Guidance for Use of CSM Recommendation - ERA - Europa

European Railway Agency
Collection of examples of risk assessments and of some possible tools
supporting the CSM Regulation
parties were involved in the revised operational procedures and in the agreement to
proceed with the change.
(e) demonstration of the system compliance with the safety requirements [section 3]:
The system was implemented in compliance with the identified safety requirements
(additional equipment and revised procedures). These were verified as appropriate
means to ensure a sufficient level of safety for the system under assessment.
The revised operational procedures were introduced in the RU safety management
system. They were monitored and reviewed, when needed, to ensure that the identified
hazards continue to be correctly controlled during the operation of the railway system.
(f) hazard management [section 4.1]:
See point here above as for the railway undertakings the hazard management process
can be part of their safety management system for recording and managing risks. The
identified hazards were registered in a hazard record with the safety requirements
controlling the associated risk, i.e. reference to additional onboard and trackside
equipment as well as to the revised operational procedures.
The revised procedures were monitored, and reviewed when needed, to ensure that the
identified hazards continue to be correctly controlled during the operation of the railway
system.
(g) independent assessment [Article 6]:
The risk assessment and risk management process were assessed by a competent
person within the RU‘s company who was independent from the assessment process.
The competent person assessed both the process and the results, i.e. the identified
safety requirements.
The RU has based its decision to put the new system into effect on the independent
assessment report produced by the competent person.
C.12.4.
The example shows that the principles and process used by the railway undertaking are in
line with the common safety method. The risk management and risk assessment process
fulfilled all the requirements from the CSM.
C.13.
C.13.1.
Example of the use of a reference system for deriving safety
requirements to new electronic interlocking systems in Germany
Remark: this example of risk assessment was not produced as a result of the application of
the CSM process; it was carried out before the existence of CSM. The purpose of the
example is:
(a) to identify the similarities between the existing risk assessment methods and the CSM
process;
(b) to give traceability between the existing process and the one requested by the CSM;
(c) to provide justification of the added value of performing the additional steps (if any)
required by the CSM.
It must be stressed that this example is given for information only. Its purpose is to help the
reader understanding the CSM process. But the example itself shall not be transposed to or
used as a reference system for another significant change. The risk assessment shall be
carried out for each significant change in compliance with the CSM Regulation.
Reference: ERA/GUI/02-2008/SAF Version: 1.1 Page 93 of 105
File Name: Collection_of_RA_Ex_and_some_tools_for_CSM_V1.1.doc
European Railway Agency ● Boulevard Harpignies, 160 ● BP 20392 ● F-59307 Valenciennes Cedex ● France ● Tel. +33 (0)3 27 09 65 00 ● Fax +33 (0)3 27 33 40 65 ● http://www.era.europa.eu