I85PREP
⌘ K
FSOE Qualifying Test study materials
FSOE Qualifying Test study resources

FSOE Qualifying Test: Domain 8: Integration, verification and validation

FSOE Qualifying Test · Work through your exam, one topic at a time.

All guide sections

Domain 8: Integration, verification and validation

Domain 8 tests integration, verification and validation: turning a risk assessment into a verified FSoE safety function, then documenting it. The exam wants the chain from risk assessment inputs to SIL/PL verification, proof tests, and traceable records.

Core rules

  • Risk assessment inputs define the safety function, required risk reduction, and process safety time. These drive the SIL/PL target and the FSoE watchdog, response time, and diagnostic coverage assumptions.
  • SIL/PL verification: calculate PFHd or PFDavg for the complete function, including sensor, FSoE master, black channel residual error, FSoE slave, and actuator. Check architectural constraints and systematic capability, not just the numerical total.
  • Integration: configure FSoE address, connection ID, watchdog, mapping, and slave-to-slave links; verify that the master and slave agree. Test normal exchange and fault injection: cable break, delayed frame, corrupted frame, duplicate frame, and slave power loss.
  • Proof tests: define interval and method for revealing dangerous undetected failures. FSoE diagnostics can support proof-test credits only where the standard and safety plan allow it; they do not remove the need for proof testing.
  • Documentation: safety requirements specification, configuration records, calculation, test results, fault-injection evidence, and change control. Validation must show the installed function achieves the required risk reduction.

Worked example

A risk assessment assigns SIL 2 to a guard-door function with FSoE remote I/O. The PFHd budget is 10^-6/h. Sensor and actuator total 4×10^-7/h; the FSoE path is claimed at 1×10^-8/h including black-channel residual error. The sum is 4.1×10^-7/h, within SIL 2. Integration tests inject a 30 ms delay against a 20 ms watchdog and confirm the door output drops. The proof test procedure checks the full function annually and records the result against the safety requirements.

Traps

Using a vendor certificate as the validation of the installed function. Forgetting the black-channel residual error. Changing the watchdog during commissioning without updating the calculation. Documenting only the normal test and not the fault-injection results.