The Trusted Triple Modular Redundant (TMR) System has been designed and certified for use in safety-related applications. To ensure that systems build upon these foundations, it is necessary to impose requirements on the way such systems are designed, built, configured, tested, installed, and commissioned, operated, maintained, and decommissioned. This manual sets out the requirements to be met during these stages of a safety-related system to ensure that the safety-related objectives of a Trusted TMR System are achieved.

This manual is intended primarily for system integrators and is not intended to be a substitute for expertise or experience in safety-related systems. It is assumed that the reader has a thorough understanding of the intended application and can translate readily between the generic terms used within this manual and the terminology specific to the integrator’s or project’s application area.