Standards, Sustainability and Technology Governance

Introduction

Fluid-power engineering is no longer concerned only with producing force, speed and motion. A modern machine must also be safe, energy-efficient, environmentally responsible, legally compliant, maintainable and governable throughout its life cycle. These requirements are especially important in hydraulic and pneumatic systems because they combine stored energy, high pressures, automatic movement, potential fluid leakage and increasingly connected control systems.

Standards provide a common technical language for identifying hazards, specifying components, validating safety functions and managing environmental performance. Sustainability extends the design question from “Will the machine work?” to “What resources, emissions, risks and wastes will it create over its useful life?” Technology governance ensures that decisions about automation, data, procurement and artificial intelligence remain accountable and aligned with law, professional ethics and organizational objectives.

This chapter examines these issues in the context of hydraulic, pneumatic and electric actuation. It emphasizes practical engineering judgment: standards do not replace risk assessment, and a sustainable solution is not necessarily the one with the lowest purchase price.

Learning Objectives

By the end of this chapter, students should be able to:

1. Explain the purpose and scope of major standards relevant to fluid-power machinery.
2. Apply a structured machine-safety and compliance process.
3. Compare hydraulic, pneumatic and electric actuation across performance, safety, energy and environmental criteria.
4. Identify opportunities for energy management, leakage reduction and life-cycle improvement.
5. Explain responsible practices for fluid storage, handling and disposal.
6. Evaluate ethical and governance issues involving machine data, connectivity and AI.
7. Develop procurement and commissioning requirements that support compliance and sustainability.
8. Assess emerging developments in fluid-power technology critically rather than accepting innovation claims uncritically.

1. Standards as a System of Engineering Governance

A standard is a consensus-based specification, guideline or method intended to achieve consistency, safety, quality or interoperability. Standards may be international, regional, national, sector-specific or organizational. Their legal force varies. An ISO standard is not automatically law; it becomes legally relevant when referenced by legislation, regulation, contract, certification scheme or employer procedure. Engineers must therefore check the jurisdiction and the edition applicable to the machine.

Standards generally serve four functions:

• Risk reduction: defining methods for hazard identification and protective measures.
• Technical specification: describing dimensions, symbols, performance tests and component requirements.
• Interoperability: allowing components from different manufacturers to work together.
• Evidence and assurance: creating documented criteria for verification, validation and audit.

A useful hierarchy is:

1. Legislation and regulations, which establish mandatory duties.
2. Type-A standards, providing broad principles, such as risk assessment.
3. Type-B standards, addressing particular safety aspects or safeguards.
4. Type-C standards, addressing specific machine types.
5. Manufacturer instructions and organizational procedures, which complete the safe-use system.

Compliance with a standard does not guarantee absolute safety. It demonstrates that recognized methods have been applied within the standard’s scope. Residual risk must still be communicated and controlled.

2. Core Standards for Hydraulic and Pneumatic Machinery

The following standards are particularly relevant, although the applicable list depends on the machine and jurisdiction.

ISO 4413 and ISO 4414 are central to fluid-power design. They address topics such as system documentation, pressure limitations, isolation, exhaust or depressurization, hose and tube installation, contamination control, inspection, maintenance and prevention of unintended movement. Their requirements should be integrated during design rather than added during final inspection.

ISO 12100 provides the general risk-assessment logic. The designer identifies machine limits, hazards and hazardous situations; estimates risk; evaluates whether risk reduction is adequate; and documents the result. Risk reduction follows a preferred order:

1. Inherently safe design measures.
2. Safeguarding and complementary protective measures.
3. Information for use, warnings and training.

Warnings are important, but they are the least reliable of these measures because they depend on human attention and correct behavior.

Safety functions and performance

A safety function is a machine function intended to reduce risk, such as preventing a cylinder from extending while a guard is open or stopping hazardous motion after an emergency-stop command. ISO 13849-1 uses concepts including architecture, diagnostic coverage, common-cause failure and component reliability to determine a required and achieved Performance Level, commonly expressed from PL a to PL e.

The designer must define:

• the initiating event and hazardous motion;
• the required safety function;
• the safe state;
• the response time;
• the reset conditions;
• foreseeable faults;
• verification and validation procedures.

A conventional directional valve that stops a cylinder may not create a safe state if trapped pressure can cause drift or if a hose failure can produce uncontrolled motion. Safety may require redundant shut-off, load-holding valves, mechanical blocking, pressure relief, monitored position sensing or a combination of measures. The correct solution depends on the risk assessment.

3. Applying a Machine-Safety Process

A practical safety process can be organized into the following stages.

Define machine limits

Record intended use, foreseeable misuse, operating modes, users, materials, environment, temperature range, pressure range, speed, loads, interfaces and life-cycle stages. Installation, setup, cleaning, fault finding, maintenance, changeover and decommissioning must be included.

Identify hazards

Fluid-power hazards include injection injury from pinhole leaks, hose whip, bursting components, unexpected cylinder movement, crushing and shearing, stored pressure, hot surfaces, noise, slippery spills, contaminated fluid and loss of load control. Electrical, ergonomic, thermal, chemical and software-related hazards may coexist.

Estimate and reduce risk

Risk is often described conceptually as a function of severity and probability, including frequency and duration of exposure and the possibility of avoiding harm. This is a decision framework, not a universal numerical equation. Different standards may prescribe particular methods, so a designer should not invent an unsupported numerical risk formula.

Verify and validate

Verification asks whether specified requirements were correctly implemented. Validation asks whether the complete machine achieves the intended safety function in realistic conditions, including foreseeable faults. Tests should be recorded with instrument identification, test conditions, results and acceptance criteria.

Communicate residual risk

Instructions must identify residual hazards, required personal protective equipment, inspection intervals, isolation methods and prohibited actions. Lockout/tagout or an equivalent energy-isolation procedure must address electrical, hydraulic, pneumatic, gravitational, thermal and mechanical energy.

4. Comparing Actuation Technologies

The choice among hydraulic, pneumatic and electric actuation is a system decision. Force, speed, precision, duty cycle, environment, energy source, maintenance and total cost must be considered together.

Hydraulic systems are advantageous where high force and compact actuators are essential. Pneumatics are attractive where motion is simple, rapid and tolerant of compliance, especially in industrial automation. Electric drives are often preferred for precise trajectories, frequent speed variation and energy recovery.

The comparison must avoid simplistic claims. A hydraulic system supplied by an efficient variable-speed pump may outperform a poorly selected electric system, while a pneumatic system can be justified by hygiene, simplicity or rapid cycling despite its energy penalty.

For a cylinder, the ideal mechanical force generated by pressure is:

where F is force in newtons (N), p is gauge pressure in pascals (Pa), and A is effective piston area in square metres (m²). This assumes uniform pressure, neglects friction, seal resistance and dynamic effects, and uses the appropriate area. On the rod side, the effective area is piston area minus rod area.

Mechanical power is:

where P_mech is mechanical power in watts (W), F is force in newtons and v is velocity in metres per second. For a fluid stream, ideal hydraulic power is:

where Q is volumetric flow rate in cubic metres per second. Pressure must be in pascals and flow in cubic metres per second for watts to result. Actual input power is higher because pump, motor, valve and transmission losses occur.

For a system with input energy E_in and useful output energy E_out, energy efficiency is:

where η is dimensionless and normally expressed as a percentage by multiplying by 100. The boundary of the calculation must be stated: actuator-only, pump-to-load, or complete machine.

Worked example: actuator comparison

A hydraulic cylinder operates at 12 MPa gauge pressure with a piston diameter of 80 mm. Neglecting friction, its piston-side force is calculated as follows. Convert diameter: 80 mm = 0.080 m. The area is:

Pressure is 12 MPa = 12,000,000 Pa. Therefore:

The ideal force is approximately 60.3 kN. A real design must provide margin for friction, pressure variation, acceleration, load inertia and safety requirements. If the cylinder moves at 0.10 m/s, ideal fluid power is approximately:

The required prime-mover input will exceed 6.03 kW because total efficiency is less than 100%.

5. Energy Management and Sustainability

Sustainability in fluid power concerns energy, materials, emissions, noise, maintenance, service life and end-of-life treatment. Life-cycle thinking prevents an organization from selecting equipment solely on initial cost.

Major energy losses

Hydraulic losses arise from pump inefficiency, throttling, pressure drops, leakage, unnecessary standby pressure, heat rejection and oversized components. Pneumatic losses arise from compressor inefficiency, pressure regulation, leaks, inappropriate pressure settings, artificial demand and unrestricted exhaust. Electric systems lose energy in motors, drives, cables, gearboxes and braking resistors, but variable-speed control and regeneration can reduce these losses.

Energy-management actions include:

• measuring pressure, flow, temperature, power and duty cycle;
• repairing compressed-air leaks;
• reducing supply pressure where process capability permits;
• using variable-displacement or variable-speed hydraulic pumps;
• minimizing throttling and unnecessary bypass flow;
• selecting efficient motors and drives;
• shutting down idle subsystems safely;
• recovering heat where useful;
• maintaining filters, seals and lubrication;
• monitoring performance trends rather than waiting for failure.

ISO 50001 provides a management-system framework based on an energy review, significant energy uses, energy-performance indicators, objectives, action plans, monitoring and continual improvement. It does not prescribe one type of actuator or guarantee a numerical energy saving.

A credible energy baseline should define operating conditions. For example, annual energy consumption may be estimated from measured average input power and operating time:

where E is energy in joules (J) when P is power in watts and t is time in seconds. In industrial reporting, kilowatt-hours are common: if power is in kilowatts and time in hours, energy is in kilowatt-hours. Actual production, idle time, seasonal variation and maintenance status should be recorded because average power alone can conceal inefficient operating modes.

6. Environmental Impact and Fluid Disposal

Hydraulic fluids may be mineral-oil based, synthetic, water-containing or biodegradable. “Biodegradable” does not mean harmless, nonflammable or suitable for discharge. Environmental performance depends on toxicity, persistence, aquatic effects, additives, contamination and the receiving environment.

Good practice includes:

• selecting fluid based on manufacturer compatibility, fire risk, temperature, biodegradability and service life;
• preventing leaks through suitable seals, hose routing and containment;
• labeling containers and maintaining safety data sheets;
• storing fluids in closed, compatible and bunded containers;
• separating new, used and contaminated fluids;
• preventing mixing of incompatible fluids;
• using spill kits and documented response procedures;
• sending used fluid to an authorized recovery or waste contractor;
• maintaining transfer and disposal records.

Used hydraulic oil may contain wear metals, oxidation products, water and process contaminants. It should not be poured into drains, soil or ordinary waste containers. Legal requirements differ by country, so the organization must follow applicable hazardous-waste, transport and pollution-control rules.

Environmental management under ISO 14001 emphasizes identifying environmental aspects, determining significant impacts, meeting compliance obligations, setting objectives and continually improving performance. A life-cycle perspective includes raw-material extraction, manufacture, transport, operation, maintenance and disposal.

7. Ethical Data Use and Technology Governance

Connected machines produce data about pressure, temperature, cycle time, alarms, operator actions, maintenance events and production output. These data can improve predictive maintenance and energy management, but governance is necessary.

Key principles are:

• Purpose limitation: collect data for a defined legitimate purpose.
• Data minimization: avoid collecting information that is not needed.
• Accuracy: distinguish sensor error from genuine machine behavior.
• Security: control access, authenticate devices, patch software and protect backups.
• Transparency: explain what is collected, why it is collected and who can use it.
• Accountability: assign owners for data quality, cybersecurity and decisions.
• Human oversight: do not allow an opaque algorithm to override safety procedures without validation.
• Retention control: delete or anonymize data when the purpose and legal retention period end.

Operator-identifiable data may be personal data under applicable privacy law. A machine-learning model that predicts hose failure can assist maintenance, but it should not silently disable a safety function or make employment judgments from unexplained productivity indicators. Safety-related control functions require rigorous validation and change management; a general-purpose AI tool is not automatically suitable for safety control.

Cybersecurity is also a safety issue. Unauthorized changes to pressure limits, programmable logic, networked valves or drive parameters can create physical hazards. Segmentation, least-privilege access, secure remote maintenance, event logging and tested recovery procedures are therefore engineering controls, not merely information-technology preferences.

8. Procurement, Compliance and Commissioning

Procurement documents should specify outcomes rather than only component names. Requirements may include:

• applicable legislation and standards;
• design pressure and proof-test requirements;
• safety functions and required Performance Level;
• guarding, isolation and emergency-stop provisions;
• energy-performance data under defined duty cycles;
• noise limits and environmental conditions;
• fluid compatibility and leak containment;
• documentation, drawings, spare parts and software backups;
• cybersecurity and access-control requirements;
• training, maintenance and disposal responsibilities;
• acceptance tests and records.

Supplier declarations should be checked rather than accepted as proof of complete compliance. The purchaser should review the risk assessment, hydraulic or pneumatic schematic, safety-circuit validation, electrical documentation, instructions, test certificates and change history.

Commissioning should include inspection for damaged hoses and fittings, correct pressure settings, cleanliness, correct rotation, leakage, emergency-stop operation, safe isolation, guarding, unexpected-start prevention and behavior after power or pressure restoration. Acceptance testing should represent normal and foreseeable abnormal conditions. Any modification after commissioning requires change control and, where necessary, renewed risk assessment and validation.

9. Illustrative Case: Sustainable Upgrade of a Packaging Line

Background. A fictional packaging plant operates six pneumatic pick-and-place stations. The machines run two shifts per day. Operators report noise, intermittent gripping faults and frequent compressor operation. The plant plans to increase output and requests a larger compressor.

Problem. A larger compressor would address low pressure during peak demand but could increase capital cost and energy consumption. The engineering team must determine whether the root cause is insufficient generation or excessive demand.

Analysis. Measurements show that supply pressure is higher than required at several stations, multiple fittings leak, and exhaust flow is unrestricted. Some actuators move faster than the process requires. The team also finds that the compressor remains loaded during periods when production is stopped. The safety review identifies stored pressure during maintenance and inadequate isolation labeling.

Approach. The team repairs leaks, installs suitable isolation and pressure-release points, reduces pressure where validated by force calculations, fits flow controls to prevent unnecessary impact, and programs automatic shutdown during long idle periods. A centralized energy meter and pressure sensors are installed. Operators receive training, and inspection intervals are added to the maintenance plan. The safety-related functions are reviewed using the applicable risk assessment and control-system standards. Data access is restricted to maintenance and energy-management purposes.

Outcome. The line meets the required cycle time without purchasing a larger compressor. Noise and gripping faults decrease, and energy performance improves. The measured improvement is reported only after comparing equivalent production quantities and operating conditions; no unsupported percentage claim is made. The plant also obtains auditable records for maintenance, energy use and fluid disposal.

Learning points. The case demonstrates that sustainability begins with measurement, not equipment substitution. It also shows that energy reduction must not compromise force, gripping reliability or safety. Standards, procurement, data governance and maintenance are interconnected rather than separate administrative tasks.

10. Emerging Developments and Critical Evaluation

Several developments are reshaping fluid power:

• electro-hydraulic pumps with variable-speed electric drives;
• digital proportional valves and integrated sensors;
• condition monitoring based on pressure, vibration, temperature and particle counts;
• electro-pneumatic control with networked diagnostics;
• biodegradable and fire-resistant fluids for suitable applications;
• additive manufacturing of manifolds and lightweight components;
• energy recovery in mobile and cyclic machinery;
• digital twins for commissioning and maintenance planning;
• hybrid electro-hydraulic systems that combine electric precision with hydraulic force.

These developments can reduce energy use or improve diagnostics, but they introduce new risks. Digital systems require software configuration control, cybersecurity and dependable sensor data. Biodegradable fluids may have compatibility or service-life limitations. Additive-manufactured parts require validated material properties and process control. Digital twins are models, not physical proof; their predictions depend on assumptions and calibration.

A responsible adoption process asks four questions: What problem is solved? What evidence supports the claimed benefit? What new hazards or dependencies are introduced? How will the result be verified over the machine life cycle?

Professional Decision Framework

When selecting or upgrading an actuation system, engineers should document:

1. Functional requirements: force, speed, stroke, precision, duty cycle and response time.
2. Operating environment: temperature, contamination, hygiene, noise and fire risk.
3. Safety requirements: hazards, safe states, isolation and validated safety functions.
4. Life-cycle requirements: energy, maintenance, fluid use, emissions and disposal.
5. Governance requirements: data ownership, cybersecurity, change control and accountability.
6. Economic requirements: capital cost, operating cost, downtime, training and end-of-life cost.
7. Evidence: measurements, calculations, supplier documents, tests and acceptance records.

The preferred design is therefore not always the cheapest, most powerful or most technologically advanced. It is the design that satisfies functional requirements while controlling risk and life-cycle impact with verifiable evidence.

Chapter Summary

Standards provide structured methods for machinery safety, fluid-power design, control-system reliability, energy management and environmental management. ISO 12100 supports risk assessment; ISO 4413 and ISO 4414 address hydraulic and pneumatic safety; ISO 13849 supports safety-related control functions; and ISO 50001 and ISO 14001 provide management frameworks for energy and environmental performance. Standards must be interpreted with applicable law and machine-specific risk assessment.

Hydraulic, pneumatic and electric actuation have different advantages. Hydraulics provide high force density, pneumatics offer simple and rapid motion, and electric systems commonly provide precise and efficient variable-speed control. Energy and environmental decisions require defined boundaries, measured duty cycles and life-cycle thinking. Fluid leaks, contamination and disposal must be controlled through compatible selection, containment, labeling and authorized recovery.

Connected machines create opportunities for predictive maintenance and energy monitoring, but data minimization, cybersecurity, transparency, human oversight and accountability are essential. Procurement and commissioning should require evidence of safety, performance, documentation and maintainability. Emerging technologies should be adopted through critical evaluation, validation and change control.

Key Terms

Standards: Agreed technical specifications or guidelines used to promote safety, quality, consistency or interoperability.

Risk assessment: A systematic process for identifying hazards, estimating risk and selecting protective measures.

Residual risk: Risk remaining after protective measures have been applied.

Inherently safe design: Risk reduction achieved by eliminating hazards or reducing exposure through the design itself.

Safety function: A machine function intended to reduce risk.

Performance Level: A reliability classification for safety-related parts of control systems under ISO 13849.

Emergency stop: A manually initiated function intended to avert or reduce hazards to people or machinery.

Unexpected start-up: Unintended machine initiation during maintenance, adjustment or fault recovery.

Energy efficiency: Useful output energy divided by input energy within a defined system boundary.

Energy baseline: A reference representation of energy performance under stated conditions.

Life-cycle assessment: Evaluation of environmental impacts across stages from material extraction to end of life.

Environmental aspect: An element of an organization’s activities, products or services that can interact with the environment.

Fluid contamination: Unwanted solid, liquid or gaseous material in a hydraulic or pneumatic medium.

Leakage: Unintended escape of fluid or compressed gas from a system.

Technology governance: Structures and processes that control technology decisions, accountability, risk and compliance.

Data minimization: Collecting only the data necessary for a defined legitimate purpose.

Cybersecurity: Protection of systems, devices, data and networks from unauthorized access or disruption.

Change control: A formal process for evaluating, approving and documenting modifications.

Total cost of ownership: The complete cost of acquisition, operation, maintenance, downtime and disposal.

Review Questions

Short Answer Questions

1. Why does compliance with an ISO standard not automatically mean that a machine is legally compliant?
2. State the three-step hierarchy of risk reduction used in machinery safety.
3. Give two typical energy losses in a hydraulic system and two in a pneumatic system.
4. Why must used hydraulic fluid be separated, labeled and sent to an authorized handler?
5. What is meant by data minimization in a connected machine?

Long Answer Questions

1. Explain how ISO 12100, ISO 4413 or ISO 4414, and ISO 13849 can be used together during the design of a fluid-power machine.
2. Compare hydraulic, pneumatic and electric actuation for a high-cycle automated manufacturing application.
3. Discuss how ISO 50001 principles can support energy reduction without compromising machine safety or production quality.
4. Explain the environmental and operational factors that should influence hydraulic-fluid selection.
5. Describe the documentation and tests that should be required before commissioning a modified machine.

Analytical / Application Questions

1. A machine requires high force at low speed for pressing, followed by precise variable-speed positioning. Analyze whether a hydraulic, electric or hybrid solution is most appropriate, stating the assumptions and trade-offs.
2. A pneumatic plant proposes increasing compressor pressure to eliminate gripping faults. Develop a measurement-based investigation and explain why higher pressure may not be the best solution.
3. A connected predictive-maintenance system uses operator-linked production data. Design a governance approach covering purpose, access, retention, cybersecurity, human oversight and validation of maintenance recommendations.

Multiple Choice Questions with Answers

Question 1

Which standard provides general principles for machinery risk assessment and risk reduction?

A. ISO 12100

B. ISO 4414

C. ISO 50001

D. ISO 14120

Correct Answer: A. ISO 12100

Question 2

According to the preferred hierarchy of risk reduction, which measure should generally be considered first?

A. Personal protective equipment

B. Warning labels

C. Inherently safe design

D. Operator retraining

Correct Answer: C. Inherently safe design

Question 3

A cylinder operates at 10 MPa over an effective area of 0.002 m². Neglecting friction, what force does it produce?

A. 2,000 N

B. 5,000 N

C. 20,000 N

D. 50,000 N

Correct Answer: C. 20,000 N

Question 4

Which actuation technology generally offers the greatest ease of precise programmable positioning?

A. Electric servo actuation

B. Basic pneumatic actuation

C. Fixed-displacement hydraulic actuation

D. Manual hydraulic actuation

Correct Answer: A. Electric servo actuation

Question 5

In the equation P_fluid = pQ, what does Q represent?

A. Temperature

B. Volumetric flow rate

C. Mechanical efficiency

D. Cylinder area

Correct Answer: B. Volumetric flow rate

Question 6

Which practice is most appropriate for used hydraulic oil?

A. Discharge it into a floor drain

B. Mix it with general refuse

C. Store and transfer it to an authorized recovery or waste contractor

D. Dilute it with water before disposal

Correct Answer: C. Store and transfer it to an authorized recovery or waste contractor

Question 7

What is the main purpose of ISO 50001?

A. Specification of pneumatic symbols only

B. An energy-management system framework

C. Design of emergency-stop buttons only

D. Classification of hydraulic hose materials only

Correct Answer: B. An energy-management system framework

Question 8

Which principle requires an organization to collect only data necessary for a defined legitimate purpose?

A. Data minimization

B. Unrestricted retention

C. Open access

D. Automatic decision-making

Correct Answer: A. Data minimization

Question 9

Why is a larger compressor not necessarily the correct response to low pneumatic pressure at a machine?

A. Compressors cannot operate continuously

B. The problem may result from leaks, excessive pressure demand or poor control

C. Higher capacity always lowers safety

D. Pneumatic systems do not use pressure

Correct Answer: B. The problem may result from leaks, excessive pressure demand or poor control

Question 10

What is the principal reason for validating a safety function after a machine modification?

A. To reduce documentation requirements

B. To confirm that the modified system still achieves its intended safe behavior

C. To increase operating pressure automatically

D. To replace all operator training

Correct Answer: B. To confirm that the modified system still achieves its intended safe behavior