The example in this chart here is taken from ISO 13849-1:2006 and shows how the severity, frequency and probability are used to determine the required performance level (PL). The performance level will then be used to determine what type of protection is required, increasing from PLa to PLe.
All risk assessment methodologies agree on and share the hierarchy of risk mitigation. You will notice in the table below that the most effective method of reducing risk is to design it out of the system; this should always be your first consideration. If it is not possible to design the risk out, then it is appropriate to consider engineering controls to eliminate or reduce the risk to an acceptable level. Training and PPE are the least effective methods of reducing risk, but should not be overlooked.
Control reliability is a specific level of performance as defined in several U.S. and international safety standards. Essentially, control reliability is defined as not allowing a single failure in the control system to prevent the machine from stopping as needed; and the control system will prevent initiation of a subsequent action until the failure is corrected.
Key characteristics of a control-reliable safety system are:
• Redundancy
• Monitoring and self-diagnostics
• Positively-guided or force-guided contacts
• Fail-to-safe operation
The common language among safety standards emphasizes that redundancy itself is not enough to achieve a control-reliable solution: Monitoring must be done to ensure that redundancy remains effective. Requirements for control reliability will be determined by the risk assessment. U.S. safety standards that address control reliability are RIA 15.06, ANSI B11.19, ANSI Z244.1, ANSI B155.1 and NFPA 79.