g><\/g><\/g><g class=\"nodes\"><g class=\"node default\" id=\"flowchart-S-0\" transform=\"translate(85.109375, 64.875)\"><rect class=\"basic label-container\" style=\"\" x=\"-77.109375\" y=\"-26.25\" width=\"154.21875\" height=\"52.5\"><\/rect><g class=\"label\" style=\"\" transform=\"translate(-47.109375, -11.25)\"><rect><\/rect><foreignObject width=\"94.21875\" height=\"22.5\"><div xmlns=\"http:\/\/www.w3.org\/1999\/xhtml\" style=\"display: table-cell; white-space: nowrap; line-height: 1.5; max-width: 200px; text-align: center;\"><span class=\"nodeLabel\"><p>Approved SRS<\/p><\/span><\/div><\/foreignObject><\/g><\/g><g class=\"node default\" id=\"flowchart-F-1\" transform=\"translate(253.328125, 34.25)\"><rect class=\"basic label-container\" style=\"\" x=\"-41.109375\" y=\"-26.25\" width=\"82.21875\" height=\"52.5\"><\/rect><g class=\"label\" style=\"\" transform=\"translate(-11.109375, -11.25)\"><rect><\/rect><foreignObject width=\"22.21875\" height=\"22.5\"><div xmlns=\"http:\/\/www.w3.org\/1999\/xhtml\" style=\"display: table-cell; white-space: nowrap; line-height: 1.5; max-width: 200px; text-align: center;\"><span class=\"nodeLabel\"><p>FAT<\/p><\/span><\/div><\/foreignObject><\/g><\/g><g class=\"node default\" id=\"flowchart-I-3\" transform=\"translate(413.25, 34.25)\"><rect class=\"basic label-container\" style=\"\" x=\"-68.8125\" y=\"-26.25\" width=\"137.625\" height=\"52.5\"><\/rect><g class=\"label\" style=\"\" transform=\"translate(-38.8125, -11.25)\"><rect><\/rect><foreignObject width=\"77.625\" height=\"22.5\"><div xmlns=\"http:\/\/www.w3.org\/1999\/xhtml\" style=\"display: table-cell; white-space: nowrap; line-height: 1.5; max-width: 200px; text-align: center;\"><span class=\"nodeLabel\"><p>Installation<\/p><\/span><\/div><\/foreignObject><\/g><\/g><g class=\"node default\" id=\"flowchart-A-5\" transform=\"translate(573.9140625, 34.25)\"><rect class=\"basic label-container\" style=\"\" x=\"-41.8515625\" y=\"-26.25\" width=\"83.703125\" height=\"52.5\"><\/rect><g class=\"label\" style=\"\" transform=\"translate(-11.8515625, -11.25)\"><rect><\/rect><foreignObject width=\"23.703125\" height=\"22.5\"><div xmlns=\"http:\/\/www.w3.org\/1999\/xhtml\" style=\"display: table-cell; white-space: nowrap; line-height: 1.5; max-width: 200px; text-align: center;\"><span class=\"nodeLabel\"><p>SAT<\/p><\/span><\/div><\/foreignObject><\/g><\/g><g class=\"node default\" id=\"flowchart-V-7\" transform=\"translate(730.1171875, 34.25)\"><rect class=\"basic label-container\" style=\"\" x=\"-64.3515625\" y=\"-26.25\" width=\"128.703125\" height=\"52.5\"><\/rect><g class=\"label\" style=\"\" transform=\"translate(-34.3515625, -11.25)\"><rect><\/rect><foreignObject width=\"68.703125\" height=\"22.5\"><div xmlns=\"http:\/\/www.w3.org\/1999\/xhtml\" style=\"display: table-cell; white-space: nowrap; line-height: 1.5; max-width: 200px; text-align: center;\"><span class=\"nodeLabel\"><p>Validation<\/p><\/span><\/div><\/foreignObject><\/g><\/g><g class=\"node default\" id=\"flowchart-O-9\" transform=\"translate(908.515625, 34.25)\"><rect class=\"basic label-container\" style=\"\" x=\"-64.046875\" y=\"-26.25\" width=\"128.09375\" height=\"52.5\"><\/rect><g class=\"label\" style=\"\" transform=\"translate(-34.046875, -11.25)\"><rect><\/rect><foreignObject width=\"68.09375\" height=\"22.5\"><div xmlns=\"http:\/\/www.w3.org\/1999\/xhtml\" style=\"display: table-cell; white-space: nowrap; line-height: 1.5; max-width: 200px; text-align: center;\"><span class=\"nodeLabel\"><p>Operation<\/p><\/span><\/div><\/foreignObject><\/g><\/g><g class=\"node default\" id=\"flowchart-P-11\" transform=\"translate(1089.1015625, 34.25)\"><rect class=\"basic label-container\" style=\"\" x=\"-66.5390625\" y=\"-26.25\" width=\"133.078125\" height=\"52.5\"><\/rect><g class=\"label\" style=\"\" transform=\"translate(-36.5390625, -11.25)\"><rect><\/rect><foreignObject width=\"73.078125\" height=\"22.5\"><div xmlns=\"http:\/\/www.w3.org\/1999\/xhtml\" style=\"display: table-cell; white-space: nowrap; line-height: 1.5; max-width: 200px; text-align: center;\"><span class=\"nodeLabel\"><p>Proof tests<\/p><\/span><\/div><\/foreignObject><\/g><\/g><g class=\"node default\" id=\"flowchart-M-13\" transform=\"translate(1315.171875, 64.875)\"><rect class=\"basic label-container\" style=\"\" x=\"-109.53125\" y=\"-26.25\" width=\"219.0625\" height=\"52.5\"><\/rect><g class=\"label\" style=\"\" transform=\"translate(-79.53125, -11.25)\"><rect><\/rect><foreignObject width=\"159.0625\" height=\"22.5\"><div xmlns=\"http:\/\/www.w3.org\/1999\/xhtml\" style=\"display: table-cell; white-space: nowrap; line-height: 1.5; max-width: 200px; text-align: center;\"><span class=\"nodeLabel\"><p>Management of Change<\/p><\/span><\/div><\/foreignObject><\/g><\/g><\/g><\/g><\/g><\/svg><figcaption>Test and evidence sequence from engineering through SIS operation<\/figcaption><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">Mechanical Completion and Pre-commissioning<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Before complete functional testing, the system needs to reach physical-completion and readiness conditions. Inspections, loop checks, power verification, continuity, identification, calibration, and documentation reduce the risk of using validation to discover basic installation defects.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Separating stages prevents installation punch items from being confused with functional-requirement failures.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Commissioning and Startup<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">During commissioning, some functions may be temporarily blocked or operate under assumptions different from normal conditions. Functional Safety management must control these transitions.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Startup plans need to identify available protections, temporary conditions, responsibilities, prior tests, abort criteria, and restoration of the final configuration. Critical systems should not enter commercial operation with temporary bypasses without formal management.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">SIS in Brownfield Projects<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Modernization of existing plants is especially challenging because documentation, logic, and field conditions may diverge. Before modifying a SIS, a reliable baseline of the existing state needs to be established.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Surveys may include As Built documentation, I\/O lists, loaded logic, firmware, networks, panels, bypasses, trip history, proof tests, certificates, SIL calculations, and accumulated changes. A migration can fail even with a technically superior new platform if legacy requirements are lost or undocumented interfaces are ignored.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">SIS Migration<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Migration requires a cutover and rollback strategy. The project needs to define which functions will be unavailable, which compensating protections will be used, how versions will be frozen, who authorizes each stage, and what criteria determine return to the previous configuration.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The outage window must include not only installation but also testing and validation. Ending the intervention as soon as the new hardware \u201cpowers up\u201d is insufficient.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Management of Change \u2014 MOC<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Changes to setpoints, logic, voting, instruments, trip time, permanent bypasses, test intervals, or final elements can alter risk. Management of change therefore needs to assess impact before implementation and update documentation after approval.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Effective MOC connects the change with risk analysis, the SRS, design, testing, training, As Built documentation, and operating records. Software changes without traceability are especially critical because they can be difficult to detect visually in the field.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">SIS Operation and Maintenance<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The SIS needs to continue meeting required performance throughout its service life. This requires maintenance, testing, failure management, training, bypass control, data review, and document updates.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Useful indicators may include functions in bypass, overdue proof tests, detected failures, spurious trips, actual demands, repair time, recurring defects, and recommendation backlog. The objective is not to create an ornamental dashboard but to identify degradation of barriers.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Actual Demand on a SIF<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Every actual demand is an opportunity to verify performance and learn. The organization should assess whether the SIF acted as specified, what the initiating event was, how other layers responded, and whether there was delay, partial failure, or an unforeseen consequence.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This information can change frequencies used in LOPA, reliability assumptions, and maintenance strategy.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Audits and Functional Safety Assessment<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The lifecycle requires verifications and assessments at appropriate times. A process audit checks whether procedures and management are followed; Functional Safety Assessments examine whether activities and evidence support the confidence needed to proceed.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The degree of independence of the assessment team depends on the phase, complexity, and applicable requirements. The organization should define this in Functional Safety planning rather than improvising only before startup.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">SIS Procurement<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Mature procurement specifies functional and lifecycle requirements, not only a hardware list. RFPs and specifications should define responsibilities for the SRS, reliability data, calculations, software, FAT, documentation, training, testing, certificates, and support.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">They also need to establish boundaries among owner, designer, integrator, manufacturer, and commissioning company. Responsibility gaps are common when everyone assumes that \u201cthe PLC supplier\u201d will deliver complete Functional Safety.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Technical Bid Evaluation<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Technical evaluation of proposals should verify compliance with requirements rather than simply compare brands. Relevant points include architecture, independence, systematic capability, data used, tools, versions, licenses, testing philosophy, documentation, team experience, and treatment of obsolescence.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Exceptions and deviations need to remain traceable. A cheaper solution may transfer cost to engineering, operations, or maintenance.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Owner&#8217;s Engineering in SIS Projects<\/h2>\n\n\n\n<div class=\"wp-block-a3a-destaque\">\n<p class=\"wp-block-paragraph\">SIS projects involve process, instrumentation, automation, electrical, operations, maintenance, and suppliers. Owner&#8217;s Engineering helps preserve owner requirements, interfaces, and decisions throughout implementation.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/a3aengenharia.com.br\/servicos\/contratacao-integrada\/engenharia-do-proprietario\/\">Learn about Owner&#8217;s Engineering<\/a><\/p>\n<\/div>\n\n\n\n<p class=\"wp-block-paragraph\">Owner&#8217;s Engineering can act as an independent layer between asset requirements and suppliers. The role includes governing interfaces, reviewing documents, following decisions, controlling deviations, coordinating technical responses, and preserving traceability.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This is especially useful when process, instrumentation, automation, electrical, IT\/OT, operations, maintenance, and different integrators share responsibilities for the same function.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Design Review<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">A SIS Design Review should verify that the design translates the SRS without introducing dependencies or omissions. The review may examine architecture, voting, segregation, I\/O, power, networks, instrument lists, cause and effect, software, bypasses, diagnostics, testing, and maintenance.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The objective is not to redo the supplier&#8217;s design but to identify incompatibilities before they are materialized in panels, programming, and field installation.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Engineering Consulting Without Supplying the SIS<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">An Engineering Consulting company can add value without supplying controllers, programming a Safety PLC, or issuing product certification. The scope may include diagnostics, lifecycle organization, facilitation of analyses, definition of requirements, document standardization, Design Review, Procurement support, FAT\/SAT follow-up, interface management, and action governance.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This model separates the role of technically representing the owner from the role of selling the automation platform. Commercial independence can improve the quality of specifications and evaluations, provided the team has competence appropriate to the assumed scope.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Limits of Responsibility and Competence<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Functional Safety requires demonstrable competence for each activity. Facilitating a workshop, reviewing governance, checking documentation, calculating PFDavg, developing an application, or performing validation are distinct tasks.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The contract should make scope, assumptions, responsibilities, and exclusions explicit. Generic expressions such as \u201cSIL certification\u201d should be avoided when they do not correspond to a clearly defined process or accreditation.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Minimum Documentation Throughout the Lifecycle<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The exact documentation varies by project, but a typical set may include:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Functional Safety policy and plan;<\/li><li>risk studies and recommendation records;<\/li><li>SIF list;<\/li><li>required SIL and determination record;<\/li><li>SRS;<\/li><li>SIS philosophy;<\/li><li>architecture and diagrams;<\/li><li>I\/O and instrument lists;<\/li><li>cause-and-effect matrices;<\/li><li>SIL verification record;<\/li><li>specifications and datasheets;<\/li><li>software documents;<\/li><li>FAT\/SAT procedures and reports;<\/li><li>validation plan and report;<\/li><li>proof-test procedures;<\/li><li>bypass and MOC records;<\/li><li>controlled As Built documentation and backups.<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Documentation is not parallel bureaucracy: it is the evidence connecting risk, requirement, implementation, and the current condition of the installation.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Recurring Errors in SIS Projects<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Among the most critical errors are buying hardware before consolidating requirements; calling every interlock a SIF; assigning SIL to the PLC; using cause and effect as the only SRS; sharing resources without evaluating independence; accepting reliability data without assumptions; considering FAT the final validation; leaving proof testing until after startup; and allowing logic changes without MOC.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Another error is treating the SIS as an automation-only project. Process, instrumentation, mechanical, electrical, operations, and maintenance directly influence function performance.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Criteria for Engaging Independent Support<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Consulting support is especially useful when the organization has multiple suppliers, brownfield retrofit, dispersed requirements, inconsistent documentation, a large number of SIFs, frequent changes, low proof-test maturity, or a need to structure corporate governance.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">It is also advisable before a major procurement because correcting ambiguity in the specification costs less than correcting architecture, software, and field installation after fabrication.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Final Considerations<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">A Safety Instrumented System should be understood as a protection layer governed throughout its lifecycle. Its performance depends on coherence among risk analysis, SRS, architecture, sensors, logic, final elements, testing, operation, maintenance, and management of change.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The most common mistake is reducing the system to its most visible equipment. A Safety PLC can be excellent and still be part of an inadequately specified or maintained function. Engineering must preserve the complete causal chain: why the SIF exists, what risk reduction it needs to provide, how it was implemented, how it will be verified, and how its integrity will be sustained during operation.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For the owner, independent technical governance is particularly valuable when multiple disciplines and suppliers share responsibilities. It allows Functional Safety to be translated into verifiable requirements, traceable decisions, and objective procurement and acceptance criteria.<\/p>\n\n\n\n<details class=\"wp-block-details is-layout-flow wp-block-details-is-layout-flow\"><summary>Technical references<\/summary>\n<p class=\"wp-block-paragraph\">[1] INTERNATIONAL ELECTROTECHNICAL COMMISSION (IEC). IEC 61511-1:2016+AMD1:2017 CSV \u2014 Functional safety \u2014 Safety instrumented systems for the process industry sector \u2014 Part 1. Available at: <a href=\"https:\/\/webstore.iec.ch\/en\/publication\/61289\">https:\/\/webstore.iec.ch\/en\/publication\/61289<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">[2] INTERNATIONAL SOCIETY OF AUTOMATION (ISA). ISA-84 Series of Standards \u2014 Functional Safety and Safety Instrumented Systems. Available at: <a href=\"https:\/\/www.isa.org\/standards-and-publications\/isa-standards\/isa-84-standards\">https:\/\/www.isa.org\/standards-and-publications\/isa-standards\/isa-84-standards<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">[3] INTERNATIONAL SOCIETY OF AUTOMATION (ISA). ISA84 \u2014 Instrumented Systems to Achieve Functional Safety in the Process Industries. Available at: <a href=\"https:\/\/www.isa.org\/standards-and-publications\/isa-standards\/isa-standards-committees\/isa84\">https:\/\/www.isa.org\/standards-and-publications\/isa-standards\/isa-standards-committees\/isa84<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">[4] CENTER FOR CHEMICAL PROCESS SAFETY (CCPS). Layer of Protection Analysis \u2014 LOPA resources. Available at: <a href=\"https:\/\/www.aiche.org\/ccps\/resources\/tools\/lopa\">https:\/\/www.aiche.org\/ccps\/resources\/tools\/lopa<\/a><\/p>\n<\/details>\n\n\n\n<details class=\"wp-block-details is-layout-flow wp-block-details-is-layout-flow\"><summary>Frequently asked questions<\/summary>\n<div class=\"schema-faq wp-block-yoast-faq-block\"><div class=\"schema-faq-section\" id=\"faq-question-o-que-um-sistema-instrumentado-de-seguran-a-sis-f2cad1ed\"><strong class=\"schema-faq-question\">What is a Safety Instrumented System (SIS)?<\/strong> <p class=\"schema-faq-answer\">It is an instrumented system intended to execute one or more Safety Instrumented Functions to bring or maintain a process in a safe state when specified hazardous conditions are detected.<\/p><\/div><div class=\"schema-faq-section\" id=\"faq-question-qual-a-diferen-a-entre-sis-sif-e-sil-4b3a7b45\"><strong class=\"schema-faq-question\">What is the difference between SIS, SIF, and SIL?<\/strong> <p class=\"schema-faq-answer\">SIS is the system that implements safety functions; SIF is a specific detection-and-safe-action function; SIL is the integrity level required or achieved by a SIF under the applicable criteria.<\/p><\/div><div class=\"schema-faq-section\" id=\"faq-question-um-safety-plc-sil-3-torna-todo-o-sistema-sil-3-68ad14b6\"><strong class=\"schema-faq-question\">Does a SIL 3 Safety PLC make the entire system SIL 3?<\/strong> <p class=\"schema-faq-answer\">No. Performance is evaluated for the complete SIF, including sensors, logic solver, final elements, architecture, testing, common-cause failures, and systematic requirements.<\/p><\/div><div class=\"schema-faq-section\" id=\"faq-question-todo-intertravamento-industrial-uma-sif-7d5e6649\"><strong class=\"schema-faq-question\">Is every industrial interlock a SIF?<\/strong> <p class=\"schema-faq-answer\">No. Many interlocks have an operational or equipment-protection purpose. A SIF must be linked to a risk-reduction requirement defined by the Functional Safety process.<\/p><\/div><div class=\"schema-faq-section\" id=\"faq-question-o-que-srs-em-seguran-a-funcional-69bf2386\"><strong class=\"schema-faq-question\">What is an SRS in Functional Safety?<\/strong> <p class=\"schema-faq-answer\">The Safety Requirements Specification translates risk requirements into verifiable requirements for SIFs, including actions, safe state, SIL, timing, voting, interfaces, testing, bypasses, and validation criteria.<\/p><\/div><div class=\"schema-faq-section\" id=\"faq-question-fat-e-sat-s-o-suficientes-para-validar-um-sis-9b842b34\"><strong class=\"schema-faq-question\">Are FAT and SAT sufficient to validate a SIS?<\/strong> <p class=\"schema-faq-answer\">Not necessarily. FAT and SAT verify important parts of the solution, but Functional Safety validation must demonstrate that the installed SIFs meet the SRS requirements.<\/p><\/div><div class=\"schema-faq-section\" id=\"faq-question-uma-consultoria-pode-atuar-em-sis-sem-fornecer-s-abdf8ef0\"><strong class=\"schema-faq-question\">Can a consulting company work on SIS without supplying a Safety PLC?<\/strong> <p class=\"schema-faq-answer\">Yes. It can work on lifecycle governance, requirements, Design Review, Procurement, Owner&#x27;s Engineering, FAT\/SAT follow-up, documentation, and interface management, provided the scope is clearly delimited and the team is competent for the activities assumed.<\/p><\/div><div class=\"schema-faq-section\" id=\"faq-question-quando-um-sis-precisa-de-proof-test-95d3f476\"><strong class=\"schema-faq-question\">When does a SIS need a proof test?<\/strong> <p class=\"schema-faq-answer\">A proof test is used to reveal hidden dangerous failures not detected by automatic diagnostics. Frequency, coverage, and procedure should be defined according to the SIF and its verification.<\/p><\/div><\/div>\n<\/details>\n\n\n\n<details class=\"wp-block-details is-layout-flow wp-block-details-is-layout-flow\"><summary>Complementary technical materials<\/summary>\n<h4 class=\"wp-block-heading\">Related solutions<\/h4>\n\n<ul class=\"wp-block-list\"><li><a href=\"https:\/\/a3aengenharia.com.br\/solucoes\/engenharia-de-automacao-industrial\/sistemas-de-supervisao-e-controle-sdsc\/\">Digital Supervision and Control Systems (SDSC): automation and integrated operation<\/a><\/li><li><a href=\"https:\/\/a3aengenharia.com.br\/solucoes\/engenharia-de-automacao-industrial\/sistemas-scada\/\">SCADA Systems<\/a><\/li><\/ul>\n\n<h4 class=\"wp-block-heading\">Related services<\/h4>\n\n<ul class=\"wp-block-list\"><li><a href=\"https:\/\/a3aengenharia.com.br\/servicos\/planejamento\/projeto-de-automacao-industrial\/\">Industrial Automation Design: control, supervision, OT networks, and integration<\/a><\/li><li><a href=\"https:\/\/a3aengenharia.com.br\/servicos\/servicos-transversais\/consultoria-tecnica\/\">Technical Engineering Consulting: diagnosis, strategy, and decision support<\/a><\/li><li><a href=\"https:\/\/a3aengenharia.com.br\/servicos\/contratacao-integrada\/engenharia-do-proprietario\/\">Owner&#x27;s Engineering<\/a><\/li><li><a href=\"https:\/\/a3aengenharia.com.br\/servicos\/implementacao\/comissionamento\/\">Engineering Commissioning: planning, testing, readiness, and handover<\/a><\/li><\/ul>\n\n<h4 class=\"wp-block-heading\">Main content on the topic<\/h4>\n\n<ul class=\"wp-block-list\"><li><a href=\"https:\/\/a3aengenharia.com.br\/conteudo\/artigos-tecnicos\/sil-safety-integrity-level-definir-verificar-integridade-seguranca\/\">SIL: What Safety Integrity Level Is, How to Define and Verify It<\/a><\/li><li><a href=\"https:\/\/a3aengenharia.com.br\/conteudo\/artigos-tecnicos\/lopa-layer-of-protection-analysis-camadas-independentes-risco\/\">LOPA: Layer of Protection Analysis, Independent Layers, and Risk Reduction<\/a><\/li><\/ul>\n\n<h4 class=\"wp-block-heading\">Related technical content<\/h4>\n\n<ul class=\"wp-block-list\"><li><a href=\"https:\/\/a3aengenharia.com.br\/conteudo\/artigos-tecnicos\/hazid-engenharia-hazard-identification-metodologia-aplicacao\/\">HAZID in Engineering: Hazard Identification, Methodology, and Industrial Project Applications<\/a><\/li><li><a href=\"https:\/\/a3aengenharia.com.br\/conteudo\/artigos-tecnicos\/hazop-engenharia-metodologia-palavras-guia-desvios\/\">HAZOP in Engineering: Methodology, Guide Words, and Process Deviation Analysis<\/a><\/li><li><a href=\"https:\/\/a3aengenharia.com.br\/conteudo\/artigos-tecnicos\/automacao-industrial-o-que-e-arquitetura-sistemas-aplicacoes\/\">Industrial Automation: What It Is, Architecture, Systems, and Engineering Applications<\/a><\/li><li><a href=\"https:\/\/a3aengenharia.com.br\/conteudo\/artigos-tecnicos\/comissionamento-sistemas-criticos-prontos-para-operar\/\">Industrial Commissioning: Pre-commissioning, Startup, Cold Tests, and Hot Tests<\/a><\/li><\/ul>\n<\/details>\n","protected":false},"excerpt":{"rendered":"<p>Understand SIS, the difference between SIS, SIF and SIL, architecture, SRS, independence, FAT, SAT, validation, proof tests, and governance under IEC 61511.<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"template":"","meta":{"_a3a_global_related_solutions":[],"_a3a_global_related_services":[],"_a3a_global_related_materials":[],"_a3a_post_lang":"en-us","_a3a_translation_group_id":"0b2fbeb2-ecd6-48af-b266-ba66036dea79","_a3a_i18n_canonical_slug":"safety-instrumented-system-sis-architecture-sif-lifecycle"},"categories":[],"segments":[],"mercados":[],"etapas":[],"class_list":["post-73767","articles","type-articles","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/a3aengenharia.com\/en-us\/wp-json\/wp\/v2\/articles\/73767","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/a3aengenharia.com\/en-us\/wp-json\/wp\/v2\/articles"}],"about":[{"href":"https:\/\/a3aengenharia.com\/en-us\/wp-json\/wp\/v2\/types\/articles"}],"author":[{"embeddable":true,"href":"https:\/\/a3aengenharia.com\/en-us\/wp-json\/wp\/v2\/users\/1"}],"version-history":[{"count":8,"href":"https:\/\/a3aengenharia.com\/en-us\/wp-json\/wp\/v2\/articles\/73767\/revisions"}],"predecessor-version":[{"id":73785,"href":"https:\/\/a3aengenharia.com\/en-us\/wp-json\/wp\/v2\/articles\/73767\/revisions\/73785"}],"wp:attachment":[{"href":"https:\/\/a3aengenharia.com\/en-us\/wp-json\/wp\/v2\/media?parent=73767"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/a3aengenharia.com\/en-us\/wp-json\/wp\/v2\/categories?post=73767"},{"taxonomy":"segments","embeddable":true,"href":"https:\/\/a3aengenharia.com\/en-us\/wp-json\/wp\/v2\/segments?post=73767"},{"taxonomy":"mercados","embeddable":true,"href":"https:\/\/a3aengenharia.com\/en-us\/wp-json\/wp\/v2\/mercados?post=73767"},{"taxonomy":"etapas","embeddable":true,"href":"https:\/\/a3aengenharia.com\/en-us\/wp-json\/wp\/v2\/etapas?post=73767"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}