Commission Implementing Regulation (EU) 2019/776 of 16 May 2019 amending Commission Regulations (EU) No 321/2013, (EU) No 1299/2014, (EU) No 1301/2014, (EU) No 1302/2014, (EU) No 1303/2014 and (EU) 2016/919 and Commission Implementing Decision 2011/665/EU as regards the alignment with Directive (EU) 2016/797 of the European Parliament and of the Council and the implementation of specific objectives set out in Commission Delegated Decision (EU) 2017/1474 (Text with EEA relevance.)

7.3.2.2   Specific case Channel Tunnel (“P”)

Additional prescriptions for passenger rolling stock intended to be operated in the Channel Tunnel are detailed in the LOC&PAS TSI, clause 7.3.2.21’;

• (48) The table in appendix B is replaced as follows:

‘Characteristics to be assessed	Project phase	Project phase	Particular assessment procedures
‘Characteristics to be assessed	Design review	Assembly before putting into service	Particular assessment procedures
‘Characteristics to be assessed	1	2	3
4.2.1.1. Prevent unauthorised access to emergency exits and technical rooms	X	X
4.2.1.2. Fire resistance of tunnel structures	X		6.2.7.2
4.2.1.3. Fire reaction of building material	X		6.2.7.3
4.2.1.4. Fire detection in technical rooms	X	X
4.2.1.5. Evacuation facilities	X	X	6.2.7.4 6.2.7.5
4.2.1.6. Escape walkways	X	X
4.2.1.7 Evacuation and rescue points	X	X
4.2.1.8 Emergency communication	X
4.2.1.9. Electricity supply for emergency response services	X
4.2.1.10. Reliability of electrical systems	X		6.2.7.6
4.2.2.1. Sectioning of contact line	X	X
4.2.2.2. Earthing of contact line	X	X’

[^ntc*1-LI2019139EN.01022901-E0001]  Commission Delegated Regulation (EU) 2016/364 of 1 July 2015 on the classification of the reaction to fire performance of construction products pursuant to Regulation (EU) No 305/2011 of the European Parliament and of the Council (OJ L 68, 15.3.2016, p. 4).’;’

ANNEX VI

The Annex to Regulation (EU) 2016/919 is amended as follows:

• (1) Section 1.1 is amended as follows:

• (a) in the second subparagraph, the text ‘Annex I points 1.2 and 2.2 of Directive 2008/57/EC’ is replaced by the text ‘Annex I point 2 of Directive (EU) 2016/797’;

• (b) points (1) to (4) are replaced by the following:

• ‘(1) locomotives and passenger rolling stock, including thermal or electric traction units, self-propelling thermal or electric passenger trains, and passenger coach, if equipped with a driving cab.

• (2) special vehicles, such as on-track machines, if equipped with a driving cab and intended to be used in transport mode on its own wheels.

This list of vehicles shall include those which are specially designed to operate on the different types of high-speed lines described in point 1.2. (Geographical scope).’;

• (2) Section 1.2 is replaced by the following:

‘1.2.   Geographical Scope

The geographical scope of this TSI is the network of the whole rail system, as described in Annex I point 1 of Directive (EU) 2016/797 and excludes the infrastructure cases referred to in Articles 1(3) and 1(4) of Directive (EU) 2016/797.

The TSI shall apply to networks with 1 435 mm, 1 520 mm, 1 524 mm, 1 600 mm and 1 668 mm track gauges. However, it shall not apply to short border crossing lines with 1 520 mm track gauges that are connected to the network of third countries.’;

• (3) Section 1.3 is amended as follows:

• (a) the text ‘Article 5(3) of Directive 2008/57/EC’ is replaced by the text ‘Article 4(3) of Directive (EU) 2016/797’;

• (b) points (8) and (9) are added after point (7) as follows:

• ‘(8) indicates the provisions applicable to the existing subsystems, in particular in the event of upgrading and renewal and, in such cases, the modification work which requires an application for a new authorisation for the vehicle or trackside subsystem — Chapter 7 (Implementing the Control-Command and Signalling Subsystems TSI);

• (9) indicates the parameters of the subsystems to be checked by the railway undertaking and the procedures to be applied to check those parameters after the delivery of the vehicle authorisation for placing on the market and before the first use of the vehicle to ensure compatibility between vehicles and the routes on which they are to be operated — Chapter 4 (Characterisation of the Subsystems).’;

• (c) the text ‘Article 5(5) of Directive 2008/57/EC’ is replaced by the text ‘Article 4(5) of Directive (EU) 2016/797’;

• (4) The first paragraph of section 2.1 is replaced by the following:

‘The Control-Command and Signalling Subsystems are defined in Annex II of Directive (EU) 2016/797 as:

• (a) Trackside control-command and signalling as: “all the trackside equipment required to ensure safety and to command and control movements of trains authorised to travel on the network.”

• (b) On-board control-command and signalling as “all the on-board equipment required to ensure safety and to command and control movements of trains authorised to travel on the network”.’;

• (5) Section 2.2 is amended as follows:

• (a) The first paragraph is replaced by the following:

‘The Control-Command and Signalling Subsystem TSI specifies only those requirements which are necessary to assure the interoperability of the Union rail system and the compliance with the essential requirements[^ntr*1-LI2019139EN.01023801-E0001].

[^ntr*1-LI2019139EN.01023801-E0001]: Currently the CCS TSI does not specify any interoperability requirement for the interlockings, level crossings and certain other elements of the CCS.’;"

• (b) the text ‘Class B systems for the trans-European rail system network are a limited set of train protection limited set of train protection legacy systems that were in use in the trans-European rail network before 20 April 2001’ is replaced by ‘Class B systems for the trans-European rail system network are a limited set of train protection and voice radio legacy systems that were already in use in the trans-European rail network before 20 April 2001’;

• (c) the text ‘Class B systems for other parts of the network of the rail system in the European Union are a limited set of train protection legacy systems that were in use in that networks before 1 July 2015’ is replaced by ‘Class B systems for other parts of the network of the rail system in the European Union are a limited set of train protection and voice radio legacy systems that were already in use in those networks before 1 July 2015’;

• (d) the text ‘The list of Class B systems is established in the European Railway Agency technical documents “List of CCS Class B systems, ERA/TD/2011-11, version 3.0.”’ is replaced by ‘The list of Class B systems is established in the European Union Agency for Railways technical document “List of CCS Class B systems, ERA/TD/2011-11, version 4.0.”’;

• (e) the text ‘All Control-Command and Signalling Subsystems, even where not specified in this TSI, shall be assessed according with Commission Implementing Regulation (EU) No 402/2013.’ is added at the end of Section 2.2.

• (6) Section 2.3 is replaced by the following:

‘2.3   Trackside Application Levels (ETCS)

The interfaces specified by this TSI define the means of data transmission to, and (where appropriate) from trains. The ETCS specifications referenced by this TSI provide application levels from which a trackside implementation may choose the means of transmission that meet its requirements.

This TSI defines the requirements for all application levels.

For the technical definition of the ETCS application levels see Annex A, 4.1 c.’;

• (7) Section 3.1 is amended as follows:

• (a) the text ‘Directive 2008/57/EC’ is replaced by the reference to ‘Directive (EU) 2016/797’;

• (b) a new point (6) is added after point 5 as follows:

• ‘(6) Accessibility.’;

• (8) Section 3.2.1 is replaced by the following:

‘3.2.1   Safety

Every Control-Command and Signalling Subsystems project shall take the measures necessary to ensure that the level of risk of an incident occurring within the scope of the Control-Command and Signalling Subsystems, is not higher than the objective for the service.

To ensure that the measures taken to achieve safety do not jeopardise interoperability, the requirements of the basic parameter defined in point 4.2.1 (Control-Command and Signalling reliability, availability and safety characteristics relevant to interoperability) shall be respected.

For the ETCS Class A system the safety objective is apportioned between the Control-Command and Signalling On-board and Trackside Subsystems. The detailed requirements are specified in the basic parameter defined in point 4.2.1 (Control-Command and Signalling reliability, availability and safety characteristics relevant to interoperability). This safety requirement shall be met together with the availability requirements as defined in Point 3.2.2 (Reliability and Availability).

For the ETCS Class A system:

• (a) the changes made by railway undertakings and infrastructure managers shall be managed in compliance with the processes and procedures of their safety management system;

• (b) the changes made by other actors (e.g. manufacturers or other suppliers) shall be managed according to the risk management process set out in Annex I to the Commission Implementing Regulation (EU) No 402/2013[^ntr2-LI2019139EN.01023801-E0002], as referred to in Article 6(1)(a) of Directive (EU) 2016/798 of the European Parliament and of the Council[^ntr3-LI2019139EN.01023801-E0003].

Additionally the correct application of the risk management process as set out in Annex I of Regulation (EU) No 402/2013, as well as the appropriateness of the results from this application, shall be independently assessed by a CSM assessment body according to Article 6 of that Regulation. The CSM Assessment Body shall be accredited or recognised according to the requirements in Annex II of Regulation (EU) No 402/2013 in the fields of “Control-command and signalling” and “System safe integration” as listed in item 5 “classification” of ERADIS database entry for Assessment Bodies.

The application of the specifications as referred to in Annex A, Table A 3 is an appropriate means to fully comply to the risk management process as set out in Annex I of the Commission Implementing Regulation (EU) No 402/2013 for design, implementation, production, installation and validation (incl. Safety acceptance) of interoperability constituents and subsystems. When different specifications from the ones referred to in Annex A, Table 3 are applied, at least equivalence shall be demonstrated with the specifications in Annex A, Table 3.

Whenever the specifications as referred to in Annex A, Table A 3 are used as an appropriate means to fully comply to the risk management process as set out in Annex I of the Commission Implementing Regulation (EU) No 402/2013, in order to avoid unnecessary duplication of independent assessment work, the independent safety assessment activities that are required by the specifications referred to in Annex A, Table A 3 shall be carried out by an Assessment Body accredited or recognized as specified in the section above instead of a CENELEC independent safety assessor.

[^ntr*2-LI2019139EN.01023801-E0002]: Commission Implementing Regulation (EU) No 402/2013 of 30 April 2013 on the common safety method for risk evaluation and assessment and repealing Regulation (EC) No 352/2009 (OJ L 121, 3.5.2013, p. 8)."

[^ntr*3-LI2019139EN.01023801-E0003]: Directive (EU) 2016/798 of the European Parliament and of the Council of 11 May 2016 on railway safety (OJ L 138, 26.5.2016, p. 102).’;"

• (9) The second paragraph of section 3.2.2 is replaced by the following:

‘The level of risk caused by age and wear of constituents used within the subsystem shall be monitored. The requirements for maintenance stated in point 4.5 shall be respected.’;

• (10) Section 3.2.5.2 is deleted;

• (11) A new section 3.2.6 is added as follows:

‘3.2.6   Accessibility

No requirements are mandated for the CCS subsystems for the essential requirement accessibility.’

• (12) Section 4.1.1 is amended as follows:

• (a) in point (16) the text ‘points 4.2.16’ is replaced by ‘point 4.2.16’;

• (b) a new point (17) is added as follows:

• ‘(17) ETCS and Radio System Compatibility (point 4.2.17)’;

• (13) In section 4.1.2 the text ‘limiting the movement of TSI-compliant on-board subsystems.’ is replaced by ‘limiting the movement of vehicles with TSI-compliant on-board subsystems.’;

• (14) Table 4.1 in section 4.1.3 is replaced by:

‘Table 4.1

Subsystem	Part	Basic parameters
Control-Command and Signalling On-board	Train protection	4.2.1, 4.2.2, 4.2.5, 4.2.6, 4.2.8, 4.2.9, 4.2.12, 4.2.14, 4.2.16, 4.2.17
Control-Command and Signalling On-board	Voice radio communication	4.2.1.2, 4.2.4.1, 4.2.4.2, 4.2.5.1, 4.2.13, 4.2.16, 4.2.17
Control-Command and Signalling On-board	Data radio communication	4.2.1.2, 4.2.4.1, 4.2.4.3, 4.2.5.1, 4.2.6.2, 4.2.16, 4.2.17
Control-Command and Signalling Trackside	Train protection	4.2.1, 4.2.3, 4.2.5, 4.2.7, 4.2.8, 4.2.9, 4.2.15, 4.2.16, 4.2.17
Control-Command and Signalling Trackside	Voice radio communication	4.2.1.2, 4.2.4, 4.2.5.1, 4.2.7, 4.2.16, 4.2.17
Control-Command and Signalling Trackside	Data radio communication	4.2.1.2, 4.2.4, 4.2.5.1, 4.2.7, 4.2.16, 4.2.17
Control-Command and Signalling Trackside	Train detection	4.2.10, 4.2.11, 4.2.16’

• (15) The title of section 4.2.1 is replaced by ‘Control-Command and Signalling reliability, availability and safety characteristics relevant to interoperability’;

• (16) Section 4.2.2 is replaced by the following:

‘4.2.2.   On-board ETCS functionality

The basic parameter for ETCS on-board functionality describes all of the functions needed to run a train in a safe way. The primary function is to provide automatic train protection and cab signalling:

• (1) setting the train characteristics (e.g., maximum train speed, braking performance);

• (2) selecting the supervision mode on the basis of information from trackside;

• (3) performing odometry functions;

• (4) locating the train in a coordinate system based on Eurobalise locations;

• (5) calculating the dynamic speed profile for its mission on the basis of train characteristics and of information from trackside;

• (6) supervising the dynamic speed profile during the mission;

• (7) providing the intervention function.

These functions shall be implemented in accordance with Annex A 4.2.2 b and their performance shall conform to Annex A 4.2.2 a.

The requirements for tests are specified in Annex A 4.2.2 c.

The main functionality is supported by other functions, to which Annex A 4.2.2 a and Annex A 4.2.2 b also apply, together with the additional specifications indicated below:

• (1) Communication with the Control-Command and Signalling Trackside Subsystem.

• (a) Eurobalise data transmission. See point 4.2.5.2 (Eurobalise communication with the train).

• (b) Euroloop data transmission. See point 4.2.5.3 (Euroloop communication with the train). This functionality is optional on-board unless Euroloop is installed trackside in ETCS Level 1 and the release speed is set to zero for safety reasons (e.g. protection of danger points).

• (c) Radio data transmission for radio infill. See Annex A, 4.2.2 d, point 4.2.5.1 (Radio communications with the train), point 4.2.6.2 (Interface between GSM-R Radio Data Communication and ETCS) and point 4.2.8 (Key Management). This functionality is optional on-board unless radio data transmission for radio in-fill is installed trackside in ETCS Level 1 and the release speed is set to zero for safety reasons (e.g., protection of danger points).

• (d) Radio data transmission. See point 4.2.5.1 (Radio communications with the train), point 4.2.6.2 (Interface between GSM-R Radio Data Communication and ETCS) and point 4.2.8 (Key Management). This radio data transmission is optional unless operating on an ETCS level 2 or level 3 lines.

• (2) Communicating with the driver. See Annex A, 4.2.2 e and point 4.2.12 (ETCS DMI).

• (3) Communicating with the STM. See point 4.2.6.1 (Interface between ETCS and STM). This function includes:

• (a) managing the STM output;

• (b) providing data to be used by the STM;

• (c) managing STM transitions.

• (4) Managing information about the completeness of the train (train integrity) — Supplying the train integrity to the on-board subsystem, is optional unless it is required by trackside.

• (5) Equipment health monitoring and degraded mode support. This function includes:

• (a) initialising the on-board ETCS functionality;

• (b) providing degraded mode support;

• (c) isolating the on-board ETCS functionality.

• (6) Support data recording for regulatory purposes. See point 4.2.14 (Interface to Data Recording for Regulatory Purposes).

• (7) Forwarding information/orders and receiving state information from rolling stock:

• (a) to the DMI. See point 4.2.12 (ETCS DMI)

• (b) to/from the train interface unit. See Annex A, 4.2.2 f.’;

• (17) Section 4.2.3 is replaced by the following:

‘4.2.3.   Trackside ETCS functionality

This Basic parameter describes the ETCS trackside functionality. It contains all ETCS functionality to provide a safe path to a specific train.

The main functionality is:

• (1) locating a specific train in a coordinate system based on Eurobalise locations (level 2 and level 3);

• (2) translating the information from trackside signalling equipment into a standard format for the Control-Command and Signalling On-board Subsystem;

• (3) sending movement authorities including track description and orders assigned to a specific train.

These functions shall be implemented in accordance with Annex A 4.2.3 b and their performance shall conform to Annex A 4.2.3 a.

The main functionality is supported by other functions, to which Annex A 4.2.3 a and Annex A 4.2.3 b also apply, together with the additional specifications indicated below:

• (1) communicating with the Control-Command and Signalling On-board Subsystem. This includes:

• (a) Eurobalise data transmission. See point 4.2.5.2 (Eurobalise communication with the train) and point 4.2.7.4 (Eurobalise/Line-side Electronic Unit (LEU));

• (b) Euroloop data transmission. See point 4.2.5.3 (Euroloop communication with the train) and point 4.2.7.5 (Euroloop/LEU). Euroloop is only relevant in level 1, in which it is optional;

• (c) Radio data transmission for radio infill. See Annex A, 4.2.3 d, point 4.2.5.1 (Radio communications with the train), point 4.2.7.3 (GSM-R/trackside ETCS functionality) and point 4.2.8 (Key Management). Radio in-fill is only relevant in level 1, in which it is optional;

• (d) Radio data transmission. See point 4.2.5.1 (Radio communications with the train), point 4.2.7.3 (GSM-R/trackside ETCS functionality) and point 4.2.8 (Key Management). Radio data transmission is only relevant to level 2 and level 3.

• (2) generating information/orders to the on-board ETCS, e.g. information related to closing/opening the air flaps, lowering/raising the pantograph, opening/closing the main power switch, changing from traction system A to traction system B. Implementation of this functionality is optional for trackside; it can however be required by other applicable TSIs or national rules or the application of risk evaluation and assessment to ensure safe integration of subsystems;

• (3) managing the transitions between areas supervised by different Radio Block Centres (RBCs) (only relevant for level 2 and level 3). See point 4.2.7.1 (Functional interface between RBCs) and point 4.2.7.2 (Technical interface between RBCs).’;

• (18) In section 4.2.6.3 the reference to ‘4.2.6f’ is deleted.

• (19) In section 4.2.11 the text ‘Control-Command and Signalling equipment.’ is replaced by ‘Control-Command and Signalling train detection equipment.’

• (20) In section 4.2.16 the text ‘by Control-command and signalling On-board Subsystems’ is replaced by ‘by Control-command and signalling On-board Interoperability Constituents and Subsystems’;

• (21) A new section 4.2.17 is added as follows:

‘4.2.17.   ETCS and Radio System Compatibility

Due to the different possible implementations and the status of the migration to fully compliant CCS Subsystems, checks shall be performed in order to demonstrate the technical compatibility between the on-board and trackside CCS Subsystems. The necessity of these checks shall be considered as a measure to increase the confidence on the technical compatibility between the CCS subsystems. It is expected that these checks will be reduced until the principle stated in 6.1.2.1 is achieved.

4.2.17.1.   ETCS System Compatibility

ETCS System Compatibility (ESC) shall be the recording of technical compatibility between ETCS on-board and the trackside parts ETCS of the CCS subsystems within an area of use.

ESC type shall be the value assigned to record the technical compatibility between an ETCS on-board and a section within the area of use. All sections of the Union network which require the same set of checks for the demonstration of ESC shall have the same ESC type.

4.2.17.2.   Radio System Compatibility

Radio System Compatibility (RSC) shall be the recording of technical compatibility between voice or data radio on-board and the trackside parts of GSM-R of the CCS subsystems.

RSC type shall be the value assigned to record the technical compatibility between a voice or data radio and a section within the area of use. All sections of the Union network which require the same set of checks for the demonstration of RSC shall have the same RSC type.’;

• (22) Section 4.3 is amended as follows:

• (a) in the title of the tables, the text ‘Clause’ is replaced by ‘Point’;

• (b) section 4.3.1 is replaced by the following:

‘4.3.1   Interface to the Operation and Traffic Management Subsystem

Interface with Operation and Traffic Management TSI	Interface with Operation and Traffic Management TSI	Interface with Operation and Traffic Management TSI	Interface with Operation and Traffic Management TSI	Interface with Operation and Traffic Management TSI
Reference CCS TSI		Reference Operation and Traffic Management TSI19	Reference Operation and Traffic Management TSI19
Parameter	Point	Parameter	Point	Point
Operating rules (normal and degraded conditions)	4.4	Rule book Operating rules	4.2.1.2.1 4.4	4.2.1.2.1 4.4
Visibility of trackside Control-Command and Signalling objects	4.2.15	Signal and line-side marker sighting	4.2.2.8	4.2.2.8
Train braking performance and characteristics	4.2.2	Braking performance	4.2.2.6	4.2.2.6
Use of sanding equipment On-board flange lubrication Use of composite brake blocks	4.2.10	Rule book	4.2.1.2.1	4.2.1.2.1
Interface to Data Recording for Regulatory Purposes	4.2.14	Data recording on-board	4.2.3.5	4.2.3.5
ETCS DMI	4.2.12	Train running number	4.2.3.2.1	4.2.3.2.1
GSM-R DMI	4.2.13	Train running number	4.2.3.2.1	4.2.3.2.1
Key Management	4.2.8	Ensuring that the train is in running order	4.2.2.7	4.2.2.7
Route compatibility checks before the use of authorised vehicles	4.9	Parameters for the vehicle and train compatibility over the route intended for operation	Appendix D1	Appendix D1

• (c) section 4.3.2 is replaced by the following:

‘4.3.2.   Interface to the Rolling Stock Subsystem

Interface with Rolling Stock TSIs	Interface with Rolling Stock TSIs	Interface with Rolling Stock TSIs	Interface with Rolling Stock TSIs	Interface with Rolling Stock TSIs	Interface with Rolling Stock TSIs
Reference CCS TSI	Reference CCS TSI	Reference Rolling Stock TSIs	Reference Rolling Stock TSIs	Reference Rolling Stock TSIs	Reference Rolling Stock TSIs
Parameter	Point	Parameter			Point
Compatibility with trackside train detection systems: vehicle design	4.2.10	Rolling stock characteristics to be compatible with train detection systems based on track circuits	HS RS TSI20	wheelset location	4.2.7.9.2
Compatibility with trackside train detection systems: vehicle design	4.2.10	Rolling stock characteristics to be compatible with train detection systems based on track circuits	HS RS TSI20	axle load	4.2.3.2
Compatibility with trackside train detection systems: vehicle design	4.2.10	Rolling stock characteristics to be compatible with train detection systems based on track circuits	HS RS TSI20	sanding	4.2.3.10
Compatibility with trackside train detection systems: vehicle design	4.2.10	Rolling stock characteristics to be compatible with train detection systems based on track circuits	HS RS TSI20	electrical resistance between wheels	4.2.3.3.1
Compatibility with trackside train detection systems: vehicle design	4.2.10	Rolling stock characteristics to be compatible with train detection systems based on track circuits	CR RS TSI21	CR RS TSI21	4.2.3.3.1.1
Compatibility with trackside train detection systems: vehicle design	4.2.10	Rolling stock characteristics to be compatible with train detection systems based on track circuits	LOC & PAS TSI22	LOC & PAS TSI22	4.2.3.3.1.1
Compatibility with trackside train detection systems: vehicle design	4.2.10	Rolling stock characteristics to be compatible with train detection systems based on track circuits	Wagon TSI23	Wagon TSI23	4.2.3.2
Compatibility with trackside train detection systems: vehicle design	4.2.10	Rolling stock characteristics to be compatible with train detection systems based on axle counters	HS RS TSI	wheelset geometry	4.2.7.9.2
Compatibility with trackside train detection systems: vehicle design	4.2.10	Rolling stock characteristics to be compatible with train detection systems based on axle counters	HS RS TSI	wheels	4.2.7.9.3
Compatibility with trackside train detection systems: vehicle design	4.2.10	Rolling stock characteristics to be compatible with train detection systems based on axle counters	CR RS TSI	CR RS TSI	4.2.3.3.1.2
Compatibility with trackside train detection systems: vehicle design	4.2.10	Rolling stock characteristics to be compatible with train detection systems based on axle counters	LOC & PAS TSI	LOC & PAS TSI	4.2.3.3.1.2
Compatibility with trackside train detection systems: vehicle design	4.2.10	Rolling stock characteristics to be compatible with train detection systems based on axle counters	Wagon TSI	Wagon TSI	4.2.3.3
Compatibility with trackside train detection systems: vehicle design	4.2.10	Rolling stock characteristics to be compatible with loop equipment	HS RS TSI	HS RS TSI	None
Compatibility with trackside train detection systems: vehicle design	4.2.10	Rolling stock characteristics to be compatible with loop equipment	CR RS TSI	CR RS TSI	4.2.3.3.1.3
Compatibility with trackside train detection systems: vehicle design	4.2.10	Rolling stock characteristics to be compatible with loop equipment	LOC & PAS TSI	LOC & PAS TSI	4.2.3.3.1.3
Compatibility with trackside train detection systems: vehicle design	4.2.10	Rolling stock characteristics to be compatible with loop equipment	Wagon TSI	Wagon TSI	4.2.3.3
Electromagnetic compatibility between rolling stock and Control-Command and Signalling trackside equipment	4.2.11	Rolling stock characteristics to be compatible with train detection systems based on track circuits	HS RS TSI	HS RS TSI	4.2.6.6.1
Electromagnetic compatibility between rolling stock and Control-Command and Signalling trackside equipment	4.2.11	Rolling stock characteristics to be compatible with train detection systems based on track circuits	CR RS TSI	CR RS TSI	4.2.3.3.1.1
Electromagnetic compatibility between rolling stock and Control-Command and Signalling trackside equipment	4.2.11	Rolling stock characteristics to be compatible with train detection systems based on track circuits	LOC & PAS TSI	LOC & PAS TSI	4.2.3.3.1.1
Electromagnetic compatibility between rolling stock and Control-Command and Signalling trackside equipment	4.2.11	Rolling stock characteristics to be compatible with train detection systems based on track circuits	Wagon TSI	Wagon TSI	4.2.3.3
Electromagnetic compatibility between rolling stock and Control-Command and Signalling trackside equipment		Rolling stock characteristics to be compatible with train detection systems based on axle counters	HS RS TSI	HS RS TSI	4.2.6.6.1
Electromagnetic compatibility between rolling stock and Control-Command and Signalling trackside equipment		Rolling stock characteristics to be compatible with train detection systems based on axle counters	CR RS TSI	CR RS TSI	4.2.3.3.1.2
Electromagnetic compatibility between rolling stock and Control-Command and Signalling trackside equipment		Rolling stock characteristics to be compatible with train detection systems based on axle counters	LOC & PAS TSI	LOC & PAS TSI	4.2.3.3.1.2
Electromagnetic compatibility between rolling stock and Control-Command and Signalling trackside equipment		Rolling stock characteristics to be compatible with train detection systems based on axle counters	Wagon TSI	Wagon TSI	4.2.3.3
Train braking performance and characteristics	4.2.2	Emergency braking performance	HS RS TSI	Emergency braking	4.2.4.1
Train braking performance and characteristics	4.2.2	Emergency braking performance	HS RS TSI	Service braking	4.2.4.4
Train braking performance and characteristics	4.2.2	Emergency braking performance	CR RS TSI	Emergency braking	4.2.4.5.2
Train braking performance and characteristics	4.2.2	Emergency braking performance	CR RS TSI	Service braking	4.2.4.5.3
Train braking performance and characteristics	4.2.2	Emergency braking performance	LOC & PAS TSI	Emergency braking	4.2.4.5.2
Train braking performance and characteristics	4.2.2	Emergency braking performance	LOC & PAS TSI	Service braking	4.2.4.5.3
Train braking performance and characteristics	4.2.2	Emergency braking performance	Wagon TSI	Wagon TSI	4.2.4.1.2
Position of Control-Command and Signalling on-board antennas	4.2.2	Kinematic gauge	HS RS TSI	HS RS TSI	4.2.3.1
Position of Control-Command and Signalling on-board antennas	4.2.2	Kinematic gauge	CR RS TSI	CR RS TSI	4.2.3.1
Position of Control-Command and Signalling on-board antennas	4.2.2	Kinematic gauge	LOC & PAS TSI	LOC & PAS TSI	4.2.3.1
Position of Control-Command and Signalling on-board antennas	4.2.2	Kinematic gauge	Wagon TSI	Wagon TSI	none
Isolation of on-board ETCS functionality	4.2.2	Operating rules	HS RS TSI	HS RS TSI	4.2.7.9.1
Isolation of on-board ETCS functionality	4.2.2	Operating rules	CR RS TSI	CR RS TSI	4.2.12.3
Isolation of on-board ETCS functionality	4.2.2	Operating rules	LOC & PAS TSI	LOC & PAS TSI	4.2.12.3
Isolation of on-board ETCS functionality	4.2.2	Operating rules	Wagon TSI	Wagon TSI	none
Data interfaces	4.2.2	Monitoring and diagnostic concepts	HS RS TSI	HS RS TSI	4.2.7.10
Data interfaces	4.2.2	Monitoring and diagnostic concepts	CR RS TSI	CR RS TSI	4.2.1.1
Data interfaces	4.2.2	Monitoring and diagnostic concepts	LOC & PAS TSI	LOC & PAS TSI	4.2.1.1
Data interfaces	4.2.2	Monitoring and diagnostic concepts	Wagon TSI	Wagon TSI	None
Visibility of trackside Control-Command and Signalling objects	4.2.15	External visibility Head lights	HS RS TSI	HS RS TSI	4.2.7.4.1.1
Visibility of trackside Control-Command and Signalling objects	4.2.15	External visibility Head lights	CR RS TSI	CR RS TSI	4.2.7.1.1
Visibility of trackside Control-Command and Signalling objects	4.2.15	External visibility Head lights	LOC & PAS TSI	LOC & PAS TSI	4.2.7.1.1
Visibility of trackside Control-Command and Signalling objects	4.2.15	External visibility Head lights	Wagon TSI	Wagon TSI	None
Visibility of trackside Control-Command and Signalling objects	4.2.15	Driver's external field of view	HS RS TSI	line of sight	4.2.2.6 b
Visibility of trackside Control-Command and Signalling objects	4.2.15	Driver's external field of view	HS RS TSI	windscreen	4.2.2.7
Visibility of trackside Control-Command and Signalling objects	4.2.15	Driver's external field of view	CR RS TSI	line of sight	4.2.9.1.3.1
Visibility of trackside Control-Command and Signalling objects	4.2.15	Driver's external field of view	CR RS TSI	windscreen	4.2.9.2
Visibility of trackside Control-Command and Signalling objects	4.2.15	Driver's external field of view	LOC & PAS TSI	line of sight	4.2.9.1.3.1
Visibility of trackside Control-Command and Signalling objects	4.2.15	Driver's external field of view	LOC & PAS TSI	windscreen	4.2.9.2
Visibility of trackside Control-Command and Signalling objects	4.2.15	Driver's external field of view	Wagon TSI	Wagon TSI	None
Interface to data recording for regulatory purposes	4.2.14	Recording device	HS RS TSI	HS RS TSI	4.2.7.10
Interface to data recording for regulatory purposes	4.2.14	Recording device	CR RS TSI	CR RS TSI	4.2.9.6
Interface to data recording for regulatory purposes	4.2.14	Recording device	LOC & PAS TSI	LOC & PAS TSI	4.2.9.6
Interface to data recording for regulatory purposes	4.2.14	Recording device	Wagon TSI	Wagon TSI	none
Commands to rolling stock equipment	4.2.2 4.2.3	Phase separation	HS RS TSI	HS RS TSI	4.2.8.3.6.7
Commands to rolling stock equipment	4.2.2 4.2.3	Phase separation	CR RS TSI	CR RS TSI	4.2.8.2.9.8
Commands to rolling stock equipment	4.2.2 4.2.3	Phase separation	LOC & PAS TSI	LOC & PAS TSI	4.2.8.2.9.8
Commands to rolling stock equipment	4.2.2 4.2.3	Phase separation	Wagon TSI	Wagon TSI	none
Emergency braking command	4.2.2	Emergency braking command	HS RS TSI	HS RS TSI	none
Emergency braking command	4.2.2	Emergency braking command	CR RS TSI	CR RS TSI	4.2.4.4.1
Emergency braking command	4.2.2	Emergency braking command	LOC & PAS TSI	LOC & PAS TSI	4.2.4.4.1
Emergency braking command	4.2.2	Emergency braking command	Wagon TSI	Wagon TSI	none
Construction of equipment	4.2.16	Material requirements	HS RS TSI	HS RS TSI	4.2.7.2.2
Construction of equipment	4.2.16	Material requirements	CR RS TSI	CR RS TSI	4.2.10.2.1
Construction of equipment	4.2.16	Material requirements	LOC&PAS TSI	LOC&PAS TSI	4.2.10.2.1
Construction of equipment	4.2.16	Material requirements	Wagon TSI	Wagon TSI	none

• (d) in section 4.3.4 the text ‘Phase separation points’ is replaced by ‘Phase separation sections’;

• (23) In section 4.4 the text ‘Traffic Operation and Management TSI’ is replaced by ‘Operation and Traffic Management TSI’.

• (24) In section 4.5.1 at the end of point (1) the following text is added ‘For equipment error corrections see point 6.5,’.

• (25) Section 4.8 is replaced by:

‘4.8   Registers

The data to be provided for the registers provided for in Articles 48 and 49 of Directive (EU) 2016/797 are those indicated in Commission Implementing Decision 2011/665/EU[^ntr4-LI2019139EN.01023801-E0009] and Commission Implementing Regulation (EU) 2019/777[^ntr5-LI2019139EN.01023801-E0010].

[^ntr*4-LI2019139EN.01023801-E0009]: Commission Implementing Decision 2011/665/EU of 4 October 2011 on the European register of authorised types of railway vehicles (OJ L 264, 8.10.2011, p. 32)."

[^ntr*5-LI2019139EN.01023801-E0010]: Commission Implementing Regulation (EU) 2019/777 of 16 May 2019 on the common specifications for the register of railway infrastructure and repealing Implementing Decision 2014/880/EU (OJ L 139 I, 27.5.2019, p. 312).’;"

• (26) A new section 4.9 is added below section 4.8 as follows:

‘4.9.   Route compatibility checks before the use of authorised vehicles

The parameters of the on-board CCS subsystem to be used by the railway undertaking, for the purpose of route compatibility check, are described in Appendix D1 of Commission Implementing Regulation (EU) 2019/773[^ntr*6-LI2019139EN.01023801-E0011].

[^ntr*6-LI2019139EN.01023801-E0011]: Commission Implementing Regulation (EU) 2019/773 of 16 May 2019 on the technical specification for interoperability relating to the operation and traffic management subsystem of the rail system within the European Union and repealing Decision 2012/757/EU (OJ L 139 I, 27.5.2019, p. 5).’;"

• (27) Section 5.1 is replaced by the following:

‘5.1   Definition

In accordance with Article 2(7) of Directive (EU) 2016/797, interoperability constituents means any elementary component, group of components, subassembly or complete assembly of equipment incorporated or intended to be incorporated into a subsystem, upon which the interoperability of the rail system depends directly or indirectly, including both tangible objects and intangible objects.’;

• (28) In section 5.2.2 a new paragraph is added at the end of the section as follows:

‘Compliance of interfaces internal to the group of ICs to basic parameters of Chapter 4 does not have to be verified. Compliance of interfaces external to the group of ICs has to be verified to demonstrate conformity with the basic parameters related to the requirements of these external interfaces.’;

• (29) Section 5.3 is amended as follows:

• (a) Table 5.1.a is replaced by:

‘Table 5.1.a

Basic interoperability constituents in the Control-Command and Signalling On-board Subsystem

1	2	3	4
No	Interoperability constituent IC	Characteristics	Specific requirements to be assessed by reference to Chapter 4
1	ETCS on-board	Reliability, Availability, Maintainability, Safety (RAMS)	4.2.1 4.5.1
1	ETCS on-board	On-board ETCS functionality (excluding odometry)	4.2.2
1	ETCS on-board	ETCS and GSM-R air gap interfaces — RBC (Radio data transmission optional) — Radio in-fill unit (functionality optional) — Eurobalise air gap — Euroloop air gap (functionality optional)	4.2.5 4.2.5.1 4.2.5.1 4.2.5.2 4.2.5.3
1	ETCS on-board	Interfaces
1	ETCS on-board	— STM (implementation of interface K optional) — GSM-R ETCS Data Only Radio — Odometry — Key management system — ETCS ID Management — ETCS Driver-Machine Interface — Train interface — On-board recording device	4.2.6.1 4.2.6.2 4.2.6.3 4.2.8 4.2.9 4.2.12 4.2.2 4.2.14
1	ETCS on-board	Construction of equipment	4.2.16
2	Odometry equipment	Reliability, Availability, Maintainability, Safety (RAMS)	4.2.1 4.5.1
2	Odometry equipment	On-board ETCS functionality: only Odometry	4.2.2
2	Odometry equipment	Interfaces
2	Odometry equipment	— On-board ETCS	4.2.6.3
2	Odometry equipment	Construction of equipment	4.2.16
3	Interface of External STM	Interfaces
3	Interface of External STM	— On-board ETCS	4.2.6.1
4	GSM-R voice cab radio Note: SIM card, antenna, connecting cables and filters are not part of this interoperability constituent	Reliability, Availability, Maintainability, (RAM)	4.2.1.2 4.5.1
4	GSM-R voice cab radio Note: SIM card, antenna, connecting cables and filters are not part of this interoperability constituent	Basic communication functions	4.2.4.1
4	GSM-R voice cab radio Note: SIM card, antenna, connecting cables and filters are not part of this interoperability constituent	Voice and operational communication applications	4.2.4.2
4	GSM-R voice cab radio Note: SIM card, antenna, connecting cables and filters are not part of this interoperability constituent	Interfaces
4	GSM-R voice cab radio Note: SIM card, antenna, connecting cables and filters are not part of this interoperability constituent	— GSM-R air gap — GSM-R Driver-Machine Interface	4.2.5.1 4.2.13
4	GSM-R voice cab radio Note: SIM card, antenna, connecting cables and filters are not part of this interoperability constituent	Construction of equipment	4.2.16
5	GSM-R ETCS Data only Radio Note: SIM card, antenna, connecting cables and filters are not part of this interoperability constituent	Reliability, Availability, Maintainability (RAM)	4.2.1.2 4.5.1
5	GSM-R ETCS Data only Radio Note: SIM card, antenna, connecting cables and filters are not part of this interoperability constituent	Basic communication functions	4.2.4.1
5	GSM-R ETCS Data only Radio Note: SIM card, antenna, connecting cables and filters are not part of this interoperability constituent	ETCS data communication applications	4.2.4.3
5	GSM-R ETCS Data only Radio Note: SIM card, antenna, connecting cables and filters are not part of this interoperability constituent	Interfaces
5	GSM-R ETCS Data only Radio Note: SIM card, antenna, connecting cables and filters are not part of this interoperability constituent	— On-board ETCS — GSM-R air gap	4.2.6.2 4.2.5.1
5	GSM-R ETCS Data only Radio Note: SIM card, antenna, connecting cables and filters are not part of this interoperability constituent	Construction of equipment	4.2.16
6	GSM-R SIM card Note: it is the responsibility of the GSM-R network operator to deliver to railway undertakings the SIM cards to be inserted in GSM-R terminal equipment	Basic communication functions	4.2.4.1
6	GSM-R SIM card Note: it is the responsibility of the GSM-R network operator to deliver to railway undertakings the SIM cards to be inserted in GSM-R terminal equipment	Construction of equipment	4.2.16’

• (b) table 5.1.b is replaced by:

‘Table 5.1.b

Groups of interoperability constituents in the Control-Command and Signalling On-board Subsystem

(This table is an example to show the structure. Other groups are allowed.)

1	2	3	4
No	Group of Interoperability constituents	Characteristics	Specific requirements to be assessed by reference to Chapter 4
1	ETCS on-board Odometry equipment	Reliability, Availability, Maintainability, Safety (RAMS)	4.2.1 4.5.1
1	ETCS on-board Odometry equipment	On-board ETCS functionality	4.2.2
1	ETCS on-board Odometry equipment	ETCS and GSM-R air gap interfaces — RBC (Radio data transmission optional) — Radio in-fill unit (functionality optional) — Eurobalise air gap — Euroloop air gap (functionality optional)	4.2.5 4.2.5.1 4.2.5.1 4.2.5.2 4.2.5.3
1	ETCS on-board Odometry equipment	Interfaces
1	ETCS on-board Odometry equipment	— STM (implementation of interface K optional) — GSM-R ETCS Data Only Radio — Key management system — ETCS-ID Management — ETCS Driver Machine Interface — Train interface — On-board recording device	4.2.6.1 4.2.6.2 4.2.8 4.2.9 4.2.12 4.2.2 4.2.14
1	ETCS on-board Odometry equipment	Construction of equipment	4.2.16’

• (c) table 5.2.a is replaced by:

‘Table 5.2.a

Basic interoperability constituents in the Control-Command and Signalling Trackside Subsystem

1	2	3	4
No	Interoperability constituent IC	Characteristics	Specific requirements to be assessed by reference to Chapter 4
1	RBC	Reliability, Availability, Maintainability, Safety (RAMS)	4.2.1 4.5.1
1	RBC	Trackside ETCS functionality (excluding communication via Eurobalises, radio in-fill and Euroloop)	4.2.3
1	RBC	ETCS and GSM-R air gap interfaces: only radio communication with train	4.2.5.1
1	RBC	Interfaces
1	RBC	— Neighbouring RBC — Data radio communication — Key management system — ETCS-ID Management	4.2.7.1, 4.2.7.2 4.2.7.3 4.2.8 4.2.9
1	RBC	Construction of equipment	4.2.16
2	Radio in-fill unit	Reliability, Availability, Maintainability, Safety (RAMS)	4.2.1 4.5.1
2	Radio in-fill unit	Trackside ETCS functionality (excluding communication via Eurobalises, Euroloop and level 2 and level 3 functionality)	4.2.3
2	Radio in-fill unit	ETCS and GSM-R air gap interfaces: only radio communication with train	4.2.5.1
2	Radio in-fill unit	Interfaces
2	Radio in-fill unit	— Data radio communication — Key management system — ETCS-ID Management — Interlocking and LEU	4.2.7.3 4.2.8 4.2.9 4.2.3
2	Radio in-fill unit	Construction of equipment	4.2.16
3	Eurobalise	Reliability, Availability, Maintainability, Safety (RAMS)	4.2.1 4.5.1
3	Eurobalise	ETCS and GSM-R air gap interfaces: only Eurobalise communication with train	4.2.5.2
3	Eurobalise	Interfaces
3	Eurobalise	— LEU — Eurobalise	4.2.7.4
3	Eurobalise	Construction of equipment	4.2.16
4	Euroloop	Reliability, Availability, Maintainability, Safety (RAMS)	4.2.1 4.5.1
4	Euroloop	ETCS and GSM-R air gap interfaces: only Euroloop communication with train	4.2.5.3
4	Euroloop	Interfaces
4	Euroloop	— LEU – Euroloop	4.2.7.5
4	Euroloop	Construction of equipment	4.2.16
5	LEU Eurobalise	Reliability, Availability, Maintainability, Safety (RAMS)	4.2.1 4.5.1
5	LEU Eurobalise	Trackside ETCS functionality (excluding communication via radio in-fill, Euroloop and level 2 and level 3 functionality)	4.2.3
5	LEU Eurobalise	Interfaces
5	LEU Eurobalise	— LEU — Eurobalise	4.2.7.4
5	LEU Eurobalise	Construction of equipment	4.2.16
6	LEU Euroloop	Reliability, Availability, Maintainability, Safety (RAMS)	4.2.1 4.5.1
6	LEU Euroloop	Trackside ETCS functionality (excluding communication via radio in-fill, Eurobalise and level 2 and level 3 functionality)	4.2.3
6	LEU Euroloop	Interfaces
6	LEU Euroloop	— LEU – Euroloop	4.2.7.5
6	LEU Euroloop	Construction of equipment	4.2.16
7	Axle Counter	Trackside train detection systems (only parameters relevant for axle counters)	4.2.10
7	Axle Counter	Electromagnetic compatibility (only parameters relevant for axle counters)	4.2.11
7	Axle Counter	Construction of equipment	4.2.16’

• (30) Section 6.1 is replaced by the following:

‘6.1.   Introduction

6.1.1.   General principles

6.1.1.1.   Compliance with basic parameters

Fulfilment of the essential requirements set out in Chapter 3 of this TSI shall be ensured through compliance with the basic parameters specified in Chapter 4.

This compliance shall be demonstrated by:

• (1) assessing the conformity of the interoperability constituents specified in Chapter 5 (see point 6.2.1, 6.2.2, 6.2.3, 6.2.4);

• (2) verifying the subsystems (see point 6.3 and point 6.4).

6.1.1.2.   Essential requirements fulfilled by National Rules

In certain cases, some of the essential requirements may be met by national rules, because of:

• (1) the use of Class B systems;

• (2) open points in the TSI;

• (3) non-application of TSIs (derogations) under Article 7 of Directive (EU) 2016/797;

• (4) specific cases described in point 7.6.

In such cases, assessment of conformity with those rules shall be carried out under the responsibility of the Member States concerned according to notified procedures. See point 6.4.2.

6.1.1.3.   Partial fulfilment of TSI requirements

With regard to checking if essential requirements are fulfilled through compliance with the basic parameters, and without prejudice to the obligations set out in Chapter 7 of this TSI, control-command and signalling interoperability constituents and subsystems that do not implement all functions, performance and interfaces as specified in Chapter 4 (including the specifications referred to in Annex A), can obtain EC certificates of conformity or, respectively, certificates of verification, under the following conditions for issuing and using the certificates:

• (1) The applicant for EC verification of a trackside control-command and signalling subsystem is responsible for deciding which functions, performance and interfaces need to be implemented to meet the objectives for the service and to ensure that no requirements contradicting or exceeding the TSIs are exported to the on-board control-command and signalling subsystems.

• (2) The operation of an on-board control-command and signalling subsystem, that does not implement all functions, performance and interfaces specified in this TSI, may be subject to conditions and limits of use due to compatibility and/or safe integration with trackside control-command and signalling subsystems. Without prejudice to the tasks of a Notified Body described in respective Union legislation and related documents the applicant for EC verification is responsible for ensuring that the technical file provides all the information[^ntr*7-LI2019139EN.01023801-E0012] that an operator needs to identify such conditions and limits of use.

• (3) The authorising entity may refuse for duly justified reasons the authorisation for placing in service or on the market, or place conditions and limits of use on the operation, of control-command and signalling subsystems that do not implement all functions, performance and interfaces specified in this TSI.

If a control-command and signalling interoperability constituent or subsystem does not implement all functions, performance and interfaces specified in this TSI, the provisions of point 6.4.3 shall apply.

6.1.2.   Principles for testing ETCS and GSM-R

6.1.2.1.   Principle

The principle is that a Control-Command and Signalling On-board Subsystem covered by an “EC” declaration of verification is able to run on every Control-Command and Signalling Trackside Subsystem covered by an “EC” Declaration of verification, under the conditions specified in this TSI, with no additional verifications.

Achievement of this principle is facilitated by:

• (1) rules for the design and installation of the Control-Command and Signalling On-board and the Trackside subsystems;

• (2) test specifications to prove that the Control-Command and Signalling On-board and Trackside Subsystems comply with the requirements of this TSI and are mutually compatible.

6.1.2.2.   Operational test scenarios

For the purpose of this TSI, an “operational test scenario” means a sequence of trackside and on-board events related to or influencing the Control-command and Signalling subsystems (e.g. sending/receiving messages, exceeding a speed limit, actions of operators) and the specified timing between them in order to test the intended railway system operation in situations relevant for ETCS and GSM-R (e.g. entry of a train into an equipped area, awakening of a train, overriding a signal at stop).

The operational tests scenarios are based on the engineering rules adopted for the project.

Check of compliance of a real implementation with an operational tests scenario shall be possible gathering information through easily accessible interfaces (preferably the standard interfaces specified in this TSI).

6.1.2.3.   Requirements for Operational test scenarios

The set of engineering rules for the trackside parts of ETCS and GSM-R and related operational test scenarios for the Trackside Control-command and Signalling Subsystem shall be sufficient to describe all intended system operations relevant for the Trackside Control-command and Signalling Subsystem in normal and identified degraded situations, and:

• (1) shall be consistent with the specifications referenced in this TSI;

• (2) shall assume that functions, interfaces and performance of the Control-command and Signalling On-board Subsystems interacting with the Trackside Subsystem are compliant with the requirements of this TSI;

• (3) shall be the ones used in the EC Verification of the Trackside Control-command and Signalling Subsystem, to check that the implemented functions, interfaces and performance are able to ensure that the intended system operation in combination with the relevant modes and transitions between levels and modes of the Control-command and Signalling On-board Subsystems are respected.

6.1.2.4.   Requirements for ETCS System Compatibility

The Agency shall set up and manage in a technical document the set of checks to demonstrate the technical compatibility of an on-board subsystem with the trackside subsystem.

Infrastructure Managers, with the support of the ETCS suppliers for their network, shall submit to the Agency the definition of the necessary checks (as defined in 4.2.17) on their network by 16 January 2020 at the latest.

Infrastructure Managers shall classify the ETCS lines according to ESC types in RINF.

Infrastructure Managers shall submit to the Agency any changes on the referred checks for their network. The Agency shall update the technical document within 5 working days.

6.1.2.5.   Requirements for Radio System Compatibility

The Agency shall set up and manage in a technical document the set of checks to demonstrate the technical compatibility of an on-board subsystem with the trackside subsystem.

Infrastructure Managers, with the support of the GSM-R suppliers for their network, shall submit to the Agency the definition of the necessary checks (as defined in 4.2.17) on their network by 16 January 2020 at the latest.

Infrastructure Managers shall classify their lines according to RSC types for voice and, if applicable, ETCS data in RINF.

Infrastructure Managers shall submit to the Agency any changes on the referred checks for their network. The Agency shall update the technical document within 5 working days.

[^ntr*7-LI2019139EN.01023801-E0012]: The template to be used to provide this information will be defined in the Application Guide.’;"

• (31) Section 6.2 is amended as follows:

• (a) in section 6.2.1, the text ‘Article 13(1) and Annex IV to Directive 2008/57/EC’ is replaced by the text ‘Article 10(1) and Article 9(2) of Directive (EU) 2016/797’;

• (b) table 6.1 is replaced by the following:

‘Table 6.1

Conformity assessment requirements of an interoperability constituent or a group of interoperability constituents

No	Aspect	What to assess	Supporting evidence
1	Functions, interfaces and performances	Check that all mandatory functions, interfaces and performances as described in the basic parameters referenced in the relevant table of Chapter 5 are implemented and that they comply with the requirements of this TSI	Design documentation and running of test cases and test sequences, as described in the basic parameters referenced in the relevant table of Chapter 5
1	Functions, interfaces and performances	Check which optional functions and interfaces as described in the basic parameters referenced in the relevant table of Chapter 5 are implemented and that they comply with the requirements of this TSI	Design documentation and running of test cases and test sequences, as described in the basic parameters referenced in the relevant table of Chapter 5
1	Functions, interfaces and performances	Check which additional functions and interfaces (not specified in this TSI) are implemented and that they do not lead to conflicts with implemented functions specified in this TSI	Impact analysis
2	Construction of equipment	Check compliance with mandatory conditions, where specified in the basic parameters referenced in the relevant table of Chapter 5	Documentation on material used and, where necessary, tests to ensure that the requirements of the basic parameters referenced in the relevant table of Chapter 5 are satisfied
2	Construction of equipment	In addition, check that the interoperability constituent functions correctly in the environmental conditions for which it is designed	Tests according to the applicant's specifications
3	Reliability, Availability, Maintainability, Safety (RAMS)	Check compliance with the safety requirements described in the basic parameters referenced in the relevant table of Chapter 5, i.e. 1. respect for quantitative Tolerable Hazard Rates (THRs) caused by random failures 2. the development process is able to detect and eliminate systematic failures	1. Calculations for the THRs caused by random failures, supported by reliability data. 2.1. The manufacturer's quality and safety management throughout design, manufacturing and testing conforms to a recognised standard (see note) 2.2. The software development life-cycle, the hardware development life-cycle and the integration of hardware and software have each been undertaken in accordance with a recognised standard (see note) 2.3. The safety verification and validation process has been undertaken in accordance with a recognised standard (see Note) and respects the safety requirements described in the basic parameters referenced in the relevant table of Chapter 5 2.4. The functional and technical safety requirements (correct operation under fault-free conditions, effects of faults and of external influences) are verified in accordance with a recognised standard (see Note) Note: The standard shall satisfy at least the following requirements: 1. be compliant with the requirements for code of practice, as stated in Annex I, point 2.3.2, of Regulation (EU) No 402/2013 2. be widely acknowledged in the railway domain. If this is not the case, the standard will have to be justified and be acceptable to the Notified Body; 3. be relevant for the control of the considered hazards in the system under assessment; 4. be publicly available for all actors who want to use it.
4	Reliability, Availability, Maintainability, Safety (RAMS)	Check that the quantitative reliability target (related to random failures) indicated by the applicant is met	Calculations
5	Reliability, Availability, Maintainability, Safety (RAMS)	Elimination of systematic failures	Tests of equipment (full Interoperability Constituent or separately for subassemblies) in operational conditions, with repair when defects are detected. Documentation accompanying the certificate which indicates which kind of verifications have been performed, which standards have been applied and criteria adopted to consider these tests completed (according to decisions of the applicant).
6	Reliability, Availability, Maintainability, Safety (RAMS)	Check compliance with maintenance requirements – point 4.5.1	Document check’

• (c) in section 6.2.4.1 point (2) is replaced by the following:

• ‘(2) these tests were carried out in a laboratory accredited in accordance with Regulation (EC) No 765/2008 of the European Parliament and of the Council[^ntr*8-LI2019139EN.01023801-E0013] and the standards referred to in Annex A, Table A 4 to carry out tests with the use of the test architecture and the procedures specified in Annex A 4.2.2.c.

[^ntr*8-LI2019139EN.01023801-E0013]: Regulation (EC) No 765/2008 of the European Parliament and of the Council of 9 July 2008 setting out the requirements for accreditation and market surveillance to the marketing of products and repealing Regulation (EEC) No 339/93 (OJ L 218, 13.8.2008, p. 30).’ "

• (d) sections 6.2.5 and 6.2.6 are deleted;

• (32) Section 6.3 is amended as follows:

• (a) section 6.3.1 is replaced by the following:

‘6.3.1.   Assessment procedures for Control-Command and Signalling Subsystems

This Chapter deals with the “EC” declaration of verification for the Control-Command and Signalling On-board Subsystem and the “EC” declaration of verification for the Control-Command and Signalling Trackside Subsystem.

At the request of the applicant the Notified Body shall carry out an “EC” verification of a Control-Command and Signalling On-board or Trackside Subsystem in accordance with Annex IV to Directive (EU) 2016/797.

The applicant shall draw up the “EC” declaration of verification for the Control-Command and Signalling On-board or Trackside Subsystem in accordance with Article 15(1) and Article 15(9) of Directive (EU) 2016/797.

The content of the “EC” declaration of verification shall conform to Article 15(9) of Directive (EU) 2016/797.

The assessment procedure shall be carried out using the modules specified in point 6.3.2 (Modules for Control-Command and Signalling Subsystems).

The “EC” declarations of verification for a Control-Command and Signalling On-board Subsystem and of a Control-Command and Signalling Trackside Subsystem, together with the certificates of conformity, shall be deemed sufficient to ensure that the subsystems are compatible under the conditions specified in this TSI.’;

• (b) section 6.3.2.3 is replaced by the following:

‘6.3.2.3.   Conditions for using modules for On-board and Trackside Subsystems

With reference to point 4.2 of Module SB (type-examination), design review is requested.

With reference to point 4.2 of Module SH1 (full quality management system with design examination), an additional type test is required.’;

• (c) in section 6.3.3, Table 6.2 is replaced by the following:

‘Table 6.2

Conformity assessment requirements for an On-board Subsystem

No	Aspect	What to assess	Supporting evidence
1	Use of interoperability constituents	Check whether the interoperability constituents to be integrated into the subsystem are all covered by an “EC” Declaration of conformity and a corresponding certificate. The Subsystem needs to be checked with a SIM card compliant with the requirements of this TSI. Changing the SIM card with another one compliant with the TSI is not a modification of the Subsystem.	Existence and content of documents
1	Use of interoperability constituents	Check conditions and limits of use on the use of Interoperability Constituents against the characteristics of the subsystem and of the environment	Analysis by document check
1	Use of interoperability constituents	For interoperability constituents that have been certified against a version of the CCS TSI, which is different from the version applied for the “EC” Verification of the subsystem and/or against a set of specifications which is different from the set of specifications applied for the “EC” Verification of the subsystem, check that the certificate still ensures subsystem compliance with the requirements of the TSI currently in force.	Impact analysis by document checks
2	Integration of interoperability constituents in the subsystem	Check the correct installation and functioning of the internal interfaces of the subsystem — Basic parameter 4.2.6	Checks according to specifications
2	Integration of interoperability constituents in the subsystem	Check that additional functions (not specified in this TSI) do not impact the mandatory ones	Impact analysis
2	Integration of interoperability constituents in the subsystem	Check that the values of ETCS IDs are within the allowed range and, if required by this TSI, have unique values – Basic parameter 4.2.9	Check of design specifications
3	Integration with rolling stock	Check the correct installation of equipment — Basic Parameters 4.2.2, 4.2.4, 4.2.14 and conditions for installation of equipment, as specified by the manufacturer	Results of checks (according to specifications referenced in the Basic Parameters and the manufacturer's installation rules)
3	Integration with rolling stock	Check that the Control-Command and Signalling On-board Subsystem is compatible with the rolling stock environment – Basic parameter 4.2.16	Document check (certificates of interoperability constituents and possible integration methods checked against characteristics of rolling stock)
3	Integration with rolling stock	Check that parameters (e.g., braking parameters) are correctly configured and that they are within the allowed range	Document check (values of parameters checked against characteristics of rolling stock)
4	Integration with Class B	Check that the external STM is connected to on-board ETCS with TSI-compliant interfaces	Nothing to test: there is a standard interface already tested at interoperability constituent level. Its functioning has already been tested when checking the integration of interoperability constituents in the subsystem
4	Integration with Class B	Check that Class B functions implemented in the on-board ETCS– Basic parameter 4.2.6.1 — create no additional requirements for the Control-Command and Signalling Trackside Subsystem due to transitions	Nothing to test: everything has already been tested at interoperability constituent level
4	Integration with Class B	Check that separate Class B equipment which is not connected to the on-board ETCS– Basic Parameter 4.2.6.1 — creates no additional requirements for Control-Command and Signalling Trackside Subsystem due to transitions	nothing to test: no interface24
4	Integration with Class B	Check that separate Class B equipment connected on-board ETCS using (partly) non TSI compliant interfaces – basic parameter 4.2.6.1 — creates no additional requirements for the Control-Command and Signalling Trackside Subsystem due to transitions. Also check that ETCS functions are not affected	impact analysis
5	Integration with Control-Command and Signalling Trackside Subsystems	Check that Eurobalise telegrams can be read (scope of this test is limited to checking that the antenna has been appropriately installed. The tests already carried out at Interoperability Constituent level shall not be repeated) – Basic Parameter 4.2.5	Test using a certified Eurobalise: the ability to read correctly the telegram is the supporting evidence.
5	Integration with Control-Command and Signalling Trackside Subsystems	Check that Euroloop telegrams (if applicable) can be read – Basic Parameter 4.2.5	Test using a certified Euroloop: the ability to read correctly the telegram is the supporting evidence.
5	Integration with Control-Command and Signalling Trackside Subsystems	Check that the equipment can handle a GSM-R call for voice and data (if applicable) – Basic Parameter 4.2.5	Test with a certified GSM-R network. The ability to set up, maintain and disconnect a connection is the supporting evidence.
6	Reliability, Availability, Maintainability, Safety (RAMS)	Check that the equipment complies with safety requirements — Basic Parameter 4.2.1	Application of procedures specified in the Common Safety Method for Risk Evaluation and Assessment.
6	Reliability, Availability, Maintainability, Safety (RAMS)	Check that the quantitative reliability target is met — Basic Parameter 4.2.1	Calculations
6	Reliability, Availability, Maintainability, Safety (RAMS)	Check the compliance with requirements about maintenance – point 4.5.2	Documents check
7	Integration with Control-Command and Signalling Trackside Subsystems and other subsystems: tests under conditions representing the intended operation.	Test the behaviour of the subsystem under as many different conditions as reasonably possible representing the intended operation (e.g line gradient, train speed, vibrations, traction power, weather conditions, design of Control-Command and Signalling trackside functionality). The test must be able to verify: 1. that odometry functions are correctly performed — basic parameter 4.2.2 2. that the on-board Control-Command and Signalling Subsystem is compatible with the rolling stock environment – basic parameter 4.2.16 These tests must also be such as to increase confidence that there will be no systematic failures. The scope of these tests excludes tests already carried out at different stages: tests performed on the interoperability constituents and tests performed on the subsystem in a simulated environment shall be taken into account. Tests under environmental conditions are not necessary for on-board GSM-R voice equipment. Note: Indicate in the certificate which conditions have been tested and which standards have been applied.	Reports of test runs.

• (d) a new section 6.3.3.1 is added after table 6.2 as follows:

‘6.3.3.1.   ETCS and radio system compatibility checks

Particular attention shall be given to assessing the conformity of the on-board CCS subsystem regarding the Basic Parameter ETCS and radio system compatibility referred to in 4.2.17.

Regardless of the module selected for the previous EC verification procedure for the on-board subsystem, the Notified Body shall check: