Valve Actuation Philosophies for Safety Systems

Safety instrumented systems (SIS) require final control elements that respond reliably to a safety demand. The actuation philosophy for SIS valves determines the safe state position, the energy source for actuation, and the diagnostic coverage of the valve assembly. Aligning the actuation philosophy with the process hazard analysis is fundamental to SIS design.

Fail-Safe Position Determination

• Fail-closed (FC): valve closes on loss of control signal or energy; appropriate for feed isolation, emergency shutdown of exothermic reactors

• Fail-open (FO): valve opens on signal loss; appropriate for cooling water supply, pressure relief bypass, and reactant dilution valves

• Fail-last (FL): valve remains in last position on signal loss; appropriate only where neither open nor closed is inherently safer and the valve has high mechanical reliability

• Fail-indeterminate (FI): to be avoided in SIS applications; specify FC or FO with reasoning documented in the process hazard analysis

Energy Sources for SIS Actuation

Pneumatic spring-return actuators with instrument air supply are the most common SIS actuation choice. The spring provides fail-safe energy independent of any active power source. Air accumulator tanks (volume boosters) can extend the available actuation energy if instrument air supply fails temporarily. Electrohydraulic actuators are preferred for subsea and large offshore applications where compressed air supply is impractical.

Partial Stroke Testing for SIS Valves

IEC 61511 requires periodic proof testing of SIS components to verify dangerous undetected failures. Full stroke testing requires process shutdown; partial stroke testing (PST) moves the valve 10 to 30 percent from its normal operating position to detect mechanical failures such as stem seizure, actuator spring failure, and solenoid valve sticking without interrupting the process. PST diagnostic coverage credit of 60 to 90 percent is allowed depending on the fraction of travel tested and the diagnostic method.

Solenoid Valve Selection for SIS Service

• Specify single or dual solenoid based on SIL requirement and de-energize-to-trip (DTT) or energize-to-trip (ETT) philosophy

• Use Class F or H insulation rated solenoids for high-temperature service; verify coil temperature does not exceed rating

• Specify proof test capability: solenoid must be individually testable without requiring full valve stroke

• Manual override pins must be locked out during normal operation to prevent inadvertent valve operation

SIL Verification for Valve Assemblies

The valve assembly SIL verification must consider PFDavg (probability of failure on demand) for each component: solenoid valve, actuator, valve body and trim, and position feedback. Component failure rates come from manufacturer's safety data sheets (SDS) per IEC 61508 or from generic data in OREDA or EXIDA databases. The assembly PFDavg is calculated considering common cause failures and the proof test interval to confirm the required SIL level is achieved.