Guidance for Use of CSM Recommendation - ERA - Europa

European Railway Agency
Collection of examples of risk assessments and of some possible tools
supporting the CSM Regulation
[G 2] It is important to note that the proposer always remains responsible for the application of the
CSM, for the acceptance of the risk and thus for the safety of the system. This will include
ensuring that:
(a) there is full co-operation between the involved actors so that all the necessary
information is provided, and;
(b) it is clear who needs to fulfil the particular CSM requirements (for example undertaking
the risk analysis or managing the hazard record).
In case of disagreement between actors on safety requirements they have to fulfil, the NSA
could be consulted for opinion. But the responsibility to find a solution remains on the
proposer and cannot be transferred to the NSA: see also section 0.2.2.
[G 3] If the task is sub-contracted, there is no obligation for a sub-contractor to have its own safety
organisation if this is not an infrastructure manager or railway undertaking, or especially if the
sub-contractor's structure/size is small or if its contribution to the overall system is limited.
The responsibility for the risk management, including the risk assessment and hazard
management activities, can remain on the higher level organisation (i.e. on the subcontractor's
customer). However, the sub-contractor is always responsible to provide the
right information related to its activities and necessary to the higher level organisation for
building the risk management documentation.
Co-operating organisations can also agree to set up a common safety organisation for
example in order to optimise the costs. In that case, only one organisation will manage the
safety activities of all the involved organisations. The responsibility for the accuracy of the
information (i.e. hazards, risks and safety measures), as well as the management of the
implementation of the safety measures, remains under the organisation in charge of
controlling the hazards that these safety measures are associated with.
[G 4] The proposer would normally set out the "safety levels" and "safety requirements" allocated
to the actors involved in the project and to the different sub-systems and equipment of those
actors:
(a) in the contracts between the proposer and the respective actors (sub-contractors);
(b) in a safety plan, or any other relevant document with the same purpose, with the
description of the overall project organisation and responsibilities of each actor,
including the proposer's ones: refer to section 1.1.6 ;
(c) in the proposer's hazard record(s): refer to section 4.1.1.
This allocation of the system "safety levels" and "safety requirements" down to the underlying
sub-systems and equipment, and therefore to the respective actors including the proposer
itself, can be refined/extended during the "demonstration phase of the system compliance
with the safety requirements": refer to Figure 1. In comparison with the CENELEC V-Cycle
(see section 2.1.1 and Figure 5 at page 33), this activity corresponds to Phase 5 dealing with
the "apportionment of system requirements" down to the different sub-systems and
components
[G 5] Article 5 (2) allows that other actors than RU and IM assume the overall responsibility of
compliance with the CSM depending on their respective needs. For generic products or
generic applications (9) for example, the manufacturer can perform the risk assessment on
basis of a "generic system definition" in order to specify the safety levels and the safety
requirements to be fulfilled by generic products and generic applications.
Reference: ERA/GUI/02-2008/SAF Version: 1.1 Page 26 of 105
File Name: Collection_of_RA_Ex_and_some_tools_for_CSM_V1.1.doc
European Railway Agency ● Boulevard Harpignies, 160 ● BP 20392 ● F-59307 Valenciennes Cedex ● France ● Tel. +33 (0)3 27 09 65 00 ● Fax +33 (0)3 27 33 40 65 ● http://www.era.europa.eu