Modification
We govern controlled change to the hardware, software and operating conditions of the safety instrumented system to IEC 61511 clause 17
What this element is and why it matters
Phase 7 governs every change to the safety instrumented system, whether that is a sensor replacement, a logic solver migration, a software update, a voting change, a setpoint adjustment or an operating mode change. To IEC 61511 clause 17 a modification must trigger a fresh hazard and risk assessment, a specification update, design verification and re validation as appropriate, and our team makes sure none of those steps are skipped.
Individual significance for organisations
Phase 7 prevents the silent degradation of safety integrity that drives most field failures of safety instrumented systems. Uncontrolled modifications collapse the safety integrity level claims and produce the familiar pattern of a system commissioned for SIL 2 that is actually operating at SIL 1.
Contribution to Functional Safety Lifecycle Implementation
Phase 7 re enters the earlier lifecycle phases according to the impact of the modification. It also integrates with your site management of change to paragraph l of OSHA PSM and with the pre startup safety review to paragraph i so that the modified system is re validated before it goes live.
What compliant execution looks like
How we implement this element
A focused six step methodology calibrated to deliver modification as a working capability rather than a documented compliance artefact.
We catalogue the change across component, logic, setpoint, voting and operating mode and align it with your site management of change procedure.
To clause 17.2 we assess the impact on the hazard and risk assessment, the specification, the design and validation and identify the lifecycle re entry point.
We re execute the affected phases, including revalidating the hazard and risk assessment if the hazard set changes, updating the specification, verifying the design and rerunning the factory and site acceptance tests and validation.
To IEC 62443 we verify that the modification introduces no new attack vectors and no zone violations.
We verify the function from end to end before live operation and document the evidence to clause 17.4.
We run the pre startup safety review to paragraph i of OSHA PSM to confirm readiness and secure site leadership sign off before highly hazardous chemicals are reintroduced.
Element implementation flow chart
A decision gated workflow that shows the actual sequence of activities from initiation through steady state operation, with key decision points highlighted.
What we produce
- A management of change pack with an impact assessment for each phase
- Re validation evidence for each modified function
- A pre startup safety review sign off record
- A determination record of replacement in kind versus modification
- An updated probability of failure calculation and a specification revision
- A cybersecurity re assessment to IEC 62443
Where execution fails
- A like for like change misclassified as a replacement in kind
- Cybersecurity not re assessed for digital changes
- A pre startup safety review closed before re validation is complete
- FMEDA data of a substitute device that is not equivalent to the original, with drift in safe failure fraction and dangerous undetected failure rate
Codes this element is built on
Explore related elements in this framework
Functional Safety Lifecycle Implementation full element index
Talk to us about implementing Modification
We can scope this element implementation against your facility, regulatory context, and existing management system maturity, then integrate it with the other Functional Safety Lifecycle Implementation elements you already operate.