Safety View

Manage operational risk with confidence.

Superior alarm and bypass management.

TM

triconex.com
Safety View | 2 triconex.com
triconex.com Safety View | 3

Safety View
Safety View superior alarm and bypass management allows you to manage
operational risk with confidence. It maximizes your return on investment, reduces
the likelihood of unscheduled asset downtime, and reduces maintenance costs.

Manage operational risk with confidence

$10 billion
Estimated cost of annual lost
Safety View is the world’s first software solution for effective alarm and bypass management that is
production due to accidents
certified by TÜV Rheinland to IEC 61508 Systematic Capability 3 (SC3) for use in applications up to Safety
(source: Abnormal Situation
Integrity Level 3 (SIL3).
Management Consortium)
Safety View is an online tool that provides situational awareness of critical conditions and the visibility of
the risk being managed. Safety View draws the plant operator’s attention to changes in critical process

3 – 8%
conditions that require immediate action. It provides clear indication to operators, maintenance engineers,
and shift supervisors of the highest priority/level alarms and/or all safety-critical devices that have been
placed in bypass.
The result on production
A core role of Safety View is to replace expensive and hard-to-modify hard-wired alarm panels and bypass alone from unexpected events
switch arrangements while providing more intuitive information to the operator. Safety View provides typically costs a facility 3 – 8%
contextual information to facilitate decision support and allows users to manage operational risk of capacity (source:
with confidence. Abnormal Situation
Management Consortium)
Safety View meets ANSI/ISA18.1 Annunciator sequences and can be easily and affordably expanded as
additional alarms and bypass functions change.

Features and benefits

42%
Safety View delivers a number of benefits, including:
Average percentage of
• Ideal replacement or alternative to traditional hard-wired annunciator panels incidents caused by people
and work context factors
• Adaptable design allows configuration to your specific requirements
when situations reach alarm
• Standardization lowers costs conditions (source:
Abnormal Situation
• TÜV certified for the highest levels of integrity Management Consortium)

• Enhance operator performance

• Provides more contextual and intuitive information to the operator

• Reduce the likelihood of an adverse safety event

• Minimize the likelihood of unscheduled asset downtime

• Minimize operator errors

Safety View | 4 triconex.com

Manage operational risk

with confidence.
Safety View provides contextual information to facilitate more informed
decision-making.

Clear visibility of priority alarms

Safety View is a PC-based human-machine
interface (HMI) dedicated to the management of
the highest priority alarms (often referred to as
Priority 1 or Level 1 alarms) and is independent
of the distributed control system. Safety View
ensures that priority alarms are always visible to the
operator and not buried in an alarm page or log.

Providing an alternative to traditional hard-wired

annunciator panels, Safety View works with
the industry-leading Triconex family of Safety
TM

Instrumented Systems: Tricon (SIL3), Tricon CX

(SIL3), Trident (SIL3), and the Triconex General
ISA18.1 alarm functions include:
Purpose System (SIL2).
• Sequence Code M: Manual reset
Each Safety View HMI function is directly mapped
• Sequence Code A: Automatic reset to function blocks running in the Triconex logic
solver, which provides the appropriate system
• Sequence Code R: Ring back behaviors and actions. Secure communications
Safety View alarm functions include: between the HMI and logic solver is an integral
element of Safety View.
• Display up to five Process Values per alarm
Configurable to your exact requirements
• Enable/disable individual alarms
Safety View is configurable to your exact
• Acknowledge individual and group alarms requirements, whatever the size or complexity of
your alarm scheme. Special attention has been
• Reactivate alarms acknowledged by an operator
applied to providing a customizable layout and
during the previous work shift
appearance so that Safety View can meet your
• Clear first out alarms individual and unique requirements.

• Silence audible alarms Alarms can be grouped by zones or lines of

equipment to reflect the actual plant layout for a
• Reset alarms in the ring back state more effective operator experience.
Safety View bypass functions include: Redundancy for maximum availability
• Apply and remove bypass tags Safety View can be used in a simplex or redundant
• Add and review notes for bypassed tagnames configuration for maximum availability.

• Configurable bypass behavior

triconex.com Safety View | 5

Safety View provides situational awareness or critical conditions and

visibility of the risks being managed.

Clear visibility — alarms Managing group alarms

Safety View operates independently from the Up to five process variables can be displayed
automation system, ensuring that priority alarms per alarm. The current process condition is also
are clearly visible to the operators and not buried in displayed for each alarm.
an alarm display or alarm log.
Up to 15 tag names can be grouped into a single
The color of each alarm window is configurable alarm group (ideal for Fire and Gas applications).
allowing color schemes to be configured for
Acknowledging alarms
each operator’s requirement (ideal for use by
colorblind personnel). Alarms can be acknowledged globally, on a
specific workstation or even to a specific monitor
The size of each alarm zone adjusts automatically
only. Operators can acknowledge all active alarms,
to display all configured tag names at one time —
selected alarms or individual alarms.
scrolling is not required because tag names are
never hidden. Silencing alarms
When an alarm is activated, the faceplate blinks Different alarm sounds can be configured for
rapidly, the color changes and the audible different alarm types or situations. Active and
alarm sounds. ringback alarms sound an audible alarm until they
are acknowledged or reset. If all audible alarms
Each alarm is supported by a more detailed
are manually muted through Safety View, then the
description, providing operators greater context
speakers will be re-enabled when a new alarm
and understanding of the alarm to facilitate better
is raised.
decision making.
Safety View | 6 triconex.com

Safety View represents conditions impacting the overall safety of the plant.

First-out alarms When a tag is bypassed, it is moved to the

dedicated bypass zone. Bypasses can be
Safety View displays the first-out alarm generated configured with secondary authentication ensuring
from specific Triconex controller(s), making it quick that a tagname is not accidently placed in bypass.
and easy to identify the first event in a series of
events that causes a plant trip or other abnormal Notes can be added and saved to bypasses
process condition. tags (e.g., why the tag is being bypassed, what
maintenance work is being undertaken to repair
Ringback alarms the device, what needs to be done before the tag
Alarms can be configured to provide a ringback. bypass can be removed). This is especially useful
A ringback alarm occurs when an alarm has been during shift hand overs when the new operators
acknowledged and a previously abnormal process need to accept responsibility for items in bypass.
condition returns to normal. The audible/visual General purpose buttons
alarm alerts the operator that the condition is no
longer out of range. General purpose buttons can be configured to
perform specific commands on an alarm, field
Managing bypasses device, or plant. For example, if a process goes
Safety View indicates any safety-critical devices into an abnormal or unsafe state, then you can use
that have been inhibited or placed in bypass, a general purpose button to shut down a piece of
common during maintenance activities (e.g., equipment instead of using a hard-wired switch to
testing or calibration of instruments, maintenance shut it down. General purpose buttons can be used
and repair of instruments, proof testing equipment, to both execute and reverse a command.
during startup, shutdown, and process Managing failed field devices
transitions, etc.).
Safety View indicates when a field device has failed
Bypassing a tagname places that tag out-of- along with the alarm state at the time the failure
service and suppresses the alarm so that an alarm occurred (often known as Device Out Of Service).
will not be triggered even if the related process The field device fault condition continues to appear
value exceeds the defined limit. This ensures that on the alarm until the controller detects that the
the operator is not distracted by alarms associated device has returned to normal operation.
with items or equipment that have been removed
from service.
triconex.com Safety View | 7

Information is displayed in zones making it quick and easy for operators to

respond to critical conditions.

Shift change Industries Served

Shift change is a one-time activation that occurs Oil & Gas

each time a new user logs on, reactivating all Exploration and production

the alarms acknowledged by the previous Refining

shift operator. Chemical

Pipelines and distribution
Secure access and audit trail Energy and power generation

Safety View requires operator login and password

entry for secure access and provides an audit trail
including who performed the action and when (time
and date stamped).

Safety View continually displays the alarm states

and process conditions even when not logged in.
User authentication is only required to perform any
action. Permissions can be assigned to specific
users and specific actions.

Link health status

Safety View provides clear indication of the
connection status of all Safety View components
(workstations, controllers, servers, database) as
connected, partial connection, and disconnected.

Part Number Description

7851-100 2k Tag License

7851-200 5k Tag License

7851-300 10k Tag License

Safety View | 8 triconex.com

TÜVRheinland ®

ZERTIFIKAT
CERTIFICATE No.: 968/EZ 570.00/12

Invensys Systems, Inc. —

Safety View Triconex
Product tested Certificate Holder 26561 Rancho Parkway South
Alarm and Bypass Management Tool Lake Forest, CA 92630
USA

For released and approved versions, refer to

Type designation Manufacturer See Certificate Holder
“Version and Release List”
IEC 61508 Parts 1-7:2010 (in extract)
Codes and standards forming the basis of testing
IEC 61511 Parts 1-3:2004 (in extract)
Safety View Alarm and Bypass Management Tool complies with applicable requirements of the relevant standards
(SC3 acc. to IEC 61508) and can be used in applications up to SIL 3 acc. to IEC 61508, IEC 61511.
Intended application
The bypass/unbypass protocol between the Safety View and Safety Systems complies with the requirements
IEC 61508 up to SIL 3.
For the use of the Safety View Alarm and Bypass Management Tool, the Safety Considerations as Installation
Guide, Annex B, and accompanying user guides provided by the manufacturer need to be observed. The current

TÜV Rheinland Industrie Service GmbH, Am Grauen Stein, 51105 Köln / Germany
Specific requirements
versions of software are specified in the currently valid approved component list. The list is released by the
manufacturer in cooperation with the Test Institute.

Tel.: +49 221 806-1790, Fax: +49 221 806-1539, E-Mail: tuvat@de.tuv.com
This certificate is valid intil 2017-10-30.

Functional Safety The test report-no.: 968/EZ 570.00/12 dated 2012-10-30 is an integral
part of this certificate.
Type Approval

TÜVRheinland ®

FS The holder of valid licence certificate for the product tested is

authorized to affix the test mark shown opposite to products, which
are identical with the product tested.

Köln, 2012-10-30

Certification Body for FS-Products Dipl.-Ing. Heinz Gall

triconex.com Safety View | 9
Schneider Electric

35 rue Joseph Monier

92500 Rueil Malmaison — France
Phone: +33 (0) 1 41 29 70 00

www.schneider-electric.com
www.triconex.com

August 2016

©2016 Schneider Electric. All Rights Reserved.

Schneider Electric | Life Is On is a trademark and the property of Schneider Electric SE, its subsidiaries, and affiliated companies. This document has been
998-19740501_GMA-US printed on recycled paper