77 structured learning guides covering the whole functional safety lifecycle, from HARA and the safety concepts to hardware metrics and STPA. Each guide is built from in-depth chapters with diagrams and practical automotive examples; the flagship topics also have full video courses.
The guides are organized the way a safety project actually unfolds. Start anywhere: every station links straight to its guide.
...and 40+ more guides in the full library below, from AUTOSAR and Agile development to proven-in-use and homologation.
Hazard Analysis and Risk Assessment classifies each hazardous event by Severity, Exposure, and Controllability to derive an ASIL (QM, or A through D) and a safety goal. It anchors the concept phase of ISO 26262 Part 3: every later safety requirement traces back to it.
Splitting one safety requirement across sufficiently independent elements so each can be developed at a lower ASIL - for example ASIL D decomposed into two ASIL B(D) elements - following the schemes of Part 9. Independence must be proven with a dependent failure analysis, or the decomposition is invalid.
The Functional Safety Concept (Part 3) states what the item must do to stay safe: functional safety requirements derived from the safety goals. The Technical Safety Concept (Part 4) states how the system implements them: technical safety requirements allocated to hardware and software.
FMEA works bottom-up, from component failure modes to their system effects; FTA works top-down, from an unwanted event to the combinations of causes that produce it. At higher ASILs, ISO 26262 expects inductive and deductive analyses to complement each other.
Motors, valves and relays are where safety goals become physical - learn how actuation channels fail stuck or runaway, how feedback and diagnostics catch it, and how safe states from de-energize to active hold are engineered and quantified.
Learn how to integrate Scrum and SAFe with ISO 26262 without compromising safety evidence or audit readiness. Covers safety backlogs, ASIL-aware definition of done, sprint-level traceability, and automated verification gates.
Learn valid decomposition schemes to allocate lower ASILs to redundant elements while maintaining safety integrity. Covers independence criteria, a steer-by-wire case study, FTA integration, and argumentation strategies.
Practical handbook bridging ISO 26262, ISO 21448 (SotIF), ISO/PAS 8800, and UL 4600 for autonomous vehicles with machine learning. Covers ODD, fail-operational architectures, scenario V&V, and joint safety cases.
Functional safety for electric vehicles from cell to wheel: how lithium-ion cells fail, the BMS measurement chain, contactors and HVIL, isolation monitoring, safe torque, charging and thermal runaway - plus the FMEDA and FTTI work behind it.
The transitions every ECU makes and nobody watches: the boot chain from power-on reset to application start, reset taxonomies and escalation ladders, startup self-tests, watchdogs, reset storms, brownout recovery and safe shutdown.
The same binary, a thousand behaviors: configuration data vs calibration data, ISO 26262-6 Annex C requirements, A2L and XCP workflows, CRC and plausibility protection in the ECU, dataset release, variant coding risks and tool confidence.
Most automotive projects reuse existing systems. This page shows how ISO 26262 impact analysis and Part 8 Clause 8 change management decide what stays valid, what must be re-verified, and how to keep carryover, variants, and facelifts safe.
Learn how to classify tools by TCL (1-3) based on Tool Impact, Tool Error Detection, and ASIL requirements. Covers a 7-chapter structure with qualification methods, practical guidelines, and worked examples for common toolchains.
Learn when reviews, audits, and assessments require higher independence based on ASIL. Covers functional safety assessment (FSA) planning, TCL assessment, finding management, and confirmation evidence integration.
Learn how ISO 26262-9 Clause 7 verifies that redundant channels and ASIL decomposition are genuinely independent, by hunting dependent failure initiators and coupling factors that let one root cause defeat several safety elements at once.
Learn how to define clear safety responsibilities and evidence exchange between OEM and supplier per ISO 26262-8. Covers DIA content structure, RASIC matrix, lifecycle from initiation to production, and assessment coordination.
Learn the German automotive reference architecture for electronic throttle control with monitoring and fallback modes. Covers redundancy patterns, plausibility checks, limp-home modes, and how E-Gas principles apply to modern ECUs.
The environment as a fault source: how EMI, ESD, load dump and coupled transients become random faults, the ISO 7637 / ISO 11452 / ISO 10605 standards map, immunity as a safety argument, and filtering, shielding and plausibility as safety measures.
Model what happens after an initiating event: barriers split the outcome space, sequences get frequencies, and linked fault trees turn accident scenarios into a quantified risk picture for ISO 26262.
Prove that safety mechanisms detect and react to faults within the Fault-Tolerant Time Interval, turning FMEDA Diagnostic Coverage claims into demonstrated evidence across hardware, software, simulation, and system-level ISO 26262 campaigns.
Learn top-down fault tree construction using AND/OR gates to quantify how failures combine into hazardous events. Includes an interactive FTA calculator, cut-set analysis, PMHF support, and comparison with FMEA.
Learn the complete fault taxonomy: single-point, residual, latent, and safe faults plus transient vs. permanent classifications. Covers FTTI analysis, dependent failure analysis, FMEDA calculations, and the bathtub curve.
Learn bottom-up failure mode analysis to identify single-point, residual, and latent faults in your system. Covers scoping, severity/occurrence rating, diagnostic coverage linkage, and integration with SPFM/LFM calculations.
Learn how Failure Modes, Effects and Diagnostic Analysis turns component failure rates in FIT, failure-mode distributions, and diagnostic coverage into the SPFM, LFM, and PMHF metrics that ISO 26262-5 requires for safety-related hardware.
Hardware whose circuit is data: configuration upsets and essential bits, scrubbing against the FTTI, TMR in the fabric, HDL discipline, tool confidence, and the FPGA FMEDA that closes the safety case.
Learn how to ensure elements of different ASILs do not interfere through temporal, spatial, and data partitioning. Covers MPUs, hypervisors, bus monitoring, multi-core strategies, and evidence generation for assessments.
Learn how to prepare for and execute independent functional safety assessments per ISO 26262-2. Covers evidence package assembly, assessor qualifications, common non-conformities, and corrective action tracking.
Learn how to derive safety goals, define safe states, and build functional safety requirements from HARA results. Covers fault reactions, degradation strategies, operating modes, and architecture diagrams with interactive videos.
Understand the three core ISO 26262 positions: the Engineer who builds safety, the Manager who plans and owns the safety case, and the Assessor who independently confirms it. Plus confirmation measures, independence levels and a career roadmap.
AUTOSAR gives the car industry a standard software platform, but a specification cannot be ASIL anything, and a qualified stack does not make your software safe. Learn how the Classic and Adaptive platforms turn ISO 26262-6 requirements into concrete mechanisms: memory partitioning, timing protection, the Watchdog Manager and end-to-end communication protection.
Learn to turn ISO 26262 work products into an explicit, reviewable safety argument: the six core elements, the SupportedBy and InContextOf relationships, the six-step construction method, modular arguments, and the review practices assessors expect.
Learn the complete hardware development lifecycle per ISO 26262-5 from requirements through design and verification. Covers HSI specification, SPFM/LFM/PMHF achievement, dependent failure analysis, and ASIC/FPGA/PCB considerations.
Learn how to calculate SPFM, LFM, and PMHF with correct failure rate data and diagnostic coverage values. Covers ASIL-dependent targets, data sources (IEC 61709, FIDES), common calculation pitfalls, and compliance strategies.
Learn qualification routes for pre-existing IP, COTS components, and proven-in-use hardware per ISO 26262-8. Covers a 7-chapter structure from standard requirements through worked examples and practical guidelines.
Learn how to identify vehicle-level hazards and assign ASIL ratings through Severity, Exposure, and Controllability assessment. Covers operational situations, FTTI concepts, and advanced topics for ADAS and distributed systems.
Learn to think in deviations, not just failures, using guide words applied to a system's design intention to surface hazards a checklist would miss. See how a technique born in the process industry becomes a rigorous, worksheet-driven feeding source for the ISO 26262 HARA.
The driver as a safety mechanism and the pixels as its wiring: controllability credit, warning timing inside the FTTI, tell-tale integrity, and the mechanisms that keep digital clusters and head-up displays honest.
A functionally safe vehicle is not automatically a street-legal one, and an approved vehicle is not automatically liability-proof. Learn how type approval, the key UN Regulations and product liability law interlock with ISO 26262 for E/E and automated driving systems.
Learn how ASIL D and QM software safely share one SoC through hardware-assisted virtualization and certified partitioning. From ECU consolidation to freedom from interference, this is the discipline behind modern cockpit, ADAS and zonal controllers.
How a traction inverter earns its ASIL: unintended-torque hazards, Active Short Circuit vs freewheeling safe states, three-level torque monitoring, and the protection layers from gate driver to control software.
OEMs demand an Automotive SPICE capability level and ISO 26262 compliance in the same statement of work, and new teams treat them as two mountains to climb. This concept shows they are one mountain seen from two sides: a shared V-model, one traceability backbone and a single set of work products.
Practical handbook for applying ISO 26262 Part 11 to digital, analog, programmable logic, multi-core SoCs, and sensor silicon. Covers SEooC and DIA for IPs and chips, on-chip safety mechanisms, FMEDA at silicon, DFA at die level, fault injection campaigns, and EDA tool qualification.
Learn how ISO 26262 compares with IEC 61508, DO-178C, EN50128, ISO 13849, and SOTIF across key dimensions. Covers risk classification differences, lifecycle approaches, V&V strategies, and multi-standard compliance.
Get the first ISO 26262-3 step right: define the item boundary, interfaces, operating modes, and assumptions of use that HARA, safety goals, and the whole safety case inherit from the concept phase.
Building an ISO 26262 safety case for software nobody developed for you: pin down the exact kernel as an element, choose between qualification, proven-in-use and ISO PAS 8926, and guard Linux with external safety mechanisms.
Learn state-transition modeling for multi-state systems with degradation, repair, and fault tolerance scenarios. Includes an interactive Markov calculator, PMHF validation for redundant architectures, and comparison with FTA/FMEA.
Your ASIL D torque limiter was never typed by a human; a code generator produced it from a Simulink model. Learn how ISO 26262-6 accepts autocoded production C through modeling guidelines, the xIL ladder, back-to-back testing, and a tool confidence argument.
Learn ISO 26262-12 adaptations for single-track vehicles including modified controllability and ASIL assessments. Covers motorcycle-specific hazards, rider factors, and tailored requirements for ABS, traction control, and suspension.
How automotive silicon catches its own random hardware faults: lockstep and split-lock cores, safety islands on big SoCs, and hardware and software self-tests. Then how you turn all of it into an ASIL claim with real coverage numbers.
ISO 26262-7 governs the safety lifecycle after design release: production controls, operation and service instructions, field monitoring, repair and diagnostics, and safe end-of-life decommissioning of high-voltage and pyrotechnic systems.
ISO 26262-8 Clause 14 lets you trade development evidence for statistically demonstrated field experience. This concept shows when that trade actually closes and, far more often, why it does not.
How to argue safety for what you did not develop this time: reuse routes, delta and impact analysis, carryover of unchanged elements, ISO/PAS 8926 qualification, wrappers, assumptions of use, and the rules for reusing verification evidence honestly.
How ISO 26262 functional safety and ISO/SAE 21434 cybersecurity engineering work together on connected vehicles: aligning HARA with TARA, sharing work products, resolving safety-versus-security conflicts, and satisfying UNECE R155 and R156 type approval.
Learn how HARA, FMEA, FTA, STPA, DFA, and HAZOP complement each other across the ISO 26262 lifecycle. Covers method selection criteria, analysis sequencing, and a guide to choosing the right technique for each risk.
Learn how to structure claims, evidence, and arguments using GSN or CAE notation into a living safety case. Covers modular structure, argument patterns, incremental development aligned with sprints, and assessment readiness.
ISO 26262 Part 2 made operational: observable safety culture indicators, building the safety organization, independence of confirmation measures, provable competence records, anomaly handling, and how to measure culture and make the safety-first commitment real.
Nine automotive domains walk the exact same ISO 26262 Part 3-6 chain - Item Definition, HARA, FSC, TSC, HSI, hardware and software - yet arrive at radically different technical answers. See why a traction inverter, a brake ECU and a cockpit display controller end up nothing alike.
Learn proven architectural patterns like redundancy, monitoring, watchdogs, and graceful degradation mapped to ASIL targets. Includes real-world automotive examples from powertrain, chassis, ADAS, and the E-Gas case study.
Learn how to develop reusable safety elements with documented assumptions and guaranteed safety capability. Covers assumption management, integration constraints, safety manuals, and supplier-integrator collaboration workflows.
Learn all phases of the ISO 26262 lifecycle from concept through production, operation, and decommissioning. Covers V-model integration, phase gates, work products, tailoring strategies, and milestone reviews.
Learn how to establish functional safety roles, competencies, culture, and organizational processes per ISO 26262-2. Covers safety manager responsibilities, change control, anomaly tracking, and continuous improvement routines.
Learn the clear distinction between process-based safety measures and technical safety mechanisms. Covers when to use each based on fault type, with practical examples and proper requirement allocation for both categories.
Learn mechanism selection from plausibility checks and watchdogs to E2E protection and memory tests. Covers diagnostic coverage calculation, fault detection timing (FDTI), and how mechanisms map to SPFM/LFM metrics.
Learn how to plan all safety activities, roles, milestones, and work products across the ISO 26262 lifecycle. Includes Gantt chart visualization, tailoring guidelines, and audit readiness strategies.
Engineer AI and ML components that survive a safety case. Learn the ISO/PAS 8800:2024 lifecycle on top of ISO 26262 and ISO 21448, covering dataset coverage, robustness, runtime monitoring, and assurance arguments.
Treat time as a safety property. Learn the ISO 26262 fault-handling intervals (FTTI, FDTI, FRTI, FHTI), how diagnostic test rate sets detection latency, and how to budget detection and reaction so a fault is controlled before a hazardous event.
Does ISO 26262 apply to what you are building, which of the twelve parts do you actually have to read, and how much of the lifecycle can you tailor away - the applicability path from the scope gate to a rationale that survives assessment.
A cosmic ray hits a memory cell and your ASIL D function computes with a wrong value. This concept walks from the physics of radiation-induced bit flips through single event effects, ECC and hardened design, all the way to Part 11 quantification.
Learn architecture patterns for fault isolation, testability, and diagnostic coverage in safety-critical software. Covers modularity, design-by-contract, complexity metrics, and structural coverage requirements per ASIL.
Learn how to select and enforce coding standards like MISRA C/C++, CERT C, and AUTOSAR C++ for safety compliance. Covers rule tailoring, static analysis, deviation management, and memory/timing/concurrency safety patterns.
Learn the complete V-cycle from requirements through integration aligned with ISO 26262-6 and ASPICE. Covers bidirectional traceability, ASIL-dependent quality gates, agile integration, and toolchain qualification.
Learn when and how to qualify pre-existing software like RTOS, middleware, and AUTOSAR BSW per ISO 26262-8. Covers qualification processes, usage domain definition, and evidence combination strategies.
A FuSi-engineer manual for extending HARA, FSC, TSC, FMEDA, and the safety case into ISO 21448 (SotIF), ISO/PAS 8800, and ISO/IEC TR 5469. Deeply technical with worked examples on triggering conditions, acceptance criteria, and field monitoring.
What happens to functional safety when the steering column disappears: loss-of-steering and self-steering hazards, why steering has no simple safe state, fail-operational dual-lane architectures, torque-feedback integrity, redundant power and communication, and the mechanical-backup trade-off.
Learn the infrastructure processes that sustain your safety case: configuration, change, and documentation management. Covers verification independence, tool management, competence requirements, and ALM system integration.
Learn how to identify safety-critical software execution paths and prioritize verification effort where it matters most. Covers control flow analysis, dependent failure analysis (DFA), and strategic placement of safety mechanisms.
Learn control-theoretic hazard analysis to find unsafe control actions that traditional FMEA and FTA miss. Covers STAMP theory, UCA identification, loss scenarios, and practical integration with ISO 26262.
Learn how to translate safety goals and FSC into technical safety requirements (TSRs), system architecture, and HW/SW allocation. Covers safety mechanisms, diagnostic coverage, FMEA integration, and a complete worked example with templates.
The HSI is the bilateral contract where ISO 26262 hardware and software meet. Learn to specify registers, allocate diagnostics, budget timing against the FTTI, and run joint reviews so safety mechanisms actually work at the boundary.
How ISO 26262:2018 extended functional safety to trucks, buses, trailers and semi-trailers. Covers the normative Clause 6.4.5 on managing variances, multi-stage manufacturing interfaces, heavy-vehicle hazards and worst-case ASIL determination across the affected parts of the standard.
Learn multi-level verification from unit testing through system and vehicle validation with ASIL-dependent coverage criteria. Covers reviews, HIL/SIL testing, fault injection, MC/DC coverage, and evidence management.
Common questions about the concept guides
A free account unlocks one full concept guide, 3 work product templates, 1 guided process, the Markov simulator, and 5 practice exams per month. No credit card required.