Does everyone conduct a risk analysis before designing a SIS?
Thread Content
I would like to discuss an issue with everyone: does domestic SIS currently conduct risk analysis prior to design to determine its required SIL? Are there evaluation calculations after the design? Should it still be designed based on experience? ? ? Are there redundancies for sensors and actuators? What is the typical SIL rating for logic controllers? ?
Our SIS is the same as the upstream system; it’s not as complicated as you say. If it’s available in their software package, then I want it; if not, I don’t need it. When communicating with manufacturers, they usually emphasize what SIL level their product has; generally, SIL3 is the level used. Sensor redundancy? Is choosing between three vibration options to exit the vehicle considered redundant? Or do two thermal resistors (with transmitters) count as redundancy? Is it related to SIL? !
My experience tells me that 99% of the time, no evaluation or analysis is done. Hehe, such are the national conditions
Hehe, in theory, implementing SIS should be quite complicated, but in China things are simplified. What you’re describing is sensor redundancy; it seems that the design approach used in China isn’t rigorous enough – there’s no proper assessment of how to determine the structure or select the appropriate system. Even if a SIL3 system is chosen, the lack of redundancy in sensors and actuators still doesn’t guarantee the safety integrity of the circuit. Moreover, currently, SIL-rated circuits aren’t necessary in most cases; only critical circuits require such ratings, while ordinary circuits can suffice with SIL1 or SIL2.
I completely agree, but I’m not sure whether this situation will change in the future with the introduction of GB20438 and 21109
Reply to 5# licia: It seems you are also working in functional safety
Who has GB20438 in electronic format? Please share it