Division 3.2.1 Safety

Every project to which this specification is applied shall put into effect the measures necessary to demonstrate that the level of risk of an incident occurring that is within the scope of the Control-Command Subsystem, is not higher than the objective for the service. To ensure that the solutions to achieve safety do not jeopardise interoperability the requirements of the basic parameter defined in section 4.2.1 (Control-Command safety characteristics relevant to interoperability) shall be respected.

For Class A system (ERTMS/ETCS), the global safety objective for the Subsystem is apportioned between the on-board and Track-side Assemblies. The detailed requirements are specified in the basic parameter defined in section 4.2.1 (Control-Command safety characteristics relevant to interoperability). This safety requirement must be met together with the availability requirements as defined in Section 3.2.2 (Reliability and Availability).

For Class B systems used for trans-European high-speed rail operation, it is the responsibility of the appropriate Member State (defined in Annex B) to:

• ensure that the Class B system design meets National safety targets,

• ensure that the application of the Class B system meets National safety targets,

• define the safe operating parameters and conditions of use of the Class B system (including, but not limited to, maintenance and degraded modes).