Rail
Development of rolling stock, signalling and rail systems, from concept to acceptance
Rolling stock, signalling and infrastructure are long-lived systems. Their development runs over years, and changes during operation must remain traceable. Manufacturers, suppliers and operators develop and integrate them through the interplay of mechanics, electronics and software.
Fixed requirements apply. EN 50126 governs the life cycle for reliability, availability, maintainability and safety (RAMS), EN 50716 the software, EN 50129 the safety of electronic signalling systems and CLC/TS 50701 cybersecurity. Acceptance and approval require the corresponding evidence.
Which requirements apply in the rail sector
Standards and regulations to be met for rolling stock, signalling and rail systems.
Life cycle and RAMS
EN 50126 describes the life cycle of a rail system from concept to decommissioning and requires reliability, availability, maintainability and safety to be planned and demonstrated from the start.
More on functional safety →Software
EN 50716 governs software development for railway applications and replaces EN 50128 and EN 50657. The safety integrity level (SIL 0 to 4) determines how deep development, testing and documentation go.
More on functional safety →Signalling
EN 50129 sets requirements for electronic signalling systems with safety responsibility, for example for safety cases and fault control.
More on functional safety →Cybersecurity
Connected rail systems must be protected against attacks. CLC/TS 50701 describes cybersecurity for railway applications, and IEC 62443 applies to installations as well.
More on cybersecurity →When support makes sense
Typical triggers in the rail sector.
Acceptance is coming up
A vehicle or system is to be accepted, and the safety and RAMS evidence is incomplete.
Safety case missing
The safety case was not built up alongside development, and the argumentation cannot be derived from the documents.
Independent assessment announced
An independent assessor reviews the system, and the hazard log, requirements and tests are not linked end to end.
Change during operation
Software or hardware of a system in operation is changed, and the consequences for safety and approval have not been assessed.
What we take on in the rail sector
Three service areas that can be combined as the task requires.
Engineering
Requirements, RAMS targets and system architecture for rolling stock, signalling and rail systems, plus a feasibility assessment before the decision.
More →Management
Project and safety management with a safety plan, maintenance of the hazard log, and coordination between manufacturer, operator and assessor.
More →Development and testing
Safety analyses such as FMEA and FTA, software development to EN 50716, and verification and validation through to acceptance.
More →Approach and work products
The work follows four steps.
Define system and scope
System boundaries, interfaces and the scope of development are defined, together with the applicable standards and the role in the project.
Assess hazards and RAMS targets
Hazards are analysed, SIL is allocated and RAMS targets are set. Assumptions are documented.
Derive requirements and architecture
The targets lead to safety requirements and architecture, including for software to EN 50716, traceable through to testing.
Show the evidence
The safety case and the verification and validation reports are prepared so that assessors and operators can follow them.
This produces, among other things, the safety plan, the hazard log, the RAMS requirements and analyses, the safety requirements, the software requirements and architecture, and verification and validation reports as the basis of the safety case. The independent safety assessment and the approval are not part of it.
Frequently asked questions
What does EN 50126 govern?
EN 50126 describes the life cycle of rail systems for reliability, availability, maintainability and safety (RAMS) and applies to rolling stock, signalling and infrastructure. It forms the framework for the other standards.
What is EN 50716, and does it replace EN 50128?
EN 50716 governs software for railway applications and merges EN 50128 (signalling) and EN 50657 (rolling stock) into one standard. It is their successor.
What does SIL mean in rail?
SIL (Safety Integrity Level) is the safety integrity level from 0 to 4, where 4 has the highest requirements. It results from the hazard analysis and determines the effort and depth of development, testing and evidence.
What is a safety case?
The safety case demonstrates through argumentation and evidence that a system is sufficiently safe for its intended use. It is built up alongside development and is the basis of the independent assessment.
Who assesses safety independently?
An independent safety assessment is carried out by a recognised body. Development provides the documents; the assessment itself is not part of the work.
Are there cybersecurity requirements in the rail sector?
Yes. CLC/TS 50701 describes cybersecurity for railway applications, and IEC 62443 often applies to installations. Operators and approval bodies increasingly ask for corresponding evidence.
Clarify your project in a call
In the call we clarify the trigger, which standard applies and which deadline has to be met.