Many engineers when talking about risk assessment primarily think of the so called “risk estimation”, determining the seriousness of a hazard situation. They wish to estimate the risk first without protective measures and then a second time after implementing them.
But is that really necessary? The simple answer is no.
Applicable standards do not mandate a risk-in/risk-out analysis, which evaluates the risk before (risk-in) and after (risk-out) safety measures are applied. This approach is unnecessary, especially when the primary goal of risk estimation is determining the Performance Level (PL) or Safety Integrity Level (SIL) for control functions. In such cases, assessing the residual risk (risk-out) is irrelevant since the focus is on ensuring the control function meets the required safety performance criteria. For more practical guidance on this topic, go to chapter 3.2 “Selecting machine guards”, which outlines effective methods for safeguarding machinery.
Imagine a set of balance scales. On one side, put the result of the risk estimation, the PLr or SILcl. PLr defines the required reliability of the control circuit. On the other side of the scale, put a control system function that is sufficiently reliable, reaching the required PL/SIL. The balance scales are now balanced, and the requirements are met. Thus, there is no need for an additional risk-out estimate.