prEN ISO 25119-1

Tractors and machinery for agriculture and forestry - Safety-related parts of control systems - Part 1: General principles for design and development (ISO 25119-1:2018)

This document sets out general principles for the design and development of safety-related parts of control systems (SRP/CS) on tractors used in agriculture and forestry and on self-propelled ride-on machines and mounted, semi-mounted and trailed machines used in agriculture. It can also be applied to mobile municipal equipment (e.g. street-sweeping machines).
This document is not applicable to:
—          aircraft and air-cushion vehicles used in agriculture;
—          lawn and garden equipment.
This document specifies the characteristics and categories required of SRP/CS for carrying out their safety-related functions. It does not identify performance levels for specific applications.
NOTE 1    Machine specific type-C standards can specify performance levels (AgPL) for safety-related functions in machines within their scope. Otherwise, the specification of AgPL is the responsibility of the manufacturer.
This document is applicable to the safety-related parts of electrical/electronic/programmable electronic systems (E/E/PES), as these relate to mechatronic systems. It covers the possible hazards caused by malfunctioning behaviour of E/E/PES safety-related systems, including interaction of these systems. It does not address hazards related to electric shock, fire, smoke, heat, radiation, toxicity, flammability, reactivity, corrosion, release of energy, and similar hazards, unless directly caused by malfunctioning behaviour of E/E/PES safety-related systems. It also covers malfunctioning behaviour of E/E/PES safety-related systems involved in protective measures, safeguards, or safety-related functions in response to non-E/E/PES hazards.
Examples included within the scope of this document:
—          SRP/CS limiting current flow in electric hybrids to prevent insulation failure/shock hazards;
—          electromagnetic interference with the SRP/CS;
—          SRP/CS designed to prevent fire.
Examples not included in the scope of this document:
—          insulation failure due to friction that leads to electric shock hazards;
—          nominal electromagnetic radiation impacting nearby machine control systems;
—          corrosion causing electric cables to overheat.
This document is not applicable to non-E/E/PES systems (e.g. hydraulic, mechanic or pneumatic).
NOTE 2    See also ISO 12100 for design principles related to the safety of machinery.
This document is not applicable to safety related parts of control systems manufactured before the date of its publication.

Traktoren und Maschinen für die Land- und Forstwirtschaft - Sicherheitsbezogene Teile von Steuerungen - Teil 1: Allgemeine Gestaltungs- und Entwicklungsleitsätze (ISO 25119-1:2018)

Dieses Dokument stellt allgemeine Grundlagen und Leitsätze heraus für die Gestaltung und Entwicklung sicherheitsbezogener Teile von Steuerungen (SRP/CS) in land- und forstwirtschaftlichen Traktoren, selbstfahrenden Aufsitzmaschinen sowie Anbau-, Aufsattel- und Anhängemaschinen für landwirtschaftliche Geräte. Sie kann auch auf fahrbare kommunale Geräte (z. B. Straßenkehrmaschinen) angewendet werden.
Dieses Dokument gilt nicht für:
   Flugzeuge und Luftkissenfahrzeuge für den landwirtschaftlichen Einsatz;
   Rasen- und Gartengeräte.
Dieses Dokument legt die Merkmale und Kategorien von SRP/CS-Systemen fest, die zur Ausführung von Sicherheitsfunktionen erforderlich sind. Es enthält keine Performance Level für bestimmte Anwendungen.
ANMERKUNG 1   Maschinenspezifische Typ-C-Normen können Performance Level (AgPL) für Sicherheitsfunktionen von Maschinen in ihrem Anwendungsbereich festlegen. Andernfalls ist der Hersteller für die Festlegung des AgPL verantwortlich.
Dieses Dokument gilt für sicherheitsbezogene Teile elektrischer/elektronischer/programmierbarer elektronischer Systeme (E/E/PES) als Teil mechatronischer Systeme. Es behandelt die möglichen Gefahren durch Fehlfunktionen von sicherheitsbezogenen E/E/PES einschließlich der Wechselwirkungen dieser Systeme. Das Dokument behandelt nicht Gefahren in Verbindung mit Stromschlag, Feuer, Rauch, Hitze, Strahlung, Toxizität, Entflammbarkeit, Reaktivität, Korrosion, Freisetzung von Energie usw., soweit diese nicht direkt durch eine Fehlfunktion der sicherheitsbezogenen Systeme von E/E/PES verursacht werden. Darüber hinaus behandelt das Dokument die Fehlfunktionen sicherheitsbezogener Systeme von E/E/PES, die an Schutzmaßnahmen, Schutzeinrichtungen oder Sicherheitsfunktionen als Reaktion auf nicht durch E/E/PES verursachte Gefahren beteiligt sind.
Im Anwendungsbereich dieses Dokuments enthaltene Beispiele sind:
   SRP/CS, die den Stromfluss in elektrischen Hybridsystemen begrenzen, um Isolierungsausfälle und Gefahren durch elektrischen Schlag zu verhindern;
   elektromagnetische Störungen mit dem SRP/CS;
   für Brandschutzzwecke gestaltetet SRP/CS.
Im Anwendungsbereich dieses Dokuments nicht enthaltene Beispiele sind:
   Isolierungsausfälle durch Reibung, die zu der Gefahr eines elektrischen Schlags führen;
   elektromagnetische Nennstrahlung, die nahegelegene Maschinensteuerungssysteme beeinflusst;
   Korrosion, die zu einer Überhitzung von Stromkabeln führt.
Dieses Dokument ist nicht anzuwenden auf Nicht-E/E/PES-Systeme (z. B. hydraulische, mechanische und pneumatische).
ANMERKUNG 2   Siehe auch EN ISO 12100 zu Gestaltungsleitsätzen für die Sicherheit von Maschinen.
Dieses Dokument gilt nicht für sicherheitsbezogene Teile von Steuerungen, die vor dem Veröffentlichungsdatum dieses Dokuments hergestellt wurden.

Tracteurs et matériels agricoles et forestiers - Parties des systèmes de commande relatives à la sécurité - Partie 1: Principes généraux pour la conception et le développement (ISO 25119-1:2018)

Le présent document établit des principes généraux pour la conception et le développement des parties relatives à la sécurité des systèmes de commande (SRP/CS) utilisées sur les tracteurs agricoles et forestiers, sur les machines automotrices à conducteur porté et sur les machines portées, semi-portées et traînées utilisées en agriculture. Il peut également s'appliquer aux équipements municipaux mobiles (par exemple machines de nettoiement).
Le présent document ne s'applique pas:
—          aux véhicules aéroportés et sur coussin d'air utilisés en agriculture,
—          aux équipements de jardinage ou horticoles.
Le présent document spécifie les caractéristiques et les catégories requises des SRP/CS pour réaliser leurs fonctions relatives à la sécurité. Il n'identifie pas de niveaux de performance pour des applications spécifiques.
NOTE 1    Les normes spécifiques à une machine donnée (normes de type C) peuvent spécifier des niveaux de performance (AgPL) pour des fonctions relatives à la sécurité dans des machines relevant de leur domaine d'application. Sinon, la spécification de l'AgPL est de la responsabilité du fabricant.
Le présent document s'applique aux parties relatives à la sécurité des systèmes électriques/électroniques/électroniques programmables (E/E/PES), dans la mesure où celles-ci sont liées aux systèmes mécatroniques. Il couvre les éventuels phénomènes dangereux dus au dysfonctionnement de systèmes E/E/PES relatifs à la sécurité, y compris l'interaction entre ces systèmes. Il ne traite pas des phénomènes dangereux associés aux événements suivants: choc électrique, incendie, fumées, chaleur, rayonnement, toxicité, inflammabilité, réactivité, corrosion, libération d'énergie, et phénomènes dangereux similaires, à moins qu'ils ne soient causés directement par un dysfonctionnement des systèmes E/E/PES relatifs à la sécurité. Il couvre également le dysfonctionnement des systèmes E/E/PES relatifs à la sécurité qui sont impliqués dans les mesures de protection, protecteurs ou fonctions relatives à la sécurité en réponse aux phénomènes dangereux hors E/E/PES.
Exemples faisant partie du domaine d'application du présent document:
—          SRP/CS limitant le flux de courant dans les hybrides électriques pour empêcher les phénomènes dangereux de panne d'isolement/choc;
—          interférence électromagnétique avec les SRP/CS;
—          SRP/CS conçues pour empêcher les incendies.
Exemples ne faisant pas partie du domaine d'application du présent document:
—          panne d'isolement due au frottement qui engendre des phénomènes de chocs électriques;
—          rayonnement électromagnétique nominal qui impacte les systèmes de commande environnants de la machine;
—          corrosion engendrant une surchauffe des câbles électriques.
Le présent document n'est pas applicable aux systèmes non E/E/PES (par exemple hydraulique, mécanique et pneumatique).
NOTE 2    Pour les principes de conception relatifs à la sécurité des machines, voir également l'ISO 12100.
Le présent document n'est pas applicable aux parties relatives à la sécurité des systèmes de commande fabriqués avant la date de sa publication.

Traktorji ter kmetijski in gozdarski stroji - Varnostni deli krmilnih sistemov - 1. del: Osnovna načela za načrtovanje in razvoj (ISO 25119-1:2018)

General Information

• Status: Not Published
• ICS: 35.240.99 - IT applications in other fields
• ICS: 65.060.01 - Agricultural machines and equipment in general
• Technical Committee: CEN/TC 144 - Tractors and machinery for agriculture and forestry
• Drafting Committee: CEN/TC 144/WG 1 - General safety requirements
• Directive: 2006/42/EC - Directive 2006/42/EC of the European Parliament and of the Council of 17 May 2006 on machinery, and amending Directive 95/16/EC (recast)
• Mandate: M/396 - Mandate to CEN and Cenelec for standardisation in the field of machinery
• Ref Project: oSIST prEN ISO 25119-1:2022 - Tractors and machinery for agriculture and forestry - Safety-related parts of control systems - Part 1: General principles for design and development (ISO 25119-1:2018)

RELATIONS

• Amended By: EN ISO 25119-1:202X/prA1 - Tractors and machinery for agriculture and forestry - Safety-related parts of control systems - Part 1: General principles for design and development - Amendment 1 (ISO 25119-1:2018/Amd 1:2020)
• Effective Date: 28-Jul-2021

Standards Content (sample)

SLOVENSKI STANDARD
oSIST prEN ISO 25119-1:2022
01-januar-2022

Traktorji ter kmetijski in gozdarski stroji - Varnostni deli krmilnih sistemov - 1. del:

Osnovna načela za načrtovanje in razvoj (ISO 25119-1:2018)

Tractors and machinery for agriculture and forestry - Safety-related parts of control

systems - Part 1: General principles for design and development (ISO 25119-1:2018)

Traktoren und Maschinen für die Land- und Forstwirtschaft - Sicherheitsbezogene Teile

von Steuerungen - Teil 1: Allgemeine Gestaltungs- und Entwicklungsleitsätze (ISO
25119-1:2018)

Tracteurs et matériels agricoles et forestiers - Parties des systèmes de commande

relatives à la sécurité - Partie 1: Principes généraux pour la conception et le
développement (ISO 25119-1:2018)
Ta slovenski standard je istoveten z: prEN ISO 25119-1
ICS:
35.240.99 Uporabniške rešitve IT na IT applications in other fields
drugih področjih
65.060.01 Kmetijski stroji in oprema na Agricultural machines and
splošno equipment in general
oSIST prEN ISO 25119-1:2022 en,fr,de

2003-01.Slovenski inštitut za standardizacijo. Razmnoževanje celote ali delov tega standarda ni dovoljeno.

---------------------- Page: 1 ----------------------
oSIST prEN ISO 25119-1:2022
---------------------- Page: 2 ----------------------
oSIST prEN ISO 25119-1:2022
DRAFT
EUROPEAN STANDARD
prEN ISO 25119-1
NORME EUROPÉENNE
EUROPÄISCHE NORM
November 2021
ICS 35.240.99; 65.060.01
English Version
Tractors and machinery for agriculture and forestry -
Safety-related parts of control systems - Part 1: General
principles for design and development (ISO 25119-
1:2018)

Tracteurs et matériels agricoles et forestiers - Parties Traktoren und Maschinen für die Land- und

des systèmes de commande relatives à la sécurité - Forstwirtschaft - Sicherheitsbezogene Teile von

Partie 1: Principes généraux pour la conception et le Steuerungen - Teil 1: Allgemeine Gestaltungs- und

développement (ISO 25119-1:2018) Entwicklungsleitsätze (ISO 25119-1:2018)

This draft European Standard is submitted to CEN members for enquiry. It has been drawn up by the Technical Committee

CEN/TC 144.

If this draft becomes a European Standard, CEN members are bound to comply with the CEN/CENELEC Internal Regulations

which stipulate the conditions for giving this European Standard the status of a national standard without any alteration.

This draft European Standard was established by CEN in three official versions (English, French, German). A version in any other

language made by translation under the responsibility of a CEN member into its own language and notified to the CEN-CENELEC

Management Centre has the same status as the official versions.

CEN members are the national standards bodies of Austria, Belgium, Bulgaria, Croatia, Cyprus, Czech Republic, Denmark, Estonia,

Finland, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, Netherlands, Norway,

Poland, Portugal, Republic of North Macedonia, Romania, Serbia, Slovakia, Slovenia, Spain, Sweden, Switzerland, Turkey and

United Kingdom.

Recipients of this draft are invited to submit, with their comments, notification of any relevant patent rights of which they are

aware and to provide supporting documentation.

Warning : This document is not a European Standard. It is distributed for review and comments. It is subject to change without

notice and shall not be referred to as a European Standard.
EUROPEAN COMMITTEE FOR STANDARDIZATION
COMITÉ EUROPÉEN DE NORMALISATION
EUROPÄISCHES KOMITEE FÜR NORMUNG
CEN-CENELEC Management Centre: Rue de la Science 23, B-1040 Brussels

© 2021 CEN All rights of exploitation in any form and by any means reserved Ref. No. prEN ISO 25119-1:2021 E

worldwide for CEN national Members.
---------------------- Page: 3 ----------------------
oSIST prEN ISO 25119-1:2022
prEN ISO 25119-1:2021 (E)
Contents Page

European foreword ....................................................................................................................................................... 3

Annex ZA (informative) Relationship between this European Standard and the essential

requirements of Directive 2006/42/EC aimed to be covered ........................................................ 4

---------------------- Page: 4 ----------------------
oSIST prEN ISO 25119-1:2022
prEN ISO 25119-1:2021 (E)
European foreword

The text of ISO 25119-1:2018 has been prepared by Technical Committee ISO/TC 23 “Tractors and

machinery for agriculture and forestry” of the International Organization for Standardization (ISO) and

has been taken over as prEN ISO 25119-1:2021 by Technical Committee CEN/TC 144 “Tractors and

machinery for agriculture and forestry” the secretariat of which is held by AFNOR.

This document is currently submitted to the CEN Enquiry.

This document has been prepared under a mandate given to CEN by the European Commission and the

European Free Trade Association, and supports essential requirements of EU Directive.

For relationship with EU Directive, see informative Annex ZA, which is an integral part of this

document.
Endorsement notice

The text of ISO 25119-1:2018 has been approved by CEN as prEN ISO 25119-1:2021 without any

modification.
---------------------- Page: 5 ----------------------
oSIST prEN ISO 25119-1:2022
prEN ISO 25119-1:2021 (E)
Annex ZA
(informative)
Relationship between this European Standard and the essential
requirements of Directive 2006/42/EC aimed to be covered

This European Standard has been prepared under a Commission’s standardization request “M/396

Mandate to CEN and CENELEC for Standardisation in the field of machinery" to provide one voluntary

means of conforming to essential requirements of Directive 2006/42/EC of the European Parliament

and of the Council of 17 May 2006 on machinery, and amending Directive 95/16/EC (recast).

Once this standard is cited in the Official Journal of the European Union under that Directive,

compliance with the normative clauses of this standard given in Table ZA.1 confers, within the limits of

the scope of this standard, a presumption of conformity with the corresponding essential requirements

of that Directive, and associated EFTA regulations.

Table ZA.1— Correspondence between this European Standard and Annex I of Directive

2006/42/EC
The relevant Essential Clause(s)/sub-clause(s) of this Remarks/Notes
Requirements of Directive EN
2006/42/EC
1.1.2 (a) 6, 7, 8, 9
1.1.2 (c) 6, 7, 8, 9
1.2.1. Safety and reliability of control 6, 7, 8, 9
systems
1.2.3. Starting 6, 7, 8, 9
1.2.4.1. Normal stop 6, 7, 8, 9
1.2.4.2. Operational stop 6, 7, 8, 9
1.2.4.3. Emergency stop 6, 7, 8, 9
1.2.5. Selection of control or 6, 7, 8, 9
operating modes
1.2.6. Failure of the power supply 6, 7, 8, 9
1.6.3. Isolation of energy sources 6, 7, 8, 9
3.3.5. Control circuit failure 6, 7, 8, 9

WARNING 1 — Presumption of conformity stays valid only as long as a reference to this European

Standard is maintained in the list published in the Official Journal of the European Union. Users of this

standard should consult frequently the latest list published in the Official Journal of the European

Union.

WARNING 2 — Other Union legislation may be applicable to the product(s) falling within the scope of

this standard.
---------------------- Page: 6 ----------------------
oSIST prEN ISO 25119-1:2022
INTERNATIONAL ISO
STANDARD 25119-1
Second edition
2018-10
Tractors and machinery for
agriculture and forestry — Safety-
related parts of control systems —
Part 1:
General principles for design and
development
Tracteurs et matériels agricoles et forestiers — Parties des systèmes
de commande relatives à la sécurité —
Partie 1: Principes généraux pour la conception et le développement
Reference number
ISO 25119-1:2018(E)
ISO 2018
---------------------- Page: 7 ----------------------
oSIST prEN ISO 25119-1:2022
ISO 25119-1:2018(E)
COPYRIGHT PROTECTED DOCUMENT
© ISO 2018

All rights reserved. Unless otherwise specified, or required in the context of its implementation, no part of this publication may

be reproduced or utilized otherwise in any form or by any means, electronic or mechanical, including photocopying, or posting

on the internet or an intranet, without prior written permission. Permission can be requested from either ISO at the address

below or ISO’s member body in the country of the requester.
ISO copyright office
CP 401 • Ch. de Blandonnet 8
CH-1214 Vernier, Geneva
Phone: [phone]
Fax: [phone]
Email: [e-mail]
Website: www.iso.org
Published in Switzerland
ii © ISO 2018 – All rights reserved
---------------------- Page: 8 ----------------------
oSIST prEN ISO 25119-1:2022
ISO 25119-1:2018(E)
Contents Page

Foreword ..........................................................................................................................................................................................................................................v

Introduction ................................................................................................................................................................................................................................vi

1 Scope ................................................................................................................................................................................................................................. 1

2 Normative references ...................................................................................................................................................................................... 2

3 Terms and definitions ..................................................................................................................................................................................... 2

4 Abbreviated terms .............................................................................................................................................................................................. 8

5 Quality management system .................................................................................................................................................................... 9

6 Management during complete safety lifecycle ...................................................................................................................... 9

6.1 Objectives..................................................................................................................................................................................................... 9

6.2 General ........................................................................................................................................................................................................... 9

6.2.1 Introduction to the safety life cycle concept ............................................................................................ 9

6.2.2 External functional safety measures .............................................................................................................. 9

6.3 Prerequisites ............................................................................................................................................................................................. 9

6.4 Requirements — Functional safety management activities across safety life cycle ................11

6.4.1 Functional safety culture .......................................................................................................................................11

6.4.2 Continuous improvement .....................................................................................................................................11

6.4.3 Training and qualification .....................................................................................................................................12

6.4.4 Assignment of safety responsibilities .........................................................................................................12

6.4.5 Assignment of tasks....................................................................................................................................................12

6.4.6 Planning of all safety management activities during development ..................................12

6.5 Work products ......................................................................................................................................................................................14

7 Assessment of functional safety ........................................................................................................................................................14

7.1 Objectives..................................................................................................................................................................................................14

7.2 General ........................................................................................................................................................................................................14

7.3 Prerequisites ..........................................................................................................................................................................................14

7.4 Requirements ........................................................................................................................................................................................14

7.4.1 Considerations for the assessment of the functional safety ....................................................14

7.4.2 Verification .........................................................................................................................................................................15

7.5 Work products ......................................................................................................................................................................................16

8 Functional safety management activities after start of production (SOP) ............................................16

8.1 Objectives..................................................................................................................................................................................................16

8.2 General ........................................................................................................................................................................................................17

8.3 Prerequisites ..........................................................................................................................................................................................17

8.4 Requirements ........................................................................................................................................................................................17

8.4.1 Management of production and modification procedures .......................................................17

8.4.2 Tasks for preparing and conducting production and end of line inspections ..........17

8.4.3 Tasks for safe machine operation, maintenance, repair and decommissioning ....17

8.5 Work products ......................................................................................................................................................................................17

9 Plan for production and installation of safety-related systems .......................................................................18

9.1 Objectives..................................................................................................................................................................................................18

9.2 General ........................................................................................................................................................................................................18

9.3 Prerequisites ..........................................................................................................................................................................................18

9.4 Requirements ........................................................................................................................................................................................18

9.4.1 Production plan .............................................................................................................................................................18

9.4.2 Test plan ...............................................................................................................................................................................18

9.4.3 Production and testing ............................................................................................................................................18

9.4.4 Process capability ........................................................................................................................................................19

9.4.5 Documentation ...............................................................................................................................................................19

9.4.6 Non-compliance .................. .................................................... .......................................................................................19

9.4.7 Traceability ........................................................................................................................................................................19

9.4.8 Storage and transport conditions ...................................................................................................................19

© ISO 2018 – All rights reserved iii
---------------------- Page: 9 ----------------------
oSIST prEN ISO 25119-1:2022
ISO 25119-1:2018(E)

9.4.9 Modification ......................................................................................................................................................................19

9.5 Work products ......................................................................................................................................................................................19

Annex A (informative) Example of the structure of a project-specific safety plan ............................................20

Bibliography .............................................................................................................................................................................................................................23

iv © ISO 2018 – All rights reserved
---------------------- Page: 10 ----------------------
oSIST prEN ISO 25119-1:2022
ISO 25119-1:2018(E)
Foreword

ISO (the International Organization for Standardization) is a worldwide federation of national standards

bodies (ISO member bodies). The work of preparing International Standards is normally carried out

through ISO technical committees. Each member body interested in a subject for which a technical

committee has been established has the right to be represented on that committee. International

organizations, governmental and non-governmental, in liaison with ISO, also take part in the work.

ISO collaborates closely with the International Electrotechnical Commission (IEC) on all matters of

electrotechnical standardization.

The procedures used to develop this document and those intended for its further maintenance are

described in the ISO/IEC Directives, Part 1. In particular, the different approval criteria needed for the

different types of ISO documents should be noted. This document was drafted in accordance with the

editorial rules of the ISO/IEC Directives, Part 2 (see www .iso .org/directives).

Attention is drawn to the possibility that some of the elements of this document may be the subject of

patent rights. ISO shall not be held responsible for identifying any or all such patent rights. Details of

any patent rights identified during the development of the document will be in the Introduction and/or

on the ISO list of patent declarations received (see www .iso .org/patents).

Any trade name used in this document is information given for the convenience of users and does not

constitute an endorsement.

For an explanation of the voluntary nature of standards, the meaning of ISO specific terms and

expressions related to conformity assessment, as well as information about ISO's adherence to the

World Trade Organization (WTO) principles in the Technical Barriers to Trade (TBT) see www .iso

.org/iso/foreword .html.

This document was prepared by Technical Committee ISO/TC 23, Tractors and machinery for agriculture

and forestry, Subcommittee SC 19, Agricultural electronics.

This second edition cancels and replaces the first edition (ISO 25119-1:2010), which has been technically

revised. The main changes compared from the previous edition are as follows:

— the introduction has been modified to add specific information on safety standards;

— Tables 1 to 3 have been deleted and the succeeding tables have been renumbered;

— Clause 5 (management system) has been inserted and the succeeding clauses have been renumbered;

— in 8.5, work products from the safety management activities after SOP have been specified;

— Figure 2 has been modified;
— the document has been editorially revised.
A list of all parts in the ISO 25119 series can be found on the ISO website.

Any feedback or questions on this document should be directed to the user’s national standards body. A

complete listing of these bodies can be found at www .iso .org/members .html.
© ISO 2018 – All rights reserved v
---------------------- Page: 11 ----------------------
oSIST prEN ISO 25119-1:2022
ISO 25119-1:2018(E)
Introduction

ISO 25119 (all parts) sets out an approach to the assessment, design and verification, for all safety life

cycle activities, of safety-related parts comprising electrical and/or electronic and/or programmable

electronic systems (E/E/PES) on tractors used in agriculture and forestry, and on self-propelled ride-

on machines and mounted, semi-mounted and trailed machines used in agriculture. It is also applicable

to mobile municipal equipment.

A prerequisite to the application of ISO 25119 (all parts) is the completion of a suitable hazard

identification and risk analysis (e.g. ISO 12100) for the entire machine. As a result, an E/E/PES is

frequently assigned to provide safety-related functions that create safety-related parts of control

systems (SRP/CS). These can consist of hardware or software, can be separate or integrated parts of

a control system, and can either perform solely safety-related functions or form part of an operational

function.

In general, the designer (and to some extent, the user) will combine the design and validation of these

SRP/CS as part of the risk assessment. The objective is to reduce the risk associated with a given hazard

(or hazardous situation) under all conditions of use of the machine. This can be achieved by applying

various measures (both SRP/CS and non-SRP/CS) with the end result of achieving a safe condition.

ISO 25119 (all parts) allocates the ability of safety-related parts to perform a safety-related function

under foreseeable conditions into five performance levels. The performance level of a controlled

channel depends on several factors, such as system structure (category), the extent of fault detection

mechanisms (diagnostic coverage), the reliability of components (mean time to dangerous failure,

common-cause failure), design processes, operating stress, environmental conditions and operation

procedures. Three types of failures that can cause E/E/PES malfunctions leading to potential hazardous

situations are considered: systematic, common-cause and random.

In order to guide the designer during design, verification, and to facilitate the assessment of the achieved

performance level, ISO 25119 (all parts) defines an approach based on a classification of architecture

with different design features and specific behaviour in case of a fault.

The performance levels and categories can be applied to the control systems of all kinds of mobile

machines: from simple systems (e.g. auxiliary valves) to complex systems (e.g. steer by wire), as well as

to the control systems of protective equipment (e.g. interlocking devices, pressure sensitive devices).

ISO 25119 (all parts) adopts a risk-based approach for the determination of the risks, while providing a

means of specifying the required performance level for the safety-related functions to be implemented

by E/E/PES safety-related channels. It gives requirements for the whole safety life cycle of E/E/PES

(design, validation, production, operation, maintenance, decommissioning), necessary for achieving the

required functional safety for E/E/PES that are linked to the performance levels.

The structure of safety standards in the field of machinery is as follows.

a) Type-A standards (basic safety standards) give basic concepts, principles for design and general

aspects that can be applied to machinery.

b) Type-B standards (generic safety standards) deal with one or more safety aspect(s), or one or more

type(s) of safeguards that can be used across a wide range of machinery:

— type-B1 standards on particular safety aspects (e.g. safety distances, surface temperature, noise);

— type-B2 standards on safeguards (e.g. two-hand controls, interlocking devices, pressure

sensitive devices, guards).

c) Type-C standards (machinery safety standards) deal with detailed safety requirements for a

particular machine or group of machines.
This document is a type-B1 standard as stated in ISO 12100.
vi © ISO 2018 – All rights reserved
---------------------- Page: 12 ----------------------
oSIST prEN ISO 25119-1:2022
ISO 25119-1:2018(E)

This document is of relevance, in particular, for the following stakeholder groups representing the

market players with regard to machinery safety:
— machine manufacturers (small, medium and large enterprises);

— health and safety bodies (regulators, accident prevention organizations, market surveillance, etc.).

Others can be affected by the level of machinery safety achieved with the means of the document by the

above-mentioned stakeholder groups:
— machine users/employers (small, medium and large enterprises);

— machine users/employees (e.g. trade unions, organizations for people with special needs);

— service providers, e.g. for maintenance (small, medium and large enterprises);
— consumers (in case of machinery intended for use by consumers).

The above-mentioned stakeholder groups have been given the possibility to participate at the drafting

process of this document.

In addition, this document is intended for standardization bodies elaborating type-C standards.

The requirements of this document can be supplemented or modified by a type-C standard.

For machines which are covered by the scope of a type-C standard and which have been designed and

built according to the requirements of that standard, the requirements of that type-C standard take

precedence.
© ISO 2018 – All rights reserved vii
---------------------- Page: 13 ----------------------
oSIST prEN ISO 25119-1:2022
---------------------- Page: 14 ----------------------
oSIST prEN ISO 25119-1:2022
INTERNATIONAL STANDARD ISO 25119-1:2018(E)
Tractors and machinery for agriculture and forestry —
Safety-related parts of control systems —
Part 1:
General principles for design and development
1 Scope

This document sets out general principles for the design and development of safety-related parts of

control systems (SRP/CS) on tractors used in agriculture and forestry and on self-propelled ride-on

machines and mounted, semi-mounted and trailed machines used in agriculture. It can also be applied

to mobile municipal equipment (e.g. street-sweeping machines).
This document is not applicable to:
— aircraft and air-cushion vehicles used in agriculture;
— lawn and garden equipment.

This document specifies the characteristics and categories required of SRP/CS for carrying out their

safety-related functions. It does not identify performance levels for specific applications.

NOTE 1 Machine specific type-C standards can specify performance levels (AgPL) for safety-related functions

in machines within their scope. Otherwise, the specification of AgPL is the responsibility of the manufacturer.

This document is applicable to the safety-related parts of electrical/electronic/programmable

electronic systems (E/E/PES), as these relate to mechatronic systems. It covers the possible hazards

caused by malfunctioning behaviour of E/E/PES safety-related systems, including interaction of these

systems. It does not address hazards related to electric shock, fire, smoke, heat, radiation, toxicity,

flammability, reactivity, corrosion, release of energy, and similar hazards, unless directly caused by

malfunctioning behaviour of E/E/PES safety-related systems. It also covers malfunctioning behaviour

of E/E/PES safety-related systems involved in protective measures, safeguards, or safety-related

functions in response to non-E/E/PES hazards.
Examples included within the scope of this document:

— SRP/CS limiting current flow in electric hybrids to prevent insulation failure/shock hazards;

— electromagnetic interference with the SRP/CS;
— SRP/CS design
...