⚡ Blog Mission: Transforming past incidents into actionable insights to prevent future accidents.
Wednesday

The Difference Between Control Reliable and Safety Rated

Why standard PLCs and relays cannot be used to protect human life in machine guarding.

1. Introduction & Context

When designing automated systems, a dangerous misconception frequently arises: “This PLC is incredibly reliable; it hasn’t crashed in ten years. Therefore, I can wire the emergency stop button directly into it.” This fundamental misunderstanding of Functional Safety has led to tragic outcomes. There is a massive, legally defined difference between equipment that is “highly reliable for production” and equipment that is “safety-rated to protect human life.”

2. The Core Issue

Standard automation equipment (PLCs, standard relays, standard VFDs) are designed to maximize uptime. When they fail, they often fail unpredictably.

  • Standard PLCs Fail Dangerously: If a standard PLC output card suffers a short circuit on its triac or transistor, the output can fail in the “ON” state. If that output controls a robotic arm, the arm will continue moving even if the PLC program is commanding it to stop.
  • Safety-Rated Systems Fail Safely: Safety Relays and Safety PLCs (e.g., Allen-Bradley GuardLogix, Siemens SIMATIC Safety) are fundamentally different hardware. They use redundant processors, cross-checking diagnostics, and forced-guided relays. If an internal component fails, the system detects its own failure and forcefully drops the outputs to a known safe state (de-energized).
  • The Single Point of Failure: Wiring an E-Stop into a standard PLC creates a single point of failure. If the PLC processor locks up or the input card freezes, pressing the E-Stop does nothing. Safety standards (like ISO 13849 and IEC 62061) strictly prohibit relying on single-channel, non-safety-rated electronics for high-risk machine guarding.

3. Actionable Takeaways

  • Separate Control from Safety: Never route E-Stops, light curtains, or safety gate interlocks through standard PLC I/O. They must be wired into dedicated safety relays or Safety PLCs that physically interrupt the motive power to the hazard.
  • Look for the Rating: Ensure all components in a safety circuit (switches, relays, contactors) carry a recognized functional safety rating (SIL or PL). A standard relay is not a safety relay.
  • Understand Forced-Guided Contacts: Use safety relays with positively guided (forced-guided) contacts. This mechanical design ensures that if a normally open contact welds shut, the normally closed contacts are physically prevented from closing, allowing the system to detect the failure and prevent a restart.
Post Conclusion
Correct Practice — Confirmed This post describes a confirmed correct and protected practice.
ELI CRITICALITY SCALE

Likelihood × Consequence Risk Matrix

Every post on this blog is classified using this industrial risk matrix. Badge colors map directly to the resulting criticality level.

Full Guide →
Likelihood ↓ / Consequence → Minor Moderate Serious Fatal
Almost Certain L1 L2 L3 L3
Likely L0 L1 L2 L3
Possible L0 L0 L1 L2
Unlikely L0 L0 L0 L1
Badge Key
L0
Normal
Educational / correct practice
L1
Advisory
Near-miss / equipment damage
L2
Warning
Serious injury potential
L3
Critical
Fatality / catastrophic failure