ISO/IEC TR 5469 and IEC 61508 for ML components

Teams putting a trained model into a safety-related function often ask whether ISO/IEC TR 5469 is “the IEC 61508 for machine learning.” The official catalog pages do not say that.

What IEC 61508 is

IEC 61508-1:2010 covers those aspects to be considered when electrical/electronic/programmable electronic (E/E/PE) systems are used to carry out safety functions. It has the status of a basic safety publication according to IEC Guide 104. A major objective is to facilitate the development of product and application sector international standards. A second objective is to enable the development of E/E/PE safety-related systems where product or application sector international standards do not exist. Edition 2.0 was published 30 April 2010.

IEC 61508-3:2010 applies to any software forming part of a safety-related system or used to develop a safety-related system within the scope of IEC 61508-1 and IEC 61508-2. It establishes requirements for safety lifecycle phases and activities during design and development of safety-related software, including measures and techniques, which are graded against the required systematic capability. It also covers support tools used to develop and configure a safety-related system.

Those pages describe software and E/E/PE safety functions. They do not, on their public faces, define a machine-learning lifecycle or a SIL for a trained model. Ansys SCADE Suite KCG is certified for IEC 61508 at SIL 3 on the product page; that is a code-generator qualification claim, not a TR 5469 mapping or a SIL for a trained model.

What ISO/IEC TR 5469 is

ISO/IEC TR 5469:2024 is a technical report, edition 1, published January 2024. IEC lists it as 73 pages. Status as of 14 October 2026: the IEC webstore still lists it as a Technical Report, edition 1.0, publication date 2024-01-08, 73 pages. The three-use abstract is unchanged. The abstract says it describes the properties, related risk factors, available methods and processes relating to three uses:

1. AI inside a safety related function to realize the functionality
2. non-AI safety related functions to ensure safety for an AI controlled equipment
3. AI systems to design and develop safety related functions

That third use is the one that most often surprises people: the report’s public scope includes using AI to design safety functions, not only putting AI inside one.

ISO sells the full text. This page does not reconstruct unpublished annexes.

What the public pages do not say

We searched the official ISO and IEC catalog pages cited here for a sentence that:

• assigns a safety integrity level to a machine-learning component
• states that TR 5469 replaces IEC 61508-3 for learned software
• states that following TR 5469 confers a presumption of conformity with IEC 61508

We did not find those sentences. Absence from a catalog abstract is not a legal opinion. It is why this article does not invent a SIL mapping.

A technical report is not the same catalog class as an International Standard. IEC 61508 parts are International Standard publications. TR 5469 is a Technical Report.

Sector context (rail, automotive, medical)

IEC 61508-1’s first objective is to facilitate … product and application sector international standards. Automotive is one such sector: ISO 26262-1:2018 applies to safety-related … E/E systems … installed in series production road vehicles, excluding mopeds and addresses hazards caused by malfunctioning behaviour. UL 4600 is a separate safety argument standard for vehicles that can operate in an autonomous mode without human supervision.

Rail and medical devices are other safety-assured domains that often use 61508-derived or complementary sector rules. This site does not treat them as full industry products, and we have not found an official page on the sources list that adopts TR 5469 as the AI method for those sectors. See the safety-critical industry page.

How this differs from AI risk-management guidance

ISO/IEC 23894 is guidance on how organizations … can manage risk specifically related to AI. That is organizational risk management. TR 5469’s public abstract is about properties and methods when AI meets a safety-related function. They answer different questions. See the ISO/IEC 23894 explainer and the ISO/IEC TR 5469 explainer.

A workable reading (labeled analysis)

Analysis, not sourced fact. If a program already has an IEC 61508 (or sector-standard) safety function, TR 5469 is the ISO/IEC document whose public scope is the AI-specific properties and methods around that function. It does not, on the pages we can cite, replace the software lifecycle in IEC 61508-3 or assign a SIL to a model. The safety function still needs whatever the applicable sector standard already required. The trained model is an AI technology element inside, beside, or used to design that function — the three cases in the TR abstract.

Questions

Can I claim a SIL for an ML model by citing TR 5469?

No official catalog page we cite says that.

Is TR 5469 a means of compliance for DO-178C?

We have not found an official FAA, EASA or RTCA page that says so. See DO-178C / DO-330.

Does UL 4600 implement TR 5469?

The UL 4600 public scope is a safety argument for vehicles that can operate in an autonomous mode. It does not name TR 5469 on the catalog page we cite.