Rockwell Automation 8000 Series TMR System - Manual (Page 11)

OPERATOR AND MAINTENANCE MANUAL
D o c N o 5 5 2 8 6 4
I s s u e 0 2 J u n e 2 0 0 4 P a g e 1 o f 2 2
OPERATOR AND MAINTENANCE MANUAL
1. INTRODUCTION
1.1 MAINTAINING SAFETY
This manual should be read in conjunction with the safety manual (product number
8094)
1.2 OPERATION AND MAINTENANCE PLAN
This Operation and Maintenance requirement ensures that functional safety
continues beyond the design, production, installation and commissioning of the
system. The in-service operation and maintenance is normally beyond the system
integrator responsibility. However, guidance and procedures shall be provided to
ensure that the persons or organisations responsible for Operation and
Maintenance maintain the intended safety levels.
The Operating and Maintenance Plan shall include the following:
•
Although the TMR product requires no specific power-up and power-down
requirements, it is possible that the project specific implementation will
dictate specific action sequences. These sequences shall be clearly
defined, ensuring that the sequences cannot result in periods of the
system’s inability to respond safely whilst a hazard may be present.
•
The Maintenance Plan shall detail the procedures to be adopted when
re-calibrating sensors, actuators and I/O modules. The recommended
calibration periods shall also be included.
•
The Maintenance Plan shall include the procedure to be adopted for
testing the system, and the maximum intervals between manual testing.
•
Sensor and actuator maintenance will require the application of overrides
in certain circumstances. Where these are required, they shall be
implemented in accordance with the guidance provided within this
document.
1.3 PLANNED MAINTENANCE
In most system configurations there will be some elements that are not tested by
the system’s internal test facilities. These may be the final passive elements in
some I/O modules types, the sensors and actuators themselves and the field
wiring. A regime of Planned Maintenance testing shall be adopted to ensure that
faults do not accumulate within those elements that could ultimately lead to the
system’s inability to perform its required safety functions. The maximum interval
between these tests shall be defined during the system design, i.e. before
installation. It is highly recommended that the test interval be less than 12 months.