SIS

The collection of protective functions that do nothing until a defined limit is breached, then act on their own to bring the plant to a safe state. Kept separate from the control system, because a shared element could both cause the upset and disable the protection against it.