8.10e-5 x 0.2 x 0.25 x 0.

05
689/914
 cost of loss = ICL x $

PLL = 22.8
fatality/event
tolerable risk = 10e-5
fatality/year

thus target mitigated

event likelihood is
tolerable risk / PLL
to achieve -> event/year

5.7x10e-5 event/year, is
total initiating
cause likelihood

PFD SIF is TMEL/IEL

loss cost = 2.5x10e6 * 7x10e-4 = 1750 usd/y

PFD = 0.1
ICL = 7x10e-4
TMEL
 Sensor response time + program delay (if any)
+ final element response time
SIF Time <= Process Safety Time

The standard mandates SRS to inform the maximum Mean Time to Fail Spurious
The standard recommends the use of diagnostic capability, comparison
diagnostic between device (SIS, BPCS) to avoid spurious

Proof test interval is important during SIL verification

as it affects the value of calculated achieved SIL of a SIF.

For example, specific SIF may require on-line testing device

to reduce the value of PTI, hence achieving the required SIL

HAZOP Report
PHA/LOPA Report
Cause & Effect Diagram
Operation & Maintenance Requirement
Lambda = 0.25/y
TI = 3y
PFD = 1-e^(-lambda.TI)
Fail -> paralel will be timed
Reliability -> paralel will be sum
7.1e-3 10 to 100
100 to 1000
1000 to 10.000

1e-1 to 1e-2 0.1 to 0.01

1e-2 to 1e-3 0.01 to 0.001
1e-3 to 1e-4 0.001 to 0.0001
ICL : 5.7x10e-5
PLL : 22.8
TMEL : 10e-5
Because we cannot
gauge from the
technical aspect
from available
information, whether
SIL2 is really
required or not
avoid certification requirement
question