SIPI Functional Safety Data Resource

Title

blank Author

blank blank blank

Principal Phase

Keywords, Overview

A Comparison of Different Software Certification Schemes

Dr Hendrik Schäbe, TÜV

LOAD

9,

Software criticality classes; Certification; Software product evaluation and certification; Certification processes; SPEC scheme

A Critical Look at the CENELEC Railway Application Standard

Odd Nordland, SINTEF

LOAD

Overall, general,

Cenelec; EN51026;EN50129;EN50128;allpication sector standards; RAMS; comparison CENELEC and 61508

A Method for Dynamic Process Hazard Analysis and Integrated process Safety Management

Michel Houtermans

LOAD

3,4,5,9,

Hazard analysis; safety management; dynamic flowgraph methodology; concepts of risk and safety; integrated safety & quality; framework for implementation of safety; safety protection layer; deductive and inductive analysis; real time alarm management

A Method for Estimating Cost Comparisons in Raising SIL Levels

SIPI61508

LOAD

9,14,15,

Safety instrumented systems; Safety loop configurations; Engineering changes; Architectural configuration changes; Life cycle costs

A Practical Implementation of IEC 61508 within the Power Generation Industry: Turbine Over-Speed Protection and Functional Safety <SIPI Presentation, Paris>

Benjamin Nicolas, Bureau Veritas

LOAD

?? in French, requires translation

blank

Accredited Certification to IEC61508

Stuart Nunns, ABB

LOAD

Overall, all,

Conformity assessment; accreditation; functional safety management; management of functional safety; organisational capability – approved company; certified product

Achieving Six Sigma Through Fault Tree Analysis

Angela Summers, Triconex

LOAD

3,

Six Sigma; OSHA Process Safety Management (PSM); BPCS; ESD; Manufacturing plant improvement; Fault tree analysis

Alarm Management - A Practical Guide for Users

Peter Bruce and John Noon, ABB Eutech Process Solutions Ltd

LOAD

3,4,14,15,

Alarm functionality; Nuisance alarms; Abnormal situation management; Alarm philosophy, procedures, operation, prioritisation

Alarm Management - The EEMUA Guidelines in Practice

Neil Brown, Real Time Engineering

LOAD

3, 4,14,15,

Alarm flooding; Health & safety executive alarm studies; Automatic alarm systems; Deluge low value, repeats and consequential warnings; Human error

Alarm System performance - One Size Fits All?

D C Campbell Brown, BP

LOAD

3,4,14,15,

Alarm management; Alarm system performance levels; Alarm system metrics; Average alarm rate; Maximum alarm rate; Performance level factors; Alarm assessment methods

Alarms Management - Priority, Floods, Tears or Gain

Harry Smith, Colin Howard and Tony Ford, 4-Sight Consulting

LOAD

3, 4,14,15,

Human factors; False alarms; Operators process mental model; Safety management cultures; Safety management systems; Effective approaches to alarm management; Alarm management philosophies

An HSE field inspector’s perspective on IEC 61508

John Madden, Health & Safety Executive

LOAD

Overall,

COMAH – control of major accident hazards; Status of IEC 61508 within HSE; COMAH assessments; Evidence gathered by HSE

Analisi di Rischio ed Affidabilita’ dei Sistemi di Allarme e Blocco <SIPI Presentation, Stresa>

F Gambetti, Snamprogetti

LOAD

3,9,

Snamprogetti implementation of 61508; Example applications; Use of risk graphs; Calibration of risk graphs; Issues around failure rate data; Markov modelling

Application of IEC-61508 and IEC-61511 in the Petroleum Activities on the Norwegian Continental Shelf (OLF-070) – Appendices to Guidelines

Norwegian Petroleum Directive

LOAD

All,

Risk based approach; Safety instrumented systems; Norwegian continental shelf; Application of IEC 61508 & IEC 61511; Model safety solutions/functions; Management of functional safety; V,V,T, functional safety assessments; Development & allocation of SIL requirements

Application of IEC-61508 and IEC-61511 in the Petroleum Activities on the Norwegian Continental Shelf (OLF-070) - Guidelines

Norwegian Petroleum Directive

LOAD

All,

Data dossier; Model PSD functions

Application solutions with PROFIsafe. Comparing conventional technology with safe bus systems.

Andreas Höll, SICK

LOAD

blank
blank

Applicazione Pratica del Ciclo di Vita della Sicurezza in accordo agli Standard IEC61508 ed IEC61511: Documentazione di un Progetto Tipico della Sicurezza per l’Industria di Processo Chimico <SIPI Presentation, Stresa>

Dr. P. Fanelli, Invensys Systems

LOAD

9,

Introduction to 61508 & 61511; Key terms and definitions; Documentation requirements per phase; Management of functional safety; Functional safety assessment; Life cycle concepts

Applying a Risk Based Approach - A Users View

Graham Stephenson

LOAD

Overall, overview,

COMAH; Corporate standards; Life cycle mapping; Challenges to implementation; Risk based approach

Automaatiojärjestelmien toiminnallinen turvallisuus

Matti Sundquist, STM, työsuojeluosasto

LOAD

In Finnish?

blank

AUTOMATYKA ZABEZPIECZENIOWA – NOWE PODEJŒCIE

Witold Głodek, MPCo Polska

LOAD

overall

Protecting Automation - A New Approach; risk reduction factor (RRF); basic rules and considerations for automated protection systems; safety instrumented system (SIS); technical and organisation  issues

AUTOMATYKA ZABEZPIECZENIOWA TO NIE TYLKO CERTYFIKOWANE STEROWNIKI

Witold Głodek, MPCo Polska

LOAD

9,14,15,

Protecting Automation - it is not only certified controllers; methods for improving operational integrity of equipment; factors affecting operational integrity of interlocking systems

Automatyka zabezpieczeniowa w przemyśle procesowym - przegląd unormowań <SIPI Presentation, Gdynia>

Witold Glodek, MPC0 Polska s.c.

LOAD

Overall,

Key features of DIN 19250, VDE 0801, ISA S84, 61508, 61511; Principles of ALARP; Layers of protection; Key principles of realisation of 61508; 61508 & 61511 relationships

Avoiding Bad Engineering Practices

Angela Summers, SIS-Tech Solutions

LOAD

Overview, general,

Industry regulations and standards; Compliance with standards; Seven bad engineering practices; Guidance on avoidance of bad engineering practices;

BASF Veiligheidsfilosofie, gevolgen van IEC61508 en IEC61511 <<Presentation to BIRA>>

Michel De Lannoy and Jan Luyts, BASF

LOAD

3,4,5,9,

BASF overview in Benelux; Hazard and operability studies – process and team model; 61508 & 61511 relationships; classification VDI/VDE 2120; BASF Group Procedure; BASF use of risk matrix and calibration; Safety loop architectures; Reliability data; Issues around the standard

Better Alarm Handling - A Practical Application of Human Factors

John Wilkinson and Debbie Lucas, HSE

LOAD

No specific references to 61508?

Human factors and alarm management; HSE alarms strategy; Competency; Lesson learnt, analysis of incidents; EEMUA Guide; Inspection and enforcement; Human factors strategy; Guidance for users and designers – case study

Better Alarm Management Foresight

A G Foord and R G Lord, 4-sight Consulting

LOAD

3,4,5,9,

EEMUA Alarm guide overview; Major incidents were alarm management was a factor; Human factors and issues – sophisticated processes and systems; Examples of human failure; Steps to better alarm handling; Demonstration of compliance with EEMUA Guidelines; Case studies

Bezpieczeństwo funkcjonalne programowalnych układów sterowania maszyn <SIPI Presentation, Gdynia>

Marek Dźwiarek, Zakład Techniki Bezpieczeństwa

LOAD

blank
blank

Bridging the Safe Automation Gap - Part 1

Angela Summers, SIS-Tech Solutions

LOAD

3,4,5,9,

Safe automaiton; Safety culture; Organisational safety issues - ownership and accountability; Hazard analysis; Typical problem areas; Separation and independence of safeguards; Importance of alarms and HMI

Bridging the Safe Automation Gap - Part 2

Angela Summers, SIS-Tech Solutions

LOAD

6,8,9,12,14,15,

SIS specification & implementation; Operations & maintenance; Management of change; Issues regarding separation; Typical; SIS design problems

CASE STUDY - Instrument Safety Function for a Storage Tank with a Liquified Hydrocarbon according to IEC-61508 and IEC-61511 <<Presentation to BIRA>

Erik Dom, Nero Engineering

LOAD

3,4,9,

Instrumented safety functions; Risk analysis; Methods for SIL evaluation; SIS design – architectural constraints; SIS architectures; Validation; Maintenance & operation

CASS Brochure

CASS

LOAD

All,

Accredited certification; Organisational assessment; Assessor competence; Subsystem & system assessment; Application independent and application dependent system assessment

CASS Templates for Sub-System Data in Relation to IEC61508 Safety Function Assessment

Barry Reynolds, Honeywell Control Systems

LOAD

4,5,7,8,9,14,15,

Reference data for components and subsystems; Base data sets; Basis for certification of products to requirements of 61508; Parameters describing application context; Parameters specific to defined safety functions; CASS scheme

Certified Product Data Sets and Certified Products with Respect to IEC61508

Barry Reynolds, Honeywell Control Systems

LOAD

blank
blank

Closed loop Safety PLC Systems

Stefan Angele, Infoteam Software

LOAD

9,13,

PLC architectures; Development of component libraries, validated software modules; Component orientated PLC software development; Safety Vs functionality; Software diversity

Common Cause and Common Sense - Designing Failure Out of Your SIS

Angela Summers and Glenn Raney, SIS-Tech Solutions

LOAD

4,5,6,7,8,9,13,14,

SIS evaluation for common cause failure (CCF); Identification of potential CC elements; Strategies for elimination or reducing likelihood; Design of SIS to minimise c-mode or CCF; Checklists; engineering design, SIS components; environmental, operations; installation & maintenance

Common Issues on the adoption of IEC61508 & IEC61511 <SIPI Presentation, Stresa>

Dr. S. Bologna, ENEA

LOAD

All,

Pros and cons of compliance; Over view of the safety life cycle; Key responsibilities across the lifecycle; Issues around control and safety separation; Key differences 61508 &61511; Importance of functional safety management and assessment; Independence requirements; Qualification of products; Oversights and key considerations for companies

Comparison between testing methodologies to achieve the required SIL level

Ulrich Gensicke, METSO Automation

LOAD

blank
blank

Compliance with requirements from IEC61508 – Conformance Records

Bente Skari, Aker Kvaerner

LOAD

All,

Sets of tables to assist in measuring compliance to IEC 61508 Parts 1,2,3; Part 1 compliance tables for documentation, management of functional safety, overall safety lifecycle reqs; Part 2 compliance tables; E/E/PES safety lifecycle requirements; Part 3 compliance tables for documentation, s/w quality and s/w lifecycle management

Compliance with requirements from IEC61508 – Suppler Checklist

Bente Skari, Aker Kvaerner

LOAD

9,

Guidance to vendors for compliance to 61508 Part 2; Provision of checklists as assistance to vendors; Flow diagrams for vendor requirements for SIL classified systems; Outline safety analysis report

Component SIL Capability Assessment - A Worked Example

Bob Smith, Aston Dane Plc

LOAD

9,

SIS – hardware assessment process for individual loops; Regulations and duty of care for instrument suppliers; SIL capability; Base information for loop components; SIL assessment requirements – qualitative and quantitative

Confusion in the IEC 61511 on SRS and application software

Arian Slagt, Yokogawa

LOAD

blank
blank

Consequences for Automation Technology and Implementation at HIMA

Uwe Jülly and Hans-Leo Ross, HIMA

LOAD

Overview,

Origin of safety standards; Development history of safety standards; Key features of 61508; Failure rates; Implementation of 61508 within HIMA

Construction of a Safety Case based on FTA, Statcharts and Class Diagrams

Thomas Maier, Danfoss Drives

LOAD

9,

V, V & functional safety assessment; Object orientated design; Object orientated programming and languages; Methods for safety system design and safety case construction; Example using a safe frequency inverter; Providing evidence of safety

Critical Transmitters Improve Plant Safety and Reduce Costs

Paul Gruhn,  Moore Process Automation Solutions

LOAD

9,14,

Limitation of sensors & configuration in safety applications; Benefits of sensors with high levels of internal self diagnostics; Common transmitter problems; Standard Vs critical transmitters; Measuring performance; Cost of ownership

Dangerous Chemicals in Industry - Seveso II in Finland

The Safety Technology Authority, Finland

LOAD

No direct references

SevesoII; Role of TUKES, Finnish Safety Technology Authority; Key obligations and responsibilities for operators and regulators; Licensing requirements on industry; Safety reports; National regulations implementing SevesoII; Chemical data

Data Safety for Automation Technology - Protection against Production Downtimes

Thomas Hörauf, GEPA

LOAD

blank
blank

Design and Verification of Critical Embedded Software

Ian Hodgson, Esterel Technologies

LOAD

blank
blank

Design for Trust: Neue Dimensionen der Sicherheit

W. Reif, A. Thums, G. Schellhorn, UniversitÄat Augsburg

LOAD

9,

Formal methods; Fault tree analysis

Designing Crane Controls with Applied Mechanical and Electrical Safety Features

Bradford P Lytle, NASA and Thomas A Walczak, GE Fanuc Automation

LOAD

9,

Design standards for cranes in safety critical areas; Use of PES in crane controls; Cranes in support of space shuttle programme and other critical application areas; Addressing system reliability and system availability; Traditional crane design techniques; Consideration sin solid state and microprocessor systems; Testing and certification

Determination of the Safety Integrity Level for a Safety Instrumented Function - A User's View and Experience

Ian R Hitchen, IETES and Rowan House

LOAD

9,

Determination of SIL for SIF’s; Methodology for SIL determination; Barriers to implementation; Hazard and operability studies; Risk graphs; Layer of protection analysis; Consequence matrix; ALARP

Developing Advisory Software to Comply with IEC61508

Adelard

LOAD

9,

HSE Research report; Guidance for developing Advisory software; Off-line advisory software systems; Quality management system requirements; Issues around certification of software; 61508 fundamentals in relation to Advisory software

Development Of A Method For Assessing Legacy Instrumented Systems Against BS EN 61508

Gerry Brennan, ABB

LOAD

blank
blank

Differences between IEC61511 and ISA84

Angela Summers, SIS-Tech Solutions

LOAD

Overview – general

ISA SP 84, IEC 61511; End user considerations when migrating from ISA 84 to IEC 61511; OSHA 1910; Terminology; Organisation; Developer Vs user; Management of functional safety; Risk assessment and allocation; Operator actions; Design restrictions; Basic software languages; O&M, FAT

Digitale Bildverarbeitungssysteme zur Überwachung von Schutzzonen

Gerhard Rieger, YUV

LOAD

In German sent to Tino for translation

blank

Enhanced Markov Analysis as a Method to Assess Safety in the Process Industry

Johannes Rouvroye, TUE

LOAD

3,4,9,

Analysis of integral safety systems; Assessment of safety analysis techniques; Enhanced Markov analysis incorporating method for tolerance and statistical sensitivity analysis; Process industry – recent trends in regulations and standards; Quantitative and quantitative analysis techniques – capabilities and shortcomings; Practical safety analysis – theoretical considerations

Estimation and Evaluation of Common Cause Failures in SISs

Angela Summers, SIS-Tech Solutions

LOAD

4,5,6,7,8,9,13,

Methodologies to assess common cause faults in SIS; Qualitative techniques for identifying and reducing potential for CCF; Quantitative techniques for including CCF in SIS calcs; Checklists for identification of SIS design inadequacies; Quantitative evaluation of CCF

Experience with Functional Safety Management certification in the scope of IEC 61508 and IEC 61511

Thomas Huber, TÜV

LOAD

blank
blank

Experiences in Applying IEC 61508 for Fossil Power Plants <SIPI Presentation, Tampere>

Tapio Nordbo, Enprima Oy

LOAD

3,4,5,9,14,15,

Regulations relating to boilers; Use of SIS/SRS in boiler applications; Engineering contractors 61508/61511 implementation processes; Problems experienced in 61508 implementation; SIL verification – approaches and issues; SIS design considerations

Experiences in Auditing Critical System Suppliers and Integrators in the Process Chemical Sector against IEC61508

Paul Lucas and Eric Gilchrist ABB Eutech

LOAD

9,

Software based protective systems; Successes and difficulties experienced by suppliers and system integrators; Applying 61508, generic standards to software development processes; Platform selection and software architecture; Competencies; Authorisations, checks and approvals; Programming and coding standards

Experiences in Developing Software Reliability Management in Finnish Industry <SIPI Presentation, Tampere>

Olli Venta, VTT Industrial Systems

LOAD

9,

Role and remit of VTT; Software dependability application areas; Software reliability framework – software quality and risk management; Key considerations in the software safety lifecycle; Typical safety project problems and resolution; Nuclear industry issues in respect of instrumentation and control

Experiences of a Major End User <SIPI Presentation, London>

Ian Hitchin, Kemira

LOAD

1,2,3,4,5,

Organisational approaches to ‘profit thru loss control’; Ammonia and Nitric Acid plants; Safeguarding concepts; Historical methods and standards; Implementation of project for safety related automation – methodology and approach; Model solutions; Reporting of incidents; Developments of SIS Guidelines – Phases 1 – 5

Experiences of Implementing Aspects of IEC61508

Kevin Womack, Ciba

LOAD

3,4,5,6,7,8,9,14,

Case studies; Reactor shutdown systems; Changes in implementing 61508 – issues and resolutions; Philosophy on new plant design

External safety policy in the Netherlands <SIPI Presentation, The Hague>

Beau Bottelberghs, Ministry of Housing, Spatial Planning and Environment

LOAD

No cross references

Netherlands safety policy – legislation and regulations; Risk policy; Risk assessment – individual and societal risk; External safety; Environmental risk; Risk tolerability criteria; SEVESO II Directive

Failure Rate Data – The Inside Story <SIPI Presentation, Brussels>

Bud Adler, Moore Industries

LOAD

9,

Methods for determining failure rate data; MTBF Vs FMEDA; Issues and considerations around d software; Failure rate data and vendor claims; Fault tolerance and architectures; Organisational considerations

Failure Rate Data - Validity Insights - The Need for Certified Data Sets

Bud Adler, Moore Industries

LOAD

3,4,5,9,

Verification of safety instrumented function; Pfd calculations; FMEDA; Accredited certification to 61508; Certified data sets

Failure Rates - Analysis and Calculation as per IEC61508

M Al-Sayed and K Bingham, ACM Facility Safety

LOAD

3,4,5,7,9,13,

Failure rate data; Practical methodology and formula for off-shore approach; Extrapolating and calculating failure rates; Compliance with 61508; Sources of failure rate data; SIL determination, SIL validation

Fault Management Analysis

Angela Summers, SIS-Tech Solutions

LOAD

9,14,

Fault Management Analysis (FMA); Extrinsic safety systems – SIS; Fault management programmes; Macro-level FMEA; Fault Mngnt design strategies

Fault Tree Analysis and Failure Rate Calculations in Machinery

T Malm and J Hérard, VTT Industrial Systems

LOAD

9,

Failure rates for stochastic (random) hardware failures; Comparison of dangerous failure rates; Fault trees; Reliability calculations; Uncertainties in reliability calculations

Fehlerredundante Computerarchitektur zur Flugzeugsteuerung

Anton Gunzinger, Supercomputing Systems AG

LOAD

No direct 61508 references?

Supercomputing systems; Aircraft on-board safety systems; System architectures; Key features of redundant primary flight computer systems; Architectural considerations; Communications architectures; Approaches to failure mode analysis; Features of testing and verification

Final Element Testing - A Way Forward

Derek Essam, Drallim Industries

LOAD

6,7,13,14,

Final elements; Probability of failures; SIL; Safeguarding systems; Emergency isolation valves – signatures

Functional safety -  Safety instrumented systems for the process sector

Bill Black - Blacksafe Consulting

LOAD

3,4,5,6,9,14,

Scope and structure of 61511; Differences to 61508; Prior use requirements; Differences to ANSI/S84; Other process sector standards

Functional Safety and EMC

S J Brown and W Radasky

LOAD

blank
blank

Functional Safety in Electric Power Industry Sector

Zdzisław Żurakowski, Institute of Power Systems Automation, Poland

LOAD

1,2,3,4,5,9,

Hazards related to electric power systems; Hazard and risk identification; Power substation software interlocking case study; Safety issues around computer based systems for electric power systems; Assuring functional safety in electric power industry

Functional Safety in Electric Power Industry Sector <SIPI Presentation, Gdynia>

Zdzisław Żurakowski, Institute of Power Systems Automation

LOAD

No reference check web

blank

Functional safety of electrical, electronic and programmable electronic safety-related systems

Ron Bell, HSE

LOAD

blank
blank

Funkčná Bezpečnost' - Apel Bezpečnostného Inžinierstva

Jozef Vass, D-Ex Limited

LOAD

In Czech?

blank

Funktionale Sicherheit in der Prozess-Automatisierung

ABB

LOAD