Engineer Railway Vehicles cheat sheet
Engineer Railway Vehicles · Keep the key ideas within reach.
Type Testing and Homologation of Railway Vehicles, Systems and Components
EN 14363 governs running-dynamic type approval: the vehicle must demonstrate stability, track loading, and ride quality within the route-dependent limit values of the network it is admitted to.
The three EN 14363 assessment areas are running safety (derailment coefficient Y/Q ≤ 0,8 running average, 1,2 single-peak), track loading (quasi-static wheel-force limits), and ride comfort (Sperling index or EN 12299 ride comfort indices).
EN 12663 defines strength requirements for vehicle bodies: categories F-I (fatigue, freight), F-II (fatigue, passenger), P-I and P-II (static proof for specific load cases); static proof uses defined vertical, compression, and collision loads.
Brake type testing follows EN 14067 (aerodynamics) and UIC 544-1 / EN 14531 for stopping distance and brake performance calculations; the brake performance certificate states braked mass per vehicle.
Homologation in the EU runs through the ERA One-Stop Shop (OSS) and the Agency's technical opinion under the 4th Railway Package; the vehicle authorisation is issued by the Agency or a national safety authority, valid across the EU.
TSI compliance is demonstrated via EC declarations of verification (NoBo) and conformity (DeBo); national technical rules (NNTR) apply only where TSIs do not cover a parameter.
EN 50126 (RAMS) and EN 50128/50129 (software and safety-related electronic systems) are the reference standards for safety-related vehicle functions in the type test dossier.
The interoperability constituents and subsystems list is set by the Locomotives and Passenger Rolling Stock TSI (EU) 1302/2014 (LOC&PAS) and the Freight Wagons TSI 321/2013 (WAG), as amended.
Functional Safety for Rail and Transport Applications
EN 50126-1/-2 defines the RAMS lifecycle: concept, system definition, risk analysis, requirements, design, implementation, verification, validation, acceptance, operation, maintenance, decommissioning.
Risk acceptance uses the ALARP principle and the GAMAB (globalement au moins aussi bon) and MEM (minimum endogenous mortality) criteria for railway applications; SIL targets derive from the risk matrix of EN 50126-2.
EN 50128 assigns software SIL 0–4 with requirements on techniques, independence, and verification; SIL 3/4 require formal methods, independent assessors, and rigorous tool qualification.
EN 50129 covers safety-related electronic systems: safety case structure (functional safety, safety integrity, quality management), SIL 1–4, and the safety authority's acceptance.
SIL is a target integrity level, not a probability; the quantitative THR is apportioned down to subsystems and verified via failure rate calculations (e.g., λDU, λDD, PFDavg for low-demand, PFH for high-demand).
The V-model requires independent verification and validation; independence levels (I0–I3) per EN 50128 depend on SIL and encompass technical, managerial, and financial independence.
Common-cause failures are analysed with beta-factor models (EN 50129 Annex); the beta factor typically rises with diagnostic coverage and coupling, and must be justified in the safety case.
EN 50159 governs safety-related communication over open and closed transmission systems; open networks require cryptographic measures (e.g., EN 50159-2 message authenticity, timeliness, integrity).
Safety and Security for Railway Operations
The Safety Management System (SMS) is defined in EU Regulation 2018/762 (common safety methods for safety management) and covers risk assessment, monitoring, and change management.
CSM-RA (EU Regulation 402/2013) defines the risk management process for significant changes: system definition, hazard identification, risk evaluation, risk acceptance, and the safety assessment report.
The Common Safety Indicators (CSIs) and Common Safety Targets (CSTs) are defined in EU Regulation 2018/761 and reported annually by the national safety authority.
Security is governed by the EU NIS2 Directive (2022/2555) and, for rail, EN 50701 (cybersecurity for railway applications); the security management system must address access control, monitoring, and incident response.
The safety case for infrastructure and operations follows the CSM-RA and is validated by an independent assessment body (AsBo) where the change is significant.
Accident and incident classification follows the EU Regulation 2018/762 Annex and the CSIs; serious accidents include collisions, derailments, level-crossing accidents, and fires with fatalities or serious injuries.
Human factors and non-technical skills are assessed through the safety culture maturity model; EN 50126 requires consideration of human error in hazard analysis.
Emergency preparedness and business continuity are part of the SMS; the operator must demonstrate evacuation, rescue, and recovery arrangements for tunnels and major structures.
Rail Quality Management Systems (ISO/TS 22163 / IRIS)
ISO/TS 22163 (IRIS) is the rail-sector quality management standard, based on ISO 9001 with additional rail-specific requirements; certification is issued by accredited certification bodies under the IRIS scheme.
IRIS certification requires a maturity assessment at levels 1–5 across the process model; the assessment uses the IRIS process model and the maturity questionnaire.
The IRIS process model covers management processes, core processes (design, purchasing, production, delivery, service), and support processes; each is assessed against maturity levels.
Mandatory IRIS requirements include project management, configuration management, obsolescence management, first article inspection (FAI), and the 'silver/gold' recognition levels.
Supplier management under IRIS requires supplier evaluation, approval, and performance monitoring; critical suppliers must be audited and their performance tracked via KPIs.
The IRIS audit cycle is three years with annual surveillance audits; the certificate lists the scope and the maturity level achieved.
Key IRIS KPIs include on-time delivery (OTD), quality performance (PPM, first-pass yield), and customer satisfaction; these are reported in the audit and the management review.
IRIS uses a scoring system where each process is rated on a 0–5 maturity scale; the overall maturity level determines the certificate grade (e.g., silver ≥ 3, gold ≥ 4).
Build Supervision, Inspection and Asset Valuation for the Rail Industry
Build supervision uses the inspection and test plan (ITP) and hold points; witness points (W), hold points (H), and review points (R) are defined in the ITP and must be signed off by the supervising engineer.
First article inspection (FAI) verifies that the first production unit conforms to the design; it is a mandatory IRIS requirement and is documented in the FAI report.
Non-conformance reports (NCRs) record deviations; disposition can be rework, repair, use-as-is, or scrap, and each disposition requires engineering approval and traceability.
Asset valuation for rolling stock uses the depreciated replacement cost (DRC) or market approach; the valuation must state the basis, the remaining useful life, and the condition grade.
Condition assessment uses a grading scale (e.g., 1–5) based on inspection findings; the grade feeds into the maintenance backlog and the asset value adjustment.
The inspection regime follows EN 15313 (in-service wheelset maintenance) and the vehicle maintenance plan (VMP) defined by the ECM (entity in charge of maintenance) under EU Regulation 2019/779.
Configuration management ensures that the as-built configuration matches the as-designed configuration; the configuration baseline is verified at the factory acceptance test (FAT) and site acceptance test (SAT).
The ECM certification (EU Regulation 2019/779) requires a maintenance management system; the ECM is registered in the ERADIS database and is responsible for the vehicle's maintenance history.
Type Testing and Homologation of Railway Vehicles, Systems and Components (supplementary)
EN 50121-3-1/3-2 defines EMC requirements for rolling stock and apparatus; type testing includes conducted and radiated emissions and immunity tests.
EN 61373 defines shock and vibration testing for railway equipment; the test severity depends on the mounting location (body, bogie, axle).
EN 50125-1 defines environmental conditions (temperature, humidity, altitude) for rolling stock; the type test must demonstrate operation within the specified class.
Fire safety for rolling stock follows EN 45545-2 (material requirements) and EN 45545-3 (fire resistance of partitions); the hazard level (HL1–HL3) depends on the vehicle category and operation.
The EC certificate of conformity for interoperability constituents is issued by a Notified Body (NoBo) against the relevant TSI; the certificate references the TSI clause and the test report.
The type test report must include the test plan, the measurement uncertainty, the reference conditions, and the conformity statement against the acceptance criteria.
The vehicle authorisation application includes the technical file, the safety case, and the declaration of verification; the Agency issues the authorisation within the time limits of EU Regulation 2018/545.
The 'place of use' and the 'area of use' define the network and the operating conditions for which the vehicle is authorised; deviations require a new authorisation.
Functional Safety for Rail and Transport Applications (supplementary)
The safety integrity level is allocated using a risk graph (EN 50126-2 Annex) with parameters: severity, exposure, and controllability; the resulting SIL is 1–4.
The THR (tolerable hazard rate) is apportioned to subsystems; the sum of subsystem failure rates must be ≤ the THR, and the apportionment must be documented in the safety case.
The safety case structure per EN 50129 includes: functional safety, safety integrity, and quality management; each part has its own evidence and assessment.
Independent safety assessment (ISA) is required for SIL 3/4 systems; the assessor must be independent of the design and the project team.
The safety-related software lifecycle (EN 50128) requires a software requirements specification, architecture, design, implementation, verification, and validation, with tool qualification for SIL 3/4.
The common-cause failure analysis uses a beta factor; the beta factor is typically 1–10% for diverse systems and higher for similar systems, and must be justified.
The safety case must address systematic failures as well as random failures; systematic failures are controlled through the quality management system and the safety culture.
EN 50159-1/2 defines the requirements for safety-related communication; the open transmission system requires cryptographic protection, while the closed system relies on the safety protocol.
Safety and Security for Railway Operations (supplementary)
The CSM-RA (EU Regulation 402/2013) requires a risk assessment for significant changes; the assessment must be proportionate to the risk and documented in the safety assessment report.
The safety management system (SMS) must include a risk register, a change management process, and a monitoring and review process (EU Regulation 2018/762).
The Common Safety Indicators (CSIs) include the number of accidents, the number of fatalities and serious injuries, and the number of precursors (e.g., signals passed at danger).
The security management system under NIS2 must address risk analysis, incident handling, business continuity, and supply chain security; the rail sector is an 'essential entity'.
EN 50701 defines the cybersecurity requirements for railway applications; it covers the security assurance level (SAL) and the security requirements for the system.
The safety case for a significant change is validated by an independent assessment body (AsBo); the AsBo's assessment report is submitted to the safety authority.
The accident investigation is carried out by the national investigation body (NIB) under EU Directive 2004/49/EC (as amended); the NIB is independent of the safety authority and the operator.
The emergency plan must cover the evacuation of passengers, the rescue of trapped persons, and the coordination with external emergency services; it is tested through exercises.
Rail Quality Management Systems (ISO/TS 22163 / IRIS) (supplementary)
The IRIS certification scheme requires a certification body accredited to ISO/IEC 17021-1 and the IRIS scheme rules; the audit is conducted against the IRIS process model.
The IRIS maturity model has five levels: level 1 (ad hoc), level 2 (managed), level 3 (defined), level 4 (quantitatively managed), and level 5 (optimizing).
The IRIS audit uses the process approach; each process is assessed against the maturity questionnaire and the evidence is recorded in the audit report.
The IRIS 'silver' and 'gold' recognition levels are awarded based on the maturity level achieved; silver requires a minimum maturity level of 3, gold requires 4.
The IRIS requirements include the 'first article inspection' (FAI) process, the 'configuration management' process, and the 'obsolescence management' process.
The IRIS audit cycle is three years; surveillance audits are conducted annually, and the recertification audit is conducted in the third year.
The IRIS KPI system includes on-time delivery (OTD), quality performance (PPM), and customer satisfaction; the KPIs are reported in the management review.
The IRIS supplier management process requires the evaluation and approval of suppliers, the monitoring of supplier performance, and the auditing of critical suppliers.
Build Supervision, Inspection and Asset Valuation for the Rail Industry (supplementary)
The inspection and test plan (ITP) defines the inspection activities, the acceptance criteria, and the hold points; the ITP is agreed with the customer and the supervising engineer.
The factory acceptance test (FAT) and the site acceptance test (SAT) verify the conformity of the vehicle or system; the FAT is conducted at the manufacturer's site, the SAT at the operator's site.
The non-conformance report (NCR) records the deviation, the root cause, the corrective action, and the verification of the corrective action; the NCR is closed only after verification.
The asset valuation for rolling stock uses the depreciated replacement cost (DRC) method; the valuation must state the replacement cost, the depreciation, and the remaining useful life.
The condition assessment uses a grading scale (e.g., 1–5) based on the inspection findings; the grade is used to estimate the maintenance backlog and the asset value.
The entity in charge of maintenance (ECM) is certified under EU Regulation 2019/779; the ECM is responsible for the maintenance management system and the maintenance history.
The configuration management process ensures that the as-built configuration matches the as-designed configuration; the configuration baseline is verified at the FAT and the SAT.
The build supervision includes the witness of the hold points, the review of the test reports, and the sign-off of the inspection and test plan.
Type Testing and Homologation of Railway Vehicles, Systems and Components (third)
EN 14363 defines the running-dynamic type test; the test is conducted on a representative route and the results are assessed against the limit values.
The EN 14363 test includes the measurement of the wheel-rail forces, the derailment coefficient, the track loading, and the ride comfort.
The EN 12663 static proof test includes the vertical load, the compression load, and the collision load; the test is conducted on the vehicle body.
The EN 61373 shock and vibration test is conducted on the equipment mounted on the vehicle; the test severity depends on the mounting location.
The EN 50121-3-1/3-2 EMC test includes the conducted and radiated emissions and the immunity tests; the test is conducted on the vehicle and the apparatus.
The EN 45545-2 fire safety test includes the material requirements; the hazard level (HL1–HL3) depends on the vehicle category and the operation.
The EC certificate of conformity for the interoperability constituent is issued by a Notified Body (NoBo) against the relevant TSI; the certificate references the TSI clause and the test report.
The vehicle authorisation application is submitted to the Agency or the national safety authority; the application includes the technical file, the safety case, and the declaration of verification.
Functional Safety for Rail and Transport Applications (third)
The safety integrity level (SIL) is allocated using the risk graph of EN 50126-2; the parameters are the severity, the exposure, and the controllability.
The tolerable hazard rate (THR) is apportioned to the subsystems; the sum of the subsystem failure rates must be ≤ the THR.
The safety case per EN 50129 includes the functional safety, the safety integrity, and the quality management; each part has its own evidence.
The independent safety assessment (ISA) is required for SIL 3/4 systems; the assessor must be independent of the design and the project team.
The software lifecycle per EN 50128 includes the software requirements specification, the architecture, the design, the implementation, the verification, and the validation.
The common-cause failure analysis uses the beta factor; the beta factor is typically 1–10% for diverse systems and higher for similar systems.
The systematic failures are controlled through the quality management system and the safety culture; the safety case must address them.
The EN 50159-1/2 communication requirements include the cryptographic protection for open transmission systems and the safety protocol for closed systems.
Safety and Security for Railway Operations (third)
The CSM-RA (EU Regulation 402/2013) requires a risk assessment for significant changes; the assessment is documented in the safety assessment report.
The safety management system (SMS) includes the risk register, the change management process, and the monitoring and review process (EU Regulation 2018/762).
The Common Safety Indicators (CSIs) include the number of accidents, the number of fatalities and serious injuries, and the number of precursors.
The NIS2 Directive (2022/2555) requires the rail sector to implement a security management system; the rail sector is an 'essential entity'.
The EN 50701 defines the cybersecurity requirements for railway applications; it covers the security assurance level (SAL) and the security requirements.
The safety case for a significant change is validated by an independent assessment body (AsBo); the AsBo's report is submitted to the safety authority.
The accident investigation is carried out by the national investigation body (NIB) under EU Directive 2004/49/EC; the NIB is independent of the safety authority.
The emergency plan covers the evacuation of passengers, the rescue of trapped persons, and the coordination with external emergency services.
Rail Quality Management Systems (ISO/TS 22163 / IRIS) (third)
The IRIS certification scheme requires a certification body accredited to ISO/IEC 17021-1 and the IRIS scheme rules; the audit is conducted against the IRIS process model.
The IRIS maturity model has five levels: level 1 (ad hoc), level 2 (managed), level 3 (defined), level 4 (quantitatively managed), and level 5 (optimizing).
The IRIS audit uses the process approach; each process is assessed against the maturity questionnaire and the evidence is recorded in the audit report.
The IRIS 'silver' and 'gold' recognition levels are awarded based on the maturity level achieved; silver requires a minimum maturity level of 3, gold requires 4.
The IRIS requirements include the first article inspection (FAI) process, the configuration management process, and the obsolescence management process.
The IRIS audit cycle is three years; the surveillance audits are conducted annually, and the recertification audit is conducted in the third year.
The IRIS KPI system includes the on-time delivery (OTD), the quality performance (PPM), and the customer satisfaction; the KPIs are reported in the management review.
The IRIS supplier management process requires the evaluation and approval of suppliers, the monitoring of supplier performance, and the auditing of critical suppliers.
Build Supervision, Inspection and Asset Valuation for the Rail Industry (third)
The inspection and test plan (ITP) defines the inspection activities, the acceptance criteria, and the hold points; the ITP is agreed with the customer and the supervising engineer.
The factory acceptance test (FAT) and the site acceptance test (SAT) verify the conformity of the vehicle or system; the FAT is conducted at the manufacturer's site, the SAT at the operator's site.
The non-conformance report (NCR) records the deviation, the root cause, the corrective action, and the verification of the corrective action; the NCR is closed only after verification.
The asset valuation for rolling stock uses the depreciated replacement cost (DRC) method; the valuation must state the replacement cost, the depreciation, and the remaining useful life.
The condition assessment uses a grading scale (e.g., 1–5) based on the inspection findings; the grade is used to estimate the maintenance backlog and the asset value.
The entity in charge of maintenance (ECM) is certified under EU Regulation 2019/779; the ECM is responsible for the maintenance management system and the maintenance history.
The configuration management process ensures that the as-built configuration matches the as-designed configuration; the configuration baseline is verified at the FAT and the SAT.
The build supervision includes the witness of the hold points, the review of the test reports, and the sign-off of the inspection and test plan.
Type Testing and Homologation of Railway Vehicles, Systems and Components (fourth)
The EN 14363 running-dynamic type test is conducted on a representative route; the results are assessed against the limit values for the running safety, the track loading, and the ride comfort.
The EN 12663 static proof test includes the vertical load, the compression load, and the collision load; the test is conducted on the vehicle body.
The EN 61373 shock and vibration test is conducted on the equipment mounted on the vehicle; the test severity depends on the mounting location.
The EN 50121-3-1/3-2 EMC test includes the conducted and radiated emissions and the immunity tests; the test is conducted on the vehicle and the apparatus.
The EN 45545-2 fire safety test includes the material requirements; the hazard level (HL1–HL3) depends on the vehicle category and the operation.
The EC certificate of conformity for the interoperability constituent is issued by a Notified Body (NoBo) against the relevant TSI; the certificate references the TSI clause and the test report.
The vehicle authorisation application is submitted to the Agency or the national safety authority; the application includes the technical file, the safety case, and the declaration of verification.
The 'place of use' and the 'area of use' define the network and the operating conditions for which the vehicle is authorised; deviations require a new authorisation.
Functional Safety for Rail and Transport Applications (fourth)
The safety integrity level (SIL) is allocated using the risk graph of EN 50126-2; the parameters are the severity, the exposure, and the controllability.
The tolerable hazard rate (THR) is apportioned to the subsystems; the sum of the subsystem failure rates must be ≤ the THR.
The safety case per EN 50129 includes the functional safety, the safety integrity, and the quality management; each part has its own evidence.
The independent safety assessment (ISA) is required for SIL 3/4 systems; the assessor must be independent of the design and the project team.
The software lifecycle per EN 50128 includes the software requirements specification, the architecture, the design, the implementation, the verification, and the validation.
The common-cause failure analysis uses the beta factor; the beta factor is typically 1–10% for diverse systems and higher for similar systems.
The systematic failures are controlled through the quality management system and the safety culture; the safety case must address them.
The EN 50159-1/2 communication requirements include the cryptographic protection for open transmission systems and the safety protocol for closed systems.
Safety and Security for Railway Operations (fourth)
The CSM-RA (EU Regulation 402/2013) requires a risk assessment for significant changes; the assessment is documented in the safety assessment report.
The safety management system (SMS) includes the risk register, the change management process, and the monitoring and review process (EU Regulation 2018/762).
The Common Safety Indicators (CSIs) include the number of accidents, the number of fatalities and serious injuries, and the number of precursors.
The NIS2 Directive (2022/2555) requires the rail sector to implement a security management system; the rail sector is an 'essential entity'.
The EN 50701 defines the cybersecurity requirements for railway applications; it covers the security assurance level (SAL) and the security requirements.
The safety case for a significant change is validated by an independent assessment body (AsBo); the AsBo's report is submitted to the safety authority.
The accident investigation is carried out by the national investigation body (NIB) under EU Directive 2004/49/EC; the NIB is independent of the safety authority.
The emergency plan covers the evacuation of passengers, the rescue of trapped persons, and the coordination with external emergency services.
Rail Quality Management Systems (ISO/TS 22163 / IRIS) (fourth)
The IRIS certification scheme requires a certification body accredited to ISO/IEC 17021-1 and the IRIS scheme rules; the audit is conducted against the IRIS process model.
The IRIS maturity model has five levels: level 1 (ad hoc), level 2 (managed), level 3 (defined), level 4 (quantitatively managed), and level 5 (optimizing).
The IRIS audit uses the process approach; each process is assessed against the maturity questionnaire and the evidence is recorded in the audit report.
The IRIS 'silver' and 'gold' recognition levels are awarded based on the maturity level achieved; silver requires a minimum maturity level of 3, gold requires 4.
The IRIS requirements include the first article inspection (FAI) process, the configuration management process, and the obsolescence management process.
The IRIS audit cycle is three years; the surveillance audits are conducted annually, and the recertification audit is conducted in the third year.
The IRIS KPI system includes the on-time delivery (OTD), the quality performance (PPM), and the customer satisfaction; the KPIs are reported in the management review.
The IRIS supplier management process requires the evaluation and approval of suppliers, the monitoring of supplier performance, and the auditing of critical suppliers.
Build Supervision, Inspection and Asset Valuation for the Rail Industry (fourth)
The inspection and test plan (ITP) defines the inspection activities, the acceptance criteria, and the hold points; the ITP is agreed with the customer and the supervising engineer.
The factory acceptance test (FAT) and the site acceptance test (SAT) verify the conformity of the vehicle or system; the FAT is conducted at the manufacturer's site, the SAT at the operator's site.
The non-conformance report (NCR) records the deviation, the root cause, the corrective action, and the verification of the corrective action; the NCR is closed only after verification.
The asset valuation for rolling stock uses the depreciated replacement cost (DRC) method; the valuation must state the replacement cost, the depreciation, and the remaining useful life.
The condition assessment uses a grading scale (e.g., 1–5) based on the inspection findings; the grade is used to estimate the maintenance backlog and the asset value.
The entity in charge of maintenance (ECM) is certified under EU Regulation 2019/779; the ECM is responsible for the maintenance management system and the maintenance history.
The configuration management process ensures that the as-built configuration matches the as-designed configuration; the configuration baseline is verified at the FAT and the SAT.
The build supervision includes the witness of the hold points, the review of the test reports, and the sign-off of the inspection and test plan.