ISO/TC 23/SC 19/WG 8 - Safety and security

This document specifies the concept phase of the development of safety-related parts of control systems (SRP/CS) on tractors used in agriculture and forestry and on self-propelled ride-on machines and mounted, semi-mounted and trailed machines used in agriculture. It can also be applied to mobile municipal equipment (such as street-sweeping machines). This document is not applicable to: — aircraft and air-cushion vehicles used in agriculture; — lawn and garden equipment. This document specifies the characteristics and categories required of SRP/CS for carrying out their safety-related functions. It does not identify performance levels for specific applications. NOTE 1 Machine specific type-C standards can specify performance levels (AgPL) for safety-related functions in machines within their scope. Otherwise, the specification of AgPL is the responsibility of the manufacturer. This document is applicable to the safety-related parts of electrical/electronic/programmable electronic systems (E/E/PES), as these relate to mechatronic systems. It covers the possible hazards caused by malfunctioning behaviour of E/E/PES safety-related systems, including interaction of these systems. It does not address hazards related to electric shock, fire, smoke, heat, radiation, toxicity, flammability, reactivity, corrosion, release of energy, and similar hazards., unless directly caused by malfunctioning behaviour of E/E/PES safety-related systems. It also covers malfunctioning behaviour of E/E/PES safety-related systems involved in protection measures, safeguards, or safety-related functions in response to non-E/E/PES hazards. Examples included within the scope of this document: — SRP/CS's limiting current flow in electric hybrids to prevent insulation failure/shock hazards; — electromagnetic interference with the SRP/CS; — SRP/CS's designed to prevent fire. Examples not included within the scope of this document: — insulation failure due to friction that leads to electric shock hazards; — nominal electromagnetic radiation impacting nearby machine control systems; — corrosion causing electric cables to overheat. This document is not applicable to non-E/E/PES systems (such as hydraulic, mechanic or pneumatic). NOTE 2 See also ISO 12100 for design principles related to the safety of machinery. This document is not applicable to safety-related parts of control systems manufactured before the date of its publication.

This document specifies principles for the design of highly automated aspects of highly automated machines and vehicles (e.g. agricultural tractors, tractor implement systems, implements and self-propelled machinery) during agricultural field operations. In addition, it provides guidance on the type of information on safe working practices (including information about residual risks) to be provided by the manufacturer. The purpose of this document is to assist in the provision of safety requirements, means of verification and information for use to ensure an appropriate level of safety for agricultural and forestry tractors and self-propelled machines with functions allowing highly automated operations (see 3.7). This document deals with all the significant hazards, hazardous situations and events (as listed in Annex A), relevant to agricultural and forestry tractors and self-propelled machines allowing highly automated field operations when used as intended and under the conditions of misuse foreseeable by the manufacturer during normal operation and service. NOTE 1 While this document gives principles for the design, verification, validation and provision of information for use of a highly automated agricultural machine (HAAM), the detailed specification of requirements for a specific application will be dependent on the machine and its operating conditions. Therefore, the principles for design given in this document need to be extended for specific HAAM by the use of relevant specific (type-C) standards, when available, or by the manufacturer of the machine using risk assessment. Such additional specification of requirements, for design, verification, validation or information for use are outside the scope of this document. NOTE 2 Safety requirements for specific machines not related to their highly automated operations can be available in machine-specific type-C standards. This document is not applicable to: — forestry applications; — mobile, semi-mobile or stationary machinery used for farm yard or barn operations; — operations on public roads including relevant requirements for braking and steering systems. NOTE 3 With respect to implements (e.g. their specific design, functions) and the communication between tractors and implements, additional risks can be relevant and can require additional measures. Such additional measures are outside the scope of this document and are the responsibility of the manufacturer. This document is not applicable to agricultural and forestry tractors, tractor implement systems, implements and self-propelled machines which are manufactured before the date of its publication.

This document sets out general principles for the design and development of safety-related parts of control systems (SRP/CS) on tractors used in agriculture and forestry and on self-propelled ride-on machines and mounted, semi-mounted and trailed machines used in agriculture. It can also be applied to mobile municipal equipment (e.g. street-sweeping machines). This document is not applicable to: — aircraft and air-cushion vehicles used in agriculture; — lawn and garden equipment. This document specifies the characteristics and categories required of SRP/CS for carrying out their safety-related functions. It does not identify performance levels for specific applications. NOTE 1 Machine specific type-C standards can specify performance levels (AgPL) for safety-related functions in machines within their scope. Otherwise, the specification of AgPL is the responsibility of the manufacturer. This document is applicable to the safety-related parts of electrical/electronic/programmable electronic systems (E/E/PES), as these relate to mechatronic systems. It covers the possible hazards caused by malfunctioning behaviour of E/E/PES safety-related systems, including interaction of these systems. It does not address hazards related to electric shock, fire, smoke, heat, radiation, toxicity, flammability, reactivity, corrosion, release of energy, and similar hazards, unless directly caused by malfunctioning behaviour of E/E/PES safety-related systems. It also covers malfunctioning behaviour of E/E/PES safety-related systems involved in protective measures, safeguards, or safety-related functions in response to non-E/E/PES hazards. Examples included within the scope of this document: — SRP/CS limiting current flow in electric hybrids to prevent insulation failure/shock hazards; — electromagnetic interference with the SRP/CS; — SRP/CS designed to prevent fire. Examples not included in the scope of this document: — insulation failure due to friction that leads to electric shock hazards; — nominal electromagnetic radiation impacting nearby machine control systems; — corrosion causing electric cables to overheat. This document is not applicable to non-E/E/PES systems (e.g. hydraulic, mechanic or pneumatic). NOTE 2 See also ISO 12100 for design principles related to the safety of machinery. This document is not applicable to safety related parts of control systems manufactured before the date of its publication.

This document sets out general principles for the design and development of safety-related parts of control systems (SRP/CS) on tractors used in agriculture and forestry and on self-propelled ride-on machines and mounted, semi-mounted and trailed machines used in agriculture. It can also be applied to mobile municipal equipment (e.g. street-sweeping machines). This document is not applicable to: — aircraft and air-cushion vehicles used in agriculture; — lawn and garden equipment. This document specifies the characteristics and categories required of SRP/CS for carrying out their safety-related functions. It does not identify performance levels for specific applications. NOTE 1 Machine specific type-C standards can specify performance levels (AgPL) for safety-related functions in machines within their scope. Otherwise, the specification of AgPL is the responsibility of the manufacturer. This document is applicable to the safety-related parts of electrical/electronic/programmable electronic systems (E/E/PES), as these relate to mechatronic systems. It covers the possible hazards caused by malfunctioning behaviour of E/E/PES safety-related systems, including interaction of these systems. It does not address hazards related to electric shock, fire, smoke, heat, radiation, toxicity, flammability, reactivity, corrosion, release of energy, and similar hazards, unless directly caused by malfunctioning behaviour of E/E/PES safety-related systems. It also covers malfunctioning behaviour of E/E/PES safety-related systems involved in protective measures, safeguards, or safety-related functions in response to non-E/E/PES hazards. Examples included within the scope of this document: — SRP/CS's limiting current flow in electric hybrids to prevent insulation failure/shock hazards; — electromagnetic interference with the SRP/CS; — SRP/CS's designed to prevent fire. Examples not included in the scope of this document: — insulation failure due to friction that leads to electric shock hazards; — nominal electromagnetic radiation impacting nearby machine control systems; — corrosion causing electric cables to overheat. This document is not applicable to non-E/E/PES systems (e.g. hydraulic, mechanic or pneumatic). NOTE 2 See also ISO 12100 for design principles related to the safety of machinery. This document is not applicable to safety related parts of control systems manufactured before the date of its publication.

This document sets out general principles for the design and development of safety-related parts of control systems (SRP/CS) on tractors used in agriculture and forestry and on self-propelled ride-on machines and mounted, semi-mounted and trailed machines used in agriculture. It can also be applied to mobile municipal equipment (e.g. street-sweeping machines). This document is not applicable to: — aircraft and air-cushion vehicles used in agriculture; — lawn and garden equipment. This document specifies the characteristics and categories required of SRP/CS for carrying out their safety-related functions. It does not identify performance levels for specific applications. NOTE 1 Machine specific type-C standards can specify performance levels (AgPL) for safety-related functions in machines within their scope. Otherwise, the specification of AgPL is the responsibility of the manufacturer. This document is applicable to the safety-related parts of electrical/electronic/programmable electronic systems (E/E/PES), as these relate to mechatronic systems. It covers the possible hazards caused by malfunctioning behaviour of E/E/PES safety-related systems, including interaction of these systems. It does not address hazards related to electric shock, fire, smoke, heat, radiation, toxicity, flammability, reactivity, corrosion, release of energy, and similar hazards, unless directly caused by malfunctioning behaviour of E/E/PES safety-related systems. It also covers malfunctioning behaviour of E/E/PES safety-related systems involved in protective measures, safeguards, or safety-related functions in response to non-E/E/PES hazards. Examples included within the scope of this document: — SRP/CS limiting current flow in electric hybrids to prevent insulation failure/shock hazards; — electromagnetic interference with the SRP/CS; — SRP/CS designed to prevent fire. Examples not included in the scope of this document: — insulation failure due to friction that leads to electric shock hazards; — nominal electromagnetic radiation impacting nearby machine control systems; — corrosion causing electric cables to overheat. This document is not applicable to non-E/E/PES systems (e.g. hydraulic, mechanic or pneumatic). NOTE 2 See also ISO 12100 for design principles related to the safety of machinery. This document is not applicable to safety related parts of control systems manufactured before the date of its publication.

ISO 16230-1:2015 is applicable to tractors and self-propelled ride-on machines, mounted implements, and towed implements used in agriculture and forestry. This part of ISO 16230 specifies general requirements that relate to the protection and safety of operators and bystanders on machines with on-board voltages in the range of 50 V AC to 1000 V AC and 75 V DC to 1500 V DC. This part of ISO 16230 applies to electrical equipment and parts of the electrical equipment on such machines and includes general requirements related to the protection and safety of operators, bystanders, and first responders. ISO 16230-1:2015 deals with significant hazards, hazardous situations, and events, as listed in Annex A, relevant to this agricultural machinery when used as intended and under the conditions of misuse foreseeable by the manufacturer during normal operation and service. ISO 16230-1:2015 is not applicable to the following: - specific design elements of external interfaces (e.g. the interface between a tractor and implement); - externally powered equipment (e.g. line powered equipment, equipment without on-board power generation); - purpose built forestry machines; - stationary electrical generators. ISO 16230-1:2015 is not applicable to machines which are manufactured before the date of its publication.

This document specifies the concept phase of the development of safety-related parts of control systems (SRP/CS) on tractors used in agriculture and forestry and on self-propelled ride-on machines and mounted, semi-mounted and trailed machines used in agriculture. It can also be applied to mobile municipal equipment (e.g. street-sweeping machines). This document is not applicable to: — aircraft and air-cushion vehicles used in agriculture; — lawn and garden equipment. This document specifies the characteristics and categories required of SRP/CS for carrying out their safety-related functions. It does not identify performance levels for specific applications. NOTE 1 Machine specific type-C standards can specify performance levels (AgPL) for safety-related functions in machines within their scope. Otherwise, the specification of AgPL is the responsibility of the manufacturer. This document is applicable to the safety-related parts of electrical/electronic/programmable electronic systems (E/E/PES), as these relate to mechatronic systems. It covers the possible hazards caused by malfunctioning behaviour of E/E/PES safety-related systems, including interaction of these systems. It does not address hazards related to electric shock, fire, smoke, heat, radiation, toxicity, flammability, reactivity, corrosion, release of energy, and similar hazards., unless directly caused by malfunctioning behaviour of E/E/PES safety-related systems. It also covers malfunctioning behaviour of E/E/PES safety-related systems involved in protection measures, safeguards, or safety-related functions in response to non-E/E/PES hazards. Examples included within the scope of this document: — SRP/CS's limiting current flow in electric hybrids to prevent insulation failure/shock hazards; — electromagnetic interference with the SRP/CS; — SRP/CS's designed to prevent fire. Examples not included within the scope of this document: — insulation failure due to friction that leads to electric shock hazards; — nominal electromagnetic radiation impacting nearby machine control systems; — corrosion causing electric cables to overheat. This document is not applicable to non-E/E/PES systems (e.g. hydraulic, mechanic or pneumatic). NOTE 2 See also ISO 12100 for design principles related to the safety of machinery. This document is not applicable to safety related parts of control systems manufactured before the date of its publication.

ISO 10975:2009 specifies safety requirements for auto-guidance systems used in agricultural tractors and self-propelled agricultural machines. It is applicable to auto-guidance systems which are factory installed as an integral part of the tractor or self-propelled machine as well as systems designed to be retrofitted to equipment after such equipment has left the control of the manufacturer. It is not applicable to guidance systems used in tractors or self-propelled machines that do not require an on-board operator for primary control of the tractor or self-propelled machine. ISO 10975:2009 does not specify requirements necessary to ensure the integrity of the complex electronic control system which can be an integral part of the auto-guidance system. Such requirements are dealt with in other International Standards which address complex electrical/electronic vehicle control systems.