S3NIS LOPA — one module within Consultoría en Seguridad Funcional (CSF)'s wider S3NIS software suite — has been independently certified by Risknowlogy in accordance with IEC 61511:2016 and the published CCPS guidance for the Layer of Protection Analysis (LOPA) method, confirming its fitness to support documenting safety-function allocation to protection layers. The certification covers the LOPA module only; the suite's other applications carry no certification from this work.

S3NIS LOPA is a Windows desktop application used by hazard and risk analysis engineers to document hazardous scenarios — their initiating events, enabling conditions, conditional modifiers, and the independent protection layers credited against them — and to calculate the resulting required risk reduction and safety integrity level. The certified functionality is limited to low demand mode safety functions.

The certification assessment applied Risknowlogy's structured methodology for functional safety software tools, covering quality and software development management, the development lifecycle, requirements specification, architecture and design, verification and validation, configuration management, installation and operating environment, and user documentation. Risknowlogy reviewed the implemented calculations against the published CCPS method and independently re-calculated a worked example to confirm the tool's output.

Based on this assessment, S3NIS LOPA version 2.1.0 is found fit to support its stated intended use, subject to conditions of use: the certified functionality is limited to low demand mode safety functions, the Windows 10 and later desktop/laptop environment, and the Spanish-language build assessed; intended users are hazard and risk analysis engineers competent in the LOPA method.

The certification covers the tool itself, not the results of any analysis performed with it, nor its application on any specific project. Users remain responsible for the accuracy of the data they supply, for verifying the tool's outputs, and for the judgements the tool does not make — including confirming the true independence of credited protection layers and accounting for common-cause failure — under their own functional safety management system.

The detailed certification basis, conditions of use, and restrictions are defined in Certificate 2259.660.4-1 and supporting Risknowlogy Certification Report 2259.660.3-0.