Understanding Probability of Failure on Demand (PFD) in Safety and Reliability Engineering
Probability of Failure on Demand (PFD) is a critical metric in safety and reliability engineering. It quantifies the likelihood that a system or Safety Instrumented Function (SIF) will fail to perform its intended function when needed. PFD is particularly significant in the context of Safety Integrity Levels (SIL) and process safety risk assessments.
What Is PFD?
PFD represents the probability that a system will fail dangerously and cannot perform its safety function during demand. It can be measured as an average probability (PFDavg) or maximum probability over a specified time frame. Standards such as IEC 61508/61511 and ISA 84.01 use PFDavg to define SIL ratings. Each SIL level is associated with a specific PFDavg value, increasing by an order of magnitude with higher SIL levels.
For example:
- A SIL 1 system corresponds to a PFDavg between 0.1 and 0.01.
- A SIL 2 system requires a PFDavg between 0.01 and 0.001.
This ensures that as the SIL level increases, the risk of failure decreases significantly.
How Is PFD Calculated?
To calculate PFD, the failure rates of individual components in the Safety Instrumented System (SIS) must be evaluated. This includes:
- Sensors
- Logic solvers
- Final elements (e.g., valves or actuators)
The calculation also depends on:
- System architecture
- Redundancy implementation
- Test intervals and repair times
The formula typically uses probabilities ranging from 0 to 1, where lower values indicate greater reliability. For instance, if a system must reduce accident rates by a factor of 100, it must not fail more than once in 100 demands, requiring a PFDavg of 0.01.
Key Facts About PFD
- Defined by Standards: PFDavg target levels are outlined in IEC 61508 for low-demand modes. High/continuous demand modes use a different metric called Probability of Failure per Hour (PFH).
- Simplified Calculations: PFDavg can be calculated using as few as two variables or as many as nine, depending on system complexity.
- Certification Requirement: Achieving a specific PFDavg is one of three design barriers necessary for SIL certification.
- Device Performance:
- Smart Type B devices, like logic solvers, generally have low PFDavg values, enabling high SIL ratings.
- Final element assemblies may only meet SIL 1, though improvements in diagnostics and proof testing can elevate them to SIL 2.
- Inverse Relationship with Risk Reduction Factor (RRF):
- PFDavg = 1/RRF
- Lower PFDavg values correspond to higher RRFs, reducing risk.
PFD and Safety Integrity Levels (SIL)
SIL ratings categorize systems based on their PFDavg values:
- SIL 1: PFDavg between 0.1 and 0.01
- SIL 2: PFDavg between 0.01 and 0.001
- SIL 3: PFDavg between 0.001 and 0.0001
- SIL 4 (if applicable): PFDavg below 0.0001
Each SIL level corresponds to a defined Risk Reduction Factor (RRF) range, emphasizing the system’s ability to mitigate risks effectively.
Final Thoughts
Understanding Probability of Failure on Demand (PFD) is essential for achieving and maintaining process safety in industries like oil and gas, chemical engineering, and manufacturing. By adhering to standards such as IEC 61508, engineers can design systems that meet required SIL levels, ensuring operational reliability and safety.
Optimizing PFDavg calculations, improving diagnostics, and performing regular proof tests are practical steps to enhance a system’s reliability and safety integrity.
Top References
- Safety Instrumented Systems Verification: Practical Probabilistic Calculations by William M. Goble Harry Cheddie
- https://www.exida.com
- Safety Integrity Level Selection, Systematic Methods Including Layer of Protection Analysis Edward M. Marszal, P.E., C.F.S.E., Dr. Eric W. Scharpf, MIPENZ
- Practical Industrial Safety, Risk Assessment and Shutdown Systems by Dave MacDonald
- www.petrotask.com
