AADvance Safety Manual - Tuv-fs.com

AADvance Safety ManualDecommissioningThe procedure for decommissioning the system shall be defined. This procedureshould include specific requirements for the safe decommissioning of the system and,where applicable, the safe disposal or return of materials.As with commissioning, it is likely the decommissioning will be performed in a phasedmanner. The decommissioning procedure shall ensure that a plan be developed thatmaintains the functional safety whilst the corresponding hazards are present. Similarly,the physical environment of the control equipment shall be maintained whilst theequipment is required to function.The procedure for decommissioning shall address the following items: The sequence in which the hazards are to be removed. Methods which permit the removal of interactions between safety functions whilstmaintaining functional safety for the remaining potential hazards and withoutinitiating safety responses. This shall include the interaction between systems. A definition of the modules and materials which are to be returned to ICS Triplexfor safe disposal following decommissioning.Functional Safety AssessmentThe functional safety assessment shall confirm the effectiveness of the functional safetyperformance of the system. The assessment, in this context, is limited to the safetyrelatedsystem and should confirm that the system is designed, constructed andinstalled in accordance with the specified safety requirements.The assessment shall consider each required safety function and its associated safetyproperties. The effects of faults and errors within the system and application programs,failures external to the system and procedural deficiencies in these safety functions areto be considered.The assessment is to be carried out by an audit team that shall include independentassessors from outside of the project. At least one functional safety assessment shall beperformed before the start-up of the system and the introduction of any potentialhazards.Safety Integrity DesignSafety IntegrityThe architecture of the AADvance system has been designed to allow a scalable systemto be configured using standard components. The configurations available range fromsimplex fail-safe to TMR fault tolerance.3-10 Document number 553630 Issue 7: February 2010