SA 

FIRE PROTECTION

SIL Suitable Final Elements

FUNCTIONAL SAFETY OF
FIRE & GAS SYSTEMS
FUNCTIONAL SAFETY
• Definition
• SIS
• Requirements
• IEC 61508
• SIL

F&G SYSTEM
NIAGARA MONITOR FUNCTIONAL SAFETY
ELECTRIC ACTUATOR
VDD DELUGE VALVE

01/11/2022 SIL Suitable Final Elements 2

 DEFINITION OF FUNCTIONAL SAFETY

FUNCTIONAL SAFETY
 Safety is the absence of an 
•
•
Definition
SIS
unacceptable risk of physical injury to 
•
•
Requirements
IEC 61508 people or damage to the properties
• SIL

F&G SYSTEM  Functional Safety is part of the overall 

NIAGARA MONITOR safety which depends on the correct 
ELECTRIC ACTUATOR
VDD DELUGE VALVE
functioning of a safety‐related system

01/11/2022 SIL Suitable Final Elements 3
 SAFETY INSTRUMENTED SYSTEM (SIS)

FUNCTIONAL SAFETY
 A Safety Instrumented System (SIS) or
•
•
Definition
SIS
Safety‐related System is an appropriate 
•
•
Requirements
IEC 61508 system required to reduce the risk 
• SIL

F&G SYSTEM
(shown by a hazard analysis) of the 
NIAGARA MONITOR Equipment Under Control (EUC)
ELECTRIC ACTUATOR
VDD DELUGE VALVE
 A SIS performs one or more Safety 
Functions to reduce the risk

01/11/2022 SIL Suitable Final Elements 4
 REQUIREMENTS TO FUNCTIONAL SAFETY

FUNCTIONAL SAFETY
Two types of requirements are necessary 
•
•
Definition
SIS
to achieve Functional Safety:
• Requirements
•
•
IEC 61508
SIL
 Safety Function Requirements: the 
F&G SYSTEM scope of the Safety Function, derived
NIAGARA MONITOR from the hazard analysis
ELECTRIC ACTUATOR
VDD DELUGE VALVE  Safety Integrity Requirements: the 
probability that the Safety Function will
be performed satisfactorily, derived
from the risk assessment

01/11/2022 SIL Suitable Final Elements 5
 THE STANDARD IEC 61508

FUNCTIONAL SAFETY
IEC 61508 “Functional Safety of electrical
•
•
Definition
SIS
/electronic / programmable electronic 
•
•
Requirements
IEC 61508 (E/E/PE) safety‐related systems”:
• SIL

F&G SYSTEM  Covers all the safety lifecycle activities

NIAGARA MONITOR
ELECTRIC ACTUATOR
 Contains requirements for preventing
VDD DELUGE VALVE failures and controlling failures, 
ensuring safety even when faults are 
present
 Specifies the techniques and measures
to achieve the required Safety Integrity
01/11/2022 SIL Suitable Final Elements 6
 SAFETY INTEGRITY LEVEL (SIL)

FUNCTIONAL SAFETY
 Safety Integrity is the probability that
•
•
Definition
SIS
the SIS will perform the required Safety
•
•
Requirements
IEC 61508 Functions satisfactorily
• SIL

F&G SYSTEM  IEC 61508 specifies 4 levels of safety

NIAGARA MONITOR performance for a Safety Function, 
ELECTRIC ACTUATOR
VDD DELUGE VALVE
called Safety Integrity Level (SIL)
 The Standard details the requirements
necessary to achieve each Safety
Integrity Level. SIL1  is the lowest level
and SIL4 is the highest
01/11/2022 SIL Suitable Final Elements 7
 SAFETY INTEGRITY LEVEL (SIL)
Average Probability of Failure
Safety Integrity Level (SIL)
FUNCTIONAL SAFETY on Demand (PFDavg)
• Definition
• SIS 4 ≥ 10‐5 to < 10‐4
• Requirements
• IEC 61508
3 ≥ 10‐4 to < 10‐3
• SIL 2 ≥ 10‐3 to < 10‐2
F&G SYSTEM 1 ≥ 10‐2 to < 10‐1
NIAGARA MONITOR
ELECTRIC ACTUATOR Low demand mode of operation: 
VDD DELUGE VALVE
frequency of demands for the SIS not 
greater than once per year, and not 
greater than twice the proof‐test 
frequency

01/11/2022 SIL Suitable Final Elements 8
FUNCTIONAL SAFETY
F&G SYSTEM
• Objectives
• Effectiveness
• Components
• Final Elements

NIAGARA MONITOR
ELECTRIC ACTUATOR
FIRE & GAS SYSTEM
VDD DELUGE VALVE

01/11/2022 SIL Suitable Final Elements 9
 TASKS OF F&G SYSTEM

FUNCTIONAL SAFETY
The main tasks of a F&G system are:
F&G SYSTEM
• Tasks
 Detect any hazardous fire or gas 
•
•
Effectiveness
Components
condition
• Final Elements

NIAGARA MONITOR  Alert the personnel in the monitored 

ELECTRIC ACTUATOR area
VDD DELUGE VALVE
 Activate the control and mitigation 
systems

01/11/2022 SIL Suitable Final Elements 10
 F&G SYSTEM EFFECTIVENESS

FUNCTIONAL SAFETY
The F&G system Effectiveness is the 
F&G SYSTEM product of three factors:
• Tasks
•
•
Effectiveness
Components
 Detection Coverage: the fraction of the 
• Final Elements

NIAGARA MONITOR
monitored area in which an eventual
ELECTRIC ACTUATOR hazard would be detected
VDD DELUGE VALVE
 Mitigation Effectiveness: the 
probability that the activation of the 
Final Elements would reduce the 
consequence of a defined hazard
 F&G Safety Availability (SA): 1‐PFDavg
01/11/2022 SIL Suitable Final Elements 11
 COMPONENTS OF F&G SYSTEM

FUNCTIONAL SAFETY
A F&G system consists of:
F&G SYSTEM
• Tasks
 Detectors LOGIC
SOLVER
•
•
Effectiveness
Components  Logic Solver
• Final Elements

NIAGARA MONITOR  Final Elements

ELECTRIC ACTUATOR
VDD DELUGE VALVE
FINAL
DETECTORS
ELEMENTS

A chain is only as strong as its weakest

element
01/11/2022 SIL Suitable Final Elements 12
 FINAL ELEMENTS

FUNCTIONAL SAFETY
The F&G Effectiveness is related to the 
F&G SYSTEM Safety Availability of all its components
• Tasks
• Effectiveness LOGIC NIAGARA
• SOLVER
•
Components
Final Elements
ELECTRIC
MONITORS
NIAGARA MONITOR
ELECTRIC ACTUATOR
VDD DELUGE VALVE DETECTORS
FINAL ELECTRIC
ELEMENTS ACTUATORS

SA has developed  VDD 
DELUGE
SIL suitable Final Elements VALVES
for the main fire‐fighting systems
01/11/2022 SIL Suitable Final Elements 13
FUNCTIONAL SAFETY
F&G SYSTEM
NIAGARA MONITOR
• Description
• Main features
• Advantages
• Application

ELECTRIC ACTUATOR
ELECTRIC MONITOR
VDD DELUGE VALVE NIAGARA SERIES

01/11/2022 SIL Suitable Final Elements 14
 DESCRIPTION

FUNCTIONAL SAFETY
 The fire‐fighting monitors 
F&G SYSTEM Niagara series are electric 
NIAGARA MONITOR
• Description
type remote controlled 
•
•
Main features
Advantages
water cannons, intended to 
• Application

ELECTRIC ACTUATOR
deliver large amount of water 
VDD DELUGE VALVE towards remote targets.

 The monitor architecture comprises 
of a Logic Controller and one or more 
monitor assemblies

01/11/2022 SIL Suitable Final Elements 15
 MAIN FEATURES

FUNCTIONAL SAFETY
 Automatic self‐diagnostic 
F&G SYSTEM analysis
NIAGARA MONITOR
• Description  Remote controlled
• Main features
•
•
Advantages
Application
 Designed for sea water and
ELECTRIC ACTUATOR water foam solution
VDD DELUGE VALVE

 Suitability for SIL2 systems 
validated by Bureau Veritas

01/11/2022 SIL Suitable Final Elements 16
 ADVANTAGES

FUNCTIONAL SAFETY
Automatic self‐diagnostic analysis: at 
F&G SYSTEM regular intervals the self‐diagnostic 
NIAGARA MONITOR
• Description
system in the Logic Controller checks the 
•
•
Main features
Advantages
correct operation on given commands
• Application

ELECTRIC ACTUATOR  Constant monitoring of any possible 

VDD DELUGE VALVE failure of monitor and nozzle
 Reduction of the probability that 
faults, taking place between regular 
maintenance, will pass undetected
 Increased reliability on demand
01/11/2022 SIL Suitable Final Elements 17
 APPLICATION

FUNCTIONAL SAFETY
Designed for petrochemical 
F&G SYSTEM jetty and marine harbor and 
NIAGARA MONITOR
• Description
structure cooling
• Main features
• Advantages Recommended for those systems which 
• Application

ELECTRIC ACTUATOR require:

VDD DELUGE VALVE
 A low probability of failure on demand
 A fire protection system with a high 
Safety Integrity Level
 A large amount of water towards 
remote targets
01/11/2022 SIL Suitable Final Elements 18
FUNCTIONAL SAFETY
F&G SYSTEM
NIAGARA MONITOR
ELECTRIC ACTUATOR
• Description
• Main features
• Application DOUBLE COIL
VDD DELUGE VALVE
ELECTRIC ACTUATOR

01/11/2022 SIL Suitable Final Elements 19
 DESCRIPTION

FUNCTIONAL SAFETY
 The double coil electric actuator has 
F&G SYSTEM been developed to sharply reducing 
NIAGARA MONITOR the probability of failure of a pilot 
ELECTRIC ACTUATOR
• Description cylinder of a gaseous based fire 
• Main features
• Application protection system (carbon dioxide, 
VDD DELUGE VALVE
inert gases, halocarbons) or a water 
mist system

01/11/2022 SIL Suitable Final Elements 20
 MAIN FEATURES

FUNCTIONAL SAFETY
 Redundancy: the actuator has two coils 
F&G SYSTEM which receive two independent signals 
NIAGARA MONITOR from the Logic Solver. If one coil should 
ELECTRIC ACTUATOR
• Description fail, the other coil is able to open the 
• Main features
• Application cylinder valve
VDD DELUGE VALVE
 Suitability for SIL2
systems validated 
by Bureau Veritas

01/11/2022 SIL Suitable Final Elements 21
 APPLICATION

FUNCTIONAL SAFETY
Designed for the protection of gas 
F&G SYSTEM turbines and their generators, electronic 
NIAGARA MONITOR rooms and general installations on FPSO
ELECTRIC ACTUATOR
• Description
• Main features
Recommended for those systems which 
• Application
require:
VDD DELUGE VALVE
 A low probability of failure on demand
 A fire protection system with a high 
Safety Integrity Level

01/11/2022 SIL Suitable Final Elements 22
FUNCTIONAL SAFETY
F&G SYSTEM
NIAGARA MONITOR
ELECTRIC ACTUATOR
VDD DELUGE VALVE
•
•
Description
Principle of operation
DOUBLE CHAMBER DELUGE VALVE
•
•
•
Main features
Advantages
Application
MODEL VDD

01/11/2022 SIL Suitable Final Elements 23
 DESCRIPTION

FUNCTIONAL SAFETY
 The VDD deluge valve combines all the 
F&G SYSTEM functions of a traditional deluge valve 
NIAGARA MONITOR with a fully redundant architecture, 
ELECTRIC ACTUATOR
VDD DELUGE VALVE
designed to achieve a higher Safety 
•
•
Description
Principle of operation
Availability
•
 The VDD deluge valve 
Main features
• Advantages
• Application

has two priming 
chambers, each one
provided with its own 
diaphragm and trim
01/11/2022 SIL Suitable Final Elements 24
 PRINCIPLE OF OPERATION

FUNCTIONAL SAFETY
 In the set position (valve closed)
F&G SYSTEM The pressure of the water trapped in 
NIAGARA MONITOR the priming chambers holds the 
ELECTRIC ACTUATOR
VDD DELUGE VALVE
diaphragms on the valve seats, keeping 
•
•
Description
Principle of operation
the valve closed
•
 In fire condition (valve open)
Main features
• Advantages
• Application
The pressure is released from the 
priming chambers. The water supply 
pressure forces the diaphragm off the 
seats, opening the valve
01/11/2022 SIL Suitable Final Elements 25
 MAIN FEATURES

FUNCTIONAL SAFETY
 Fully redundant system
F&G SYSTEM  Built‐in emergency bypass line that 
NIAGARA MONITOR
operates on both priming chambers in 
ELECTRIC ACTUATOR
VDD DELUGE VALVE
“hot back‐up”
• Description
•
•
Principle of operation
Main features
 Continuous fire protection
 Designed to overcome a double failure
• Advantages
• Application

 Suitability for SIL3 systems validated by 
Bureau Veritas
 Under UL testing for UL/cUL Listing

01/11/2022 SIL Suitable Final Elements 26

 ADVANTAGES

FUNCTIONAL SAFETY
Built‐in emergency bypass line
F&G SYSTEM  Each priming chamber provides the 
NIAGARA MONITOR
nominal design waterway for the fire 
ELECTRIC ACTUATOR
VDD DELUGE VALVE
protection system
• Description
•
•
Principle of operation
Main features
 The system is fully redundant
 The time to respond to a failure is 
• Advantages
• Application

reduced to zero
 No need of an external bypass line on 
the skid: reduction of dimensions, 
weight and cost of the skid
01/11/2022 SIL Suitable Final Elements 27
 ADVANTAGES

FUNCTIONAL SAFETY
Designed to overcome a double failure
F&G SYSTEM  A hydraulic bridge between the trims 
NIAGARA MONITOR
allows each trim to control both the 
ELECTRIC ACTUATOR
VDD DELUGE VALVE
diaphragms
• Description
•
•
Principle of operation
Main features
 In case of failure of one trim, the other 
•
•
Advantages
Application
trim can open both the priming 
chambers
 The VDD deluge valve can overcome a 
double failure

01/11/2022 SIL Suitable Final Elements 28

 ADVANTAGES

FUNCTIONAL SAFETY
Designed to overcome a double failure
F&G SYSTEM  Fault Tree of the VDD deluge valve
NIAGARA MONITOR
ELECTRIC ACTUATOR
VDD DELUGE VALVE
• Description
• Principle of operation
• Main features
• Advantages
• Application

01/11/2022 SIL Suitable Final Elements 29

 ADVANTAGES

FUNCTIONAL SAFETY
Fire protection system always in service
F&G SYSTEM  Two built‐in isolation
NIAGARA MONITOR
valves allow alternate 
ELECTRIC ACTUATOR
VDD DELUGE VALVE
in‐line maintenance 
•
•
Description
Principle of operation to be performed
• Main features
• Advantages
•
 An interlock system prevents 
Application

the accidental or incorrect 
rotation of the isolation valves

01/11/2022 SIL Suitable Final Elements 30

 APPLICATION

FUNCTIONAL SAFETY
 Made of Ni‐Al‐Bronze, a 
F&G SYSTEM highly resistant material
NIAGARA MONITOR
 Specifically designed for 
ELECTRIC ACTUATOR
VDD DELUGE VALVE
harsh environments, such 
•
•
Description
Principle of operation as oil & gas onshore and 
• Main features
•
•
Advantages
Application
offshore and chemical and 
nuclear plants installations
 Sea water, foam 
concentrate and 
water foam solution
01/11/2022 SIL Suitable Final Elements 31
 APPLICATION

FUNCTIONAL SAFETY
Recommended for those systems which 
F&G SYSTEM require:
NIAGARA MONITOR
 A low probability of failure on demand
ELECTRIC ACTUATOR
VDD DELUGE VALVE  A fire protection system with a high 
• Description
•
•
Principle of operation
Main features
Safety Integrity Level
 Continuity of fire protection during 
• Advantages
• Application

maintenance or repair
 Reduction of weight, dimension and 
cost of the skid

01/11/2022 SIL Suitable Final Elements 32

REFERENCE CONTACT
SA  Fire Protection
Viale Europa 121‐123
Cascina ( PISA ) – Italy
Ph. +39.050.70.30.06
Fax. +39.050.70.35.80
[email protected]