Element 16 · EI PSM

Management of safety critical devices

An essential requirement for HS&E and process safety is that safety critical equipment and devices (SCDs) are in service and operating correctly.

"Management must ensure that safety critical equipment and devices are identified and appropriately managed, so that they are in service and functioning correctly."

Deliberately kept narrow. No business document is placed here: stretching the most tightly defined element in the framework would dilute it. Where safety critical devices depend on control systems that could be reached by a cyber attack, that risk is carried in elements 6 and 15.

No documents placed here by the integrated reading.

  • 16.1SCDs are uniquely identified on an asset register which provides up-to-date asset lists and equipment records, including location and equipment specification data. The asset register provides a basis for the planning of SCD testing, inspection and maintenance.
  • 16.2SCD testing, inspection and maintenance programmes are in place. There are defined standards and the programmes are proportionate to the risk associated with failure of the SCDs.
  • 16.3There are procedures to ensure that SCD testing, inspection and maintenance programmes are reviewed regularly commensurate with risk, using findings from the programme, industry experience and incidents to identify and address issues and opportunities for improvement, so that they are kept up to date as living systems.
  • 16.4Feasible plans and schedules are developed for execution of testing, inspection and maintenance programmes.
  • 16.5Adequate numbers of competent personnel are available to carry out the testing, inspection and maintenance programmes.
  • 16.6There are procedures to ensure that findings and recommendations from the SCD testing, inspection and maintenance programmes are appropriately prioritised and followed up.
  • 16.7There are procedures to ensure that temporary disarming or deactivation of critical alarm, control, shutdown, security and emergency response equipment is managed and recorded.
  • 16.8SCD testing, inspection and maintenance programmes are approved by specified named competent individuals.
  • 16.9Disarming, deactivation or bypassing of SCDs is reviewed and approved by specified named competent individuals commensurate with the risk.
  • 16.10Arrangements for management of SCDs are understood and followed; understanding of arrangements, and compliance with them, are regularly tested.
  • 16.11Compliance and performance trends are reviewed by specified levels of management.