Back to Services

SIL Verification
SIL Verification is the quantitative calculation performed to prove that a designed or installed Safety Instrumented Function (SIF) meets its target Safety Integrity Level (SIL), as determined during the SIL/LOPA Assessment. It is a core requirement of the functional safety lifecycle (IEC 61511). While SIL/LOPA specifies "how reliable it must be," SIL Verification answers, "does the proposed design actually achieve that reliability?"
Purpose:
The purpose of SIL Verification is to provide mathematical proof that the proposed architecture of a SIF—comprising its sensor(s), logic solver, and final element(s)—has a calculated Probability of Failure on Demand (PFDavg) and a Safe Failure Fraction (SFF) that satisfy the requirements of the target SIL. It ensures the SIF design is technically adequate before procurement and installation.
Methodology:
The verification uses reliability data and analytical models:
1. Define SIF Architecture: Detail the specific devices (make/model) in the sensor, logic solver, and final element subsystems, including redundancy (e.g., 1oo2, 2oo3 voting).
2. Gather Data: Obtain device failure rate data (λ), including dangerous (λd) and safe (λs) failures, from standards (e.g., IEC 61709, OREDA) or vendor certificates.
3. Calculate PFDavg: Use formulas (simplified or detailed) that account for the failure rates, voting architecture, proof test interval, and common cause failure (β factor). This is typically done using specialized software.
4. Calculate Safe Failure Fraction (SFF): SFF = (λs + λdd) / (λs + λd), where λdd are detected dangerous failures. This determines the maximum allowable hardware fault tolerance.
5. Compare to SIL Requirements: Check if the calculated PFDavg is less than the upper limit for the target SIL (e.g., < 0.01 for SIL 2) and that the architecture complies with the required hardware fault tolerance per IEC 61511.
Importance in the Process Industry:
SIL Verification closes the loop on functional safety design. It is the critical engineering check that turns a theoretical safety requirement (the target SIL) into a verified, real-world design. Without it, there is no assurance that the expensive safety instrumentation system will perform as needed when a demand occurs. It is a mandatory step for compliance with international standards and is often scrutinized by regulators and auditors. Performing SIL Verification prevents installing an under-performing SIF that could leave a dangerous risk uncovered, or an over-designed system that wastes capital.




