EN ISO 18497-4:2024

SLOVENSKI STANDARD
01-oktober-2024
Kmetijski stroji in traktorji - Varnost delno avtomatiziranih, polavtonomnih in
avtonomnih strojev - 4. del: Metode preverjanja in načela validacije (ISO 18497-
4:2024)
Agricultural machinery and tractors - Safety of partially automated, semi-autonomous
and autonomous machinery - Part 4: Verification methods and validation principles (ISO
18497-4:2024)
Landmaschinen und Traktoren - Sicherheit von teilautomatisierten, halbautonomen und
autonomen Maschinen - Teil 4: Verifizierungsmethoden und Validierungsgrundsätze
(ISO 18497-4:2024)
Tracteurs et matériels agricoles - Sécurité des machines partiellement automatisées,
semi-autonomes et autonomes - Partie 4: Méthodes de vérification et principes de
validation (ISO 18497-4:2024)
Ta slovenski standard je istoveten z: EN ISO 18497-4:2024
ICS:
65.060.01 Kmetijski stroji in oprema na Agricultural machines and
splošno equipment in general
2003-01.Slovenski inštitut za standardizacijo. Razmnoževanje celote ali delov tega standarda ni dovoljeno.

EN ISO 18497-4
EUROPEAN STANDARD
NORME EUROPÉENNE
August 2024
EUROPÄISCHE NORM
ICS 65.060.01 Supersedes EN ISO 18497:2018
English Version
Agricultural machinery and tractors - Safety of partially
automated, semi-autonomous and autonomous machinery
- Part 4: Verification methods and validation principles
(ISO 18497-4:2024)
Tracteurs et matériels agricoles - Sécurité des Landmaschinen und Traktoren - Sicherheit von
machines partiellement automatisées, semi-autonomes teilautomatisierten, halbautonomen und autonomen
et autonomes - Partie 4: Méthodes de vérification et Maschinen - Teil 4: Verifizierungsmethoden und
principes de validation (ISO 18497-4:2024) Validierungsgrundsätze (ISO 18497-4:2024)
This European Standard was approved by CEN on 21 July 2024.

CEN members are bound to comply with the CEN/CENELEC Internal Regulations which stipulate the conditions for giving this
European Standard the status of a national standard without any alteration. Up-to-date lists and bibliographical references
concerning such national standards may be obtained on application to the CEN-CENELEC Management Centre or to any CEN
member.
This European Standard exists in three official versions (English, French, German). A version in any other language made by
translation under the responsibility of a CEN member into its own language and notified to the CEN-CENELEC Management
Centre has the same status as the official versions.

CEN members are the national standards bodies of Austria, Belgium, Bulgaria, Croatia, Cyprus, Czech Republic, Denmark, Estonia,
Finland, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, Netherlands, Norway,
Poland, Portugal, Republic of North Macedonia, Romania, Serbia, Slovakia, Slovenia, Spain, Sweden, Switzerland, Türkiye and
United Kingdom.
EUROPEAN COMMITTEE FOR STANDARDIZATION
COMITÉ EUROPÉEN DE NORMALISATION

EUROPÄISCHES KOMITEE FÜR NORMUNG

CEN-CENELEC Management Centre: Rue de la Science 23, B-1040 Brussels
© 2024 CEN All rights of exploitation in any form and by any means reserved Ref. No. EN ISO 18497-4:2024 E
worldwide for CEN national Members.

Contents Page
European foreword . 3
Annex ZA (informative) Relationship between this European Standard and the essential
requirements of Directive 2006/42/EC aimed to be covered . 4

European foreword
This document (EN ISO 18497-4:2024) has been prepared by Technical Committee ISO/TC 23 "Tractors
and machinery for agriculture and forestry" in collaboration with Technical Committee CEN/TC 144
“Tractors and machinery for agriculture and forestry” the secretariat of which is held by AFNOR.
This European Standard shall be given the status of a national standard, either by publication of an
identical text or by endorsement, at the latest by February 2025, and conflicting national standards
shall be withdrawn at the latest by February 2025.
Attention is drawn to the possibility that some of the elements of this document may be the subject of
patent rights. CEN shall not be held responsible for identifying any or all such patent rights.
This document supersedes EN ISO 18497:2018.
This document has been prepared under a standardization request addressed to CEN by the European
Commission. The Standing Committee of the EFTA States subsequently approves these requests for its
Member States.
For the relationship with EU Legislation, see informative Annex ZA, which is an integral part of this
document.
Any feedback and questions on this document should be directed to the users’ national standards
body/national committee. A complete listing of these bodies can be found on the CEN website.
According to the CEN-CENELEC Internal Regulations, the national standards organizations of the
following countries are bound to implement this European Standard: Austria, Belgium, Bulgaria,
Croatia, Cyprus, Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Iceland,
Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, Netherlands, Norway, Poland, Portugal, Republic of
North Macedonia, Romania, Serbia, Slovakia, Slovenia, Spain, Sweden, Switzerland, Türkiye and the
United Kingdom.
Endorsement notice
The text of ISO 18497-4:2024 has been approved by CEN as EN ISO 18497-4:2024 without any
modification.
Annex ZA
(informative)
Relationship between this European Standard and the essential
requirements of Directive 2006/42/EC aimed to be covered
This European Standard has been prepared under a Commission’s standardization request “M/396
Mandate to CEN and CENELEC for Standardisation in the field of machinery" to provide one voluntary
means of conforming to essential requirements of Directive 2006/42/EC of the European Parliament
and of the Council of 17 May 2006 on machinery, and amending Directive 95/16/EC (recast).
Once this standard is cited in the Official Journal of the European Union under that Directive,
compliance with the normative clauses of this standard given in Table ZA.1 confers, within the limits of
the scope of this standard, a presumption of conformity with the corresponding essential requirements
of that Directive, and associated EFTA regulations.
Table ZA.1 — Correspondence between this European Standard and Annex I of Directive
2006/42/EC
The relevant Essential Clause(s)/sub-clause(s) of this Remarks/Notes
Requirements of Directive EN
2006/42/EC
1.1.2. Principles of safety -----

integration
1.1.2(a) 4
1.1.2(c) 4
1.1.2(d)  NOT COVERED
1.1.2(e)  NOT COVERED
1.1.3. Materials and products  NOT COVERED
1.1.4. Lighting  NOT COVERED
1.1.5. Design of machinery to
NOT COVERED
facilitate its handling
1.1.6. Ergonomics 4.2, 4.3
1.1.7. Operating positions  NOT COVERED
1.1.8. Seating  NOT COVERED
1.2. CONTROL SYSTEMS -----
1.2.1. Safety and reliability of
4.2, 4.3
control systems
1.2.2. Control devices  NOT COVERED
1.2.3. Starting 4.2, 4.3
1.2.4. Stopping  NOT COVERED
NOT COVERED
1.2.5. Selection of control or
The relevant Essential Clause(s)/sub-clause(s) of this Remarks/Notes
Requirements of Directive EN
2006/42/EC
operating modes
1.2.6. Failure of the power
4.2, 4.3
supply
1.3. PROTECTION AGAINST ----
MECHANICAL HAZARDS
1.3.1. Risk of loss of stability  NOT COVERED
1.3.2. Risk of break-up during
NOT COVERED
operation
1.3.3. Risks due to falling or
NOT COVERED
ejected objects
1.3.4. Risks due to surfaces,
NOT COVERED
edges or angles
1.3.5. Risks related to combined
NOT COVERED
machinery
1.3.6. Risks related to variations
NOT COVERED
in operating conditions
1.3.7. Risks related to moving
4.2, 4.3
parts
1.3.8. Choice of protection
against risks arising from NOT COVERED
moving parts
1.3.9. Risks of uncontrolled
NOT COVERED
movements
1.4. REQUIRED ----
CHARACTERISTICS OF GUARDS
AND PROTECTIVE DEVICES
1.4.1. General requirements  NOT COVERED
1.4.2. Special requirements for
NOT COVERED
guards
1.4.3. Special requirements for
4.2, 4.3
protective devices
1.5. RISKS DUE TO OTHER ----
HAZARDS
1.5.1. Electricity supply  NOT COVERED
1.5.2. Static electricity  NOT COVERED
1.5.3. Energy supply other than
NOT COVERED
electricity
1.5.4. Errors of fitting  NOT COVERED
The relevant Essential Clause(s)/sub-clause(s) of this Remarks/Notes
Requirements of Directive EN
2006/42/EC
1.5.5. Extreme temperatures  NOT COVERED
1.5.6. Fire  NOT COVERED
1.5.7. Explosion  NOT COVERED
1.5.8. Noise  NOT COVERED
1.5.9. Vibrations  NOT COVERED
1.5.10. Radiation  NOT COVERED
1.5.11. External radiation  NOT COVERED
1.5.12. Laser radiation  NOT COVERED
1.5.13. Emissions of hazardous
NOT COVERED
materials and substances
1.5.14. Risk of being trapped in a
NOT COVERED
machine
1.5.15. Risk of slipping, tripping
NOT COVERED
or falling
1.5.16. Lightning  NOT COVERED
1.6. MAINTENANCE -----
1.6.1. Machinery maintenance  NOT COVERED
1.6.2. Access to operating
NOT COVERED
positions and servicing points
1.6.3. Isolation of energy sources  NOT COVERED
1.6.4. Operator intervention  NOT COVERED
1.6.5. Cleaning of internal parts  NOT COVERED
1.7. INFORMATION ----
1.7.1. Information and warnings
4.2, 4.3
on the machinery
1.7.1.1. Information and
4.2, 4.3
information devices
1.7.1.2. Warning devices 4.2, 4.3
1.7.2. Warning of residual risks 4.2, 4.3
1.7.3. Marking of machinery  NOT COVERED
1.7.4. Instructions 4.2, 4.3
2.4. MACHINERY FOR ----
PESTICIDE APPLICATION
2.4.2. General  NOT COVERED
The relevant Essential Clause(s)/sub-clause(s) of this Remarks/Notes
Requirements of Directive EN
2006/42/EC
2.4.3. Controls and monitoring  NOT COVERED
2.4.4. Filling and emptying  NOT COVERED
2.4.5. Application of pesticides ----
2.4.5.1. Application rate  NOT COVERED
2.4.5.2. Distribution, deposition
NOT COVERED
and drift of pesticide
2.4.5.3. Tests  NOT COVERED
2.4.5.4. Losses during stoppage  NOT COVERED
2.4.6. Maintenance ----
2.4.6.1. Cleaning  NOT COVERED
2.4.6.2. Servicing  NOT COVERED
2.4.7. Inspections  NOT COVERED
2.4.8. Marking of nozzles,
NOT COVERED
strainers and filters
2.4.9. Indication of pesticide in
NOT COVERED
use
2.4.10. Instructions  NOT COVERED
3.2 WORK POSITIONS ---
3.2.1. Driving position  NOT COVERED
3.2.2. Seating  NOT COVERED
3.2.3. Positions for other persons  NOT COVERED
3.3 CONTROL SYSTEMS ---
3.3.1. Control devices 4.2, 4.3
3.3.2. Starting/moving 4.2, 4.3
3.3.3. Travelling function  NOT COVERED
3.3.4. Movement of pedestrian-
NOT COVERED
controlled machinery
3.3.5. Control circuit failure  NOT COVERED
3.4 PROTECTION AGAINST ---
MECHANICAL HAZARDS
3.4.1. Uncontrolled movements  NOT COVERED
3.4.2. Moving transmission parts  NOT COVERED
3.4.3. Roll-over and tip-over  NOT COVERED
3.4.4. Falling objects  NOT COVERED
The relevant Essential Clause(s)/sub-clause(s) of this Remarks/Notes
Requirements of Directive EN
2006/42/EC
3.4.5. Means of access  NOT COVERED
3.4.6. Towing devices  NOT COVERED
3.4.7. Transmission of power
between self-propelled
NOT COVERED
machinery (or tractor) and
recipient machinery
3.5 PROTECTION AGAINST ----
OTHER HAZARDS
3.5.1. Batteries  NOT COVERED
3.5.2. Fire  NOT COVERED
3.5.3. Emissions of hazardous
NOT COVERED
substances
3.6 INFORMATION AND ----
INDICATIONS
3.6.1. Signs, signals and
4.2, 4.3
warnings
3.6.2. Marking  NOT COVERED
3.6.3. Instructions ----
3.6.3.1. Vibrations  NOT COVERED
3.6.3.2. Multiple uses  NOT COVERED
Table ZA.2 — Applicable Standards to confer presumption of conformity as described in this
Annex ZA
Column 1 Column 2 International Column 3 Column 4
Reference in Standard Edition
Title Corresponding
Clause 2
European Standard
Edition
ISO 12100:2010 ISO 12100:2010 Safety of machinery — EN ISO 12100:2010
General principles for
design — Risk
assessment and risk
reduction
ISO 13849-1:2023 ISO 13849-1:2023 Safety of machinery — EN ISO 13849-1:2023
Safety-related parts of
control systems — Part 1:
General principles for
design
ISO 13849-2:2012 ISO 13849-2:2012 Safety of machinery — EN ISO 13849-2:2012
Safety-related parts of
control systems — Part 2:
Column 1 Column 2 International Column 3 Column 4
Reference in Standard Edition
Title Corresponding
Clause 2
European Standard
Edition
Validation
ISO 18497-1:2024 ISO 18497-1:2024 Agricultural machinery EN ISO 18497-1:2024
and tractors — Safety of
partially automated,
semi-autonomous and
autonomous machinery
— Part 1: Machine design
principles and vocabulary
ISO 18497-2:2024 ISO 18497-2:2024 Agricultural machinery EN ISO 18497-2:2024
and tractors — Safety of
partially automated,
semi-autonomous and
autonomous machinery
— Part 2: Design
principles for obstacle
protective systems
ISO 18497-3:2024 ISO 18497-3:2024 Agricultural machinery EN ISO 18497-3:2024
and tractors — Safety of
partially automated,
semi-autonomous and
autonomous machinery
— Part 3: Autonomous
operating zones
ISO 25119-1:2018 ISO 25119-1:2018 Tractors and machinery EN ISO 25119-1:2023
for agriculture and
ISO 25119- EN ISO 25119- 1:2023/
forestry — Safety-related
1:2018/A1:2020 A1:2023
parts of control systems
— Part 1: General
principles for design and
development
ISO 25119-2:2019 ISO 25119-2:2019 Tractors and machinery EN ISO 25119-2:2023
for agriculture and
forestry — Safety-related
parts of control systems
— Part 2: Concept phase
ISO 25119-3:2018 ISO 25119-3:2018 Tractors and machinery EN ISO 25119-3:2023
for agriculture and
ISO 25119- EN ISO 25119-3:2023/
forestry — Safety-related
3:2018/A1:2020 A1:2023
parts of control systems
— Part 3: Series
development, hardware
and software
ISO 25119-4:2018 ISO 25119-4:2018 Tractors and machinery EN ISO 25119-4:2023
for agriculture and
ISO 25119- EN ISO 25119- 4:2023/
Column 1 Column 2 International Column 3 Column 4
Reference in Standard Edition
Title Corresponding
Clause 2
European Standard
Edition
4:2018/A1:2020 forestry — Safety-related A1:2023
parts of control systems
— Part 4: Production,
operation, modification
and supporting processes
The documents listed in the Column 1 of Table ZA.2, in whole or in part, are normatively referenced in
this document, i.e. are indispensable for its application. The achievement of the presumption of
conformity is subject to the application of the edition of Standards as listed in Column 4 or, if no
European Standard Edition exists, the International Standard Edition given in Column 2 of Table ZA.2.
WARNING 1 Presumption of conformity stays valid only as long as a reference to this European
Standard is maintained in the list published in the Official Journal of the European Union. Users of this
standard should consult frequently the latest list published in the Official Journal of the European
Union.
WARNING 2 Other Union legislation may be applicable to the product(s) falling within the scope of this
standard.
International
Standard
ISO 18497-4
First edition
Agricultural machinery and
2024-07
tractors — Safety of partially
automated, semi-autonomous and
autonomous machinery —
Part 4:
Verification methods and validation
principles
Tracteurs et matériels agricoles — Sécurité des machines
partiellement automatisées, semi-autonomes et autonomes —
Partie 4: Méthodes de vérification et principes de validation
Reference number
ISO 18497-4:2024(en) © ISO 2024

ISO 18497-4:2024(en)
© ISO 2024
All rights reserved. Unless otherwise specified, or required in the context of its implementation, no part of this publication may
be reproduced or utilized otherwise in any form or by any means, electronic or mechanical, including photocopying, or posting on
the internet or an intranet, without prior written permission. Permission can be requested from either ISO at the address below
or ISO’s member body in the country of the requester.
ISO copyright office
CP 401 • Ch. de Blandonnet 8
CH-1214 Vernier, Geneva
Phone: +41 22 749 01 11
Email: copyright@iso.org
Website: www.iso.org
Published in Switzerland
ii
ISO 18497-4:2024(en)
Contents Page
Foreword .iv
Introduction .v
1 Scope . 1
2 Normative references . 1
3 Terms and definition . 2
4 Verification methods and validation principles. 2
4.1 General .2
4.2 Verification methods .3
4.3 Validation principles.5
Annex A (informative) Information regarding physical properties of objects and humans for
use in development of test and simulation verification methods . 6
Annex B (informative) Information regarding environmental influences for use in development
of test and simulation verification methods . 8
Annex C (informative) Information regarding test objects for use in development of test and
simulation verification methods . 10
Annex D (informative) Information regarding examples of test procedures .12
Bibliography .37

iii
ISO 18497-4:2024(en)
Foreword
ISO (the International Organization for Standardization) is a worldwide federation of national standards
bodies (ISO member bodies). The work of preparing International Standards is normally carried out through
ISO technical committees. Each member body interested in a subject for which a technical committee
has been established has the right to be represented on that committee. International organizations,
governmental and non-governmental, in liaison with ISO, also take part in the work. ISO collaborates closely
with the International Electrotechnical Commission (IEC) on all matters of electrotechnical standardization.
The procedures used to develop this document and those intended for its further maintenance are described
in the ISO/IEC Directives, Part 1. In particular, the different approval criteria needed for the different types
of ISO document should be noted. This document was drafted in accordance with the editorial rules of the
ISO/IEC Directives, Part 2 (see www.iso.org/directives).
ISO draws attention to the possibility that the implementation of this document may involve the use of (a)
patent(s). ISO takes no position concerning the evidence, validity or applicability of any claimed patent
rights in respect thereof. As of the date of publication of this document, ISO had not received notice of (a)
patent(s) which may be required to implement this document. However, implementers are cautioned that
this may not represent the latest information, which may be obtained from the patent database available at
www.iso.org/patents. ISO shall not be held responsible for identifying any or all such patent rights.
Any trade name used in this document is information given for the convenience of users and does not
constitute an endorsement.
For an explanation of the voluntary nature of standards, the meaning of ISO specific terms and expressions
related to conformity assessment, as well as information about ISO's adherence to the World Trade
Organization (WTO) principles in the Technical Barriers to Trade (TBT), see www.iso.org/iso/foreword.html.
This document was prepared by Technical Committee ISO/TC 23, Tractors and machinery for agriculture and
forestry, Subcommittee SC 19, Agricultural electronics, in collaboration with the European Committee for
Standardization (CEN) Technical Committee CEN/TC 144, Tractors and machinery for agriculture and forestry,
in accordance with the Agreement on technical cooperation between ISO and CEN (Vienna Agreement).
This first edition of ISO 18497-4 together with ISO 18497-1, ISO 18497-2 and ISO 18497-3, cancels and
replaces ISO 18497:2018, which has been technically revised.
The main changes are as follows:
— verification methods and validation principles were made its own part (i.e. ISO 18497-4) and substantially
revised to account for the wide range of functionality and use cases within agricultural machines and
tractors.
A list of all parts in the ISO 18497 series can be found on the ISO website.
Any feedback or questions on this document should be directed to the user’s national standards body. A
complete listing of these bodies can be found at www.iso.org/members.html.

iv
ISO 18497-4:2024(en)
Introduction
This document is a type-B1 standard as stated in ISO 12100:2010.
This document is of relevance, in particular, for the following stakeholder groups representing the market
players with regard to machinery safety:
— machine manufacturers (small, medium and large enterprises);
— health and safety bodies (regulators, accident prevention organisations, market surveillance, etc.).
Others can be affected by the level of machinery safety achieved with the means of the document by the
above-mentioned stakeholder groups:
— machine users/employers (small, medium and large enterprises);
— machine users/employees (e.g. trade unions, organizations for people with special needs);
— service providers, e.g. for maintenance (small, medium and large enterprises);
— consumers (in case of machinery intended for use by consumers).
The above-mentioned stakeholder groups have been given the possibility to participate at the drafting
process of this document.
In addition, this document is intended for standardization bodies elaborating type-C standards.
The requirements of this document can be supplemented or modified by a type-C standard.
For machines which are covered by the scope of a type-C standard and which have been designed and built
according to the requirements of that standard, the requirements of that type-C standard take precedence.
The structure of safety standards in the field of machinery is as follows:
— Type-A standards (basis standards) give basic concepts, principles for design, and general aspects that
can be applied to machinery;
— Type-B standards (generic safety standards) deal with one or more safety aspects or one or more types
of safeguards that can be used across a wide range of machinery:
— Type-B1 standards on particular safety aspects (e.g. safety distances, surface temperature, noise);
— Type-B2 standards on safeguards (e.g. two-hands controls, interlocking devices, pressure sensitive
devices, guards);
— Type-C standards (machinery safety standards) deal with detailed safety requirements for a particular
machine or group of machines.
The purpose of the ISO 18497 series is to establish general design principles for partially automated, semi-
autonomous and autonomous (see ISO 18497-1:2024, Clause 3) functions of agricultural machinery and
tractors.
Manual non-automated functions are addressed in existing agricultural machinery and tractor safety
standards. Due to the potential number of different functions of agricultural machinery and tractors and
the mixed type and mode to which these functions can exist, it is necessary to establish general design
principles. In this way, the combination, operator location, and types of interaction of these functions can
be guided so that further type-C safety standards can be developed consistently and explicitly to address
the mitigation of risk of injury to operators and bystanders. This is the primary focus of safety standards.
Attempting to specify risk mitigation requirements based on combinations of type and mode of functions
alone cannot be accomplished accurately for all agricultural machinery and tractors due to the wide variety
of the machinery and variety of functionality.

v
ISO 18497-4:2024(en)
[1]
Therefore, the familiar representation of SAE J3016 with six levels of automation was deliberately
not chosen as a basis for the ISO 18497 series and it is necessary to develop more specific type-C safety
standards, using the general design principles of this document, to adequately account for the risks of
agricultural machinery and tractors used in a specified way with various types of partially automated,
semi-autonomous and autonomous functions.
When the requirements of the ISO 18497 series for partially automated, semi-autonomous and autonomous
functions of agricultural machinery and tractors are different from those which are stated in a machine-
specific type-C standard dealing with partially automated, semi-autonomous and autonomous functions of
agricultural machinery and tractors, the requirements of the machine-specific standard take precedence
over the requirements of the ISO 18497 series.

vi
International Standard ISO 18497-4:2024(en)
Agricultural machinery and tractors — Safety of partially
automated, semi-autonomous and autonomous machinery —
Part 4:
Verification methods and validation principles
1 Scope
This document specifies principles for verification methods and validation principles of agricultural
machinery and tractors that are used in agricultural applications and that have partially automated, semi-
autonomous and autonomous functions.
The purpose of this document is to assist in the provision of more specific safety requirements, means of
verification and information for use to ensure an appropriate level of safety for agricultural machinery and
tractors with partially automated, semi-autonomous and autonomous functions used in a specified way.
This document deals with the significant hazards relevant to agricultural machinery and tractors with
partially automated, semi-autonomous and autonomous functions when used as intended and under the
conditions of misuse reasonably foreseeable by the manufacturer during normal operation and service.
Applicability of the design principles and any additional requirements, for design, verification, validation or
information for use are outside the scope of this document. When risk assessment concludes that hazards
are not significant hazards, the principles of this document do not apply.
NOTE Safety requirements for specific non-automated functions of agricultural machinery and tractors can be
available in machine-specific type-C standards.
This document is not applicable to:
— forestry applications;
— operations on public roads including relevant requirements for braking and steering systems.
This document is not applicable to agricultural machinery and tractors which are manufactured before the
date of its publication, or to systems applied to agricultural machinery and tractors put into use before the
date of its publication.
2 Normative references
The following documents are referred to in the text in such a way that some or all of their content constitutes
requirements of this document. For dated references, only the edition cited applies. For undated references,
the latest edition of the referenced document (including any amendments) applies.
ISO 12100:2010, Safety of machinery — General principles for design — Risk assessment and risk reduction
ISO 13849-1:2023, Safety of machinery — Safety-related parts of control systems — Part 1: General principles
for design
ISO 13849-2:2012, Safety of machinery — Safety-related parts of control systems — Part 2: Validation
ISO 18497-1:2024, Agricultural machinery and tractors — Safety of partially automated, semi-autonomous and
autonomous machinery — Part 1: Machine design principles and vocabulary

ISO 18497-4:2024(en)
ISO 18497-2:2024, Agricultural machinery and tractors — Safety of partially automated, semi-autonomous and
autonomous machinery — Part 2: Design principles for obstacle protective systems
ISO 18497-3:2024, Agricultural machinery and tractors — Safety of partially automated, semi-autonomous and
autonomous machinery — Part 3: Autonomous operating zones
ISO 25119-1:2018, Tractors and machinery for agriculture and forestry — Safety-related parts of control
systems — Part 1: General principles for design and development
ISO 25119-1:2018/Amd 1:2020, Tractors and machinery for agriculture and forestry — Safety-related parts of
control systems — Part 1: General principles for design and development — Amendment 1
ISO 25119-2:2019, Tractors and machinery for agriculture and forestry — Safety-related parts of control
systems — Part 2: Concept phase
ISO 25119-3:2018, Tractors and machinery for agriculture and forestry — Safety-related parts of control
systems — Part 3: Series development, hardware and software
ISO 25119-3:2018/Amd 1:2020, Tractors and machinery for agriculture and forestry — Safety-related parts of
control systems — Part 3: Series development, hardware and software — Amendment 1
ISO 25119-4:2018, Tractors and machinery for agriculture and forestry — Safety-related parts of control
systems — Part 4: Production, operation, modification and supporting processes
ISO 25119-4:2018/Amd 1:2020, Tractors and machinery for agriculture and forestry — Safety-related parts of
control systems — Part 4: Production, operation, modification and supporting processes — Amendment 1
3 Terms and definition
For the purposes of this document, the terms and definitions given in ISO 18497-1:2024 apply.
ISO and IEC maintain terminological databases for use in standardization at the following addresses:
— ISO Online browsing platform: available at https:// www .iso .org/ obp
— IEC Electropedia: available at https:// www .electropedia .org/
4 Verification methods and validation principles
4.1 General
Design of machine systems, obstacle protective systems and systems (perception, supervisory or other)
to prevent unintended excursions beyond the boundary of the autonomous operating zone of agricultural
machinery and tractors with partially automated, semi-autonomous and autonomous functions (see Figure 1)
shall be in accordance with ISO 18497-1:2024, ISO 18497-2:2024 and ISO 18497-3:2024, respectively.
For ensuring an appropriate level of safety, the verification methods of 4.2 and validation principles
of 4.3 shall be applied for protective or risk reduction measures of significant hazards, as defined in
ISO 12100:2010, 3.8, when used in the machine design.

ISO 18497-4:2024(en)
NOTE See ISO 18497-1:2024.
Figure 1 — Terms used for combinations of functions and modes
4.2 Verification methods
4.2.1 Verification shall be carried out by the collection of data and results from the verification methods
listed in this clause. Table 1 provides the minimum verification methods for each part of the ISO 18497
series. Depending on the design and implementation of the protective or risk reduction measures, other
verification methods may also be used. More detailed verification methods for a specific use case or type of
machine may be given in type-C standards.
a) Inspection/observation – visual and/or audible evaluation without any specialized equipment.
b) Measurement – evaluation of physical values of components or systems of the machine to specified
values or limits.
c) Test – evaluation of components or systems of the machine under normal and abnormal conditions:
— Functional tests (e.g. fault injection testing);
— Cyclic tests (e.g. endurance testing);
— Performance tests (e.g. braking, steering, persons and/or obstacle detection tests).
d) Simulation – virtual evaluation of functions and performance of components or systems of the machine
with anticipated environmental and operating stresses.
e) Analysis – evaluation of inspection/observation, measurement, test and simulation methods in addition
to the design and its specifications through qualitative and quantitative means:
— Failure modes and effects analysis (FMEA);
— Fault tree analysis (FTA);
— Estimation / prediction by simulation models (e.g. Markov models, reliability models);
— Formal design review.
NOTE 1 Annex A gives information regarding physical properties of objects and humans for use in development of
test and simulation verification methods.
NOTE 2 Annex B gives information regarding environmental influences for use in development of test and
simulation verification methods.
NOTE 3 Annex C gives information regarding test objects for use in development of test and simulation verification
methods.
NOTE 4 Annex D gives information regarding examples of test procedures.

ISO 18497-4:2024(en)
Table 1 — List of required verification methods of protective or risk reduction measures
Inspection /
ISO 18497 Subclause Measurement Test Simulation Analysis
observation
4.2.2.1;
ISO 18497-1:2024 X X
4.2.2.2 a), b)
4.2.3.1;
ISO 18497-1:2024 X X
4.2.3.2 a), b)
ISO 18497-1:2024 4.2.4.1 a) X
ISO 18497-1:2024 4.2.4.1 b) X X
ISO 18497-1:2024 4.2.4.1 c), d) X X
ISO 18497-1:2024 4.2.4.2 a) X
ISO 18497-1:2024 4.2.4.2 b), c), d), e),
X X
f), h)
ISO 18497-1:2024 4.2.4.2 g) X X
ISO 18497-1:2024 4.2.5.1 a) X
ISO 18497-1:2024 4.2.5.2 a), b), c), d) X
ISO 18497-1:2024 4.2.6.1 a) X
ISO 18497-1:2024 4.2.6.2 a), b), c), d) X
ISO 18497-1:2024 4.2.7.1 a), b) X X
ISO 18497-1:2024 4.2.7.2 a), b) X X
ISO 18497-1:2024 4.2.8.1 a), b), c) X X
ISO 18497-1:2024 4.2.9.2 a) X
ISO 18497-1:2024 4.2.9.2 b) X X
ISO 18497-1:2024 4.2.10.1; 4.2.10.2;
4.2.10.3; 4.2.10.4 X X
a), b)
ISO 18497-1:2024 4.3.1; 4.3.2.2 X
ISO 18497-1:2024 4.3.2.3; 4.3.2.4,
X X
4.3.2.5
ISO 18497-1:2024 4.3.3.2; 4.3.3.3;
X
4.3.3.4; 4.3.3.5
ISO 18497-1:2024 4.4; 4.5 X X
ISO 18497-2:2024 4.2.2 a) X X
ISO 18497-2:2024 4.2.2 b) X X
ISO 18497-2:2024 4.2.2 c) X X
ISO 18497-2:2024 4.2.3 X X
ISO 18497-2:2024 4.2.4; 4.2.5; 4.2.6.2 X
ISO 18497-2:2024 4.2.7.1; 4.2.7.2;
X X
4.2.7.3
ISO 18497-2:2024 4.3; 4.4 X X
ISO 18497-3:2024 4.2.2.1 a) X X
ISO 18497-3:2024 4.2.2.1 b) X X
ISO 18497-3:2024 4.2.2.1 c) X X
ISO 18497-3:2024 4.2.2.2 a) X X
ISO 18497-3:2024 4.2.2.2 b) X X
ISO 18497-3:2024 4.2.2.2 c) X X
ISO 18497-3:2024 4.2.3.1; 4.2.3.2 X X

ISO 18497-4:2024(en)
TTabablele 1 1 ((ccoonnttiinnueuedd))
Inspection /
ISO 18497 Subclause Measurement Test Simulation Analysis
observation
ISO 18497-3:2024 4.2.4 X
ISO 18497-3:2024 4.2.5.1; 4.2.5.2;
X X
4.2.5.3
ISO 18497-3:2024 4.3; 4.4 X X
4.3 Validation principles
Validation shall be carried out by applying the validation principles listed in this subclause for the protective
or risk reduction measures provided in the machine design.
a) Evaluation of used verification methods from 4.2.1:
— appropriate tests, test methods, setup, conditions and procedures;
— appropriate simulations, simulation methods, setup, conditions and procedures;
— appropriate analysis methods.
b) Evaluation of risk reduction level as intended per ISO 12100:2010.
c) Evaluation of functional safety performance level as intended per ISO 25119-1:2018, ISO 25119-1:2018/
Amd 1:2020, ISO 25119-2:2019, ISO 25119-3:2018, ISO 25119-3:2018/Amd 1:2020, ISO 25119-4:2018 and
ISO 25119-4:2018/Amd 1:2020, or ISO 13849-1:2023 and ISO 13849-2:2012.
d) Evaluation of information for use:
— found in ISO 18497-1:2024, 4.5;
— found in ISO 18497-2:2024, 4.4;
— found in ISO 18497-3:2024, 4.4.

ISO 18497-4:2024(en)
Annex A
(informative)
Information regarding physical properties of objects and humans for
use in development of test and simulation verification methods
A.1 Physical properties of objects
The physical properties of an object can include, but are not limited to:
— absorption (physical);
— absorption (electromagnetic);
— area;
— capacitance;
— colour;
— density;
— dielectric;
— ductility;
— elasticity;
— electric charge;
— electrical conductivity;
— electrical impedance;
— electric field;
— emission;
— flow rate;
— fluidity;
— frequency;
— hardness;
— inductance;
— intrinsic impedance;
— intensity;
— irradiance;
— length;
— location;
— luminance;
ISO 18497-4:2024(en)
— luminescence;
— malleability;
— magnetic field;
— opacity;
— permeability;
— permittivity;
— radiance;
— reflectivity;
— strength;
— temperature;
— thermal conductivity;
— velocity;
— volume.
A.2 Human dimensions
The following are sources for human adult and child anthropometric data:
[2] to [4]
— ISO 7250 (all parts) ;
[5]
— Japanese children size data ;
[6]
— Physical characteristic of children .
[7]
NOTE 1 CEN/CENELEC Guide 14, Annex C and D is a source of information on age specific behaviour and
development which can be used to help determine appropriate ages of anthropometric data to use.
A.3 Human movement
The following are values which can be used for human movement:
— Velocity representing walking of adult persons: between 0 mm/s and 1 600 mm/s;
NOTE 1 1 600 mm/s for velocity is in accordance with intended use of an industrial environment as defined in
[8]
ISO 13855 .
2 2
— Acceleration of adult persons: between 0 mm/s and 2 000 mm/s .
NOTE 2 2 000 mm/s is the acceleration of an adult person initiating normal walking speed of 1 600 mm/s
[9]
according to the Journal of Rehabilitation Research and Development .
A.4 Human forces
[10]
— ISO/TS 15066:2016, Annex A .
[11]
— ISO 13856-3:2013, Table 2 .
ISO 18497-4:2024(en)
Annex B
(informative)
Information regarding environmental influences for use in
development of test and simulation verification methods
B.1 Environmental parameters
Environmental parameters and severities can include, but are not limited to:
— indoor and/or outdoor use (sheltered or not);
— stationary operation and/or mobile operation;
— temperature and humidity;
— precipitation (rain, hail or snow) and wind;
— pressure (of surrounding air, water, etc.);
— solar radiation and thermal radiation;
— condensation and icing;
— fog, dust, sand and salt mist;
— vibration and shocks;
— fauna and flora (e.g. mould growth);
— chemical influences;
— electrical and electromagnetic influences;
— mechanical load;
— sound.
[12]
IEC 60721 (all parts) is a source for environmental parameters.
B.2 Specific standards containing environmental requirements
[13]
— IEC 60654-1 .
[14]
— ISO 15003 .
[15]
— EN 50125-1 .
[16]
— ISO 19014-3 .
[17]
— IEC 60721-3-3 .
[18]
— IEC 60721-3-4 .
[19]
— IEC 60721-3-5 .
[20]
— IEC 60721-3-6 .
ISO 18497-4:2024(en)
B.3 Other standards containing environmental requirements
[21]
— IEC 60068 (all parts) .
[22]
— IEC 60529 .
ISO 18497-4:2024(en)
Annex C
(informative)
Information regarding test objects for use in development of test and
simulation verification methods
C.1 Test object
The following defines a test obstacle (e.g. intended to represent a seated human, small human, animal):
a) the dimensions given by Figure C.1;
b) test obstacle can be filled with water to represent the composition of the human body;
c) test obstacle can be filled with water and warmed by a heater to represent the temperature of the
human body;
d) material should be plastic, e.g. polyethylene with matte surface;
e) the colour should be olive green with matte surface.
NOTE “Olive green” is specified as 2.5 GY 3.5/3 by the Munsell Colour System or RAL 6003 by the German Institute
for Quality Assurance and Certification (Deutsches Institut für Gütesicherung und Kennzeichnung e.V.). Olive green
colour chosen to provide a challenging identification of the object in multiple field conditions (e.g. camouflage).
Dimensions in millimetres
Figure C.1 — Test obstacle dimensions
C.2 Specific standards containing test objects
[23]
— ISO 19206-1 .
[24]
— ISO 19206-2 .
[25]
— ISO 19206-3 .
ISO 18497-4:2024(en)
[26]
— ISO 19206-4 .
[27]
— ISO 3691-4
...