Skip to content
HomeServicesFunctional Safety Engineering

Functional Safety Engineering

We take your safety instrumented functions through the complete SIL lifecycle, from determination and SIS design to IEC 61511 and IEC 61508 compliance, audits and proof test procedures, so that the layers your safety case relies on are verified and stay dependable across the life of your plant.

Strategic context

Why functional safety engineering matters

Functional Safety Engineering is the IEC 61511 and 61508 lifecycle discipline that proves a Safety Instrumented System actually achieves the SIL allocated to it. The work spans Phase 1 hazard analysis through Phase 16 decommissioning and covers SRS development, FMEDA grade component selection, PFD and PFH verification, architectural constraint checks, FAT and SAT, proof test programme design, Safety Manual authoring and the cybersecurity overlay per IEC 62443 that the 2016 edition of IEC 61511 made non negotiable. Our outputs withstand TÜV, exida, FSA Stage 2 and 3 and post incident regulator examination.

Functional Safety Engineering
Engagement model

How we deliver

A phased, evidence led delivery model that runs from discovery through close out and is built around your facility, regulatory context, and lifecycle stage.

SIL Allocation Hand off
We receive the SIL Allocation Register from your hazard study team and verify the SIF boundaries, demand mode classification and conditional modifier assumptions per IEC 61511 Clause 9.
SRS and Design Basis at Phase 5
We author the Safety Requirements Specification per IEC 61511 Clause 10, specify the architectural targets, redundancy and cybersecurity zone definition and align it with IEC 62443.
Architecture and Verification
We carry out FMEDA grade component selection, PFD and PFH calculation per IEC 61508 6, the architectural constraint check across Route 1H and 2H, beta factor scoring and voting design.
FAT, SAT and Commissioning
We exercise every SIF cause and effect, run end to end loop testing, author the Safety Manual per Clause 16 and prepare for FSA Stage 2 and 3 examination.
Operations, FSA and Proof Test
We set up the Phase 14 proof test programme, run FSA Stage 4 every three to five years, specify partial stroke testing, manage MOC for SIS modifications and maintain the cybersecurity lifecycle.
Outcomes & value

What this service delivers

  • A right sized SIS architecture that avoids the SIL 3 everywhere capex trap
  • FMEDA grade verification that holds up under FSA Stage 2 and 3 examination
  • Spurious trip frequency engineered into your MTTFS targets
  • A cybersecurity zone and conduit design that closes the IEC 62443 gap
  • A living Safety Manual that survives handover to the operating team
Why Arborion

Our differentiators

  • TÜV and exida certified Functional Safety Engineers holding CFSE and CFSP
  • Vendor agnostic SIS design across Triconex, HIMA, ABB, AB and Siemens
  • An integrated workflow that runs SIL into SRS into design into verification into FAT and SAT
  • Cyber aware SIS engineering per IEC 62443 rather than bolted on later

Standards we work to

IEC 61511 Ed.2 (2016) + Amd.1 (2017)IEC 61508 Parts 1 to 7 (2010)ISA 84.00.01 / TR84.00.02 / 03 / 04 / 07IEC 62443 (cyber for IACS, cross referenced from 61511 Cl.8.2.4)exida CFSE / TUV FSEng Body of KnowledgeCCPS Guidelines for SIS in Process IndustryOISD GDN 178 (Instrumented Safety)IEC 61511 Phase 1 to 16ANSI/ISA 84.91.01 2020 (Process Safety Critical Instrumentation)IEC 61511 Ed.2 Cl.11 (Verification)IEC 61508 6 Annex B (PFDavg / PFH) + Annex D (beta factor)ISA TR84.00.02 (SIL Verification Tools)exida CFSE Body of KnowledgeTUV Functional Safety Engineer Program

Industries we serve

  • Refineries and Petrochemicals
  • Oil and Gas across Upstream and Offshore
  • LNG, Cryogenic and Hydrogen
  • Specialty Chemicals and Pharma
  • Power and Fertilizer
  • Bulk Storage and Terminals

Frequently asked questions

What is functional safety engineering?

It is the IEC 61511 and IEC 61508 lifecycle discipline that proves a safety instrumented system actually achieves the SIL allocated to it. The work spans hazard analysis through decommissioning and covers Safety Requirements Specification development, component selection, PFD and PFH verification, architectural constraint checks, factory and site acceptance testing, proof test programme design and the cybersecurity overlay per IEC 62443 that the current edition of IEC 61511 made non negotiable.

Which standards govern the work?

We work to IEC 61511 Edition 2 with its 2017 amendment, IEC 61508 Parts 1 to 7, ISA 84.00.01 with the TR84 technical reports, and IEC 62443 for cybersecurity zones and conduits. Our engineers hold exida CFSE and TÜV FSEng competency credentials, and for India we also apply OISD GDN 178.

How does this differ from SIL allocation in a hazard study?

SIL allocation in a hazard study decides what target each safety function must meet, usually through LOPA. Functional safety engineering then proves that the designed system actually achieves that target through FMEDA grade component selection, PFD and PFH calculation and the architectural constraint check. We receive the SIL allocation register from your hazard study team and carry it through design, verification, factory and site acceptance testing and the proof test programme.

What deliverables do you provide?

You receive a Safety Requirements Specification per IEC 61511 Clause 10, a right sized SIS architecture that avoids the SIL 3 everywhere capex trap, FMEDA grade verification that holds up under functional safety assessment, spurious trip frequency engineered into your reliability targets, a cybersecurity zone and conduit design and a living Safety Manual with a proof test programme that survives handover to the operating team.

Which industries do you serve?

We serve refineries and petrochemicals, oil and gas across upstream and offshore, LNG, cryogenic and hydrogen, specialty chemicals and pharma, power and fertilizer, and bulk storage and terminals. Our SIS design is vendor agnostic across Triconex, HIMA, ABB, Allen Bradley and Siemens platforms.

Get in touch

Talk to us about functional safety engineering.

Connect with our team for a consultation scoped to your facility, regulatory context, and lifecycle stage.