The safety critical systems handbook a straightforward guide to functional safety: IEC 61508 (2010 edition), IEC 61511 (2016 edition) & related guidance, including machinery and other industrial sectors

The Safety Critical Systems Handbook: A Straightforward Guide to Functional Safety: IEC 61508 (2010 Edition), IEC 61511 (2016 Edition) & Related Guidance, Fourth Edition, presents the latest on the electrical, electronic, and programmable electronic systems that provide safety functions that gua...

Descripción completa

Detalles Bibliográficos
Otros Autores: Smith, David J., author (author), Simpson, Kenneth G. L., author
Formato: Libro electrónico
Idioma:Inglés
Publicado: Amsterdam, [Netherlands] : Butterworth-Heinemann 2016.
Edición:Fourth edition
Materias:
Ver en Biblioteca Universitat Ramon Llull:https://discovery.url.edu/permalink/34CSUC_URL/1im36ta/alma991009629883106719
Tabla de Contenidos:
  • Front Cover
  • The Safety Critical Systems Handbook
  • The Safety Critical Systems Handbook
  • Copyright
  • Contents
  • The relationship of the documents to IEC 61508
  • A Quick Overview
  • The 2010 Version of IEC 61508
  • Architectural Constraints (Chapter 3)
  • Security (Chapter 2)
  • Safety Specifications (Chapter 3)
  • Digital Communications (Chapter 3)
  • ASICs and Integrated Circuits (Chapters 3 and 4)
  • Safety Manual (Chapters 3 and 4)
  • Synthesis of Elements (Chapter 3)
  • Software Properties of Techniques (Chapter 4)
  • Element (Appendix 8)
  • The 2016 Version of IEC 61511
  • Acknowledgments
  • A - The Concept of Safety Integrity
  • 1 - The Meaning and Context of Safety Integrity Targets
  • 1.1 Risk and the Need for Safety Targets
  • 1.2 Quantitative and Qualitative Safety Target
  • 1.3 The Life-Cycle Approach
  • Section 7.1 of Part 1
  • Concept and scope [Part 1-7.2 and 7.3]
  • Hazard and risk analysis [Part 1-7.4]
  • Safety requirements and allocation [Part 1-7.5 and 7.6]
  • Plan operations and maintenance [Part 1-7.7]
  • Plan installation and commissioning [Part 1-7.9]
  • Plan the validation [Part 1d7.8]
  • The safety requirements specification [Part 1-7.10]
  • Design and build the system [Part 1-7.11 and 7.12]
  • Install and commission [Part 1-7.13]
  • Validate that the safety-systems meet the requirements [Part 1-7.14]
  • Operate, maintain, and repair [Part 1-7.15]
  • Control modifications [Part 1-7.16]
  • Disposal [Part 1-7.17]
  • Verification [Part 1-7.18]
  • Functional safety assessments [Part 1-8]
  • 1.4 Steps in the Assessment Process
  • Step 1. Establish Functional Safety Capability (i.e., Management)
  • Step 2. Establish a Risk Target
  • Step 3. Identify the Safety Related Function(s)
  • Step 4. Establish SILs for the Safety-Related Elements
  • Step 5. Quantitative Assessment of the Safety-Related System.
  • Step 6. Qualitative Assessment Against the Target SILs
  • Step 7. Establish ALARP
  • 1.5 Costs
  • 1.5.1 Costs of Applying the Standard
  • 1.5.2 Savings from Implementing the Standard
  • 1.5.3 Penalty Costs from Not Implementing the Standard
  • 1.6 The Seven Parts of IEC 61508
  • 1.7 HAZOP (Hazard and Operability Study)
  • 1.7.1 Objectives of a HAZOP
  • 1.7.2 HAZOP Study Team
  • 1.7.3 Typical Information Used in the HAZOP
  • 1.7.4 Typical HAZOP Worksheet Headings
  • Design Intent
  • Nodes
  • Parameter/Guidewords
  • Causes
  • Consequence
  • Safeguards
  • Action Required
  • 1.7.5 Risk Ranking
  • 1.7.6 Quantifying Risk
  • 2 - Meeting IEC 61508 Part 1
  • 2.1 Establishing Integrity Targets
  • 2.1.1 The Quantitative Approach
  • (a) Maximum Tolerable Risk
  • (b) Maximum tolerable failure rate
  • Example
  • On site
  • Off site
  • (c) Safety integrity levels (SILs)
  • Simple example (low demand)
  • Simple example (high demand)
  • More complex example
  • (d) Exercises
  • 2.1.2 Layer of Protection Analysis
  • 2.1.3 The Risk Graph Approach
  • 2.1.4 Safety Functions
  • 2.1.5 "Not Safety-Related"
  • 2.1.6 SIL 4
  • 2.1.7 Environment and Loss of Production
  • 2.1.8 Malevolence and Misuse
  • Paragraph 7.4.2.3 of Part 1 of the Standard
  • 2.2 "As Low as Reasonably Practicable"
  • 2.3 Functional Safety Management and Competence
  • 2.3.1 Functional Safety Capability Assessment
  • 2.3.2 Competency
  • (a) IET/BCS "Competency guidelines for safety-related systems practitioners"
  • (b) HSE document (2007) "Managing competence for safety-related systems"
  • Annex D of "Guide to the application of IEC 61511"
  • (d) Competency register
  • 2.3.3 Independence of the Assessment
  • 2.3.4 Hierarchy of Documents
  • 2.3.5 Conformance Demonstration Template
  • IEC 61508 Part 1
  • 2.4 Societal Risk
  • 2.4.1 Assess the Number of Potential Fatalities.
  • 2.4.2 It Is Now Necessary to Address the Maximum Tolerable Risk
  • 2.4.3 The Propagation to Fatality
  • 2.4.4 Scenarios with Both Societal and Individual Implications
  • 2.5 Example Involving Both Individual and Societal Risk
  • 2.5.1 Individual Risk Argument
  • 2.5.2 Societal Risk Argument
  • 2.5.3 Conclusion
  • 3 - Meeting IEC 61508 Part 2
  • 3.1 Organizing and Managing the Life Cycle
  • Sections 7.1 of the Standard: Table '1'
  • 3.2 Requirements Involving the Specification
  • Section 7.2 of the Standard: Table B1 (avoidance)
  • (a) The safety requirements specification
  • (b) Separation of functions
  • 3.3 Requirements for Design and Development
  • Section 7.4 of the Standard: Table B2 (avoidance)
  • 3.3.1 Features of the Design
  • Sections 7.4.1-7.4.11 excluding 7.4.4 and 7.4.5
  • 3.3.2 Architectures (i.e., SFF)
  • Section 7.4.4 Tables '2' and '3'
  • 3.3.3 Random Hardware Failures
  • Section 7.4.5
  • 3.4 Integration and Test (Referred to as Verification)
  • Section 7.5 and 7.9 of the Standard Table B3 (avoidance)
  • 3.5 Operations and Maintenance
  • Section 7.6 Table B4 (avoidance)
  • 3.6 Validation (Meaning Overall Acceptance Test and the Close Out of Actions)
  • Section 7.3 and 7.7: Table B5
  • 3.7 Safety Manuals
  • Section 7.4.9.3-7 and App D
  • 3.8 Modifications
  • Section 7.8
  • 3.9 Acquired Subsystems
  • 3.10 "Proven in Use" (Referred to as Route 2s in the Standard)
  • 3.11 ASICs and CPU Chips
  • (a) Digital ASICs and User Programmable ICs
  • Section 7.4.6.7 and Annex F of the Standard
  • (b) Digital ICs with On-Chip Redundancy (up to SIL 3)
  • Annex E of the Standard
  • 3.12 Conformance Demonstration Template
  • IEC 61508 Part 2
  • 4 - Meeting IEC 61508 Part 3
  • 4.1 Organizing and Managing the Software Engineering
  • 4.1.1 Section 7.1 and Annex G of the Standard Table "1"
  • 4.2 Requirements Involving the Specification.
  • 4.2.1 Section 7.2 of the Standard: Table A1
  • 4.3 Requirements for Design and Development
  • 4.3.1 Features of the Design and Architecture
  • Section 7.4.3 of the Standard: Table A2
  • 4.3.2 Detailed Design and Coding
  • Paragraphs 7.4.5, 7.4.6, Tables A4, B1, B5, B7, B9
  • 4.3.3 Programming Language and Support Tools
  • Paragraph 7.4.4, Table A3
  • 4.4 Integration and Test (Referred to as Verification)
  • 4.4.1 Software Module Testing and Integration
  • Paragraphs 7.4.7, 7.4.8, Tables A5, B2, B3, B6, B8
  • 4.4.2 Overall Integration Testing
  • Paragraph 7.5, Table A6
  • 4.5 Validation (Meaning Overall Acceptance Test and Close Out of Actions)
  • Paragraphs 7.3, 7.7, 7.9, Table A7
  • 4.6 Safety Manuals
  • (Annex D)
  • 4.7 Modifications
  • Paragraph 7.6, 7.8, Table A8 and B9
  • 4.8 Alternative Techniques and Procedures
  • 4.9 Data-Driven Systems
  • 4.9.1 Limited Variability Configuration, Limited Application Configurability
  • 4.9.2 Limited Variability Configuration, Full Application Configurability
  • 4.9.3 Limited Variability Programming, Limited Application Configurability
  • 4.9.4 Limited Variability Programming, Full Application Configurability
  • 4.10 Some Technical Comments
  • 4.10.1 Static Analysis
  • 4.10.2 Use of "Formal" Methods
  • 4.10.3 PLCs (Programmable Logic Controllers) and their Languages
  • 4.10.4 Software Reuse
  • 4.10.5 Software Metrics
  • 4.11 Conformance Demonstration Template
  • IEC 61508 Part 3
  • 5 - Reliability Modeling Techniques
  • 5.1 Failure Rate and Unavailability
  • 5.2 Creating a Reliability Model
  • 5.2.1 Block Diagram Analysis
  • 5.2.1.1 Basic equations
  • Allowing for revealed and unrevealed failures
  • Allowing for "large" values of λT
  • Effect of staggered proof test
  • Allowing for imperfect proof tests
  • Partial stroke testing
  • 5.2.2 Common Cause Failure (CCF)
  • (a) Categories of factors
  • (b) Scoring.
  • (c) Taking account of diagnostic coverage
  • (d) Subdividing the checklists according to the effect of diagnostics
  • (e) Establishing a model
  • (f) Nonlinearity
  • (g) Equipment type
  • (h) Calibration
  • 5.2.3 Fault Tree Analysis
  • 5.3 Taking Account of Auto Test
  • 5.4 Human Factors
  • 5.4.1 Addressing Human Factors
  • 5.4.2 Human Error Rates
  • "HEART" method
  • "TESEO" method
  • 5.4.3 A Rigorous Approach
  • 6 - Failure Rate and Mode Data
  • 6.1 Data Accuracy
  • 6.2 Sources of Data
  • 6.2.1 Electronic Failure Rates
  • 6.2.2 Other General Data Collections
  • 6.2.3 Some Older Sources
  • 6.2.4 Manufacturer's Data
  • 6.2.5 Anecdotal Data
  • 6.3 Data Ranges and Confidence Levels
  • 6.4 Conclusions
  • 7 - Demonstrating and Certifying Conformance
  • 7.1 Demonstrating Conformance
  • 7.2 The Current Framework for Certification
  • 7.3 Self-Certification (Including Some Independent Assessment)
  • 7.3.1 Showing Functional Safety Capability (FSM) as Part of the Quality Management System
  • 7.3.2 Application of IEC 61508 to Projects/Products
  • 7.3.3 Rigor of Assessment
  • 7.3.4 Independence
  • 7.4 Preparing for Assessment
  • 7.5 Summary
  • B - Specific Industry Sectors
  • 8 - Second Tier Documents-Process, Oil and Gas Industries
  • 8.1 IEC International Standard 61511: Functional Safety-Safety Instrumented Systems for the Process Industry Sector (Second Edition to be Published in 2016)
  • 8.1.1 Organizing and Managing the Life Cycle
  • 8.1.2 Requirements Involving the Specification
  • 8.1.3 Requirements for Design and Development
  • (a) Selection of components and subsystems
  • (b) Architecture (i.e., safe failure fraction)
  • (c) Predict the random hardware failures
  • (d) Software (referred to as "program")
  • (i) Requirements
  • (ii) Software library modules
  • (iii) Software design specification
  • (iv) Code
  • (v) Programming support tools.
  • 8.1.4 Integration and Test (Referred to as Verification).