SIL and SIF: what it means for a safety function to have «integrity»

A safety barrier is worth only one thing: that it works on the day you need it. SIL and SIF are the way to measure, in cold blood, how much you can trust it.

In safety instrumentation, a SIF (Safety Instrumented Function) is a full chain that detects a dangerous condition and acts: a sensor that measures, a controller that decides and a final element (a valve) that closes. The SIL (Safety Integrity Level) is how reliable that chain is, on a scale of 1 to 4.

SIF is the action; SIL is the trust in that action

Separate the two concepts and everything clears up. The SIF is the what: «if pressure goes above X, this valve closes». The SIL is how much you trust it: SIL 1 cuts the risk about tenfold; SIL 3, up to a thousandfold. It is like a car’s brakes: having them is the function; knowing they stop the car 99.9 % of the times you press the pedal is the integrity. A brake that works «almost always» is not a figure: it is a roulette wheel.

On the day of the accident, no one cares that the function existed on the drawing. What matters is whether it acted. Integrity is the difference between the two.

Why SIL is not declared, it is demonstrated

A SIL is not earned by writing it in a document. It is earned with architecture (redundancy where it is needed), with equipment failure data and, above all, with periodic proof tests that confirm the barrier is still alive. A SIF that is never tested degrades in silence: it looks intact until the day you call on it and it does not answer. That is why SIL is traceable and auditable, or it is not SIL.

Key question for your plant: do you know the real SIL of your critical functions, or only the one on paper? That difference is calculated, organized and audited with PhiaExpert.