ERA guide for application of the Common Safety Methods ... - Europa

European Railway AgencyGuide for the application of the CSM Regulation (c) "the following risk acceptance criterion shall apply for the design of the technicalsystem" means that the criterion will be a design target. It does not mean that this willbe the actual safety performance of the related technical system on the field;(d) "For technical systems where a functional failure has a credible" means that it mustbe likely that the particular failure of the technical system can result in an accident withcatastrophic consequences;(e) "direct" means in this context that no effective barriers exist that may prevent anaccident due to the failure of the technical system. If the consequence does not directlyresult from the technical system failure, the impact of mitigating effects or safety barriers(e.g. a human action or another technical system preventing the accident) could betaken into account in the safety analysis;(f)"potential for" means that when the failure of the technical system occurs, it can crediblyresult in a catastrophic consequence. This is a conservative assumption. In practice,when a failure of a technical system occurs the consequence (e.g. a train derailment) isnot necessarily catastrophic;(g) "a catastrophic consequence," means an accident that causes more than one fatality;(h) "the associated risk does not have to be reduced further if the rate of that failure isless than or equal to 10 -9 per operating hour." Provided all the conditions here aboveare fulfilled and, the frequency of occurrence of the technical system failuredemonstrated during the design is less than or equal to 10 -9 per operating hour, then theassociated risk is acceptable. Consequently, the risk does not have to be reducedfurther.The operating hour relates directly to the function, which causes the failure mode. Thisrelates to the cumulative operating times of the considered technical system.2.5.5. Without prejudice to the procedure specified in Article 8 of Directive 2004/49/EC, amore demanding criterion may be requested, through a national rule, in order tomaintain a national safety level. However, in the case of additional authorisations forplacing in service of vehicles, the procedures of Articles 23 and 25 of Directive2008/57/EC shall apply.[G 1] A Member State who wants to apply a more demanding risk acceptance criterion than theone in section 2.5.4 shall notify a national safety rule in compliance with the provisions inArticle 8 of the Railway Safety Directive {Ref. 1}. According to Article 8(7) of that directive,"the Member State shall submit the draft rule to the Commission for examination, stating thereasons for introducing it".[G 2] Article 8 of the Railway Safety Directive {Ref. 1} foresees that the justifications of the reasonsfor requesting a more demanding risk acceptance criterion and the draft safety rule areanalysed by the Commission (which can ask the Agency for technical advice) in order tocheck whether "the draft safety rule" does not constitute "a means of arbitrary discriminationor a disguised restriction on rail transport operations between Member States". A decision isthen "addressed to the Member State concerned ... in accordance with the procedurereferred to in Article 27(2)" of the Railway Safety Directive {Ref. 1}.[G 3] The additional criteria that may be requested by the NSA in case of additional authorisationsfor placing in service vehicles have to be compliant with the Articles 23 and 25 of the RailwayInteroperability Directive {Ref. 3}. Consequently, if a vehicle is already authorised in aMember State based on the risk acceptance criterion in section 2.5.4, the same vehicle shallnot be refused in another Member State if it does not comply with the more demandingnational safety rule in section 2.5.5: see also section 2.5.6. Reference: ERA/GUI/01-2008/SAF Version: 1.1 Page 44 of 54File Name: Guide_for_Application_of_CSM_V1.1.docEuropean Railway Agency ● Boulevard Harpignies, 160 ● BP 20392 ● F-59307 Valenciennes Cedex ● France ● Tel. +33 (0)3 27 09 65 00 ● Fax +33 (0)3 27 33 40 65 ● http://www.era.europa.eu