Landingpage available in the following languages:
or select your TÜV Rheinland region / country website:
Functional Safety of Machinery - FS-Engineer - TÜV Rheinland

Functional Safety of Machinery

EFSTAS - TÜV Rheinland

EFSTAS is an accepted course provider for the training “Functional Safety of Machinery” of the TÜV Rheinland Functional Safety Training Program.

The FS Engineer (TÜV Rheinland) certificate demonstrates competency in the fundamentals of Functional Safety and provides a skill set that is transferable from one work situation to another. It enables staff to fulfill responsibilities and to perform activities to recognised standards of competence on a regular basis, in order to

  • reduce risks
  • satisfy legal and regulatory requirements
  • meet the organisation’s business objectives
  • enable the organisation to meet contractual commitments.

By understanding:

  • The principles and concepts of the internationally agreed safety related control system machinery standards IEC 62061, ISO 13849 including ISO 12100 and associated type A, B and C standards
  • Risk Analysis methods for the determination of necessary measures for the reduction of risks at machines.
  • The requirements of ISO 13849, application areas, restrictions regarding the applicability, software and documentation requirements, use of standard components in safety functions, proof of safety, verification and validation of safety functions. Examples for proof of FS according to ISO 13849-1.
  • The requirements of IEC 62061, application areas, lifecycle model and documentation requirements, terminology used in the standard, requirements regarding safety relevant application software, proof of safety, verification and validation of safety functions. Examples for proof of FS according to IEC 62061.
  • The selection and application of safety devices, their advantages and disadvantages, installation requirements and configuration requirements.
  • Safety functions of Machines, Start/re-start interlock, start functions, Emergency off, emergency switching off, stop categories muting and their realization according to the different safety categories.
  • Circuit and schematic requirements for connection of safety devices according to the different safety categories.
  • The technical information required on components including extracting reliability data from manufacturers certificates, reports.
  • SIL demonstration calculations such as average probability of dangerous failure per hour (PFH), safe failure fractions and hardware fault tolerance.
  • How to identify and calculate the impact of common cause failures (Beta factor) on the reliability of protective systems
  • Requirements for validation documentation to demonstrate that systems, (including application software and software and hardware integration) have been fully tested checked and approved.

Course Objectives

The course will equip participants with the knowledge for understanding and mastering the application, principles and requirements of the Functional safety of Machinery.

Successful participants, who also have sufficient functional safety experience, will achieve the prestigious FS Engineer (TÜV Rheinland) certificate in Machinery.

The course will provide three days of classroom tuition and practical guidance, mixed with practical exercises based on real life examples. Day four consists of a four-hour two-part proficiency examination with:

Part 1 = 70 multiple-choice questions

Part 2 = 12 open questions


Display all Hide all

Day 1

Will provide an introduction to the functional safety of machinery standards, the underpinning legislation and the concept of the functional safety lifecycle and competency. Participants will be introduced to the concepts of the international standards that cover this area of machinery risk assessment and risk reduction as well as risk assessment techniques and a selection of the more commonly applied protective devices used on machines.

The topics covered are:

  • Legal Regulations, Standards, Categories and Definitions
  • Overview of Standards
  • Characteristics of a Safety Function
  • Risk Assessment and Risk Reduction
  • Introduction to ISO 13849-1
  • Protective Equipment for Machinery
  • Safety Distances
  • Separating Safety Equipment - Guards
  • Interlocking and Guard Locking Devices
  • Position and Proximity Switches
  • Installation and Application
  • Pressure Sensitive Edges, Bars and Bumpers
  • Two-hand and Enabling Control Devices
  • Circuit Examples Interlocking Devices

Day 2

Further covers safety functions for machines and circuit design and introduces the detailed concepts in ISO 13849 including Failure Probability, diagnostics, common cause Performance Levels, software, systematic failures, Validation and worked examples to underpin the learning with respect to ISO 13849.

The topics covered are:

  • Electro Sensitive Protection Equipment
  • Pressure Sensitive Mats and Floors
  • Safety Related Functions
  • Power Drive Systems
  • Start and Restart
  • Hold to Run Control
  • Emergency Stop, Emergency Switching Off, Stop Categories
  • Muting and Muting Override
  • Circuit Design
  • Standards for Functional Safety of Machinery
    ISO 13849-1

  • Determination of Failure Probability
    • Relationship between Performance Level and SIL
    • Hardware Calculations
    • Diagnostic Measures
    • Common Cause Failure
    • Determination of Performance Level
    • Complete Safety Function
    • Special Cases
  • Software
  • Systematic Failures
  • Validation
  • Worked Examples - ISO 13849

Day 3

Further covers the worked examples from Day 2 and introduces the detailed concepts in IEC 62061 including Failure Probability, diagnostics, fault tolerance, safe failure fraction, common cause Performance Levels, software, systematic failures, Validation and worked examples to underpin the learning with respect to ISO 13849.

The topics covered are:

  • Worked Examples - ISO 13849
  • Standards for Functional Safety of Machinery
  • IEC 62061
    • Basic Standards and Sector / Application Standards
    • Functional Safety Management according to IEC 62061
    • Specification of the Safety Related Control Function (SRCF)
    • Information for use
    • Software
    • Electromagnetic Compatibility (EMC)
    • Fault Tolerance – Structural Requirements for Subsystems
    • Probability of a Dangerous Failure (PFH)

  • Procedure for the calculation of PFH
  • Common Cause Failure
  • Useful Lifetime and Diagnostic Test Interval
  • Proof Test Interval
  • Determine SIL for the complete Safety Function
    • Structured Design of a SRECS - Example
    • Worked Examples - IEC 62061
    • Exam Preparation

Day 4

A four (4) hour two part CLOSED BOOK competency examination compromising:

Part 1 = 70 multiple-choice questions;

Part 2 = 12 open questions.

The pass score criterion is 75%

Who Should Attend?

Control & Instrument, Electrical, Process, Mechanical, Rotating Machinery and Safety Engineers as well as Operating and Maintenance personnel who are involved in any of the Machinery lifecycle phases for functional safety for machines from risk assessment, design through to installation, testing, maintenance and operation of machines.

Participant eligibility requirements

In accordance with the TÜV Functional Safety Training Program:

  • A minimum of 3 years experience in the field of functional safety.
  • University degree
  • or equivalent engineering experience and responsibilities as certified by employer or engineering institution.