SIST EN IEC 61500:2019

SLOVENSKI STANDARD
SIST EN IEC 61500:2019
01-september-2019
Nadomešča:
SIST EN 61500:2011
Jedrske elektrarne - Merilna in nadzorna oprema za zagotavljanje varnosti -
Podatkovne komunikacije v sistemih, ki izvajajo funkcije kategorije A (IEC
61500:2018 )
Nuclear power plants - Instrumentation and control systems important to safety - Data
communication in systems performing category A functions (IEC 61500:2018 )
Kernkraftwerke - Leittechnische Systeme mit sicherheitstechnischer Bedeutung -
Datenkommunikation in Systemen, die Funktionen der Kategorie A ausführen (IEC
61500:2018 )
Centrales nucléaires de puissance - Systèmes d'instrumentation et de contrôle-
commande importants pour la sûreté - Communications de données dans les systèmes
réalisant des fonctions de catégorie A (IEC 61500:2018 )
Ta slovenski standard je istoveten z: EN IEC 61500:2019
ICS:
27.120.20 Jedrske elektrarne. Varnost Nuclear power plants. Safety
SIST EN IEC 61500:2019 en
2003-01.Slovenski inštitut za standardizacijo. Razmnoževanje celote ali delov tega standarda ni dovoljeno.

---------------------- Page: 1 ----------------------

SIST EN IEC 61500:2019

---------------------- Page: 2 ----------------------

SIST EN IEC 61500:2019


EUROPEAN STANDARD EN IEC 61500

NORME EUROPÉENNE

EUROPÄISCHE NORM
June 2019
ICS 27.120.20 Supersedes EN 61500:2011
English Version
Nuclear power plants - Instrumentation and control systems
important to safety - Data communication in systems performing
category A functions
(IEC 61500:2018)
Centrales nucléaires de puissance - Systèmes Kernkraftwerke - Leittechnische Systeme mit
d'instrumentation et de contrôle-commande importants pour sicherheitstechnischer Bedeutung - Datenkommunikation in
la sûreté - Communications de données dans les systèmes Systemen, die Funktionen der Kategorie A ausführen
réalisant des fonctions de catégorie A (IEC 61500:2018)
(IEC 61500:2018)
This European Standard was approved by CENELEC on 2019-06-17. CENELEC members are bound to comply with the CEN/CENELEC
Internal Regulations which stipulate the conditions for giving this European Standard the status of a national standard without any alteration.
Up-to-date lists and bibliographical references concerning such national standards may be obtained on application to the CEN-CENELEC
Management Centre or to any CENELEC member.
This European Standard exists in three official versions (English, French, German). A version in any other language made by translation
under the responsibility of a CENELEC member into its own language and notified to the CEN-CENELEC Management Centre has the
same status as the official versions.
CENELEC members are the national electrotechnical committees of Austria, Belgium, Bulgaria, Croatia, Cyprus, the Czech Republic,
Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, the
Netherlands, Norway, Poland, Portugal, Republic of North Macedonia, Romania, Serbia, Slovakia, Slovenia, Spain, Sweden, Switzerland,
Turkey and the United Kingdom.



European Committee for Electrotechnical Standardization
Comité Européen de Normalisation Electrotechnique
Europäisches Komitee für Elektrotechnische Normung
CEN-CENELEC Management Centre: Rue de la Science 23, B-1040 Brussels
© 2019 CENELEC All rights of exploitation in any form and by any means reserved worldwide for CENELEC Members.
 Ref. No. EN IEC 61500:2019 E

---------------------- Page: 3 ----------------------

SIST EN IEC 61500:2019
EN IEC 61500:2019 (E)

European foreword
This document (EN IEC 61500:2019) consists of the text of IEC 61500:2018 prepared by IEC/SC
45A: "Instrumentation, control and electrical power systems of nuclear facilities", of IEC/TC 45:
"Nuclear instrumentation".
The following dates are fixed:
• latest date by which this document has to be (dop) 2020-06-17
implemented at national level by publication of an
identical national standard or by endorsement
• latest date by which the national standards (dow) 2022-06-17
conflicting with this document have to be
withdrawn
This document supersedes EN 61500:2011.
As stated in the nuclear safety directive 2009/71/EURATOM, Chapter 1, Article 2, item 2, Member
States are not prevented from taking more stringent safety measures in the subject-matter covered by
the Directive, in compliance with Community law. In a similar manner, this European standard does
not prevent Member States from taking more stringent nuclear safety and/or security measures in the
subject-matter covered by this standard.
Attention is drawn to the possibility that some of the elements of this document may be the subject of
patent rights. CENELEC shall not be held responsible for identifying any or all such patent rights.
Endorsement notice
The text of the International Standard IEC 61500:2018 was approved by CENELEC as a European
Standard without any modification.

2

---------------------- Page: 4 ----------------------

SIST EN IEC 61500:2019
EN IEC 61500:2019 (E)

Annex ZA
(normative)
Normative references to international publications
with their corresponding European publications
The following documents are referred to in the text in such a way that some or all of their

content constitutes requirements of this document. For dated references, only the edition
cited applies. For undated references, the latest edition of the referenced document
(including any amendments) applies.
NOTE 1 When an International Publication has been modified by common modifications, indicated by (mod), the relevant

EN/HD applies.

NOTE 2 Up-to-date information on the latest versions of the European Standards listed in this annex is available here:
www.cenelec.eu.
Publication Year Title EN/HD Year

IEC 60671 2007 Nuclear power plants - Instrumentation EN 60671 2011
and control systems important to safety -
Surveillance testing
IEC 60709 -  Nuclear power plants - Instrumentation EN 60709 -
and control systems important to safety -
Separation
IEC/IEEE 60780- 2016 Nuclear facilities - Electrical equipment EN 60780-323 2017
323 important to safety - Qualification
IEC 60880 2006 Nuclear power plants - Instrumentation EN 60880 2009
and control systems important to safety -
Software aspects for computer-based
systems performing category A functions
IEC 60980 -  Recommended practices for seismic - -
qualification of electrical equipment of the
safety system for nuclear generating
stations
IEC 60987 2007 Nuclear power plants - Instrumentation EN 60987 2015
and control important to safety - Hardware
design requirements for computer-based
systems
+ A1 2013  - -
IEC 61000 series Electromagnetic compatibility (EMC) EN 61000 series
IEC 61513 -  Nuclear power plants - Instrumentation EN 61513 -
and control important to safety - General
requirements for systems
IEC 62003 -  Nuclear power plants - Instrumentation - -
and control important to safety -
Requirements for electromagnetic
compatibility testing
IEC 62340 2007 Nuclear power plants - Instrumentation EN 62340 2010
and control systems important to safety -
Requirements for coping with common
cause failure (CCF)
IEC 62566 2012 Nuclear power plants - Instrumentation EN 62566 2014
and control important to safety -
Development of HDL-programmed
integrated circuits for systems performing
category A functions
IEC 62645 2014 Nuclear power plants - Instrumentation - -
and control systems – Requirements for
security programmes for computer-based
systems
3

---------------------- Page: 5 ----------------------

SIST EN IEC 61500:2019
EN IEC 61500:2019 (E)
IEC 62859 - Nuclear power plants - Instrumentation - -
and control systems - Requirements for
coordinating safety and cybersecurity
IAEA safety guide 2016 Design of instrumentation and control
No. SSG-39 systems for nuclear power plants

4

---------------------- Page: 6 ----------------------

SIST EN IEC 61500:2019



IEC 61500

®


Edition 3.0 2018-04




INTERNATIONAL



STANDARD




NORME



INTERNATIONALE











Nuclear power plants – Instrumentation and control systems important to

safety – Data communication in systems performing category A functions




Centrales nucléaires de puissance – Systèmes d’instrumentation et de contrôle-

commande importants pour la sûreté – Communications de données dans les

systèmes réalisant des fonctions de catégorie A















INTERNATIONAL

ELECTROTECHNICAL

COMMISSION


COMMISSION

ELECTROTECHNIQUE


INTERNATIONALE




ICS 27.120.20 ISBN 978-2-8322-5583-4



Warning! Make sure that you obtained this publication from an authorized distributor.

Attention! Veuillez vous assurer que vous avez obtenu cette publication via un distributeur agréé.

® Registered trademark of the International Electrotechnical Commission
Marque déposée de la Commission Electrotechnique Internationale

---------------------- Page: 7 ----------------------

SIST EN IEC 61500:2019
– 2 – IEC 61500:2018  IEC 2018

CONTENTS
FOREWORD . 3
INTRODUCTION . 5
1 Scope . 7
2 Normative references . 7
3 Terms and definitions . 8
4 Symbols and abbreviated terms . 10
5 General requirements . 10
5.1 Principles of selection of data communication techniques and equipment . 10
5.2 Functional requirements . 10
5.3 Performance requirements . 11
5.4 Communication within and between division . 11
5.5 Interfaces to systems of lower importance to safety . 11
6 Electrical isolation and physical separation . 12
6.1 Electrical isolation . 12
6.2 Physical separation . 12
7 Functional independence . 12
8 Reliability . 13
8.1 Self-supervision and failure mitigation . 13
8.1.1 Communication error detection . 13
8.1.2 Response to failure . 13
8.2 Testing . 14
8.3 Prevention of failures (including CCF) . 14
8.4 Cybersecurity . 15
9 Qualification . 15
10 Maintenance and modification . 15
Bibliography . 16

---------------------- Page: 8 ----------------------

SIST EN IEC 61500:2019
IEC 61500:2018  IEC 2018 – 3 –
INTERNATIONAL ELECTROTECHNICAL COMMISSION
____________

NUCLEAR POWER PLANTS –
INSTRUMENTATION AND CONTROL SYSTEMS IMPORTANT TO SAFETY –
DATA COMMUNICATION IN SYSTEMS PERFORMING
CATEGORY A FUNCTIONS

FOREWORD
1) The International Electrotechnical Commission (IEC) is a worldwide organization for standardization comprising
all national electrotechnical committees (IEC National Committees). The object of IEC is to promote
international co-operation on all questions concerning standardization in the electrical and electronic fields. To
this end and in addition to other activities, IEC publishes International Standards, Technical Specifications,
Technical Reports, Publicly Available Specifications (PAS) and Guides (hereafter referred to as “IEC
Publication(s)”). Their preparation is entrusted to technical committees; any IEC National Committee interested
in the subject dealt with may participate in this preparatory work. International, governmental and non-
governmental organizations liaising with the IEC also participate in this preparation. IEC collaborates closely
with the International Organization for Standardization (ISO) in accordance with conditions determined by
agreement between the two organizations.
2) The formal decisions or agreements of IEC on technical matters express, as nearly as possible, an international
consensus of opinion on the relevant subjects since each technical committee has representation from all
interested IEC National Committees.
3) IEC Publications have the form of recommendations for international use and are accepted by IEC National
Committees in that sense. While all reasonable efforts are made to ensure that the technical content of IEC
Publications is accurate, IEC cannot be held responsible for the way in which they are used or for any
misinterpretation by any end user.
4) In order to promote international uniformity, IEC National Committees undertake to apply IEC Publications
transparently to the maximum extent possible in their national and regional publications. Any divergence
between any IEC Publication and the corresponding national or regional publication shall be clearly indicated in
the latter.
5) IEC itself does not provide any attestation of conformity. Independent certification bodies provide conformity
assessment services and, in some areas, access to IEC marks of conformity. IEC is not responsible for any
services carried out by independent certification bodies.
6) All users should ensure that they have the latest edition of this publication.
7) No liability shall attach to IEC or its directors, employees, servants or agents including individual experts and
members of its technical committees and IEC National Committees for any personal injury, property damage or
other damage of any nature whatsoever, whether direct or indirect, or for costs (including legal fees) and
expenses arising out of the publication, use of, or reliance upon, this IEC Publication or any other IEC
Publications.
8) Attention is drawn to the Normative references cited in this publication. Use of the referenced publications is
indispensable for the correct application of this publication.
9) Attention is drawn to the possibility that some of the elements of this IEC Publication may be the subject of
patent rights. IEC shall not be held responsible for identifying any or all such patent rights.
International Standard IEC 61500 has been prepared by subcommittee 45A: Instrumentation,
control and electrical power systems of nuclear facilities, of IEC technical committee 45:
Nuclear instrumentation.
This third edition cancels and replaces the second edition published in 2009. This edition
constitutes a technical revision.
This edition includes the following significant technical changes with respect to the previous
edition:
a) the changes introduced to previously referenced standards have been confirmed to apply;
b) relevant newly published standards have been referenced;
c) lessons learned from several industrial applications have been incorporated.

---------------------- Page: 9 ----------------------

SIST EN IEC 61500:2019
– 4 – IEC 61500:2018  IEC 2018
The text of this standard is based on the following documents:
FDIS Report on voting
45A/1183/FDIS 45A/1194/RVD

Full information on the voting for the approval of this standard can be found in the report on
voting indicated in the above table.
This publication has been drafted in accordance with the ISO/IEC Directives, Part 2.
The committee has decided that the contents of this publication will remain unchanged until
the stability date indicated on the IEC web site under "http://webstore.iec.ch" in the data
related to the specific publication. At this date, the publication will be
• reconfirmed,
• withdrawn,
• replaced by a revised edition, or
• amended.

---------------------- Page: 10 ----------------------

SIST EN IEC 61500:2019
IEC 61500:2018  IEC 2018 – 5 –
INTRODUCTION
a) Technical background, main issues and organization of the standard
The equipment for data communication of on-line plant data can simplify the hardwired cables
connecting distributed systems for instrumentation, control, protection and monitoring needed
for the safe operation of Nuclear Power Plants (NPP). Such communication systems can have
advantages over direct cables, for electrical isolation, for reduction of cable fire loads or other
reasons. In a distributed computer based system, communication equipment is an essential
part of the system. Data communication is usually essential for implementing I&C systems
important to safety in nuclear power plants.
It is intended that the document be used by operators of NPPs (utilities), manufacturers of
data communication equipment, systems evaluators and by licensors.
b) Situation of the current standard in the structure of the IEC SC 45A standard series
IEC 61500 is the third level IEC SC 45A document tackling the generic issue of data
communication for equipment performing category A functions.
IEC 61500 is to be read in association with IEC 61513, which is the appropriate IEC SC 45A
document providing guidance on general requirements for instrumentation and control
systems important to safety, IEC 60880, which is the appropriate IEC SC 45A document
providing guidance on software aspects for computer based systems performing category A
functions, and IEC 60987 which is the appropriate IEC SC 45A document providing guidance
on hardware aspects for computer based systems.
For more details on the structure of the IEC SC 45A standard series, see item d) of this
introduction.
c) Recommendations and limitations regarding the application of the standard
It is important to note that this standard establishes no additional functional requirements for
safety systems.
Aspects for which special recommendations have been provided in this standard are:
• Requirements for data communication within systems performing category A functions.
• Requirements for data communication between divisions of a system performing
category A functions.
• Requirements for data communication of systems performing category A functions with
systems of lower safety importance.
• Reliability requirements for data communication.
To ensure that the standard will continue to be relevant in future years, emphasis is placed on
principles, rather than on specific technologies.
d) Description of the structure of the IEC SC 45A standard series and relationships
with other IEC documents and other bodies documents (IAEA, ISO)
The top-level documents of the IEC SC 45A standard series are IEC 61513 and IEC 63046.
IEC 61513 provides general requirements for I&C systems and equipment that are used to
perform functions important to safety in NPP. IEC 63046 provides general requirements for
electrical power systems of NPP; it covers power supply systems including the supply
systems of the I&C systems. IEC 61513 and IEC 63046 are to be considered in conjunction
and at the same level. IEC 61513 and IEC 63046 structure the IEC SC 45A standard series
and shape a complete framework establishing general requirements for instrumentation,
control and electrical systems for nuclear power plants.

---------------------- Page: 11 ----------------------

SIST EN IEC 61500:2019
– 6 – IEC 61500:2018  IEC 2018
IEC 61513 and IEC 63046 refer directly to other IEC SC 45A standards for general topics
related to categorization of functions and classification of systems, qualification, separation,
defence against common cause failure, control room design, electromagnetic compatibility,
cybersecurity, software and hardware aspects for programmable digital systems, coordination
of safety and security requirements and management of ageing. The standards referenced
directly at this second level should be considered together with IEC 61513 and IEC 63046 as
a consistent document set.
At a third level, IEC SC 45A standards not directly referenced by IEC 61513 or by IEC 63046
are standards related to specific equipment, technical methods, or specific activities. Usually
these documents, which make reference to second-level documents for general topics, can be
used on their own.
A fourth level extending the IEC SC 45A standard series, corresponds to the Technical
Reports which are not normative.
The IEC SC 45A standard series consistently implements and details the safety and security
principles and basic aspects provided in the relevant IAEA safety standards and in the
relevant documents of the IAEA nuclear security series (NSS). In particular this includes the
IAEA requirements SSR-2/1, establishing safety requirements related to the design of nuclear
power plants, the IAEA safety guide SSG-30 dealing with the safety classification of
structures, systems and components in NPP, the IAEA safety guide SSG-39 dealing with the
design of instrumentation and control systems for NPPs, the IAEA safety guide SSG-34
dealing with the design of electrical power systems for NPPs and the implementing guide
NSS17 for computer security at nuclear facilities. The safety and security terminology and
definitions used by the IEC SC 45A standards are consistent with those used by the IAEA.
IEC 61513 and IEC 63046 have adopted a presentation format similar to the basic safety
publication IEC 61508 with an overall life-cycle framework and a system life-cycle framework.
Regarding nuclear safety, IEC 61513 and IEC 63046 provide the interpretation of the general
requirements of IEC 61508-1, IEC 61508-2 and IEC 61508-4, for the nuclear application
sector. In this framework IEC 60880, IEC 62138 and IEC 62566 correspond to IEC 61508-3
for the nuclear application sector. IEC 61513 and IEC 63046 refer to ISO as well as to IAEA
GS-R-3 and IAEA GS-G-3.1 and IAEA GS-G-3.5 for topics related to quality assurance (QA).
At level 2, regarding nuclear security, IEC 62645 is the entry document for the IEC SC 45A
security standards. It builds upon the valid high level principles and main concepts of the
generic security standards, in particular ISO/IEC 27001 and ISO/IEC 27002; it adapts them
and completes them to fit the nuclear context and coordinates with the IEC 62443 series. Also
at level 2, IEC 60964 is the entry document for the IEC SC 45A control rooms standards and
IEC 62342 is the entry document for the IEC SC 45A ageing management standards.
NOTE 1 It is assumed that for the design of I&C systems in NPPs that implement conventional safety functions
(e.g. to address worker safety, asset protection, chemical hazards, process energy hazards) international or
national standards would be applied.
NOTE 2 IEC SC 45A domain was extended in 2013 to cover electrical systems. In 2014 and 2015 discussions
were held in IEC SC 45A to decide how and where general requirements for the design of electrical systems were
to be considered. IEC SC 45A experts recommended that an independent standard be developed at the same level
as IEC 61513 to establish general requirements for electrical systems. Project IEC 63046 is now launched to cover
this objective. When IEC 63046 will be published this NOTE 2 of the introduction of IEC SC 45A standards will be
suppressed.

---------------------- Page: 12 ----------------------

SIST EN IEC 61500:2019
IEC 61500:2018  IEC 2018 – 7 –
NUCLEAR POWER PLANTS –
INSTRUMENTATION AND CONTROL SYSTEMS IMPORTANT TO SAFETY –
DATA COMMUNICATION IN SYSTEMS PERFORMING
CATEGORY A FUNCTIONS



1 Scope
This document establishes requirements for data communication which is used in systems
performing category A functions in nuclear power plants.
It covers also interface requirements for data communication of equipment performing
category A functions with other systems including those performing category B and C
functions and functions not important to safety.
The scope of this document is restricted to the consideration of data communication within the
plant I&C safety systems. It does not cover communication by telephone, radio, voice, fax,
email, public address, etc.
The internal operation and the detailed technical specification of data communication
equipment are not in the scope of this document. This document is not applicable to the
internal connections and data communication of a processor unit, its memory and control logic.
It does not address the internal processing of instrumentation and control computer based
systems.
This document gives requirements for functions and properties of on-line plant data
communication by reference to IEC 60880 and IEC 60987, produced within the framework of
IEC 61513. It requires categorisation of the communication functions in accordance with
IEC 61226, which in turn requires environmental and seismic qualification (i.e., the
environment where the safety function is required to operate) according to
IEC/IEEE 60780-323 and IEC 60980.
2 Normative references
The following documents are referred to in the text in such a way that some or all of their
content constitutes requirements of this document. For dated references, only the edition
cited applies. For undated references, the latest edition of the referenced document (including
any amendments) applies.
IEC 60671:2007, Nuclear power plants – Instrumentation and control systems important to
safety – Surveillance testing
IEC 60709, Nuclear power plants – Instrumentation and control systems important to safety –
Separation
IEC/IEEE 60780-323:2016, Nuclear facilities – Electrical equipment important to safety –
Qualification
IEC 60880:2006, Nuclear power plants – Instrumentation and control systems important to
safety – Software aspects for computer-based systems performing category A functions
IEC 60980, Recommended practices for seismic qualification of electrical equipment of the
safety system for nuclear generating stations

---------------------- Page: 13 ----------------------

SIST EN IEC 61500:2019
– 8 – IEC 61500:2018  IEC 2018
IEC 60987:2007, Nuclear power plants – Instrumentation and control important to safety –
Hardware design requirements for computer-based systems
IEC 60987:2007/AMD1:2013
IEC 61000 (all parts), Electromagnetic compatibility (EMC)
IEC 61513, Nuclear power plants – Instrumentation and control important to safety – General
requirements for systems
IEC 62003, Nuclear power plants – Instrumentation and control important to safety –
Requirements for electromagnetic compatibility testing
IEC 62340:2007, Nuclear power plants – Instrumentation and control systems important to
safety – Requirements for coping with common cause failure (CCF)
IEC 62566:2012, Nuclear power plants – Instrumentation and control important to safety –
Development of HDL-programmed integrated circuits for systems performing category A
functions
IEC 62645:2014, Nuclear power plants – Instrumentation and control systems – Requirements
for security programmes for computer-based systems
IEC 62859, Nuclear power plants – Instrumentation and control systems – Requirements for
coordinating safety and cybersecurity
IAEA safety guide No. SSG-39:2016, Design of instrumentation and control systems for
nuclear power plants
3 Terms and definitions
For the purposes of this document, the terms and definitions given in IEC 60880, IAEA safety
glossary, IAEA safety guide No. SSG-39 and the following apply.
ISO and IEC maintain terminological databases for use in standardization at the following
addresses:
• IEC Electropedia: available at http://www.electropedia.org/
• ISO Online browsing platform: available at http://www.iso.org/obp
3.1
communication channel
logical connection between two end-points within a communication system
[SOURCE: IEC 61784-3:2016, 3.1.8]
3.2
communication node
connection point on a communication network, at which data is conveyed via communication
channels to or from that point to other points on the network
3.3
communication system
arrangement of hardware, software and propagation media to allow the transfer of messages
(ISO/IEC 7498-1 application layer) from one application to another
[SOURCE: IEC 61784-3:2016, 3.1.9]

---------------------- Page: 14 ----------------------

SIST EN IEC 61500:2019
IEC 61500:2018  IEC 2018 – 9 –
...