Functional Safety Engineering

SIL Verification (PFD / PFH Calculation)

IEC 61511 Cl.11 lifecycle verification — FMEDA-grade reliability data, PFD/PFH calculation, and FSA Stage 2 dossier

Technical overview

SIL Verification (PFD
/ PFH Calculation)

SIL verification is the engineering proof that an as-designed Safety Instrumented Function actually achieves the SIL allocated in the hazard study. The work begins where SIL allocation ends — receiving a SIL Allocation Register from the hazard-study team — and produces the probabilistic, architectural, and systematic-capability evidence that satisfies IEC 61511 Clause 11. Verification is fundamentally about three honest measurements: FMEDA-grade reliability data (λDD, λDU, SFF, DC) from TÜV / exida / SIRA certificates, PFDavg or PFH calculations per IEC 61508-6 Annex B with calibrated common-cause β-factor, and architectural-constraint check per Route 1H or 2H. The audit failures we see in industry cluster on optimistic β-factor scoring, partial-stroke-test coverage claims that exceed manufacturer guidance, and prior-use justifications without statistical evidence — each of which collapses under FSA Stage 2 examination.

SIL Verification (PFD / PFH Calculation) — Overview
Engineering process

SIL Verification (PFD / PFH Calculation) workflow

SIF Scope & Boundary Definition

Scope each Safety Instrumented Function from HAZOP/LOPA hazard scenarios; define SIF boundary — initiator(s), logic solver, final element(s); document operating context, demand mode (low / high / continuous), and pre-existing IPL credits.

Risk-Reduction Factor & SIL Target

Calculate required risk-reduction factor (RRF) per LOPA tolerable-frequency target; allocate SIL band per IEC 61511 Table 4 (SIL 1: RRF 10–100; SIL 2: 100–1000; SIL 3: 1000–10000; SIL 4: not used in process industry); document SIL allocation register.

FMEDA & Component Reliability Data

Compile component FMEDA data (λDD, λDU, SFF, DC) from exida / TÜV / SIRA certificates; validate prior-use justification per IEC 61511 Cl.11.5.3 where vendor FMEDA unavailable; verify architectural constraints (Route 1H / 2H).

PFD / PFH Verification Calculation

Calculate PFDavg (low-demand) or PFH (high-demand) per IEC 61508-6 Annex B; apply 1oo1, 1oo2, 2oo2, 2oo3 voting formulas; include common-cause β factor per IEC 61508-6 Annex D; compare against SIL band target.

Proof-Test Coverage & Interval Optimisation

Specify proof-test procedure with PTC (proof-test coverage) calculation; optimise proof-test interval to achieve SIL target while balancing operational disruption; specify partial-stroke test for SIL ≥2 SDV where applicable.

SIL Verification Report & FSA Readiness

Issue SIL verification report per IEC 61511 Cl.11; prepare FSA Stage 2 dossier (design validation); maintain SIL register with revalidation triggers (component change, demand-rate change, modification).

SIL Verification (PFD / PFH Calculation) — Scope
Scope of work

Every deliverable — from basis to handover

Complete SIL Verification (PFD / PFH Calculation) scope — every calculation, drawing, specification, and construction support activity.

SIF boundary verification against SIL Allocation Register and SRS
Component FMEDA data sourcing — λDD, λDU, SFF, DC from exida / TÜV / SIRA certificates
Prior-use justification per IEC 61511 Cl.11.5.3 where vendor FMEDA is unavailable
Architectural constraint check — Route 1H (HFT + SFF) vs Route 2H (Reliability data)
PFDavg (low-demand) or PFH (high-demand) calculation per IEC 61508-6 Annex B
Voting architecture treatment — 1oo1, 1oo1D, 1oo2, 2oo2, 2oo3 formulas with diagnostics
Common-cause β-factor calibration per IEC 61508-6 Annex D scoring (typical 1–10%)
Proof-test coverage (PTC) realism — accounting for unrevealed failure modes
Partial-stroke-test coverage credit per manufacturer guidance (typical 60–80%)
FSA Stage 2 dossier compilation with verification calculations, FMEDA pack, and design narrative
Engineering outcomes

Outcomes of SIL Verification (PFD / PFH Calculation)

SIL Target & SIF Integrity Calibration
  • Ensures each SIF achieves its target integrity
  • Identifies SIFs requiring upgrade
  • Reinforces demand-rate analysis
  • Supports proof-test interval optimisation
IEC 61511-1 SIL Determination Defence
  • Aligns with IEC 61511 lifecycle
  • Documents SIL verification per ISA TR84
  • Holds up under SIS audit
  • Supports regulator SIL claim defence
SIL Verification & Proof-Test Clarity
  • Optimises proof-test intervals
  • Strengthens SIS asset management
  • Identifies SIL claim weaknesses
  • Supports MOC for SIS modifications
SIL Over-Specification Prevention
  • Right-sizes SIL claim and SIF complexity
  • Avoids unnecessary 1oo2/2oo3 voting
  • Optimises proof-test schedule cost
  • Reduces insurance loadings on SIL claims
Get Started

Ready to start your project?

Speak with our team to scope an engagement tailored to your facility, regulatory context, and lifecycle stage.