Safety
IEC 61511 Proof Testing in a Shutdown: How It Fits the Scope
IEC 61511 expects each safety instrumented function to be proof tested at an interval taken from its reliability calculation, using written procedures and recorded results. Tests that cannot be done on-line, such as full loop tests with the process stopped, are usually planned into a shutdown, while on-line partial tests cover part of the loop between outages. The plant's functional safety management decides, and extending an interval needs a documented review.
How MaintWiz helps: The MaintWiz shutdown module carries this work as work packages with checklists, readings and photos, permits and readiness gates, so the result stays with the work order.
By Jai Balachandran · Technical review: Murali Nerur Pasupathy · Published · Last reviewed
What MaintWiz adds:Critical path and floatReadiness gatesPermits and isolationsChecklists with readings
Test types
Which proof tests belong in the shutdown?
The interval comes from the calculation for each safety instrumented function (SIF); the shutdown is where the tests that need the process stopped are placed.
| Test type | What it covers | When it is done | Source |
|---|---|---|---|
| Comprehensive (full) proof test | All functional elements of the SIF | Off-line, for example during a turnaround, when no on-line method exists | Emerson; exida |
| Partial proof test | One or two of the three elements: sensor, logic solver, final element | Often on-line between outages; a set of partial tests covering all three can count as comprehensive | Emerson |
| Interval extension or overrun | The whole SIF | Needs a documented review; exida's rule of thumb is not to exceed the interval by more than 10 percent | exida (2018) |
UK HSE names BS EN 61511 as the benchmark for functional safety management in the process industries, and its safety lifecycle includes periodic proof testing.
Planning
What should the shutdown plan include for proof testing?
Treat proof testing as scope, not as an afterthought: it drives work, permits and time.
- List every SIF whose test needs the process stopped and give each test its own work package and procedure.
- Check each SIF's last test date against its interval so none lapses before the stop; record any overrun and review it.
- Plan the sensor, logic solver and final element tests with the isolations and permits they need.
- Record date, tester, as-found and as-left values for each test and explain any deferral.
- Agree who reviews a deferral before the stop: sources describe an operations review and an independent review, with findings to plant management.
- Include proof-test labour and time in the schedule: industry commentary describes SIF testing as a significant part of shutdown work scope.
FAQ
Frequently asked questions
Does IEC 61511 say proof tests must be done at a shutdown?
No public source says so. The interval comes from the SIF's reliability calculation; plants often schedule off-line tests at a shutdown because some tests need the process stopped.
What is a partial proof test?
A test of one or two of the three functional elements of a SIF, such as a valve partial-stroke test. Public vendor material says a combination of partial tests covering all three can count as a comprehensive test.
Who decides whether a proof test can be deferred past the shutdown?
The site's functional safety management process. exida describes an operations review, an independent review and findings to plant management, with the extension justified and documented.
What records should proof testing leave?
Written procedures with pass and fail criteria, and a record of date, tester, as-found and as-left results and any deferral.
Does OSHA require proof-test records?
OSHA's process safety management rule requires documented inspection and test records, with frequency consistent with manufacturer recommendations and good engineering practice. It does not name IEC 61511.
Sources
Sources
Public regulator, standards-body and industry sources read on 30 October 2026.
Plan this work in the shutdown module
Book a demo and bring your next shutdown scope. We will show how the work, the permits and the results sit in one plan.