<Appendix1. Safety Instrumented Systems Installation>
A1-3
IM 01E30D01-01EN
A1.2.9 Reliability Data
A detailed Failure Mode, Effects, and Diagnostics
Analysis (FMEDA) report is available from
Yokogawa with all failure rates and failure modes.
TheAXRiscertieduptoSIL2foruseinasimplex
(1oo1)conguration,dependingonthePFDavg
respectively PFH calculation of the entire Safety
Instrumented Function.
ThedevelopmentprocessoftheAXRiscertiedup
to SIL3, allowing redundant use of the transmitter
up to this Safety Integrity Level, depending the
PFDavg respectively PFH calculation of the entire
Safety Instrumented Function.
When using the transmitter in a redundant
conguration,theuseofacommoncausefactor
(β-factor)of5%issuggested.Iftheowner-operator
of the plant would institute common cause failure
training and more detailed maintenance procedures
for avoiding common cause failure, a beta factor of
2% would be applicable.
For details, refer to the FMEDA No. YOK 10/06-091
R001 V2R3.
A1.2.10 Lifetime Limits
TheexpectedlifetimeoftheAXRis10years.The
reliability data listed the FMEDA report is only valid
forthisperiod.ThefailureratesoftheAXRmay
increase sometime after this period. Reliability
calculations based on the data listed in the FMEDA
reportforAXRlifetimesbeyond10yearsmayyield
results that are too optimistic, i.e. the calculated
Safety Integrity Level will not be achieved.
For details, refer to the FMEDA No. YOK 10/06-091
R001 V2R3.
A1.2.11 Environmental Limits
TheenvironmentallimitsoftheAXRarespeciedin
this manual.
A1.2.12 Application Limits
TheapplicationlimitsoftheAXRarespeciedin
thismanual.Iftheowmeterisusedoutsideof
the application limits, the reliability data listed in
Subsection A1.2.9 becomes invalid.
A1.3 Denitionsand
Abbreviations
A1.3.1 Denitions
Safety Freedom from unacceptable
risk of harm
Functional Safety The ability of a system to carry
out the actions necessary
to achieve or to maintain a
denedsafestateforthe
equipment/machinery/plant/
apparatus under control of the
system
Basic Safety The equipment must be
designed and manufactured
such that it protects against
risk of damage to persons
by electrical shock and other
hazards and against resulting
reandexplosion.The
protection must be effective
under all conditions of the
nominal operation and under
single fault condition
Verication Thedemonstrationforeach
phase of the life-cycle that the
(output) deliverables of the
phase meet the objectives
andrequirementsspeciedby
the inputs to the phase. The
vericationisusuallyexecuted
by analysis and/or testing
Validation The demonstration that the
safety-related system(s) or
the combination of safety-
related system(s) and external
risk reduction facilities meet,
in all respects, the Safety
RequirementsSpecication.
The validation is usually
executed by testing
Safety Assessment The investigation to arrive at a
judgment -based on evidence-
of the safety achieved by
safety-related systems
Furtherdenitionsoftermsusedforsafety
techniques and measures and the description of
safety related systems are given in IEC 61508-4.