Abstract
Standard IEC 61508 provides probabilistic equations for determining the Average Probability of Failure on Demand (PFDavg) and the Average Probability of Failure per Hour (PFHavg) for some architectures of Safety Instrumented Systems (SIS) under the hypothesis of equal redundant components, taking into account Common Cause Failures (CCF), Detection Coverage (DC) and Proof Test Coverage (PTC) parameters. Surprisingly, IEC standard does not mention the testing policy aspects of SIS redundant components. However, from a close examination of the probabilistic equations, it is possible to recognize that the simultaneous/sequential testing policy has been implicitly assumed. This paper describes the conditions under which the staggered testing policy - which is better than all the others in case of independent tested components - can be advantageously applied to reduce PFDavg when CCF, DC and PTC parameters are taken into account.