Research context
A machinery assessment should explain how the machine can cause harm, how the design addresses that harm and what verifies the resulting protective measures. A list of standards cannot supply that explanation on its own.
ISO 12100:2010 provides a general methodology for machinery risk assessment and risk reduction, including consideration of lifecycle hazards and the documentation of the process. The ISO catalogue identifies it as published, confirmed in 2022 and subject to revision work. The European adoption is separately identified as EN ISO 12100:2010 in the BSI record. A revision project is not a published replacement. ISO record · European adoption record
Define the machine and its interfaces
The boundary is often the most consequential early decision. A stand-alone machine, a robot cell and a connected production line present different interface questions. Identify who performs the integration, which items are included and what happens at each transfer point.
Describe the machine's tasks and modes. Include normal production, loading, setting, cleaning, fault recovery, maintenance and foreseeable intervention. An assessment limited to the automatic production cycle can miss the circumstances in which a person needs access.
The boundary record should also identify stored energy, upstream and downstream equipment, utilities, extraction systems and material flow. If safe operation depends on a function supplied by another party, make that dependency explicit.
Build a hazard-to-evidence register
A useful register treats each entry as a causal chain. It identifies a task, the person exposed, the hazardous situation and the protective response. It then connects that response with a verifiable design requirement and evidence.
| Element | Example review question |
|---|---|
| Task and exposure | Who can enter the area, in which mode and for what purpose? |
| Hazardous situation | What movement, energy or event could cause harm? |
| Design decision | Can the hazard be eliminated or exposure reduced through the design? |
| Protective measure | Which guard, protective device or control function addresses the remaining situation? |
| Information | Which residual conditions must the user understand? |
| Verification | What drawing, calculation, inspection or test supports the measure? |
| Configuration | Does the evidence describe the released machine and installed arrangement? |
A generic entry such as “moving parts — guard fitted — acceptable” cannot show whether the particular access path, operating mode and protective response have been examined. The register should be concise enough to maintain, but specific enough to support a decision.
Use the standards hierarchy deliberately
General machinery principles, standards addressing a safety aspect or protective measure, and standards for a particular machine type have different roles. A machine-specific standard can identify details that a general risk methodology cannot supply.
For each selected document, record the part of the problem it addresses. Confirm its scope against the machine, intended use and significant hazards. Where a machine combines several processes, examine the interfaces and hazards that may lie outside an individual process standard.
Do not treat one widely used reference as an answer to every machinery question. The role of EN ISO 12100 is methodological; detailed safety functions, electrical equipment, guards, access distances and machine-specific arrangements may need their own technical basis. Selection should follow the hazard analysis and the scopes of the documents.
Specify safety functions before validating them
A safety-related control function needs an intelligible functional description. State the initiating event, required response, relevant mode, reset and restart conditions, dependencies and failure assumptions. Keep the description connected to the hardware and software actually implemented.
An equipment component may carry performance information while the complete function depends on sensors, logic, actuators, wiring and integration. A component claim should therefore enter the design record with its conditions of use. It should not be presented as validation of the entire machine function.
Verification is more useful when planned with the design. A test should have an identified requirement, configuration, method, expected result and recorded result. An unexpected result needs a disposition and, where the design changes, a corresponding update to the risk record.
Integration changes the assessment question
A supplier's machine evidence may remain valid for that machine while leaving a line-level hazard unresolved. Transfer openings, shared zones, accumulation, restart sequences and emergency actions can depend on the completed system.
| Integration issue | Evidence question |
|---|---|
| Material transfer | Can a person reach a hazardous area through the interface? |
| Shared protective zone | Which machines are brought to a safe condition, and under which modes? |
| Restart after interruption | What prevents an unexpected sequence when power or communication returns? |
| Common control system | Which functions depend on external logic and how is that dependency verified? |
| Maintenance access | How are isolation, stored energy and access coordinated across items? |
The integration record should identify which party owns each unresolved issue. A collection of supplier declarations does not explain the completed arrangement.
Keep the legal transition tied to the placing-on-market date
The Commission states that the Machinery Regulation (EU) 2023/1230 becomes applicable on 20 January 2027, replacing the Machinery Directive framework for the relevant placing-on-market assessment. A project spanning the transition needs a dated legal plan alongside its engineering schedule. Commission machinery overview
A standard cited under the Directive should not be assumed to have the same legal relationship under the Regulation. Record the legal instrument, exact edition, citation and coverage used for the particular assessment. The Commission's machinery standard index is the route to the relevant decisions and amendments. Commission machinery standard references
Assess modifications against the original reasoning
When a machine is modified, compare the new task, speed, tooling, material, access and control behaviour with the existing risk and verification records. The question is whether earlier conclusions still describe the modified machine.
For example, a hypothetical line extension may retain a guard design but change the location where an operator clears material. The earlier guard inspection may be accurate for its original arrangement while failing to address the new intervention. A documented change-impact review identifies that difference before deciding what additional design or evidence is required.
This approach preserves useful evidence and makes the limits of that evidence visible. It also allows the technical file to explain the finished machine as a system rather than a folder of unrelated component records.
Sources and research scope
Sources were checked on 19 October 2026. This study concerns the application of a risk-to-evidence method. It does not assign a performance level, prescribe a safety distance or reproduce standard clauses. Those decisions require the relevant complete standards, machine-specific design information and appropriate validation. Current legal citation must be verified independently of the publisher's catalogue status.