SIST EN 60880:2010

SLOVENSKI STANDARD
01-januar-2010
-HGUVNHHOHNWUDUQH0HULOQDLQQDG]RUQDRSUHPD]D]DJRWDYOMDQMHYDUQRVWL
=QDþLOQRVWLSURJUDPVNHRSUHPHUDþXQDOQLãNLKVLVWHPRYNLL]YDMDMRNDWHJRULMR
IXQNFLM$,(&
Nuclear power plants - Instrumentation and control systems important to safety -
Software aspects for computer-based systems performing category A functions
Kernkraftwerke - Leittechnik für Systeme mit sicherheitstechnischer Bedeutung -
Softwareaspekte für rechnerbasierte Systeme zur Realisierung von Funktionen der
Kategorie A
Centrales nucléaires de puissance - Instrumentation et contrôle-commande importants
pour la sûreté - Aspects logiciels des systèmes programmés réalisant des fonctions de
catégorie A
Ta slovenski standard je istoveten z: EN 60880:2009
ICS:
27.120.20 Jedrske elektrarne. Varnost Nuclear power plants. Safety
2003-01.Slovenski inštitut za standardizacijo. Razmnoževanje celote ali delov tega standarda ni dovoljeno.

EUROPEAN STANDARD
EN 60880
NORME EUROPÉENNE
October 2009
EUROPÄISCHE NORM
ICS 27.120.20
English version
Nuclear power plants -
Instrumentation and control systems important to safety -
Software aspects for computer-based systems
performing category A functions
(IEC 60880:2006)
Centrales nucléaires de puissance -  Kernkraftwerke -
Instrumentation et contrôle-commande Leittechnik für Systeme
importants pour la sûreté - mit sicherheitstechnischer Bedeutung -
Aspects logiciels des systèmes Softwareaspekte für rechnerbasierte
programmés réalisant des fonctions Systeme zur Realisierung
de catégorie A von Funktionen der Kategorie A
(CEI 60880:2006) (IEC 60880:2006)

This European Standard was approved by CENELEC on 2009-07-01. CENELEC members are bound to comply
with the CEN/CENELEC Internal Regulations which stipulate the conditions for giving this European Standard
the status of a national standard without any alteration.

Up-to-date lists and bibliographical references concerning such national standards may be obtained on
application to the Central Secretariat or to any CENELEC member.

This European Standard exists in three official versions (English, French, German). A version in any other
language made by translation under the responsibility of a CENELEC member into its own language and notified
to the Central Secretariat has the same status as the official versions.

CENELEC members are the national electrotechnical committees of Austria, Belgium, Bulgaria, Cyprus, the
Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia,
Lithuania, Luxembourg, Malta, the Netherlands, Norway, Poland, Portugal, Romania, Slovakia, Slovenia, Spain,
Sweden, Switzerland and the United Kingdom.

CENELEC
European Committee for Electrotechnical Standardization
Comité Européen de Normalisation Electrotechnique
Europäisches Komitee für Elektrotechnische Normung

Central Secretariat: Avenue Marnix 17, B - 1000 Brussels

© 2009 CENELEC - All rights of exploitation in any form and by any means reserved worldwide for CENELEC members.
Ref. No. EN 60880:2009 E
Foreword
The text of the International Standard IEC 60880:2006, prepared by SC 45A, Instrumentation and
control of nuclear facilities, of IEC TC 45, Nuclear instrumentation, was submitted to the formal vote
and was approved by CENELEC as EN 60880 on 2009-07-01 without any modification.
The following dates were fixed:
– latest date by which the EN has to be implemented
at national level by publication of an identical
national standard or by endorsement (dop) 2010-07-01
– latest date by which the national standards conflicting
with the EN have to be withdrawn (dow) 2012-07-01
CLC/TC 45AX experts draw attention to the readers of this European standard to the fact that it should
be read in conjunction with IAEA document INSAG-10, 1996, “Defence in Depth in Nuclear Safety”
which applies.
__________
Endorsement notice
The text of the International Standard IEC 60880:2006 was approved by CENELEC as a European
Standard without any modification.
__________
- 3 - EN 60880:2009
Annex ZA
(normative)
Normative references to international publications
with their corresponding European publications

The following referenced documents are indispensable for the application of this document. For dated
references, only the edition cited applies. For undated references, the latest edition of the referenced
document (including any amendments) applies.

NOTE  When an international publication has been modified by common modifications, indicated by (mod), the relevant EN/HD
applies.
Publication Year Title EN/HD Year
1)
IEC 60671 - Nuclear power plants - Instrumentation - -
and control systems important to safety -
Surveillance testing
IEC 61069-2 1993 Industrial-process measurement and EN 61069-2 1994
control - Evaluation of system properties
for the purpose of system assessment -
Part 2: Assessment methodology
1)
IEC 61226 - Nuclear power plants - Instrumentation - -
and control systems important to safety -
Classification of instrumentation and
control functions
1) 2)
IEC 61508-4 - Functional safety of EN 61508-4 2001
electrical/electronic/programmable
electronic safety-related systems -
Part 4: Definitions and abbreviations
1)
IEC 61513 - Nuclear power plants - Instrumentation - -
and control for systems important
to safety - General requirements
for systems
ISO/IEC 9126 Series Software engineering - Product quality - -
1)
IAEA guide NS-G-1.2 - Safety assessment and verification -
for nuclear power plants
1)
IAEA guide NS-G-1.3 - Instrumentation and control systems - -
important to safety in nuclear power
plants
1)
Undated reference.
2)
Valid edition at date of issue.

NORME CEI
INTERNATIONALE
IEC
INTERNATIONAL
Deuxième édition
STANDARD
Second edition
2006-05
Centrales nucléaires de puissance–
Instrumentation et contrôle-commande
importants pour la sûreté –
Aspects logiciels des systèmes programmés
réalisant des fonctions de catégorie A

Nuclear power plants –
Instrumentation and control systems
important to safety –
Software aspects for computer-based
systems performing category A functions

 IEC 2006 Droits de reproduction réservés  Copyright - all rights reserved
Aucune partie de cette publication ne peut être reproduite ni No part of this publication may be reproduced or utilized in any
utilisée sous quelque forme que ce soit et par aucun procédé, form or by any means, electronic or mechanical, including
électronique ou mécanique, y compris la photocopie et les photocopying and microfilm, without permission in writing from
microfilms, sans l'accord écrit de l'éditeur. the publisher.
International Electrotechnical Commission, 3, rue de Varembé, PO Box 131, CH-1211 Geneva 20, Switzerland
Telephone: +41 22 919 02 11 Telefax: +41 22 919 03 00 E-mail: inmail@iec.ch Web: www.iec.ch
CODE PRIX
XE
PRICE CODE
Commission Electrotechnique Internationale
International Electrotechnical Commission
МеждународнаяЭлектротехническаяКомиссия
Pour prix, voir catalogue en vigueur
For price, see current catalogue

60880  IEC:2006 – 3 –
CONTENTS
FOREWORD.7
INTRODUCTION.11

1 Scope and object.17
2 Normative references .17
3 Terms and definitions .19
4 Symbols and abbreviations.29
5 General requirements for software projects .29
5.1 General .29
5.2 Software types .33
5.3 Software development approach .35
5.4 Software project management .39
5.5 Software quality assurance plan .39
5.6 Configuration management.41
5.7 Software security.43
6 Software requirements.47
6.1 Specification of software requirements .47
6.2 Self-supervision .49
6.3 Periodic testing .49
6.4 Documentation .51
7 Design and implementation .51
7.1 Principles for design and implementation .53
7.2 Language and associated translators and tools .57
7.3 Detailed recommendations .59
7.4 Documentation .63
8 Software Verification .63
8.1 Software verification process.63
8.2 Software verification activities .65
9 Software aspects of system integration.73
9.1 Software aspects of system integration plan.75
9.2 System integration .77
9.3 Integrated system verification.77
9.4 Fault resolution procedures .79
9.5 Software aspects of integrated system verification report .79
10 Software aspects of system validation .81
10.1 Software aspects of the system validation plan.81
10.2 System validation .81
10.3 Software aspects of the system validation report .83
10.4 Fault resolution procedures .83
11 Software modification .83
11.1 Modification request procedure .85
11.2 Procedure for executing a software modification.87
11.3 Software modification after delivery.89

60880  IEC:2006 – 5 –
12 Software aspects of installation and operation.91
12.1 On-site installation of the software .91
12.2 On-site software security.91
12.3 Adaptation of the software to on-site conditions.93
12.4 Operator training .93
13 Defences against common cause failure due to software.95
13.1 General .95
13.2 Design of software against CCF .97
13.3 Sources and effects of CCF due to software.97
13.4 Implementation of diversity.99
13.5 Balance of drawbacks and benefits connected with the use of diversity.99
14 Software tools for the development of software .99
14.1 Introduction .99
14.2 Selection of tools.101
14.3 Requirements for tools .103
15 Qualification of pre-developed software.
...