This page is intended to provide you with a quick and easy source for useful machinery safety related definitions, collected from a wide variety of sources. In all cases, I have cited the original document from which I drew the definition.
A B C D E F G H I J K L M N O P Q R S T U V W X Y Z
A
Access time (time for access to a danger zone) — The time taken to access the hazardous machine parts after initiation of the stop command by the interlocking device, as calculated on the basis of an approach speed the value of which may be chosen, for each particular case, taking into account the parameters given in prEN 999 ‘Safety of machinery — The positioning of protective equipment in respect of approach speeds of parts of the human body’.
EN 1088, §3.9
Actuator — separate part of an interlocking device which transmits the state of the guard (closed or not closed) to the actuating system
NOTE 1 A guard mounted cam, a key, a shaped tongue, a reflector, a magnet, an RFID tag are examples of actuators.
NOTE 2 See also Annex A to E.
NOTE 3 See examples of actuators in Figure 2.
ISO 14119, §3.12
[See also Coded Actuator]
Actuating System — part of the interlocking device which transmits the position of the actuator and changes the state of the output system
NOTE 1 A roller plunger, a cam linkage system, an optical, inductive or capacitive sensor are examples of an actuating system.
NOTE 2 See examples of actuating systems in Figure 2.
ISO 14119, §3.14
Adequate risk reduction — the achievement of a risk level unlikely to give rise to a situation that could result in harm to any person.
Adjustable barrier guard — a fixed guard that is adjustable as a whole or that incorporates adjustable parts. The adjustment to the guard remains fixed during operation.CSA Z432-04, §3
[See Guard]
Alive — See Live
ALARP — “As Low As Reasonably Practicable”. The ALARP Principle comes from UK OHS law:
“The main tests that are applied in regulating industrial risks are very similar to those we apply in day to day life. They involve determining:
- whether a given risk is so great or the outcome so unacceptable that it must be refused altogether; or
- whether the risk is, or has been made, so small that no further precaution is necessary; or
- if a risk falls between these two states, that it has been reduced to the lowest level practicable, bearing in mind the benefits flowing from its acceptance and taking into account the costs of any further reduction. The injunction laid down in safety law is that any risk must be reduced so far as reasonably practicable, or to a level which is ‘as low as reasonably practicable’ (ALARP principle).”
The Tolerability of Risk from Nuclear Power Stations, UK Health and Safety Executive, HMSO OPSI, London, 1992
At height — access positions located 2.5 m above the surrounding surface or landing.CSA Z432-04, §3
B
Barrier (fixed distance) guard — a fixed guard that does not completely enclose the hazard but that reduces access by virtue of its physical dimensions and its distance from the hazard.CSA Z432-04, §3
[See Guard]
C
Coded Actuator — actuator which is specially designed (e. g. by shape) to actuate a certain position switch
- low level coded actuator — coded actuator for which the number of code versions available need to be 1 to 9;
- medium level coded actuator — coded actuator for which the number of code versions available need to be 10 to ? 1 000;
- high level coded actuator — coded actuator for which the number of code versions available need to be > 1 000.
ISO 14119, §3.13
[See also Actuator]
Common cause failures — failures of different items, resulting from a single event, where these failures are not consequences of each other.
CSA Z432-04, §3
Common mode failures — failures of items characterized by the same fault mode. CSA Z432-04, §3
Common sense — Can be expressed as a function of four elements:
common sense = knowledge + experience + attention + exposure
Where any element is missing or insufficient, there can be no common sense. Wynand Serfontaine and others on the LinkedIN Safety Engineering Network
Complementary protective measures — Protective measures that are neither inherently safe design measures, nor safeguarding (implementation of guards and/or protective devices), nor information for use may have to be implemented as required by the intended use and the reasonably foreseeable misuse of the machine. Such measures shall include, but not be limited to,
a) emergency stop;
b) means of rescue of trapped persons; and
c) means of energy isolation and dissipation.
CSA Z432-04, §6.2.3.5.3
Compliance – “Compliance” is used to describe the action of doing what is required (e. g. an organization “complies” by making something or by fulfilling a regulatory requirement).
ISO/IEC 17000:2004, §3
Conformity – “Conformity” means fulfillment of a requirement. Specified requirements may be stated in normative documents as regulations, standards and technical specifications.
ISO/IEC 17000:2004, §3
Control Guard – See “Interlocking guard with a start function”
Critical safety function — a safety function of a machine whose failure can result in an immediate increase of risk.CSA Z432-04, §3
Current-carrying — See “Live”
D
Danger zone — the zone around the machine (front, back, sides, top, and bottom) where a hazard is created by the motion of the machine components.CSA Z432-04, §3
Deadman or Dead Man — Obsolete term used to refer to an Enabling Device. Use of the term ‘deadman’ should be avoided.
defeat – action that makes interlocking devices inoperative or bypasses them with the result that a machine is used in a manner not intended by the designer or without the necessary safety measures.
ISO 14119
defeat in a reasonably foreseeable manner – defeat of an interlocking device either manually or by using readily available objects.
NOTE 1 This definition includes the removal of switches or actuators using tools that are needed for the intended use of the machine or that are readily available (screw drivers, wrenches, hexagon keys, pliers).
NOTE 2 Readily available objects for substitute actuation can be:
- screws, needles, sheet-metal pieces;
- objects in daily use such as keys, coins, adhesive tape, string and wire;
- spare keys for the trapped-key interlocking devices;
- spare actuators.
ISO 14119
E
Emergency situation — an immediately hazardous situation that needs to be ended or averted quickly in order to prevent injury or damage.CSA Z432-04, §3
- A function that is intended to avert harm or to reduce existing hazards to persons, machinery, or work in progress.CSA Z432-04, §3.
- The operation of a circuit that overrides all other robot controls, removes drive power, causes all moving parts to stop, and removes power from other hazardous functions present in the safeguarded space but does not cause additional hazards.ANSI RIA 15.06−99, §3.11
- The operation of a circuit that overrides all other robot controls, removes drive power, causes all moving parts to stop, and removes power from other hazardous functions present in the safeguarded space but does not cause additional hazards.CSA Z434-03, §3.
Emergency stop button — A red mushroom-headed button that, when activated, will immediately start the emergency stop sequence.CSA Z432-04, §3.
Emergency stop device — Manually actuated control device used to initiate an emergency stop function.ISO 13850 2006, §3.2
Emergency Switching Off — An emergency operation intended to switch off the supply of the electrical energy to all or part of an installation.NFPA 79–07, §3.3.37.
Emergency switching off device — Manually actuated control device used to switch off the supply of electrical energy to all or a part of an installation where a risk of electric shock or another risk of electrical origin is involved.IEC 60204–1, 2005, §3.18
Enabling device — a device that is designed to initiate a machine action or allow the flow of energy to a machine.CSA Z432-04, §3
- a mechanical device that physically prevents the transmission or release of energy, including but not limited to the following: a manually operated electrical circuit breaker; a disconnect switch; a manually operated switch by which the conductors of a circuit can be disconnected from all ungrounded supply conductors; a line valve; a block; and other devices used to block or isolate energy (push-button selector switches and other control-type devices are not energy-isolating devices).CSA Z460 2005
- A mechanical device that physically prevents the transmission or release of energy, including but not limited to the following: a manually operated electrical circuit breaker, a disconnect switch, a manually operated switch by which the conductors of a circuit can be disconnected from all ungrounded supply conductors and, in addition, no pole can be operated independently; a line valve; a block; and any similar device used to block or isolate energy.ANSI Z244.1–2003
- A device that physically prevents the transmission or release of energy, including but not limited to the following: A manually operated electrical circuit breaker; a disconnect switch; a manually operated switch by which the conductors of a circuit can be disconnected from all ungrounded supply conductors, and, in addition, no pole can be operated independently; a line valve; a block; and any similar device used to block or isolate energy. Push buttons, selector switches and other control circuit type devices are not energy isolating devices.29 CFR 1901.147
Energy source — Any source of electrical, mechanical, hydraulic, pneumatic, chemical, thermal, or other energy.29 CFR 1910.147
See also “Hazardous Energy”
F
FIT (unit) — Failure in Time — 1 FIT = 1 x 10–9 failures/h.
The FIT unit finds its origin in reliability engineering for the semiconductor industry. In datasheets and certificates for SIL rated equipment (mainly sensors, actuators and the like intended for use in the process industry according to IEC 61511) the unit FIT is commonly used for presenting failure rate data (lambda values).
The FIT unit was developed to ease writing and reading the information. Most instruments specifically designed for process industry SIL applications have failure rates in the range of 1 x 10–9/h to 3 x 10–6/h. When expressed using FIT these values are written as 10 to 3000 FIT. This is easier to read, and easier to compare datasheets for instruments, etc.
Bert Brouwers, LinkedIn.com, IEC 62061 and ISO 13849 machinery functional safety group, accessed 28-Sep-2011
Fixed guard — a guard kept in place (i.e., closed or attached to a fixed surface) either permanently (e.g., by welding) or by means of fasteners (screws, nuts, etc.), making removal or opening impossible without using tools.CSA Z432-04, §3
See also “Guard”.
Functional Safety — Functional safety is part of the overall safety that depends on a system or equipment operating correctly in response to its inputs. The term “safety-related” is used to describe systems that are required to perform a specific function or functions to ensure risks are kept at an accepted level. Such functions are, by definition, safety functions. Two types of requirements are necessary to achieve functional safety:
- safety function requirements (what the function does;) and
- safety integrity requirements (the likelihood of a safety function being performed satisfactorily).
The safety function requirements are derived from the hazard analysis and the safety integrity requirements are derived from a risk assessment. The higher the level of safety integrity, the lower the likelihood of dangerous failure.
“Functional safety of electrical/electronic/programmable electronic safety-related systems — Part 0: Functional safety and IEC 61508”, IEC/TR 61508–0 Edition 1, International Electrotechnical Commission, Geneva, 2005
G
- Cover or equip (a part of a machine) with a device to protect the operator.Oxford New American Dictionary
- A part of machinery specifically used to provide protection by means of a physical barrier. Depending on its construction, a guard may be called a casing, screen, door, enclosing guard, etc.CSA Z432-04, §3
- A barrier that prevents exposure to an identified hazard. E3.22 Sometimes referred to as a “barrier guard.”ANSI B11.19 2003, §3.22
[See Adjustable barrier guard]
[See Barrier (fixed distance) guard]
[See Fixed guard]
[See Interlocked barrier guard]
[See Movable guard]
- a device that is designed to hold the guard closed and locked until the hazard has ceased.
CSA Z432-04, §3 - Device intended to lock a guard in the closed position and linked to the control system so that:
- the machine cannot operate trntil the guard is closed and locked;
- the guard remains locked until the risk has passed.
EN 1088:1996, §3.4
- device intended to lock a guard in the closed position and linked to the control system.
ISO 14119
H
harm — physical injury or damage to the health of people, or damage to property or the environmentISO Guide 51:99
harmful event — occurrence in which a hazardous situation results in harmISO Guide 51:99
hazard — potential source of harm
NOTE The term hazard can be qualified in order to define its origin or the nature of the expected harm (e.g. electric shock hazard, crushing hazard, cutting hazard, toxic hazard, fire hazard, drowning hazard).ISO Guide 51:99
- Any electrical, mechanical, hydraulic, pneumatic, chemical, nuclear, thermal, gravitational, or other energy that can harm personnel.CSA Z460 2005
- Any electrical, mechanical, hydraulic, pneumatic, chemical, nuclear, thermal, gravity or other energy that could cause injury to personnel.ANSI Z244.1–2003, 2.10
See also “Energy Source”
- Circumstance in which people, property or the environment are exposed to one or more hazardsISO Guide 51:99
- A set of circumstances that may give rise to harm to a person.CSA Z432-04, §3
hierarchy of controls — ranking of measures taken to prevent or reduce hazard exposure according to effectiveness. Measures are ordered from the most effective measures that eliminate hazards to the least effective measures that may achieve only limited risk reduction. Based onUniversity of Southern Queensland (USQ), Human Resources — Glossary. Accessed 24-Feb-2011
HMI — See Human-Machine Interface.
Hold-to-run control device — a control device that is designed to permit movement of machinery as long as the control is held in a set position. Once released, this device automatically returns the machine to the stop position.CSA Z432-04, §3
Human-Machine Interface — This is where people and technology meet. This people/ technology intercept can be as simple as the grip on a hand tool or as complex as the flight deck of a jumbo jet.ISA | Terminology, accessed 3-Mar-11.
I
Interlocked barrier guard — a fixed or movable guard attached and interlocked in such a manner that the machine tool will not cycle or will not continue to cycle unless the guard itself or its hinged or movable section encloses the hazardous area.CSA Z432-04, §3
[See Guard]
Interlocking device (interlock)
- Mechanical, electrical or other type of device, the purpose of which is to prevent the operation of machine elements under specified conditions (generally as long as a guard is not closed).EN 1088:96, §3.1
- mechanical, electrical or other type of device, the purpose of which is to prevent the operation of hazardous machine functions under specified conditions (generally as long as a guard is not closed)
ISO 12100:2010, 3.28.1
Interlocking guard
- Guard associated with an interlocking device, so that:
- the hazardous machine functions ‘covered’ by the guard cannot operate until the guard is closed;
- if the guard is opened while the hazardous machine functions are operating, a stop instruction is given;
- when the guard is closed, the hazardous machine functions ‘covered’ by the guard can operate, but the closure of the guard does not by itself initiate their operation.
NOTE. In English ‘stop signal’ and ‘stop command’ are synonyms for ‘stop instruction’. In German, ‘Stop-Signal’ and ‘Stop-Befehl’ are synonyms for ‘Halt-Befehl’. In French ‘ordre d’arret’ is an all-encompassing term.
EN 1088:96, §3.2 - guard associated with an interlocking device so that, together with the control system of the machine, the following functions are performed:
- the hazardous machine functions “covered” by the guard cannot operate until the guard is closed;
- if the guard is opened while hazardous machine functions are operating, a stop command is given;
- when the guard is closed, the hazardous machine functions “covered” by the guard can operate. The closure of the guard does not by itself start the hazardous machine functions.
ISO 12100:2010, 3.27.4
[See Guard]
Interlocking guard with guard locking — Guard associated with an interlocking device and a
guard locking device so that:
- the hazardous machine functions ‘covered’ by the guard cannot operate until the guard is closed and locked;
- the guard remains closed and locked until the risk of injury from the hazardous machine functions has passed;
- when the guard is closed and locked, the hazardous machine functions ‘covered’ by the guard can operate, but the closure and locking of the guard do not by themselves initiate their operation.
EN 1088:96, §3.3
[See Guard]
[See Guard Locking Device]
interlocking guard with a start function (control guard) — special form of an interlocking guard which, once it has reached its closed position, gives a command to initiate the hazardous machine function(s) without the use of a separate start control.
NOTE ISO 12100:2010, 6.3.3.2.5 gives detailed provisions regarding the condition of use.
ISO 12100:2010, 3.27.6
Industrial robot — an automatically controlled, reprogrammable multi-purpose manipulator programmable in three or more axes, which may be either fixed in place or mobile for use in industrial automation applications.CSA Z434-03, §3
[See Robot]
Industrial robot system — equipment that includes the robot(s) (hardware and software), consisting of the manipulator power supply and control system, the end-effector(s), and any other associated machinery and equipment within the safeguarded space.CSA Z434-03, §3
L
Live — electrically connected to a source of voltage difference, or electrically charged so as to have a voltage different from that of the earth; the term may be used in place of the term “current-carrying”, where the intent is clear, to avoid repetition of the longer term.CSA SPE-1000:99, §2
- placement of a lock or tag on an energy-isolating device in accordance with an established procedure, thereby indicating that the energy-isolating device is not to be operated until removal of the lock or tag in accordance with an established procedure.CSA Z460, 2005
- a mechanical means of locking that uses an individually keyed lock to secure an energy-isolating device in a position that prevents energization of a machine, equipment, or a process.CSA Z460
- The placement of a lockout device on an energy isolating device, in accordance with an established procedure, ensuring that the energy isolating device and the equipment being controlled cannot be operated until the lockout device is removed.29 CFR 1910.147
- A positive means such as a lock that secures an energy isolating device in a position that prevents the energizing of a machine, equipment or process.ANSI Z244.1–2003
- A device that utilizes a positive means such as a lock, either key or combination type, to hold an energy isolating device in the safe position and prevent the energizing of a machine or equipment. Included are blank flanges and bolted slip blinds.29 CFR 1910.147
See also “Energy Isolating Device”
See also “Tagout Device”
lockout/tagout — The placement of a lock/tag on the energy isolating device in accordance with an established procedure, indicating that the energy isolating device shall not be operated until removal of the lock/tag in accordance with an established procedure. (The term “lockout/tagout” allows the use of a lockout device, a tagout device, or a combination of both.)ANSI Z244.1–2003, 2.10
M
machine or machinery — assembly, fitted with or intended to be fitted with a drive system consisting of linked parts or components, at least one of which moves, and which are joined together for a specific application.
NOTE 1: The term “machinery” also covers an assembly of machines which, in order to achieve the same end, are arranged and controlled so that they function as an integral whole.
ISO 12100:2010
Movable guard — a guard generally connected by mechanical means (e.g., hinges or slides) to the machine frame or an adjacent fixed element and that can be opened without the use of tools. The opening and closing of this type of guard may be powered.CSA Z432-04, §3
[See Guard]
P
precautionary principle — (law & policy) The precautionary principle ensures that a substance or activity posing a threat to the environment is prevented from adversely affecting the environment, even if there is no conclusive scientific proof linking that particular substance or activity to environmental damage. The precautionary principle is a guiding principle. Its purpose is to encourage-perhaps even oblige-decision makers to consider the likely harmful effects of their activities on the environment before they pursue those activities. James Cameron and Juli Abouchar, The Precautionary Principle: A Fundamental Principle of Law and Policy for the Protection of the Global Environment, 14 B.C. Int’l & Comp. L. Rev. 1 (1991), http://lawdigitalcommons.bc.edu/iclr/vol14/iss1/2. Get this paper through Google Scholar.
Alternate Definition — The precautionary principle or precautionary approach states that if an action or policy has a suspected risk of causing harm to the public or to the environment, in the absence of scientific consensus that the action or policy is harmful, the burden of proof that it is not harmful falls on those taking the action. Precautionary principle — Wikipedia
Alternate Definition — In order to protect the environment, the precautionary approach shall be widely applied by States according to their capabilities. Where there are threats of serious or irreversible damage, lack of full scientific certainty shall not be used as a reason for postponing cost-effective measures to prevent environmental degradation.1992 Rio Conference. Note — This version of the principle is sometimes referred to as the ‘weak precautionary principle’.
Origin — German, 1930, Vorsorgeprinzip.
Note — The precautionary principle is often cited in OHS work and could be paraphrased, “If a product, process or service is suspected of causing harm to people in the workplace, in the absence of scientific consensus that the product, process or service is harmful, lack of full scientific certainty shall not be used as a reason for postponing measures to reduce the risk of harm to people in the workplace. Those responsible for introducing the product, process or service into the workplace shall bear the burden of proof of safety relating to the safety of the product, process or service.” This is a version of the ‘strong precautionary principle. — Doug Nix
protective measure — means used to reduce risk
NOTE Protective measures include risk reduction by inherently safe design, protective devices, personal protective equipment, information for use and installation, and training. ISO Guide 51:99
Positive mode actuation — If a moving mechanical component inevitably moves another component along with it, either by direct contact or via rigid elements, the second component is said to be actuated in the positive mode (or positively)by the first one.EN 1088:1996, §3.6
positive opening operation of a contact element — The achievement of contact separation as the direct result of a specified movement of the switch actuator through non-resilient members (e.g. not dependent upon springs). (2.2 of chapter 3 ‘Special requirements for control switches with positive opening operation’ of EN 60947−5−1: 1991).
NOTE: For fluid power, the equivalent concept may be called ‘positive mode interruption’.
EN 1088:1996, §3.7
R
Residual risk — risk remaining after protective measures have been taken.CSA Z432-04, §3
Robot — Originally from the Czech, robota, meaning drudgery.
- A mechanical device that sometimes resembles a human and is capable of performing a variety of often complex human tasks on command or by being programmed in advance.
- A machine or device that operates automatically or by remote control.
- A person who works mechanically without original thought, especially one who responds automatically to the commands of others.
Read more: http://www.answers.com/topic/robot#ixzz1C697ZeGf
See also Industrial Robot
- combination of the probability of occurrence of harm and the severity of that harmISO Guide 51:99
- (of harm to an individual) a combination of the probability and the degree of the possible injury or damage to health in a hazardous situation.CSA Z432-04, §3
Risk analysis — a combination of the determination of the limits of the machine, hazard identification, and risk estimation.CSA Z432-04, §3
Risk assessment — the overall process of risk analysis and risk evaluation.CSA Z432-04, §3
Risk estimation — a judgment, on the basis of risk analysis, of whether adequate risk reduction has been achieved.CSA Z432-04, §3
S
safety — freedom from unacceptable risk
NOTE Adapted from ISO/IEC Guide 2:1996, definition 2.5. ISO Guide 51:99
safety–related part of a control system (SRP/CS) — part of a control system that responds to safety-related input signals and generates safety-related output signals.
NOTE 1 The combined safety-related parts of a control system start at the point where the safety-related input signals are initiated (including e.g. the actuating cam and the roller of the position switch) and end at the output of the power control elements (including, for example, the main contacts of a contactor).
NOTE 2 If monitoring systems are used for diagnostics, they are also considered as SRP/CS.
ISO 13849–1:2006, 3.1.1
Stopping time (time for hazard elimination) — The period between the point at which the interlocking device initiates the stop command and the point at which the risk from hazardous machine functions has passed,EN 1088–1996, §3.8
T
tagout — The placement of a tagout device on an energy isolating device, in accordance with an established procedure, to indicate that the energy isolating device and the equipment being controlled may not be operated until the tagout device is removed.29 CFR 1910.147
- A prominent warning means such as a tag and a means of attachment, which can be securely fastened to an energy isolating device to indicate that the energy isolating device and the equipment being controlled may not be operated until the tagout device is removed.ANSI Z244.1–2003, 2.20.1
- A prominent warning device, such as a tag and a means of attachment, which can be securely fastened to an energy isolating device in accordance with an established procedure, to indicate that the energy isolating device and the equipment being controlled may not be operated until the tagout device is removed.29 CFR 1910.147
tolerable risk — risk which is accepted in a given context based on the current values of societyISO Guide 51:99
U
unexpected start-up or unintended start-up — any start-up which, because of its unexpected nature, generates a risk to persons
NOTE 1: This can be caused by, for example:
- a start command which is the result of a failure in, or an external influence on, the control system;
- a start command generated by inopportune action on a start control or other parts of the machine such as a sensor or a power control element;
- restoration of the power supply after an interruption;
- external/internal influences (gravity, wind, self-ignition in internal combustion engines, etc.) on parts of the machine.
NOTE 2: Machine start-up during normal sequence of an automatic cycle is not unintended, but can be considered as being unexpected from the point of view of the operator, Prevention of accidents in this case involves the use of safeguarding measures (see 6.3).
NOTE 3 Adapted from ISO 14118:2000, definition 3.2.
ISO 12100:2010

Great weblog here! Additionally your website rather a lot up very fast! What web host are you the use of? Can I am getting your affiliate hyperlink to your host? I desire my web site loaded up as quickly as yours lol
Biuro Turystyczne(Quote) (Reply)
Biuro,
Thanks! Check out iWeb.ca.
Doug Nix(Quote) (Reply)