System hazard controls.

CFR · 2024-01-01 · US · Title 14

(a) (1) Ensure a system be at least single fault tolerant to creating a public hazard unless other hazard control criteria are specified for the system by the requirements of this part. A system capable of creating a catastrophic public hazard must be at least dual fault tolerant. Dual fault tolerant system hazard controls include: Switches, valves, or similar components that prevent an unwanted transfer or release of energy or hazardous materials; (2) Ensure each hazard control used to provide fault tolerance is independent from other hazard controls so that no single action or event can remove more than one inhibit. A launch operator must prevent inadvertent activation of hazard control devices such as switches and valves; (3) Provide at least two fully redundant safety devices if a safety device must function in order to control a public hazard. A single action or event must not be capable of disabling both safety devices; and (4) Ensure computing systems and software used to control a public hazard satisfy the requirements of § 417.123. (b) (1) Inspect structures and material handling equipment to verify workmanship, proper operations, and maintenance; (2) Prepare plans to ensure proper operations and maintenance of structures and material handling equipment; (3) Assess structures and material handling equipment for potential single point failure; (4) Eliminate single point failures from structures and material handling equipment or subject the structures and material han

official document · source cfr-2024 · id 14:§ 417.409