Federico Arrighetti Email & Phone Number

Munich, Bavaria, Germany

Dependability expert for the development and the Conformity Assessment by TÜV Nord of the “EB corbos Linux for Safety Applications”, a Linux‑based operating system suitable for high‑integrity applications up to SIL2 according to EN 61508 or ASIL B according to ISO 26262.The Conformity Assessment has been successfully achieved.

Munich Area, Germany

August 2022 - November 2022Consultant (Safety Manager) at Knorr-Bremse for the development and the Independent Safety Assessment by TÜV Süd (Munich - Germany) according to CENELEC norms of the “Digital Freight Control” (automatic brake test for freight trains). The “Digital Freight Control” is SIL2 according to CENELEC normsJanuary 2018 - May 2022Consultant at Knorr-Bremse for the development and the Independent Safety Assessment by TÜV Süd (Munich - Germany) according to CENELEC norms of the “IBC” (Integrated Brake Control). The “IBC” is SIL2 according to CENELEC norms.: • technical support and advice on the technical and safety impact of the issues found in the development and testing of the system • support to the execution of hardware faults analysis activities including improving the process to make it more effective and focused on the demonstration of the achievement of the Safety Targets • analysis of communication protocols and demonstration for each of them of the achievement of a level of risk compatible with Safety Integrity Level 2 (SIL2) • production of the Safety Justification required to receive the authorisation to execute tests on track in commercial service (and hence not under possession) • production of the Generic Application Safety Case using the insufficient supporting evidence available and producing the missing evidence and analysis as necessary

Copenhagen Area, Denmark

Consultant at Banedanmark (Danish Railway Company) for the safety activities related to the installation of ERTMS Level 2 on the entire Danish railway network:- participation in the Hazard Identification and Analysis activities- participation in the production of the Generic Application Safety Case of the integrated trackside/trainborne system- production of the safety justification required by the Quality & Safety department of Banedanmark for the authorisation to the execution of tests on line (under possession) according to the Banedanmark's Quality & Safety implementation of the “Common Safety Method” (Commission Regulation (EC) No 352/2009 of 24 April 2009)

Borehamwood - United Kingdom

Product Manager for the introduction on the UK market of the object controller “Smart I/O” developed by Alstom Transport. The “Smart I/O” is SIL4 according to CENELEC norms: • analysis of the signalling rules, interface with trackside objects and RAMS characteristics required by the UK market • analysis of the version of the Smart I/O developed for other markets to identify weaknesses, strengths, and the changes required for the UK version • interface with the development team to assess the solutions proposed under functionality and safety • planning of the activities

Chippenham Uk

Responsible for the safety assurance and the Independent Safety Assessment by Loyd’s Register Rail (London - United Kingdom) of the “DTG-R” system (Distance To Go-Radio), an Automatic Train Control system with automatic drive abilities intended for being used in metros and sub-surface lines. The “DTG-R” is SIL4 according to CENELEC norms: • RAMS activities • production of one of the three Generic Product Safety Cases • production of the Generic Application Safety CaseThe Independent Safety Assessment has been successfully achieved and the "DTG‑R" has been accepted by London Underground and placed into commercial revenue service on the Victoria Line

Rome Area, Italy

Responsible for the Independent Safety Assessment activities of safety-critical railway signalling systems according to CENELEC norms.Independent Safety Assessment, according to CENELEC norms, of the trainborne subsystem developed by Ansaldo Segnalamento Ferroviario S.p.A. (“Generic Product” and “Generic Application”). The trainborne subsystem implements both ERTMS Level 2 and Italian signalling system “SCMT”. The trainborne subsystem is SIL4 according to CENELEC norms.

Bari Area, Italy

Responsible for the dependability and the Independent Safety Assessment by R.F.I. S.p.A. (Italian Railways) supported by SciroTÜV (Genova - Italy - SciroTÜV was a consortium between the Italian company Sciro s.r.l. and the Italian subsidiary of TÜV Rheinland - Germany) and by RINA S.p.A. (Genova - Italy) according to CENELEC norms of the trackside subsystem of the Automatic Train Control system “SCMT” developed by Mer Mec S.p.A. for R.F.I. S.p.A. (Italian railways). The “SCMT” is a SIL4 system according to CENELEC norms.The trackside subsystem of the “SCMT” consists of “Generic Products”, “Generic Application” (including the Application Engineering process) and “Specific Applications”.The Independent Safety Assessment has been successfully achieved and the "SCMT" has been placed into commercial revenue service on the Italian railway network.

Pisa Area, Italy

Direction and coordination of all the activities related to the certification according to the CENELEC standards of the radio remote control system “Locomote” produced by Åkerströms Björbo AB (Björbo - Sweden) intended for being used in railway domain; the Assessor was TÜV Automotive GmbH (Munich - Germany); the system “Locomote” is a SIL3 system according to CENELEC. The job is executed both in Italy and in Sweden and included also the relationships with the assessor and a training on the job activity in order to allow the Åkerströms acquiring the needed knowledge

Pisa Area, Italy

Support to Alstom Transport S.p.A. (an Italian subsidiary of Alstom) for developing a technical proposal and an example of a new version of the System Requirements Specification document intended for being used as a Customer Specification document by R.F.I. S.p.A. (Italian railways).The System Requirements Specifications document is written according to CENELEC standards and relates to the on board subsystem of the Italian implementation of the European system ERTMS developed by Alstom Transport S.p.A. for R.F.I. S.p.A. (Italian railways); the system is intended for being used in Italian high-speed trains and is a SIL4 system according to CENELEC

Pisa Area, Italy

Support to Alstom Transport S.p.A. (an Italian subsidiary of Alstom) in order to define the documentation plan and the lifecycle of the Alstom implementation of the on-board part of the Automatic Train Control system “SCMT” developed by Alstom Transport S.p.A. for R.F.I. S.p.A. (Italian railways); the Assessor was TÜV Automotive GmbH (Munich - Germany). The system “SCMT” is a SIL4 system according to CENELEC

Pisa Area, Italy

Support to Alstom Transport S.p.A. (an Italian subsidiary of Alstom) in order to write the high level documentation of the MMI (Man Machine Interface) subsystem for the Certification according to the CENELEC standards of the on-board part of the Automatic Train Control system “SCMT” developed by Alstom Transport S.p.A. (an Italian subsidiary of Alstom) for R.F.I. S.p.A. (Italian railways); the Assessor was TÜV Automotive GmbH (Munich - Germany); the MMI is a SIL4 system according to CENELEC:- writing the System Requirements Specification document (including writing the requirements)- writing the System Architecture Specification document- executing the Preliminary Hazard Analysis activity and writing the related document- executing the Hazard Analysis activity according to the specific requests of the customer of an approach of FMEA type and writing the related document- specification and design of a set of hardware tests (not included in the certification process) according to the safety analysis performed by the Italian Railways

Pisa Area, Italy

Reviewing of the entire documentation set and of the lifecycle related to the acceptance by R.F.I. S.p.A. (Italian railways) of the electronic device “D‑BCA/CCS” (“Dispositivo‑Blocco Conta-Assi/Comandi e Controlli Sicuri” - Axle Counter) developed by Ducati Sistemi S.r.l. (Casalecchio di Reno - Bologna - Italy) in order to make it compliant to the CENELEC norms. The “D‑BCA/CCS” is intended for detecting the presence of a train on a track and for managing a safe communication between two adjacent stations. The “D‑BCA/CCS” is SIL4 according to the CENELEC norms: • complete re‑writing of all the design documents, both high and low level, including safety analysis • production and tracing of all the requirements (system requirements, architectural descriptions, software requirements) • reviewing of all the documentation set in order to achieve the requested coherence • reviewing of all the detail documents.The “D‑BCA/CCS” has been accepted by R.F.I. S.p.A.

Pisa Area, Italy

Design and execution of the software tests of the vital software component “Physical I/O” (C-language) for the certification according to the CENELEC standards of the Automatic Train Control “Microlok II” developed by Union Switch and Signal (Pittsburgh - Pennsylvania - USA) for the automatic driverless Copenhagen Metro; the Assessor was TÜV InterTraffic GmbH (Cologne - Germany); the “Microlok II” is a SIL4 system according to CENELEC:- design, specification and execution of the software test applying a specific methodology and using tools developed by Ansaldo Segnalamento Ferroviario S.p.A. (a subsidiary of Ansaldo Signal NV);- writing of the related documents (Test Specification and Test Report documents)- complete reviewing of the details documents related to the software component under test in order to achieve the needed consistency with the Verification & Validation technique appliedRelated to the same project- execution of fault injection tests on a different software component by means of a proprietary tool-set developed by Ansaldo Segnalamento Ferroviario S.p.A.- collaboration to the reviewing of all the document set (both high level and low level documents) in order to achieve the needed consistency with the applied Verification & Validation methodology

Pisa Area, Italy

Development of upgrading and extensions of the software used by Navionics S.p.A. (an Italian company leader in electronic chart); the software was written in MS-Visual C++ 6.0 development environment and used Borland BDE libraries for accessing databases; it also used ESRI SDE libraries for accessing geographic objects of SDE type