Guidance for Use of CSM Recommendation - ERA - Europa

European Railway Agency
Collection of examples of risk assessments and of some possible tools supporting the CSM Regulation
actors in order to find jointly the adequate solution for controlling the associated risk(s). The results of such a meeting could be reported in an agreed
document (for example a minutes of meeting) to which the actor exporting the safety related information can refer for closing the associated hazards in
his hazard record.
Table 8 : Example of a hazard record for transferring safety related information to other actors.
Origin of Hazard
N°
HZD N° in
Other
Table 7
1 N°1 HAZOP
report
R X
2 N°2 HAZOP
report
R X
3 N°3 HAZOP
report
R X
4 N°4 HAZOP
report
Hazard description Additional information
Maximum speed of
train set too high
(Vmax)
Braking curves (i.e.
Movement Authority)
in onboard subsystem
configuration
data too permissive
● Maximum speed
of train set too
high (Vmax)
● Braking curves
(i.e. Movement
Authority) in
onboard subsystem
configuration data
too permissive
Entry of the train at a
high speed (160
Wrong specific configuration of
the onboard sub-system
(maintenance staff).
Wrong Data Entry onboard
(driver)
The procedure for the specific
configuration of the onboard subsystem
depends on:
● the safety margins taken for
the train braking system;
● the reaction delay of the train
braking system (this one is
directly dependent on the
train length, especially for fret
trains)
Failure to update the train wheel
diameter in the specific
configuration of the onboard subsystem
(maintenance staff).
Could be controlled only by the
driver's vigilance.
Actor in
charge
Railway
Undertaking
Railway
Undertaking
Railway
Undertaking
Infrastructure
Manager
Safety measure
●
●
●
●
Define a procedure for the
approval of the onboard
sub-system configuration
data;
Define an operational
procedure for the Data
Entry Process by the
Driver;
Specify correctly the
system requirements in the
System Definition;
Take sufficient safety
margins for the braking
system of the specific train;
● Define a procedure for the
measure of the train wheel
diameter by the
maintenance staff;
● Define a procedure for the
regular update of the train
wheel diameter in the
onboard sub-system;
Infrastructure Manager to
ensure that trains that are not
Comment from receiver
● The configuration data of the onboard control command sub-system
depends on physical characteristics of the rolling stock.
● Safety margins are then applied on this data in coordination between
Infrastructure Manager and Railway Undertaking.
● This data is then uploaded in the onboard sub-system in compliance with
the appropriate manufacturer's procedure during the installation,
integration into the rolling stock and acceptance of the control command
sub-system.
● The drivers are trained and evaluated against the procedure D P.
● Drivers are also evaluated by the IM against the rules applicable on the IM
infrastructure.
Refer comment for line 1 here above.
●
●
●
The maintenance of the onboard control command sub-system is done in
compliance with the "Maintenance Procedure MP Z".
The train wheel diameter is updated at defined intervals according to the
procedure P W.
For the Data Entry Process, the train drivers are trained and evaluated
against the "Procedure P DE".
The traffic management on the IM infrastructure is ruled by the set of rules
R TM
Reference : ERA/GUI/02-2008/SAF Version : 1.1 Page 102 of 105
File Name : Collection_of_RA_Ex_and_some_tools_for_CSM_V1.1.doc
European Railway Agency ● Boulevard Harpignies, 160 ● BP 20392 ● F-59307 Valenciennes Cedex ● France ● Tel. +33 (0)3 27 09 65 00 ● Fax +33 (0)3 27 33 40 65 ● http://www.era.europa.eu