Functional Safety Certification for Autonomous Shuttles: ISO 26262 Explained

Date
2027-05-25
Location
Online
Host
Zach L

About this event

A Crash Course for TUV Certification Candidates pursuing functional safety certification. A live 30-minute crash course on ISO 26262 (Automotive Functional Safety) for autonomous shuttles, built for tuv certification candidates pursuing functional safety certification. What We'll Cover: What ISO 26262 (Automotive Functional Safety) requires and how its scope applies to autonomous shuttles Mapping ISO 26262 clauses to the certification evidence assessors expect System-specific hazards and safety functions typical of autonomous shuttles Common findings that delay certification, and how to avoid them A practical readiness roadmap for tuv certification candidates preparing for assessment Related topics: ISO 26262 · Autonomous Shuttles · functional safety certification · functional safety asses

Topics

Registration

View event page

About ISO 26262 (Automotive Functional Safety)

This training provides practical skills and structured learning on the compliance requirements covered by ISO 26262.

ISO 26262 adapts functional safety to road vehicles: a lifecycle from item definition and hazard analysis (HARA) through system, hardware and software development, production, operation and decommissioning, with integrity expressed as ASIL A-D.

What it regulates

Safety lifecycle management, HARA and ASIL determination, functional and technical safety concepts, hardware metrics (SPFM/LFM/PMHF), software development rigor, supporting processes (configuration, tools, safety analyses) and confirmation measures.

Who must comply

OEMs, tier suppliers, and semiconductor vendors delivering E/E systems for series production road vehicles.

Key requirements of ISO 26262

  • Part 3: concept phase — item definition, HARA, functional safety concept
  • Part 4: system-level development and technical safety concept
  • Part 5: hardware — architectural metrics and evaluation of random failures
  • Part 6: software development
  • Part 8: supporting processes incl. tool qualification and qualification of components
  • Part 9: ASIL-oriented analyses (decomposition, dependent failures)
  • Part 11: application to semiconductors

Key concepts: ISO 26262

Safety goal
Top-level safety requirement per hazardous event, parent of the functional safety concept.
ASIL (A-D)
Automotive Safety Integrity Level from HARA parameters severity, exposure and controllability — D the most stringent.
HARA
Hazard Analysis and Risk Assessment on vehicle-level hazardous events determining ASILs and safety goals.
ASIL decomposition
Splitting a requirement across sufficiently independent elements at lower ASILs with evidence of independence.
SPFM/LFM/PMHF
Hardware architectural metrics: single-point and latent fault coverage plus probabilistic metric targets per ASIL.

Frequently asked questions: ISO 26262

Does ISO 26262 cover autonomous driving hazards?

It covers malfunction-caused hazards. Hazards from functional insufficiencies without failure (perception limits, scenario gaps) are the domain of ISO 21448 SOTIF, used together with 26262 for automated driving.

What is a safety element out of context (SEooC)?

A component (chip, software library, sensor) developed against assumed requirements before the vehicle context exists; the integrator must validate the assumptions of use against the actual item.

How do ASIL and SIL relate?

They are siblings from IEC 61508 but not convertible: ASIL derives from automotive-specific S/E/C parameters and drives different hardware metrics and process tables. Cross-domain reuse requires re-derivation, not a mapping table.

Standard information based on the published text of ISO 26262 (Automotive Functional Safety). Event content is provided by the host. For authoritative guidance, consult the official standard body.