MEETING: DATE: 12 November 2014 SUBJECT: SPONSOR: AUTHOR: AGENDA ITEM: 2.3 Industry Standards Co-ordination Committee Report from Chairman of GEL/9: Cross Functional Electrical European Standards Anson Jack Andy Goodwin 1 Purpose of the paper 1.1 To inform ISCC of developments being undertaken in the electrical Euronorms and particularly those of interest to the UK. 1.2 The last report to ISCC was in January 2014. 2 Background 2.1 There is significant work in the electrical field being undertaken by CENELEC at present. This has an impact on the UK and this paper has been produced to inform ISCC of the work being undertaken. 2.2 GEL/9 is the UK mirror group of CENELEC TC9X Electrical and electronic applications for railways. It meets twice a year to consider the UK input into the TC9X meeting. 2.3 GEL/9 also covers the work of IEC/TC9 "Electric railway equipment" which, being an international committee, includes input from Japan and other countries outside the CENELEC grouping. 2.4 TC9X has three sub-committees covering each of the three disciplines in the electrical area as set out below: a) Sub Committee SC9XA "Communication, signalling and processing systems" (covers CCS areas of interest). b) Sub Committee - SC9XB "Electrical, electronic and electromechanical material on board rolling stock, including associated software". c) Sub Committee - SC9XC Electrical supply and earthing systems for public transport equipment and ancillary apparatus (Fixed installations)"(covers Electrification and Energy Issues) 2.5 CENELEC TC9X itself sponsors working groups that work across the disciplines rather than purely within the single discipline. There is only one significant piece of work being undertaken in this area at present that ISCC should be aware of, which is: a) Update of EN50126 1999 Railway applications the specification and demonstration of Reliability, Availability, Maintainability and Safety (RAMS). The significant delay to this standard has resulted in the technical committee (TC9X) reviewing and rescheduling this work and is detailed in section 4 of this report. ISCC 12 November 2014 Report from GEL/9 Committee Chairman Page 1 of 5
3 TC9X Sub-Committees Progress 3.1 SC9XA: EN50128 (CCS systems Software) is one of the documents that is being updated from a signalling standard to cover rolling stock and electrification software as part of the update to EN50126 and was planned to become EN50126-5. Update of this standard is being considered as part of the review of EN 51026 work and is covered in section 4 of this paper. 3.2 SC9XB: All rolling stock manufacturers and national committees have had concerns for some time that the use of the signalling based software standard EN50128 for rolling stock, and particularly it s 2001 update, have been adding cost to rolling stock based projects 3.3 SC9XC No specific items of interest to ISCC were raised. 4 EN50126 - Progress of Working Group (WG14) 4.1 Background to the EN50126 work can be found in Appendix A. 4.2 The revised draft pren50126 standard (Euronorm) consists of 4 parts as listed below: a) Part 1 - Generic RAMS process (high level). b) Part 2 - Systems Approach to Safety (tools and techniques). c) Part 4 - Functional Safety - electric / electronic systems (Hardware). d) Part 5 - Functional Safety - electric / electronic systems (Software). Note: These draft parts are numbered Parts 1, 2, 4 and 5 because Part 3, which was to deal with application of Safety Targets, is now covered by the CSM on Risk Assessment. The ERA therefore removed the request for CENELEC to produce Part 3 of EN50126. When the standard is formally published it will be renumbered to remove this anomaly. 4.3 The revision of EN50126 1999 has three key aims: a) To align the EN with the Common Safety Method on Risk Assessment (CSM RA). b) To update what was largely a signalling based standard and broaden its scope to the railway system by additionally considering rolling stock and electrification. c) To provide requirements and guidance that are scalable to smaller projects. 4.4 The documents have been commented on and over 5,000 comments received. The UK submitted over 1,000 of these. 4.5 The addressing of the comments is taking significantly longer than was originally envisaged and so TC9X has set up a management audit of the project, the findings of which were required to be reported back to TC9X in summer 2014. ISCC 12 November 2014 Report from GEL/9 Committee Chairman Page 2 of 5
4.6 It was decided to progress with the four parts as detailed below:- 4.6.1 Part 1 (Generic RAMS) and Part 2 (System approach to Safety) be progressed as quickly as possible with a final draft for comment to be published in December 2014. To ensure this happens the following approach is required: a) The scope needs to be clarified between CENELEC (Convenor) and ERA and the link to the CSM RA understood and documented. b) Controversial issues should not be discussed and replaced by an open point. c) The number of members per country should be limited to three. 4.6.2 With respect to four Part 4 (Functional Safety - electric / electronic systems Hardware) it was decided that this was the least developed of the parts and so has been deleted from the work stream. 4.6.3 With respect to Part 5 (Functional Safety - electric / electronic systems (Software)), it was decided that the lack of progress in this area, it was appropriate to hand this back to the sub-committees to consider. The lack of progress had been caused by two key issues as follows: a) The first was that, whilst there was agreement between signalling and rolling stock at a high level, there were significant differences between these disciplines at a detailed level. SC9XC (fixed installation / electrification) indicated that they did not require a software standard. b) The second was that the standard, when updated, had become less scalable and was difficult to apply cost effectively to systems that had a lower impact on safety if failure occurred. 4.6.4 SC9XB (Rolling Stock) has decided to issue a new rolling stock standard and publish this by the end of 2016. This will be taken from a mixture of the published standard (EN 50128) and the draft Part 5 of EN50126. The content will be reviewed and redrafted as required to ensure that the rolling stock finally has a software standard that can be applied cost effectively. 4.6.5 SC9XA (signalling) will review the present standards and ensure that the update is viewed as applicable. 4.6.6 The published software standards (EN50128: 2001 and 2011) are viewed as adding cost to the industry so there is a need to produce these updates in the shortest time possible. It has therefore been agreed to exclude Cyber Security from this issue but to include it in the subsequent update. 5 Communications and Engagement 5.1 A route map is to be produced on the CENELEC safety standards after the next TC9X (26 th - 28 th November) and circulated via the Rail Industry Association (RIA) newsletter, the RSSB website and the High Integrity Software group. 5.2 Engagement with the rail industry for the EN50126 (Safety Standards) work has always been good. A GB mirror group (GEL 9/-/3) was set up for the original work and there were over 80 attendees to the workshops on the draft ISCC 12 November 2014 Report from GEL/9 Committee Chairman Page 3 of 5
documents. As the work has now been split into separate working groups with different expertise it has been decided to match this in the GB mirror group structure and to establish three new mirror groups as follows: a) GB mirror group 1 for the EN50126 Part 1 and Part 2 work (Safety Standard linked to CSM RA). b) GB mirror group 2 will be set up for the new Rolling Stock Software standard. c) GB mirror group 3 will be set up for the updated Signalling Software standard. 6 Recommendations 6.1 The Industry Standards Co-ordination Committee is asked to: a) NOTE the content of section 4 and the associated, significant engagement by the mirror groups in section 5 for the EN50126 workstream. ISCC 12 November 2014 Report from GEL/9 Committee Chairman Page 4 of 5
Annex A - Background to the EN50126 work EN50126 1999 Railway Applications - The specification and demonstration of Reliability, Availability, Maintainability and Safety (RAMS) was issued in 1999 and is presently being updated by CENELEC Working Group 14 (sponsored directly by TC9X as it is cross-disciplinary). EN50126 1999 is unusual in that it is a process standard and defines the process presently followed by railway equipment manufacturers across Europe (both CCS equipment and rolling stock) to ensure adequate safety and demonstration of that safety. EN50126 1999 was originally written for and used on complex new signalling projects; however, in the absence of anything else, it was applied to all signalling based changes and was also adopted by train manufacturers for new rolling stock projects. In order to assist its application to rolling stock an additional guide (Part 3 of the Standard) was issued in 2006. With the development of the Common Safety Methods by ERA requiring demonstration of safety on all railway projects where significant change of the railway system has occurred, EN50126 1999 was being called up contractually across Europe as the standard to use. Concern was raised by various national standards committees (including BSI), that a standard that had been written for application to complex signalling projects, using largely bespoke equipment, was resulting in additional unnecessary cost on other projects that it was being applied to. A survey group of experts was set up by CENELEC (TC9X) and this group (SG14) considered the need and, in conjunction with the ERA, devised a remit for standards change. Following agreement by both CENELEC and ERA of the remit, the working group (WG14) was set up and started work in May 2008. ISCC 12 November 2014 Report from GEL/9 Committee Chairman Page 5 of 5