Revision 1.9    HC900 Process & Safety Controller Safety Manual  1 
01/14 
The Safety Manual 
This manual is intended for users who have Honeywell HC900 product with SIL certification and intend to 
use it in SIF. 
Scope 
The Safety Manual provides information about HC900 that is relevant for integration into a Safety 
Instrumented System (SIS). This manual is aimed at technical personnel responsible for such integration. 
The Safety Manual is a reference guide providing detailed information regarding safety aspects in HC900. 
A reference guide is a HC900 related guide and does not describe tasks in terms of how to perform the task 
in terms of steps to follow. A reference guide can provide input to support decisions required to achieve a 
certain objective. 
Basic Skills and Knowledge 
Before you start work on the HC900 SIS it is assumed that you are certified to do work on safety related 
systems and devices, and that you have appropriate knowledge of: 
• 
The concepts and functioning of the HC900 
• 
The applicable process and equipment under control within the SIS, 
• 
This Safety Manual, 
• 
Site procedures, 
• 
Applicable safety standards (e.g. IEC 61508 and IEC 61511) 
This guide assumes that you have a basic familiarity with the process(es) connected to the equipment under 
control and that you have a complete understanding of the hazard and risk analysis 
Safety Standards for Process & Equipment Under Control (PUC, EUC) 
Processes and Equipment Under Control (PUC/EUC) in the process industry require a high level of safety. 
Safety Instrumented Systems (SIS) are used to perform Safety Instrumented Functions (SIF). 
Instrumentation that is used for SIFs, must meet minimum standards and performance levels. Standards like 
IEC 61508 and IEC 61511 have been developed for this purpose. One of the performance criteria that these 
standards apply is the Safety Integrity Level (SIL). IEC 61508 details the design requirements for achieving 
the required SIL. The safety integrity requirements for each individual safety function may differ. The 
safety function and SIL requirements are derived from hazard analysis and risk assessments. The higher the 
level of adapted safety integrity, the lower the likelihood of dangerous failure of the SIS, These standards 
also address the safety-related sensors and final elements regardless of the technology used. 
The HC900 can be used in a specific SIF that demands SIL 1 or SIL 2.   
Only the HC900 portion of the EUC control system will be documented in this safety manual. 
HC900 can be used only in applications for Demand mode operation.