EN 60987:2009

Nuclear power plants - Instrumentation and control important to safety - Hardware design requirements for computer-based systems

Is applicable to computer-system hardware for systems of Class 1 and 2 (as defined by IEC 61513) in nuclear power plants. This new edition reflects recent developments in computer system hardware design, the use of pre-developed hardware and changes in terminology.

Kernkraftwerke - Leittechnische Systeme mit sicherheitstechnischer Bedeutung - Anforderungen an die Hardware-Auslegung rechnerbasierter Systeme

Centrales nucléaires de puissance - Instrumentation et contrôle-commande importants pour la sûreté - Exigences applicables à la conception du matériel des systèmes informatisés

Est applicable au matériel des systèmes informatisés des centrales nucléaires de puissance de Classes 1 et 2 (telles que définies dans la CEI 61513). Cette nouvelle édition tient compte des développements récemment survenus dans le domaine de la conception du matériel des systèmes informatisés, l'utilisation de matériels prédéveloppés commercialement disponibles sur étagère et l'évolution de la terminologie.

Jedrske elektrarne - Merilna in nadzorna oprema za zagotavljanje varnosti - Zahteve za načrtovanje strojne opreme računalniških sistemov (IEC 60987:2007, spremenjen)

Ta mednarodni standard velja za strojno opremo računalniških sistemov jedrskih elektrarn za sisteme Razreda 1 in 2 (kot jih določa standard IEC 61513). Struktura tega standarda se ni bistveno spremenila od izvirne izdaje leta 1989, vendar pa so nekatera vprašanja zdaj vključena v standarde, ki so izšli v vmesnem obdobju (na primer IEC 61513 za načrtovanje arhitekture sistema), na voljo pa so tudi sklici na nove standarde, kjer je primerno. Besedilo standarda se je spremenilo tako, da odraža razvoj na področju načrtovanja strojne opreme računalniških sistemov, uporabe vnaprej izdelane strojne opreme (na primer COTS) ter spremembe v terminologiji. Zmogljivosti računalniške strojne opreme, ki se uporablja za nalaganje programske opreme in preverjanje, ne spadajo v bistveni del sistema za zagotavljanje varnosti in so kot take izven področja uporabe tega standarda. Čeprav je glavni cilj tega standarda obravnava značilnosti izdelave nove strojne opreme, se lahko postopki, opredeljeni v tem standardu, uporabljajo tudi kot vodilo za ocenjevanje in uporabo vnaprej izdelane strojne opreme, kot je strojna oprema COTS. V besedilu so navodila glede predstavitve zahtev tega standarda, kadar se uporablja za oceno takšnih komponent. Veljajo predvsem zahteve za zagotavljanje kakovosti v točki 4.3 glede nadzora konfiguracije. Vnaprej razvite komponente lahko vključujejo sistemske programe (kot jih opredeljuje točka 3.8); kjer je programska oprema sistemskih programov popolnoma vgrajena in dejansko »očitna« za uporabnika, potem se mora IEC 60987 uporabiti kot vodilo za postopek ocenjevanja takšnih komponent.  Primer ustreznosti takšnega pristopa je ocenjevanje modernih procesorjev, ki vsebujejo mikrokodo. Takšna koda je v splošnem sestavni del »strojne opreme«, zato je primerno, da se procesor (vključno z mikrokodo) ocenjuje s tem standardom kot neločljiva komponenta strojne opreme. Programska oprema, ki ni sistemski program, kot je opisano zgoraj, se izdeluje in ocenjuje v skladu z zahtevami ustreznega standarda za programsko opremo (na primer IEC 60880 za sisteme Razreda 1 in IEC 62138 za sisteme Razreda 2). Nadzorni in merilni elementi lahko vključujejo programirljive logične pripomočke, katerih specifično logično uporabnost načrtuje načrtovalec nadzornih in merilnih elementov, ne pa proizvajalec čipov. Primeri takšnih pripomočkov vključujejo kompleksna programirljiva logična vezja (CPLD) in programirljive matrike logičnih vrat (FPGA). Medtem ko programirljiva narava teh pripomočkov dopušča razvojne procese, ki se uporabljajo za te pripomočke, so nekatere značilnosti razvojnih procesov programske opreme in procesi načrtovanja takšnih pripomočkov zelo podobni tistim, ki se uporabljajo pri načrtovanju logičnih vezij za diskretna vrata in vgrajene pakete vezij. Procesi načrtovanja in preverjanje načrtovanja, ki veljajo za programirljive logične naprave, morajo torej izpolnjevati ustrezne zahteve tega standarda (tj. z upoštevanjem določenih lastnosti procesov načrtovanja takšnih naprav). Če se orodja na osnovi programske opreme uporabljajo za podporo procesov načrtovanja programirljivih logičnih naprav, morajo takšna programska orodja običajno upoštevati navodila za programska razvojna orodja v ustreznem standardu za programsko opremo, tj. IEC 60880 (sistemi Razreda 1) ali IEC 62138 (sistemi Razreda 2).

General Information

• Status: Withdrawn
• Publication Date: 25-Jun-2009
• Withdrawal Date: 31-May-2012
• ICS: 27.120.20 - Nuclear power plants. Safety
• Technical Committee: CLC/TC 45AX - Nuclear power plants
• Drafting Committee: IEC/SC 45A - IEC_SC_45A
• Parallel Committee: IEC/SC 45A - IEC_SC_45A
• Current Stage: 9960 - Withdrawal effective - Withdrawal
• Start Date: 16-Feb-2018
• Completion Date: 16-Feb-2018
• Ref Project: SIST EN 60987:2010 - Nuclear power plants - Instrumentation and control important to safety - Hardware design requirements for computer-based systems

Relations

• Replaced By: EN 60987:2015 - Nuclear power plants - Instrumentation and control important to safety - Hardware design requirements for computer-based systems
• Effective Date: 29-Jan-2023

Standards Content (Sample)

SLOVENSKI STANDARD
01-januar-2010
-HGUVNHHOHNWUDUQH0HULOQDLQQDG]RUQDRSUHPD]D]DJRWDYOMDQMHYDUQRVWL
=DKWHYH]DQDþUWRYDQMHVWURMQHRSUHPHUDþXQDOQLãNLKVLVWHPRY,(&
VSUHPHQMHQ
Nuclear power plants - Instrumentation and control important to safety - Hardware design
requirements for computer-based systems
Kernkraftwerke - Leittechnische Systeme mit sicherheitstechnischer Bedeutung -
Anforderungen an die Hardware-Auslegung rechnerbasierter Systeme
Centrales nucléaires de puissance - Instrumentation et contrôle-commande importants
pour la sûreté - Exigences applicables à la conception du matériel des systèmes
informatisés
Ta slovenski standard je istoveten z: EN 60987:2009
ICS:
27.120.20 Jedrske elektrarne. Varnost Nuclear power plants. Safety
2003-01.Slovenski inštitut za standardizacijo. Razmnoževanje celote ali delov tega standarda ni dovoljeno.

EUROPEAN STANDARD
EN 60987
NORME EUROPÉENNE
June 2009
EUROPÄISCHE NORM
ICS 27.120.20
English version
Nuclear power plants -
Instrumentation and control important to safety -
Hardware design requirements for computer-based systems
(IEC 60987:2007, modified)
Centrales nucléaires de puissance -  Kernkraftwerke -
Instrumentation et contrôle-commande Leittechnische Systeme mit
importants pour la sûreté - sicherheitstechnischer Bedeutung -
Exigences applicables à la conception Anforderungen an die
du matériel des systèmes informatisés Hardware-Auslegung
(CEI 60987:2007, modifiée) rechnerbasierter Systeme
(IEC 60987:2007, modifiziert)
This European Standard was approved by CENELEC on 2009-06-01. CENELEC members are bound to comply
with the CEN/CENELEC Internal Regulations which stipulate the conditions for giving this European Standard
the status of a national standard without any alteration.

Up-to-date lists and bibliographical references concerning such national standards may be obtained on
application to the Central Secretariat or to any CENELEC member.

This European Standard exists in three official versions (English, French, German). A version in any other
language made by translation under the responsibility of a CENELEC member into its own language and notified
to the Central Secretariat has the same status as the official versions.

CENELEC members are the national electrotechnical committees of Austria, Belgium, Bulgaria, Cyprus, the
Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia,
Lithuania, Luxembourg, Malta, the Netherlands, Norway, Poland, Portugal, Romania, Slovakia, Slovenia, Spain,
Sweden, Switzerland and the United Kingdom.

CENELEC
European Committee for Electrotechnical Standardization
Comité Européen de Normalisation Electrotechnique
Europäisches Komitee für Elektrotechnische Normung

Central Secretariat: Avenue Marnix 17, B - 1000 Brussels

© 2009 CENELEC - All rights of exploitation in any form and by any means reserved worldwide for CENELEC members.
Ref. No. EN 60987:2009 E
Foreword
The text of the International Standard IEC 60987:2007, prepared by SC 45A, Instrumentation and
control of nuclear facilities, of IEC TC 45, Nuclear instrumentation, together with the common
modifications prepared by the Technical Committee CENELEC TC 45AX, Instrumentation and control
of nuclear facilities, was submitted to the formal vote and was approved by CENELEC as EN 60987
on 2009-06-01.
The following dates were fixed:

– latest date by which the EN has to be implemented
at national level by publication of an identical
national standard or by endorsement (dop) 2010-06-01

– latest date by which the national standards conflicting
with the EN have to be withdrawn (dow) 2012-06-01
Annex ZA has been added by CENELEC.
________________
– 3 – EN 60987:2009
Endorsement notice
The text of the International Standard IEC 60987:2007 was approved by CENELEC as a European
Standard with agreed common modifications as given below.
COMMON MODIFICATIONS
1 Scope
1.1 General
Replace NOTE 2 by the following text:
The more complex hardware components are out of the scope of EN 60987. IEC/SC 45 A
accepted new works items to cover the cases of those more complex hardware components
(e.g. IEC 62566 under development when EN 60987 was published).

Annex ZA
(normative)
Normative references to international publications
with their corresponding European publications

The following referenced documents are indispensable for the application of this document.
For dated references, only the edition cited applies. For undated references, the latest edition
of the referenced document (including any amendments) applies.

NOTE  When an international publication has been modified by common modifications, indicated by (mod), the relevant EN/HD
applies.
Publication Year Title EN/HD Year
1)
IEC 60780 - Nuclear power plants - Electrical - -
equipment of the safety system -
Qualification
2)
1)
IEC 60812 - Analysis techniques for system EN 60812 2006
reliability - Procedure for failure
mode and effects analysis (FMEA)
1)
IEC 60880 - Nuclear power plants - - -
Instrumentation and control systems
important to safety - Software
aspects for computer-based systems
performing category A functions
IEC 61000 Series Electromagnetic compatibility (EMC) EN 61000 Series
1) 2)
IEC 61025 - Fault tree analysis (FTA) EN 61025
IEC 61513 2001 Nuclear power plants - - -
Instrumentation and control for
systems important for safety -
General requirements for systems
1)
IEC 62138 - Nuclear power plants - - -
Instrumentation and control important
for safety - Software aspects for
computer-based systems performing
category B or C functions
2)
1)
ISO 9001 - Quality management systems - EN ISO 9001 2008
Requirements
1)
IAEA NS-G 1.3 - Instrumentation and control systems - -
important to safety in nuclear power
plants
IAEA 50-C/SG-Q 1996 Quality assurance for safety in - -
nuclear power plants and other
nuclear installations
———————
1)
Undated reference.
2)
Valid edition at date of issue.

IEC 60987
Edition 2.0 2007-08
INTERNATIONAL
STANDARD
NORME
INTERNATIONALE
Nuclear power plants – Instrumentation and control important to safety –
Hardware design requirements for computer-based systems

Centrales nucléaires de puissance – Instrumentation et contrôle-commande
importants pour la sûreté – Exigences applicables à la conception du matériel
des systèmes informatisés
INTERNATIONAL
ELECTROTECHNICAL
COMMISSION
COMMISSION
ELECTROTECHNIQUE
PRICE CODE
INTERNATIONALE
V
CODE PRIX
ICS 27.120.20 ISBN 2-8318-9285-6

– 2 – 60987 © IEC:2007
CONTENTS
FOREWORD.4
INTRODUCTION.6

1 Scope.8
1.1 General .8
1.2 Use of this standard for pre-developed (for example, COTS) hardware
assessment .8
1.3 Applicability of this standard to programmable logic devices development.9
2 Normative references .9
3 Terms and definitions .10
4 Project structure .12
4.1 General .12
4.2 Project subdivision .12
4.3 Quality assurance .12
5 Hardware requirements .13
5.1 General .13
5.2 Functional and performance requirements.14
5.3 Reliability/Availability requirements .15
5.4 Environmental withstand requirements .16
5.5 Documentation requirements.16
6 Design and development .17
6.1 General .17
6.2 Design activities .17
6.3 Reliability .18
6.4 Maintenance.18
6.5 Interfaces .19
6.6 Modification.19
6.7 Power failure .19
6.8 Component selection.19
6.9 Design documentation.19
7 Verification and validation .20
7.1 General .20
7.2 Verification plan .20
7.3 Independence of verification.21
7.4 Methods .21
7.5 Documentation .22
7.6 Discrepancies.22
7.7 Changes and modifications .22
7.8 Installation verification.22
7.9 Validation .22
7.10 Verification of pre-existing equipment platforms .22
8 Qualification .23
9 Manufacture .23
10 Installation and commissioning .23
11 Maintenance.23
11.1 Maintenance requirements .24

60987 © IEC:2007 – 3 –
11.2 Failure data.24
11.3 Maintenance documentation.25
12 Modification.26
13 Operation .26

Annex A (informative) Overview of system life cycle .27
Annex B (informative) Outline of qualification.28
Annex C (informative) Example of maintenance procedure .29

Bibliography.30

– 4 – 60987 © IEC:2007
INTERNATIONAL ELECTROTECHNICAL COMMISSION
____________
NUCLEAR POWER PLANTS –
INSTRUMENTATION AND CONTROL
IMPORTANT TO SAFETY –
HARDWARE DESIGN REQUIREMENTS
FOR COMPUTER-BASED SYSTEMS
FOREWORD
1) The International Electrotechnical Commission (IEC) is a worldwide organization for standardization comprising
all national electrotechnical committees (IEC National Committees). The object of IEC is to promote
international co-operation on all questions concerning standardization in the electrical and electronic fields. To
this end and in addition to other activities, IEC publishes International Standards, Technical Specifications,
Technical Reports, Publicly Available Specifications (PAS) and Guides (hereafter referred to as “IEC
Publication(s)”). Their preparation is entrusted to technical committees; any IEC National Committee intereste
...