Abstract
The concept of safety integrity levels is well established and for many safety critical systems SIL 4 is demanded by default. The problem with SIL 4 is that it is impossible to prove and the demand is often not justified. A devil’s advocate view is adopted and a number of questions related to demanding SIL 4 are asked and the problems to be addressed when answering them are discussed