[SystemSafety] Critical systems Linux

[grivsta at gmail.com]

Hi Peter,


> http://blackberry.qnx.com/en/company/certifications

>That is certified to ISO 9001. Quite a different kettle of fish.


The (similar?) QNX TUV Rheinland certificates can be found here:

https://www.certipedia.com/fs-products/certificates?cert_id=2323

The notes in the certificate appear to have weasel words, for example, "in
extracts"

   - IEC 61508 Parts 1-7:2010 (in extracts)

As you have noted, while it is likely that some checking was done, I am not
sure of the depth. I am learning that in many cases it is buyer beware and
for many COTS systems, you need to perform due diligence.

Is it possible to purchase systems as in the example above and provide
assurance without re-inventing the wheel, perhaps by leveraging what has
been done in the initial certification? I am aware that discovering methods
is hard.

Also, what is the relationship between being ISO 9001 certified and then
developing assurance to a standard? Is it really necessary to have ISO 9001
to apply IEC61508 (I thought the need was implied) or could you achieve
compliance to IEC61508 without extra effort and not having a certified
quality system?

Kind regards,

Daniel.




>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.techfak.uni-bielefeld.de/mailman/private/systemsafety/attachments/20181121/a1640335/attachment.html>