Functional Safety Certification for Autonomous Shuttles: ISO 26262 Explained

Date
2027-01-25
Location
Online
Host
Zach L

About this event

A Hands-On Lab for Auditors pursuing functional safety certification. A live 30-minute hands-on lab on ISO 26262 (Automotive Functional Safety) for autonomous shuttles, built for auditors pursuing functional safety certification. What We'll Cover: What ISO 26262 (Automotive Functional Safety) requires and how its scope applies to autonomous shuttles Mapping ISO 26262 clauses to the certification evidence assessors expect System-specific hazards and safety functions typical of autonomous shuttles Common findings that delay certification, and how to avoid them A practical readiness roadmap for auditors preparing for assessment Related topics: ISO 26262 · Autonomous Shuttles · functional safety certification · functional safety assessment · Hands-On Lab · Auditors · safety lifecycle · complia

Topics

Registration

View event page

About ISO 26262 (Automotive Functional Safety)

This hands-on workshop builds applied knowledge and team exercises around the certification requirements of ISO 26262.

ISO 26262 adapts functional safety to road vehicles: a lifecycle from item definition and hazard analysis (HARA) through system, hardware and software development, production, operation and decommissioning, with integrity expressed as ASIL A-D.

What it regulates

Safety lifecycle management, HARA and ASIL determination, functional and technical safety concepts, hardware metrics (SPFM/LFM/PMHF), software development rigor, supporting processes (configuration, tools, safety analyses) and confirmation measures.

Who must comply

OEMs, tier suppliers, and semiconductor vendors delivering E/E systems for series production road vehicles.

Key requirements of ISO 26262

  • Part 3: concept phase — item definition, HARA, functional safety concept
  • Part 4: system-level development and technical safety concept
  • Part 5: hardware — architectural metrics and evaluation of random failures
  • Part 6: software development
  • Part 8: supporting processes incl. tool qualification and qualification of components
  • Part 9: ASIL-oriented analyses (decomposition, dependent failures)
  • Part 11: application to semiconductors

Key concepts: ISO 26262

Safety goal
Top-level safety requirement per hazardous event, parent of the functional safety concept.
ASIL (A-D)
Automotive Safety Integrity Level from HARA parameters severity, exposure and controllability — D the most stringent.
HARA
Hazard Analysis and Risk Assessment on vehicle-level hazardous events determining ASILs and safety goals.
ASIL decomposition
Splitting a requirement across sufficiently independent elements at lower ASILs with evidence of independence.
SPFM/LFM/PMHF
Hardware architectural metrics: single-point and latent fault coverage plus probabilistic metric targets per ASIL.

Frequently asked questions: ISO 26262

Does ISO 26262 cover autonomous driving hazards?

It covers malfunction-caused hazards. Hazards from functional insufficiencies without failure (perception limits, scenario gaps) are the domain of ISO 21448 SOTIF, used together with 26262 for automated driving.

What is a safety element out of context (SEooC)?

A component (chip, software library, sensor) developed against assumed requirements before the vehicle context exists; the integrator must validate the assumptions of use against the actual item.

How do ASIL and SIL relate?

They are siblings from IEC 61508 but not convertible: ASIL derives from automotive-specific S/E/C parameters and drives different hardware metrics and process tables. Cross-domain reuse requires re-derivation, not a mapping table.

Standard information based on the published text of ISO 26262 (Automotive Functional Safety). Event content is provided by the host. For authoritative guidance, consult the official standard body.