2026-09-21 · KeXinMaterials Redaktionsteam

IEC 61508 SIL Funktionale Sicherheit + Schutzkoffer B2B-Compliance-Leitbeispiel

IEC 61508 "Funktionale Sicherheit sicherheitsbezogener elektrischer/elektronischer/elektronisch programmierbarer Systeme" ist der globale Standard für Sicherheitsbezogene Systeme (SIS). Definiert SIL 1-4 Stufen. Erforderlich für Prozessindustrie (Öl + Gas + Chemie + Energie + Pharma).

IEC 61508 Scope + Editions

IEC 61508 published by IEC. Functional safety for E/E/E/SSS. 7 parts. Critical for process industry SIL-rated systems.

IEC 61508: "Functional safety of electrical and electronic safety-related systems". Published by IEC. SC 65A (Industrial process measurement + control).

Edition history: Edition 1 (1998-2000), Edition 2 (2010). Current Edition 2.0 (2010) + amendments.

IEC 61508 parts: Part 1 (Framework, definitions, abbreviations), Part 2 (Requirements for E/E/PE systems), Part 3 (Software requirements), Part 4 (Definitions + abbreviations), Part 5 (Determination of SIL), Part 6 (Guidelines on application of Parts 2 + 3), Part 7 (Overview of techniques + measures).

IEC 61508 scope: E/E/E (Electrical / Electronic / Electronic Programmable) safety-related systems. Including sensors + logic solvers + actuators.

Functional safety: Part of overall safety relating to the equipment under control (EUC) + EUC control system. Depends on correct functioning of E/E/P systems.

Geographic adoption: Adopted as EN 61508 in EU. Influenced ISA 84 (US) + IEC 61511 (process industry specific).

Industry application: Process (oil + gas + chemicals + power + pharma + water + waste) + Nuclear (IEC 61513) + Machinery (IEC 62061 + ISO 13849-1) + Railway (EN 50126/50128/50129) + Automotive (ISO 26262) + Medical (IEC 62304 + IEC 60601).

IEC 61508 vs IEC 61511: IEC 61508 is generic functional safety. IEC 61511 (2003, rev 2016) is process industry specific application of IEC 61508.

SIL (Safety Integrity Level): Discrete level 1-4 corresponding to range of likelihood of dangerous failure. IEC 61508 Table 1 + 2.

B2B relevance: For B2B protective cases containing safety instrumented systems (sensors, controllers, actuators) for process industry, IEC 61508 / IEC 61511 SIL compliance is procurement requirement.

SIL 1-4 Levels + Risk Graph

SIL (Safety Integrity Level) 1-4 is risk reduction measure. Risk graph determines required SIL per hazard.

SIL 1: Low risk reduction. Probability of dangerous failure on demand >= 10^-2 to < 10^-1.

SIL 2: Medium risk reduction. Probability >= 10^-3 to < 10^-2.

SIL 3: High risk reduction. Probability >= 10^-4 to < 10^-3.

SIL 4: Very high risk reduction. Probability >= 10^-5 to < 10^-4.

Risk graph (IEC 61508 Part 5): (1) Severity of harm (S1 negligible, S2 serious, S3 very serious, S4 catastrophic). (2) Probability of harm (Fr rare, Pr probable, Fr frequent). (3) Possibility of avoidance (P0 possible, P1 not possible). (4) Occurrence rate (W0 never, W1 infrequent, W2 frequent).

Risk graph output: Required SIL (1, 2, 3, 4). Combines severity + probability + avoidance + occurrence rate.

High demand mode: System continuously in operation. Failure rate per hour. SIL 1 = 10^-6/h. SIL 2 = 10^-7/h. SIL 3 = 10^-8/h. SIL 4 = 10^-9/h.

Low demand mode: System activated on event (e.g., emergency shutdown). Probability of failure on demand. SIL 1-4 as above.

Continuous demand: Operation > 1 demand per year. As per IEC 61508 Table 2.

Safe failure fraction (SFF): Percentage of failures that are safe vs dangerous. SFF = lambda_S / (lambda_S + lambda_D) where lambda = failure rate.

Hardware fault tolerance (HFT): Number of faults that can be tolerated while maintaining safety. HFT 0 = no tolerance. HFT 1 = 1 fault. HFT 2 = 2 faults.

Type A (IEC 61508): Simple subsystems with well-defined failure modes. Type B: Complex subsystems with undefined failure modes.

Architectural constraints: Type A / B + SIL + SFF + HFT determines achievable SIL. IEC 61508 Table 2 + 3.

Hardware + Software + Systematic Capability

IEC 61508 covers hardware + software + systematic capability. All three required for SIL certification.

Hardware fault tolerance: HFT 0 for SIL 1, HFT 1 for SIL 2 (Type B), HFT 2 for SIL 3 (Type B). Redundancy (1oo2, 2oo3) for higher SIL.

Diagnostic coverage (DC): Percentage of dangerous failures detected by automatic diagnostics. DC0 (low) to DC4 (high). IEC 61508 Table 5.

Common cause failure (CCF): Failure that affects multiple channels. Mitigation: separation, diversity, common cause scores per IEC 61508 Part 6 Annex F.

Software SIL: IEC 61508 Part 3. Software development lifecycle requirements per SIL. V-model + verification + validation.

Software SIL levels: SIL 1 (basic), SIL 2 (basic + structured), SIL 3 (semi-formal + verification), SIL 4 (formal methods).

Systematic capability (SC): Capability of systematic measures to prevent systematic failures. SC 1-4 corresponds to SIL 1-4.

Software tools: Compiler + IDE + static analysis + unit test framework. Tool qualification per IEC 61508 Part 3 Section 7.4.

Software verification: Module test + integration test + system test. Independent verification for SIL 3-4.

Software validation: Functional safety demonstration. Real hardware + simulated environment.

Configuration management: IEC 61508 Part 8.1. Formal change control + version control + baseline management.

Operational procedures: IEC 61508 Part 5.1 + Annex A. Functional safety audit + proof test + competence management.

Documentation: IEC 61508 Part 2 + 3 + 4 require extensive documentation. Safety requirements specification (SRS) + safety design + verification + validation + operation + maintenance + decommissioning.

B2B recommendation: For safety-related protective cases, require IEC 61508 / IEC 61511 SIL declaration + hardware fault tolerance + software SIL + systematic capability + test report + audit certificate.

B2B Procurement Workflow + Test Lab

IEC 61508 SIL certification requires functional safety audit by accredited body. Test lab + certification workflow.

Functional Safety Engineer (FSE / FSC): Person certified for functional safety work. TUV FSE / CFSE / FS Engineer (IEC 61508).

Certifying bodies: TUV SUD / TUV NGB / TUV Rheinland / DEKRA / UL / SGS / Intertek. All accredited for IEC 61508.

Test lab: Functional Safety Assessment (FSA) by accredited body. Includes design review + code review + test verification + audit.

Cost: SIL 2 certification EUR 30,000-100,000. SIL 3 EUR 100,000-300,000. SIL 4 EUR 200,000-500,000.

Duration: SIL 2 certification 6-12 months. SIL 3-4 12-24 months.

IEC 61508-3 software tools: Compiler qualification, static analysis tools, requirements management tools, test tools.

B2B procurement workflow: (1) Define SIL requirement per risk assessment. (2) Specify IEC 61508 SIL compliance + IEC 61511 (process industry specific). (3) Verify supplier + components + software SIL. (4) Functional Safety Assessment by accredited body. (5) Operational SIL maintenance + proof test schedule.

Proof test: Periodic test to reveal dangerous undetected failures. Required for IEC 61508 SIL 1-4 with low demand mode. Frequency per safety manual.

Proof test coverage (PTC): Percentage of dangerous failures revealed by proof test. PTC > 90% required for SIL 3-4.

Operating mode: High demand (continuous) vs Low demand (event-based). Different probability calculations.

Common B2B mistakes: (1) Confusing SIL with product safety standard (CE / UL). (2) Missing systematic capability. (3) Missing proof test schedule. (4) Software SIL not covering all functions.

B2B recommendation: For safety-related protective cases, require IEC 61508 SIL 2+ (typical) + IEC 61511 (process industry) + functional safety audit by accredited body + proof test schedule + software documentation.

IEC 61508 Variant Standards by Sector

IEC 61508 is generic. Sectors have derived standards: IEC 61511 (process) + IEC 61513 (nuclear) + IEC 62061 + ISO 13849 (machinery) + EN 50126/50128/50129 (railway) + ISO 26262 (automotive) + IEC 62304 (medical) + ISO 21448 (home appliances).

IEC 61511: Process industry. Functional safety for process control. Applies IEC 61508 to process. Rev 2016 (originally 2003).

IEC 61513: Nuclear power plant. Safety systems for nuclear. Higher SIL requirements.

IEC 62061: Machinery. Functional safety of safety-related electrical control systems. ISO 13849-1 (PLa-PLe).

ISO 26262: Automotive. Functional safety for road vehicles. ASIL A-D. Replaces IEC 61508 for automotive.

IEC 62304: Medical device software. Software life cycle processes. Class A / B / C software safety classification.

EN 50126: Railway - Specification and demonstration of reliability, availability, maintainability and safety (RAMS).

EN 50128: Railway - Software for railway control and protection systems. SIL 0-4 software.

EN 50129: Railway - Safety-related electronic systems for signalling. SIL 1-4 hardware + software.

ISO 21448 (SOTIF): Automotive - Safety of the intended functionality. Autonomous driving + AI safety.

IEC 61784: Fieldbus safety communications. PROFIsafe / CIP Safety / CC-Link Safety / EtherCAT P.

B2B procurement per sector: Process industry = IEC 61511 (SIL). Railway = EN 50126/50128/50129. Medical = IEC 62304. Automotive = ISO 26262 (ASIL).

Common thread: All sectors derive from IEC 61508. Different safety levels (SIL vs ASIL vs PL). Similar lifecycle requirements.

B2B recommendation: For safety-related protective cases, identify sector (process/railway/medical/automotive) + sector-specific SIL standard + IEC 61508 base. Cross-reference requirements per sector.

FAQ

Verwandte Artikel

• Atex Iecex Explosion Proof Protective Case B2B Guide
• Iec 60079 31 Iec 61241 Dust Zone Explosion Proof Protective Case B2B Guide
• Nfpa 70E Electrical Safety Workplace Protective Case B2B Guide
• Iso 13485 Medical Device Qms Protective Case B2B Guide