AADvance Safety Manual - Tuv-fs.com

Chapter 3 Functional Safety ManagementSystem ProductionSystem IntegrationSystem InstallationThe system production stage implements the detailed system design. The productiontechniques, tools and equipment, including those used for production testing of thesystem, shall be appropriate for the specified safety requirements class.The system integration stage shall integrate the application programs with theAADvance controller. Where multiple systems are used to meet an overallrequirement, it is recommended that each sub-system undergoes application programand target system integration and testing before commencing overall systemintegration. To meet the requirements of the intended safety requirements class, thesystem integration shall result in full compliance of the software and hardware with thefunctional safety requirements.The system installation stage shall define the steps to be performed that will ensurethat the system is installed correctly and brought into working order on the plant.The installation environment is a potential source of common cause failure, therefore itis vital that compatibility of the equipment is known. The environment for thesepurposes includes the prevailing climatic, hazardous area, power, earthing and EMCconditions. In many cases, there will not be a single installation environment. Elementsof the system may be installed in differing locations; in these cases, it is important toknow the environment for each location. Where the system comprises a number ofphysically separate units, it is important to define a sequence of physical installation.A controller system must be installed in a power network that is designed tomeet over voltage Category II (see BS EN 60664-1)System CommissioningThe commissioning stage is to prove the system installation and verify its correct 'endto-end'functionality, including the connection between the AADvance controller andthe requisite sensors and final elements. It is likely that groups of functions arecommissioned in stages rather than the system as a whole, for exampleaccommodation area functions before production functions. It is important to definethe commissioning sequence and the measures to be taken to ensure safe operationduring such periods of partial commissioning. These measures shall be system specificand shall be defined clearly before starting any commissioning. It is also important todefine that any temporary measures implemented for test purposes, or to allow partialcommissioning, are removed before the system, as a whole, goes live.Document number 553630 Issue 7: February 2010 3-5