Download document () of 20
Eaton: Difference between performance level (PL) and safety integrity level (SIL) , Unterschied zwischen Performance Level (PL) und Safety Integrity Level (SIL)

Both ISO 13849-1 and IEC 62061 play a decisive role in terms of the functional safety (FuSa) of a machine or facility. Both standards deal in detail with the description of technical safety functions and their implementation. One standard uses Performance Level (PL) to describe technical safety performance; the other standard uses Safety Integrity Level (SIL). This blog post looks at the differences between the two parameters and shows how one can overlap with the other.

Get our functional safety manual

Why are there two parameters?

Basically, there are different industries involved in the standardisation of functional safety: classic series machine building and plant building, which is used in fields such as the chemical and process industries. Topics such as risk assessment, hazard analysis and evaluation methods are very important for both approaches.

Performance Level (PL)

In machine building, this refers to manageable units on which life safety systems are frequently used. ISO 13849-1 was developed with this context in mind. The standard takes into account the machinery directive and considers safety functions from both a qualitative and quantitative perspective. To classify various technical safety performance capabilities, it defines five Performance Levels (PL a, b, c, d, e), representing the average probability of dangerous failure per hour (PFH). ISO 13849-1 specifies an iterative process for designing and validating the safety-related parts of a control system (SRP/CS).

Safety Integrity Level (SIL)

The chemical industry was the driving force behind basic safety standard IEC 61508. As a result, the focus was on basing safety statements on how likely the reliable response to the function requirements is to occur, should a safe response be required. In terms of architecture, chemical and process-technical facilities tend to be large and complex. The life safety systems here are designed to rarely have to take action. The term SIL (SIL 1, 2, 3, 4) is derived from IEC 61508. IEC 62061 also defines the SIL claim limit, and describes the iterative process for determining and validating the SIL of safety-related electrical, electronic and programmable control systems (SRECS).

icon_Linkedin_colored_256x256.png

Follow #EatonMachine on LinkedIn

Get every important blog post or new information Eaton publishes for machine and system builders. 

When does ISO 13849-1 apply and when does IEC 62061 apply?

At first glance, both standards seem to apply to the same application areas. However, they must be applied appropriately depending on the technology, risk assessment and architecture. The table below compares the two safety standards ISO 13849-1 (works with PL) and IEC 62061 (works with SIL). 

eaton-blog-functional-safety-of-machines-comparison-norms-en-us.jpg
Comparing ISO 13849-1 and IEC 62061 - two standards for seemingly identical applications

Note that IEC 62061 does not contain any requirements for the performance of non-electrical, safety-related control elements (hydraulics, pneumatics and mechanics). Refer to ISO 13849-1 for these.

The manufacturers of safety-relevant components provide corresponding safety-related characteristics for determining the SIL and PL. The Eaton safety manual provides detailed information as well as useful example circuits and calculations for both parameters.

How can PL overlap with SIL and vice versa?

The two parameters overlap in one place. This is the MTTFd when calculating the Performance Level and the PFHd for the Safety Integrity Level. MTTFd represents the mean time to dangerous failure, while PFHd represents the probability of a dangerous failure per hour. If this value is compared to the safety parameters, the various PL levels can be compared with the SIL levels, allowing one parameter to be converted into the other. 

The engineer determines the machine’s required PL during their risk assessment with the help of the risk graph provided in ISO 13849-1, and verifies that the SRP/CS meet the required PL by performing the necessary calculations. The PL can subsequently be converted into a SIL value using the table above.

PL

Mean probability of a critical outage [1/h]

SIL

a

≥ 10-5 to < 10-4

-

b

≥ 3 x 10-6 to < 10-5

1

c

≥ 10-6 to < 3 x 10-6

1

d

≥ 10-7 to < 10-6

2

e

≥ 10-8 to < 10-7

3

With that in mind, note that although IEC 61508 defines four safety integrity levels, general machine building applications require at most SIL 3. SIL 4 is only required in very specific, highly critical applications that pose a high risk of damage or a high potential risk of personal injury. These include the fly-by-wire or steer-by-wire systems in aircraft and vehicles, for example.

The bottom line

Both PL and SIL have their merits in terms of safety and are important building blocks on the way to creating safe machines and facilities, and therefore functional safety. The fact that there are two parameters for assessing the technical safety performance of systems is primarily down to historical reasons. As a result, the standards are comparable and can even be 'converted' to each other. Basically, engineers can use either the ISO 13849-1 or IEC 62061 approach for purely electrical, electronic and programmable electronic (E/E/PE) systems, and therefore have the choice of using PL or SIL. SIL is particularly well-suited to large, complex facilities or factories with multiple machines, while PL is more suitable for individual machines. 

Learn more about functional safety for machinery

The safety manual uses example circuits to show how functional safety can be implemented with electrical, electronic and programmable components and systems in safety applications. It shows how different safety levels (SIL or PL) can be achieved. International import standards EN ISO 13849-1 and IEC 62061 for the safety of machines and systems are explained with practical examples.

Related posts