1、BSI Standards PublicationWB11885_BSI_StandardCovs_2013_AW.indd 1 15/05/2013 15:06Space product assurance - SafetyBS EN 16602-40:2018EUROPEAN STANDARD NORME EUROPENNE EUROPISCHE NORM EN 16602-40 April 2018 ICS 49.140 Supersedes EN ISO 14620-1:2002 English version Space product assurance - Safety Assu
2、rance produit des projets spatiaux - Scurit Raumfahrtsysteme - Sicherheit This European Standard was approved by CEN on 18 September 2017. CEN and CENELEC members are bound to comply with the CEN/CENELEC Internal Regulations which stipulate the conditions for giving this European Standard the status
3、 of a national standard without any alteration. Up-to-date lists and bibliographical references concerning such national standards may be obtained on application to the CEN-CENELEC Management Centre or to any CEN and CENELEC member. This European Standard exists in three official versions (English,
4、French, German). A version in any other language made by translation under the responsibility of a CEN and CENELEC member into its own language and notified to the CEN-CENELEC Management Centre has the same status as the official versions. CEN and CENELEC members are the national standards bodies an
5、d national electrotechnical committees of Austria, Belgium, Bulgaria, Croatia, Cyprus, Czech Republic, Denmark, Estonia, Finland, Former Yugoslav Republic of Macedonia, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, Netherlands, Norway, Poland, Portu
6、gal, Romania, Serbia, Slovakia, Slovenia, Spain, Sweden, Switzerland, Turkey and United Kingdom. CEN-CENELEC Management Centre: Rue de la Science 23, B-1040 Brussels 2018 CEN/CENELEC All rights of exploitation in any form and by any means reserved worldwide for CEN national Members and for CENELEC M
7、embers. Ref. No. EN 16602-40:2018 ENational forewordThis British Standard is the UK implementation of EN 16602-40:2018. It supersedes BS EN ISO 14620-1:2002, which is withdrawn.The UK participation in its preparation was entrusted to Technical Committee ACE/68, Space systems and operations.A list of
8、 organizations represented on this committee can be obtained on request to its secretary.This publication does not purport to include all the necessary provisions of a contract. Users are responsible for its correct application. The British Standards Institution 2018 Published by BSI Standards Limit
9、ed 2018ISBN 978 0 580 98619 2ICS 49.140Compliance with a British Standard cannot confer immunity from legal obligations.This British Standard was published under the authority of the Standards Policy and Strategy Committee on 30 April 2018.Amendments/corrigenda issued since publicationDate Text affe
10、ctedBRITISH STANDARDBS EN 16602-40:2018EUROPEAN STANDARD NORME EUROPENNE EUROPISCHE NORM EN 16602-40 April 2018 ICS 49.140 Supersedes EN ISO 14620-1:2002 English version Space product assurance - Safety Assurance produit des projets spatiaux - Scurit Raumfahrtsysteme - Sicherheit This European Stand
11、ard was approved by CEN on 18 September 2017. CEN and CENELEC members are bound to comply with the CEN/CENELEC Internal Regulations which stipulate the conditions for giving this European Standard the status of a national standard without any alteration. Up-to-date lists and bibliographical referenc
12、es concerning such national standards may be obtained on application to the CEN-CENELEC Management Centre or to any CEN and CENELEC member. This European Standard exists in three official versions (English, French, German). A version in any other language made by translation under the responsibility
13、 of a CEN and CENELEC member into its own language and notified to the CEN-CENELEC Management Centre has the same status as the official versions. CEN and CENELEC members are the national standards bodies and national electrotechnical committees of Austria, Belgium, Bulgaria, Croatia, Cyprus, Czech
14、Republic, Denmark, Estonia, Finland, Former Yugoslav Republic of Macedonia, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, Netherlands, Norway, Poland, Portugal, Romania, Serbia, Slovakia, Slovenia, Spain, Sweden, Switzerland, Turkey and United Kingd
15、om. CEN-CENELEC Management Centre: Rue de la Science 23, B-1040 Brussels 2018 CEN/CENELEC All rights of exploitation in any form and by any means reserved worldwide for CEN national Members and for CENELEC Members. Ref. No. EN 16602-40:2018 EBS EN 16602-40:2018EN 16602-40:2018 (E) 2 Table of content
16、s European Foreword . 7 1 Scope . 9 2 Normative references . 10 3 Terms, definitions and abbreviated terms 11 3.1 Terms from other standards 11 3.2 Terms specific to the present standard . 11 3.3 Abbreviated terms. 13 3.4 Nomenclature . 14 4 Safety principles . 15 4.1 Objective 15 4.2 Policy 15 4.2.
17、1 General . 15 4.2.2 Implementation . 15 4.3 Safety programme 16 5 Safety programme 17 5.1 Scope . 17 5.2 Safety programme plan 17 5.3 Conformance 18 5.4 Safety organization . 18 5.4.1 Safety manager . 18 5.4.2 Safety manager access and authority . 18 5.4.3 Safety audits . 19 5.4.4 Approval of docum
18、entation 19 5.4.5 Approval of hazardous operations . 19 5.4.6 Representation on boards . 19 5.4.7 Safety approval authority. 20 5.5 Safety risk assessment and control 20 5.6 Safety critical items . 20 5.7 Project phases and safety review cycle 20 BS EN 16602-40:2018EN 16602-40:2018 (E) 3 5.7.1 Safet
19、y program tasks and reviews 20 5.7.2 Progress meetings 24 5.7.3 Safety reviews . 24 5.8 Safety compliance demonstration . 25 5.9 Safety training . 25 5.9.1 General . 25 5.9.2 Product specific training 25 5.9.3 General awareness briefings . 26 5.9.4 Basic technical training . 26 5.9.5 Training record
20、s 26 5.10 Accident-incident reporting and investigation 26 5.11 Safety documentation . 26 5.11.1 General . 26 5.11.2 Safety data package . 27 5.11.3 Safety deviations and waivers . 27 5.11.4 Safety lessons learned 28 5.11.5 Documentation of safety critical items . 28 6 Safety engineering . 29 6.1 Ov
21、erview 29 6.2 Safety requirements identification and traceability 29 6.3 Safety design objectives . 29 6.3.1 Safety policy and principles . 29 6.3.2 Design selection 29 6.3.3 Hazard reduction precedence . 30 6.3.4 Environmental compatibility . 32 6.3.5 External services . 32 6.3.6 Hazard detection -
22、 signalling and safing 32 6.3.7 Space debris mitigation . 33 6.3.8 Atmospheric re-entry . 33 6.3.9 Safety of Earth return missions . 33 6.3.10 Safety of human spaceflight missions . 34 6.3.11 Access 34 6.4 Safety risk reduction and control . 34 6.4.1 Severity of hazardous event and function critical
23、ity . 34 6.4.2 Failure tolerance requirements 36 6.4.3 Design for minimum risk 37 6.4.4 Probabilistic safety targets 38 BS EN 16602-40:2018EN 16602-40:2018 (E) 4 6.5 Identification and control of safety-critical functions 39 6.5.1 Identification 39 6.5.2 Inadvertent operation 39 6.5.3 Status informa
24、tion . 39 6.5.4 Safe shutdown and failure tolerance requirements 39 6.5.5 Electronic, electrical, electromechanical components 40 6.5.6 Software functions. 40 6.6 Operational Safety 42 6.6.1 Basic requirements . 42 6.6.2 Flight operations and mission control 42 6.6.3 Ground operations 43 7 Safety an
25、alysis requirements and techniques . 46 7.1 Overview 46 7.2 General . 46 7.3 Assessment and allocation of requirements 47 7.3.1 Safety requirements 47 7.3.2 Additional safety requirements 47 7.3.3 Define safety requirements - functions 47 7.3.4 Define safety requirements - subsystems 47 7.3.5 Justif
26、ication . 47 7.3.6 Functional and subsystem specification 47 7.4 Safety analyses during the project life cycle 47 7.5 Safety analyses 48 7.5.1 General . 48 7.5.2 Hazard analysis 48 7.5.3 Safety risk assessment . 49 7.5.4 Supporting assessment and analysis 49 8 Safety verification . 53 8.1 General .
27、53 8.2 Hazard reporting and review . 53 8.2.1 Hazard reporting system . 53 8.2.2 Safety status review 53 8.2.3 Documentation 53 8.3 Safety verification methods . 54 8.3.1 Verification engineering and planning . 54 8.3.2 Methods and reports . 54 8.3.3 Analysis 54 BS EN 16602-40:2018EN 16602-40:2018 (
28、E) 5 8.3.4 Inspections 54 8.3.5 Verification and approval . 55 8.4 Verification of safety-critical functions . 55 8.4.1 Validation 55 8.4.2 Qualification 55 8.4.3 Failure tests 56 8.4.4 Verification of design or operational characteristics . 56 8.4.5 Safety verification testing 56 8.5 Hazard close-o
29、ut 56 8.5.1 Safety assurance verification 56 8.5.2 Hazard close-out verification . 57 8.6 Declaration of conformity of ground equipment . 57 Annex A (informative) Analyses applicability matrix . 58 Annex B (normative) Safety programme plan - DRD 60 B.1 DRD identification . 60 B.1.1 Requirement ident
30、ification and source document 60 B.1.2 Purpose and objective . 60 B.2 Expected response . 60 B.2.1 Contents . 60 B.2.2 Special remarks 61 Annex C (normative) Safety verification tracking log (SVTL) DRD . 62 C.1 DRD identification . 62 C.1.1 Requirement identification and source document 62 C.1.2 Pur
31、pose and objective . 62 C.2 Expected response . 62 C.2.1 Contents . 62 C.2.2 Special remarks 64 Annex D (normative) Safety analysis report including hazard reports - DRD 66 D.1 DRD identification . 66 D.1.1 Requirement identification and source document 66 D.1.2 Purpose and objective . 66 D.2 Expect
32、ed response . 66 D.2.1 Contents . 66 D.2.2 Special remarks 67 Annex E (informative) Criteria for probabilistic safety targets 68 BS EN 16602-40:2018EN 16602-40:2018 (E) 6 E.1 Objectives of probabilistic safety targets . 68 E.2 Criteria for probabilistic safety targets . 68 Annex F (informative) Appl
33、icability guidelines . 69 Annex G (informative) European legislation and CE marking . 75 G.1 Overview 75 G.2 CE mark . 75 G.3 Responsibility of the design authority 75 G.4 Declaration of conformity 76 G.5 References . 76 Bibliography . 78 Figures Figure C-1 : Safety verification tracking log (SVTL)
34、65 Tables Table 6-1: Severity categories 36 Table 6-2: Criticality of functions . 36 Table 6-3: Criticality category assignment for software products vs. function criticality . 41 Table A-1 : Safety deliverable documents 59 BS EN 16602-40:2018EN 16602-40:2018 (E) 7 European Foreword This document (E
35、N 16602-40:2018) has been prepared by Technical Committee CEN/CLC/JTC 5 “Space”, the secretariat of which is held by DIN (Germany). This document (EN 16602-40:2018) originates from ECSS-Q-ST-40C Rev.1. This European Standard shall be given the status of a national standard, either by publication of
36、an identical text or by endorsement, at the latest by October 2018, and conflicting national standards shall be withdrawn at the latest by October 2018. Attention is drawn to the possibility that some of the elements of this document may be the subject of patent rights. CEN and/or CENELEC shall not
37、be held responsible for identifying any or all such patent rights. This document supersedes EN ISO 14620-1:2002. The main changes with respect to EN ISO 14620-1:2002 are listed below: new EN number, Complete and thorough review with the focus on simplification and streamlining to improve clarity and
38、 consistency of requirements. Applicability guidelines to the different space systems has been defined (see applicability matrix provided in Annex E). System safety programme requirements reworked, i.e. the system safety programme supports the risk management process described in EN 16601-80 (based
39、on ECSS-M-ST-80C). Space debris mitigation streamlined. Atmospheric re-entry addressed. Safety design principles reworked. Safety risk reduction and control updated. Safety analysis requirements and techniques updated. Common scheme for consequence severity classification used in EN 16602-30 and EN
40、16602-40 (based on ECSS-Q-ST-30C and ECSS-Q-ST-40C). Identification and control of safety-critical functions updated. Established link to EN 1602-10-04 “Critical-item control” (based on ECSS-Q-ST-10-04). Informative annex on European legislation and CE marking added (Annex F). DRDs revisited and upd
41、ated. Document reworked to be in compliance with ECSS standards drafting rules. BS EN 16602-40:2018EN 16602-40:2018 (E) 8 This document has been prepared under a standardization request given to CEN by the European Commission and the European Free Trade Association. This document has been developed
42、to cover specifically space systems and has therefore precedence over any EN covering the same scope but with a wider domain of applicability (e.g. : aerospace). According to the CEN-CENELEC Internal Regulations, the national standards organisations of the following countries are bound to implement
43、this European Standard: Austria, Belgium, Bulgaria, Croatia, Cyprus, Czech Republic, Denmark, Estonia, Finland, Former Yugoslav Republic of Macedonia, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, Netherlands, Norway, Poland, Portugal, Romania, Serb
44、ia, Slovakia, Slovenia, Spain, Sweden, Switzerland, Turkey and the United Kingdom. BS EN 16602-40:2018EN 16602-40:2018 (E) 9 1 Scope This Standard defines the safety programme and the safety technical requirements aiming to protect flight and ground personnel, the launch vehicle, associated payloads
45、, ground support equipment, the general public, public and private property, the space system and associated segments and the environment from hazards associated with European space systems. This Standard is applicable to all European space projects. This standard may be tailored for the specific ch
46、aracteristic and constraints of a space project in conformance with ECSS-S-ST-00. BS EN 16602-40:2018EN 16602-40:2018 (E) 10 2 Normative references The following normative documents contain provisions which, through reference in this text, constitute provisions of this ECSS Standard. For dated refer
47、ences, subsequent amendments to, or revision of any of these publications do not apply. However, parties to agreements based on this ECSS Standard are encouraged to investigate the possibility of applying the more recent editions of the normative documents indicated below. For undated references, th
48、e latest edition of the publication referred to applies. EN reference Reference in text Title EN 16601-00-01 ECSS-S-ST-00-01 ECSS system Glossary of terms EN 16603-10 ECSS-E-ST-10 Space engineering System engineering general requirements EN 16603-32-01 ECSS-E-ST-32-01 Space engineering Fracture cont
49、rol EN 16603-32-10 ECSS-E-ST-32-10 Space engineering Structural factors of safety for spaceflight hardware EN 16603-40 ECSS-E-ST-40 Space engineering Software general requirements EN 16601-10 ECSS-M-ST-10 Space project management Project planning and implementation EN 16601-40 ECSS-M-ST-40 Space project management Configuration and information management EN 16601-80 ECSS-M-ST-80 Space project management Risk management EN 16602-10 ECSS-Q-ST-10 Space product assurance Product assurance management EN 16602-10-04 ECSS-Q-
