The term “application software” has been changed to “application program.”

The “grandfather clause” in ISA84 has been added.

Procedures for competence are called for.

It is possible to claim up to one risk reduction layer within the process control system for the same hazard event when it is also the initiating event and two risk reduction layers if it is not part of the initiating cause (see Chapter 8).

The Architectures table has been revised and the term “safe failure fraction” deleted (see Chapter 8).

New clause on security vulnerabilities added.

Requirements for “application program” development have been significantly reduced by removing repetition with the wider requirements.

The total risk reduction for both the Basic Process Control System and Safety Instrumented Systems shall not be <10,000:1.

The Safety Manual (IEC 65108 2010) is emphasized.