Professional Documents
Culture Documents
N A F T E C .S P A
Page 1 of 6
6897-04-41-SILS-01 Rev 0
Annexure: I
Section: 16.2
Discipline: POSD
Title: Safety Integrity Level (SIL) Specifications
Page 2 of 6
6897-04-41-SILS-01 Rev 0
INDEX
1.0 INTRODUCTION...............................................................................................................3
N A F T E C .S P A
Page 3 of 6
6897-04-41-SILS-01 Rev 0
1.0 INTRODUCTION
The methodology adopted for the SIL/IPF classification study is based upon guidelines provided
by the following documents.
♦ IEC-61508
♦ IEC-61511
The classification methodology comprises “Classification of IPF dangerous failures” (failures
when a genuine demand exists)
The classification of IPF dangerous failures takes into account:
♦ Consequences related to personnel health and safety
♦ Consequences related to production and equipment loss
♦ Consequences related to the environmental impact
The IPF classification methodology is based on the risk assessment matrix presented in the
document.
Demand rate
The first step in determining the demand rate is to determine the cause(s) of the demand on the
IPF. The second step is to determine the rate at which the demand is placed on the IPF. The
IPF classification methodology quantifies the demand rate in terms of ranges:
Demand Rate
Category (Interval between
demands)
D0 Negligible
D1 > 20 years
D2 4 to 20 years
D3 6 months to 4 years
D4 < 6 months
Page 4 of 6
6897-04-41-SILS-01 Rev 0
Category Consequence
S0 No injury or health effect
S1 Slight injury or health effect
S2 Minor injury or health effect
S3 Major injury or health effect
S4 One to three fatalities
S5 Multiple fatalities
The following are considered while determining personnel health and safety consequences:
• Potential for human injury if the IPF fails upon occurrence of a hazardous situation
• Exposure of personnel in the area affected by the hazardous situation
• Possibility of the potential casualties avoiding/escaping the hazarding situtation. (This
considers the means of warning the person and the possibility of his escape).
The resulting risk reductions are concluded as in Table-1.
The resulting reduction will be deducted from the S-consequence category found. If the result of
the classification is S0, the IPF is not required for personnel health and safety reasons.
Page 5 of 6
6897-04-41-SILS-01 Rev 0
Economic consequences
The IPF methodology determines economic consequences as being one of six categories:
Category Consequence
L0 No loss
L1 Slight loss
L2 Minor loss
L3 Local loss
L4 Major loss
L5 Extensive loss
Environmental consequences
The IPF methodology determines environmental consequences as being one of six categories:
Page 6 of 6
6897-04-41-SILS-01 Rev 0
Apart from the above, the following inputs may be required from NAFTEC during the
classification study on case to case basis:
• Approximate cost impact due to plant shutdown or equipment
maintenance/replacement
• Approximate cost impact for bringing robustness in the IPF (to avoid spurious trips)
• Approximate impact from environmental release