Risk Analysis; Safety Functions Of The Emergency Stop Button - Siemens SIMATIC HMI Operating Instructions Manual

2.6

Risk analysis

Carrying out a risk analysis
The following standards must be used to perform the risk analysis:
● EN ISO 12100-1 and EN ISO 12100-2, General design guidelines for machines
● EN 1050 Risk Assessment for Machinery
● EN 954-1 Safety of Machinery
These considerations result in a safety category (B, 1, 2, 3, 4) in accordance with EN 954-1
that ultimately dictates how the safety-related aspects of the system that will be configured
must be furnished.
With the safety-related parts of the Mobile Panel 277F IWLAN the following requirements are
satisfied:
● Category 4 in accordance with EN 954-1.
● SIL 3 in accordance with IEC 61508
● Pl e and Cat. 4 in accordance with EN ISO 13849-1
The risk assessment must take into account that the overall concept of the plant must be
configured accordingly. More detailed instructions on risk assessment and risk reduction are
provided in the system manual "Safety Integrated".
See also
Safety-related operator controls (Page 100)
2.7

Safety functions of the emergency stop button

Safety instructions
There is an emergency stop button on the Mobile Panel 277F IWLAN.
The emergency button on the Mobile Panel 277F IWLAN brings about a safety-related stop
of the configured system in accordance with EN 60204-1:1997, Section 9.2.5.3. You have
the option of implementing a Category 0, 1, or 2 Stop function in accordance with EN 60204-
1: 1997, Section 9.2.2. The stop function category must be selected on the basis of a risk
assessment.
Emergency stop button not available
The emergency stop button on the HMI device must not used as a replacement for a
permanently-wired emergency stop/emergency off on the machine. Install stationary
emergency stop buttons that are available at all times on the configured system.
Mobile Panel 277F IWLAN
Operating Instructions, 12/2007, A5E01003940-01
WARNING
Safety instructions, standards and notes
2.6 Risk analysis
43