IEC Functional Safety Assessment. GE OIL & GAS India Private Limited

Transcription

1 IEC Functinal Safety Assessment Prject: Masneilan Series Triple Offset Butterfly Valve Custmer: GE OIL & GAS India Private Limited Cimbatre , Tamil Nadu India Cntract Number: Q17/ Reprt N.: BHG R002 Versin V1, Revisin R1, January 31, 2018 Chris O'Brien The dcument was prepared using best effrt. The authrs make n warranty f any kind and shall nt be liable in any event fr incidental r cnsequential damages in cnnectin with the applicatin f the dcument. All rights reserved.

2 Management Summary This reprt summarizes the results f the functinal safety assessment accrding t IEC carried ut n the Masneilan Series Triple Offset Butterfly Valve Triple Offset Butterfly Valve The functinal safety assessment perfrmed by exida cnsisted f the fllwing activities: - exida assessed the develpment prcess used by GE OIL & GAS India Private Limited thrugh an audit and review f a detailed safety case against the exida certificatin scheme which includes the relevant requirements f IEC The investigatin was executed using subsets f the IEC requirements tailred t the wrk scpe f the develpment team. exida reviewed and assessed a detailed Failure Mdes, Effects, and Diagnstic Analysis (FMEDA) f the devices t dcument the hardware architecture and failure behavir. - exida perfrmed a detailed Failure Mdes, Effects, and Diagnstic Analysis (FMEDA) f the devices t dcument the hardware architecture and failure behavir. - exida reviewed field failure data t verify the accuracy f the FMEDA analysis. - exida reviewed the manufacturing quality system in use at GE OIL & GAS. The functinal safety assessment was perfrmed t the requirements f IEC 61508: ed2, 2010, SIL 3 fr mechanical cmpnents. A full IEC Safety Case was prepared using the exida Safety Case tl as the primary audit tl. Hardware prcess requirements and all assciated dcumentatin were reviewed. Envirnmental test reprts were reviewed. Als, the user dcumentatin (safety manual) was reviewed. The results f the Functinal Safety Assessment can be summarized as: The audited develpment prcess as tailred and implemented by the GE OIL & GAS India Private Limited Masneilan Series Triple Offset Butterfly Valve develpment prject, cmplies with the relevant safety management requirements f IEC SIL 3, SC 3 (SIL 3 Capable). The assessment f the FMEDA als shws that the Masneilan Series Triple Offset Butterfly Valve meets the requirements fr architectural cnstraints f an element such that it can be used t implement a SIL 2 safety functin (with HFT = 0) r a SIL 3 safety functin (with HFT = 1). This means that the Masneilan Series Triple Offset Butterfly Valve is capable fr use in SIL 3 applicatins in Lw DEMAND mde, when prperly designed int a Safety Instrumented Functin per the requirements in the Safety Manual and when using the versins specified in sectin 3 f this dcument. exida GEO R002 V1R Series Butterfly Valve IEC Assessment Reprt T-023 V4R5 exida 80 N. Main St, Sellersville, PA Page 2 f 16

3 The manufacturer will be entitled t use the Functinal Safety Lg. exida GEO R002 V1R Series Butterfly Valve IEC Assessment Reprt T-023 V4R5 exida 80 N. Main St, Sellersville, PA Page 3 f 16

4 Table f Cntents Management Summary Purpse and Scpe Tls and Methds used fr the assessment Prject Management exida Rles f the parties invlved Standards and literature used Reference dcuments Dcumentatin prvided by GE OIL & GAS India Private Limited Dcumentatin generated by exida Assessment Apprach Prduct Descriptins Masneilan Series Triple Offset Butterfly Valve IEC Functinal Safety Assessment Scheme Methdlgy Assessment level Results f the IEC Functinal Safety Assessment Lifecycle Activities and Fault Avidance Measures Functinal Safety Management Safety Requirements Specificatin and Architecture Design Hardware Design Validatin Verificatin Mdificatins User dcumentatin Hardware Assessment Terms and Definitins Status f the Dcument Liability Versin Histry Future Enhancements Release Signatures exida GEO R002 V1R Series Butterfly Valve IEC Assessment Reprt T-023 V4R5 exida 80 N. Main St, Sellersville, PA Page 4 f 16

5 1 Purpse and Scpe This dcument shall describe the results f the IEC functinal safety assessment f the GE OIL & GAS India Private Limited: Triple Offset Butterfly Valve by exida accrding t accredited exida certificatin scheme which includes the requirements f IEC 61508: ed2, The assessment has been carried ut based n the quality prcedures and scpe definitins f exida. The results f this prvides the safety instrumentatin engineer with the required failure data as per IEC / IEC and cnfidence that sufficient attentin has been given t systematic failures during the develpment prcess f the device. 1.1 Tls and Methds used fr the assessment This assessment was carried by using the exida Safety Case tl. The Safety Case tl cntains the exida scheme which includes all the relevant requirements f IEC Fr the fulfillment f the bjectives, expectatins are defined which builds the acceptance level fr the assessment. The expectatins are reviewed t verify that each single requirement is cvered. Because f this methdlgy, cmparable assessments in multiple prjects with different assessrs are achieved. The arguments fr the psitive judgment f the assessr are dcumented within this tl and summarized within this reprt. The assessment was planned by exida agreed with GE OIL & GAS India Private Limited All assessment steps were cntinuusly dcumented by exida (see [R1] t [R4]). exida GEO R002 V1R Series Butterfly Valve IEC Assessment Reprt T-023 V4R5 exida 80 N. Main St, Sellersville, PA Page 5 f 16

6 2 Prject Management 2.1 exida exida is ne f the wrld s leading accredited Certificatin Bdies and knwledge cmpanies, specializing in autmatin system safety and availability with ver 500 years f cumulative experience in functinal safety. Funded by several f the wrld s tp reliability and safety experts frm assessment rganizatins and manufacturers, exida is a glbal cmpany with ffices arund the wrld. exida ffers training, caching, prject riented system cnsulting services, safety lifecycle engineering tls, detailed prduct assurance, cyber-security and functinal safety certificatin, and a cllectin f n-line safety and reliability resurces. exida maintains a cmprehensive failure rate and failure mde database n prcess equipment based n 250 billin hurs f field failure data. 2.2 Rles f the parties invlved GE OIL & GAS India Private Limited exida Manufacturer f the Masneilan Series Triple Offset Butterfly Valve Perfrmed the hardware assessment exida Perfrmed the IEC Functinal Safety Assessment per the accredited exida scheme. GE OIL & GAS, Inc. riginally cntracted exida in August 2017 fr the IEC Functinal Safety Assessment f the abve-mentined devices. 2.3 Standards and literature used The services delivered by exida were perfrmed based n the fllwing standards / literature. [N1] IEC (Parts 1-7): 2010 Functinal Safety f Electrical/Electrnic/Prgrammable Electrnic Safety-Related Systems 2.4 Reference dcuments Dcumentatin prvided by GE OIL & GAS India Private Limited [D1] QAM 1.1, Editin 12, Rev E; 8/4/2014 Quality Manual [D2] IND U/Q, 06-Oct-2017 ISO Certificate [D3] CAP-020, C; 3/11/2013 New Instrument Prcess (CAP-020) [D4] CAP 005, Rev. H; 2/22/2012 Cntrlled Prduct Develpment Prcess [D5] Prject Artifact Sample Prject Schedule [D6] Prject Artifact Sample Mnthly Review Meeting Minutes [D7] Prject Artifact Sample Weekly Review Meeting Minutes exida GEO R002 V1R Series Butterfly Valve IEC Assessment Reprt T-023 V4R5 exida 80 N. Main St, Sellersville, PA Page 6 f 16

7 [D8] CAP-001, Rev K; 3/9/2015 Cntrlled Prduct Revisin Request [D9] PDR/ECO Frm Prduct Design Revisin Frm [D10] Prject Artifact [D11] Cimbatre MLAC 3June15.pdf [D12] QSD-02, Rev 3.1, 02-Mar-2017 [D13] QSD-03, Rev 2.2, 04-May-2017 [D14] QSP-01, Rev 1.0, 24-Jul-2015 [D15] QSP-02, Rev 2.0, 19-May-2016 [D16] QDP-12, Rev 2.2, 19-Apr-2017 [D17] GP , Rev 1.0, 09-May [D18] GEFPT-QP , Rev 1.11, 26- Jun-2017 [D19] GEMCS-FPT-GLOBAL-QWI , Rev 1.4, 14-Sep-2017 [D20] GEMCS QP , Rev 3.0; 1/9/2015 [D21] GEA32867A, Nv ; 7/2012 [D22] CES-485, Rev, B, Apr-2017 [D23] CES-486, Rev B, Apr-2017 [D24] CES-487, Rev B, Apr-2017 [D25] CES-489, Rev A, Mar-2017 Sample PDR/ECO Manufacturing Lcatin Audit Checklist - India Cmmercial Operatins Order Management Cntract Review Design and Develpment Cntrl Resurce Management Prduct Safety Practive Prcess Crrective and Preventive Actin Field Issue Reslutin Field Ntificatin and Technical Infrmatin Letters Masneilan Series Triple Offset Butterfly Valve Technical Specificatins Prduct Scpe and Specificatins Series Triple Offset Butterfly Valve Standard Cnstructin Rule fr Valve Series Actuatr Sizing Methds Series Triple Offset Butterfly Valve Assembly and Test Specificatin Series [D26] CES-493, Oct-2017 Actuatr Assembly and Test Specificatin Series Triple Offset Butterfly Valve [D27] CES-1001, Rev K, 06-Feb-2016 [D28] CES-1002, Rev K, Feb-2017 [D29] GEA33258, Sep-2017 [D30] CES-1102, Rev B, 07-Nv-2017 [D31] Sample [D32] Sample Hydrstatic Test Prcedure Seat Leakage Testing Masneilan Series Butterfly Valves Instructin Manual Safety Manual fr Valve and Actuatrs Cnfrming t SIL 3 Order Specificatin Sheet 24 in, Class 300 Engineering Design Reprt exida GEO R002 V1R Series Butterfly Valve IEC Assessment Reprt T-023 V4R5 exida 80 N. Main St, Sellersville, PA Page 7 f 16

8 2.4.2 Dcumentatin generated by exida [R1] GEO R001 V1R Series Butterfly Valve FMEDA, 31-Jan-2018 [R2] Q Safety Case WB, 06/16/2015 [R3] Q Prject Wrkbk.xlsx, 04-Dec-2017 [R4] GEO R002 V1R Series Butterfly Valve IEC Assessment Reprt.dcx, 31-Jan-2018 FMEDA reprt, Masneilan Series Triple Offset Butterfly Valve FMEDA EC Cmpliance Assessment Safety Case Series Certificatin Prject File IEC Functinal Safety Assessment, GE OIL & GAS India Private Limited Masneilan Series Triple Offset Butterfly Valve (this reprt) 2.5 Assessment Apprach The certificatin audit was clsely driven by requirements f the exida scheme which includes subsets filtered frm IEC The assessment was planned by exida and agreed upn by GE OIL & GAS India Private Limited The fllwing IEC bjectives were subject t detailed auditing at GE OIL & GAS India Private Limited: FSM planning, including Safety Life Cycle definitin Scpe f the FSM activities Dcumentatin Activities and Respnsibilities (Training and cmpetence) Cnfiguratin management Safety Requirement Specificatin Change and mdificatin management Hardware design / prbabilistic mdeling Hardware and system related V&V activities including dcumentatin, verificatin Hardware-related peratin, installatin and maintenance requirements exida GEO R002 V1R Series Butterfly Valve IEC Assessment Reprt T-023 V4R5 exida 80 N. Main St, Sellersville, PA Page 8 f 16

9 3 Prduct Descriptins The fllwing Masneilan Series Triple Offset Butterfly Valves have been included in this assessment. 3.1 Masneilan Series Triple Offset Butterfly Valve The Masneilan Series Triple Offset Butterfly Valve incrprates new perfrmance enhancing features prviding an exclusive range f zer leakage bi-directinal triple ffset butterfly valves suitable fr extreme pressure/temperature applicatins. Table 1 Prduct Descriptin Valve Cnstructin Size Cnnectins 3 t 36 Class 150 r 300 Wafer, Lugged r Duble Flanged 3 t 20 Class 600 Wafer, Lugged r Duble Flanged Figure 1 Typical Errr! Unknwn dcument prperty name. Table 2 gives an verview f the different versins that were cnsidered in the assessment f the Masneilan Series Triple Offset Butterfly Valve. Table 2 Versin Overview Optin 1 Triple Offset Butterfly Valve The Masneilan Series Triple Offset Butterfly Valve is classified as a cmpnent f a Type A 1 element accrding t IEC 61508, having a hardware fault tlerance f 0. The Safety Functin fr the valve is t mve t the designed safe psitin per the actuatr design within the specified safety time. 1 Type A element: Nn-Cmplex element (using discrete cmpnents); fr details see f IEC , ed2, exida GEO R002 V1R Series Butterfly Valve IEC Assessment Reprt T-023 V4R5 exida 80 N. Main St, Sellersville, PA Page 9 f 16

10 4 IEC Functinal Safety Assessment Scheme exida assessed the develpment prcess used by GE OIL & GAS India Private Limited fr this develpment prject against the bjectives f the exida certificatin scheme which includes subsets f IEC t 3. The results f the assessment are dcumented in [R2] and [R3]. 4.1 Methdlgy The full functinal safety assessment includes an assessment f all fault avidance and fault cntrl measures during hardware develpment and demnstrates full cmpliance with IEC t the end-user. The assessment cnsiders all requirements f IEC Any requirements that have been deemed nt applicable have been marked as such in the full Safety Case reprt, e.g. sftware develpment requirements fr a prduct with n sftware. The assessment als includes a review f existing manufacturing quality prcedures t ensure cmpliance t the quality requirements f IEC As part f the IEC functinal safety assessment the fllwing aspects have been reviewed: Develpment prcess, including: Prduct design Functinal Safety Management, including training and cmpetence recrding, FSM planning, and cnfiguratin management Specificatin prcess, techniques and dcumentatin Design prcess, techniques and dcumentatin, including tls used Validatin activities, including develpment test prcedures, test plans and reprts, prductin test prcedures and dcumentatin Verificatin activities and dcumentatin Mdificatin prcess and dcumentatin Installatin, peratin, and maintenance requirements, including user dcumentatin Manufacturing Quality System Hardware architecture and failure behavir, dcumented in a FMEDA The review f the develpment prcedures is described in sectin 5. The review f the prduct design is described in sectin Assessment level The Masneilan Series Triple Offset Butterfly Valve has been assessed per IEC t the fllwing levels: SIL 3 capability The develpment prcedures have been assessed as suitable fr use in applicatins with a maximum Safety Integrity Level f 3 (SIL 3) accrding t IEC exida GEO R002 V1R Series Butterfly Valve IEC Assessment Reprt T-023 V4R5 exida 80 N. Main St, Sellersville, PA Page 10 f 16

11 5 Results f the IEC Functinal Safety Assessment exida assessed the develpment prcess used by GE OIL & GAS India Private Limited fr these prducts against the bjectives f the exida certificatin scheme which includes IEC parts 1, 2, & 3 see [N1]. The develpment f the Masneilan Series Triple Offset Butterfly Valve was dne per this IEC SIL 3 cmpliant develpment prcess. The Safety Case was updated with prject specific design dcuments. 5.1 Lifecycle Activities and Fault Avidance Measures GE OIL & GAS India Private Limited has a cmpliant develpment prcess as assessed during the IEC certificatin. This cmpliant develpment prcess is dcumented in [D3] and [D4]. N sftware is part f the design and therefre any specific requirements frm IEC related t sftware and sftware develpment d nt apply. The assessment investigated the cmpliance with IEC f the prcesses, prcedures and techniques as implemented fr prduct design and develpment. The investigatin was executed using the exida certificatin scheme which includes subsets f IEC requirements tailred t the SIL 3 wrk scpe f the develpment team. The result f the assessment can be summarized by the fllwing bservatins: The audited GE OIL & GAS India Private Limited design and develpment prcess cmplies with the relevant managerial requirements f IEC SIL Functinal Safety Management FSM Planning The functinal safety management f any instrument develpment is gverned by Cntrlled Administrative Prcedure (CAP) 020 [D3]. Fr each develpment GE OIL & GAS India Private Limited creates a prject schedule [D5] which defines all f the tasks that must be dne t ensure functinal safety as well as the persn(s) respnsible fr each task. The team structure is dcumented in the minutes f the mnthly status meeting with management (see [D6] fr an example). Actin items that arise during the prject are tracked t cmpletin in minutes f the weekly status meeting with the develpment team (see [D7] fr an example). A meeting is held with management at the end f each phase t determine if the team shuld prceed t the next phase. These prcesses and the prcedures referenced herein fulfill the requirements f IEC with respect t functinal safety management. Versin Cntrl All dcuments are under versin cntrl as dcumented in [D4]. Design drawings and dcuments are als under versin cntrl. GE OIL & GAS India Private Limited uses Team Fundatin Server fr its versin cntrl. Training, Cmpetency recrding Persnnel training recrds are kept in accrdance with IEC requirements as dcumented in [D4]. GE OIL & GAS India Private Limited hired exida t be the independent assessr per IEC exida GEO R002 V1R Series Butterfly Valve IEC Assessment Reprt T-023 V4R5 exida 80 N. Main St, Sellersville, PA Page 11 f 16

12 5.1.2 Safety Requirements Specificatin and Architecture Design Fr the Masneilan Series Triple Offset Butterfly Valve, the simple primary functinality f the device is the same as the safety functinality f the prduct. Therefre, n special Safety Requirements Specificatin was needed. The nrmal functinal requirements [D21] were sufficient. As the Masneilan Series Triple Offset Butterfly Valve designs are simple and are based upn standard designs with extensive field histry, n semi-frmal methds are needed. General design and testing methdlgy is dcumented and required as part f the design prcess. This meets SIL Hardware Design Hardware design is dne accrding t [D3]. The hardware design prcess includes cmpnent selectin, detailed drawings and schematics, 3D Slid Mdels, safety case dcuments fr agency justificatin, a failure mdes and effect analysis (FMEA), a failure mdes, effects, and diagnstic analysis (FMEDA), a cncept design review, the creating f prttypes, and hardware verificatin tests. Each prduct family is cntrlled by a set f Cntrlled Engineering Specificatins (CES), [D22] t [D26]. The CES define the prduct scpe and specificatins, assembly and test prcedures, actuatr sizing, cnstructin rules, and key perfrmance characteristics f each family. The prcess includes a systematic design apprach with intermediate reviews. GE OIL & GAS India Private Limited has standards fr dcumentatin with specified utput dcuments. Items frm IEC , Table B.2 include bservance f guidelines and standards, prject management, dcumentatin (design utputs are dcumented per quality prcedures), structured design, mdularizatin, use f well-tried cmpnents / materials, and cmputer-aided design tls. This meets SIL Validatin Validatin Testing is cnducted n new designs t ensure that the designs meet the requirements. Test results are dcumented and recrded (see [D22]). As the Masneilan Series Triple Offset Butterfly Valve are purely mechanical devices with a simple safety functin, there is n separate integratin testing necessary. The Masneilan Series Triple Offset Butterfly Valve perfrm nly 1 Safety Functin, which is extensively tested under varius cnditins during validatin testing. Items frm IEC , Table B.3 include functinal testing, prject management, dcumentatin, and black-bx testing (fr the cnsidered devices this is similar t functinal testing). Field experience and statistical testing via regressin testing are nt applicable. This meets SIL 3. Items frm IEC , Table B.5 included functinal testing and functinal testing under envirnmental cnditins, prject management, dcumentatin, failure analysis (analysis n prducts that failed), expanded functinal testing, black-bx testing, and fault insertin testing. This meets SIL Verificatin The develpment and verificatin activities are defined Prject Plan. Fr each design phase the bjectives are stated, required input and utput dcuments and review activities. In additin, each rder is prcessed thrugh a structured prcess that includes defining the prductin tests that need t be cmpleted, [D31]. This meets SIL 3. exida GEO R002 V1R Series Butterfly Valve IEC Assessment Reprt T-023 V4R5 exida 80 N. Main St, Sellersville, PA Page 12 f 16

13 5.1.6 Mdificatins All mdificatins are dne per the GE OIL & GAS India Private Limited IEC SIL 3 cmpliant develpment prcess as dcumented in [D3]. Impact analyses are perfrmed fr all changes nce the prduct is released. The results f the impact analysis are used in determining whether t apprve the change. The standard develpment prcess is then fllwed t make the change. The handling f custmer ntificatins is gverned by [D20]. This prcedure includes identificatin f the prblem, analysis f the prblem, identificatin f the slutin, and cmmunicatin f the slutin t the field. Custmers are required t acknwledge receipt f any safety ntices. The mdificatin prcess has been successfully assessed and audited, s GE OIL & GAS India Private Limited may make mdificatins t this prduct as needed. The mdificatin prcess has been revised t include a functinal safety impact analysis. The initial pst assessment mdificatin t the Masneilan Series Triple Offset Butterfly Valve shall be audited by exida t cnfirm that a functinal safety impact analysis was perfrmed accrding t GE OIL & GAS mdificatin prcedure. As part f the exida scheme a surveillance audit is cnducted every 3 years. The mdificatin dcumentatin listed belw is submitted as part f the surveillance audit. exida will review the decisins made by the cmpetent persn in respect t the mdificatins made. This meets SIL 3. List f all anmalies reprted List f all mdificatins cmpleted Safety impact analysis which shall indicate with respect t the mdificatin: The initiating prblem (e.g. results f rt cause analysis) The effect n the prduct / system The elements/cmpnents that are subject t the mdificatin The extent f any re-testing List f mdified dcumentatin User dcumentatin GE OIL & GAS India Private Limited created a Safety Manual sectin as part f the Instructin Manual fr the Masneilan Series Triple Offset Butterfly Valve, see [D30]. This safety manual was assessed by exida. The final versin is in cmpliance with the requirements f IEC The dcument, in cnjunctin with the Installatin, Operatins, and Maintenance manual [D31] include all required peratins, maintenance, and prf test prcedures and references t reliability data. Items frm IEC , Table B.4 include peratin and maintenance instructins, user friendliness, maintenance friendliness, prject management, dcumentatin, limited peratin pssibilities (Masneilan Series Triple Offset Butterfly Valve perfrm well-defined actins) and peratin nly by skilled peratrs (peratrs familiar with type f valve, althugh this is partly the respnsibility f the end-user). This meets SIL Hardware Assessment T evaluate the hardware design f the Masneilan Series Triple Offset Butterfly Valve Failure Mdes, Effects, and Diagnstic Analysis s were perfrmed by exida. These are dcumented in [R1]. exida GEO R002 V1R Series Butterfly Valve IEC Assessment Reprt T-023 V4R5 exida 80 N. Main St, Sellersville, PA Page 13 f 16

14 A Failure Mdes and Effects Analysis (FMEA) is a systematic way t identify and evaluate the effects f different cmpnent failure mdes, t determine what culd eliminate r reduce the chance f failure, and t dcument the system in cnsideratin. An FMEDA (Failure Mde Effect and Diagnstic Analysis) is an FMEA extensin. It cmbines standard FMEA techniques with extensin t identify nline diagnstics techniques and the failure mdes relevant t safety instrumented system design. Frm the FMEDA, failure rates are derived fr each imprtant failure categry. All failure rate analysis results and useful life limitatins are listed in the FMEDA reprt [R1]. Tables in the FMEDA reprt list these failure rates fr the Masneilan Series Triple Offset Butterfly Valve under a variety f applicatins. The failure rates listed are valid fr the useful life f the device. Accrding t IEC the architectural cnstraints f an element must be determined. This can be dne by fllwing the 1 H apprach accrding t f IEC r the 2 H apprach accrding t f IEC The 1 H apprach invlves calculating the Safe Failure Fractin fr the entire element. The 2 H apprach invlves assessment f the reliability data fr the entire element accrding t f IEC The failure rate data used fr this analysis meets the exida criteria fr Rute 2 H. Therefre, the Masneilan Series Triple Offset Butterfly Valve can be classified as a 2 H device. When 2 H data is used fr all f the devices in an element, the element meets the hardware architectural cnstraints up t SIL 2 at HFT=0 (r SIL HFT=1) per Rute 2 H. If Rute 2 H is nt applicable fr the entire final element, the architectural cnstraints will need t be evaluated per Rute 1 H. Nte, as the Masneilan Series Triple Offset Butterfly Valve are nly ne part f a (sub)system, the SFF shuld be calculated fr the entire final element cmbinatin. These results must be cnsidered in cmbinatin with PFD avg values f ther devices f a Safety Instrumented Functin (SIF) in rder t determine suitability fr a specific Safety Integrity Level (SIL). The architectural cnstraints requirements f IEC , Table 2 als need t be evaluated fr each final element applicatin. It is the end user s respnsibility t cnfirm this fr each particular applicatin and t include all cmpnents f the final element in the calculatins. The analysis shws that the design f the Masneilan Series Triple Offset Butterfly Valve can meet the hardware requirements f IEC 61508, SIL 3 fr the Masneilan Series Triple Offset Butterfly Valve depending n the cmplete final element design. The Hardware Fault Tlerance and PFD avg requirements f IEC must be verified fr each specific design. exida GEO R002 V1R Series Butterfly Valve IEC Assessment Reprt T-023 V4R5 exida 80 N. Main St, Sellersville, PA Page 14 f 16

15 6 Terms and Definitins Architectural Cnstraint exida criteria Fault tlerance FIT FMEDA HFT Lw demand mde PFD avg PVST Randm Capability SFF SIF SIL SIS Systematic Capability Type A element Type B element The SIL limit impsed by the cmbinatin f SFF and HFT fr Rute 1 H r by the HFT and Diagnstic Cverage (DC applies t Type B nly) fr Rute 2 H A cnservative apprach t arriving at failure rates suitable fr use in hardware evaluatins utilizing the 2 H Rute in IEC Ability f a functinal unit t cntinue t perfrm a required functin in the presence f faults r errrs (IEC , 3.6.3) Failure In Time (1x10-9 failures per hur) Failure Mde Effect and Diagnstic Analysis Hardware Fault Tlerance Mde, where the demand interval fr peratin made n a safety-related system is greater than twice the prf test interval. Average Prbability f Failure n Demand Partial Valve Strke Test It is assumed that the Partial Strke Testing, when perfrmed, is autmatically perfrmed at least an rder f magnitude mre frequent than the prf test, therefre the test can be assumed an autmatic diagnstic. Because f the autmatic diagnstic assumptin, the Partial Valve Strke Testing als has an impact n the Safe Failure Fractin. The SIL limit impsed by the PFD avg fr each element. Safe Failure Fractin summarizes the fractin f failures, which lead t a safe state and the fractin f failures which will be detected by diagnstic measures and lead t a defined safety actin. Safety Instrumented Functin Safety Integrity Level Safety Instrumented System Implementatin f ne r mre Safety Instrumented Functins. A SIS is cmpsed f any cmbinatin f sensr(s), lgic slver(s), and final element(s). The SIL limit impsed by the capability f the prducts manufacturer. Nn-Cmplex element (using discrete cmpnents); fr details see f IEC Cmplex element (using cmplex cmpnents such as micr cntrllers r prgrammable lgic); fr details see f IEC exida GEO R002 V1R Series Butterfly Valve IEC Assessment Reprt T-023 V4R5 exida 80 N. Main St, Sellersville, PA Page 15 f 16

16 7 Status f the Dcument 7.1 Liability exida prepares reprts based n methds advcated in Internatinal standards. exida accepts n liability whatsever fr the use f this reprt r fr the crrectness f the standards n which the general calculatin methds are based. 7.2 Versin Histry Cntract Number Reprt Number Q17/ GEO R002 V1, R1, 31-Jan-2018 Q17/ GEO R002 V1, R0, 31-Jan-2018 Reviewer: Status: Ted Stewart, exida 31-Jan-2018 Released, 31-Jan-2018 Revisin Ntes Released Draft 7.3 Future Enhancements At request f client. 7.4 Release Signatures Ted E. Stewart, CFSP Prgram Develpment & Cmpliance Manager Chris O Brien, CFSE, Partner exida GEO R002 V1R Series Butterfly Valve IEC Assessment Reprt T-023 V4R5 exida 80 N. Main St, Sellersville, PA Page 16 f 16