Functional Safety Assessment Services for SIS Projects

Functional Safety Assessment (FSA) is the independent review that confirms whether a Safety Instrumented System (SIS) actually achieves the Safety Integrity Level (SIL) its design claims, not just on paper but in the field. Skip an FSA, or reduce it to a signature on a checklist, and a plant can start up believing a Safety Instrumented Function (SIF) will trip on demand when the sensor voting, the safe-state logic, or the proof-test interval was never checked against the Safety Requirements Specification (SRS). IEC 61511 does not treat this as optional: it names Functional Safety Assessment and auditing as a lifecycle activity alongside verification and validation, and requires assessors to bring independence from the work under review.

iFluids Engineering performs Functional Safety Assessment services for Safety Instrumented Systems across oil and gas, petrochemical, and energy facilities, working to IEC 61508 and IEC 61511, for asset owners, EPC contractors, and operators who need an assessor with no stake in the design being reviewed. Our assessments run at the five stages IEC 61511 recognizes, from post-hazard-analysis through post-modification, closing the gap between what the SRS demanded and what the installed system actually does, before that gap turns into an incident.

What Is Functional Safety Assessment and What Does It Cover

iFluids Engineering carries out Functional Safety Assessment for Safety Instrumented Systems against IEC 61508 and IEC 61511, covering sensors, logic solvers, final elements, application programs, and the interfaces between them. Our assessment confirms that hazard analysis, SIL determination, design, and testing evidence together demonstrate that each Safety Instrumented Function performs as specified.

Functional Safety Assessment is an evidence-based judgment, not a document review. IEC 61511 requires FSA to confirm that the overall lifecycle evidence, from hazard and risk assessment through installation and validation, is sufficient to conclude that functional safety has been achieved for a given Safety Instrumented Function. That is a different question from verification, which asks whether one lifecycle phase’s output was developed correctly from its approved inputs, and different again from validation, which asks whether the installed SIS performs the required SIFs against the SRS. An FSA sits above both: it looks at the accumulated evidence and asks whether it is enough.

Our FSA scope covers the SRS itself, sensor arrangement and voting, logic solver configuration, final-element arrangement, energise or de-energise-to-trip philosophy, bypass and override provisions, proof-test interval and coverage, and the common-cause and systematic-capability assumptions behind the SIL claim. Independence is not a courtesy here. IEC 61508 ties the required degree of assessor independence to consequence severity and SIL, and a Stage 3 FSA under IEC 61511 is mandatory before a facility introduces process hazards. This is distinct from Safety Requirements Specification (SRS) & SIL Verification, which builds and calculates the SIL case the FSA later checks.

Functional Safety Assessment vs. Functional Hazard Assessment: Which Do You Need?

iFluids Engineering distinguishes Functional Safety Assessment, an IEC 61511 lifecycle audit of an existing or developing Safety Instrumented System, from Functional Hazard Assessment (FHA), a front-end technique that identifies hazardous failure conditions of a function before detailed design exists. Confusing the two misdirects both budget and timing.

Search interest in “Functional Hazard Assessment” runs well ahead of “Functional Safety Assessment” on its own, and the two terms get treated as synonyms often enough to cause real project confusion. They are not the same activity, and neither IEC 61508 nor IEC 61511 uses the term Functional Hazard Assessment at all. Functional Hazard Assessment (FHA) originates in aerospace and automotive practice (ARP4761, ISO 26262) and asks what happens if a function fails, before a system’s architecture is fixed. Functional Safety Assessment (FSA) is an IEC 61511 process-industry activity performed on a Safety Instrumented System that already has a Safety Requirements Specification, a design, or an operating history to review.

Question	Functional Safety Assessment (FSA)	Functional Hazard Assessment (FHA)
Governing framework	IEC 61508 / IEC 61511	ARP4761 (aerospace), ISO 26262 (automotive)
When performed	At 5 defined stages across the SIS lifecycle	Early concept and architecture phase
What it checks	Lifecycle evidence sufficiency for an existing SRS or design	Hazardous failure conditions of a function before design
Typical output	FSA 1 to FSA 5 stage report	Functional hazard list with severity classification
iFluids scope	Core service for process-industry SIS	Available on request for cross-sector functional safety programs

If your facility runs a Safety Instrumented System under IEC 61511, an FSA is what you need. If you are defining a new safety function before its architecture is fixed, a front-end FHA-style review may come first, and our process safety team can confirm which stage your project is actually at during a scope discussion.

Our Functional Safety Assessment Methodology

iFluids Engineering runs Functional Safety Assessment at the five stages IEC 61511 defines for the Safety Instrumented System lifecycle, from post-hazard-analysis through post-modification review, assigning assessors independent of the design and application-programming teams for every assessment we deliver.

Each FSA stage answers a distinct question, and rigor at one stage does not compensate for skipping another.

Stage	Timing	What We Confirm
FSA 1	After hazard and risk analysis, SIL determination, and SRS development	Hazards, protection-layer allocation, and safety requirements are adequately defined
FSA 2	After SIS detailed design	Hardware and software design meets the SRS and SIL target
FSA 3	After installation, commissioning, and validation, before startup	The system is ready for process hazards to be introduced
FSA 4	After operating and maintenance experience has accumulated	Demand rate, failure, bypass, and proof-test performance still match design assumptions
FSA 5	After significant modification, or before decommissioning	Lifecycle changes have not degraded functional safety

We do not conflate FSA with the two activities it depends on. Verification confirms a phase’s output was built correctly from its approved inputs; validation confirms the installed system performs its SIFs against the SRS; FSA asks whether the accumulated lifecycle evidence, taken together, is sufficient to conclude functional safety has been achieved; an audit separately confirms the functional safety management system itself is being followed. Our assessment team works from your Functional Safety Management Plan, checks it against IEC 61511 independence rules, and issues stage-specific findings rather than a single pass or fail. Where a Functional Safety Management Plan has not yet been established, we can define the FSA arrangements as part of that planning work.

Industries and Facilities We Serve

iFluids Engineering has delivered Functional Safety Assessment and related process safety studies across onshore and offshore oil and gas, petrochemical, and power facilities in India, the GCC, and Southeast Asia, covering greenfield SIS design reviews and brownfield assessments on operating assets.

Facility types include refineries, gas processing trains, offshore platforms, LNG terminals, and petrochemical complexes, with SIS scopes ranging from a handful of SIFs to several hundred. Brownfield FSA work carries its own demands: operating history, bypass logs, and proof-test records have to be reconciled against original design assumptions, a different exercise from reviewing a design package before FAT. Greenfield FSA 1 and FSA 2 assessments, by contrast, run against SRS and design documents before hardware exists on site. We size the assessment team and duration to a facility’s SIF count and SIL profile rather than applying one fixed template regardless of scope.

Regulatory and Standards Compliance

iFluids Engineering performs Functional Safety Assessment to IEC 61508 and IEC 61511 requirements, and our FSA reports are structured to support acceptance by regional HSE authorities and operator technical safety departments across the GCC and India.

IEC 61508 sets the generic requirements for electrical, electronic, and programmable electronic safety-related systems. IEC 61511 applies those requirements specifically to Safety Instrumented Systems in the process industry, defining the hazard and risk assessment, SRS, design, and FSA activities a SIS project must complete. Our assessment reports map findings directly to the clauses they address rather than issuing a generic pass or fail statement, and non-conformances are written as corrective-action items an EPC or operations team can actually close. Where regional requirements sit alongside IEC 61511, such as OISD guidelines in India or facility-specific HSE case requirements in the GCC, we align FSA scope and reporting format to what the reviewing authority expects, rather than delivering a document written only against the international standard.

Why Engineering Teams Choose iFluids

iFluids Engineering assigns Functional Safety Assessment work to assessors independent of a project’s design and application-programming teams, meeting the IEC 61508 independence requirement rather than treating it as a formality, backed by ISO 9001, ISO 14001, and ISO 45001 certification and KOC and ADNOC accreditation.

Independence is the credential that matters most on an FSA, because IEC 61508 ties the required degree of independence to the consequence of failure and the SIL involved, not to convenience. Our assessors are not drawn from the team that wrote the SRS or built the application logic for the system under review, and competency is assessed against training, practical experience, and demonstrated knowledge, the same three elements IEC 61508 requires of anyone performing a lifecycle activity. Combined with project delivery across GCC, India, and Southeast Asia, that gives operators an FSA report their own HSE department, and the accepting regulatory authority, can rely on without a second review.

Deliverables and Outcomes

Every iFluids Functional Safety Assessment delivers a stage-specific FSA report, a findings and corrective-action register, and, where gaps are identified, a closure-verification record confirming each action was resolved before the next lifecycle stage proceeds.

Deliverable	Applicable Stage	Content
FSA Report	FSA 1 to FSA 5 (stage-specific)	Findings against SRS, design, or operating evidence, independence statement, conclusion
Findings and Corrective Action Register	All stages	Non-conformances, severity, owner, closure deadline
Closure Verification Record	Follow-up to findings	Confirmation that corrective actions were implemented and re-checked
Stage Sign-Off Certificate	FSA 3 (pre-startup) primarily	Documented basis for introducing process hazards

Assessment duration runs from a few days for a single-SIF review to several weeks for a full-facility FSA 2 or FSA 3 covering a large SIS scope. We agree the reporting format, whether a standalone report or an appendix to the client’s own FSMP documentation, before the assessment begins, because a report written for a regulatory reviewer, an operations manager deciding whether to start up, and an EPC project team closing a punch list, are not the same document.

Ready to Discuss Your Project

If your Safety Instrumented System is approaching a design review, a startup date, or a significant modification, the FSA stage you need depends on where the project actually sits, not a fixed checklist. Our process safety team can confirm which stage applies, the assessor independence requirements for your SIL profile, and a realistic timeline, before any commercial scope is agreed.

iFluids Engineering has carried out Functional Safety Assessment work across oil and gas, petrochemical, and energy facilities in India, the GCC, and Southeast Asia, backed by ISO 9001, ISO 14001, and ISO 45001 certification and KOC and ADNOC accreditation.

Speak to our process safety team to scope your Functional Safety Assessment: Contact iFluids Engineering. For a closer look at how these assessments break down stage by stage, see our 5 Stages of Functional Safety Assessment guide.