【BS英國(guó)標(biāo)準(zhǔn)】BS EN 61508-1-2002 Functional safety of electricalelectronic programmable electronic safety-related systems — Part 1 General requirements.doc

british standard bs en61508-1:2002incorporating corrigendum no.1 to bs iec 61508-1:1998 and amendment no.1 to bs iec61508-1:1998licensed copy: institute of technology tallaght, institute of technology, mon jun 11 16:21:35 gmt+00:00 2007, uncontrolled copy, (c) bsifunctional safety ofelectrical/electronic/ programmable electronicsafety-related systems part 1: general requirementsthe european standard en 61508-1:2001 has the status of abritish standardics 25.040.40; 29.020 (renumbers thebs iec asbs en 61508-1:2002)bs en 61508-1:2002national forewordthis british standard is the official english language version ofen 61508-1:2001. it is identical with iec 61508-1:1998 including corrigendummay 1999.the uk participation in its preparation was entrusted to technical committee gel/65, measurement and control, to subcommittee gel/65/1, system considerations, which has the responsibility to:aid enquirers to understand the text;present to the responsible international/european committee any enquiries on the interpretation, or proposals for change, and keep the uk interests informed;monitor related international and european developments and promulgate them in the uk.a list of organizations represented on this committee can be obtained on request to its secretary.cross-referencesthe british standards which implement international or european publications referred to in this document may be found in the bsi standards catalogue under the section entitled “international standards correspondence index”, or by using the “find” facility of the bsi standards electronic catalogue.a british standard does not purport to include all the necessary provisions of a contract. users of british standards are responsible for their correct application.compliance with a british standard does not of itself confer immunity from legal obligations.licensed copy: institute of technology tallaght, institute of technology, mon jun 11 16:21:35 gmt+00:00 2007, uncontrolled copy, (c) bsithis british standard, having been prepared under the direction of the electrotechnical sector committee, was published under the authority of the standards committee and comes into effecton 15 june 1999 bsi 15 march 2002isbn 0 580 32719 1summary of pagesthis document comprises a front cover, an inside front cover, the en title page, pages 2 to 59 and a back cover.the bsi copyright date displayed in this document indicates when the document was last issued.amd. no.datecomments10631corrigendum no.1august 1999incorporation of iec corrigendummay 19991377915 march 2002implementation of the european standardamendments issued since publicationeuropean standarden 61508-1norme europenneeuropische normdecember 2001ics 13.110;25.040;29.020;35.240.50english versionfunctional safety of electrical/electronic/programmable electronic safety-related systemspart 1: general requirements(iec 61508-1:1998 + corrigendum 1999)scurit fonctionnelle des systmes lectriques/lectroniques/lectroniques programmables relatifs la scurit partie 1: prescriptions gnrales(cei 61508-1:1998 + corrigendum 1999)funktionale sicherheit sicherheitsbezogener elektrischer/ elektronischer/programmierbarer elektronischer systemeteil 1: allgemeine anforderungen(iec 61508-1:1998 + corrigendum 1999)licensed copy: institute of technology tallaght, institute of technology, mon jun 11 16:21:35 gmt+00:00 2007, uncontrolled copy, (c) bsithis european standard was approved by cenelec on 2001-07-03. cenelec members are bound to comply with the cen/cenelec internal regulations which stipulate the conditions for giving this european standard the status of a national standard without any alteration.up-to-date lists and bibliographical references concerning such national standards may be obtained on application to the central secretariat or to any cenelec member.this european standard exists in three official versions (english, french, german). a version in any other language made by translation under the responsibility of a cenelec member into its own language and notified to the central secretariat has the same status as the official versions.cenelec members are the national electrotechnical committees of austria, belgium, czech republic, denmark, finland, france, germany, greece, iceland, ireland, italy, luxembourg, malta, netherlands, norway, portugal, spain, sweden, switzerland and united kingdom.ceneleceuropean committee for electrotechnical standardization comit europen de normalisation electrotechnique europisches komitee fr elektrotechnische normungcentral secretariat: rue de stassart 35, b - 1050 brussels 2001 cenelec - all rights of exploitation in any form and by any means reserved worldwide for cenelec members.ref. no. en 61508-1:2001 epage 59en 615081:2001licensed copy: institute of technology tallaght, institute of technology, mon jun 11 16:21:35 gmt+00:00 2007, uncontrolled copy, (c) bsiforewordthe text of the international standard iec 61508-1:1998 including its corrigendum may 1999, prepared by sc 65a, system aspects, of iec tc 65, industrial-process measurement and control, was submitted to the unique acceptance procedure and was approved by cenelec as en 61508-1 on 2001-07-03 without any modification.the following dates were fixed: latest date by which the en has to be implemented at national level by publication of an identicalnational standard or by endorsement(dop) 2002-08-01 latest date by which the national standards conflictingwith the en have to be withdrawn(dow) 2004-08-01annexes designated normative are part of the body of the standard. annexes designated informative are given for information only.in this standard, annex za is normative and annexes a, b and c are informative.annex za has been added by cenelec.iec 61508 is a basic safety publication covering the functional safety of electrical, electronic and programmable electronic safety-related systems. the scope states:this international standard covers those aspects to be considered when electrical/electronic/ programmable electronic systems (e/e/pess) are used to carry out safety functions. a major objective of this standard is to facilitate the development of application sector international standards by the technical committees responsible for the application sector. this will allow all the relevant factors associated with the application, to be fully taken into account and thereby meet the specific needs of the application sector. a dual objective of this standard is to enable the development of electrical/electronic/programmable electronic (e/e/pe) safety-related systems where application sector international standards may not exist.the cenelec report r0bt-004, ratified by 103 bt (march 2000) accepts that some iec standards, which today are either published or under development, are sector implementations of iec 61508. for example: iec 61511, functional safety - safety instrumented systems for the process industry sector; iec 62061, safety of machinery functional safety of electrical, electronic and programmable electronic control systems; iec 61513, nuclear power plants instrumentation and control for systems important to safety general requirements for systems.the railways sector has also developed a set of european standards (en 50126; en 50128 and pren 50129).note en 50126 and en 50128 were based on earlier drafts of iec 61508. pren 50129 is based on the principles of the latest version of iec 61508.this list does not preclude other sector implementations of iec 61508 which could be currently under development or published within iec or cenelec.licensed copy: institute of technology tallaght, institute of technology, mon jun 11 16:21:35 gmt+00:00 2007, uncontrolled copy, (c) bsiendorsement noticethe text of the international standard iec 61508-1:1998 including its corrigendum may 1999 was approved by cenelec as a european standard without any modification.in the official version, for bibliography, the following note has to be added for the standard indicated:iec 61355:1997note harmonized as en 61355:1997 (not modified).licensed copy: institute of technology tallaght, institute of technology, mon jun 11 16:21:35 gmt+00:00 2007, uncontrolled copy, (c) bsicontentspageintroduction . 6clause1scope . 82normative references . 113definitions and abbreviations . 114conformance to this standard . 125documentation . 125.1objectives . 125.2requirements . 136management of functional safety . 146.1objectives . 146.2requirements . 147overall safety lifecycle requirements . 167.1general. 167.2concept . 257.3overall scope definition . 257.4hazard and risk analysis . 267.5overall safety requirements . 287.6safety requirements allocation . 297.7overall operation and maintenance planning . 357.8overall safety validation planning . 367.9overall installation and commissioning planning . 377.10 realisation: e/e/pes. 387.11 realisation: other technology . 387.12 realisation: external risk reduction facilities . 387.13 overall installation and commissioning . 397.14 overall safety validation . 397.15 overall operation, maintenance and repair. 407.16 overall modification and retrofit . 437.17 decommissioning or disposal . 457.18 verification . 468functional safety assessment. 478.1objective . 478.2requirements . 47licensed copy: institute of technology tallaght, institute of technology, mon jun 11 16:21:35 gmt+00:00 2007, uncontrolled copy, (c) bsiannexesannex a (informative) example documentation structure . 50a.1general . 50a.2safety lifecycle document structure . 51a.3physical document structure . 54a.4list of documents. 56annex b (informative) competence of persons . 57b.1objective . 57b.2general considerations . 57annex c (informative) bibliography . 58annex za (normative) normative references to international publications with theircorresponding european publications . 59tables1overall safety lifecycle: overview . 202safety integrity levels: target failure measures for a safety function, allocated toan e/e/pe safety-related system operating in low demand mode of operation . 333safety integrity levels: target failure measures for a safety function, allocated to an e/e/pe safety-related system operating in high demand or continuous modeof operation . 334minimum levels of independence of those carrying out functional safety assessment(overall safety lifecycle phases 1 to 8 and 12 to 16 inclusive (see figure 2) . 495minimum levels of independence of those carrying out functional safety assessment(overall safety lifecycle phase 9 - includes all phases of e/e/pes and software safetylifecycles (see figures 2, 3 and 4) . 49a.1 example documentation structure for information related to the overallsafety lifecycle . 52a.2 example documentation structure for information related to the e/e/pessafety lifecycle . 53a.3 example documentation structure for information related to the softwaresafety lifecycle . 54figures1overall framework of this standard . 102overall safety lifecycle. 173e/e/pes safety lifecycle (in realisation phase) . 184software safety lifecycle (in realisation phase) . 185relationship of overall safety lifecycle to e/e/pes and software safety lifecycles . 196allocation of safety requirements to the e/e/pe safety-related systems,other technology safety-related systems and external risk reduction facilities . 327example operations and maintenance activities model . 428example operation and maintenance management model . 439example modification procedure model . 45a.1 structuring information into document sets for user groups . 55a.2 structuring information for large complex systems and small lowcomplexity systems . 55licensed copy: institute of technology tallaght, institute of technology, mon jun 11 16:21:35 gmt+00:00 2007, uncontrolled copy, (c) bsiintroductionsystems comprised of electrical and/or electronic components have been used for many years to perform safety functions in most application sectors. computer-based systems (generically referred to as programmable electronic systems (pess) are being used in all application sectors to perform non-safety functions and, increasingly, to perform safety functions. if computer system technology is to be effectively and safely exploited, it is essential that those responsible for making decisions have sufficient guidance on the safety aspects on which to make these decisions.this international standard sets out a generic approach for all safety lifecycle activities for systems comprised of