Guidance for Use of CSM Recommendation - ERA - Europa

European Railway Agency
Collection of examples of risk assessments and of some possible tools
supporting the CSM Regulation
1.2.2. When, in order to fulfil a safety requirement, an actor identifies the need for a safety
measure that it cannot implement itself, it shall, after agreement with another actor,
transfer the management of the related hazard to the latter using the process described
in section 4.
[G 1] The process for transferring hazards and associated safety measures between actors is also
applicable at lower levels of the CENELEC V-Cycle in Figure 5 at page 33. It can be applied
whenever it is necessary to exchange such information between an actor and its subcontractors
for example. The difference with the same process at the system level is that the
proposer needs not be informed about all transfers of hazards and associated safety
measures at the sub-system level. The proposer is informed only when the transferred
hazards and associated safety measures are related to high level interfaces (i.e. when
impacting an interface with the proposer).
1.2.3. For the system under assessment, any actor who discovers that a safety measure is
non-compliant or inadequate is responsible for notifying it to the proposer, who shall in
turn inform the actor implementing the safety measure.
[G 1] The RU and IM safety management system (SMS) covers the arrangements and procedures
for ensuring that non compliances or inadequacies of safety measures are managed
correctly. Therefore, these arrangements and procedures are not part of the CSM.
[G 2] Similarly, arrangements and procedures (11) to put in place by the other actors (12) for ensuring
that non compliances or inadequacies of safety measures are managed correctly and, if
necessary, that the safety measures are transferred to all relevant actors are agreed
between the relevant actors at the beginning of the project, and detailed in their safety plan:
refer to section 0.2.
1.2.4. The actor implementing the safety measure shall then inform all the actors affected by
the problem either within the system under assessment or, as far as known by the
actor, within other existing systems using the same safety measure.
[G 1] That will thus enable to manage the possible non compliance or inadequacy of the safety
measure within the system under assessment or within similar systems that use the same
measure.
1.2.5. When agreement cannot be found between two or more actors it is the responsibility of
the proposer to find an adequate solution.
[G 1] Additional explanation is not judged necessary.
(11) In principle, these arrangements and procedures are covered by the quality management and/or
the safety management process of these actors set out at least at the project level (see also
Figure 2).
(12) The terminology "other actors" designates all concerned actors other than IM's and RU's.
Reference: ERA/GUI/02-2008/SAF Version: 1.1 Page 30 of 105
File Name: Collection_of_RA_Ex_and_some_tools_for_CSM_V1.1.doc
European Railway Agency ● Boulevard Harpignies, 160 ● BP 20392 ● F-59307 Valenciennes Cedex ● France ● Tel. +33 (0)3 27 09 65 00 ● Fax +33 (0)3 27 33 40 65 ● http://www.era.europa.eu