The ITER safety control systems—Status and plans

The operation of a complex experimental machine like ITER will involve a number of potential hazards to personnel, the environment, and to the machine itself. While some protections are usually embedded within the overall control system, when it comes to the protection of people, the environment or the safe operation of the machine, dedicated systems are required. At ITER, the safety control systems are dedicated to the protection of people and the environment. These systems represents one of the three independent tiers on which the ITER Instrumentation and Control is based. They have to respect stringent requirements in terms of reliability, availability, safety and maintainability for operation, security and national and/or international safety regulations. This paper describes the current status and plans of the safety control systems, the functions to be performed, the envisaged architecture and the main design options including the principles of separation and independence between the three tiers.