kSIST FprEN ISO 19014-1:2026
(Main)Earth-moving machinery - Functional safety - Part 1: Methodology to determine safety-related parts of the control system and performance requirements (ISO/FDIS 19014-1:2026)
- Abstract
This document provides a methodology for the determination of performance levels required for earth moving machinery (EMM) as defined in ISO 6165.
A Machine Control System Safety Analysis (MCSSA) determines the amount of risk reduction of hazards associated with control systems, required for Safety Control Systems (SCS). This reduction is quantified by the Machine Performance Level (MPL), the hazards are identified using the risk assessment principles as defined in ISO 12100 or by other means.
NOTE 1 Step 2 as shown in Annex A demonstrates the relationship between ISO 12100 and ISO 19014 as a complementary protective measure.
NOTE 2 ISO 19014 can also be used to assess the functional safety requirements of other off-road mobile machinery.
For those controls determined to be safety-related, the characteristics for architecture, hardware, software environmental requirements and performance are covered by other parts in ISO 19014.
ISO 19014 covers the hazards caused by the failure of a safety control system and excludes hazards arising from the equipment itself (for example, electric shock, fire, etc.).
Other controls that are not safety control systems (SCS), that do not mitigate a hazard or perform a control function and where the operator would be aware of a failure, are excluded from this standard (e.g. windscreen wipers, head lights, cab light, etc.).
NOTE 3 A list of safety control systems is included in Annex D.
NOTE 4 Audible warnings are excluded from the requirements of diagnostic coverage.
- Status
- Not Published
- Public Enquiry End Date
- 17-Apr-2024
- Technical Committee
- I13 - Imaginarni 13
- Current Stage
- 5020 - Formal vote (FV) (Adopted Project)
- Start Date
- 09-Jul-2026
- Due Date
- 27-Aug-2026
- Completion Date
- 10-Jul-2026
kSIST FprEN ISO 19014-1:2026 is a SIST standard for earth-moving machinery functional safety. It specifies a method for determining the Machine Performance Level required (MPLr) for safety-related parts of the control system (SRP/CS) by carrying out a Machine Control System Safety Analysis (MCSSA). Engineers, safety teams, and buyers can use it to decide which control functions must be treated as safety control systems (SCS) and what level of risk reduction they need.
What does kSIST FprEN ISO 19014-1:2026 specify?
kSIST FprEN ISO 19014-1:2026 specifies how to identify safety-related control functions on earth-moving machinery and how to assign the required MPLr to them. It focuses on hazards caused by failure of an SCS, and it can also be applied to other off-road mobile machinery.
The document is organized around a small number of core clauses:
- Clauses 1 to 3 cover scope, normative references, and terms and definitions.
- Clause 4 sets out the MCSSA method for determining MPLr.
- Clause 5 addresses immediate action warning indicators.
- Clause 6 gives the performance level determination procedure.
- Annexes A to C provide supporting flow charts, indicator tables, and examples of possible SCS.
- Annex ZA links the document to the essential requirements of EU Directive 2006/42/EC.
| Annex | What it covers |
|---|---|
| A | Process flow chart for machinery risk assessment and the relationship between ISO 12100 and ISO 19014 |
| B | Table of warning and operation indicators, including immediate action warning indicators |
| C | List of possible SCS for earth-moving machines |
| ZA | Relationship with the essential requirements of EU Directive 2006/42/EC |
The scope is limited to control-system failure hazards. Hazards from the equipment itself, such as electric shock or fire, are outside that focus, as are non-safety controls such as windscreen wipers, headlights, and cab lights when they do not mitigate a hazard or perform a control function.
What are the key requirements of kSIST FprEN ISO 19014-1:2026?
kSIST FprEN ISO 19014-1:2026 requires a structured MCSSA to decide whether a machine control function is an SCS and what MPLr it needs. In practice, the standard makes the designer identify hazards, classify risk, and document the result before choosing the safety architecture in later parts of ISO 19014.
Build the MCSSA around the machine and its intended uses
Clause 4 requires the analysis to start with the machine, its functions, and its intended uses. The method uses failure types to test whether a control function creates a hazard, and if it does, that function becomes an SCS.
This matters because the same machine can have different hazard profiles in different applications. The document expects the analysis to reflect actual use, not only the nominal design intent.
Use the risk-assessment logic from ISO 12100 and the MCSSA steps in Clause 6
Clause 4 ties the method to ISO 12100 risk-assessment principles and Annex A shows their relationship. Clause 6 then turns the result into an MPLr decision.
In practice, that means the reader first identifies hazards and then works through severity, exposure, and controllability. The result is not a general safety judgment but a traceable level assignment for each relevant failure type.
Classify severity, exposure, and controllability
Clause 6 classifies severity into four levels, from no significant injury to fatality. Exposure is based on application use case, hazard time, and person group exposure, and the document groups exposure into three bands. Controllability is assessed from alternative controls, awareness of the hazard, and ability to react.
This matters because the same failure can lead to different required levels depending on who is exposed, how often, and whether the operator can still avoid harm. The standard also requires the highest relevant exposure and the most demanding scenario to be taken into account.
Select the highest MPLr for each SCS
Clause 6 requires the severity, exposure, and controllability result to be combined to determine MPLr. Where one SCS is involved in multiple scenarios, the highest MPLr applies to that SCS.
That is important for design and procurement because the chosen safety design has to satisfy the most demanding credible case, not just the easiest one. Later parts of ISO 19014 are then used to determine the achieved level, and the achieved level must be at least the required level.
Treat immediate action warning indicators separately
Clause 5 says the same safety principles should be applied to immediate action warning indicators, but these indicators are not treated as safety-related parts of the control system. They rely on human reaction and therefore cannot be given a performance level.
For a buyer or designer, this means a warning lamp, buzzer, or display may support safety, but it does not replace an SCS. Annex B gives a non-exhaustive list of common indicators so manufacturers can decide which ones call for immediate action.
Re-run the analysis when the design basis changes
Clause 6 requires a new MCSSA if later-life-cycle decisions change the basis on which earlier decisions were made. Clause 4.1.1 also expects limits of machine use, assumptions, and machine abuse considered by the document to be included in the information for use.
In practice, this means the safety assessment is not a one-time paper exercise. Design changes, new use assumptions, or revised operating conditions can require a fresh review.
What terms does kSIST FprEN ISO 19014-1:2026 define?
kSIST FprEN ISO 19014-1:2026 defines the main terms used to assign safety levels and to describe people, hazards, and control functions.
- Machine Performance Level (MPL) - a level used to describe the ability of safety-related parts of a control system to perform a safety function under reasonably foreseeable conditions.
- Machine Performance Level required (MPLr) - the level determined by the MCSSA and used as the design target.
- Machine Performance Level achieved (MPLa) - the level achieved by the hardware, architecture, and software of the safety control system.
- functional safety - the part of overall safety that depends on the correct functioning of the SCS and other risk-reduction measures.
- machine control system (MCS) - the system that takes inputs and generates outputs so the machine behaves as intended.
- safety control system (SCS) - a sub-system or system used by the MCS to achieve functional safety by affecting machine behavior or mitigating a hazard.
- safety-related part of the control system (SRP/CS) - the part of an SCS that handles safety-related input and output signals.
- machine control system safety analysis (MCSSA) - the risk assessment used in this document to determine MPLr for the SCS.
Who uses kSIST FprEN ISO 19014-1:2026?
kSIST FprEN ISO 19014-1:2026 is aimed mainly at machine manufacturers and the safety functions they design into earth-moving machinery. It is also relevant to health and safety bodies, market surveillance, and other stakeholders that review machine safety.
In practice, it is used by:
- machine designers and control-system engineers
- validation and testing teams
- hydraulics, electrical, electronic, and software development teams
- operators and maintenance personnel who contribute to the risk assessment
- regulators, accident-prevention organizations, and market surveillance bodies
- service providers and buyers who need to understand which functions are safety-related
What changed in kSIST FprEN ISO 19014-1:2026 from the previous edition?
kSIST FprEN ISO 19014-1:2026 is part of the first edition of ISO 19014-1 and, together with the other parts of ISO 19014, replaces ISO 15998 and ISO/TS 15998-2.
The changes stated in the document are:
- a detailed Annex ZA was added
- referenced standards were dated
- the term “quality measure” was clarified
- wording about controllability when multiple actions are needed was improved
- the notion of machine abuse was added
- the MCSSA process was updated to reflect ISO/TS 19014-5:2021
- references to ISO/TS 19014-5:2021 were made normative
- Guide 78 requirements for information for use were added
Which standards are used with kSIST FprEN ISO 19014-1:2026?
kSIST FprEN ISO 19014-1:2026 relies on a small set of external standards and companion parts to define the machine type, the risk-assessment method, and the later design work.
| Standard | What it contributes |
|---|---|
| ISO 6165:2012 | Defines earth-moving machinery and supplies basic terms and definitions |
| ISO 12100:2010 | Gives the general principles for risk assessment and risk reduction used in the MCSSA approach |
| ISO 19014-2 | Used with Parts 3 and 4 to determine MPLa, and it is referenced for information for use |
| ISO 19014-3 | Used with Parts 2 and 4 to determine MPLa |
| ISO 19014-4 | Covers design and evaluation of software and transmission for safety-related parts of the control system |
| ISO/TS 19014-5:2021 | Provides assessment data used in the MCSSA process |
What does the kSIST FprEN ISO 19014-1:2026 document contain?
kSIST FprEN ISO 19014-1:2026 contains the step-by-step method for MCSSA, the severity/exposure/controllability approach, and the logic used to turn those results into MPLr. It also contains a formula-based exposure method, a controllability classification figure, and a risk graph for selecting the final level.
The annexes add practical support for design and review work. Annex A shows the process flow for machinery risk assessment, Annex B lists warning and operation indicators, and Annex C gives examples of possible SCS for earth-moving machinery.
Annex ZA is useful where EU machinery law is relevant because it maps parts of the document to Directive 2006/42/EC. The bibliography also points to related guidance on machine operation displays, safety-related control systems, and general machinery requirements.
Relations
- Effective Date
- 18-Oct-2023
Frequently Asked Questions
kSIST FprEN ISO 19014-1:2026 is a draft published by the Slovenian Institute for Standardization (SIST). Its full title is "Earth-moving machinery - Functional safety - Part 1: Methodology to determine safety-related parts of the control system and performance requirements (ISO/FDIS 19014-1:2026)". This standard covers: This document provides a methodology for the determination of performance levels required for earth moving machinery (EMM) as defined in ISO 6165. A Machine Control System Safety Analysis (MCSSA) determines the amount of risk reduction of hazards associated with control systems, required for Safety Control Systems (SCS). This reduction is quantified by the Machine Performance Level (MPL), the hazards are identified using the risk assessment principles as defined in ISO 12100 or by other means. NOTE 1 Step 2 as shown in Annex A demonstrates the relationship between ISO 12100 and ISO 19014 as a complementary protective measure. NOTE 2 ISO 19014 can also be used to assess the functional safety requirements of other off-road mobile machinery. For those controls determined to be safety-related, the characteristics for architecture, hardware, software environmental requirements and performance are covered by other parts in ISO 19014. ISO 19014 covers the hazards caused by the failure of a safety control system and excludes hazards arising from the equipment itself (for example, electric shock, fire, etc.). Other controls that are not safety control systems (SCS), that do not mitigate a hazard or perform a control function and where the operator would be aware of a failure, are excluded from this standard (e.g. windscreen wipers, head lights, cab light, etc.). NOTE 3 A list of safety control systems is included in Annex D. NOTE 4 Audible warnings are excluded from the requirements of diagnostic coverage.
This document provides a methodology for the determination of performance levels required for earth moving machinery (EMM) as defined in ISO 6165. A Machine Control System Safety Analysis (MCSSA) determines the amount of risk reduction of hazards associated with control systems, required for Safety Control Systems (SCS). This reduction is quantified by the Machine Performance Level (MPL), the hazards are identified using the risk assessment principles as defined in ISO 12100 or by other means. NOTE 1 Step 2 as shown in Annex A demonstrates the relationship between ISO 12100 and ISO 19014 as a complementary protective measure. NOTE 2 ISO 19014 can also be used to assess the functional safety requirements of other off-road mobile machinery. For those controls determined to be safety-related, the characteristics for architecture, hardware, software environmental requirements and performance are covered by other parts in ISO 19014. ISO 19014 covers the hazards caused by the failure of a safety control system and excludes hazards arising from the equipment itself (for example, electric shock, fire, etc.). Other controls that are not safety control systems (SCS), that do not mitigate a hazard or perform a control function and where the operator would be aware of a failure, are excluded from this standard (e.g. windscreen wipers, head lights, cab light, etc.). NOTE 3 A list of safety control systems is included in Annex D. NOTE 4 Audible warnings are excluded from the requirements of diagnostic coverage.
kSIST FprEN ISO 19014-1:2026 is classified under the following ICS (International Classification for Standards) categories: 53.100 - Earth-moving machinery. The ICS classification helps identify the subject area and facilitates finding related standards.
kSIST FprEN ISO 19014-1:2026 has the following relationships with other standards: It is inter standard links to SIST EN ISO 19014-1:2018. Understanding these relationships helps ensure you are using the most current and applicable version of the standard.
kSIST FprEN ISO 19014-1:2026 is associated with the following European legislation: EU Directives/Regulations: 2023/1230; Standardization Mandates: M/605. When a standard is cited in the Official Journal of the European Union, products manufactured in conformity with it benefit from a presumption of conformity with the essential requirements of the corresponding EU directive or regulation.
kSIST FprEN ISO 19014-1:2026 is available in PDF format for immediate download after purchase. The document can be added to your cart and obtained through the secure checkout process. Digital delivery ensures instant access to the complete standard document.
Standards Content (Sample)
SLOVENSKI STANDARD
oSIST prEN ISO 19014-1:2024
01-marec-2024
Stroji za zemeljska dela - Funkcijska varnost - 1. del: Metodologija ugotavljanja
delov krmilnega sistema, ki so povezani z varnostjo in zahtevanimi lastnostmi
(ISO/DIS 19014-1:2024)
Earth-moving machinery - Functional safety - Part 1: Methodology to determine safety-
related parts of the control system and performance requirements (ISO/DIS 19014-
1:2024)
Erdbaumaschinen - Funktionale Sicherheit - Teil 1: Methodik zur Bestimmung
sicherheitsbezogener Teile der Steuerung und deren Leistungsanforderungen (ISO/DIS
19014-1:2024)
Engins de terrassement - Sécurité fonctionnelle - Partie 1: Méthodologie pour la
détermination des parties relatives à la sécurité des systèmes de commande et les
exigences de performance (ISO/DIS 19014-1:2024)
Ta slovenski standard je istoveten z: prEN ISO 19014-1
ICS:
53.100 Stroji za zemeljska dela Earth-moving machinery
oSIST prEN ISO 19014-1:2024 en,fr,de
2003-01.Slovenski inštitut za standardizacijo. Razmnoževanje celote ali delov tega standarda ni dovoljeno.
oSIST prEN ISO 19014-1:2024
oSIST prEN ISO 19014-1:2024
DRAFT INTERNATIONAL STANDARD
ISO/DIS 19014-1
ISO/TC 127/SC 2 Secretariat: ANSI
Voting begins on: Voting terminates on:
2024-01-26 2024-04-19
Earth-moving machinery — Functional safety —
Part 1:
Methodology to determine safety-related parts of the
control system and performance requirements
Engins de terrassement — Sécurité fonctionnelle —
Partie 1: Méthodologie pour la détermination des parties relatives à la sécurité des systèmes de commande
et les exigences de performance
ICS: 53.100
This document is circulated as received from the committee secretariat.
THIS DOCUMENT IS A DRAFT CIRCULATED
FOR COMMENT AND APPROVAL. IT IS
ISO/CEN PARALLEL PROCESSING
THEREFORE SUBJECT TO CHANGE AND MAY
NOT BE REFERRED TO AS AN INTERNATIONAL
STANDARD UNTIL PUBLISHED AS SUCH.
IN ADDITION TO THEIR EVALUATION AS
BEING ACCEPTABLE FOR INDUSTRIAL,
TECHNOLOGICAL, COMMERCIAL AND
USER PURPOSES, DRAFT INTERNATIONAL
STANDARDS MAY ON OCCASION HAVE TO
BE CONSIDERED IN THE LIGHT OF THEIR
POTENTIAL TO BECOME STANDARDS TO
WHICH REFERENCE MAY BE MADE IN
Reference number
NATIONAL REGULATIONS.
ISO/DIS 19014-1:2024(E)
RECIPIENTS OF THIS DRAFT ARE INVITED
TO SUBMIT, WITH THEIR COMMENTS,
NOTIFICATION OF ANY RELEVANT PATENT
RIGHTS OF WHICH THEY ARE AWARE AND TO
PROVIDE SUPPORTING DOCUMENTATION. © ISO 2024
oSIST prEN ISO 19014-1:2024
ISO/DIS 19014-1:2024(E)
DRAFT INTERNATIONAL STANDARD
ISO/DIS 19014-1
ISO/TC 127/SC 2 Secretariat: ANSI
Voting begins on: Voting terminates on:
Earth-moving machinery — Functional safety —
Part 1:
Methodology to determine safety-related parts of the
control system and performance requirements
Engins de terrassement — Sécurité fonctionnelle —
Partie 1: Méthodologie pour la détermination des parties relatives à la sécurité des systèmes de commande
et les exigences de performance
ICS: 53.100
This document is circulated as received from the committee secretariat.
THIS DOCUMENT IS A DRAFT CIRCULATED
FOR COMMENT AND APPROVAL. IT IS
© ISO 2024
ISO/CEN PARALLEL PROCESSING
THEREFORE SUBJECT TO CHANGE AND MAY
All rights reserved. Unless otherwise specified, or required in the context of its implementation, no part of this publication may
NOT BE REFERRED TO AS AN INTERNATIONAL
be reproduced or utilized otherwise in any form or by any means, electronic or mechanical, including photocopying, or posting on STANDARD UNTIL PUBLISHED AS SUCH.
the internet or an intranet, without prior written permission. Permission can be requested from either ISO at the address below
IN ADDITION TO THEIR EVALUATION AS
or ISO’s member body in the country of the requester. BEING ACCEPTABLE FOR INDUSTRIAL,
TECHNOLOGICAL, COMMERCIAL AND
ISO copyright office
USER PURPOSES, DRAFT INTERNATIONAL
CP 401 • Ch. de Blandonnet 8
STANDARDS MAY ON OCCASION HAVE TO
BE CONSIDERED IN THE LIGHT OF THEIR
CH-1214 Vernier, Geneva
POTENTIAL TO BECOME STANDARDS TO
Phone: +41 22 749 01 11
WHICH REFERENCE MAY BE MADE IN
Reference number
Email: copyright@iso.org
NATIONAL REGULATIONS.
Website: www.iso.org ISO/DIS 19014-1:2023(E)
RECIPIENTS OF THIS DRAFT ARE INVITED
Published in Switzerland
TO SUBMIT, WITH THEIR COMMENTS,
NOTIFICATION OF ANY RELEVANT PATENT
RIGHTS OF WHICH THEY ARE AWARE AND TO
ii
PROVIDE SUPPORTING DOCUMENTATION. © ISO 2023
oSIST prEN ISO 19014-1:2024
ISO/DIS 19014-1:2023(E)
Contents Page
Foreword .iv
Introduction . vi
1 Scope . 1
2 Normative references . 1
3 Terms and definitions . 1
4 Method to determine MPLr for SRP/CS of earth moving machinery .5
4.1 General . 5
4.1.1 Information for use . 5
4.2 Machine Control System Safety Analysis (MCSSA) method . 5
5 Requirements for immediate action warning indicators . 6
5.1 General . 6
6 Performance level determination procedures . 6
6.1 General . 6
6.2 Participants in the risk assessment . 6
6.3 Assessment and classification of a potential harm . 6
6.4 Assessment of exposure in the situation observed . 7
6.5 Assessment of a possibility to avoid harm . 7
6.6 Determining the required MPL . 9
Annex A (informative) Process flow chart for machinery risk assessment .11
Annex B (informative) Table of warning/operation indicators .13
Annex C (informative) List of possible safety control systems (SCS) of earth-moving
machines .15
Annex ZA (informative) Relationship between this document and the essential
requirements of EU Directive 2006/42/EC aimed to be covered .17
Bibliography .18
iii
oSIST prEN ISO 19014-1:2024
ISO/DIS 19014-1:2023(E)
Foreword
ISO (the International Organization for Standardization) is a worldwide federation of national standards
bodies (ISO member bodies). The work of preparing International Standards is normally carried out
through ISO technical committees. Each member body interested in a subject for which a technical
committee has been established has the right to be represented on that committee. International
organizations, governmental and non-governmental, in liaison with ISO, also take part in the work.
ISO collaborates closely with the International Electrotechnical Commission (IEC) on all matters of
electrotechnical standardization.
The procedures used to develop this document and those intended for its further maintenance are
described in the ISO/IEC Directives, Part 1. In particular, the different approval criteria needed for the
different types of ISO documents should be noted. This document was drafted in accordance with the
editorial rules of the ISO/IEC Directives, Part 2 (see w w w.iso.org/directives).
Attention is drawn to the possibility that some of the elements of this document may be the subject of
patent rights. ISO shall not be held responsible for identifying any or all such patent rights. Details of
any patent rights identified during the development of the document will be in the Introduction and/or
on the ISO list of patent declarations received (see w w w.iso.org/patents).
Any trade name used in this document is information given for the convenience of users and does not
constitute an endorsement.
For an explanation of the voluntary nature of standards, the meaning of ISO specific terms and
expressions related to conformity assessment, as well as information about ISO's adherence to
the World Trade Organization (WTO) principles in the Technical Barriers to Trade (TBT), see
http://www.iso.org/iso/foreword.html.
This document was prepared by Technical Committee ISO/TC 127, Earth-moving machinery,
Subcommittee SC 2, Safety, ergonomics and general requirements.
This first edition of ISO 19014-1, together with ISO 19014-2, ISO 19014-3, ISO 19014-4 and
ISO/ TS 19014-5, cancels and replaces ISO 15998 and ISO/TS 15998-2, which have been technically
revised.
The main changes compared to the previous documents are as follows:
—
— Detailed Annex ZA included;
— Referenced standards dated;
— The term “quality measure” is clarified.
— Wording, covering controllability when multiple actions are required to avoid a hazard, is improved;
— Notion of machine abuse added;
— Machine Control System Safety Analysis (MCSSA) process updated to reflect content of
ISO/TS 19014-5:2021;
— References to ISO/TS 19014-5:2021 made normative;
— Guide 78 requirements covering information for use added.
A list of all parts in the ISO 19014-series can be found on the ISO website. At the time of publication of
this document, Part 2, Design and evaluation of safety-related machine control systems, Part 4, Design and
evaluation of software and transmission for safety related parts of the control system, and Part 5, Tables of
performance levels, are under development.
iv
oSIST prEN ISO 19014-1:2024
ISO/DIS 19014-1:2023(E)
Any feedback or questions on this document should be directed to the user’s national standards body. A
complete listing of these bodies can be found at www.iso.org/members.html.
v
oSIST prEN ISO 19014-1:2024
ISO/DIS 19014-1:2023(E)
Introduction
This document addresses systems of all energy types used for functional safety in earth-moving
machinery.
The structure of safety standards in the field of machinery is as follows.
Type-A standards (basis standards) give basic concepts, principles for design and general aspects that
can be applied to machinery.
Type-B standards (generic safety standards) deal with one or more safety aspects, or one or more types
of safeguards that can be used across a wide range of machinery:
— type-B1 standards on particular safety aspects (e.g. safety distances, surface temperature, noise);
— type-B2 standards on safeguards (e.g. two-hands controls, interlocking devices, pressure sensitive
devices, guards).
Type-C standards (machinery safety standards) deal with detailed safety requirements for a particular
machine or group of machines.
This document is a type C standard as stated in ISO 12100.
This document is of relevance, in particular, for the following stakeholder groups representing the
market players with regard to machinery safety:
— machine manufacturers (small, medium and large enterprises);
— health and safety bodies (regulators, accident prevention organisations, market surveillance etc.).
Others can be affected by the level of machinery safety achieved with the means of the document by the
above-mentioned stakeholder groups:
— machine users/employers (small, medium and large enterprises);
— machine users/employees (e.g. trade unions, organizations for people with special needs);
— service providers, e. g. for maintenance (small, medium and large enterprises);
— consumers (in case of machinery intended for use by consumers).
The above-mentioned stakeholder groups have been given the possibility to participate at the drafting
process of this document.
The machinery concerned and the extent to which hazards, hazardous situations or hazardous events
are covered are indicated in the Scope of this document.
When requirements of this type-C standard are different from those which are stated in type-A or
type-B standards, the requirements of this type-C standard take precedence over the requirements of
the other standards for machines that have been designed and built according to the requirements of
this type-C standard.
vi
oSIST prEN ISO 19014-1:2024
DRAFT INTERNATIONAL STANDARD ISO/DIS 19014-1:2023(E)
Earth-moving machinery — Functional safety —
Part 1:
Methodology to determine safety-related parts of the
control system and performance requirements
1 Scope
This document provides a methodology for the determination of performance levels required for earth
moving machinery (EMM) as defined in ISO 6165.
A Machine Control System Safety Analysis (MCSSA) determines the amount of risk reduction of hazards
associated with control systems, required for Safety Control Systems (SCS). This reduction is quantified
by the Machine Performance Level (MPL), the hazards are identified using the risk assessment principles
as defined in ISO 12100 or by other means.
NOTE 1 Step 2 as shown in Annex A demonstrates the relationship between ISO 12100 and ISO 19014 as a
complementary protective measure.
NOTE 2 ISO 19014 can also be used to assess the functional safety requirements of other off-road mobile
machinery.
For those controls determined to be safety-related, the characteristics for architecture, hardware,
software environmental requirements and performance are covered by other parts in ISO 19014.
ISO 19014 covers the hazards caused by the failure of a safety control system and excludes hazards
arising from the equipment itself (for example, electric shock, fire, etc.).
Other controls that are not safety control systems (SCS), that do not mitigate a hazard or perform a
control function and where the operator would be aware of a failure, are excluded from this standard
(e.g. windscreen wipers, head lights, cab light, etc.).
NOTE 3 A list of safety control systems is included in Annex D.
NOTE 4 Audible warnings are excluded from the requirements of diagnostic coverage.
2 Normative references
The following documents are referred to in the text in such a way that some or all of their content
constitutes requirements of this document. For dated references, only the edition cited applies. For
undated references, the latest edition of the referenced document (including any amendments) applies.
ISO 6165:2012, Earth-moving machinery — Basic types — Identification and terms and definitions
ISO 12100:2010, Safety of machinery — General principles for design — Risk assessment and risk reduction
3 Terms and definitions
For the purposes of this document, the terms and definitions given in ISO 6165 and ISO 12100 and the
following apply.
ISO and IEC maintain terminological databases for use in standardization at the following addresses:
— IEC Electropedia: available at http:// www .electropedia .org/
oSIST prEN ISO 19014-1:2024
ISO/DIS 19014-1:2023(E)
— ISO Online browsing platform: available at http:// www .iso .org/ obp
3.1
Machine Performance Level
MPL
discrete level to specify the ability of safety-related parts of control systems (3.3.2) to perform a safety
function under reasonably foreseeable conditions
Note 1 to entry: The term MPL is used to describe the performance level required from a safety-related part of
a control system. The ‘M’ refers to machine and denotes Earth Moving Machinery covered by the scope of this
document and is used to differentiate from other functional safety standards (e.g. PL, AgPL, ASIL, etc.).
3.1.1
Machine Performance Level required
MPL
r
discrete level required as determined by processes in this document
3.1.2
Machine Performance Level achieved
MPL
a
discrete level achieved by the safety control systems (3.3.1) hardware, architecture and software
Note 1 to entry: Process for determination of MPLa will be covered in ISO 19014-2 and ISO 19014-4, under
development.
3.2
functional safety
part of the overall safety relating to the equipment under control and its control system that depends
on the correct functioning of the safety control system (SCS) (3.3.1) and other risk reduction measures
[SOURCE: IEC 61508-4:2010, 3.1.12, modified]
3.3
machine control system
MCS
system which responds to input signals from parts of machine elements, operators (3.4.1), external
control equipment or any combination of these and generates output signals causing the machine to
behave in the intended manner
[SOURCE: ISO 13849-1:2015, 3.1.32]
3.3.1
safety control system
SCS
sub-system or system used by a MCS (3.3) to achieve functional safety (3.2) by affecting machine
behaviour or mitigating a hazard
Note 1 to entry: A system which can fail in a way that creates a hazard is considered a SCS.
Note 2 to entry: For example, SCS for propulsion may include throttle, gear shift, start/stop, etc.
3.3.2
safety-related part of the control system
SRP/CS
part of a SCS (3.3.1) that responds to safety-related input signals and generates safety-related output
signals
Note 1 to entry: The combined safety-related parts of a control system start at the point where the safety-related
input signals are initiated (including, for example, the actuating cam and the roller of the position switch) and
end at the output of the power control elements (including, for example, the main contacts of a contactor).
Note 2 to entry: If monitoring systems are used for diagnostic coverage, they are also considered as SRP/CS.
oSIST prEN ISO 19014-1:2024
ISO/DIS 19014-1:2023(E)
Note 3 to entry: SRP/CS is a part or component within the specific MCS.
[SOURCE: ISO 13849-1:2015, 3.1.1, modified - Note 3 to entry has been added.]
3.4
person group
groups of people analyzed in the MCSSA (3.14)
3.4.1
operator
person operating the EMM and aware of associated risks or hazards
3.4.2
co-worker
person working in the vicinity of a machine and aware of associated hazards
3.4.3
bystander
person including non-employee, child, or member of the public with little or no awareness of machine
hazards and no training
3.4.4
maintainer
person whose function is to perform maintenan
...