Shopping Cart

No products in the cart.

BSI PD IEC/TR 63039:2016

$215.11

Probabilistic risk analysis of technological systems. Estimation of final event rate at a given initial state

Published By Publication Date Number of Pages
BSI 2016 84
Guaranteed Safe Checkout
Categories: ,

If you have any questions, feel free to reach out to our online customer service team by clicking on the bottom right corner. Weā€™re here to assist you 24/7.
Email:[email protected]

This document provides guidance on probabilistic risk analysis (hereafter referred to as risk analysis) for the systems composed of electrotechnical items and is applicable (but not limited) to all electrotechnical industries where risk analyses are performed.

This document deals with the following topics from the perspective of risk analysis:

  • defining the essential terms and concepts;

  • specifying the types of events;

  • classifying the occurrences of events;

  • describing the usage of modified symbols and methods of graphical representation for ETA, FTA and Markov techniques for applying those modified techniques complementarily to the complex systems;

  • suggesting ways to handle the event frequency/rate of complex systems;

  • suggesting ways to estimate the event frequency/rate based on risk monitoring;

  • providing illustrative and practical examples.

The relationship between the events covered by this document and associated risks are described in Table 1. Risk is defined as the effect of uncertainty on objectives (see 3.1.1). The uncertainty is here assumed to be composed of two elements: the epistemic and aleatory. The epistemic is categorised into the known and unknown, and the effect of the aleatory is classified into the controlled and the uncontrolled, respectively. Therefore, the risk associated with the known event of which impact is controlled is the controlled risk, and the risk associated with the known event of which impact is not controlled is the uncontrolled risk. Favourable meta-risk is of an unknown event of which impact can be casually controlled even if this unknown event appears, and unfavourable meta-risk is of an unknown event of which impact cannot be controlled.

For example, the risks resulting from random hardware failures of electrotechnical items will be categorised into the controlled or uncontrolled risks, while the risks owing to software bugs could be classified into the favourable or unfavourable meta-risks. This document covers the controlled and uncontrolled risks resulting from the events that can be assumed to occur randomly and independently of time (see Clause 6, 9.1, 9.2, 9.5 and Clause B.3).

Table 1 ā€“ Events and associated risks

PDF Catalog

PDF Pages PDF Title
4 CONTENTS
7 FOREWORD
9 INTRODUCTION
11 1 Scope
Tables
Table 1 ā€“ Events and associated risks
12 2 Normative references
3 Terms, definitions and abbreviated terms
3.1 Terms and definitions
19 3.2 Abbreviated terms
4 Difference between frequency and rate of final event
20 Figures
FigureĀ 1 ā€“ Antecedent state, final event, final state and renewal event
21 5 Final event frequency and final event rate at a given initial state
5.1 General
5.2 Classification of final events
Figure 2 ā€“ Time to final event (TTFE) and time to renewal event (TTRE)
22 5.3 Final event frequency in a steady state
23 FigureĀ 3 ā€“ State transition models with various final states
24 5.4 Final event rate at a given initial state and at a recognised state
5.5 Relationship between final event rate and frequency at a given initial state
25 6 Procedure for probabilistic risk analysis and flow to reach risk profile
26 7 Techniques for quantitative analysis of the occurrence of a final event
7.1 Graphical symbols for three types of final events
7.1.1 General
7.1.2 Repeatable final eventTable 3
Figure 4 ā€“ Procedure for analysis of repeatable/unrepeatable final events
27 Table 2 ā€“ Symbols newly introduced for event tree and fault tree analyses
28 Table 3 ā€“ Symbols and graphical representation for a repeatable (final) event
29 Table 4 ā€“ Symbols and graphical representation for a renewable final state
31 Table 5 ā€“ Symbols and graphical representation for an unrenewable final state
32 7.1.3 Unrepeatable final event resulting in a renewable final state
7.1.4 Unrepeatable final event resulting in an unrenewable final state
33 7.2 Analytical example of an unrepeatable final event
7.2.1 General
Figure 5 ā€“ FT for an unrepeatable final event resulting in an unrenewable final state
34 7.2.2 Average final event frequency
Figure 6 ā€“ State transition model resulting in an unrenewable final state
36 7.2.3 Final event rate at a given initial state
37 Figure 7 ā€“ FT for an unrepeatable final event resulting in a renewable final state
FigureĀ 8 ā€“ State transitions resulting in a renewable final state
40 Figure 9 ā€“ FT for unintended inflation of an airbag due to failure of control
41 Figure 10 ā€“ State transition model of unintended inflation of an airbag
42 8 Final event rate at a recognised state and recognised group state
8.1 General
8.2 Example of recognised (group) states
43 TableĀ 6 ā€“ Symbols and graphical representation for the FER at recognised state 3
44 Table 7 ā€“ Symbols and graphical representation for FER at recognised group state G
45 9 Analysis of multiple protection layers
9.1 General
46 FigureĀ 11 ā€“ Event tree of a demand source, int. PL and FPL for a risk
47 9.2 Frequency and rate for repeatable events
9.2.1 General
9.2.2 Independent of event sequence
48 Figure 12 ā€“ Failure of int. PL independent of event sequence
49 9.2.3 Depending on event sequence
51 FigureĀ 13 ā€“ FT for failure of int. PL through sequential failure logic
53 9.3 Final protection layer arranged in a 1-out-of-1 architecture system
9.3.1 General
9.3.2 Final event rate at initial state (0, 0) for unrepeatable final event
55 9.3.3 Final event rate at recognised state (x, y)
Figure 14 ā€“ FT for an unrepeatable final event at initial state (0,0)
FigureĀ 15 ā€“ State transition model for an unrepeatable final event at initial state (0,0)
56 9.3.4 Final event rate at a recognised group state
FigureĀ 16 ā€“ FT for an unrepeatable final event for recognised state (0,1)
Figure 17 ā€“ State transition model for recognised state (0,1)
57 Figure 18 ā€“ FT for an unrepeatable final event for recognised group state G1
58 9.4 Final protection layer arranged in a 1-out-of-2 architecture system
9.4.1 General
FigureĀ 19 ā€“ State transition model for recognised group state G1
59 9.4.2 Independent failure parts of the 1-out-of-2 architecture system
Figure 20 ā€“ RBD of FPL arranged in a 1-out-of-2 architecture system
Figure 21 ā€“ RBD of the independent parts of Ch 1 and Ch 2
60 9.4.3 Fault tree for independent undetected and detected failures
9.4.4 Final event rate at a given initial state owing to independent failures
Figure 22 ā€“ RBD equivalent to that in Figure 21
FigureĀ 23 ā€“ FT for UD failure of Ch 1, D failure of Ch 2 and demand
61 9.4.5 Recognised states at each part
Figure 24 ā€“ State transitions due to UD failure of Ch 1, D failure of Ch 2 and demand
62 9.4.6 Recognised (group) states and final states for the overall system
63 9.5 Common cause failures between protection layers and complexity of a system
9.6 Summary and remarks
64 Annex A (informative) Risk owing to fault recognised only by demand
A.1 Demand, detection and failure logic
Figure A.1 ā€“ Reliability bock diagram with independent and common cause failures
65 Figure A.2 ā€“ Fault tree of unrepeatable final event due to DU failures
66 A.2 Final event rate at a given initial state
Figure A.3 ā€“ State transition model for unrepeatable final event caused by DU failures
67 A.3 Comparison between new and conventional analyses
69 A.4 Further development
Figure A.4 ā€“ Comparison between analyses of r(Ī»M) and Ļ–
70 A.5 Summary and remarks
71 Annex B (informative) Application to functional safety
B.1 Risk-based target failure measures in functional safety
72 B.2 Safe/dangerous system states and failures
74 B.3 Complexity of safety-related systems
Table B.1 ā€“ Relationship between failure modes, hazards, and safe/dangerous failures
75 B.4 Comparison between conventional and new analyses
76 B.5 Splitting up mode of operation
Figure B.1 ā€“ Comparison between conventional and new analyses
77 B.6 Tolerable hazardous/harmful event rate and residual risk
B.7 Procedure for determining the safety integrity level (SIL) of an item
78 B.8 Summary and remarks
TableĀ B.2 ā€“ Safety integrity levels (SILs) in IECĀ 61508 (all parts)
79 Bibliography
BSI PD IEC/TR 63039:2016
$215.11