FprEN ISO 19014-1
(Main)Earth-moving machinery - Functional safety - Part 1: Methodology to determine safety-related parts of the control system and performance requirements (ISO/FDIS 19014-1:2026)
- Abstract
This document provides a methodology for the determination of performance levels required for earth moving machinery (EMM) as defined in ISO 6165.
A Machine Control System Safety Analysis (MCSSA) determines the amount of risk reduction of hazards associated with control systems, required for Safety Control Systems (SCS). This reduction is quantified by the Machine Performance Level (MPL), the hazards are identified using the risk assessment principles as defined in ISO 12100 or by other means.
NOTE 1 Step 2 as shown in Annex A demonstrates the relationship between ISO 12100 and ISO 19014 as a complementary protective measure.
NOTE 2 ISO 19014 can also be used to assess the functional safety requirements of other off-road mobile machinery.
For those controls determined to be safety-related, the characteristics for architecture, hardware, software environmental requirements and performance are covered by other parts in ISO 19014.
ISO 19014 covers the hazards caused by the failure of a safety control system and excludes hazards arising from the equipment itself (for example, electric shock, fire, etc.).
Other controls that are not safety control systems (SCS), that do not mitigate a hazard or perform a control function and where the operator would be aware of a failure, are excluded from this standard (e.g. windscreen wipers, head lights, cab light, etc.).
NOTE 3 A list of safety control systems is included in Annex D.
NOTE 4 Audible warnings are excluded from the requirements of diagnostic coverage.
- Status
- Not Published
- Publication Date
- 22-Nov-2026
- Technical Committee
- CEN/TC 151 - Construction equipment and building material machines - Safety
- Current Stage
- 6055 - CEN Ratification completed (DOR) - Publishing
- Start Date
- 22-Sep-2026
- Completion Date
- 22-Sep-2026
FprEN ISO 19014-1 is a CEN draft standard in the ISO 19014 series for earth-moving machinery functional safety. It specifies how to determine the safety-related parts of the control system and how to derive the required Machine Performance Level (MPLr) for hazards handled by Safety Control Systems (SCS). It is written for machine manufacturers, control-system engineers, and safety or compliance teams that need to decide which control functions must be treated as safety-related.
What does FprEN ISO 19014-1 specify?
FprEN ISO 19014-1 specifies a methodology for earth-moving machinery (EMM) to determine the performance level required for safety-related control functions. The core output is the MPLr, derived through a Machine Control System Safety Analysis (MCSSA).
The scope is limited to hazards caused by failure of a safety control system. It excludes hazards that come from the machine or equipment itself, such as electric shock or fire, and it excludes ordinary convenience controls where a failure would be obvious to the operator, such as windscreen wipers, headlights, and cab lights.
The standard can also be applied to other off-road mobile machinery when needed. Its main structure is Clauses 1 to 6, with informative Annexes A, B, C and ZA.
| Annex | What it covers |
|---|---|
| Annex A | Process flow chart for machinery risk assessment and the relationship between ISO 12100 and ISO 19014 |
| Annex B | Table of warning and operation indicators, including immediate action warning indicators |
| Annex C | Non-inclusive list of possible Safety Control Systems (SCS) for earth-moving machines |
| Annex ZA | Relationship with the essential requirements of EU Directive 2006/42/EC |
What are the key requirements of FprEN ISO 19014-1?
FprEN ISO 19014-1 requires the user to identify which machine control functions are safety-related, assess the risk they create if they fail, and then assign an MPLr. In practice, that means the standard is a risk-based filter: first decide whether a control function is an SCS, then determine how much risk reduction it must provide.
Identify the relevant control functions and their intended use
Clause 4.2 begins by identifying all machine control systems or functions and the intended uses of the machine. Annex C and ISO 19014-5 are named as sources of examples. This matters because the analysis is done against real machine use, not just generic theory.
Clause 4.1.1 also requires that machine-use limits, notable assumptions, and any machine abuse considered in the analysis are communicated in the information for use. For a manufacturer, this means the assumptions behind the safety analysis must be visible to the user and not buried in the design process.
Separate safety control systems from non-safety functions
Clause 4.2 says to identify possible failure types for each MCS or function, then decide whether those failures create risks. If no risk is identified, the function is not treated as an SCS, although it may still fall under Quality Measure (QM). If risks are identified, the function is treated as an SCS and remains in the MCSSA.
This distinction matters in practice because not every control is safety-related. It prevents over-classifying convenience features while making sure functions that can create hazards are analyzed properly.
Use severity, exposure, and controllability to determine MPLr
Clause 6 uses a risk graph built from severity, exposure, and controllability. Severity is classified as S0 to S3, exposure as E0 to E2, and controllability as C0 to C3. The highest MPLr found for a given SCS is the one assigned.
The exposure calculation uses the combination of application use case, hazard time, and person group exposure. In practice, that means the same machine can require different levels depending on where it is used, how often the hazard exists, and who is in the hazard zone.
Assess who is exposed and how harm could be avoided
Clause 6.3 requires a worst credible estimate of harm, based on incident history and the possible outcome of the failure. The harm description should include the operator and other affected people, such as co-workers, bystanders, or maintenance personnel.
Clause 6.5 then evaluates whether harm can be avoided by the operator, using awareness of the hazard and ability to react. Multiple actions can be considered, but they must be independent, and the lower ability-to-react score is used when more than one action is needed. That is important because the standard is not only about whether a hazard exists, but whether a human can realistically respond in time.
Do not rely on architecture during the risk analysis
Clause 6.1 says the architecture of the SCS, such as redundant channels or shared interlocks, is not to be considered during the MCSSA. Those design features are assessed later when determining the achieved level.
This keeps the hazard analysis separate from the implementation detail. It helps teams decide the required performance first, before choosing the hardware or software solution.
Immediate action warning indicators are treated differently
Clause 5 states that immediate action warning indicators should follow the same safety principles, but they cannot be labelled as meeting a performance level. The reason is practical: these indicators depend on human reaction and do not control the machine by themselves.
Annex B provides a non-exhaustive list of indicators and shows which ones may count as immediate action warning indicators. In practice, designers need to check whether a warning is only informational or whether it demands immediate operator action to prevent harm.
What terms does FprEN ISO 19014-1 define?
- Machine Performance Level (MPL) - the discrete level used to describe how well a safety-related control part performs a safety function under reasonably foreseeable conditions.
- Machine Performance Level required (MPLr) - the discrete level required by the MCSSA for a given safety-related control function.
- Machine Performance Level achieved (MPLa) - the level actually achieved by the safety control system hardware, architecture, and software.
- functional safety - the part of overall safety that depends on the correct operation of the SCS and other risk-reduction measures.
- machine control system (MCS) - the system that receives input signals and generates outputs so the machine behaves as intended.
- safety control system (SCS) - a subsystem or system used by an MCS to achieve functional safety by affecting machine behaviour or mitigating a hazard.
- safety-related part of the control system (SRP/CS) - the part of an SCS that responds to safety-related inputs and generates safety-related outputs.
- machine control system safety analysis (MCSSA) - the risk assessment process used to determine the MPLr for the SCS on a machine.
Who uses FprEN ISO 19014-1?
FprEN ISO 19014-1 is used by machine manufacturers, control-system designers, test and validation teams, and safety or compliance specialists working on earth-moving machinery. It is also relevant to health and safety bodies, market surveillance, and accident-prevention organizations.
In practice, these users apply it to identify SCS, justify the required performance level, document immediate action warnings, and show how operator exposure and controllability were considered. Maintenance and service organizations can also use it when they need to understand which functions are safety-related and what assumptions were made in the design analysis.
What changed in FprEN ISO 19014-1 from the previous edition?
FprEN ISO 19014-1 replaces ISO 15998 and ISO/TS 15998-2 and is described as technically revised. The stated changes are:
- A detailed Annex ZA was added.
- Referenced standards were dated.
- The term “quality measure” was clarified.
- The wording on controllability when multiple actions are needed to avoid a hazard was improved.
- The notion of machine abuse was added.
- The MCSSA process was updated to reflect ISO/TS 19014-5:2021.
- References to ISO/TS 19014-5:2021 were made normative.
- Guide 78 requirements for information for use were added.
Which standards are used with FprEN ISO 19014-1?
| Standard | What it contributes |
|---|---|
| ISO 6165:2012 | Defines earth-moving machinery and the basic terminology used for the scope of the document |
| ISO 12100:2010 | Provides the general principles for risk assessment and risk reduction used in the MCSSA process |
| ISO 19014-2 | Used to determine MPLa and covers design and evaluation of safety-related machine control systems |
| ISO 19014-3 | Used with the series to determine MPLa for safety-related control systems |
| ISO 19014-4 | Used to determine MPLa and covers software and transmission for safety-related parts of the control system |
| ISO 19014-5 | Provides data and calculation support used in the MCSSA process, including annexes used for H and P calculations |
| ISO 6011:2003 | Cited in Annex B as guidance for visual display and indicator practice |
| ISO 20474-1:2017 | Cited in Annex B for examples of machine indicators and general safety requirements |
What does the FprEN ISO 19014-1 document contain?
The document contains a formal MCSSA method, including the sequence for identifying control functions, failure types, risks, and MPLr. It also contains the severity, exposure, and controllability classification methods used to build the risk graph.
It includes Table 1 for severity classes, Table 2 for exposure categories, and Figure 1 for controllability classification. Figure 2 shows how severity, exposure, and controllability combine to determine MPLr.
Annex A gives a process flow chart for machinery risk assessment and shows how ISO 12100 and ISO 19014 relate as complementary protective measures. Annex B lists example warning and operation indicators, and Annex C lists possible SCS for earth-moving machines. Annex ZA maps selected clauses to Directive 2006/42/EC.
Relations
- Effective Date
- 12-Feb-2026
- Effective Date
- 18-Oct-2023
Frequently Asked Questions
FprEN ISO 19014-1 is a draft published by the European Committee for Standardization (CEN). Its full title is "Earth-moving machinery - Functional safety - Part 1: Methodology to determine safety-related parts of the control system and performance requirements (ISO/FDIS 19014-1:2026)". This standard covers: This document provides a methodology for the determination of performance levels required for earth moving machinery (EMM) as defined in ISO 6165. A Machine Control System Safety Analysis (MCSSA) determines the amount of risk reduction of hazards associated with control systems, required for Safety Control Systems (SCS). This reduction is quantified by the Machine Performance Level (MPL), the hazards are identified using the risk assessment principles as defined in ISO 12100 or by other means. NOTE 1 Step 2 as shown in Annex A demonstrates the relationship between ISO 12100 and ISO 19014 as a complementary protective measure. NOTE 2 ISO 19014 can also be used to assess the functional safety requirements of other off-road mobile machinery. For those controls determined to be safety-related, the characteristics for architecture, hardware, software environmental requirements and performance are covered by other parts in ISO 19014. ISO 19014 covers the hazards caused by the failure of a safety control system and excludes hazards arising from the equipment itself (for example, electric shock, fire, etc.). Other controls that are not safety control systems (SCS), that do not mitigate a hazard or perform a control function and where the operator would be aware of a failure, are excluded from this standard (e.g. windscreen wipers, head lights, cab light, etc.). NOTE 3 A list of safety control systems is included in Annex D. NOTE 4 Audible warnings are excluded from the requirements of diagnostic coverage.
This document provides a methodology for the determination of performance levels required for earth moving machinery (EMM) as defined in ISO 6165. A Machine Control System Safety Analysis (MCSSA) determines the amount of risk reduction of hazards associated with control systems, required for Safety Control Systems (SCS). This reduction is quantified by the Machine Performance Level (MPL), the hazards are identified using the risk assessment principles as defined in ISO 12100 or by other means. NOTE 1 Step 2 as shown in Annex A demonstrates the relationship between ISO 12100 and ISO 19014 as a complementary protective measure. NOTE 2 ISO 19014 can also be used to assess the functional safety requirements of other off-road mobile machinery. For those controls determined to be safety-related, the characteristics for architecture, hardware, software environmental requirements and performance are covered by other parts in ISO 19014. ISO 19014 covers the hazards caused by the failure of a safety control system and excludes hazards arising from the equipment itself (for example, electric shock, fire, etc.). Other controls that are not safety control systems (SCS), that do not mitigate a hazard or perform a control function and where the operator would be aware of a failure, are excluded from this standard (e.g. windscreen wipers, head lights, cab light, etc.). NOTE 3 A list of safety control systems is included in Annex D. NOTE 4 Audible warnings are excluded from the requirements of diagnostic coverage.
FprEN ISO 19014-1 is classified under the following ICS (International Classification for Standards) categories: 53.100 - Earth-moving machinery. The ICS classification helps identify the subject area and facilitates finding related standards.
FprEN ISO 19014-1 has the following relationships with other standards: It is inter standard links to ISO 19014-1:2026, EN ISO 19014-1:2018. Understanding these relationships helps ensure you are using the most current and applicable version of the standard.
FprEN ISO 19014-1 is associated with the following European legislation: EU Directives/Regulations: 2023/1230; Standardization Mandates: M/605. When a standard is cited in the Official Journal of the European Union, products manufactured in conformity with it benefit from a presumption of conformity with the essential requirements of the corresponding EU directive or regulation.
FprEN ISO 19014-1 is available in PDF format for immediate download after purchase. The document can be added to your cart and obtained through the secure checkout process. Digital delivery ensures instant access to the complete standard document.
Standards Content (Sample)
SLOVENSKI STANDARD
oSIST prEN ISO 19014-1:2024
01-marec-2024
Stroji za zemeljska dela - Funkcijska varnost - 1. del: Metodologija ugotavljanja
delov krmilnega sistema, ki so povezani z varnostjo in zahtevanimi lastnostmi
(ISO/DIS 19014-1:2024)
Earth-moving machinery - Functional safety - Part 1: Methodology to determine safety-
related parts of the control system and performance requirements (ISO/DIS 19014-
1:2024)
Erdbaumaschinen - Funktionale Sicherheit - Teil 1: Methodik zur Bestimmung
sicherheitsbezogener Teile der Steuerung und deren Leistungsanforderungen (ISO/DIS
19014-1:2024)
Engins de terrassement - Sécurité fonctionnelle - Partie 1: Méthodologie pour la
détermination des parties relatives à la sécurité des systèmes de commande et les
exigences de performance (ISO/DIS 19014-1:2024)
Ta slovenski standard je istoveten z: prEN ISO 19014-1
ICS:
53.100 Stroji za zemeljska dela Earth-moving machinery
oSIST prEN ISO 19014-1:2024 en,fr,de
2003-01.Slovenski inštitut za standardizacijo. Razmnoževanje celote ali delov tega standarda ni dovoljeno.
oSIST prEN ISO 19014-1:2024
oSIST prEN ISO 19014-1:2024
DRAFT INTERNATIONAL STANDARD
ISO/DIS 19014-1
ISO/TC 127/SC 2 Secretariat: ANSI
Voting begins on: Voting terminates on:
2024-01-26 2024-04-19
Earth-moving machinery — Functional safety —
Part 1:
Methodology to determine safety-related parts of the
control system and performance requirements
Engins de terrassement — Sécurité fonctionnelle —
Partie 1: Méthodologie pour la détermination des parties relatives à la sécurité des systèmes de commande
et les exigences de performance
ICS: 53.100
This document is circulated as received from the committee secretariat.
THIS DOCUMENT IS A DRAFT CIRCULATED
FOR COMMENT AND APPROVAL. IT IS
ISO/CEN PARALLEL PROCESSING
THEREFORE SUBJECT TO CHANGE AND MAY
NOT BE REFERRED TO AS AN INTERNATIONAL
STANDARD UNTIL PUBLISHED AS SUCH.
IN ADDITION TO THEIR EVALUATION AS
BEING ACCEPTABLE FOR INDUSTRIAL,
TECHNOLOGICAL, COMMERCIAL AND
USER PURPOSES, DRAFT INTERNATIONAL
STANDARDS MAY ON OCCASION HAVE TO
BE CONSIDERED IN THE LIGHT OF THEIR
POTENTIAL TO BECOME STANDARDS TO
WHICH REFERENCE MAY BE MADE IN
Reference number
NATIONAL REGULATIONS.
ISO/DIS 19014-1:2024(E)
RECIPIENTS OF THIS DRAFT ARE INVITED
TO SUBMIT, WITH THEIR COMMENTS,
NOTIFICATION OF ANY RELEVANT PATENT
RIGHTS OF WHICH THEY ARE AWARE AND TO
PROVIDE SUPPORTING DOCUMENTATION. © ISO 2024
oSIST prEN ISO 19014-1:2024
ISO/DIS 19014-1:2024(E)
DRAFT INTERNATIONAL STANDARD
ISO/DIS 19014-1
ISO/TC 127/SC 2 Secretariat: ANSI
Voting begins on: Voting terminates on:
Earth-moving machinery — Functional safety —
Part 1:
Methodology to determine safety-related parts of the
control system and performance requirements
Engins de terrassement — Sécurité fonctionnelle —
Partie 1: Méthodologie pour la détermination des parties relatives à la sécurité des systèmes de commande
et les exigences de performance
ICS: 53.100
This document is circulated as received from the committee secretariat.
THIS DOCUMENT IS A DRAFT CIRCULATED
FOR COMMENT AND APPROVAL. IT IS
© ISO 2024
ISO/CEN PARALLEL PROCESSING
THEREFORE SUBJECT TO CHANGE AND MAY
All rights reserved. Unless otherwise specified, or required in the context of its implementation, no part of this publication may
NOT BE REFERRED TO AS AN INTERNATIONAL
be reproduced or utilized otherwise in any form or by any means, electronic or mechanical, including photocopying, or posting on STANDARD UNTIL PUBLISHED AS SUCH.
the internet or an intranet, without prior written permission. Permission can be requested from either ISO at the address below
IN ADDITION TO THEIR EVALUATION AS
or ISO’s member body in the country of the requester. BEING ACCEPTABLE FOR INDUSTRIAL,
TECHNOLOGICAL, COMMERCIAL AND
ISO copyright office
USER PURPOSES, DRAFT INTERNATIONAL
CP 401 • Ch. de Blandonnet 8
STANDARDS MAY ON OCCASION HAVE TO
BE CONSIDERED IN THE LIGHT OF THEIR
CH-1214 Vernier, Geneva
POTENTIAL TO BECOME STANDARDS TO
Phone: +41 22 749 01 11
WHICH REFERENCE MAY BE MADE IN
Reference number
Email: copyright@iso.org
NATIONAL REGULATIONS.
Website: www.iso.org ISO/DIS 19014-1:2023(E)
RECIPIENTS OF THIS DRAFT ARE INVITED
Published in Switzerland
TO SUBMIT, WITH THEIR COMMENTS,
NOTIFICATION OF ANY RELEVANT PATENT
RIGHTS OF WHICH THEY ARE AWARE AND TO
ii
PROVIDE SUPPORTING DOCUMENTATION. © ISO 2023
oSIST prEN ISO 19014-1:2024
ISO/DIS 19014-1:2023(E)
Contents Page
Foreword .iv
Introduction . vi
1 Scope . 1
2 Normative references . 1
3 Terms and definitions . 1
4 Method to determine MPLr for SRP/CS of earth moving machinery .5
4.1 General . 5
4.1.1 Information for use . 5
4.2 Machine Control System Safety Analysis (MCSSA) method . 5
5 Requirements for immediate action warning indicators . 6
5.1 General . 6
6 Performance level determination procedures . 6
6.1 General . 6
6.2 Participants in the risk assessment . 6
6.3 Assessment and classification of a potential harm . 6
6.4 Assessment of exposure in the situation observed . 7
6.5 Assessment of a possibility to avoid harm . 7
6.6 Determining the required MPL . 9
Annex A (informative) Process flow chart for machinery risk assessment .11
Annex B (informative) Table of warning/operation indicators .13
Annex C (informative) List of possible safety control systems (SCS) of earth-moving
machines .15
Annex ZA (informative) Relationship between this document and the essential
requirements of EU Directive 2006/42/EC aimed to be covered .17
Bibliography .18
iii
oSIST prEN ISO 19014-1:2024
ISO/DIS 19014-1:2023(E)
Foreword
ISO (the International Organization for Standardization) is a worldwide federation of national standards
bodies (ISO member bodies). The work of preparing International Standards is normally carried out
through ISO technical committees. Each member body interested in a subject for which a technical
committee has been established has the right to be represented on that committee. International
organizations, governmental and non-governmental, in liaison with ISO, also take part in the work.
ISO collaborates closely with the International Electrotechnical Commission (IEC) on all matters of
electrotechnical standardization.
The procedures used to develop this document and those intended for its further maintenance are
described in the ISO/IEC Directives, Part 1. In particular, the different approval criteria needed for the
different types of ISO documents should be noted. This document was drafted in accordance with the
editorial rules of the ISO/IEC Directives, Part 2 (see w w w.iso.org/directives).
Attention is drawn to the possibility that some of the elements of this document may be the subject of
patent rights. ISO shall not be held responsible for identifying any or all such patent rights. Details of
any patent rights identified during the development of the document will be in the Introduction and/or
on the ISO list of patent declarations received (see w w w.iso.org/patents).
Any trade name used in this document is information given for the convenience of users and does not
constitute an endorsement.
For an explanation of the voluntary nature of standards, the meaning of ISO specific terms and
expressions related to conformity assessment, as well as information about ISO's adherence to
the World Trade Organization (WTO) principles in the Technical Barriers to Trade (TBT), see
http://www.iso.org/iso/foreword.html.
This document was prepared by Technical Committee ISO/TC 127, Earth-moving machinery,
Subcommittee SC 2, Safety, ergonomics and general requirements.
This first edition of ISO 19014-1, together with ISO 19014-2, ISO 19014-3, ISO 19014-4 and
ISO/ TS 19014-5, cancels and replaces ISO 15998 and ISO/TS 15998-2, which have been technically
revised.
The main changes compared to the previous documents are as follows:
—
— Detailed Annex ZA included;
— Referenced standards dated;
— The term “quality measure” is clarified.
— Wording, covering controllability when multiple actions are required to avoid a hazard, is improved;
— Notion of machine abuse added;
— Machine Control System Safety Analysis (MCSSA) process updated to reflect content of
ISO/TS 19014-5:2021;
— References to ISO/TS 19014-5:2021 made normative;
— Guide 78 requirements covering information for use added.
A list of all parts in the ISO 19014-series can be found on the ISO website. At the time of publication of
this document, Part 2, Design and evaluation of safety-related machine control systems, Part 4, Design and
evaluation of software and transmission for safety related parts of the control system, and Part 5, Tables of
performance levels, are under development.
iv
oSIST prEN ISO 19014-1:2024
ISO/DIS 19014-1:2023(E)
Any feedback or questions on this document should be directed to the user’s national standards body. A
complete listing of these bodies can be found at www.iso.org/members.html.
v
oSIST prEN ISO 19014-1:2024
ISO/DIS 19014-1:2023(E)
Introduction
This document addresses systems of all energy types used for functional safety in earth-moving
machinery.
The structure of safety standards in the field of machinery is as follows.
Type-A standards (basis standards) give basic concepts, principles for design and general aspects that
can be applied to machinery.
Type-B standards (generic safety standards) deal with one or more safety aspects, or one or more types
of safeguards that can be used across a wide range of machinery:
— type-B1 standards on particular safety aspects (e.g. safety distances, surface temperature, noise);
— type-B2 standards on safeguards (e.g. two-hands controls, interlocking devices, pressure sensitive
devices, guards).
Type-C standards (machinery safety standards) deal with detailed safety requirements for a particular
machine or group of machines.
This document is a type C standard as stated in ISO 12100.
This document is of relevance, in particular, for the following stakeholder groups representing the
market players with regard to machinery safety:
— machine manufacturers (small, medium and large enterprises);
— health and safety bodies (regulators, accident prevention organisations, market surveillance etc.).
Others can be affected by the level of machinery safety achieved with the means of the document by the
above-mentioned stakeholder groups:
— machine users/employers (small, medium and large enterprises);
— machine users/employees (e.g. trade unions, organizations for people with special needs);
— service providers, e. g. for maintenance (small, medium and large enterprises);
— consumers (in case of machinery intended for use by consumers).
The above-mentioned stakeholder groups have been given the possibility to participate at the drafting
process of this document.
The machinery concerned and the extent to which hazards, hazardous situations or hazardous events
are covered are indicated in the Scope of this document.
When requirements of this type-C standard are different from those which are stated in type-A or
type-B standards, the requirements of this type-C standard take precedence over the requirements of
the other standards for machines that have been designed and built according to the requirements of
this type-C standard.
vi
oSIST prEN ISO 19014-1:2024
DRAFT INTERNATIONAL STANDARD ISO/DIS 19014-1:2023(E)
Earth-moving machinery — Functional safety —
Part 1:
Methodology to determine safety-related parts of the
control system and performance requirements
1 Scope
This document provides a methodology for the determination of performance levels required for earth
moving machinery (EMM) as defined in ISO 6165.
A Machine Control System Safety Analysis (MCSSA) determines the amount of risk reduction of hazards
associated with control systems, required for Safety Control Systems (SCS). This reduction is quantified
by the Machine Performance Level (MPL), the hazards are identified using the risk assessment principles
as defined in ISO 12100 or by other means.
NOTE 1 Step 2 as shown in Annex A demonstrates the relationship between ISO 12100 and ISO 19014 as a
complementary protective measure.
NOTE 2 ISO 19014 can also be used to assess the functional safety requirements of other off-road mobile
machinery.
For those controls determined to be safety-related, the characteristics for architecture, hardware,
software environmental requirements and performance are covered by other parts in ISO 19014.
ISO 19014 covers the hazards caused by the failure of a safety control system and excludes hazards
arising from the equipment itself (for example, electric shock, fire, etc.).
Other controls that are not safety control systems (SCS), that do not mitigate a hazard or perform a
control function and where the operator would be aware of a failure, are excluded from this standard
(e.g. windscreen wipers, head lights, cab light, etc.).
NOTE 3 A list of safety control systems is included in Annex D.
NOTE 4 Audible warnings are excluded from the requirements of diagnostic coverage.
2 Normative references
The following documents are referred to in the text in such a way that some or all of their content
constitutes requirements of this document. For dated references, only the edition cited applies. For
undated references, the latest edition of the referenced document (including any amendments) applies.
ISO 6165:2012, Earth-moving machinery — Basic types — Identification and terms and definitions
ISO 12100:2010, Safety of machinery — General principles for design — Risk assessment and risk reduction
3 Terms and definitions
For the purposes of this document, the terms and definitions given in ISO 6165 and ISO 12100 and the
following apply.
ISO and IEC maintain terminological databases for use in standardization at the following addresses:
— IEC Electropedia: available at http:// www .electropedia .org/
oSIST prEN ISO 19014-1:2024
ISO/DIS 19014-1:2023(E)
— ISO Online browsing platform: available at http:// www .iso .org/ obp
3.1
Machine Performance Level
MPL
discrete level to specify the ability of safety-related parts of control systems (3.3.2) to perform a safety
function under reasonably foreseeable conditions
Note 1 to entry: The term MPL is used to describe the performance level required from a safety-related part of
a control system. The ‘M’ refers to machine and denotes Earth Moving Machinery covered by the scope of this
document and is used to differentiate from other functional safety standards (e.g. PL, AgPL, ASIL, etc.).
3.1.1
Machine Performance Level required
MPL
r
discrete level required as determined by processes in this document
3.1.2
Machine Performance Level achieved
MPL
a
discrete level achieved by the safety control systems (3.3.1) hardware, architecture and software
Note 1 to entry: Process for determination of MPLa will be covered in ISO 19014-2 and ISO 19014-4, under
development.
3.2
functional safety
part of the overall safety relating to the equipment under control and its control system that depends
on the correct functioning of the safety control system (SCS) (3.3.1) and other risk reduction measures
[SOURCE: IEC 61508-4:2010, 3.1.12, modified]
3.3
machine control system
MCS
system which responds to input signals from parts of machine elements, operators (3.4.1), external
control equipment or any combination of these and generates output signals causing the machine to
behave in the intended manner
[SOURCE: ISO 13849-1:2015, 3.1.32]
3.3.1
safety control system
SCS
sub-system or system used by a MCS (3.3) to achieve functional safety (3.2) by affecting machine
behaviour or mitigating a hazard
Note 1 to entry: A system which can fail in a way that creates a hazard is considered a SCS.
Note 2 to entry: For example, SCS for propulsion may include throttle, gear shift, start/stop, etc.
3.3.2
safety-related part of the control system
SRP/CS
part of a SCS (3.3.1) that responds to safety-related input signals and generates safety-related output
signals
Note 1 to entry: The combined safety-related parts of a control system start at the point where the safety-related
input signals are initiated (including, for example, the actuating cam and the roller of the position switch) and
end at the output of the power control elements (including, for example, the main contacts of a contactor).
Note 2 to entry: If monitoring systems are used for diagnostic coverage, they are also considered as SRP/CS.
oSIST prEN ISO 19014-1:2024
ISO/DIS 19014-1:2023(E)
Note 3 to entry: SRP/CS is a part or component within the specific MCS.
[SOURCE: ISO 13849-1:2015, 3.1.1, modified - Note 3 to entry has been added.]
3.4
person group
groups of people analyzed in the MCSSA (3.14)
3.4.1
operator
person operating the EMM and aware of associated risks or hazards
3.4.2
co-worker
person working in the vicinity of a machine and aware of associated hazards
3.4.3
bystander
person including non-employee, child, or member of the public with little or no awareness of machine
hazards and no training
3.4.4
maintainer
person whose function is to perform maintenan
...