Where Standards Meet Real-World Application

Risk, Reliability & Functional Safety Knowledge Base

How to Describe a Safety Function Correctly — IEC 61511

The safety function description is the single most important element in achieving functional safety and SIL compliance. If this foundation is weak, everything built on top of it will be flawed.

Why the Safety Function Description Matters

Every safety lifecycle activity—design, verification, validation, operation—depends on how clearly and correctly the safety function is defined.

A poor description leads to:

  • Incorrect system design
  • Misinterpretation by engineers and integrators
  • Inadequate testing and validation
  • Ultimately, non-compliant and unsafe systems

The SLATS Concept

A robust safety function description follows the SLATS concept:

Sense

What parameter are you measuring? This defines how the hazard is detected.

Logic

What condition triggers the safety action? This defines the decision-making criteria.

Actuate

What action is taken to bring the system to a safe state?

Time

How quickly must the action occur? Timing is directly linked to risk reduction and verification.

SIL

How reliable must the function be? This defines the required Safety Integrity Level.

Risknowlogy Insight: If one SLATS element is missing or unclear, the safety function is incomplete.

Example of a Good Safety Function Description

Measure the level of smoke, and if the level reaches 1000 ppm, start the ventilation system within 10 seconds. Perform this function according to SIL 3 requirements.

  • Sense: Smoke level
  • Logic: Threshold at 1000 ppm
  • Actuate: Start ventilation system
  • Time: Within 10 seconds
  • SIL: SIL 3

Common Mistakes

  • Describing the solution instead of the intention
  • Missing timing requirements
  • Vague or undefined thresholds
  • No clear link to hazard and risk analysis
  • Not specifying SIL or performance requirements

Pro Tip: Describe the Intention, Not the Solution

A critical mistake in many projects is specifying how the safety function should be implemented instead of what it must achieve.

  • Wrong: “Use pressure transmitter PT-101 and valve XV-202.”
  • Right: “Measure pressure and isolate the system if pressure exceeds X within Y seconds.”
The moment you describe the solution instead of the intention, you break the link between hazard and protection.

Practical Suggestions

  • Always derive safety functions from hazard and risk analysis
  • Use the SLATS structure consistently
  • Define measurable thresholds and conditions
  • Specify clear timing requirements
  • Link each safety function to a SIL target
  • Ensure traceability to design and testing
  • Validate that the function can be tested and verified

Conclusion

The safety function description is not just documentation—it is the blueprint of your safety system.

When done correctly, it ensures alignment between hazard analysis, design, implementation, and verification. When done poorly, it guarantees problems later in the lifecycle.

Further Reading


We use cookies
Cookie preferences
Below you may find information about the purposes for which we and our partners use cookies and process data. You can exercise your preferences for processing, and/or see details on our partners' websites.
Analytical cookies Disable all
Functional cookies
Other cookies
We use cookies to personalize content and ads, to provide social media features and to analyze our traffic. Learn more about our cookie policy.
Accept all Decline all Change preferences
Cookies