Rockwell Automation T8094 8000 Series TMR System Safety Manual - Manual (Page 78)

SAFETY MANUAL
D oc N umber T8094
I ssue 27 – June 2013
Page 57 of 103
Description Reference
Has the allocation of signals to I/O modules
and channels considered each of the signals’
function?
Ensure that potential module and power group
failures result in either continued safety
function or fail-safe operation.
3.2.1
Do safety related inputs and outputs use only
those configurations identified as safety
related
3.2.1
Are there any safety-related, normally de-
energised outputs?
If so have redundant power sources, power
failure warning and line monitoring been
provided?
3.2.4
Have sensor fault conditions been taken into
account?
3.3
Have actuator fault conditions been taken into
account?
3.4
Have field power supplies conforming to
EN6101-1 or EN 60950 been used?
3.13.4
4.2.2 Language Selection Checklist
Description Reference
Has application programming for safety-related
sections been limited to the FB programming
language?
3.11.2
Are any functions not in the previously tested
libraries required? If so has provision been
made to adequately test these functions?
3.11.3
Ensure that the programming languages
classified as non-safety (‘C’ and SFC) are NOT
used for safety-related projects
3.11.2