Checklist for a GuardLogix Controller

• Audit Title

• Document No.

• Client / Site

• Conducted on

  Date

• Prepared by

• Location
  Address

• Personnel

Controller System

• Safety Function Definition

• Are you using only the components listed in<br>SIL 3-Certified GuardLogix Components on page 14 and on the http://www.rockwellautomation.com/<br>products/certification/safety/ site, with the corresponding firmware release?

  Yes

  No

  N/A

• Have you calculated the system’s safety response time for each safety chain?

  Yes

  No

  N/A

• Does the system’s response time include both the user-defined safety task program watchdog (software watchdog) time and the safety task rate/period?

  Yes

  No

  N/A

• Is the system response time in proper relation to the process tolerance time?

  Yes

  No

  N/A

• Have probability (PFD/PFH) values been calculated according to the system’s configuration?

  Yes

  No

  N/A

• Have you performed all appropriate functional verification tests?

  Yes

  No

  N/A

• Have you determined how your system will handle faults?

  Yes

  No

  N/A

• Is each CIP safety device configured with the correct SNN?

  Safe

  At Risk

  N/A

• Have you generated a safety task signature?

  Yes

  No

  N/A

• Have you uploaded and recorded the safety task signature for future comparison?

  Yes

  No

  N/A

• Following a download, have you verified that the safety task signature in the controller matches the recorded safety task signature?

  Yes

  No

  N/A

• Do you have an alternate mechanism in place to preserve the safety integrity of the system when making online edits?

  Yes

  No

  N/A

• Have you taken into consideration the checklists for using SIL inputs and outputs listed on pages 89 and 90?

  Yes

  No

  N/A

• Author

  Sign

• Date

  Date

• Checked

  Sign

• Date

  Date

• Approved

  Sign

• Date

  Date

Input Checklist for GuardLogix System

• For programming or startup, an individual checklist can be filled in for every single SIL input channel in a system. This is the only way to make sure that the requirements are fully and clearly implemented. This checklist can also be used as documentation on the connection of external wiring to the application program

• Safety Function Definition

• SIL Input Channels

• Have you followed installation instructions and precautions to conform to applicable safety standards?

  Yes

  No

  N/A

• Have you performed functional verification tests on the system and modules?

  Yes

  No

  N/A

• Are control, diagnostics, and alarming functions performed in sequence in application logic?

  Yes

  No

  N/A

• Have you uploaded and compared the configuration of each module to the configuration sent by configuration tool?

  Yes

  No

  N/A

• Are modules wired in compliance with PLe/Cat. 4 according to ISO 13849-1?(1)

  Yes

  No

  N/A

• (1) For information on wiring your CIP Safety I/O module, refer to the product documentation for your specific module.

• Have you verified that the electrical specifications of the sensor and input are compatible?

  Yes

  No

  N/A

• Author

  Sign

• Date

  Date

• Checked

  Sign

• Date

  Date

• Approved

  Sign

• Date

  Date

Checklist for Safety Outputs

• For programming or startup, an individual requirement checklist must be filled in for every single SIL output channel in a system. This is the only way to make sure that the requirements are fully and clearly implemented. This checklist can also be used as documentation on the connection of external wiring to the application program.

• Safety Function Definition

• SIL Output Channels

• Have you followed installation instructions and precautions to conform to applicable safety standards?

  Yes

  No

  N/A

• Have you performed functional verification tests on the modules?

  Yes

  No

  N/A

• Have you uploaded and compared the configuration of each module to the configuration sent by configuration tool?

  Yes

  No

  N/A

• Have you verified that test outputs are not used as safety outputs?

  Yes

  No

  N/A

• Are modules wired in compliance with PLe/Cat. 4 according to ISO 13849-1?(1)

  Yes

  No

  N/A

• (1) For information on wiring your CIP Safety I/O module, refer to the product documentation for your specific module.

• Have you verified that the electrical specifications of the output and the actuator are compatible?

  Yes

  No

  N/A

• Author

  Sign

• Date

  Date

• Checked

  Sign

• Date

  Date

• Approved

  Sign

• Date

  Date

Checklist for GuardLogix Application Program Development

• Use the following checklist to help maintain safety when creating or modifying a safety application program.

• Project Definition

• Are you using version 14, or version 16 or later of RSLogix 5000 software(1), the GuardLogix system programming software?

  Yes

  No

  N/A

• (1) RSLogix 5000 software, version 18 or later, supports 1768 Compact GuardLogix controllers.

• Were the programming guidelines in Chapter 6 followed during creation of the safety application program?

  Yes

  No

  N/A

• Does the safety application program contain only relay ladder logic?

  Yes

  No

  N/A

• Does the safety application program contain only those instructions listed in Appendix A as suitable for safety application programming?<br>

  Yes

  No

  N/A

• Does the safety application program clearly differentiate between safety and standard tags?

  Yes

  No

  N/A

• Are only safety tags used for safety routines?

  Yes

  No

  N/A

• Have you verified that safety routines do not attempt to read from or write to standard tags?

  Yes

  No

  N/A

• Have you verified that no safety tags are aliased to standard tags and vice versa?

  Yes

  No

  N/A

• Is each safety output tag correctly configured and connected to a physical output channel?

  Yes

  No

  N/A

• Have you verified that all mapped tags have been conditioned in safety application logic?

  Yes

  No

  N/A

• Have you defined the process parameters that are monitored by fault routines?

  Yes

  No

  N/A

• Have you sealed any safety Add-On Instructions with a instruction signature and recorded the safety instruction signature?

  Yes

  No

  N/A

• Has the program been reviewed by an independent safety reviewer (if required)?

  Yes

  No

  N/A

• Has the review been documented and signed?

  Yes

  No

  N/A

• Author

  Sign

• Date

  Date

• Checked

  Sign

• Date

  Date

• Approved

  Sign

• Date

  Date