EN 50126 / EN 50128 / EN 50129 - Railway Applications RAMS
EN 50128 Annex A: Criteria for the selection of techniques and measures – EN 50126 / EN 50128 / EN 50129 - Railway Applications RAMS

EN 50126 / EN 50128 / EN 50129 - Railway Applications RAMS 50128:A.3: Table A.3: software architecture (7.3)

Table A.3 lists 23 architectural techniques with their grade per SIL: defensive programming HR at every SIL above Basic Integrity; fault detection and diagnosis, error detecting codes, failure assertion programming, diverse programming, memorising executed cases, software error effect analysis, graceful degradation and formal methods R at SIL 1 and 2 and HR at SIL 3 and 4; safety bag techniques, recovery block and retry fault recovery mechanisms R; backward recovery, forward recovery, artificial intelligence fault correction and dynamic reconfiguration NR at every SIL; error correcting codes and information hiding without recommendation; information encapsulation R at Basic Integrity and HR above; fully defined interface (for external interfaces) HR at Basic Integrity to SIL 2 and M at SIL 3 and 4; modelling R to SIL 2 and HR above; structured methodology R at Basic Integrity and HR above; modelling backed by CAD and specification tooling R to SIL 2 and HR above. Approved combinations: at SIL 3 and 4 either defensive programming, diverse programming, fully defined interface and structured methodology plus one of error detecting codes, failure assertion programming, memorising executed cases or modelling, or defensive programming, error detecting codes, fully defined interface and structured methodology plus one of fault detection and diagnosis, failure assertion programming, memorising executed cases, software error effect analysis or modelling; at SIL 1 and 2 defensive programming, fully defined interface and structured methodology plus one of a listed set. Some issues may be defined at system level; error detecting codes may follow EN 50159.

Maintained by Gerard Blokdyk

What else in your programme already covers this

This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Other controls in EN 50128 Annex A: Criteria for the selection of techniques and measures – EN 50126 / EN 50128 / EN 50129 - Railway Applications RAMS

Query this from an agent

The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.