SIST EN 61800-5-2:2017

SLOVENSKI STANDARD
01-junij-2017
1DGRPHãþD
SIST EN 61800-5-2:2008
(OHNWULþQLSRJRQVNLVLVWHPL]QDVWDYOMLYRKLWURVWMRGHO9DUQRVWQH]DKWHYH
)XQNFLMVNH,(&
Adjustable speed electrical power drive systems - Part 5-2: Safety requirements -
Functional (IEC 61800-5-2:2016)
Elektrische Leistungsantriebssysteme mit einstellbarer Drehzahl - Teil 5-2:
Anforderungen an die Sicherheit - Funktionale Sicherheit (IEC 61800-5-2:2016)
Entraînements électriques de puissance à vitesse variable - Partie 5-2: Exigences de
sécurité - Fonctionnelle (IEC 61800-5-2:2016)
Ta slovenski standard je istoveten z: EN 61800-5-2:2017
ICS:
13.110 Varnost strojev Safety of machinery
29.200 8VPHUQLNL3UHWYRUQLNL Rectifiers. Convertors.
6WDELOL]LUDQRHOHNWULþQR Stabilized power supply
QDSDMDQMH
2003-01.Slovenski inštitut za standardizacijo. Razmnoževanje celote ali delov tega standarda ni dovoljeno.

EUROPEAN STANDARD EN 61800-5-2

NORME EUROPÉENNE
EUROPÄISCHE NORM
April 2017
ICS 13.110; 29.200 Supersedes EN 61800-5-2:2007
English Version
Adjustable speed electrical power drive systems - Part 5-2:
Safety requirements - Functional
(IEC 61800-5-2:2016)
Entraînements électriques de puissance à vitesse variable - Elektrische Leistungsantriebssysteme mit einstellbarer
Partie 5-2: Exigences de sécurité - Fonctionnelle Drehzahl - Teil 5-2: Anforderungen an die Sicherheit -
(IEC 61800-5-2:2016) Funktionale Sicherheit
(IEC 61800-5-2:2016)
This European Standard was approved by CENELEC on 2016-05-23. CENELEC members are bound to comply with the CEN/CENELEC
Internal Regulations which stipulate the conditions for giving this European Standard the status of a national standard without any alteration.
Up-to-date lists and bibliographical references concerning such national standards may be obtained on application to the CEN-CENELEC
Management Centre or to any CENELEC member.
This European Standard exists in three official versions (English, French, German). A version in any other language made by translation
under the responsibility of a CENELEC member into its own language and notified to the CEN-CENELEC Management Centre has the
same status as the official versions.
CENELEC members are the national electrotechnical committees of Austria, Belgium, Bulgaria, Croatia, Cyprus, the Czech Republic,
Denmark, Estonia, Finland, Former Yugoslav Republic of Macedonia, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia,
Lithuania, Luxembourg, Malta, the Netherlands, Norway, Poland, Portugal, Romania, Serbia, Slovakia, Slovenia, Spain, Sweden,
Switzerland, Turkey and the United Kingdom.

European Committee for Electrotechnical Standardization
Comité Européen de Normalisation Electrotechnique
Europäisches Komitee für Elektrotechnische Normung
CEN-CENELEC Management Centre: Avenue Marnix 17, B-1000 Brussels
© 2017 CENELEC All rights of exploitation in any form and by any means reserved worldwide for CENELEC Members.
Ref. No. EN 61800-5-2:2017 E
European foreword
The text of document 22G/332/FDIS, future edition 2 of IEC 61800-5-2, prepared by
SC 22G “Adjustable speed electric drive systems incorporating semiconductor power converters” of
IEC/TC 22 “Power electronic systems and equipment" was submitted to the IEC-CENELEC parallel
vote and approved by CENELEC as EN 61800-5-2:2017.

The following dates are fixed:
(dop)
• latest date by which the document has to be 2017-10-28
implemented at national level by
publication of an identical national
standard or by endorsement
(dow)
• latest date by which the national 2020-04-28
standards conflicting with the
document have to be withdrawn
This document supersedes EN 61800-5-2:2007.

Attention is drawn to the possibility that some of the elements of this document may be the subject of
patent rights. CENELEC [and/or CEN] shall not be held responsible for identifying any or all such
patent rights.
This document has been prepared under a mandate given to CENELEC by the European Commission
and the European Free Trade Association.

Endorsement notice
The text of the International Standard IEC 61800-5-2:2016 was approved by CENELEC as a
European Standard without any modification.
In the official version, for Bibliography, the following notes have to be added for the standards indicated:

IEC 60300-3-1:2003 NOTE Harmonized as 60300-3-1:2003.
IEC 60664-1:2007 NOTE Harmonized as EN 60664-1:2007.
IEC 606643 NOTE Harmonized as EN 60664-3.
IEC 61025 NOTE Harmonized as EN 61025.
IEC 61078 NOTE Harmonized as EN 61078.
IEC 61165 NOTE Harmonized as EN 61165.
IEC 61508-4:2010 NOTE Harmonized as EN 61508-4:2010.
IEC 61508-5:2010 NOTE Harmonized as EN 61508-5:2010.
IEC 61511 (series) NOTE Harmonized as EN 61511 (series).
IEC 61511-1 NOTE Harmonized as EN 61511-1.
IEC 61513 NOTE Harmonized as EN 61513.
IEC 61558 (series) NOTE Harmonized as EN 61558 (series).
IEC 61558-1:2005 NOTE Harmonized as EN 61558-1:2005.
IEC 61558-1:2005/AMD1:2009 NOTE Harmonized as EN 61558-1:2005/A1:2009.
IEC 61784-3 NOTE Harmonized as EN 61784-3.
IEC 62061 NOTE Harmonized as EN 62061.
ISO 13849-2 NOTE Harmonized as EN ISO 13849-2.

Annex ZA
(normative)
Normative references to international publications
with their corresponding European publications
The following documents, in whole or in part, are normatively referenced in this document and are
indispensable for its application. For dated references, only the edition cited applies. For undated
references, the latest edition of the referenced document (including any amendments) applies.
NOTE 1 When an International Publication has been modified by common modifications, indicated by (mod), the relevant

EN/HD applies.
NOTE 2 Up-to-date information on the latest versions of the European Standards listed in this annex is available here:
www.cenelec.eu.
Publication Year Title EN/HD Year
IEC 60204-1 -  Safety of machinery - Electrical equipment EN 60204-1 -
of machines -- Part 1: General
requirements
IEC 61000-2-4 2002 Electromagnetic compatibility (EMC) -- Part EN 61000-2-4 2002
2-4: Environment - Compatibility levels in
industrial plants for low-frequency
conducted disturbances
IEC 61000-4-2 2008 Electromagnetic compatibility (EMC) -- Part EN 61000-4-2 2009
4-2: Testing and measurement techniques
- Electrostatic discharge immunity test
IEC 61000-4-3 2006 Electromagnetic compatibility (EMC) -- Part EN 61000-4-3 2006
4-3: Testing and measurement techniques
- Radiated, radio-frequency,
electromagnetic field immunity test
+ A1 2007  + A1 2008
+ A2 2010  + A2 2010
IEC 61000-4-4 2012 Electromagnetic compatibility (EMC) -- Part EN 61000-4-4 2012
4-4: Testing and measurement techniques
- Electrical fast transient/burst immunity
test
IEC 61000-4-5 2014 Electromagnetic compatibility (EMC) - Part EN 61000-4-5 2014
4-5: Testing and measurement techniques
- Surge immunity test
IEC 61000-4-6 2013 Electromagnetic compatibility (EMC) -- Part EN 61000-4-6 2014
4-6: Testing and measurement techniques
- Immunity to conducted disturbances,
induced by radio-frequency fields
IEC 61000-4-29 2000 Electromagnetic compatibility (EMC) -- Part EN 61000-4-29 2000
4-29: Testing and measurement
techniques - Voltage dips, short
interruptions and voltage variations on d.c.
input power port immunity tests
IEC 61000-4-34 2005 Electromagnetic compatibility (EMC) -- Part EN 61000-4-34 2007
4-34: Testing and measurement
techniques - Voltage dips, short
interruptions and voltage variations
immunity tests for equipment with input
current more than 16 A per phase
IEC 61000-6-7 2014 Electromagnetic compatibility (EMC) - Part EN 61000-6-7 2015
6-7: Generic standards - Immunity
requirements for equipment intended to
perform functions in a safety-related
system (functional safety) in industrial
locations
IEC 61400-21 2008 Wind turbines -- Part 21: Measurement and EN 61400-21 2008
assessment of power quality
characteristics of grid connected wind
turbines
IEC 61508-1 2010 Functional safety of EN 61508-1 2010
electrical/electronic/programmable
electronic safety-related systems -- Part 1:
General requirements
IEC 61508-2 2010 Functional safety of EN 61508-2 2010
electrical/electronic/programmable
electronic safety-related systems -- Part 2:
Requirements for
electrical/electronic/programmable
electronic safety-related systems
IEC 61508-3 2010 Functional safety of EN 61508-3 2010
electrical/electronic/programmable
electronic safety-related systems -- Part 3:
Software requirements
IEC 61508-6 2010 Functional safety of EN 61508-6 2010
electrical/electronic/programmable
electronic safety-related systems -- Part 6:
Guidelines on the application of IEC
61508-2 and IEC 61508-3
IEC 61508-7 2010 Functional safety of EN 61508-7 2010
electrical/electronic/programmable
electronic safety-related systems -- Part 7:
Overview of techniques and measures
IEC 61800-1 -  Adjustable speed electrical power drive EN 61800-1 -
systems -- Part 1: General requirements -
Rating specifications for low voltage
adjustable speed d.c. power drive systems
IEC 61800-2 2015 Adjustable speed electrical power drive EN 61800-2 2015
systems -- Part 2: General requirements -
Rating specifications for low voltage
adjustable speed a.c. power drive systems
IEC 61800-3 2004 Adjustable speed electrical power drive EN 61800-3 2004
systems -- Part 3: EMC requirements and
specific test methods
IEC 61800-4 -  Adjustable speed electrical power drive EN 61800-4 -
systems -- Part 4: General requirements -
Rating specifications for a.c. power drive
systems above 1 000 V a.c. and not
exceeding 35 kV
IEC 61800-5-1 2007 Adjustable speed electrical power drive EN 61800-5-1 2007
systems - Part 5-1: Safety requirements -
Electrical, thermal and energy
ISO 13849-1 2006 Safety of machinery - Safety-related parts - -
of control systems -- Part 1: General
principles for design
ISO 13849-2 2012 Safety of machinery - Safety-related parts EN ISO 13849-2 2012
of control systems_- Part_2: Validation

IEC 61800-5-2 ®
Edition 2.0 2016-04
INTERNATIONAL
STANDARD
NORME
INTERNATIONALE
colour
inside
Adjustable speed electrical power drive systems –

Part 5-2: Safety requirements – Functional

Entraînements électriques de puissance à vitesse variable –

Partie 5-2: Exigences de sécurité – Fonctionnelle

INTERNATIONAL
ELECTROTECHNICAL
COMMISSION
COMMISSION
ELECTROTECHNIQUE
INTERNATIONALE
ICS 13.110; 29.200 ISBN 978-2-8322-3302-3

– 2 – IEC 61800-5-2:2016 © IEC 2016
CONTENTS
FOREWORD . 6
INTRODUCTION . 8
1 Scope . 9
2 Normative references. 10
3 Terms and definitions . 12
4 Designated safety sub-functions . 18
4.1 General . 18
4.2 Safety sub-functions . 19
4.2.1 General . 19
4.2.2 Limit values . 20
4.2.3 Stopping functions . 20
4.2.4 Monitoring functions . 21
4.2.5 Output functions – Safe brake control (SBC) . 23
5 Management of functional safety . 23
5.1 Objective . 23
5.2 Requirements for the management of functional safety . 23
5.3 PDS(SR) development lifecycle . 23
5.4 Planning of PDS(SR) functional safety management . 24
5.5 Safety requirements specification (SRS) for a PDS(SR) . 26
5.5.1 General . 26
5.5.2 Safety sub-functions requirements specification . 26
5.5.3 Safety integrity requirements specification . 27
5.6 PDS(SR) safety system architecture specification . 28
5.6.1 General . 28
5.6.2 Requirements for safety system architecture specification . 28
6 Requirements for design and development of a PDS(SR) . 29
6.1 General requirements . 29
6.1.1 Change in operational status . 29
6.1.2 Design standards . 29
6.1.3 Realisation . 29
6.1.4 Safety integrity and fault detection . 29
6.1.5 Safety and non-safety sub-functions . 30
6.1.6 SIL for multiple safety sub-functions within one PDS(SR) . 30
6.1.7 Integrated circuits with on-chip redundancy . 31
6.1.8 Software requirements . 31
6.1.9 Design documentation . 31
6.2 PDS(SR) design requirements . 31
6.2.1 Basic and well-tried safety principles . 31
6.2.2 Requirements for the estimation of the probability of dangerous random
hardware failures per hour (PFH). 31
6.2.3 Architectural constraints . 34
6.2.4 Estimation of safe failure fraction (SFF) . 35
6.2.5 Requirements for systematic safety integrity of a PDS(SR) and
PDS(SR) subsystems . 36
6.2.6 Design requirements for electromagnetic (EM) immunity of a PDS(SR). 39
6.2.7 Design requirements for thermal immunity of a PDS(SR) . 39

IEC 61800-5-2:2016 © IEC 2016 – 3 –
6.2.8 Design requirements for mechanical immunity of a PDS(SR) . 39
6.3 Behaviour on detection of fault . 39
6.3.1 Fault detection . 39
6.3.2 Fault tolerance greater than zero . 39
6.3.3 Fault tolerance zero . 39
6.4 Additional requirements for data communications . 39
6.5 PDS(SR) integration and testing requirements . 40
6.5.1 Hardware integration . 40
6.5.2 Software integration . 40
6.5.3 Modifications during integration . 40
6.5.4 Applicable integration tests . 40
6.5.5 Test documentation . 40
7 Information for use . 41
7.1 General . 41
7.2 Information and instructions for safe application of a PDS(SR) . 41
8 Verification and validation . 42
8.1 General . 42
8.2 Verification . 43
8.3 Validation . 43
8.4 Documentation . 43
9 Test requirements . 43
9.1 Planning of tests . 43
9.2 Functional testing . 43
9.3 Electromagnetic (EM) immunity testing . 44
9.3.1 General . 44
9.3.2 Intended EM environment . 44
9.3.3 Performance criterion (fail safe state – FS) . 44
9.4 Thermal immunity testing . 44
9.4.1 General . 44
9.4.2 Functional thermal test . 45
9.4.3 Component thermal test . 45
9.5 Mechanical immunity testing . 45
9.5.1 General . 45
9.5.2 Vibration test . 45
9.5.3 Shock test . 45
9.5.4 Performance criterion for mechanical immunity tests (fail safe state –
FS) . 45
9.6 Test documentation . 45
10 Modification . 46
10.1 Objective . 46
10.2 Requirements . 46
10.2.1 General . 46
10.2.2 Modification request . 46
10.2.3 Impact analysis . 46
10.2.4 Authorization. 46
10.2.5 Documentation . 46
Annex A (informative) Sequential task table. 47
Annex B (informative) Example for estimation of PFH . 51

– 4 – IEC 61800-5-2:2016 © IEC 2016
B.1 General . 51
B.2 Example PDS(SR) structure . 51
B.2.1 General . 51
B.2.2 Subsystem A/B . 52
B.2.3 Subsystem PS/VM . 52
B.3 Example PDS(SR) PFH value determination . 53
B.3.1 Subsystem “A/B” (main subsystem) . 53
B.3.2 Subsystem “PS/VM” . 58
B.3.3 PFH value of the safety sub-function STO of PDS(SR) . 61
B.4 Reduction of DC and SFF depending on test interval . 62
Annex C (informative) Available failure rate databases . 63
C.1 Databases . 63
C.2 Helpful standards concerning component failure . 63
Annex D (informative) Fault lists and fault exclusions . 65
D.1 General . 65
D.2 Remarks applicable to fault exclusions . 65
D.2.1 Validity of exclusions . 65
D.2.2 Tin whisker growth . 65
D.2.3 Short-circuits on PWB-mounted parts . 65
D.3 Fault models . 66
D.3.1 Conductors/cables . 66
D.3.2 Printed wiring boards/assemblies . 66
D.3.3 Terminal block . 66
D.3.4 Multi-pin connector . 67
D.3.5 Electromechanical devices . 67
D.3.6 Transformers . 68
D.3.7 Inductances . 68
D.3.8 Resistors . 68
D.3.9 Resistor Networks . 68
D.3.10 Potentiometers . 68
D.3.11 Capacitors . 68
D.3.12 Discrete semiconductors . 68
D.3.13 Signal Isolation components . 69
D.3.14 Non-programmable integrated circuits . 69
D.3.15 Programmable and/or complex integrated circuits . 69
D.3.16 Motion and position feedback sensors . 70
Annex E (normative) Electromagnetic (EM) immunity requirement for PDS(SR) . 74
E.1 General . 74
E.2 Immunity requirements – low frequency disturbances . 74
E.3 Immunity requirements – high frequency disturbances . 77
Annex F (informative) Estimation of PFD value for low demand with given PFH
avg
value . 81
F.1 General . 81
F.2 Estimation of PFD value for low demand with given PFH value . 81
avg
Bibliography . 82

Figure 1 – Installation and functional parts of a PDS(SR) . 10
Figure 2 – Safety function consisting of safety sub-functions . 19

IEC 61800-5-2:2016 © IEC 2016 – 5 –
Figure 3 – PDS(SR) development lifecycle . 24
Figure B.1 – Example PDS(SR) . 51
Figure B.2 – Subsystems of the PDS(SR) . 52
Figure B.3 – Function blocks of subsystem A/B . 53
Figure B.4 – Reliability model (Markov) of subsystem A/B . 56
Figure B.5 – Function blocks of subsystem PS/VM . 58
Figure B.6 – Reliability model (Markov) of subsystem PS/VM . 60

Table 1 – Alphabetical list of terms and definitions . 12
Table 2 – Example for determining the SIL from hardware and software independence . 30
Table 3 – Safety integrity levels: target failure measures for a PDS(SR) safety sub-
function . 32
Table 4 – Maximum allowable safety integrity level for a safety sub-function carried
out by a type A safety-related subsystem . 35
Table 5 – Maximum allowable safety integrity level for a safety sub-function carried
out by a type B safety-related subsystem . 35
Table A.1 – Design and development procedure for PDS(SR) . 47
Table B.1 – Determination of DC factor of subsystem A/B . 55
Table B.2 – PFH value calculation results for subsystem A/B . 58
Table B.3 – Determination of DC factor of subsystem A/B . 59
Table B.4 – PFH value calculation results for subsystem PS/VM . 61
Table D.1 – Printed wiring boards/assemblies . 66
Table D.2 – Terminal block . 67
Table D.3 – Multi-pin connector . 67
Table D.4 – Electromechanical devices (for example relay, contactor relays) . 68
Table D.5 – Signal Isolation components . 69
Table D.6 – Non-programmable integrated circuits . 69
Table D.7 – Programmable and/or complex integrated circuits . 70
Table D.8 – Motion and position feedback sensors . 71
Table E.1 – Minimum immunity requirements for voltage deviations, dips and short
interruptions . 75
Table E.2 – PDS(SR) minimum immunity requirements for voltage deviations, dips and
short interruptions on main power ports with a rated voltage above 1 000 V . 76
Table E.3 – Immunity requirements – high frequency disturbances . 77
Table E.4 – General frequency ranges for mobile transmitters and ISM for radiated
tests . 79
Table E.5 – General frequency ranges for mobile transmitters and ISM for conducted
tests . 80

– 6 – IEC 61800-5-2:2016 © IEC 2016
INTERNATIONAL ELECTROTECHNICAL COMMISSION
____________
ADJUSTABLE SPEED ELECTRICAL
POWER DRIVE SYSTEMS –
Part 5-2: Safety requirements – Functional

FOREWORD
1) The International Electrotechnical Commission (IEC) is a worldwide organization for standardization comprising
all national electrotechnical committees (IEC National Committees). The object of IEC is to promote
international co-operation on all questions concerning standardization in the electrical and electronic fields. To
this end and in addition to other activities, IEC publishes International Standards, Technical Specifications,
Technical Reports, Publicly Available Specifications (PAS) and Guides (hereafter referred to as “IEC
Publication(s)”). Their preparation is entrusted to technical committees; any IEC National Committee interested
in the subject dealt with may participate in this preparatory work. International, governmental and non-
governmental organizations liaising with the IEC also participate in this preparation. IEC collaborates closely
with the International Organization for Standardization (ISO) in accordance with conditions determined by
agreement between the two organizations.
2) The formal decisions or agreements of IEC on technical matters express, as nearly as possible, an international
consensus of opinion on the relevant subjects since each technical committee has representation from all
interested IEC National Committees.
3) IEC Publications have the form of recommendations for international use and are accepted by IEC National
Committees in that sense. While all reasonable efforts are made to ensure that the technical content of IEC
Publications is accurate, IEC cannot be held responsible for the way in which they are used or for any
misinterpretation by any end user.
4) In order to promote international uniformity, IEC National Committees undertake to apply IEC Publications
transparently to the maximum extent possible in their national and regional publications. Any divergence
between any IEC Publication and the corresponding national or regional publication shall be clearly indicated in
the latter.
5) IEC itself does not provide any attestation of conformity. Independent certification bodies provide conformity
assessment services and, in some areas, access to IEC marks of conformity. IEC is not responsible for any
services carried out by independent certification bodies.
6) All users should ensure that they have the latest edition of this publication.
7) No liability shall attach to IEC or its directors, employees, servants or agents including individual experts and
members of its technical committees and IEC National Committees for any personal injury, property damage or
other damage of any nature whatsoever, whether direct or indirect, or for costs (including legal fees) and
expenses arising out of the publication, use of, or reliance upon, this IEC Publication or any other IEC
Publications.
8) Attention is drawn to the Normative references cited in this publication. Use of the referenced publications is
indispensable for the correct application of this publication.
9) Attention is drawn to the possibility that some of the elements of this IEC Publication may be the subject of
patent rights. IEC shall not be held responsible for identifying any or all such patent rights.
International Standard IEC 61800-5-2 has been prepared by subcommittee 22G: Adjustable
speed electric drive systems incorporating semiconductor power converters, of IEC technical
committee 22: Power electronic systems and equipment.
This second edition cancels and replaces the first edition published in 2007. This edition
constitutes a technical revision.
This edition includes the following significant technical changes with respect to the previous
edition:
a) rational added in the scope why low demand mode is not covered by this standard
b) definition added for: “category” and “safety function”
c) “Other sub-functions” sorted into “Monitoring sub-functions” and “Output functions”
d) deleted “proof test” throughout the document because for PDS(SR) a proof test is not
applicable
IEC 61800-5-2:2016 © IEC 2016 – 7 –
e) replaced the term “safety function” by “safety sub-function” throughout the document
f) Updated references to IEC 61508 series Ed.2010
g) Added the principle rules of ISO 13849-1 and reference to tables of ISO 13849-2
h) 6.1.6 Text replaced by Table 2
i) 6.1.7 Integrated circuits with on-chip redundancy matched to changed requirement in
IEC 61508-2: 2010, Annex E
j) 6.2.8 Design requirements for thermal immunity of a PDS(SR)
k) 6.2.9 Design requirements for mechanical immunity of a PDS(SR)
l) 6.1.6 SIL for multiple safety sub-functions within one PDS(SR)
m) 6.1.7 Integrated circuits with on-chip redundancy
n) 6.2.1 Basic and well-tried safety principles
o) 6.2.2.1.4 Diagnostic test interval when the hardware fault tolerance is greater than zero
p) 6.2.5.2.7 PDS(SR) parameterization
q) 9 Test requirements
r) 9.3 Electromagnetic (EM) immunity testing
s) 9.4 Thermal immunity testing
t) 9.5 Mechanical immunity testing
u) Annex A Sequential task table
v) Annex D, D.3.16, Motion and position feedback sensors updated
w) Annex E Electromagnetic immunity (EM) requirement for PDS(SR)
x) Annex F Estimation of PFD value for low demand with given PFH value
avg
The text of this standard is based on the following documents:
FDIS Report on voting
22G/332/FDIS 22G/335/RVD
Full information on the voting for the approval of this standard can be found in the report on
voting indicated in the above table.
This publication has been drafted in accordance with the ISO/IEC Directives, Part 2.
A list of all parts of the IEC 61800 series, published under the general title Adjustable speed
electric drive systems, can be found on the IEC website.
The committee has decided that the contents of this publication will remain unchanged until
the stability date indicated on the IEC website under "http://webstore.iec.ch" in the data
related to the specific publication. At this date, the publication will be
• reconfirmed,
• withdrawn,
• replaced by a revised edition, or
• amended.
IMPORTANT – The 'colour inside' logo on the cover page of this publication indicates
that it contains colours which are considered to be useful for the correct
understanding of its contents. Users should therefore print this document using a
colour printer.
– 8 – IEC 61800-5-2:2016 © IEC 2016
INTRODUCTION
As a result of automation, demand for increased production and reduced operator physical
effort, control systems of machinery and plant items play an increasing role in the
achievement of overall safety. These control systems increasingly employ complex electrical/
electronic/programmable electronic devices and systems.
Prominent amongst these devices and systems are adjustable speed electrical power drive
systems (PDS) that are suitable for use in safety-related applications (PDS(SR)).
Examples of industrial applications are:
• machine tools, robots, production test equipment, test benches;
• papermaking machines, textile production machines, calendars in the rubber industry;
• process lines in plastics, chemicals or metal production, rolling-mills;
• cement crushing machines, cement kilns, mixers, centrifuges, extrusion machines;
• drilling machines;
• conveyors, materials handling machines, hoisting equipment (cranes, gantries, etc.);
• pumps, fans, etc.
This standard can also be used as a reference for developers using PDS(SR) for other
applications.
Users of this standard should be aware that some type C standards for machinery currently
refer to ISO 13849-1 for safety-related control systems. In this case, PDS(SR) manufacturers
may be requested to provide further information (e.g. category and performance level PL) to
facilitate the integration of a PDS(SR) into the safety-related control systems of such
machinery.
NOTE ”Type C standards” are defined in ISO 12100 as machine safety standards dealing with detailed safety
requirements for a particular machine or group of machines.
There are many situations where control systems that incorporate a PDS(SR) are employed,
for example as part of safety measures that have been provided to achieve risk reduction. A
typical case is guard interlocking in order to exclude personnel from hazards where access to
the dangerous area is only possible when rotating parts have stopped. This part of IEC 61800
gives a methodology to identify the contribution made by a PDS(SR) to identified safety sub-
functions and to enable the appropriate design of the PDS(SR) and verification that it meets
the required performance.
Measures are given to co-ordinate the safety performance of the PDS(SR) with the intended
risk reduction taking into account the probabilities and consequences of its random and
systematic faults.
IEC 61800-5-2:2016 © IEC 2016 – 9 –
ADJUSTABLE SPEED ELECTRICAL
POWER DRIVE SYSTEMS –
Part 5-2: Safety requirements – Functional

1 Scope
This part of IEC 61800, which is a product standard, specifies requirements and makes
recommendations for the design and development, integration and validation of safety related
power drive systems (PDS(SR)) in terms of their functional safety considerations. It applies to
adjustable speed electrical power drive systems covered by the other parts of the IEC 61800
series of standards as referred in IEC 61800-2.
NOTE 1 The term “integration” refers to the PDS(SR) itself, not to its incorporation into the safety-related
application.
NOTE 2 Other parts of IEC 61800 cover rating specifications, EMC, electrical safety, etc.
This International Standard is applicable where functional safety of a PDS(SR) is claimed and
the PDS(SR) is operating mainly in the high demand or continuous mode (see 3.15)
While low demand mode operation is possible for a PDS(SR), this standard concentrates on
high demand and continuous mode. Safety sub-functions implemented for high demand or
continuous mode can also be used in low demand mode. Requirements for low demand mode
are given in IEC 61508 series. Some guidance for the estimation of average probability of
dangerous failure on demand (PFD ) value is provided in Annex F.
avg
This part of IEC 61800 sets out safety-related considerations of PDS(SR)s in terms of the
framework of IEC 61508, and introduces requirements for PDS(SR)s as subsystems of a
safety-related system. It is intended to facilitate the realisation of the electrical/ electronic/
programmable electronic (E/E/PE) parts of a PDS(SR) in relation to the safety performance of
safety sub-function(s) of a PDS.
Manufacturers and suppliers of PDS(SR)s by using the normative requirements of this part of
IEC 61800 will indicate to users (system integrator, original equipment manufacturer) the
safety performance for their equipment. This will facilitate the incorporation of a PDS(SR) into
a safety-related control system using the principles of IEC 61508, and possibly its specific
sector implementations (for example IEC 61511, IEC 61513, IEC 62061 or ISO 13849).
By applying the requirements from this part of the IEC 61800 series, the corresponding
requirements of IEC 61508 that are necessary for a PDS(SR) are fulfilled.
This part of IEC 61800 does not specify requirements for:
• the hazard and risk analysis of a particular application;
• the identification of safety sub-functions for that application;
• the initial allocation of SILs to those safety sub-functions;
• the driven equipment except for interface arrangements;
• secondary hazards (for example from failure in a production or manufacturing process);
• the electrical, thermal and energy safety considerations, which are covered in
+IEC 61800-5-1;
• the PDS(SR) manufac
...