{"id":50187,"date":"2025-11-14T15:24:08","date_gmt":"2025-11-14T14:24:08","guid":{"rendered":"https:\/\/www.gt-engineering.it\/?post_type=pubblicazione&p=50187"},"modified":"2026-03-30T08:21:49","modified_gmt":"2026-03-30T07:21:49","slug":"pt-11-functional-safety-in-high-demand-categories-3-and-4-according-to-iso-13849-1","status":"publish","type":"pubblicazione","link":"https:\/\/www.gt-engineering.it\/en\/pubblications\/in-depth-articles-tuttomisure\/pt-11-functional-safety-in-high-demand-categories-3-and-4-according-to-iso-13849-1\/","title":{"rendered":"P11: Functional safety in high demand: Categories 3 and 4 according to ISO 13849-1"},"content":{"rendered":"\n\n \n \n \n
\n\n \n
\n \n
\n \n \n

\n Summary <\/h2>\n <\/div>\n <\/div>\n \n \n \r\n\r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n <\/picture>\r\n\r\n \r\n\r\n \r\n \r\n <\/div>\n \n
\n \n
\n

This article is part of a series of articles written on Functional Safety of Machinery. We recently introduced one of the two standards used to design Safety Control Systems in High Demand: ISO 13849-1. We remind that ISO 13849-1 is based upon a complex Markov model from which five categories have been derived. Each category describes the required behaviour of subsystems in respect of its resistance to faults, based upon the design considerations previously indicated (MTTFD, DCavg etc..).<\/p>\n

Last year we presented the Category B, 1 and 2. We now continue with the introduction to Category 3. We present the key features and discuss in detail how the Diagnostic channel can be handled.<\/p>\n<\/div> <\/div>\n \n \n

<\/div>\n \n\n <\/div>\n <\/section>\n\n \n\n\n\n\n \n \n \n
\n\n \n
\n \n
\n \n \n

\n What is Functional Safety? <\/h2>\n <\/div>\n <\/div>\n \n \n
\n \n
\n

You need the domain of Functional Safety every time you decide to use an Automation System to reduce the risk associated with a Machinery or a Process<\/strong>. The risk is normally reduced by removing all the energies: those can be electrical (a motor that drives a dangerous movement), pneumatic, hydraulic but also given by process fluids like methane gas for a burner or a pump that increases the pressure in a tank. Every time you decide that, to eliminate the risk, you need a pressure sensor that, in case of a high dangerous value, a valve must be closed, that is when Functional Safety plays the key role.<\/p>\n

An example, more tailored to Machinery, is the case of a Robot Cell; each time an operator enters the cell, an Interlock, placed on the entry gate, must trigger a safety function that stops all the dangerous movements of the robot that operates inside the cell.<\/p>\n

The issue is that one of the elements of this Safety Function can fail. The reliability of the Safety function has to be higher, the hight is the risk it reduces.<\/p>\n

The estimation of the reliability of Safety Functions, implemented using a Control System, is the domain of Functional Safety.<\/strong><\/p>\n

The parts of the machinery control system that provide safety functions are defined by ISO 13849-1 as Safety\u2010related Parts of Control System<\/strong> (SRP\/CS), while IEC 62061 defines them as Safety-related Control System<\/strong> (SCS). These can consist of hardware and\/or software and can either be separated from the machine control system or be an integral part of it.<\/p>\n

We remind that Both ISO 13849-1 and IEC 62061 decompose a Safety-related part of the control System or SRP\/CS into Subsystems<\/strong>, usually made of:<\/p>\n

    \n
  • Input (Sensor)<\/li>\n
  • Logic Solver<\/li>\n
  • Output (Final Element)<\/li>\n<\/ul>\n<\/div> <\/div>\n \n \n
    <\/div>\n \n\n <\/div>\n <\/section>\n\n \n\n\n\n\n \n \n \n
    \n\n \n
    \n \n
    \n \n \n

    \n Introduction to Category 3 of ISO 13849-1 <\/h2>\n <\/div>\n <\/div>\n \n \n
    \n \n
    \n

    In Category 3, both Basic and Well-tried safety principles must be used. Each Category 3 subsystem should be designed so that a single fault does not lead to the loss of the safety function<\/strong>.<\/p>\n

    Moreover, whenever reasonably practicable, a single fault shall be detected at or before the next demand upon the safety function.<\/p>\n<\/div> <\/div>\n \n \n

    <\/div>\n \n\n <\/div>\n <\/section>\n\n \n\n\n\n\n \n \n \n
    \n\n \n \n \n \r\n\r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n <\/picture>\r\n\r\n \r\n\r\n \r\n \r\n <\/div>\n \n
    \n \n
    \n

     <\/p>\n

     <\/p>\n

     <\/p>\n

     <\/p>\n

    Figure 1: Category 3 Architecture<\/strong><\/p>\n<\/div> <\/div>\n \n \n

    <\/div>\n \n\n <\/div>\n <\/section>\n\n \n\n\n\n\n \n \n \n
    \n\n \n \n \n
    \n \n
    \n

    Keys:<\/strong><\/p>\n

      \n
    • Im <\/strong>represent the interconnecting means, typically, electrical wires<\/li>\n
    • I1<\/sub> and I2<\/sub> <\/strong>represent the Inputs (for example two interlocking devices)<\/li>\n
    • L <\/strong>represents the Safety Logic; usually a Safety Module (non-programmable) or a Programmable Logic.<\/li>\n
    • O<\/strong> represents the output; it can be a contactor or a solenoid valve, for example<\/li>\n
    • c <\/strong>is the cross monitoring<\/li>\n
    • m dashed lines <\/strong>represent reasonably practicable fault detection<\/li>\n<\/ul>\n<\/div> <\/div>\n \n \n
      <\/div>\n \n\n <\/div>\n <\/section>\n\n \n\n\n\n\n \n \n \n
      \n\n \n \n \n
      \n \n
      \n

      The Diagnostic Coverage<\/strong> (DCavg<\/sub>) of each subsystem shall be at least low. The MTTFD<\/sub> of each redundant channel shall be low\u2010to\u2010high, depending upon the required performance level (PLr).<\/p>\n

      Measures against CCF<\/strong> are applied.<\/p>\n

      In Category 3, the requirement of single\u2010fault detection does not mean that all faults will be detected. Consequently, the accumulation of undetected\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 faults can lead to a hazardous situation at the machine.<\/p>\n

      The subsystem behaviour of this Category is therefore characterised by:<\/p>\n

        \n
      • Continued performance of the safety function in the presence of a single fault.<\/li>\n
      • Detection of some, but not all, faults.<\/li>\n
      • Possible loss of the safety function, due to accumulation of undetected faults.<\/li>\n<\/ul>\n<\/div> <\/div>\n \n \n
        <\/div>\n \n\n <\/div>\n <\/section>\n\n \n\n\n\n\n \n \n \n
        \n\n \n
        \n \n
        \n \n \n

        \n Diagnostic Coverage in Category 3 <\/h2>\n <\/div>\n <\/div>\n \n \n
        \n \n
        \n

        We see applications where the Diagnostic Coverage is done externally to the Safety Logic<\/strong>, or better, to the Functional Channel. In that case it must be justified that the simplified approach (Annex K of ISO 13849-1) is still applicable. Determination of PFHD<\/sub> based on other modelling techniques is also possible. Figure 2 shows how the Safety-related Block Diagram would look like.<\/p>\n<\/div> <\/div>\n \n \n

        <\/div>\n \n\n <\/div>\n <\/section>\n\n \n\n\n\n\n \n \n \n
        \n\n \n \n \n \r\n\r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n <\/picture>\r\n\r\n \r\n\r\n \r\n \r\n <\/div>\n \n
        \n \n
        \n

         <\/p>\n

         <\/p>\n

         <\/p>\n

         <\/p>\n

        Figure 2: Category 3 Architecture with External Test Equipment <\/strong><\/p>\n<\/div> <\/div>\n \n \n

        <\/div>\n \n\n <\/div>\n <\/section>\n\n \n\n\n\n\n \n \n \n
        \n\n \n \n \n
        \n \n
        \n

        The issue is that the PFHD<\/sub> values of Table K.1 do not correctly represent the Reliability level of that SRP\/CS. An updated Markov Modelling should be done. However, we estimate the difference in PFHD<\/sub> would not be significant, provided at least a Low MTTF can be claimed for the Test Equipment. The requirement for the MTTF of the Test Equipment is therefore less than what is required in Category 2, since in Category 3 and 4 we have a redundant subsystem.<\/p>\n

        One of the conditions would also be that, in case a fault is detected in one of the two channels (for example, the welding of the contacts in a contactor), the safe state<\/strong> (the other contactor is supposed to open) is maintained until the fault is cleared. For that reason, despite it is possible to monitor the contactor status in an Automation PLC, a signal must be sent to the Safety Logic that blocks any reset until the fault is cleared (contactor KR<\/sub> in figure 3). To state it in another way: the Diagnostic can go through a general-purpose PLC, but the reaction has to be Safe. Which also means that one single fault is not able to lead to the loss of the safety function.<\/p>\n

        In the IFA report [6] there are a few examples where a general-purpose PLC is used for diagnostics in a Category 3 or 4 Subsystem and the simplified approach is kept.<\/p>\n<\/div> <\/div>\n \n \n

        <\/div>\n \n\n <\/div>\n <\/section>\n\n \n\n\n\n\n \n \n \n
        \n\n \n \n \n \r\n\r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n <\/picture>\r\n\r\n \r\n\r\n \r\n \r\n <\/div>\n \n
        \n \n
        \n

         <\/p>\n

         <\/p>\n

         <\/p>\n

         <\/p>\n

        Figure 3: Category 3 Architecture with External Test Equipment <\/strong><\/p>\n<\/div> <\/div>\n \n \n

        <\/div>\n \n\n <\/div>\n <\/section>\n\n \n\n\n\n\n \n \n \n
        \n\n \n
        \n \n
        \n \n \n

        \n Example of Category 3 for Input Subsystem: Interlocking Device <\/h2>\n <\/div>\n <\/div>\n \n \n
        \n \n
        \n

        In this example, a Type 2 Interlocking Device (please refer to ISO 14199 for further details), mounted on a movable gate that gives access to a safeguarded area, is controlled by a Safety PLC. In case the guard is opened the Safety Logic must detect it and take appropriate actions. We focus on the input subsystem.<\/p>\n

        For the electrical circuit shown in figure 4, the Safety-related Block Diagram input subsystem<\/strong> is shown in figure 5.<\/p>\n

          \n
        • Safety data:<\/strong><\/li>\n<\/ul>\n

          Interlocking device B1 <\/sub>have B10D<\/sub> = 1\u00b7106<\/sup> and a Mission Time of 20 years.<\/p>\n

            \n
          • Usage frequency:<\/strong><\/li>\n<\/ul>\n

            The interlocking device is supposed to open ten times per hour<\/strong>.<\/p>\n

              \n
            • Avoidance of Systematic Failures<\/strong><\/li>\n<\/ul>\n

              Since we can claim Category 3 (double channels with monitoring), basic and well-tried safety principles are applied<\/strong>. We also verified that enough measures have been applied to prevent common cause failures. <\/strong>(Score CCF > 65).<\/p>\n

                \n
              • Fault Exclusion:<\/strong><\/li>\n<\/ul>\n

                Considering the way the interlocking device was installed, we consider negligible the probability of breakage of the actuator. Therefore, we apply the fault exclusion to the mechanical part of the Interlocking Device: that is the meaning of the FE element in Figure 5. In Figure 6 we show another possible and equivalent representation.<\/p>\n<\/div> <\/div>\n \n \n

                <\/div>\n \n\n <\/div>\n <\/section>\n\n \n\n\n\n\n \n \n \n
                \n\n \n \n \n \r\n\r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n <\/picture>\r\n\r\n \r\n\r\n \r\n \r\n <\/div>\n \n
                \n \n
                \n

                 <\/p>\n

                 <\/p>\n

                 <\/p>\n

                 <\/p>\n

                Figure 4: Interlocking device input subsystem<\/strong><\/p>\n<\/div> <\/div>\n \n \n

                <\/div>\n \n\n <\/div>\n <\/section>\n\n \n\n\n\n\n \n \n \n
                \n\n \n \n \n \r\n\r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n <\/picture>\r\n\r\n \r\n\r\n \r\n \r\n <\/div>\n \n
                \n \n
                \n

                 <\/p>\n

                 <\/p>\n

                 <\/p>\n

                 <\/p>\n

                Figure 5: Input subsystem represented as RBD<\/strong><\/p>\n<\/div> <\/div>\n \n \n

                <\/div>\n \n\n <\/div>\n <\/section>\n\n \n\n\n\n\n \n \n \n
                \n\n \n \n \n \r\n\r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n <\/picture>\r\n\r\n \r\n\r\n \r\n \r\n <\/div>\n \n
                \n \n
                \n

                 <\/p>\n

                 <\/p>\n

                 <\/p>\n

                 <\/p>\n

                Figure 6: Another way to represent the Input subsystem as RBD<\/strong><\/p>\n<\/div> <\/div>\n \n \n

                <\/div>\n \n\n <\/div>\n <\/section>\n\n \n\n\n\n\n \n \n \n\n\n\n\n \n \n \n
                \n\n \n \n \n \r\n\r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n <\/picture>\r\n\r\n \r\n\r\n \r\n \r\n <\/div>\n \n \n \n
                <\/div>\n \n\n <\/div>\n <\/section>\n\n \n\n\n\n\n \n \n \n
                \n\n \n \n \n
                \n \n
                \n

                Being the subsystem in Category 3, MTTFD<\/sub> must be limited to 100 years;<\/p>\n<\/div> <\/div>\n \n \n

                <\/div>\n \n\n <\/div>\n <\/section>\n\n \n\n\n\n\n \n \n \n
                \n\n \n \n \n
                \n \n
                \n
                  \n
                • As a second step<\/strong>, we estimate the Diagnostic Coverage. <\/strong>The cross monitoring of inputs can only be performed when the guard is opened; therefore, that cannot be defined as \u201cCross monitoring of input signals with dynamic test<\/em>\u201d since it is not an automatic dynamic test, even if the trigger is present. That can be defined simply as a \u201ccross monitoring of inputs without dynamic test<\/em>\u201d. The corresponding DC can vary \u201cg. depending on how often a signal change is done by the application<\/em>\u201d. Since the gate is opened at least once per day, the maximum DC value that can be reached is 99%. Since we have the trigger, we assume the highest possible DC in the Category: DC = 98% (medium).<\/li>\n<\/ul>\n

                   <\/p>\n

                    \n
                  • The last step is to refer to table K.1 of ISO 13849-1 where, for Category 3 with medium DC and MTTFD<\/sub> = 100 years, the PFHD<\/sub> = 4,29<\/strong>10-8<\/sup><\/strong> which corresponds to PL e, however, since we did a fault exclusion <\/strong>on the mechanical part of the interlocking device (\u00a7 4.11.2.3), the final result is:<\/li>\n<\/ul>\n

                    PFHD<\/sub> = 4,29<\/strong>\u00b7<\/strong>10-8<\/sup><\/strong> ; PL\u00a0 d<\/strong><\/p>\n

                      \n
                    • Useful Lifetime verification<\/strong><\/li>\n<\/ul>\n

                      The concept is present in both IEC 62061 and ISO 13849-1. We need to verify if the interlocking device has to be replaced before its mission time expires. As shown in the formula hereafter, it has to be replaced after 17 years: it cannot be used for the whole mission time.<\/p>\n<\/div> <\/div>\n \n \n

                      <\/div>\n \n\n <\/div>\n <\/section>\n\n \n\n\n\n\n \n \n \n
                      \n\n \n \n \n \n \n
                      <\/div>\n \n\n <\/div>\n <\/section>\n\n \n\n\n\n\n \n \n \n
                      \n\n \n \n \n \r\n\r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n <\/picture>\r\n\r\n \r\n\r\n \r\n \r\n <\/div>\n \n \n \n
                      <\/div>\n \n\n <\/div>\n <\/section>\n\n \n\n\n\n\n \n \n \n
                      \n\n \n
                      \n \n
                      \n \n \n

                      \n Category 4 <\/h2>\n <\/div>\n <\/div>\n \n \n
                      \n \n
                      \n

                      In Category 4, both Basic and Well-tried safety principles must be used. Each Category 4 subsystem should be designed so that a single fault does not lead to the loss of the safety function.<\/p>\n

                      Moreover, the single fault must be detected at or before the next demand upon the safety function. When this detection is not possible, an accumulation of undetected faults should not lead to the loss of the safety function<\/strong>.<\/p>\n<\/div> <\/div>\n \n \n

                      <\/div>\n \n\n <\/div>\n <\/section>\n\n \n\n\n\n\n \n \n \n
                      \n\n \n \n \n \r\n\r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n <\/picture>\r\n\r\n \r\n\r\n \r\n \r\n <\/div>\n \n
                      \n \n
                      \n

                       <\/p>\n

                       <\/p>\n

                       <\/p>\n

                       <\/p>\n

                      Figure 7: Category 4 Architecture<\/strong><\/p>\n<\/div> <\/div>\n \n \n

                      <\/div>\n \n\n <\/div>\n <\/section>\n\n \n\n\n\n\n \n \n \n
                      \n\n \n \n \n
                      \n \n
                      \n

                      Solid lines for monitoring represent a Diagnostic Coverage that is higher than in Category 3<\/p>\n<\/div> <\/div>\n \n \n

                      <\/div>\n \n\n <\/div>\n <\/section>\n\n \n\n\n\n\n \n \n \n
                      \n\n \n \n \n
                      \n \n
                      \n

                      The Diagnostic Coverage<\/strong> (DCavg<\/sub>) of each subsystem shall be at high. The MTTFD<\/sub> of each redundant channel shall be high and measures against CCF<\/strong> shall be applied.<\/p>\n

                      The subsystem behaviour of this Category is therefore characterised by:<\/p>\n

                        \n
                      • Continued performance of the safety function in the presence of a single fault.<\/li>\n
                      • Detection of faults in time to prevent the loss of the safety function.<\/li>\n
                      • The accumulation of undetected faults is considered.<\/li>\n<\/ul>\n

                        As you can read, Category 4 is very similar to Category 3; that is the reason why IEC 62061 has one architecture that covers both Category 3 and Category 4: Architecture D (1oo2D).<\/p>\n

                        When using Table K.1 to assess the reliability level of a Safety System, to be design a Category 4 subsystem the diagnostic level of both channels must be at least 99%.<\/strong><\/p>\n

                        A Category 4 subsystem reaches a Performance Level PL e<\/strong>, equivalent to SIL 3<\/strong> and the maximum reachable using ISO 13849-1 or IEC 62061.<\/p>\n<\/div> <\/div>\n \n \n

                        <\/div>\n \n\n <\/div>\n <\/section>\n\n \n","protected":false},"excerpt":{"rendered":"

                        We now continue with the introduction to Category 3. We present the key features and discuss in detail how the Diagnostic channel can be handled.<\/p>\n","protected":false},"author":1,"featured_media":49009,"parent":49606,"menu_order":10,"template":"","meta":{"_acf_changed":false,"footnotes":""},"class_list":["post-50187","pubblicazione","type-pubblicazione","status-publish","has-post-thumbnail","hentry"],"acf":[],"yoast_head":"\nP11: Functional safety in high demand: Categories 3 and 4 according to ISO 13849-1 - Gt-Engineering<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.gt-engineering.it\/en\/pubblications\/in-depth-articles-tuttomisure\/pt-11-functional-safety-in-high-demand-categories-3-and-4-according-to-iso-13849-1\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"P11: Functional safety in high demand: Categories 3 and 4 according to ISO 13849-1 - Gt-Engineering\" \/>\n<meta property=\"og:description\" content=\"We now continue with the introduction to Category 3. We present the key features and discuss in detail how the Diagnostic channel can be handled.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.gt-engineering.it\/en\/pubblications\/in-depth-articles-tuttomisure\/pt-11-functional-safety-in-high-demand-categories-3-and-4-according-to-iso-13849-1\/\" \/>\n<meta property=\"og:site_name\" content=\"Gt-Engineering\" \/>\n<meta property=\"article:modified_time\" content=\"2026-03-30T07:21:49+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.gt-engineering.it\/wp-content\/uploads\/2025\/08\/Senza-titolo-51.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1284\" \/>\n\t<meta property=\"og:image:height\" content=\"734\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.gt-engineering.it\/en\/pubblications\/in-depth-articles-tuttomisure\/pt-11-functional-safety-in-high-demand-categories-3-and-4-according-to-iso-13849-1\/\",\"url\":\"https:\/\/www.gt-engineering.it\/en\/pubblications\/in-depth-articles-tuttomisure\/pt-11-functional-safety-in-high-demand-categories-3-and-4-according-to-iso-13849-1\/\",\"name\":\"P11: Functional safety in high demand: Categories 3 and 4 according to ISO 13849-1 - Gt-Engineering\",\"isPartOf\":{\"@id\":\"https:\/\/www.gt-engineering.it\/en\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.gt-engineering.it\/en\/pubblications\/in-depth-articles-tuttomisure\/pt-11-functional-safety-in-high-demand-categories-3-and-4-according-to-iso-13849-1\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.gt-engineering.it\/en\/pubblications\/in-depth-articles-tuttomisure\/pt-11-functional-safety-in-high-demand-categories-3-and-4-according-to-iso-13849-1\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.gt-engineering.it\/wp-content\/uploads\/2025\/08\/Senza-titolo-51.png\",\"datePublished\":\"2025-11-14T14:24:08+00:00\",\"dateModified\":\"2026-03-30T07:21:49+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/www.gt-engineering.it\/en\/pubblications\/in-depth-articles-tuttomisure\/pt-11-functional-safety-in-high-demand-categories-3-and-4-according-to-iso-13849-1\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.gt-engineering.it\/en\/pubblications\/in-depth-articles-tuttomisure\/pt-11-functional-safety-in-high-demand-categories-3-and-4-according-to-iso-13849-1\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.gt-engineering.it\/en\/pubblications\/in-depth-articles-tuttomisure\/pt-11-functional-safety-in-high-demand-categories-3-and-4-according-to-iso-13849-1\/#primaryimage\",\"url\":\"https:\/\/www.gt-engineering.it\/wp-content\/uploads\/2025\/08\/Senza-titolo-51.png\",\"contentUrl\":\"https:\/\/www.gt-engineering.it\/wp-content\/uploads\/2025\/08\/Senza-titolo-51.png\",\"width\":1284,\"height\":734},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.gt-engineering.it\/en\/pubblications\/in-depth-articles-tuttomisure\/pt-11-functional-safety-in-high-demand-categories-3-and-4-according-to-iso-13849-1\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.gt-engineering.it\/en\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Pubblications\",\"item\":\"https:\/\/www.gt-engineering.it\/en\/pubblications\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"In-depth articles tuttomisure\",\"item\":\"https:\/\/www.gt-engineering.it\/en\/pubblications\/in-depth-articles-tuttomisure\/\"},{\"@type\":\"ListItem\",\"position\":4,\"name\":\"P11: Functional safety in high demand: Categories 3 and 4 according to ISO 13849-1\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.gt-engineering.it\/en\/#website\",\"url\":\"https:\/\/www.gt-engineering.it\/en\/\",\"name\":\"Gt-Engineering\",\"description\":\"bizonweb\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.gt-engineering.it\/en\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"P11: Functional safety in high demand: Categories 3 and 4 according to ISO 13849-1 - Gt-Engineering","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.gt-engineering.it\/en\/pubblications\/in-depth-articles-tuttomisure\/pt-11-functional-safety-in-high-demand-categories-3-and-4-according-to-iso-13849-1\/","og_locale":"en_US","og_type":"article","og_title":"P11: Functional safety in high demand: Categories 3 and 4 according to ISO 13849-1 - Gt-Engineering","og_description":"We now continue with the introduction to Category 3. We present the key features and discuss in detail how the Diagnostic channel can be handled.","og_url":"https:\/\/www.gt-engineering.it\/en\/pubblications\/in-depth-articles-tuttomisure\/pt-11-functional-safety-in-high-demand-categories-3-and-4-according-to-iso-13849-1\/","og_site_name":"Gt-Engineering","article_modified_time":"2026-03-30T07:21:49+00:00","og_image":[{"width":1284,"height":734,"url":"https:\/\/www.gt-engineering.it\/wp-content\/uploads\/2025\/08\/Senza-titolo-51.png","type":"image\/png"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.gt-engineering.it\/en\/pubblications\/in-depth-articles-tuttomisure\/pt-11-functional-safety-in-high-demand-categories-3-and-4-according-to-iso-13849-1\/","url":"https:\/\/www.gt-engineering.it\/en\/pubblications\/in-depth-articles-tuttomisure\/pt-11-functional-safety-in-high-demand-categories-3-and-4-according-to-iso-13849-1\/","name":"P11: Functional safety in high demand: Categories 3 and 4 according to ISO 13849-1 - Gt-Engineering","isPartOf":{"@id":"https:\/\/www.gt-engineering.it\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.gt-engineering.it\/en\/pubblications\/in-depth-articles-tuttomisure\/pt-11-functional-safety-in-high-demand-categories-3-and-4-according-to-iso-13849-1\/#primaryimage"},"image":{"@id":"https:\/\/www.gt-engineering.it\/en\/pubblications\/in-depth-articles-tuttomisure\/pt-11-functional-safety-in-high-demand-categories-3-and-4-according-to-iso-13849-1\/#primaryimage"},"thumbnailUrl":"https:\/\/www.gt-engineering.it\/wp-content\/uploads\/2025\/08\/Senza-titolo-51.png","datePublished":"2025-11-14T14:24:08+00:00","dateModified":"2026-03-30T07:21:49+00:00","breadcrumb":{"@id":"https:\/\/www.gt-engineering.it\/en\/pubblications\/in-depth-articles-tuttomisure\/pt-11-functional-safety-in-high-demand-categories-3-and-4-according-to-iso-13849-1\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.gt-engineering.it\/en\/pubblications\/in-depth-articles-tuttomisure\/pt-11-functional-safety-in-high-demand-categories-3-and-4-according-to-iso-13849-1\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.gt-engineering.it\/en\/pubblications\/in-depth-articles-tuttomisure\/pt-11-functional-safety-in-high-demand-categories-3-and-4-according-to-iso-13849-1\/#primaryimage","url":"https:\/\/www.gt-engineering.it\/wp-content\/uploads\/2025\/08\/Senza-titolo-51.png","contentUrl":"https:\/\/www.gt-engineering.it\/wp-content\/uploads\/2025\/08\/Senza-titolo-51.png","width":1284,"height":734},{"@type":"BreadcrumbList","@id":"https:\/\/www.gt-engineering.it\/en\/pubblications\/in-depth-articles-tuttomisure\/pt-11-functional-safety-in-high-demand-categories-3-and-4-according-to-iso-13849-1\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.gt-engineering.it\/en\/"},{"@type":"ListItem","position":2,"name":"Pubblications","item":"https:\/\/www.gt-engineering.it\/en\/pubblications\/"},{"@type":"ListItem","position":3,"name":"In-depth articles tuttomisure","item":"https:\/\/www.gt-engineering.it\/en\/pubblications\/in-depth-articles-tuttomisure\/"},{"@type":"ListItem","position":4,"name":"P11: Functional safety in high demand: Categories 3 and 4 according to ISO 13849-1"}]},{"@type":"WebSite","@id":"https:\/\/www.gt-engineering.it\/en\/#website","url":"https:\/\/www.gt-engineering.it\/en\/","name":"Gt-Engineering","description":"bizonweb","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.gt-engineering.it\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"}]}},"_links":{"self":[{"href":"https:\/\/www.gt-engineering.it\/en\/wp-json\/wp\/v2\/pubblicazione\/50187","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.gt-engineering.it\/en\/wp-json\/wp\/v2\/pubblicazione"}],"about":[{"href":"https:\/\/www.gt-engineering.it\/en\/wp-json\/wp\/v2\/types\/pubblicazione"}],"author":[{"embeddable":true,"href":"https:\/\/www.gt-engineering.it\/en\/wp-json\/wp\/v2\/users\/1"}],"version-history":[{"count":3,"href":"https:\/\/www.gt-engineering.it\/en\/wp-json\/wp\/v2\/pubblicazione\/50187\/revisions"}],"predecessor-version":[{"id":51802,"href":"https:\/\/www.gt-engineering.it\/en\/wp-json\/wp\/v2\/pubblicazione\/50187\/revisions\/51802"}],"up":[{"embeddable":true,"href":"https:\/\/www.gt-engineering.it\/en\/wp-json\/wp\/v2\/pubblicazione\/49606"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.gt-engineering.it\/en\/wp-json\/wp\/v2\/media\/49009"}],"wp:attachment":[{"href":"https:\/\/www.gt-engineering.it\/en\/wp-json\/wp\/v2\/media?parent=50187"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}