Scenario 04 — Networked Safety PLC Architecture — Control Systems Engineering Field Guide

Page review information

Edition covered: ISO 13849-1 / IEC 62061 · IEC 62443 — exact governing revisions not yet recorded — verify on the linked standards pages
Content status: Reviewed
Coverage: Routing scenario for a networked safety PLC; safety-function path plus cybersecurity overlay at overview level.
Last reviewed: August 2026
Primary reference: The official published standard — required for final decisions

Confirm the governing edition, jurisdiction, and project-specific requirements before applying anything on this page.

Project Summary

Field	Detail
Application	Safety PLC with Ethernet/network connectivity
Safety standard	ISO 13849-1 (PL) or IEC 62061 (SIL) for safety functions
Cybersecurity standard	IEC 62443 for network and system security
Software standard	IEC 61131-3 for PLC programming

Starting Standards

Standard	Role	Status
ISO 13849-1 2023	PL design for safety functions	Planned Review pending
IEC 62061 2021	SIL design for safety functions (alternative)	Planned Review pending
IEC 62443	Industrial cybersecurity	Review pending — detail page
IEC 61131-3	PLC programming	Routing reference

Two-Layer Architecture

Networked safety systems require addressing two separate concerns:

Layer	Standard	Concern
Safety layer	ISO 13849-1 or IEC 62061	Safety function reliability (PL/SIL)
Security layer	IEC 62443	Cybersecurity of the control system

These are independent but related: A safety PLC may achieve PLd, but if the network it sits on is compromised, the safety function may not operate correctly. IEC 62443 addresses the security of the system as a whole.

Mermaid: Standard Control vs Safety Control Separation

graph LR
    A[HMI / Operator Commands] --> B[Standard PLC]
    B --> C[Normal Sequence Control]
    C --> D[Drives / Valves / Outputs]

    E[Safety Inputs
E-Stop / Guard / Pressure] --> F[Safety PLC / Safety Relay]
    F --> G[Safety Outputs
STO / Safe Valve / Contactor]
    G --> D

    B -. monitored by .-> F
    F -. independent safety action .-> D

Safety Function Design (choose one path)

PL Path (ISO 13849-1):

Use for most industrial machinery applications
Category 3 or 4 with appropriate MTTFd and DC
Simpler methodology; well-accepted for typical machine safety

SIL Path (IEC 62061):

Use when SIL > PLd equivalent is required
PFHD-based calculation
More flexible for complex safety functions

IEC 62443 Cybersecurity Routing

IEC 62443 is a series of standards for industrial automation and control system security:

Standard	Scope
IEC 62443-2-1	Security management system requirements
IEC 62443-3-3	System security requirements and SL levels
IEC 62443-4-1	Secure product development lifecycle
IEC 62443-4-2	Technical security requirements for IACS components

See the IEC 62443 detail page for Zone/Conduit design, Security Level table, Foundational Requirements, and safety system checklist. See Software Stack for routing guidance on IEC 61131-3 and related topics.

Repository Paths

Reference	Path
Software safety routing	`rag/reference_models/Software_Safety_and_Intrinsic_Safety_Standards.md`
Safety architecture reference	`rag/reference_models/Universal Machine Safety Architecture.md`
7-layer architecture	`rag/reference_models/7-Layer Industrial Machine Architecture Model.md`

Software Stack page — IEC 61131-3, IEC 62443, and more →

Trust Boundary — Engineering Judgment Required

This site is an independent educational reference for industrial automation standards. It paraphrases and organizes guidance in original language; it is not a substitute for the official published standards, professional engineering judgment, or legal review, and content has not been independently verified against current published editions.

Items marked Review pending await technical review against the identified edition. Items marked Planned have no reviewed source material behind them. Do not rely on this site for compliance determinations, safety-critical design decisions, or legal interpretation.