scope:

This part of IEC TRxxxxx is applicable, where a risk assessment according to ISO 12100 has been conducted for a machine or process plant and where a safety related control function has been selected for implementation as a protective measure against specified hazards. For the given case, this Technical Report describes the basic logical rationale which is followed to assign a safety integrity requirement to the selected function. The description is generic and as far as reasonably possible independent from any specific tool or method that may be used for assignment of a safety integrity requirement. The requirement may be expressed as a safety integrity level SIL, or performance level PL, The basic rationale is described that is embodied by such methods and tools, as far as they follow a risk based quantitative approach. Conversely, the logic described in this technical report can be used as a reference for assessing specific methods or tools for safety integrity assignment. This can clarify how far the respective tool/method is following a risk based quantitative approach, and where deviations from that approach are imposed by other considerations. In real applications, the quantitative risk based approach is modified or overridden by other considerations in many cases and for good reasons. It is not in the scope of this technical report to discuss or evaluate such reasons. The means shall be provided, to identify deviations of a given tool or method from a quantitative logic, so that this can be discussed in the proper frame. Examples for such analyses are provided for common assignment tools in the format of risk graphs and risk matrices. This Technical Report is applicable to safety related control functions in all modes of application: continuous mode, high demand mode and low demand mode of application.