Home › Technical articles

Đọc bằng tiếng Việt

ISA-88 (IEC 61512) batch control: physical model, procedures, recipes and phase states

TDL Industrial Automation · Last updated:

ISA-88 separates recipes from equipment control: the seven-level physical model, the four procedural levels from procedure to phase, four recipe types and the phase state model, with notes on applying them with PhaseManager and FactoryTalk Batch.

What ISA-88 is

ANSI/ISA-88 (often called S88) is the ISA series of standards for batch control. It describes equipment and procedures; it is not a software standard and applies equally to a process run by hand. ISA approved the first part in 1995 and updated it in 2010. The IEC published that first part as IEC 61512-1 in 1997; a second edition of IEC 61512-1 was published on 19 February 2026 and replaces the 1997 edition.

The ISA-88 series currently lists four parts and several technical reports:

Document Subject (titles paraphrased)
Part 1, ISA-88.00.01-2010 Models and terminology
Part 2, ISA-88.00.02-2001 Data structures and guidelines for languages
Part 3, ISA-88.00.03-2003 General and site recipe models and representation
Part 4, ISA-88.00.04-2006 Batch production records
ISA-TR88.00.02-2022 Machine and unit states: an implementation example of Part 1
ISA-TR88.95.01-2008 Using ISA-88 and ISA-95 together

The models in this article follow the editions described by the sources used here (IEC 1997, ISA 2010). According to its abstract, IEC 61512-1:2026 removes the lower levels of the physical (role-based equipment) model to avoid redundancy, defines generic and recipe-aware equipment modules, and presents the procedural states as an example, with an expanded state reference model in an annex.

Batch, continuous and discrete processes

A guide from the integrator Hallam-ICS separates three kinds of production:

  • Discrete: individual items move from station to station and keep their identity, such as light bulbs or staplers.
  • Continuous: material flows through the equipment without interruption, and the output depends on how long the plant runs, as in oil refining.
  • Batch: a finite quantity of product is made through an ordered set of activities over a set time; the result is called a batch. Specialty chemicals, pharmaceuticals and food are typical.

A tank that is filled with water, heated, dosed, mixed and emptied is the classic example; Rockwell's PhaseManager manual uses it to explain phases. ISA's technical report TR88.95.01 (Table 1) notes that ISA-88 is written mainly for batch manufacturing but is often applied elsewhere.

The physical model: from enterprise to control module

The physical model has seven levels: enterprise, site, area, process cell, unit, equipment module and control module. The upper three describe the company and its plants; the lower four describe equipment:

Level What it is
Process cell All the equipment needed to make a batch, sometimes called a process train; it can run several batches at once
Unit Equipment where one or more major processing steps take place, such as a reactor, a mixing vessel or a CIP skid; it holds one batch and runs one unit procedure at a time
Equipment module A collection of control modules that offers the unit a finite list of commands, such as dosing or transfer
Control module A single device such as a valve or a pump, with its I/O, auto/manual modes, interlocks and alarms

Levels may be left out, but not the unit. The Hallam-ICS guide notes that storage tanks are usually not units and suggests a test: does the recipe need this equipment to run? A CIP skid can be treated as a unit so that recipe rules apply to cleaning too.

The ISA-88 physical model: seven levels, one mixing plantSeven levels from enterprise to control module, each with an example from an invented sauce-mixing plant.The ISA-88 physical model: seven levels, one mixing plantLEVELEXAMPLE: SAUCE PLANT (INVENTED)Enterprisethe companyFood company XSitea plantPlant 1Areaa section of the siteLiquid making areaProcess cellall equipment needed to make a batchSauce line 1: premix tank + mixerUnitwhere major processing stepshappen; one batch at a timePremix tank T-101 · Mixer T-201Equipment modulecontrol modules offeringa finite list of commandsWater dosing · Agitator ·Jacket heating · TransferControl moduleone device: a valve, a pump, a motorValve XV-101 · Pump P-101 ·Agitator motor M-101Levels can be left out, except the unit.A storage tank is usually not a unit: ask whether the recipe needs that equipment to run.Levels after Wikipedia (ISA-88) and the Hallam-ICS S88 guide (2016);the example is invented by TDL, not a real plant. Figure: drawn by TDL.
Figure 1: The ISA-88 physical model: seven levels, one mixing plant. On a phone, swipe sideways to see the whole figure.

The procedural control model: procedure, unit procedure, operation, phase

Recipe procedures have four levels, each an ordered set of the level below. After the FactoryTalk Batch Recipe Editor help and the Hallam-ICS guide:

  • Procedure: the strategy for making a batch in a process cell, for example "Make product A". A procedure can span several units, which allows unit-to-unit transfers.
  • Unit procedure: a set of related operations carried out in one unit.
  • Operation: an ordered set of phases executed on a single unit (Hallam-ICS).
  • Phase: the smallest procedural element and the level that links the recipe to the equipment, for example heat, mix, transfer or charge (Hallam-ICS).

The Hallam-ICS guide notes that S88 encourages operation boundaries at points where the process can safely be suspended, and that continuous functions such as agitation or temperature control are often better run as their own operation in parallel than inside every operation.

The phase is where the two models meet. In FactoryTalk Batch, tags link each recipe phase to an equipment phase in the controller. The recipe phase sends commands; the equipment phase changes state, reports back and works through equipment and control modules, so the recipe never addresses an individual valve. Quantities and setpoints are recipe parameters, downloaded to the equipment phase at run time.

The procedural model next to the physical modelA procedure runs in a process cell, unit procedures and operations run on one unit, the recipe phase commands an equipment phase in the PLC, and the equipment phase uses equipment and control modules.The procedural model next to the physical modelRECIPE · BATCH SERVEREQUIPMENT · AREA MODEL AND PLCProcedureMake sauce AUnit procedurePremix on T-101OperationCharge and mixPhase (recipe)Add water, 500 kgProcess cellSauce line 1UnitPremix tank T-101Equipment phase (PLC)Add_WaterEquipment and control modulesWater dosing: XV-101, P-101runs inon one uniton the same unitcommandstateusesParameters (quantity, temperature)flow down from the procedure tothe phases at run time.The recipe says what, how much and in which order; theequipment phase knows how to do it on this equipment.After the FactoryTalk Batch Recipe Editor help (Rockwell), the Hallam-ICS S88guide (2016) and LOGIX-UM001C p. 31. Invented example. Figure: drawn by TDL.
Figure 2: The procedural model next to the physical model. On a phone, swipe sideways to see the whole figure.

Four recipe types, and keeping recipes out of equipment code

ISA-88 defines four recipe types (descriptions after the Hallam-ICS guide):

Recipe Belongs to Contains
General Enterprise Processing steps, raw materials and quantities, with no equipment; used for planning and investment
Site One site The general recipe adapted to the plant: local language, local raw materials, site equipment, storage limits
Master One process cell A template for control recipes: equipment requirements by type or class, material quantities, scheduling data
Control One batch Batch ID, batch size, actual raw-material data and the specific equipment used

Part 3 covers general and site recipes. The Hallam-ICS guide treats the master recipe as required in any S88-based solution, as the template for control recipes. On the plant floor engineers build master recipes, for example in the FactoryTalk Batch Recipe Editor, whose help defines a batch as a control recipe being executed.

Four recipe types: from the company to one batchThe general recipe at company level, the site recipe, the master recipe for one process cell and the control recipe for one batch.Four recipe types: from the company to one batchRECIPEBELONGS TOCONTAINSGeneralEnterpriseProcessing steps, raw materials andquantities; no equipment. Used forplanning and investment decisions.SiteOne siteThe general recipe adapted to one plant:local language, local raw materials, siteequipment and storage limits.MasterOne process cellTemplate for control recipes: equipment requirementsby type or class, material quantities, scheduling data.ControlOne batchMade from the master recipe forexactly one batch: batch ID, batch size,actual units and actual material data.ISA-88 Part 3 covers general and site recipes. Every S88-based batchsystem needs master recipes; a batch is a control recipe being executed.After the Hallam-ICS S88 guide (2016) pp. 8–9, the ISA-88 pageon isa.org and the FactoryTalk Batch help. Figure: drawn by TDL.
Figure 3: Four recipe types: from the company to one batch. On a phone, swipe sideways to see the whole figure.

The idea behind it is separation. When recipe steps and equipment control are mixed in one PLC program, a new ingredient can take many man-hours of program changes and put other recipes at risk. With ISA-88 the recipe says what, how much and in which order; the equipment phase knows how to do it on this equipment. Rockwell's PhaseManager manual makes the same point, and the abstract of IEC 61512-1:2026 states the aim: recipes can change without changing equipment procedures.

The phase state model

Every equipment phase follows a state model. Rockwell's PhaseManager manual calls its model similar to S88 and PackML and splits the states into two kinds:

Kind States Meaning
Waiting Idle, Held, Complete, Stopped, Aborted The phase waits for a command
Acting Running, Holding, Restarting, Stopping, Aborting, Resetting Logic runs for a time or until conditions are met, then the phase moves on

The commands are Start (Idle to Running), Hold (to Holding, then Held), Restart (Held to Restarting, then back to Running), Stop (to Stopping, then Stopped), Abort (to Aborting, then Aborted) and Reset (from Complete, Stopped or Aborted back to Idle). Per the Hallam-ICS guide, Stop is a controlled stop to a safe, recoverable state; Abort is immediate, and operators usually restore the equipment by hand afterwards. Sources differ on the details: the Hallam-ICS guide includes Resetting in its state model, while a FactoryTalk Batch help page describes Resetting as a PhaseManager addition for projects not based on S88 and lists Starting among the S88 active states, which the PhaseManager manual does not.

The state model of a phase, simplifiedIdle, Running, Complete; the Hold–Held–Restart loop; Stop and Abort lead to Stopped or Aborted; Reset returns Complete, Stopped and Aborted to Idle.The state model of a phase, simplifiedIdleRunningCompleteHoldingHeldRestartingStoppingStoppedAbortingAbortedStartHoldRestartStopAbortResetacting state: logic runs until donewaiting state: waits for a commandUnlabelled arrow: the acting state has finished.PhaseManager adds an acting state, Resetting, between the Reset command and Idle.Stop and Abort are accepted from the states inside the frame(PhaseManager accepts them from more states; see the manual).State and command names after Rockwell LOGIX-UM001C (PhaseManager,06/2016) pp. 12–14 and the Hallam-ICS S88 guide (2016). Figure: drawn by TDL.
Figure 4: The state model of a phase, simplified. On a phone, swipe sideways to see the whole figure.

Where batch sits next to ISA-95

OPC Foundation's summary of ISA-95 places batch control systems that execute recipes at level 3 (manufacturing operations management), with SCADA and historians, and PLC and DCS real-time control at level 2. In a typical FactoryTalk Batch and PhaseManager system, the batch server sits at level 3 and the equipment phases run in the controllers at level 2; read this way, the split between recipe and equipment control falls on the boundary between the two levels.

ISA's technical report TR88.95.01 on using the two together explains the focus: ISA-95 covers information exchange between business systems and manufacturing control; ISA-88 works lower down, directing the people and equipment that transform materials. It warns that the two sometimes use different terms for one concept, or one term for different concepts, so align terminology early. For how these levels map to security zones, see the IEC 62443 article; for MES above batch, see MES on Ignition with Sepasoft.

Applying it on a project

  • Draw the physical model before writing code: process cells, units, equipment and control modules from the P&ID, and which vessels are really units.
  • Size each phase to one independent activity. Rockwell's manual gives adding water to a tank or mixing ingredients as good phases; opening one valve is too small, running a whole line too large.
  • Fill a state worksheet for each phase. The PhaseManager manual asks one question per state, such as how the equipment pauses without making scrap (Holding). Implement only the states the equipment needs.
  • Use the controller's phase tools. In Studio 5000 Logix Designer an equipment phase works much like a program, with one routine per acting state, in ladder, SFC, structured text or function block. Commands come from FactoryTalk Batch or the PCMD instruction, which can in turn be triggered by a start button on the machine or HMI.
  • Keep recipe values as phase parameters, not constants in the ladder.

Common mistakes: recipe logic written into PLC code, so every new product is a PLC change and a new round of testing; units not clearly defined, so storage tanks become units or two unit procedures compete for one vessel (a unit runs one unit procedure at a time, so making and CIP cannot share it); and recipes commanding control modules directly instead of equipment modules.

TDL's batch control service covers FactoryTalk Batch and PlantPAx phase logic. At P&G Vietnam's Dong An plant, the scope since 2014 has included a FactoryTalk Batch upgrade with mixing-tank and material-tank units, recipes, reports and PLC phase control, and a new batch server and client for another mixing line with barcode material integration.

Frequently asked questions

What is ISA-88 (S88)?

ISA-88 is the ISA series of standards for batch control: common models and terms for equipment, procedures, recipes and batch records. Its first part was published by the IEC as IEC 61512-1 in 1997, with a second edition in February 2026.

What is the difference between a unit and an equipment module in ISA-88?

A unit is equipment where major processing steps take place, such as a reactor or mixing vessel, and it holds one batch at a time. An equipment module is a collection of control modules that offers the unit a finite list of commands, such as dosing or transfer.

What is the difference between a master recipe and a control recipe?

A master recipe is the template for one process cell, with equipment requirements, material quantities and scheduling data. A control recipe is made for exactly one batch, with its batch ID, batch size and actual equipment and raw-material data.

What are the states of an ISA-88 phase?

The standard presents the procedural states as an example; the abstract of IEC 61512-1:2026 calls it the procedural states example. Rockwell's PhaseManager uses the waiting states Idle, Held, Complete, Stopped and Aborted, and the acting states Running, Holding, Restarting, Stopping, Aborting and Resetting.

How does ISA-88 relate to ISA-95?

ISA-95 covers the exchange of information between business systems and manufacturing control, while ISA-88 directs the equipment and people that transform materials. Read with ISA-88, batch control systems that execute recipes sit at ISA-95 level 3 and the PLCs running the equipment phases at level 2.

Sources

Read 1 November 2026. This article paraphrases the sources and does not quote them; read the original documents before designing or working on a system.

Related services:
Batch control (FactoryTalk Batch) MES on Ignition (Sepasoft)