Safety and Security for Railway Operations
Safety and security for railway operations covers the management system a railway undertaking or infrastructure manager uses to control operational risk, and the protection of the railway from malevolent acts. The exam looks for correct use of the SMS requirements (Regulation (EU) 2018/762), CSM risk assessment, safety performance monitoring and cyber security.
Core rules
- The SMS must cover risk assessment, safety measures, safety critical tasks, human factors, emergency management, incident reporting, audit and management review.
- CSM RA (EU) 402/2013 applies to significant technical, operational or organisational changes; the proposer assesses the change and an assessment body gives independent safety assessment where required.
- Common safety indicators feed national safety authority supervision; common safety targets set the sector benchmarks.
- Security is separate: a security management system, security risk assessment, physical protection and cyber controls. EN 50701 maps railway cybersecurity to zones and conduits, with security levels SL1 to SL4 derived from IEC 62443.
Worked example
A new timetable raises train frequency over a user-worked level crossing from 4 to 12 trains per hour. The operator's risk matrix scores severity 4 (fatality) and frequency 3 (possible), giving 12 against a tolerance of 8. Reasoning: exposure scales with train movements, so the change is significant; the operator must reduce risk through sighting improvements, user education or closure, re-score, and record the decision in the change assessment.
Traps
Treating a signed safety case as a substitute for operational risk assessment; ignoring the IM and RU interface; using historical incident rates without exposure data; confusing security with safety; protecting the office network while leaving signalling maintenance laptops unmanaged; forgetting competence and fatigue management for safety-critical staff.