General Description - Shutdown Procedure; Application Changes During Commissioning; Site Acceptance Test Validation; Permits To Work - ABB Triguard SC300E Safety Manual

The Version of RTTS should be confirmed by commanding the System History Report. This
report provides a print of the version number of RTTS in its header. The Library version is
linked to TriBuild and the version number can be confirmed during the start-up window.
4.4.2

General Description - Shutdown Procedure

The process shutdown sequence will be Process dependent and documented in the Bespoke
Operation Manual.
If power is to be removed from the Safety System, this should only be instigated after a safe
process shutdown and the instigation of appropriate manual safety interlocks. The process and
plant must be brought to a safe state and all hazardous materials removed.
System power should first be removed from the main chassis and subsequently the external
chassis power should then be removed from the field outputs and inputs. The processor should
then be set in the reset mode by front panel keyswitch operation.
4.4.3

Application Changes During Commissioning

In the ideal situation there should be no application changes during the commissioning phase of
a Safety Systems Project. When, however, changes are required it is mandatory to follow the
full life cycle change sequence, including re-confirmation of HAZOPS and full validation. All
changes must be fully documented and under version control to the same standard as the
original system design. All changes must be completed prior to the final Site Acceptance Test
Validation.
4.4.4

Site Acceptance Test Validation

Prior to the plant going 'live', a full system validation (proof test) must be completed. This
validation follows the cause and effect/fault schedule using the plant sensors and final elements
as well as the logic solver.
Where practical, random causes should also be tested during this final validation cycle.
Fault tolerances and maintainability should also be re-validated during the Site Acceptance Test
(SAT) including, where practical, field sensors and actuators.
4.4.5

Permits to Work

Prior to the plant going "live" the formalised permit to work procedure for the plant must be in
operation.
4.4.6

Module Slot Security

Prior to the plant going "live" a slot polarisation-coding blocks on each SC300E chassis should
be sealed to prevent polarisation changes during maintenance operation.
Issue 5 - September 2006
Page 30 of 65