本文件规定了执行IEC 61226规定的B类或C类安全功能的计算机仪表和控制（I&C）系统软件的要求。它是对IEC 60880的补充，IEC 60880规定了基于计算机的仪控系统软件的要求，该系统执行安全等级A的功能。 它符合并补充了IEC 61513。主要是系统级活动（例如，集成、验证和安装）的活动未在本文件中详细说明:非特定于软件的要求将遵循IEC 61513。 IEC 61513中给出了功能类别和系统类别之间的联系。由于给定的安全等级仪控系统可能执行不同安全等级的功能，甚至非安全等级的功能，因此本文件的要求附在仪控系统的安全等级（2级或3级）之后。 本文档不打算用作通用软件工程指南。它适用于新核电厂2级或3级安全级仪控系统的软件，以及仪控升级或恢复- 现有设备的安装。 对于现有工厂，只有一部分要求适用，并且必须在任何项目开始时确定该部分要求。 本文件提供的指南旨在尽可能减少潜在软件故障导致系统故障的可能性，无论是由于单个软件故障还是多个软件故障（即，由于软件故障导致的共因故障）。交叉引用:EN 60880:2009EN 61513:2013IEC 60880:2006IEC 61226EN 61226IEC 62671:2013IEC 61513:2011EN ISO 9001: 2015IEC 61511-1:2016IEC 61508-3:2010ISO 9001:2015IEC 61508-4:2010EN 61508-3:2010购买本文件时提供的所有当前修订版均包含在购买本文件中。

This document specifies requirements for the software of computer-based instrumentation and control (I&C) systems performing functions of safety category B or C as defined by IEC 61226. It complements IEC 60880 which provides requirements for the software of computer-based I&C systems performing functions of safety category A. It is consistent with, and complementary to, IEC 61513. Activities that are mainly system level activities (for example, integration, validation and installation) are not addressed exhaustively by this document: requirements that are not specific to software are deferred to IEC 61513. The link between functions categories and system classes is given in IEC 61513. Since a given safety-classified I&C system may perform functions of different safety categories and even non safety-classified functions, the requirements of this document are attached to the safety class of the I&C system (class 2 or class 3). This document is not intended to be used as a general-purpose software engineering guide. It applies to the software of I&C systems of safety classes 2 or 3 for new nuclear power plants as well as to I&C upgrading or back-fitting of existing plants. For existing plants, only a subset of requirements is applicable and this subset has to be identified at the beginning of any project. The purpose of the guidance provided by this document is to reduce, as far as possible, the potential for latent software faults to cause system failures, either due to single software failures or multiple software failures (i.e. Common Cause Failures due to software).Cross References:EN 60880:2009EN 61513:2013IEC 60880:2006IEC 61226EN 61226IEC 62671:2013IEC 61513:2011EN ISO 9001:2015IEC 61511-1:2016IEC 61508-3:2010ISO 9001:2015IEC 61508-4:2010EN 61508-3:2010All current amendments available at time of purchase are included with the purchase of this document.