BLOG

Process, Machinery or Industrial Automation? Picking the Right Functional Safety Certification Track

Functional safety certification is not issued in general. It is issued in an application area, and the certificate names that area. An engineer who completes an industrial automation track and then works on safety instrumented systems in a refinery holds a valid certificate in the wrong scope. It will not be challenged at the training provider. It will be challenged by a client reviewing competence evidence on a safety case.

This is the most common and most expensive mistake in functional safety certification, and it is entirely avoidable. The fix is to work backwards from the deliverables you produce rather than forwards from the course that had an available date. Our functional safety services pages describe the work each track maps to.

The tracks on offer

Certification bodies separate their programs by sector and standard. TUV SUD, for example, runs five distinct functional safety programs, each tied to its own standard and audience.

Track	Standard	Who it is for
Process	IEC 61508 and IEC 61511	Engineers working on safety instrumented systems in refining, petrochemical, chemical and upstream oil and gas.
Industrial automation	IEC 61508	Engineers working on safety-related control and automation systems outside the process SIS context.
Machinery	Machinery sector, FSCP scheme	Engineers designing or assessing safety functions on machines and production lines.
Automotive	ISO 26262	Engineers on vehicle electrical and electronic systems. A separate world with its own vocabulary.
Rail	EN 5012X series	Engineers on rail signalling and rolling stock safety systems.

TUV Rheinland organizes its FS Engineer certificate into application areas on the same principle: Safety Instrumented Systems, Hardware and Software Design to IEC 61508, Machinery Functional Safety, Automotive System Design to ISO 26262, Automotive Safety Manager, and Process Hazard and Risk Assessment. exida separates by process safety, machinery safety, safety hardware development, safety software development and automotive.

The two tracks people confuse

Process and industrial automation both reference IEC 61508 and the course descriptions read similarly, which is exactly why engineers pick wrong. Process adds IEC 61511 and is the track for safety instrumented systems in a plant: SIF definition, SIL determination, proof testing, the process safety lifecycle. Industrial automation stays at the 61508 level for safety-related control systems generally. If your deliverables include SIL determination or SIS design for a process facility, you need the process track.

Work backwards from your deliverables

Forget the course catalogue for a moment and answer what you actually produce. The answer names your track.

SIL determination, LOPA, SIF design, proof test intervals, SRS documents. Process track, IEC 61511. This is the largest group in North American oil and gas.
Performance Level assessment, ISO 13849 or IEC 62061 work, guarding and interlock design. Machinery track.
Hardware or software development of a product intended for safety use, FMEDA, PFH calculation at component level. Hardware or software design track to IEC 61508.
HAZOP and HAZID facilitation, risk ranking, consequence analysis. Process Hazard and Risk Assessment, which is a distinct area and not the same as SIS.
Vehicle E and E systems, ASIL decomposition. Automotive, ISO 26262.

When one track is not enough

Some roles genuinely straddle two areas. A consultant who facilitates HAZOPs and then designs the resulting safety instrumented functions is doing Process Hazard and Risk Assessment work and SIS work, which are separate application areas. A manufacturing engineer in a plant with both packaged machinery and a process unit may need machinery and process coverage.

Two honest options. Certify in the area where you carry the most accountability and be explicit about the boundary of your competence elsewhere, which is the defensible position. Or hold two certificates, which costs more and takes longer but removes the question. What does not work is certifying in one area and quietly working across both, because a competence challenge during an assessment is the worst moment to discover the gap.

What this means for employers

If you are funding certification for a team, map roles to application areas before you book anything. We routinely see organizations where five engineers hold certificates in three different areas, none of which matches the work the team actually delivers, because training was booked on availability rather than scope. Our teams working in Houston, Calgary and Sarnia see this pattern repeatedly.

Why Choose Arista Cyber

We do the work the certificates describe, across process SIS, machinery and the safety and security boundary. That means our advice on scope comes from producing the deliverables rather than from reading course catalogues. We also work to IEC 62443 on the same assets. See our case studies.

Next Steps

List what you produce, match it to an application area, then find a course. In that order. If your deliverables span two areas, decide now which one carries your accountability, because that decision is easier to make calmly than during an assessment.

Common Questions

Can I use a machinery certificate for process SIS work?

You should not. They are separate application areas covering different standards and different lifecycles. A client reviewing competence evidence on a process safety case will expect the process track.

What is the difference between the process and industrial automation tracks?

Process adds IEC 61511 and targets safety instrumented systems in process facilities, including SIL determination and SIS design. Industrial automation stays at IEC 61508 for safety-related control systems more generally.

Is Process Hazard and Risk Assessment the same as the SIS track?

No. It is a separate application area covering HAZOP and risk assessment facilitation. Engineers who both facilitate HAZOPs and design SIFs are working across two areas.

Do I need to retrain to add a second application area?

Generally yes. Each area has its own training and exam, because the standards and the lifecycle differ.

Does the certificate actually state the application area?

Yes, and that is the point. The area is on the certificate, which is how a client or assessor checks whether your competence matches the work.

Is your team certified in the scope they actually work in?

Arista Cyber maps functional safety roles to the correct certification application areas for industrial employers in the US and Canada, so training budget produces competence that matches your deliverables.

Review your competence mapping