IEC 62881:2018
(Main)Cause and effect matrix
Cause and effect matrix
IEC 62881:2018 addresses the setting and implementation of C&E matrices for a consistent use in engineering activities. It aims to describe a simple format used to support a consistent exchange of information between different engineering disciplines involved in project or maintenance activities. The document defines the minimum requirements of the C&E matrix content, which is derived from existing design documents, for example P&ID or verbal descriptions.
The transfer of the relations defined in C&E matrices into a functional or source code for the application programming of PLC/DCS is out of the scope of this document. In addition, this document does not cover the implementation of complex and/or sequential logics at a dedicated automation platform, which will require additional stipulations to be done/ followed.
It is understood, that C&E matrices in fact can be used to document the fault reactions of the plant equipment and therefore can be used as reference point for the necessary safety verifications to be applied.
C&E matrices as defined in this document do not have the same scope as Fishbone or Ishikawa diagrams, which are often named in the literature as cause and effect diagrams.
The contents of the interpretation sheet of April 2019 have been included in this copy.
Matrice des causes et effets
IEC 62881:2018 traite de la définition et de la mise en œuvre des matrices C&E pour une utilisation cohérente dans le cadre des activités d'ingénierie. Son objectif est de spécifier un format simple de prise en charge d'un échange cohérent d'informations entre les différentes disciplines techniques intervenant dans les activités liées au projet ou de maintenance. Le document définit les exigences minimales concernant le contenu des matrices C&E issu des documents de conception existants, par exemple des plans de tuyauterie et d'instrumentation ou des descriptions verbales.
La transformation des relations définies dans les matrices C&E en un code fonctionnel ou source pour la programmation d'application des AP/DCS ne relève pas du domaine d'application du présent document. De plus, le présent document ne traite pas de la mise en œuvre de logiques complexes et/ou séquentielles sur une plate-forme d'automatisation dédiée, qui exige la définition/le respect de spécifications supplémentaires.
Il est entendu que les matrices C&E peuvent en fait servir à documenter les réactions aux anomalies des équipements d'une installation et par conséquent être également utilisées comme point de référence pour les vérifications de sécurité nécessaires à effectuer.
Les matrices C&E telles que définies dans le présent document ne relèvent pas du même domaine d’application que les diagrammes en arête de poisson ou diagrammes d’Ishikawa, également appelés diagrammes de causes-effets dans les ouvrages de référence.
Le contenu de la feuille d'interprétation d'avril 2019 a été pris en considération dans cet exemplaire.
General Information
- Status
- Published
- Publication Date
- 09-Oct-2018
- Technical Committee
- TC 65 - Industrial-process measurement, control and automation
- Drafting Committee
- WG 18 - TC 65/WG 18
- Current Stage
- PPUB - Publication issued
- Start Date
- 28-Sep-2018
- Completion Date
- 10-Oct-2018
Relations
- Effective Date
- 05-Sep-2023
Overview
IEC 62881:2018, titled Cause and Effect Matrix, is an international standard developed by the International Electrotechnical Commission (IEC) focusing on the documentation and use of Cause and Effect (C&E) matrices in industrial process automation. The standard provides a consistent framework for setting up and implementing C&E matrices to enable clear communication and information exchange among different engineering disciplines over the lifecycle of industrial plants.
The C&E matrix offers a structured format to describe logical interlocks and control functions simply and uniformly. It supports process, instrumentation and control (I&C), and electrical engineers in documenting cause-effect relationships derived from process design documents such as Piping and Instrumentation Diagrams (P&IDs) or verbal descriptions. This standard enhances the understanding of plant control logics without requiring detailed knowledge of the underlying PLC/DCS programming.
Key Topics
Scope and Purpose
IEC 62881:2018 outlines minimum content requirements for C&E matrices, focusing on engineering and maintenance activities. It is designed for consistent use in multidisciplinary environments, excluding programming or complex sequential logic implementations.Matrix Design Principles
The standard details best practices for designing C&E matrices including layout principles, attributes for causes and effects, and how to represent logical relations reliably.Uniform Interdisciplinary Access
C&E matrices enable a unified, simple visual tool for various teams-process engineers, automation specialists, and operators-to understand control logic without platform-specific complexities.Application in Linear and Non-Linear Logic
The matrix supports documenting both straightforward and more complex cause-effect relationships but excludes sequential or batch process logic.Role in Safety and Fault Management
While not a safety standard, the matrix can document fault reactions and interlock functions, which helps in safety verifications and regulatory compliance aligned with standards such as IEC 62061.Lifecycle Use Cases
From design through commissioning, start-up, operation, and maintenance, C&E matrices aid in illustrating functional outcomes and assist training personnel on plant operation.
Applications
Engineering Communication
Facilitates clear, unambiguous functional descriptions essential during plant design and retrofitting projects.Maintenance and Troubleshooting
Supports maintenance teams by providing clear insights into what conditions trigger which equipment actions.Regulatory Compliance Support
Assists in fulfilling documentation requirements related to fire safety, machinery directives, and industrial standards by outlining cause-effect relationships clearly.Training and Operations
Offers operators a straightforward reference to understand automatic and manual control actions triggered by various process events.Cross-Disciplinary Coordination
Bridges knowledge gaps between process, electrical, and control disciplines through standardized documentation.
Related Standards
IEC 61131-3 - Programming languages for programmable controllers; complements IEC 62881 by addressing detailed logic programming beyond cause-effect documentation.
ISO 10628 - Diagrams for process industry plants, including P&IDs, providing source documents for C&E matrix derivation.
IEC 62061 - Safety of machinery functional safety of electrical, electronic and programmable electronic control systems; relevant when using C&E matrices for documenting safety-related fault reactions.
IEC 61511 - Functional safety for the process industry sector, applicable when C&E matrices are part of safety instrumented system design verification.
By adhering to IEC 62881:2018, organizations can achieve a harmonized approach to documenting control logic interlocks that enhances communication, supports safety verification, and streamlines engineering workflows-crucial factors for efficient operation in industrial automation environments.
Frequently Asked Questions
IEC 62881:2018 is a standard published by the International Electrotechnical Commission (IEC). Its full title is "Cause and effect matrix". This standard covers: IEC 62881:2018 addresses the setting and implementation of C&E matrices for a consistent use in engineering activities. It aims to describe a simple format used to support a consistent exchange of information between different engineering disciplines involved in project or maintenance activities. The document defines the minimum requirements of the C&E matrix content, which is derived from existing design documents, for example P&ID or verbal descriptions. The transfer of the relations defined in C&E matrices into a functional or source code for the application programming of PLC/DCS is out of the scope of this document. In addition, this document does not cover the implementation of complex and/or sequential logics at a dedicated automation platform, which will require additional stipulations to be done/ followed. It is understood, that C&E matrices in fact can be used to document the fault reactions of the plant equipment and therefore can be used as reference point for the necessary safety verifications to be applied. C&E matrices as defined in this document do not have the same scope as Fishbone or Ishikawa diagrams, which are often named in the literature as cause and effect diagrams. The contents of the interpretation sheet of April 2019 have been included in this copy.
IEC 62881:2018 addresses the setting and implementation of C&E matrices for a consistent use in engineering activities. It aims to describe a simple format used to support a consistent exchange of information between different engineering disciplines involved in project or maintenance activities. The document defines the minimum requirements of the C&E matrix content, which is derived from existing design documents, for example P&ID or verbal descriptions. The transfer of the relations defined in C&E matrices into a functional or source code for the application programming of PLC/DCS is out of the scope of this document. In addition, this document does not cover the implementation of complex and/or sequential logics at a dedicated automation platform, which will require additional stipulations to be done/ followed. It is understood, that C&E matrices in fact can be used to document the fault reactions of the plant equipment and therefore can be used as reference point for the necessary safety verifications to be applied. C&E matrices as defined in this document do not have the same scope as Fishbone or Ishikawa diagrams, which are often named in the literature as cause and effect diagrams. The contents of the interpretation sheet of April 2019 have been included in this copy.
IEC 62881:2018 is classified under the following ICS (International Classification for Standards) categories: 01 - GENERALITIES. TERMINOLOGY. STANDARDIZATION. DOCUMENTATION; 25.040.40 - Industrial process measurement and control. The ICS classification helps identify the subject area and facilitates finding related standards.
IEC 62881:2018 has the following relationships with other standards: It is inter standard links to IEC 62881:2018/COR1:2019. Understanding these relationships helps ensure you are using the most current and applicable version of the standard.
You can purchase IEC 62881:2018 directly from iTeh Standards. The document is available in PDF format and is delivered instantly after payment. Add the standard to your cart and complete the secure checkout process. iTeh Standards is an authorized distributor of IEC standards.
Standards Content (Sample)
IEC 62881 ®
Edition 1.0 2018-10
INTERNATIONAL
STANDARD
NORME
INTERNATIONALE
colour
inside
Cause and effect matrix
Matrice des causes et effets
All rights reserved. Unless otherwise specified, no part of this publication may be reproduced or utilized in any form
or by any means, electronic or mechanical, including photocopying and microfilm, without permission in writing from
either IEC or IEC's member National Committee in the country of the requester. If you have any questions about IEC
copyright or have an enquiry about obtaining additional rights to this publication, please contact the address below or
your local IEC member National Committee for further information.
Droits de reproduction réservés. Sauf indication contraire, aucune partie de cette publication ne peut être reproduite
ni utilisée sous quelque forme que ce soit et par aucun procédé, électronique ou mécanique, y compris la photocopie
et les microfilms, sans l'accord écrit de l'IEC ou du Comité national de l'IEC du pays du demandeur. Si vous avez des
questions sur le copyright de l'IEC ou si vous désirez obtenir des droits supplémentaires sur cette publication, utilisez
les coordonnées ci-après ou contactez le Comité national de l'IEC de votre pays de résidence.
IEC Central Office Tel.: +41 22 919 02 11
3, rue de Varembé info@iec.ch
CH-1211 Geneva 20 www.iec.ch
Switzerland
About the IEC
The International Electrotechnical Commission (IEC) is the leading global organization that prepares and publishes
International Standards for all electrical, electronic and related technologies.
About IEC publications
The technical content of IEC publications is kept under constant review by the IEC. Please make sure that you have the
latest edition, a corrigenda or an amendment might have been published.
IEC Catalogue - webstore.iec.ch/catalogue Electropedia - www.electropedia.org
The stand-alone application for consulting the entire The world's leading online dictionary of electronic and
bibliographical information on IEC International Standards, electrical terms containing 21 000 terms and definitions in
Technical Specifications, Technical Reports and other English and French, with equivalent terms in 16 additional
documents. Available for PC, Mac OS, Android Tablets and languages. Also known as the International Electrotechnical
iPad. Vocabulary (IEV) online.
IEC publications search - webstore.iec.ch/advsearchform IEC Glossary - std.iec.ch/glossary
The advanced search enables to find IEC publications by a 67 000 electrotechnical terminology entries in English and
variety of criteria (reference number, text, technical French extracted from the Terms and Definitions clause of
committee,…). It also gives information on projects, replaced IEC publications issued since 2002. Some entries have been
and withdrawn publications. collected from earlier publications of IEC TC 37, 77, 86 and
CISPR.
IEC Just Published - webstore.iec.ch/justpublished
Stay up to date on all new IEC publications. Just Published IEC Customer Service Centre - webstore.iec.ch/csc
details all new publications released. Available online and If you wish to give us your feedback on this publication or
also once a month by email. need further assistance, please contact the Customer Service
Centre: sales@iec.ch.
A propos de l'IEC
La Commission Electrotechnique Internationale (IEC) est la première organisation mondiale qui élabore et publie des
Normes internationales pour tout ce qui a trait à l'électricité, à l'électronique et aux technologies apparentées.
A propos des publications IEC
Le contenu technique des publications IEC est constamment revu. Veuillez vous assurer que vous possédez l’édition la
plus récente, un corrigendum ou amendement peut avoir été publié.
Catalogue IEC - webstore.iec.ch/catalogue Electropedia - www.electropedia.org
Application autonome pour consulter tous les renseignements
Le premier dictionnaire en ligne de termes électroniques et
bibliographiques sur les Normes internationales,
électriques. Il contient 21 000 termes et définitions en anglais
Spécifications techniques, Rapports techniques et autres
et en français, ainsi que les termes équivalents dans 16
documents de l'IEC. Disponible pour PC, Mac OS, tablettes
langues additionnelles. Egalement appelé Vocabulaire
Android et iPad.
Electrotechnique International (IEV) en ligne.
Recherche de publications IEC -
Glossaire IEC - std.iec.ch/glossary
webstore.iec.ch/advsearchform
67 000 entrées terminologiques électrotechniques, en anglais
La recherche avancée permet de trouver des publications IEC et en français, extraites des articles Termes et Définitions des
en utilisant différents critères (numéro de référence, texte, publications IEC parues depuis 2002. Plus certaines entrées
comité d’études,…). Elle donne aussi des informations sur les antérieures extraites des publications des CE 37, 77, 86 et
projets et les publications remplacées ou retirées. CISPR de l'IEC.
IEC Just Published - webstore.iec.ch/justpublished Service Clients - webstore.iec.ch/csc
Restez informé sur les nouvelles publications IEC. Just Si vous désirez nous donner des commentaires sur cette
Published détaille les nouvelles publications parues. publication ou si vous avez des questions contactez-nous:
Disponible en ligne et aussi une fois par mois par email. sales@iec.ch.
IEC 62881 ®
Edition 1.0 2018-10
INTERNATIONAL
STANDARD
NORME
INTERNATIONALE
colour
inside
Cause and effect matrix
Matrice des causes et effets
INTERNATIONAL
ELECTROTECHNICAL
COMMISSION
COMMISSION
ELECTROTECHNIQUE
INTERNATIONALE
ICS 25.040.40 ISBN 978-2-8322-6078-4
– 2 – IEC 62881:2018 © IEC 2018
CONTENTS
FOREWORD . 3
INTRODUCTION . 5
1 Scope . 6
2 Normative references . 6
3 Terms, definitions and abbreviated terms . 6
3.1 Terms and definitions . 6
3.2 Abbreviated terms . 7
4 Conformity . 8
5 Design of C&E matrices . 8
5.1 Layout principles . 8
5.2 Attributes of causes . 8
5.3 Attributes of effects . 9
5.4 Attributes of relations . 9
5.5 Marking of changes and modifications . 9
6 Use of C&E matrices . 10
6.1 Uniform, interdisciplinary access to functional description . 10
6.2 Application for linear logic . 10
6.3 Application for non-linear logic . 10
6.4 Project workflow. 11
7 Examples . 12
7.1 C&E matrix with minimum requirement for cause and effect,
and alternative 1 for relations . 12
7.2 C&E matrix with minimum requirement for cause and effect,
and alternative 2 for relations . 13
7.3 C&E matrix with optional attributes for cause and effect, and alternative 2
for relations . 14
Bibliography . 15
Figure 1 – C&E matrix . 8
Figure 2 – Project workflow . 11
Figure 3 – C&E matrix with minimum requirement for cause and effect, and alternative
1 for relations . 12
Figure 4 – C&E matrix with minimum requirement for cause and effect, and alternative
2 for relations . 13
Figure 5 – C&E matrix with optional attributes for cause and effect, and alternative 2
for relations . 14
INTERNATIONAL ELECTROTECHNICAL COMMISSION
____________
CAUSE AND EFFECT MATRIX
FOREWORD
1) The International Electrotechnical Commission (IEC) is a worldwide organization for standardization comprising
all national electrotechnical committees (IEC National Committees). The object of IEC is to promote
international co-operation on all questions concerning standardization in the electrical and electronic fields. To
this end and in addition to other activities, IEC publishes International Standards, Technical Specifications,
Technical Reports, Publicly Available Specifications (PAS) and Guides (hereafter referred to as “IEC
Publication(s)”). Their preparation is entrusted to technical committees; any IEC National Committee interested
in the subject dealt with may participate in this preparatory work. International, governmental and non-
governmental organizations liaising with the IEC also participate in this preparation. IEC collaborates closely
with the International Organization for Standardization (ISO) in accordance with conditions determined by
agreement between the two organizations.
2) The formal decisions or agreements of IEC on technical matters express, as nearly as possible, an international
consensus of opinion on the relevant subjects since each technical committee has representation from all
interested IEC National Committees.
3) IEC Publications have the form of recommendations for international use and are accepted by IEC National
Committees in that sense. While all reasonable efforts are made to ensure that the technical content of IEC
Publications is accurate, IEC cannot be held responsible for the way in which they are used or for any
misinterpretation by any end user.
4) In order to promote international uniformity, IEC National Committees undertake to apply IEC Publications
transparently to the maximum extent possible in their national and regional publications. Any divergence
between any IEC Publication and the corresponding national or regional publication shall be clearly indicated in
the latter.
5) IEC itself does not provide any attestation of conformity. Independent certification bodies provide conformity
assessment services and, in some areas, access to IEC marks of conformity. IEC is not responsible for any
services carried out by independent certification bodies.
6) All users should ensure that they have the latest edition of this publication.
7) No liability shall attach to IEC or its directors, employees, servants or agents including individual experts and
members of its technical committees and IEC National Committees for any personal injury, property damage or
other damage of any nature whatsoever, whether direct or indirect, or for costs (including legal fees) and
expenses arising out of the publication, use of, or reliance upon, this IEC Publication or any other IEC
Publications.
8) Attention is drawn to the Normative references cited in this publication. Use of the referenced publications is
indispensable for the correct application of this publication.
9) Attention is drawn to the possibility that some of the elements of this IEC Publication may be the subject of
patent rights. IEC shall not be held responsible for identifying any or all such patent rights.
International Standard IEC 62881 has been prepared by IEC technical committee 65:
Industrial-process measurement, control and automation.
The text of this standard is based on the following documents:
FDIS Report on voting
65/701/FDIS 65/711/RVD
Full information on the voting for the approval of this standard can be found in the report on
voting indicated in the above table.
This publication has been drafted in accordance with the ISO/IEC Directives, Part 2.
– 4 – IEC 62881:2018 © IEC 2018
The committee has decided that the contents of this publication will remain unchanged until
the stability date indicated on the IEC website under "http://webstore.iec.ch" in the data
related to the specific publication. At this date, the publication will be
• reconfirmed,
• withdrawn,
• replaced by a revised edition, or
• amended.
The contents of the corrigendum of April 2019 have been included in this copy.
IMPORTANT – The 'colour inside' logo on the cover page of this publication indicates
that it contains colours which are considered to be useful for the correct
understanding of its contents. Users should therefore print this document using a
colour printer.
INTRODUCTION
Efficient engineering and reliable operation of automated plants strongly depend on clear and
unambiguous description of regulatory controls and logic interlocks. For regulatory controls
this description can typically be done for example via process flow diagrams and P&IDs
(ISO 10628), which are accepted by process and I&C staff in engineering and operation of
manufacturing and process plants. Regarding logic interlocks the widely distributed logic or
functional diagrams are very often regarded by process engineers and plant operators as too
complex (especially when using the fail-safe principle) and overloaded with detailed
information.
This document describes a simple and widely accepted method to document logic interlocks
in process and manufacturing industries – the "cause and effect matrix" (C&E matrix). C&E
matrices can be applied with minimal previous knowledge and easy handling to describe the
functions required for controlling a process independently from the automation platform used.
They enable a sound understanding of the required relation from a process point of view
without the need of detailed knowledge of the platform specific corresponding PLC/DCS
program logic.
During the entire life cycle of a plant (e.g. engineering, commissioning, start-up and operation)
C&E matrices are very useful to illustrate the functionalities of package units and their
interfaces to related sections of the plant. In particular they support the fulfilment of legal or
insurance requirements (e.g. governmental regulations, fire and gas regulations, machinery
directives such as IEC 62061). It is possible to find C&E matrices included in other types of
documents, for example fire protection datasheets but still the principle of identification of the
cause and the effects and their logical relations defined in an intersection applies.
In addition, they can be used to illustrate the consequences of embedded diagnostic functions
(e.g. activation of a trip function in case of detection of a broken wire), the functionality of
installed back-up systems (e.g. fail to start a pump and switch over to a second one) or the
required operator actions to reset plant sections or safety related functions after partial shut
downs.
The information presented by C&E matrices might be structured according to the individual
needs, for example information necessary for process interlocks in electrical switch gears.
C&E matrices describe the relationship between causing conditions – the causes – and the
required outcome or actions – the effects. The causes are herein represented by signals
created by sensors or other means of information; effects are actions automatically done by
actuators (mainly valves and motors) or manually by shift operators, or alarms and messages
provided to operators. Both are linked via a matrix containing the relations. These basic
relations are hence documented in an appropriate and structured form enabling a reliable
information exchange at the interface between process design, electrical engineering, I&C
engineering, etc. In the further course of detail engineering C&E matrices are used as a
starting point for the development of more detailed and platform specific (e.g. fail-safe PLC)
logic enhancements.
During plant operation the C&E matrices can serve as functional descriptions, for example for
the training of plant operation staff.
However, C&E matrices typically are not designed to specify functional sequences (e.g. batch
mode of operation) or functional details as might be provided by other methods, for example
logic descriptions complying with IEC 61131-3.
– 6 – IEC 62881:2018 © IEC 2018
CAUSE AND EFFECT MATRIX
1 Scope
This document addresses the setting and implementation of C&E matrices for a consistent
use in engineering activities. It aims to describe a simple format used to support a consistent
exchange of information between different engineering disciplines involved in project or
maintenance activities. The document defines the minimum requirements of the C&E matrix
content, which is derived from existing design documents, for example P&ID or verbal
descriptions.
The transfer of the relations defined in C&E matrices into a functional or source code for the
application programming of PLC/DCS is out of the scope of this document. In addition, this
document does not cover the implementation of complex and/or sequential logics at a
dedicated automation platform, which will require additional stipulations to be done/ followed.
It is understood, that C&E matrices in fact can be used to document the fault reactions of the
plant equipment and therefore can be used as reference point for the necessary safety
verifications to be applied.
C&E matrices as defined in this document do not have the same scope as Fishbone or
Ishikawa diagrams, which are often named in the literature as cause and effect diagrams.
2 Normative references
The following documents, in whole or in part, are normatively referenced in this document and
are indispensable for its application. For dated references, only the edition cited applies. For
undated references, the latest edition of the referenced document (including any amendments)
applies.
IEC 62708, Document kinds for electrical and instrumentation projects in the process industry
IEC 81346-1, Industrial systems, installations and equipment and industrial products –
Structuring principles and reference designations – Part 1: Basic rules
ISO 7200, Technical product documentation – Data fields in title blocks and document
headers
3 Terms, definitions and abbreviated terms
3.1 Terms and definitions
For the purposes of this document, the following terms and definitions apply.
ISO and IEC maintain terminological databases for use in standardization at the following
addresses:
• IEC Electropedia: available at http://www.electropedia.org/
• ISO Online browsing platform: available at http://www.iso.org/obp
3.1.1
cause and effect matrix
matrix which associates causes (3.1.2) and their effects (3.1.3) with the respective relations
(3.1.4)
Note 1 to entry: A similar definition is found in ISO 10418:2003, Clauses 5 and C.1 for off-shore production
platforms in oil and gas industry.
3.1.2
cause
occurrence in a production process which initiates a reaction of a technical system
Note 1 to entry: A typical cause is a physical change of a process variable which might lead to not wanted and/or
not tolerable conditions. This could be a pressure increase beyond an allowed set point or quality leaving
manufacturing tolerances.
Note 2 to entry: Causes can also be changes in the position of mechanical devices (e.g. position indicators of
valves or movement of robotic arms or the failure of a pump).
Note 3 to entry: A cause is unambiguously defined, registered and reported by its source identifier (e.g. sensor
with tag name and trip point). If such a cause occurs, the system responds as defined in the C&E matrix.
3.1.3
effect
reaction of a technical system to a cause, as defined in the C&E matrix
Note 1 to entry: The effect represents the consequence (e.g. stopping and starting of motors, closing of valves,
start of a back-up system etc.) of the logic action according to the relation defined in the C&E matrix. The effect is
identified by a target with a defined tag name and the triggered action of the target.
3.1.4
relation
functional description which links a cause to an effect
Note 1 to entry: The relation links the triggered action of the target to a certain occurrence.
3.1.5
intersection
area in the C&E matrix where the relations between causes (3.1.2) and effects (3.1.3) are
defined
SEE: Figure 1.
3.1.6
non-linear logic
logic which includes deep nesting, temporal functions and/or sequences
Note 1 to entry: Non-linear logic might be logic including feedback information of logical states, memory functions,
start-up process of a plant section (e.g. a distillation tower), sequential operation modes (e.g. for start of furnaces),
ramps or temporal delay.
3.1.7
linear logic
logic with simple and direct relations of causes and effects
3.2 Abbreviated terms
C&E Cause and effect
DCS Distributed control system
FAT Factory acceptance test
I&C Instrumentation and control
P&ID Piping and instrumentation diagram
PLC Programmable logic controller
SIL Safety integrity level (IEC 61508-1)
SIS Safety instrumented system (IEC 61511 (all parts))
– 8 – IEC 62881:2018 © IEC 2018
4 Conformity
To comply with this document, each of the requirements specified in Clauses 5 and 6 have to
be satisfied to the defined criteria.
5 Design of C&E matrices
5.1 Layout principles
For the design of C&E matrices the following layout principles shall be applied:
– causes shall be listed in the lines;
– effects shall be listed in the columns;
– intersections shall contain the required relation;
– a document header shall be attached according to IEC 62708 or ISO 7200.
Figure 1 – C&E matrix
5.2 Attributes of causes
Mandatory attributes are (see Figure 3):
– identifier as per the designated reference scheme for example IEC 81346-1 including an
activation condition;
EXAMPLE Temperature sensor which triggers an action at a certain temperature, for example: TICSLL1234,
T1234/TICS++ etc.
– at least one referenced document (e.g. P&ID);
– safety integrity level of corresponding safety instrumented function if defined (e.g. SIL3,
SIL2, SIL1 – see IEC 61508);
– marking of changes/modifications (see 5.5).
Optional attributes may be, for example (see Figure 5):
• description (e.g. service text, remarks, notes);
• timing functions (e.g. on-delay, off-delay);
• exact activation condition/trip point (e.g. > 200°C);
• voting (e.g. 2 out of 3);
• AND, OR functions with respect to Boolean logic.
Detailed stipulations may be subject to individual conventions (e.g. company standard) to be
agreed upon and documented in the C&E matrix legend.
5.3 Attributes of effects
Mandatory attributes are:
– effect identifier: tag name according to IEC 81346-1 (e.g. valve – tag name Y1234);
– at least one referenced document (e.g. P&ID);
– safety integrity level of corresponding safety instrumented function if defined (e.g. SIL3,
SIL2, SIL1 – see IEC 61508);
– marking of changes / modifications (see 5.5);
– detailed function (e.g. open valve, switch motor off) if alternative 1 (see 5.4) is used.
Optional attributes may be, for example (see Figure 5):
• description (e.g. service text, remarks, notes);
• fail safe position;
• timing functions (e.g. on-delay, off-delay).
Detailed stipulations may be subject to individual conventions (e.g. company standard) to be
agreed upon and documented in the C&E matrix legend.
5.4 Attributes of relations
There are two different alternatives for the relations.
Alternative 1 (see Figure 3):
– " " (empty): no relation;
– "X": existing relation.
In this case a verbal description of the triggered action is required on the effect side, for
example “close valve”, “switch pump motor off”.
Alternative 2 (see Figure 4):
The use of “X” can be replaced by a simple description of the triggered action.
Those descriptions may be, for example:
• "CL": Close;
• "OP": Open;
• “On”/”Off”.
Other additional simple relations can be used when defined in a legend.
5.5 Marking of changes and modifications
Changes and modifications in C&E matrices shall be marked.
Examples for such markings are shown in Figure 3, Figure 4 and Figure 5.
– 10 – IEC 62881:2018 © IEC 2018
6 Use of C&E matrices
6.1 Uniform, interdisciplinary access to functional description
In general, C&E matrices are a proven basis for interdisciplinary definition of a plant’s
functionality during the entire engineering process, the commissioning, the start-up as well as
the operation and maintenance phase.
In addition to functional information beyond the P&IDs, C&E matrices serve as a description
with multiple purposes:
– between process engineers, electrical engineers, operations and I&C staff during the
general design /engineering phase;
– as requirements documentation and input for manual or automated tests of safety
programs;
– as reliable and sustainable documentation basis in safety reviews and for discussion with
authorities;
– as training information and documentation for plant operators;
– as basis for the DCS/PLC vendors regarding the automation systems’ implementation and
testing (factory acceptance test (FAT), see IEC 62381:2012, Clauses 5 and A.9);
– as basis for the modelling of access control of distributed control systems.
The extent of C&E matrices used for an individual project can vary according to the type of
process (more continuous or more batch mode, or manufacturing oriented) and its complexity
(e.g. multi-product, complicated start-up, coupled production lines). Experience has shown
that for linear logics the necessary functional description can be done by C&E matrices. In
order to ensure their usability, C&E matrices shall be structured according to the structure of
the process or manufacturing plant/plant sections. The proven ease of applicability of C&E
matrices is also based on their simple graphical structure.
For necessary discussion and agreement between different disciplines involved, C&E
matrices can also be used for safety instrumented systems (SIS) (IEC 61511 (all parts)) but it
is important to realize that C&E matrices alone are by far not sufficient to fulfil the high
demand of detail information required for SIS by IEC 61511-1:2016 and IEC 61511-
1:2016/AMD1:2017, 10.3 and IEC 61511-2.
For the implementation in such case it is mandatory to create additional platform specific
functions reflecting the platform oriented safety requirements. Otherwise an unambiguous and
reliable realization of this functionality in safety instrumented systems cannot be guaranteed.
6.2 Application for linear logic
For linear logic, the C&E matrices can be used as the design and test document. The
implementation in any programmable or hardwired logic system can directly be done
according to the requirements defined in the C&E matrices. This implementation can be done
even more easily, if standardised implementation rules (typicals, macros, etc.) are also used.
The C&E matrix shall be the basis for the verification of the implementation during the FAT
(see Figure 2).
6.3 Application for non-linear logic
C&E matrices in general can also be used for non-linear logic. Experience has shown that
C&E matrices may not be the most efficient way of documenting such applications, as either
C&E matrices describing such logic will be hard to understand or will need to reference a lot
of additional documents, so that the readability of such diagrams drops off.
For non-linear logic more detailed logic descriptions as shown in IEC 61131-3 need to be
used (logic diagrams, written function specifications, etc.). The C&E matrix represents the
basis layer for the detailed functional description. However, I&C specialists will perform the
testing of the subsequently implemented DCS/PLC logic based on these detailed function
descriptions (see Figure 2).
6.4 Project workflow
Figure 2 illustrates the utilization of C&E matrices in a dedicated project workflow. In the
engineering phase, the C&E matrix is created in order to stipulate the basic functional
requirements to be met by the application. During the implementation phase, the specific logic
representation is developed. During the FAT phase of the project, verification is done to
demonstrate that the logic implemented meets the functionality specified in the engineering
phase.
Individual project interfaces are required between the different project phases, for example
engineering phase, implementation phase and FAT phase. If the complexity of the logic
requires the generation of project-specific logic representations, an additional interface is
required between engineering disciplines, for example process and I&C.
Engineering Implementation FAT
Process I&C I&C, DCS/PLC vendor I&C Process
Project-specific Project- specific
logic represen- logic represen-
tation tation
System-specific implementation incl.
implementation rules
C&E C&E
IEC
Figure 2 – Project workflow
Interface
Interface
Interface
– 12 – IEC 62881:2018 © IEC 2018
7 Examples
7.1 C&E matrix with minimum requirement for cause and effect, and alternative 1 for
relations
Figure 3 – C&E matrix with minimum requirement for cause and effect,
and alternative 1 for relations
7.2 C&E matrix with minimum requirement for cause and effect, and alternative 2 for
relations
Figure 4 – C&E matrix with minimum requirement for cause and effect,
and alternative 2 for relations
– 14 – IEC 62881:2018 © IEC 2018
7.3 C&E matrix with optional attributes for cause and effect, and alternative 2 for
relations
Figure 5 – C&E matrix with optional attributes for cause and effect,
and alternative 2 for relations
Bibliography
IEC 61131-3, Programmable controllers – Part 3: Programming languages
IEC 61508-1, Functional safety of electrical/electronic/programmable electronic safety-related
systems – Part 1: General requirements
IEC 61511-1:2016, Functional safety – Safety instrumented systems for the process industry
sector – Part 1: Framework, definitions, system, hardware and application programming
requirements
IEC 61511-1:2016/AMD1:2017
IEC 61511-2, Functional safety – Safety instrumented systems for the process industry sector
– Part 2: Guidelines for the application of IEC 61511-1:2016
IEC 62061, Safety of machinery – Functional safety of safety-related electrical, electronic and
programmable electronic control systems
IEC 62381:2012, Automation systems in the process industry – Factory acceptance test (FAT),
site acceptance test (SAT) and site integration test (SIT)
ISO 10418:2003, Petroleum and natural gas industries – Offshore production installations –.
Basic surface process safety systems
ISO 10628, Diagrams for chemical and petrochemical industry – Part 1: Specification of
diagrams
ISO 10628, Diagrams for chemical and petrochemical industry – Part 2: Graphical symbols
___________
– 16 – IEC 62881:2018 © IEC 2018
SOMMAIRE
AVANT-PROPOS . 17
INTRODUCTION . 19
1 Domaine d’application . 21
2 Références normatives . 21
3 Termes, définitions et termes abrégés . 21
3.1 Termes et définitions . 21
3.2 Termes abrégés . 23
4 Conformité . 23
5 Conception des matrices C&E . 23
5.1 Principes de présentation. 23
5.2 Attributs des causes . 24
5.3 Attributs des effets . 24
5.4 Attributs des relations . 25
5.5 Marquage des variations et modifications. 25
6 Utilisation des matrices C&E . 25
6.1 Accès interdisciplinaire uniforme à une description fonctionnelle . 25
6.2 Application pour la logique linéaire . 26
6.3 Application pour la logique non linéaire . 26
6.4 Déroulement de projet . 27
7 Exemples . 28
7.1 Matrice C&E avec exigence minimale applicable à la cause et à l'effet,
et variante 1 pour les relations . 28
7.2 Matrice C&E avec exigence minimale applicable à la cause et à l'effet,
et variante 2 pour les relations . 29
7.3 Matrice C&E avec attributs facultatifs applicables à la cause et à l'effet,
et variante 2 pour les relations . 30
Bibliographie . 31
Figure 1 – Matrice C&E . 23
Figure 2 – Déroulement de projet . 27
Figure 3 – Matrice C&E avec exigence minimale applicable à la cause et à l'effet, et
variante 1 pour les relations . 28
Figure 4 – Matrice C&E avec exigence minimale applicable à la cause et à l'effet, et
variante 2 pour les relations . 29
Figure 5 – Matrice C&E avec attributs facultatifs applicables à la cause et à l'effet, et
variante 2 pour les relations . 30
COMMISSION ÉLECTROTECHNIQUE INTERNATIONALE
____________
MATRICE DES CAUSES ET EFFETS
AVANT-PROPOS
1) La Commission Électrotechnique Internationale (IEC) est une organisation mondiale de normalisation
composée de l'ensemble des comités électrotechniques nationaux (Comités nationaux de l’IEC). L’IEC a pour
objet de favoriser la coopération internationale pour toutes les questions de normalisation dans les domaines
de l'électricité et de l'électronique. À cet effet, l’IEC – entre autres activités – publie des Normes internationales,
des Spécifications techniques, des Rapports techniques, des Spécifications accessibles au public (PAS) et des
Guides (ci-après dénommés "Publication(s) de l’IEC"). Leur élaboration est confiée à des comités d'études, aux
travaux desquels tout Comité national intéressé par le sujet traité peut participer. Les organisations
internationales, gouvernementales et non gouvernementales, en liaison avec l’IEC, participent également aux
travaux. L’IEC collabore étroitement avec l'Organisation Internationale de Normalisation (ISO), selon des
conditions fixées par accord entre les deux organisations.
2) Les décisions ou accords officiels de l’IEC concernant les questions techniques représentent, dans la mesure
du possible, un accord international sur les sujets étudiés, étant donné que les Comités nationaux de l’IEC
intéressés sont représentés dans chaque comité d’études.
3) Les Publications de l’IEC se présentent sous la forme de recommandations internationales et sont agréées
comme telles par les Comités nationaux de l’IEC. Tous les efforts raisonnables sont entrepris afin que l’IEC
s'assure de l'exactitude du contenu technique de ses publications; l’IEC ne peut pas être tenue responsable de
l'éventuelle mauvaise utilisation ou interprétation qui en est faite par un quelconque utilisateur final.
4) Dans le but d'encourager l'uniformité internationale, les Comités nationaux de l’IEC s'engagent, dans toute la
mesure possible, à appliquer de façon transparente les Publications de l’IEC dans leurs publications nationales
et régionales. Toutes divergences entre toutes Publications de l’IEC et toutes publications nationales ou
régionales correspondantes doivent être indiquées en termes clairs dans ces dernières.
5) L’IEC elle-même ne fournit aucune attestation de conformité. Des organismes de certification indépendants
fournissent des services d'évaluation de conformité et, dans certains secteurs, accèdent aux marques de
conformité de l’IEC. L’IEC n'est responsable d'aucun des services effectués par les organismes de certification
indépendants.
6) Tous les utilisateurs doivent s'assurer qu'ils sont en possession de la dernière édition de cette publication.
7) Aucune responsabilité ne doit être imputée à l’IEC, à ses administrateurs, employés, auxiliaires ou mandataires,
y compris ses experts particuliers et les membres de ses comités d'études et des Comités nationaux de l’IEC,
pour tout préjudice causé en cas de dommages corporels et matériels, ou de tout autre dommage de quelque
nature que ce soit, directe ou indirecte, ou pour supporter les coûts (y compris les frais de justice) et les
dépenses découlant de la publication ou de l'utilisation de cette Publication de l’IEC ou de toute autre
Publication de l’IEC, ou au crédit qui lui est accordé.
8) L'attention est attirée sur les références normatives citées dans cette publication. L'utilisation de publications
référencées est obligatoire pour une application correcte de la présente publication.
9) L’attention est attirée sur le fait que certains des éléments de la présente Publication de l’IEC peuvent faire
l’objet de droits de brevet. L’IEC ne saurait être tenue pour responsable de ne pas avoir identifié de tels droits
de brevets et de ne pas avoir signalé leur existence.
La Norme internationale IEC 62881 a été établie par le comité d'études 65 de l’IEC: Mesure,
commande et automation dans les processus industriels.
Le texte de cette norme est issu des documents suivants:
FDIS Rapport de vote
65/701/FDIS 65/711/RVD
Le rapport de vote indiqué dans le tableau ci-dessus donne toute information sur le vote ayant
abouti à l'approbation de cette norme.
Cette publication a été rédigée selon les Directives ISO/IEC, Partie 2.
– 18 – IEC 62881:2018 © IEC 2018
Le comité a décidé que le contenu de cette publication ne sera pas modifié avant la date de
stabilité indiquée sur le site web de l’IEC sous «http://webstore.iec.ch» dans les données
relatives à la publication recherchée. À cette date, la publication sera
• reconduite,
• supprimée,
• remplacée par une édition révisée, ou
• amendée.
Le contenu du corrigendum d'avril 2019 a été pris en considération dans cet exemplaire.
IMPORTANT – Le logo «colour inside» qui se trouve sur la page de couverture de
cette publication indique qu'elle contient des couleurs qui sont considérées comme
utiles à une bonne compréhension de son contenu. Les utilisateurs devraient, par
conséquent, imprimer cette publication en utilisant une imprimante couleur.
INTRODUCTION
Des descriptions claires et non ambiguës des organes de commande régulateurs et des
verrouillages logiques conditionnent fortement l'application d'une ingénierie efficace et le
fonctionnement fiable des installations automatisées. Des schémas, tels que des schémas
des procédés et des plans de tuyauterie et d'instrumentation (ISO 10628) acceptés par le
personnel chargé de ces activités dans le cadre d'applications d'ingénierie et du
fonctionnement d'installations de fabrication et de transformation, permettent généralement
de décrire les organes de commande régulateurs. Les ingénieurs de procédé et les
exploitants d'installations considèrent très souvent les schémas logiques ou fonctionnels
largement répandus et associés aux verrouillages logiques comme excessivement complexes
(notamment lorsqu'ils appliquent le principe de sécurité intégrée) et comportant u
...










Questions, Comments and Discussion
Ask us and Technical Secretary will try to provide an answer. You can facilitate discussion about the standard in here.
Loading comments...