A systematic methodology to determine safety requirements for railway signalling system and safety requirement allocation into system are presented. THR concept is used for as an interface between Risk Analysis to be performed by railway operator and System Design Analysis by the supplier. This approach is based on Signalling Safety Standard EN50129 by CENELEC.