Landingpage available in the following languages:
or select your TÜV Rheinland region / country website:
Safety Instrumented Systems - TÜV Rheinland

Safety Instrumented Systems

C&C Technical Support Services

This 4 day FS Engineer (TÜV Rheinland) SIS course is run in accordance with the TÜV Rheinland Functional Safety Training Program and comprises three days of classroom tuition and practical guidance, for understanding and mastering the application, principles and requirements of IEC 61508 / IEC 61511. There is a four hour two part competency assessment on the fourth day. Practical exercises are performed throughout the course based on real life examples.

The assessment on the last day is in two parts with:

  • 70 multiple choice questions (1 mark each question)
  • 10 multiple part questions (3 available marks per question)
  • Pass score requirement is 75%

Successful participants, who must also have a minimum of 3 years functional safety experience, will achieve the prestigious FS Engineer (TÜV Rheinland) SIS certificate. All FS Engineers of the TÜV Rheinland Functional Safety Training Program are also listed on the TÜV Rheinland Certipedia.

Target Group

Instrument Engineers, Process Engineers and Process Safety Engineers as well as Senior Operating and Maintenance personnel who are involved in any of the lifecycle phases for safety instrumented systems from hazard and risk assessment, shut down system/fire and gas systems design to testing and maintenance.


Display all Hide all


Part 1 will cover process hazard analysis and associated risk management using the most popular and internationally adopted methods and tools. Such hazards can lead to loss of life, asset damage, loss of production and profitability, damage to the environment and company reputation. Participants will be introduced to the concepts of the main international standards that cover this area of risk assessment and risk reduction.


  • EC 61508 and IEC 61511 background
  • Hazards, Risk and ALARP principles
  • Risk Reduction and mitigation
  • Safety Instrumented System (SIS) and Safety Instrumented Functions (SIF)
  • Types of SIF
  • Primary and Secondary Functions
  • Integrity specification of a SIF
  • SIL Determination by risk graphs
  • SIL Determination Exercises
  • Risk Graph Calibration
  • Layer Of Protection Analysis (LOPA)
  • SIL determination using LOPA
  • LOPA Exercise
  • Risk reduction >10,000 times using instrumented layers
  • Fault Tree Analysis (FTA)
  • SIL Determination by (FTA)
  • Case Studies with typical findings and issues


In Part 2 delegates will be taken through the requirements for a Safety Requirements Specification (SRS) and shown how to undertake appropriate cost effective designs for Safety Instrumented Systems (SIS) and Safety Instrumented Functions (SIF) and how optimal test and maintenance strategies for them can be achieved. Participants will be instructed in methods for calculating the probability of failure on demand (PFD), the probability of dangerous failure per hour (PFH), safe failure fraction and hardware fault tolerance. The concepts of failure modes, reliability and the influence of common cause failures will also be covered.


  • SIS Safety Requirements Specification
  • Selection of Components and Subsystems
  • Proven in use (Prior Use)
  • Field Devices used in SIS
  • Systematic Failures
  • Random Failures
  • Failure and Reliability
  • Demand Modes
  • Probability of Failure on Demand (PFD)
  • PFD Exercises
  • SIF Implementation (Low demand mode)
  • Importance of Testing and Maintenance
  • Fractional Dead Times
  • Maximum Time Out of Service
  • Partial Closure Testing of Valves
  • The Impact of Common Cause and Common Mode Failures
  • Safe Failure Fraction and Hardware Fault Tolerance
  • SFF Exercises
  • Calculating PFD for Low Demand Systems with Diagnostics
  • Calculating PFH for High and Continuous Demand Systems with Diagnostics
  • Reliability Data


Part 3 will look at the application software requirements for safety instrumented systems (SIS) and the relationships between hardware and software architecture. This will include the development of application software specification, module testing requirements and integration with other SIS subsystems. This final day of tuition will also include techniques for undertaking more advanced SIL determination and methods for solving more complex safety instrumented functions.


  • Software requirements
  • Relationships between Hardware and Software Architecture
  • Application Software Requirements Specification
  • Application Software Validation Planning
  • Requirements for Application Software Architecture
  • Requirements for Support Tools, User Manuals and Application Language
  • Requirements for Application Software Development
  • Requirements for Application Module Testing
  • Integration of Application Software with SIS Subsystems
  • Requirements for Application Module Testing
  • Integration of Application Software with SIS Subsystems
  • FPL and LVL Software Modification procedures
  • Application Software Verification
  • Factory acceptance Testing
  • Installation and Commissioning
  • Site Acceptance Testing and SIS Validation
  • Fire and Gas Systems
  • SIS Overrides
  • Further Maintenance Considerations
  • Modifications and Change Control
  • Document Control
  • Course summary


On the last day

A four (4) hour two part proficiency assessment comprising:

  • Part 1 = 70 multiple choice questions (1 mark each question);
  • Part 2 = 10 multiple part questions (3 marks each question).

The pass score criterion is 75%.


In accordance with the TÜV Rheinland Functional Safety Training Program:

  • A minimum of 3 years of experience in the field of functional safety and safety instrumented systems.
  • University degree or equivalent engineering diploma, or experience and responsibilities as certified by employer or engineering institution.


Course Duration is four (4) days.

The course will provide three days of classroom tuition and practical guidance for understanding and mastering the application, principles and requirements of IEC 61508 / IEC 61511.

Practical exercises will be performed throughout the course which will be based on real life examples.

There is a four hour two part examination proficiency assessment on the fourth day.

All training will be undertaken by a FS Expert (TÜV Rheinland) for the application area of Safety Instrumented Systems (SIS) who has been approved by TÜV Rheinland to provide their training program.

Training manuals containing all the presented material and exercise examples will be provided for each student.


Please contact course provider