Safety Instrumented FunctionSIF

A Safety Instrumented Function — SIF — is a single automatic safety loop that takes a process variable past its safe limit and shuts the process down to a safe state, without a human in the loop and without the basic process control system that runs the plant. A SIF is built from three elements — the sensor that detects the deviation, the logic solver that decides the action, and the final element that executes it, the shut-off valve or the breaker or the pump trip — and each SIF carries a Safety Integrity Level, the SIL, that says how much risk reduction the function has to deliver. The high-pressure shutdown, the emergency depressurisation, the burner-management trip, and the overfill shutdown are the archetypal SIFs on a process plant.

A SIF is a function, not a box — the function is what the loop has to do, and the Safety Instrumented System, the SIS, is the collection of hardware that implements the functions the hazard analysis said the plant needs. The standard is IEC 61511 for the process sector and IEC 61508 for the equipment vendor, and it governs the full lifecycle — the hazard and risk assessment that defines the SIF and its SIL, the design that meets the SIL, and the validation, the operation, and the proof testing that keeps the SIL over the life of the plant. The failure that undermines a SIF is the proof test that lapsed or the systematic failure the hardware-in-fault analysis missed, and the SIF that is bypassed for operations is the SIF that is absent when the excursion happens. See SIL, LOPA, and PSM.