EN 61069-6:2016

SLOVENSKI STANDARD
01-marec-2017
1DGRPHãþD
SIST EN 61069-6:1998
Meritve, krmiljenje in avtomatizacija v industrijskih procesih - Ocenjevanje
lastnosti sistema zaradi njegovega vrednotenja - 6. del: Vrednotenje operativnosti
sistema (IEC 61069-6:2016)
Industrial-process measurement, control and automation - Evaluation of system
properties for the purpose of system assessment - Part 6: Assessment of system
operability (IEC 61069-6:2016)
Leittechnik für industrielle Prozesse - Ermittlung der Systemeigenschaften zum Zweck
der Eignungsbeurteilung eines Systems - Teil 6: Eignungsbeurteilung der
Systembedienbarkeit (IEC 61069-6:2016)
Mesure, commande et automation dans les processus industriels - Appréciation des
propriétés d'un sytème en vue de son évaluation - Partie 6: Evaluation de l'opérabilité
d'un système (IEC 61069-6:2016)
Ta slovenski standard je istoveten z: EN 61069-6:2016
ICS:
25.040.40 Merjenje in krmiljenje Industrial process
industrijskih postopkov measurement and control
2003-01.Slovenski inštitut za standardizacijo. Razmnoževanje celote ali delov tega standarda ni dovoljeno.

EUROPEAN STANDARD EN 61069-6
NORME EUROPÉENNE
EUROPÄISCHE NORM
September 2016
ICS 25.040.40 Supersedes EN 61069-6:1998
English Version
Industrial-process measurement, control and automation -
Evaluation of system properties for the purpose of system
assessment - Part 6: Assessment of system operability
(IEC 61069-6:2016)
Mesure, commande et automation dans les processus Leittechnik für industrielle Prozesse - Ermittlung der
industriels - Appréciation des propriétés d'un sytème en vue Systemeigenschaften zum Zweck der Eignungsbeurteilung
de son évaluation - Partie 6: Evaluation de l'opérabilité d'un eines Systems - Teil 6: Eignungsbeurteilung der
système Systembedienbarkeit
(IEC 61069-6:2016) (IEC 61069-6:2016)
This European Standard was approved by CENELEC on 2016-07-20. CENELEC members are bound to comply with the CEN/CENELEC
Internal Regulations which stipulate the conditions for giving this European Standard the status of a national standard without any alteration.
Up-to-date lists and bibliographical references concerning such national standards may be obtained on application to the CEN-CENELEC
Management Centre or to any CENELEC member.
This European Standard exists in three official versions (English, French, German). A version in any other language made by translation
under the responsibility of a CENELEC member into its own language and notified to the CEN-CENELEC Management Centre has the
same status as the official versions.
CENELEC members are the national electrotechnical committees of Austria, Belgium, Bulgaria, Croatia, Cyprus, the Czech Republic,
Denmark, Estonia, Finland, Former Yugoslav Republic of Macedonia, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia,
Lithuania, Luxembourg, Malta, the Netherlands, Norway, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, Sweden, Switzerland,
Turkey and the United Kingdom.

European Committee for Electrotechnical Standardization
Comité Européen de Normalisation Electrotechnique
Europäisches Komitee für Elektrotechnische Normung
CEN-CENELEC Management Centre: Avenue Marnix 17, B-1000 Brussels
© 2016 CENELEC All rights of exploitation in any form and by any means reserved worldwide for CENELEC Members.
Ref. No. EN 61069-6:2016 E
European foreword
The text of document 65A/794/FDIS, future edition 2 of IEC 61069-6, prepared by SC 65A "System
aspects", of IEC/TC 65 "Industrial-process measurement, control and automation" was submitted to
the IEC-CENELEC parallel vote and approved by CENELEC as EN 61069-6:2016.
The following dates are fixed:
(dop) 2017-04-20
• latest date by which the document has to be implemented at
national level by publication of an identical national
standard or by endorsement
(dow) 2019-07-20
• latest date by which the national standards conflicting with
the document have to be withdrawn

This document supersedes EN 61069-6:1998.
Attention is drawn to the possibility that some of the elements of this document may be the subject of
patent rights. CENELEC [and/or CEN] shall not be held responsible for identifying any or all such
patent rights.
Endorsement notice
The text of the International Standard IEC 61069-6:2016 was approved by CENELEC as a European
Standard without any modification.
In the official version, for Bibliography, the following notes have to be added for the standards indicated:
1)
IEC 61069-3:2016 NOTE Harmonized as EN 61069-3:201X (not modified).
1)
IEC 61069-4:2016 NOTE Harmonized as EN 61069-4:201X (not modified).
IEC 61069-8 NOTE Harmonized as EN 61069-8.
IEC/TS 62603-1 NOTE Harmonized as CLC/TS 62603-1.
ISO 6385 NOTE Harmonized as EN ISO 6385.
ISO 9241-10 NOTE Harmonized as EN ISO 9241-10.
ISO 10075-1 NOTE Harmonized as EN ISO 10075-1.
ISO 10075-2 NOTE Harmonized as EN ISO 10075-2.
ISO 11064-1 NOTE Harmonized as EN ISO 11064-1.
ISO 11064-7 NOTE Harmonized as EN ISO 11064-7.

1) To be published.
Annex ZA
(normative)
Normative references to international publications
with their corresponding European publications
The following documents, in whole or in part, are normatively referenced in this document and are
indispensable for its application. For dated references, only the edition cited applies. For undated
references, the latest edition of the referenced document (including any amendments) applies.
NOTE 1 When an International Publication has been modified by common modifications, indicated by (mod),
the relevant EN/HD applies.
NOTE 2 Up-to-date information on the latest versions of the European Standards listed in this annex is
available here: www.cenelec.eu.

Publication Year Title EN/HD Year
2)
IEC 61069-1 2016 Industrial-process measurement, control EN 61069-1 201X
and automation - Evaluation of system
properties for the purpose of system
assessment -
Part 1: Terminology and basic concepts
2)
IEC 61069-2 2016 Industrial-process measurement, control EN 61069-2 201X
and automation - Evaluation of system
properties for the purpose of system
assessment -
Part 2: Assessment methodology

2) To be published.
IEC 61069-6 ®
Edition 2.0 2016-06
INTERNATIONAL
STANDARD
NORME
INTERNATIONALE
colour
inside
Industrial-process measurement, control and automation – Evaluation of system

properties for the purpose of system assessment –

Part 6: Assessment of system operability

Mesure, commande et automation dans les processus industriels – Appréciation

des propriétés d'un système en vue de son évaluation –

Partie 6: Évaluation de l’opérabilité d'un système

INTERNATIONAL
ELECTROTECHNICAL
COMMISSION
COMMISSION
ELECTROTECHNIQUE
INTERNATIONALE
ICS 25.040.40 ISBN 978-2-8322-3448-8

– 2 – IEC 61069-6:2016 © IEC 2016
CONTENTS
FOREWORD . 4
INTRODUCTION . 6
1 Scope . 8
2 Normative references. 8
3 Terms, definitions, abbreviated terms, acronyms, conventions and symbols . 8
3.1 Terms and definitions . 8
3.2 Abbreviated terms, acronyms, conventions and symbols . 8
4 Basis of assessment specific to operability . 8
4.1 Operability properties . 8
4.1.1 General . 8
4.1.2 Efficiency . 10
4.1.3 Intuitiveness . 10
4.1.4 Transparency . 11
4.1.5 Robustness . 11
4.2 Factors influencing operability . 12
5 Assessment method . 12
5.1 General . 12
5.2 Defining the objective of the assessment . 12
5.3 Design and layout of the assessment . 12
5.4 Planning of the assessment program . 13
5.5 Execution of the assessment . 13
5.6 Reporting of the assessment . 13
6 Evaluation techniques . 14
6.1 General . 14
6.2 Analytical evaluation techniques . 15
6.2.1 General . 15
6.2.2 Efficiency . 15
6.2.3 Intuitiveness . 15
6.2.4 Transparency . 16
6.2.5 Robustness . 16
6.3 Empirical evaluation techniques. 16
6.3.1 General . 16
6.3.2 Efficiency . 16
6.3.3 Intuitiveness . 16
6.3.4 Transparency . 17
6.3.5 Robustness . 17
6.4 Additional topics for evaluation techniques . 17
Annex A (informative) Checklist and/or example of SRD for system operability . 18
A.1 General . 18
A.2 Factors resulting from the industrial process itself . 18
A.3 Factors related with the task of the operators, their frequency, percentage of
time spent, required number of actions, etc. . 19
A.4 Factors due to the control strategy required . 19
A.5 Factors concerning the human-machine interface design . 20
A.6 Influence of the workplace on the operability requirements . 20
A.7 General human factors . 21

IEC 61069-6:2016 © IEC 2016 – 3 –
Annex B (informative) Checklist and/or example of SSD for system operability . 22
B.1 SSD information . 22
B.2 Check points for system operability . 22
Annex C (informative) Example of a list of assessment items (information from
IEC TS 62603-1) . 23
C.1 Overview. 23
C.2 Operability properties of Human Machine Interface (HMI) . 23
C.2.1 General . 23
C.2.2 Control room HMI hardware – system configuration . 23
C.2.3 Control room HMI hardware – machines . 23
C.2.4 Control room HMI hardware – monitors . 24
C.2.5 Control room HMI hardware – special displays . 24
C.2.6 Control room HMI software . 24
C.2.7 Requirements for Local Operator Interface . 25
C.2.8 BPCS localisation . 25
Annex D (informative) Phase of a system life cycle . 26
Bibliography . 27

Figure 1 – General layout of IEC 61069 . 7
Figure 2 – Operability . 10

Table D.1 – Phases of a system life cycle . 26

– 4 – IEC 61069-6:2016 © IEC 2016
INTERNATIONAL ELECTROTECHNICAL COMMISSION
____________
INDUSTRIAL-PROCESS MEASUREMENT, CONTROL AND AUTOMATION –
EVALUATION OF SYSTEM PROPERTIES FOR
THE PURPOSEOF SYSTEM ASSESSMENT –

Part 6: Assessment of system operability

FOREWORD
1) The International Electrotechnical Commission (IEC) is a worldwide organization for standardization comprising
all national electrotechnical committees (IEC National Committees). The object of IEC is to promote
international co-operation on all questions concerning standardization in the electrical and electronic fields. To
this end and in addition to other activities, IEC publishes International Standards, Technical Specifications,
Technical Reports, Publicly Available Specifications (PAS) and Guides (hereafter referred to as “IEC
Publication(s)”). Their preparation is entrusted to technical committees; any IEC National Committee interested
in the subject dealt with may participate in this preparatory work. International, governmental and non-
governmental organizations liaising with the IEC also participate in this preparation. IEC collaborates closely
with the International Organization for Standardization (ISO) in accordance with conditions determined by
agreement between the two organizations.
2) The formal decisions or agreements of IEC on technical matters express, as nearly as possible, an international
consensus of opinion on the relevant subjects since each technical committee has representation from all
interested IEC National Committees.
3) IEC Publications have the form of recommendations for international use and are accepted by IEC National
Committees in that sense. While all reasonable efforts are made to ensure that the technical content of IEC
Publications is accurate, IEC cannot be held responsible for the way in which they are used or for any
misinterpretation by any end user.
4) In order to promote international uniformity, IEC National Committees undertake to apply IEC Publications
transparently to the maximum extent possible in their national and regional publications. Any divergence
between any IEC Publication and the corresponding national or regional publication shall be clearly indicated in
the latter.
5) IEC itself does not provide any attestation of conformity. Independent certification bodies provide conformity
assessment services and, in some areas, access to IEC marks of conformity. IEC is not responsible for any
services carried out by independent certification bodies.
6) All users should ensure that they have the latest edition of this publication.
7) No liability shall attach to IEC or its directors, employees, servants or agents including individual experts and
members of its technical committees and IEC National Committees for any personal injury, property damage or
other damage of any nature whatsoever, whether direct or indirect, or for costs (including legal fees) and
expenses arising out of the publication, use of, or reliance upon, this IEC Publication or any other IEC
Publications.
8) Attention is drawn to the Normative references cited in this publication. Use of the referenced publications is
indispensable for the correct application of this publication.
9) Attention is drawn to the possibility that some of the elements of this IEC Publication may be the subject of
patent rights. IEC shall not be held responsible for identifying any or all such patent rights.
International Standard IEC 61069-6 has been prepared by subcommittee 65A: System
aspects, of IEC technical committee 65: Industrial-process measurement, control and
automation.
This second edition cancels and replaces the first edition published in 1998. This edition
constitutes a technical revision.
This edition includes the following significant technical changes with respect to the previous
edition:
a) reorganization of the material of IEC 61069-6:1998 to make the overall set of standards
more organized and consistent;
b) IEC TS 62603-1 has been incorporated into this edition.

IEC 61069-6:2016 © IEC 2016 – 5 –
The text of this standard is based on the following documents:
FDIS Report on voting
65A/794/FDIS 65A/804/RVD
Full information on the voting for the approval of this standard can be found in the report on
voting indicated in the above table.
This publication has been drafted in accordance with the ISO/IEC Directives, Part 2.
A list of all parts in the IEC 61069 series, published under the general title Industrial-process
measurement, control and automation – Evaluation of system properties for the purpose of
system assessment, can be found on the IEC website.
The committee has decided that the contents of this publication will remain unchanged until
the stability date indicated on the IEC web site under "http://webstore.iec.ch" in the data
related to the specific publication. At this date, the publication will be
• reconfirmed,
• withdrawn,
• replaced by a revised edition, or
• amended.
IMPORTANT – The 'colour inside' logo on the cover page of this publication indicates
that it contains colours which are considered to be useful for the correct
understanding of its contents. Users should therefore print this document using a
colour printer.
– 6 – IEC 61069-6:2016 © IEC 2016
INTRODUCTION
IEC 61069 deals with the method which should be used to assess system properties of a
basic control system (BCS). IEC 61069 consists of the following parts.
Part 1: Terminology and basic concepts
Part 2: Assessment methodology
Part 3: Assessment of system functionality
Part 4: Assessment of system performance
Part 5: Assessment of system dependability
Part 6: Assessment of system operability
Part 7: Assessment of system safety
Part 8: Assessment of other system properties
Assessment of a system is the judgement, based on evidence, of the suitability of the system
for a specific mission or class of missions.
To obtain total evidence would require complete evaluation (for example under all influencing
factors) of all system properties relevant to the specific mission or class of missions.
Since this is rarely practical, the rationale on which an assessment of a system should be
based is:
– the identification of the importance of each of the relevant system properties;
– the planning for evaluation of the relevant system properties with a cost-effective
dedication of effort to the various system properties.
In conducting an assessment of a system, it is crucial to bear in mind the need to gain a
maximum increase in confidence in the suitability of a system within practical cost and time
constraints.
An assessment can only be carried out if a mission has been stated (or given), or if any
mission can be hypothesized. In the absence of a mission, no assessment can be made;
however, evaluations can still be specified and carried out for use in assessments performed
by others. In such cases, IEC 61069 can be used as a guide for planning an evaluation and it
provides methods for performing evaluations, since evaluations are an integral part of
assessment.
In preparing the assessment, it can be discovered that the definition of the system is too
narrow. For example, a facility with two or more revisions of the control systems sharing
resources, for example a network, should consider issues of co-existence and inter-operability.
In this case, the system to be investigated should not be limited to the “new” BCS; it should
include both. That is, it should change the boundaries of the system to include enough of the
other system to address these concerns.
The series structure and the relationship among the parts of IEC 61069 are shown in Figure 1.

IEC 61069-6:2016 © IEC 2016 – 7 –
IEC 61069: Industrial-process measurement, control and automation –
Evaluation of system properties for the purpose of system assessment
Part 1: Terminology and basic concepts
• Basic concept
• Terminology ‐ Objective
‐ Common terms ‐ Description of system
‐ Terms for particular part ‐ System properties
‐ Influencing factors
Part 2: Assessment methodology
• Generic requirements of procedure of assessment
‐ Overview, approach and phases
‐ Requirements for each phase
‐ General description of evaluation techniques
Parts 3 to 8: Assessment of each system property
• Basics of assessment specific to each property
‐ Properties and influencing factors
• Assessment method for each property
• Evaluation techniques for each property

IEC
Figure 1 – General layout of IEC 61069
Some example assessment items are integrated in Annex C.

– 8 – IEC 61069-6:2016 © IEC 2016
INDUSTRIAL-PROCESS MEASUREMENT, CONTROL AND AUTOMATION –
EVALUATION OF SYSTEM PROPERTIES FOR
THE PURPOSEOF SYSTEM ASSESSMENT –

Part 6: Assessment of system operability

1 Scope
This part of IEC 61069:
– specifies the detailed method of the assessment of operability of basic control system
(BCS), based on the basic concepts of IEC 61069-1 and methodology of IEC 61069-2;
– defines basic categorization of operability properties;
– describes the factors that influence operability and which need to be taken into account
when evaluating operability;
– provides guidance in selecting techniques from a set of options (with references) for
evaluating the operability.
2 Normative references
The following documents, in whole or in part, are normatively referenced in this document and
are indispensable for its application. For dated references, only the edition cited applies. For
undated references, the latest edition of the referenced document (including any
amendments) applies.
IEC 61069-1:2016, Industrial-process measurement, control and automation – Evaluation of
system properties for the purpose of system assessment – Part 1: Terminology and basic
concepts
IEC 61069-2:2016, Industrial-process measurement, control and automation – Evaluation of
system properties for the purpose of system assessment – Part 2: Assessment methodology
3 Terms, definitions, abbreviated terms, acronyms, conventions and symbols
3.1 Terms and definitions
For the purposes of this document, the terms and definitions given in IEC 61069-1 apply.
3.2 Abbreviated terms, acronyms, conventions and symbols
For the purposes of this document, the abbreviated terms, acronyms, conventions and
symbols given in IEC 61069-1 the following apply.
4 Basis of assessment specific to operability
4.1 Operability properties
4.1.1 General
For a system to be operable the system provides the operator with a transparent and
consistent window into the tasks to be performed, through its human-machine interface. The
extent to which means for interaction with these tasks provided by the system are efficient,

IEC 61069-6:2016 © IEC 2016 – 9 –
intuitive, transparent and robust interaction can be expressed by the operability system
property.
The human-machine interface functions are part of the system and enable the operator to
monitor and manipulate the system itself, the external systems and the process.
The requirements for operability are strongly affected by the skill and knowhow of the
personnel operating the system.
The degree of the operability system property varies depending on the phases of the system
mission during its life cycle.
Operability requirements can differ between these phases of the life cycle of the system. They
depend upon the tasks to be performed during the phase and the duration of the phase.
The operability requirements can be high where the duration of a phase is short and its
relevance for the system mission critical. The requirements can be low where the duration of
a phase is long, so that sequences of required actions for certain operations can be learnt by
the operator over the long term the system is used.
In the assessment of operability, one is concerned with the way which information given by
the operator to the system (such as commands and requests), is processed by the system.
Additionally, one is concerned with the transparency of information coming from the system to
the operator, such as process/system state and values, trends, reports, etc.
While special operability measures are sometimes needed during the design and/or
maintenance phases of the system, the operability requirements are mostly understood as
those necessary during the operational phase of an industrial process plant.
All phases of life cycle of the system should be taken into account for evaluation of system
operability properties. During each phase the system will typically be operated by a different
group of operators, with different operability requirements.
In addition, planned, unplanned and disturbed plant operation might need different operating
schemes and hence operability requirements.
Annex D shows the various phases, the operator(s) using the system during these phases,
their typical tasks and the type of interfaces utilized.
The perception of the operability system property is strongly affected by the performance
system property (especially speed of response) and the functionality system property.
Operability properties are categorized as shown in Figure 2.

– 10 – IEC 61069-6:2016 © IEC 2016
Operability
Efficiency Intuitiveness Transparency Robustness

IEC
Figure 2 – Operability
Operability cannot be assessed directly and cannot be described by a single property.
Operability can only be determined by analysis and testing of each of the operability
properties individually
Some aspects can be quantified by analysing the ergonomic aspects of the properties, and by
measuring the number of actions and time required to accomplish a given task (the efficiency
of the human-machine interface), others can be qualified in a descriptive way.
Efficiency, intuitiveness, transparency and robustness each cannot be quantified as a single
number. However they can be expressed by a qualitative description containing some
quantified elements, such as:
– a coverage factor, obtained by comparing the operating means provided by the system
with the specific requirements as stated in the system requirements document;
– applicable ergonomic standards; and
– the time required to give a command, and to request information.
4.1.2 Efficiency
A system has operability efficiency if it allows the operator, with a minimum risk of making
errors, to perform his task(s) with a minimum amount of mental and physical effort within an
acceptable time frame.
The extent to which the operating means provided by the system minimise operator time and
effort required in using the system to accomplish his tasks within stated constraints is a
measure of the operability efficiency of the system.
The operability efficiency depends, among others, on the following elements:
– the ergonomic design of the devices (keyboard, mouse, voice input, dedicated knobs,
screens, indicators, etc.) used as operating means in support of the human-machine
interface;
– the geographical lay-out, the number of these devices and their relative location on the
operators’ workplace;
– the shape of the operators’ workplace;
– the limitations imposed by the operating environment and protective clothing (indoor,
outdoor, day, night, goggles, gloves, etc.);
– the methods to be used to retrieve information, to issue commands, etc.
4.1.3 Intuitiveness
Intuitiveness represents the simplicity and instant understanding the system provides, which
enables the operators to give commands and present information to the operators.
Additionally intuitiveness takes into account the skills, educational level and general culture of
the operators, who are performing tasks, by using the functions provided by the system.

IEC 61069-6:2016 © IEC 2016 – 11 –
The degree to which the operational means are consistent with common working practices is
a measure of the operability intuitiveness of the system.
The operability intuitiveness depends on the following factors:
– the extent to which standard generic rules and methods for the operation of “action” items
are followed;
– the conventions followed to present information to the operator, for example red for
emergency conditions, etc.;
– the conventions followed to give commands, for example turning a knob clockwise to
increase a value, etc.
Unlike other operability properties, intuitiveness is not a totally inherent property of the
system. Some of the intuitiveness can depend on the particular user domain.
This domain can be defined in terms of culture, international and/or proprietary standards, etc.
4.1.4 Transparency
Transparency represents the ability, of the operating means provided by the system, to
seemingly place the operator in direct contact with his tasks. This enables the operator to give
commands and view information, returned from the system, with a realistic view of the actions
(and their sequence).
The extent to which these means are provided is a measure of the transp
...