CSA C22.2 No. 61800-5-2

CSA Preface

This is the first edition of CSA C22.2 No. 61800-5-2, Adjustable speed electrical power drive systems – Part 5-2: Safety requirements – Functional, which is an adoption, with Canadian deviations, of the identically titled IEC (International Electrotechnical Commission) Standard 61800-5-2 (second edition, 2016-04). It is one in a series of Standards issued by CSA Group under Part II of the Canadian Electrical Code. For brevity, this Standard will be referred to as “CSA C22.2 No. 61800-5-2” throughout. Adjustable speed electrical power drive systems will need to comply with the requirements within CSA C22.2 No. 274-17, Adjustable speed drives, prior to using this Standard for conformity assessment. This Standard is considered suitable for use for conformity assessment within the stated scope of the Standard. This Standard has been developed in compliance with Standards Council of Canada requirements for National Standards of Canada. It has been published as a National Standard of Canada by CSA Group.

Scope

This part of IEC 61800, which is a product standard, specifies requirements and makes recommendations for the design and development, integration and validation of safety related power drive systems (PDS(SR)) in terms of their functional safety considerations. It applies to adjustable speed electrical power drive systems covered by the other parts of the IEC 61800 series of standards as referred in IEC 61800-2.

NOTE 1 The term “integration” refers to the PDS(SR) itself, not to its incorporation into the safety-related application.

NOTE 2 Other parts of IEC 61800 cover rating specifications, EMC, electrical safety, etc. This International Standard is applicable where functional safety of a PDS(SR) is claimed and the PDS(SR) is operating mainly in the high demand or continuous mode (see 3.15). While low demand mode operation is possible for a PDS(SR), this standard concentrates on high demand and continuous mode. Safety sub-functions implemented for high demand or continuous mode can also be used in low demand mode. Requirements for low demand mode are given in IEC 61508 series. Some guidance for the estimation of average probability of dangerous failure on demand (PFDavg) value is provided in Annex F. This part of IEC 61800 sets out safety-related considerations of PDS(SR) s in terms of the framework of IEC 61508, and introduces requirements for PDS(SR)s as subsystems of a safety-related system. It is intended to facilitate the realisation of the electrical/ electronic/programmable electronic (E/E/PE) parts of a PDS(SR) in relation to the safety performance of safety sub-function(s) of a PDS. Manufacturers and suppliers of PDS(SR)s by using the normative requirements of this part of IEC 61800 will indicate to users (system integrator, original equipment manufacturer) the safety performance for their equipment. This will facilitate the incorporation of a PDS(SR) into a safety-related control system using the principles of IEC 61508, and possibly its specific sector implementations (for example IEC 61511, IEC 61513, IEC 62061 or ISO 13849). By applying the requirements from this part of the IEC 61800 series, the corresponding requirements of IEC 61508 that are necessary for a PDS(SR) are fulfilled. This part of IEC 61800 does not specify requirements for: the hazard and risk analysis of a particular application; the identification of safety sub-functions for that application; the initial allocation of SILs to those safety sub-functions; the driven equipment except for interface arrangements; secondary hazards (for example from failure in a production or manufacturing process); the electrical, thermal and energy safety considerations, which are covered in +IEC 61800-5-1; the PDS(SR) manufacturing process; the validity of signals and commands to the PDS(SR). security aspects (e.g. cyber security or PDS(SR) security of access)

NOTE 3 The functional safety requirements of a PDS(SR) are dependent on the application, and can be considered as a part of the overall risk assessment of the installation. Where the supplier of the PDS(SR) is not responsible for the driven equipment, the installation designer is responsible for the risk assessment, and for specifying the functional and safety integrity requirements of the PDS (SR). This part of IEC 61800 only applies to PDS(SR)s implementing safety sub-functions with a SIL not greater than SIL 3. Figure 1 shows the installation and the functional parts of a PDS(SR) that are considered in this part of IEC 61800 and shows a logical representation of a PDS(SR) rather than its physical description.