Safety subsystem
entity of the top-level architectural design of a safety-related system where a dangerous failure of the subsystem results in dangerous failure of a safety function
- Inherited
- 7
Hierarchy#
Ancestors (top) → ACG065 (highlighted) → subclasses and powertype instances. Capped at 12 each; see the full lists in the sections below.
Higher level classes3#
Declared properties#
No declared properties
This class does not declare any properties of its own.
Inherited properties (7) — click to expand
discrete level (one out of a possible three) for describing the capability to perform a safety function where safety integrity level three has the highest level of safety integrity and safety integrity level one has the lowest
average frequency of dangerous failure of a safety-related control system to perform a specified safety function over a given period of time
time interval between tests performed to detect dangerous hidden failures in a safety-related system
discrete level used to specify the ability of safety-related parts of control systems to perform a safety function under foreseeable conditions
classification of the subsystem in respect to its resistance to faults and its subsequent behaviour in the fault condition, and which is achieved by the structural arrangement of the parts, fault detection and/or by their reliability
mean number of operating cycles at which ten percent of the components fail dangerously
expectation of the mean time to dangerous failure
Imported properties5#
Subclasses#
No subclasses
This class is a leaf — no other classes inherit from it.
Is case of (powertype parents)2#
Metadata#
- Synonyms
- subsystem(device type 1)
- Note
- Note 1 to entry: This differs from common language where “subsystem” may mean any sub-divided part of an entity, the term “subsystem” is used in this document within a strongly defined hierarchy of terminology: “subsystem” is the first level subdivision of a system. The parts resulting from further subdivision of a subsystem are called “subsystem elements”. Note 2 to entry: A complete subsystem can be made up from a number of identifiable and separate subsystem elements. Note 3 to entry: The subsystem specification includes its role in the safety function and its interface with the other subsystems of the SCS. Note 4 to entry: One subsystem can be part of several safety functions, e.g. the same combination of contactors can be used to de-energise a motor either in the event of detection of a person in a danger zone or also in the event of opening an interlock guard.
- Source document
- IEC 62061:2021, 3.2.4
- Version
- 2
- Revision
- 1
- Status
- Standard
- Publisher
- IEC
- Responsible committee
- IEC/TC 121
- Change request
C00094- Dates
- Original: 2013-07-29
- Current version: 2025-09-26
- Current revision: 2025-09-26
Full source data#
Every key from the original .xls export, including multilingual variants, status, publisher, committee, and workbook-specific codes.
Raw properties (40 keys from source .xls) — click to expand
- C002
- C00094
- C011
- IEC
- C016
- Standard
- C017.de
- 1
- C017.fr
- 1
- C017.zh
- 1
- C018.de
- 2025-09-01
- C018.fr
- 2021-10-05
- C018.zh
- 2025-08-05
- C019.de
- DKE, Silvio Foertsch
- C019.fr
- IEC TC 121/WG 3
- C019.zh
- SAC,Jia Feng
- MDC_P001_5
- 0112/2///62683#ACG065
- MDC_P002_1
- 2
- MDC_P002_2
- 1
- MDC_P003_0
- 2025-09-25
- MDC_P003_1
- 2013-07-29
- MDC_P003_2
- 2025-09-26
- MDC_P003_3
- 2025-09-26
- MDC_P004.de
- Sicherheitsteilsystem
- MDC_P004.en
- Safety subsystem
- MDC_P004.fr
- Sous-système de sécurité
- MDC_P004.zh
- 安全子系统
- MDC_P006_1
- IEC 62061:2021, 3.2.4
- MDC_P006.de
- Einheit des Architekturentwurfs auf oberster Ebene eines sicherheitsbezogenen Systems, bei der ein gefahrbringender Ausfall des Teilsystems zu einem gefahrbringenden Ausfall einer Sicherheitsfunktion führt
- MDC_P006.en
- entity of the top-level architectural design of a safety-related system where a dangerous failure of the subsystem results in dangerous failure of a safety function
- MDC_P006.fr
- entité de la conception architecturale générale d'un système relatif à la sécurité dans laquelle une défaillance dangereuse du sous-système conduit à une défaillance dangereuse d'une fonction de sécurité
- MDC_P006.zh
- 安全相关系统顶层架构设计的实体，其中子系统的危险失效导致安全功能的危险失效
- MDC_P007.en
- device type 1, subsystem
- MDC_P007.fr
- dispositif de type 1, sous-système
- MDC_P008.de
- Anmerkung 1 zum Begriff: Dies unterscheidet sich von der allgemeinen Sprache, wo „Teilsystem“ jeden unterteilten Teil einer Einheit bedeuten kann, der Begriff „Teilsystem“ wird in diesem Dokument innerhalb einer stark definierten Hierarchie der Terminologie verwendet: „Teilsystem“ ist die Unterteilung eines Systems auf oberster Ebene. Die Teile, die sich aus der weiteren Unterteilung eines Teilsystems ergeben, werden als „Teilsystem-Elemente“ bezeichnet.
- MDC_P008.en
- Note 1 to entry: This differs from common language where “subsystem” may mean any sub-divided part of an entity, the term “subsystem” is used in this document within a strongly defined hierarchy of terminology: “subsystem” is the first level subdivision of a system. The parts resulting from further subdivision of a subsystem are called “subsystem elements”. Note 2 to entry: A complete subsystem can be made up from a number of identifiable and separate subsystem elements. Note 3 to entry: The subsystem specification includes its role in the safety function and its interface with the other subsystems of the SCS. Note 4 to entry: One subsystem can be part of several safety functions, e.g. the same combination of contactors can be used to de-energise a motor either in the event of detection of a person in a danger zone or also in the event of opening an interlock guard.
- MDC_P008.fr
- Note 1 à l’article: Cette définition diffère du langage courant où le terme "sous-système" peut signifier une quelconque partie subdivisée d'une entité; le terme "sous-système" est utilisé dans le présent document dans une hiérarchie terminologique bien déterminée: le "sous-système" est le premier niveau de subdivision d'un système. Les parties résultant de subdivisions ultérieures d'un sous-système sont appelées "éléments de sous-système". Note 2 à l’article: Un sous-système complet peut être constitué d'un certain nombre d'éléments de sous-système identifiables et séparés. Note 3 à l’article: La spécification du sous-système inclut son rôle dans la fonction de sécurité et son interface avec les autres sous-systèmes du SCS. Note 4 à l’article: Un sous-système peut faire partie de plusieurs fonctions de sécurité, par exemple, la même combinaison de contacteurs peut être utilisée pour couper l'alimentation d'un moteur soit en cas de détection d’une personne dans une zone de danger, soit également en cas d'ouverture d'un protecteur avec dispositif de verrouillage.
- MDC_P008.zh
- 注 1：这与日常用语不同，在日常用语中，“子系统” 可指一个实体的任何细分部分；而在本文档中，“子系统” 一词用于严格定义的术语层级体系中：“子系统” 是系统的第一层级细分。对子系统进一步细分后产生的部分称为 “子系统组件”。 注 2：一个完整的子系统可由若干可识别且相互独立的子系统组件构成。 注 3：子系统规范包括其在安全功能中所承担的角色，以及它与安全控制系统（SCS）中其他子系统的接口。 注 4：一个子系统可属于多个安全功能的组成部分，例如，同一组接触器既可用于在检测到危险区域内有人时切断电机电源，也可用于在联锁防护打开时切断电机电源。
- MDC_P010
- 0112/2///62683#ACG000
- MDC_P011
- ITEM_CLASS
- MDC_P012
- IEC/TC 121
- MDC_P013
- {0112/2///62683#ACC077,0112/2///62683#ACC078}
- MDC_P019
- false
- MDC_P090
- {0112/2///62683#ACE051,0112/2///62683#ACE052,0112/2///62683#ACE058,0112/2///62683#ACE060,0112/2///62683#ACE063}
Version history4#
IEC CDD records every published revision of each entity — version number, status, timestamp, and the change request that introduced it. OpenCDD captures the full chain of custody from cdd.iec.ch; the entry marked Current is the one rendered on this page.