Functional safety

A safety-related function has a defined job, such as detecting a hazardous condition and bringing equipment to an appropriate state. Functional safety concerns the ability of the system to perform that job with the required integrity. The function must therefore be specified before a component’s rating becomes meaningful. IEC 61508 addresses electrical, electronic and programmable electronic safety-related systems in a general framework. It does not replace the hazard analysis that determines which functions are needed in a particular process or machine.

The framework is different from a stand-alone product performance test. It connects the safety function, development and implementation with the evidence needed through use and modification. A sector standard can adapt the general subject to an application with particular risks and operating arrangements. The IEC catalogue identity establishes the selected published reference. Detailed integrity calculations and lifecycle procedures are not reproduced here, and a family citation does not show that every relevant part was applied.

IEC 61508-1:2010, Edition 2.0, is a selected published reference. The catalogue also contains a 2026 pre-release record associated with development of Edition 3; a pre-release or forecast is not treated here as the issued replacement standard. Other parts and sector documents have separate identities and may be required for the technical work under review. The selected official records were checked on 19 October 2026, with dates limited to the granularity supported by the source.

In a protective shutdown arrangement, a sensor, logic element and final action work together. The system’s ability to respond depends on the specification, architecture, installation, diagnostics and maintenance assumptions. A component certificate may support one part of the evidence, but it cannot establish the integrity of every assembled arrangement. Changes in setpoints, bypasses or software can affect the original basis. The operating organization needs a traceable relationship between the function it relies on and the configuration actually in service.

HSE’s control systems material provides a regulator’s application context for safety-related systems. It does not make IEC 61508 a universal U.S. legal requirement or a certificate for all industrial equipment. The applicable sector rules, contracts and national legal duties require separate identification. A general integrity claim must also be distinguished from approval for a particular installation. The receiving authority or scheme determines the role it gives to the technical evidence.

Identify the hazardous event, required function, response conditions and system boundary. What assumptions connect the equipment to the claimed integrity? Are hardware and software configurations traceable to verification evidence? Do proof testing, maintenance and bypass arrangements match the basis of the claim? Can modifications be evaluated against the original function? An integrity label without these conditions can be misleading. The technical record needs to show how the complete arrangement, rather than only a purchased component, contributes to risk reduction.

Functional safety is application-dependent. The same device can contribute to different systems with different assumptions and consequences. A high integrity capability does not compensate for an incorrectly specified function, and a successful factory demonstration does not establish performance throughout service. This reference describes the evidence relationships and publication status without performing an integrity assessment. Selecting an appropriate architecture, evaluating reliability and assessing lifecycle conformity require the actual application, authorized technical documents and competent engineering analysis.

Machinery risk assessment helps identify the hazards and risk reduction needed before specifying a safety function. Electrical equipment of machines addresses the assembled machine context. Road vehicle functional safety demonstrates a sector-specific framework. These readings keep the function, system and application distinct; an integrity claim on a component does not answer every question about the complete protective arrangement.

The sources were checked on 19 October 2026. The published and pre-release identities are checked as catalogue metadata. HSE’s public control systems material provides a bounded regulator context; neither source authorizes NCQM to issue functional safety certificates or assign integrity levels. The explanation and examples are original. Public catalogue access is not treated as permission to republish the standard. A correction request can identify the document, disputed statement and supporting official evidence for review.