Guidance for Use of CSM Recommendation - ERA - Europa

European Railway Agency
Collection of examples of risk assessments and of some possible tools supporting the CSM Regulation
C.16.3. Example of a complete hazard record for an onboard control command sub-system
C.16.3.1. This section gives in an example a single hazard record (refer to point [G 3] in section 4.1.1) for managing both:
(a) all the internal safety requirements applicable to the sub-system the actor is responsible for; and,
(b) all identified hazards and associated safety measures that the actor cannot implement and that must be transferred to other actors.
Table 7 : Example of a Manufacturer's hazard record for an onboard control command sub-system.
N°
HZD
1 HAZOP
report
R X
2 HAZOP
report
R X
3 HAZOP
report
R X
4 HAZOP
report
R X
Origin Hazard description Additional information
Maximum speed of train
set too high (Vmax)
Braking curves (i.e.
Movement Authority) in
onboard sub-system
configuration data too
permissive
●
●
Maximum speed of
train set too high
(Vmax)
Braking curves (i.e.
Movement Authority)
in onboard subsystem
configuration
data too permissive
Entry of the train at a
high speed (160 km/h if
line side signal free) on
Wrong specific configuration of the onboard subsystem
(maintenance staff).
Wrong Data Entry onboard (driver)
The procedure for the specific configuration of the
onboard sub-system depends on:
● the safety margins taken for the train braking
system;
● the reaction delay of the train braking system (this
one is directly dependent on the train length,
especially for fret trains)
Failure to update the train wheel diameter in the
specific configuration of the onboard sub-system
(maintenance staff).
Failure in manufacturer procedure for the preparation
and the upload of the configuration data into the
onboard sub-system
Could be controlled only by the driver's vigilance.
The entry into a trackside ATP fitted area relies on an
acknowledgment procedure by the driver before the
Actor in
charge
Railway
Undertaking
Railway
Undertaking
Railway
Undertaking
Manufacturer
Infrastructure
Manager
Safety Measure
●
●
●
●
●
●
Define a procedure for the
approval of the onboard subsystem
configuration data;
Define an operational procedure
for the Data Entry Process by
the Driver;
Specify correctly the system
requirements in the System
Definition;
Take sufficient safety margins for
the braking system of the
specific train;
Define a procedure for the
measure of the train wheel
diameter by the maintenance
staff;
Define a procedure for the
regular update of the train wheel
diameter in the onboard subsystem;
Define a procedure for updating the
train wheel diameter in the onboard
configuration data
Infrastructure Manager to ensure
that trains that are not fitted with an
active onboard control command
Used Risk
Acceptance
Principle
Explicit Risk
Estimation
Explicit Risk
Estimation
Explicit Risk
Estimation
Explicit Risk
Estimation
Explicit Risk
Estimation
Exported
Yes
Yes
Yes
Yes
Yes
Status
Controlled
(exported to RU)
Refer also to
section C.16.4.2. in
Appendix C
Controlled
(exported to RU)
Refer also to
section C.16.4.2. in
Appendix C
Controlled
(exported to RU)
Refer also to
section C.16.4.2. in
Appendix C
Controlled
by Procedure P X
Controlled
(exported to IM)
Refer also to
Reference : ERA/GUI/02-2008/SAF Version : 1.1 Page 100 of 105
File Name : Collection_of_RA_Ex_and_some_tools_for_CSM_V1.1.doc
European Railway Agency ● Boulevard Harpignies, 160 ● BP 20392 ● F-59307 Valenciennes Cedex ● France ● Tel. +33 (0)3 27 09 65 00 ● Fax +33 (0)3 27 33 40 65 ● http://www.era.europa.eu