A Safety Integrity Level (SIL) is a measure of how reliably a safety function (or safeguarding function) is performed. There are four levels, the highest level describing the most reliable operation of the safety function, i.e. with the lowest Probability of Failure on Demand. The following table applies to typical application in process industries (referred to as “demand mode” in IEC 61511):
Definitions of SIL levels
The Probability of Failure on Demand indicates the likelihood that a system does not perform the required safety function. For instance, the likelihood that a SIL-3 system does not shut down a process when required to is better than one in thousand or 0.1%. In other words, the availability of the safety function is better than 99.9%. Alternatively, it may help to think of a reduction in risk by a factor 1,000.
It is important to distinguish between the required SIL level and the realised SIL level. A required SIL level follows from an assessment of risks and hazards, for instance using a HAZOP or an FMEA. The required SIL level is determined independently for every safety function or safeguarding loop. Important considerations are the probability of a risk occurring and the impact of the risk, i.e. the severity. A Risk Assessment Matrix often proves useful when determining the desired SIL level of each safeguarding loop.
The realized SIL level of a loop, in contrast, is the actual SIL as it is realised in the field. It depends on:
• the transmitters used,
• the configuration of the transmiters (1oo1, 1oo2, 2oo3, …)
• barriers, isolators, fuses
• the logic solver or Safety Instrumented System
• the actuator(s): valves, valve positioners, circuit breakers, etc
• the configuration of the valves, for instance “single block” or “double block & bleed”
For each of the above components a Probability of Failure on Demand is required, after which the overall PFD for the loop, and the realised SIL level, can be calculated. We are experienced in performing these calculations and assessing the PFD of legacy (“brownfield”).