ERA guide for application of the Common Safety Methods ... - Europa

European Railway AgencyGuide for the application of the CSM Regulation 1.2.2. When, in order to fulfil a safety requirement, an actor identifies the need for a safetymeasure that it cannot implement itself, it shall, after agreement with another actor,transfer the management of the related hazard to the latter using the process describedin section 4.[G 1] The process for transferring hazards and associated safety measures between actors isdescribed in sections 4, 4.1 and 4.2.[G 2] According to section 4.2, the transfer of hazards and associated safety measures betweenthose involved actors needs to be agreed by the relevant receiving actor. At the systemlevel, as the proposer is responsible for the overall co-ordination and management of sharedrisks, the proposer needs to be kept informed about risk transfers between the differentactors even if the proposer is not necessarily directly involved in controlling the related risks.This enables the proposer to communicate the information to other actors who could beimpacted by the related risks through the interfaces.1.2.3. For the system under assessment, any actor who discovers that a safety measure isnon-compliant or inadequate is responsible for notifying it to the proposer, who shall inturn inform the actor implementing the safety measure.[G 1] During the assessment of the system, deviations from safety measures, or even inadequacyof safety measures, can be discovered. This means that the related safety measures(selected by the proposer according to section 2.1.6 to control the associated hazards andrisks) are not adequate in controlling the associated risks. Section 3.4 explains that thesedeviations or inadequacies need to be considered as new inputs for a new loop in theiterative risk assessment process described in section 2.1.2.4. The actor implementing the safety measure shall then inform all the actors affected bythe problem either within the system under assessment or, as far as known by theactor, within other existing systems using the same safety measure.[G 1] This paragraph relates to the detection of a non compliance or an inadequacy of a safetymeasure in controlling the associated hazard (see section 1.2.3). The actor responsible forthe implementation of the related safety measure will need to inform all the other actorsaffected by this either within:(a) the system under assessment. This enables another safety measure to be used toadequately control the associated hazard, or;(b) within existing (reference) systems, provided the actor is aware that the same safetymeasure is used to control the same hazard. It is of prime importance that the RU andIM report to the manufacturers the safety related problems they encounter even after thewarranty period of technical equipment. This information could enable themanufacturers to assess the related inadequacy on all other similar systems using thesame safety measure, as well as to take appropriate actions for all other customers whocould be impacted by this safety related problem. Reference: ERA/GUI/01-2008/SAF Version: 1.1 Page 30 of 54File Name: Guide_for_Application_of_CSM_V1.1.docEuropean Railway Agency ● Boulevard Harpignies, 160 ● BP 20392 ● F-59307 Valenciennes Cedex ● France ● Tel. +33 (0)3 27 09 65 00 ● Fax +33 (0)3 27 33 40 65 ● http://www.era.europa.eu