Safety & Protective Systems Glossary
Safety instrumented systems, SIL/SIF, ESD, HAZOP/LOPA, interlocks, burner management, and relief systems. 107 terms in this topic - each defined in plain English on its own page.
Safety systems exist for the day everything else fails. This topic defines the functional-safety framework (SIL, SIF, LOPA, proof testing) from IEC 61508/61511, the protective equipment it governs (ESD systems, interlocks, relief devices, burner management), and the analysis vocabulary (HAZOP, cause and effect, layers of protection) used to decide how much protection a process needs. These definitions describe concepts; they are not a substitute for a qualified functional-safety assessment.
107 Terms
What Is 1oo2 Voting?
How the one-out-of-two architecture lets either channel trip the process, favoring safety over spurious trips.
Read → GlossaryWhat Is 2oo2 Voting in a Safety System?
The two-channel scheme where both must agree to trip, minimizing spurious trips at the cost of safety availability.
Read → GlossaryWhat Is 2oo3 Voting?
How two-out-of-three majority voting balances safe trips against spurious trips in high-availability SIS design.
Read → GlossaryWhat Is ALARP?
Reducing risk until further reduction is grossly disproportionate to the benefit, and how it justifies adding a SIF.
Read → GlossaryWhat Is API 521?
The pressure-relieving and depressuring standard: relief scenarios, flare load sizing, and disposal system design.
Read → GlossaryWhat is an API 670 machinery protection voting trip?
Machinery trip using alert and danger setpoints, channel voting, and startup trip-multiply, feeding the unit shutdown.
Read → GlossaryWhat are architectural constraints in SIL verification?
The HFT and SFF lookup rule that caps the SIL a subsystem may claim regardless of its calculated PFD.
Read → GlossaryWhat is axial position thrust monitoring and shutdown?
Dual thrust probes watch rotor float against the bearing with alert and danger setpoints and a highly protective trip.
Read → GlossaryBarrier Cable Gland
An Ex-rated cable entry that seals around conductors to stop explosion propagation into flameproof enclosures.
Read → GlossaryBowtie Analysis
The barrier model with a top event at the center, threats and prevention barriers left, consequences and mitigation right.
Read → GlossaryBurner Management System (BMS)
The flame-safeguard system that enforces safe purge, light-off, and flame supervision and trips the fuel on any unsafe condition.
Read → GlossaryWhat Is a Cause and Effect Matrix?
The grid that maps every safety-system input to every required output action, encoding the shutdown logic on one page.
Read → GlossaryWhat Is a Chemigation Safety Interlock?
The mandated backflow chain and injection-to-irrigation interlock that a controller enforces and logs for compliance.
Read → GlossaryWhat Is Common Cause Failure?
Why redundant channels can fail together and the beta-factor model that puts a floor under voted reliability.
Read → GlossaryWhat Is a Conditional Modifier?
The ignition, occupancy, and time-at-risk factors that scale a LOPA scenario, and how they differ from protection layers.
Read → GlossaryWhat Is Demand Mode?
How demand rate splits safety functions into low-demand (PFD) and high or continuous demand (PFH) reliability math.
Read → GlossaryWhat Is a Detonation Arrestor?
A device that stops a supersonic flame front in vapor piping, distinct from a deflagration or flame arrestor.
Read → GlossaryDetonation vs Deflagration Flame Arrestor
Subsonic flame versus supersonic shock, and how run-up distance decides which arrestor you need.
Read → GlossaryWhat Is a Divide-by-Zero Guard in Calculated Tags?
How ratio and efficiency tags fail when the denominator hits zero, and the guard logic that keeps trends sane.
Read → GlossaryEmergency Shutdown (ESD)
The safety system that brings a facility to a safe state - isolating, de-energizing, and blowing down through hierarchical shutdown levels.
Read → GlossaryWhat Is an Emergency Stop (E-Stop)?
The red mushroom button and its hardwired fail-safe circuit that halts equipment on demand.
Read → GlossaryWhat Is an Escalation Factor?
The defeating conditions that erode a bowtie barrier, the controls that manage them, and the live signals that reveal decay.
Read → GlossaryWhat Are ESD Levels in an Oil and Gas Facility?
The layered shutdown hierarchy from unit trip to total facility shutdown, where each higher level pulls in all the lower ones.
Read → GlossaryWhat Is an ESD Trip and Reset?
The cause-and-effect trip, first-out latching of the initiating cause, and the permissives required before reset.
Read → GlossaryWhat is fault reaction time in a safety instrumented system?
The specified time an SIS has to reach a safe state after detecting a fault, and why exceeding it voids the safety claim.
Read → GlossaryWhat Is Fault Tree Analysis (FTA)?
The top-down deductive method that traces an undesired top event through AND/OR gates to its root causes.
Read → GlossaryFire and Gas System (F&G)
The detection system that senses fires and gas releases with flame, smoke, and gas detectors, then alarms, mitigates, and can trigger ESD.
Read → GlossaryWhat is a FIT rate (failures in time)?
Failures per billion device-hours, how it relates to lambda and MTBF, and how component FIT rates roll up.
Read → GlossaryWhat Is a Flame Arrestor?
The metal-matrix element that quenches a flame front on tank vents to protect the vapor space.
Read → GlossaryWhat is flame failure response time (FFRT) and how is it set?
The capped time from flame loss to fuel shutoff, what counts toward it, and how it is verified at commissioning.
Read → GlossaryWhat Is a Flame Photometric Detector (FPD)?
A GC detector that burns eluent in a hydrogen-rich flame and reads the light sulfur or phosphorus emit, for selective detection.
Read → GlossaryWhat is flame rectification and how does a flame rod prove flame?
How a flame rectifies AC sensing voltage into a DC microamp signal that proves flame and rejects shorts.
Read → GlossaryFunctional Safety
The discipline, defined by IEC 61508 and 61511, of designing safety functions to detect hazards and act reliably across a full safety lifecycle.
Read → GlossaryWhat is a functional safety assessment (FSA)?
The formal independent judgement, at defined lifecycle stages, that a SIS meets its requirements.
Read → GlossaryWhat Is a Fusible Plug Fire Shutdown?
A meltable plug or pressurized fire loop that trips the ESD and closes the safety valve in a fire.
Read → GlossaryWhat is a gas cabinet purge cycle?
Automated evacuate-and-backfill sequence that clears moisture and residual gas from a fab panel at cylinder changeout.
Read → GlossaryWhat is geographic vs scenario coverage in fire and gas mapping?
The two coverage philosophies in F&G mapping: watching a volume vs catching credible leak scenarios.
Read → GlossaryWhat Is a Guard Band in Instrument Conformance?
Why a lab shrinks the pass/fail limit inward by the uncertainty to control false accepts and false rejects.
Read → GlossaryWhat Is Hardware Fault Tolerance?
The number of faults a subsystem tolerates, and how HFT plus SFF sets the maximum claimable SIL.
Read → GlossaryHAZOP Guide Words and Deviations
How No, More, Less, Reverse and the other guide words combine with parameters to generate deviations like reverse flow.
Read → GlossaryHAZOP Node
How a P&ID is divided into study nodes with a defined design intent, and why node boundaries make or break a HAZOP.
Read → GlossaryHAZOP Study
The team-based process hazard analysis that walks a P&ID node by node to find deviations, causes, and safeguards.
Read → GlossaryHigh Integrity Pressure Protection System (HIPPS)
A SIL 3 safety system that isolates the pressure source with fast-closing valves before downstream equipment can be over-pressured.
Read → GlossaryWhat Is a High-High Level Shutdown?
The LSHH trip that automatically closes the inlet or stops the pump above the high alarm to prevent overfill.
Read → GlossaryWhat is hot surface ignition vs direct spark ignition?
A heated silicon-nitride element vs a high-voltage arc: reliability, warm-up, and how the BMS proves each igniter.
Read → GlossaryWhat Is IEC 61508?
The umbrella functional-safety standard for E/E/PE systems, defining SIL, the safety lifecycle, and systematic capability.
Read → GlossaryIEC 61508 parts 1 to 7 mapped
All seven parts explained by status, the normative hardware and software requirements versus the informative guidance and technique catalogs.
Read → GlossaryHow IEC 61508 determines a device SIL
The three inputs the standard combines, architectural constraint, random failure, and systematic capability, and how the lowest one caps the claimed SIL.
Read → GlossaryIEC 61508 vs IEC 61511: which applies to you?
The generic base standard versus the process-sector standard, who each is written for, and how they stack on a real SIS project.
Read → GlossaryIEC 61511 lifecycle phases, phase by phase
The safety lifecycle in execution order, from hazard analysis and SRS through design, validation, operation, and decommissioning, with each phase's output.
Read → GlossaryIEC 62061 vs IEC 61511: machinery or process
How the machinery standard and the process standard divide the work, which safety functions belong to each, and how both coexist on one site.
Read → GlossaryIn-Line vs End-of-Line Flame Arrestor
Open-vent arrestor versus piped-header arrestor: what each protects and how to install it.
Read → GlossaryWhat Is an Independent Protection Layer (IPL)?
What qualifies a safeguard as an IPL - independence, effectiveness, auditability - and how it earns credit.
Read → GlossaryWhat Is an Initiating Event?
The cause that starts a hazard scenario and its frequency, the left-hand entry to LOPA math, and how history refines it.
Read → GlossaryWhat Is an Interlock?
The safety and process logic that blocks or forces an action, permissives vs trips, and how interlocks relate to ESD systems.
Read → GlossaryWhat is an interlock bypass and override?
A deliberate, time-limited, annunciated bit that inhibits a protection. A forgotten bypass is a classic incident cause.
Read → GlossaryWhat Is an Intrinsically Safe Barrier?
The Zener or galvanic device that limits energy into hazardous areas so a signal cannot ignite gas.
Read → GlossaryWhat Is ISA-84?
The U.S. safety instrumented systems standard, adopting IEC 61511 and carrying regulatory weight for SIF and SIS design.
Read → GlossaryISA-84 vs IEC 61511: which do you cite?
Same technical content adopted from IEC 61511; the real difference is the U.S. grandfather clause and which name your jurisdiction recognizes.
Read → GlossaryWhat Is a Logic Solver?
The certified decision-making middle of a safety function that reads sensors and commands final elements.
Read → GlossaryWhat Is LOPA?
The semi-quantitative method that counts protection layers to assign a target SIL between HAZOP and design.
Read → GlossaryWhat Is a Manual ESD Pushbutton Station?
The hardwired station that lets an operator force a facility shutdown independent of the logic solver.
Read → GlossaryWhat are mission time and useful life for a SIF?
Why SIL math assumes a constant failure rate, and how useful life bounds when that assumption holds.
Read → GlossaryWhat Is MooN Voting Logic?
The M-out-of-N framework that unifies 1oo1, 2oo2, 1oo2, and 2oo3 and the trade-off behind choosing M and N.
Read → GlossaryWhat is the difference between permissive and blocking teleprotection schemes?
POTT and PUTT send a trip permit while DCB sends a hold-off, trading security against dependability.
Read → GlossaryHow is PFDavg calculated for a safety instrumented function?
The 1oo1 formula, how architecture and proof-test interval change it, and summing subsystems to check the SIL.
Read → GlossaryWhat is PFH (probability of failure per hour)?
The safety metric for high-demand and continuous-mode functions, a failure frequency with its own SIL bands.
Read → GlossaryWhat Is a Pilot-Operated Relief Valve?
The relief valve that uses process pressure through a pilot to seal tighter near set point and pass high flow.
Read → GlossaryWhat Is a Pre-Startup Safety Review?
The final documented readiness check before restarting a facility or introducing hazardous material.
Read → GlossaryWhat Is a Pressure-Vacuum Relief Valve?
The tank breather valve that vents overpressure and breaks vacuum - set points, emissions, and why it matters - explained.
Read → GlossaryWhat Is Probability of Failure on Demand (PFD)?
What PFDavg measures, how it maps to SIL bands and the risk reduction factor, and why proof testing matters.
Read → GlossaryWhat is the difference between a process interlock and a permissive?
A permissive gates the start, checked once; an interlock guards the run, checked continuously.
Read → GlossaryPROFIsafe
Safety I/O over standard PROFINET or PROFIBUS using a black-channel safety layer.
Read → GlossaryWhat Is a Proof Test?
The periodic full-function test that reveals dangerous undetected failures and resets a safety function's accumulated PFD.
Read → GlossaryWhat Is Proof Test Coverage?
The fraction of dangerous failures a proof test actually catches, and how imperfect coverage inflates real PFD.
Read → GlossaryHow do you optimize a proof-test interval?
Finding the longest test interval that still meets the target SIL, balancing integrity against cost and trips.
Read → GlossaryWhat Is Relief Valve Sizing?
How the governing overpressure scenario - fire, blocked outlet, valve failure - sets the required relief rate.
Read → GlossaryWhat Is a Pressure Relief Valve?
The self-acting spring valve that vents overpressure to protect equipment.
Read → GlossaryWhat Is Accumulation and Overpressure?
The pressure above MAWP a relief device may reach while relieving, the 10, 16, and 21 percent limits, and why they drive capacity.
Read → GlossaryWhat Is Relief Valve Back Pressure?
Built-up vs superimposed back pressure, how flare-header pressure shifts set pressure, and why bellows valves are used.
Read → GlossaryWhat is a risk reduction factor (RRF)?
The inverse of PFDavg engineers actually talk in, its SIL bands, and how it links LOPA to SIL verification.
Read → GlossaryWhat is the difference between Route 1H and Route 2H?
The two IEC 61508:2010 methods for meeting architectural constraints, and how each drives redundancy.
Read → GlossaryWhat Is a Rupture Disc?
The non-reclosing single-use membrane that bursts at a set pressure and pairs with or replaces a relief valve.
Read → GlossaryWhat Is Safe Failure Fraction?
The metric that combines with hardware fault tolerance to cap the SIL a subsystem can claim.
Read → GlossaryWhat Is a Safe Operating Limit?
The OSHA PSM requirement to document each process's limits and the consequences of deviation, and how they alarm.
Read → GlossaryWhat Is a Safe State?
The condition a safety function drives the process to, and the de-energize vs energize-to-trip fail-safe choice.
Read → GlossaryWhat Is a Safety Barrier?
Prevention versus mitigation barriers, what qualifies as a real barrier, and how barrier health is tracked live.
Read → GlossaryWhat Is a Safety Instrumented Function (SIF)?
One sensor-to-final-element loop with its own SIL, and how it differs from the SIS it lives inside.
Read → GlossarySafety Instrumented System (SIS)
An independent layer of sensors, a safety logic solver, and shutdown valves that drives a process to a safe state under IEC 61511.
Read → GlossarySafety Integrity Level (SIL)
A SIL 1 to SIL 4 rating that quantifies how reliable a safety function must be, defined by its probability of failure on demand.
Read → GlossaryWhat Is the Safety Lifecycle?
The analysis, realization, and operation framework that ties SRS, LOPA, verification, and proof testing together.
Read → GlossaryWhat Is a Safety Requirements Specification?
The design contract of a SIS: each function's target SIL, safe state, response time, and process conditions.
Read → GlossaryWhat is safety validation for a SIS?
The end-to-end sensor-to-final-element test of a SIS against its SRS and cause-and-effect matrix.
Read → GlossaryWhat is a self-checking UV flame scanner and why is it required?
How shutter or pulse self-check proves a UV tube can still see darkness on continuous and single-burner duty.
Read → GlossaryWhat Is Set Pressure & Blowdown?
Where a relief valve opens, how far pressure falls before it reseats, and why too-small blowdown causes chatter.
Read → GlossaryWhat is a ship/shore ESD link?
Two-way emergency-shutdown link letting the vessel or terminal trip a transfer, closing the arm ESD valve and stopping pumps.
Read → GlossaryWhat Is a Shutdown Valve (SDV)?
The on/off isolation final element that closes tightly on a trip, distinct from a control valve and a fail-open blowdown valve.
Read → GlossaryWhat Is SIL Allocation?
The front-end step that assigns required risk reduction to each safety function to set its target SIL from LOPA.
Read → GlossaryWhat Is SIL Verification for a Safety Loop?
The loop-level roll-up that proves a sensor, logic solver, and final element together achieve the target SIL.
Read → GlossaryWhat Is a Spurious Trip?
The unwanted safe shutdown from a safe failure, and how voting trades it against the risk of missing a real trip.
Read → GlossaryWhat Is Spurious Trip Rate?
The frequency of nuisance trips, how safe-failure rates and voting drive it, and its cost to production availability.
Read → GlossaryWhat is a startup permissive string?
The series chain of every condition needed to start, shown as a ready-to-start light with a not-met reason.
Read → GlossaryWhat Is a Thermal Relief Valve?
The small relief valve that protects blocked-in liquid-full lines from thermal expansion overpressure.
Read → GlossaryWhat is a trial for ignition (TFI) period on a burner?
The fixed timed window in which a burner tries to light and prove flame before the safeguard trips fuel.
Read → GlossaryWhat is voting degradation on diagnostic fault detection?
How a logic solver revotes from 2oo3 to 1oo2 to 1oo1 when diagnostics find a channel fault, keeping protection available.
Read → GlossaryWhat Is Burner Management on a Wellsite Heater?
The safety controller that purges, proves flame, and cuts fuel on flameout to prevent an unburned-gas hazard.
Read → GlossaryWhat Is a Zener Barrier?
How shunt Zeners clamp voltage and a series resistor limits current, and why it needs a high-integrity IS ground.
Read →Automation services
Need help turning this into a working system?
Merobix integrates SCADA, programs Allen-Bradley and Siemens PLCs, and designs and fabricates industrial control panels.
Meeting requests are reviewed before confirmation.