One SIF or two SIFs?
I would like to present a very common analytical scenario for discussion.
It's related to a hazardous scenario which requires us to cut off the flow of the process medium to a some part of the installation. This is achieved by shutting down the pump. However, the system comprises two pumps (A and B) where one is in operation and the other in a standby mode.
When verifying SIL, should we assume a single SIF with a 2oo2 configuration for the pump shutdown, or should we analyze two separate functions, each responsible for shutting down an individual pump?
0
2 comments
One SIF or two SIFs?
powered by
skool.com/roak-6055
Peer decision support for functional safety engineers. Premium: Decision Review Live, SILVerify, FSMS templates + guidance notes. $30 founding price.
Suggested communities
Powered by