Functional Safety Assessment (FSA)
ISO 26262-2: Independent Assessment Process & Methodology
- Chapters
- 12
- Chapters
- Interactive Diagrams
- 6
- Interactive Diagrams
- Independence
- I3
- Independence
- Clause 6
- ISO 2
- Clause 6
- 01FSA Overview
- 02ISO 26262-2 Requirements
- 03Assessment Planning
- 04Assessor Qualifications
- 05Assessment Across Lifecycle Phases
Why it pays for itself
Walk in assessor-ready
Know exactly what a complete evidence package looks like per lifecycle phase - work products, confirmation measure records, traceability matrices - before the assessor asks, instead of assembling it under deadline pressure.
Avoid the known non-conformities
The most common FSA findings are catalogued and predictable: missing HARA traceability, thin independence evidence, incomplete FMEDA, undefined safe states. Learn them up front and close the gaps in advance.
Findings managed to closure
A structured corrective action process - classification from observation to critical, root cause analysis, implementation, assessor re-evaluation - keeps findings from stalling a release or resurfacing at the next assessment.
What you’ll be able to do
Plan an ISO 26262-Compliant FSA
Define FSA scope, select assessment objects for each lifecycle phase, establish evidence requirements, and schedule sessions with appropriate assessor independence.
Select Qualified Assessors
Evaluate assessor competency against domain expertise, ISO 26262 knowledge, and independence criteria - and justify the selection in the safety plan.
Execute Structured Assessment Sessions
Conduct FSA interviews, evidence reviews, and confirmation measure witness sessions with consistent criteria and documented rationale for each assessment judgement.
Assemble the Evidence Package
Compile lifecycle-phase work products, traceability matrices, and confirmation measure records into a coherent, assessor-ready evidence package.
Manage Findings to Closure
Classify FSA findings, define root causes, implement corrective actions, and obtain assessor confirmation before closing each finding.
Write the Final Assessment Report
Produce a structured FSA report with assessment decision rationale - acceptable, conditionally acceptable, or not acceptable - with supporting evidence references.
Chapter by chapter
- 01
FSA Overview
Position the Functional Safety Assessment as the highest-level confirmation measure in ISO 26262. Understand when it is mandatory (ASIL B-D with I2/I3 independence), its relationship to audits and reviews, and its role in the safety evidence chain.
- FSA mandatory triggers
- vs. audit vs. review
- Evidence chain role
- 02
ISO 26262-2 Requirements
Navigate ISO 26262-2 Clause 6 and Clause 5.4.7 FSA requirements: assessor independence levels by ASIL, timing relative to lifecycle phases, required assessment scope, and mandatory content of the FSA report.
- Clause 6 requirements
- Independence by ASIL
- Report mandatory content
- 03
Assessment Planning
Develop an FSA plan: define assessment scope and objectives, select assessment objects and lifecycle phases, schedule assessment sessions, identify evidence requirements, agree on interaction protocols with the development organization.
- Scope definition
- Evidence requirements
- Interaction protocol
- 04
Assessor Qualifications
Define required assessor competencies: technical expertise in assessed domains, ISO 26262 knowledge, independence from the development organization, and professional experience thresholds. Covers team FSA with multiple specialists.
- Competency requirements
- Independence criteria
- Team FSA roles
- 05
Assessment Across Lifecycle Phases
Tailor assessment scope to lifecycle phases: concept-phase FSA covers HARA, FSC, and safety plan; system FSA covers TSC, FMEA, FTA, and DIA; hardware FSA covers FMEDA and hardware metrics; software FSA covers SW plans, DV results, and code review.
- Phase-specific scope
- Concept FSA
- HW and SW FSA
- 06
Assessment Execution Methodology
Execute the FSA with structured interview techniques, document reviews, objective evidence sampling, and witness of confirmation measures. Apply consistent assessment criteria and document rationale for every judgement made.
- Interview techniques
- Evidence sampling
- Assessment criteria
- 07
Evidence Package Assembly
Define what constitutes a complete FSA evidence package: work products per lifecycle phase, confirmation measure records, safety case arguments, and traceability matrices - and how the package is presented to the assessor.
- Work product list
- Safety case arguments
- Package presentation
- 08
Common Non-Conformities
Catalog the most common FSA non-conformities found in practice: missing HARA traceability, inadequate independence evidence, incomplete FMEDA, undefined safe states, and absent corrective action records for previous findings.
- Missing traceability
- Independence gaps
- FMEDA incompleteness
- 09
Corrective Action Tracking
Manage FSA findings through a structured corrective action process: finding classification (observation/minor/major/critical), root cause analysis, corrective action definition, implementation, and assessor re-evaluation before closure.
- Finding classification
- Root cause analysis
- Re-evaluation process
- 10
Final Assessment Report
Structure the FSA final report: executive summary, assessment objectives, scope, assessment methodology, findings summary, corrective actions, and the final assessment decision (acceptable / conditionally acceptable / not acceptable).
- Report structure
- Assessment decision types
- Conditional acceptance
- 11
Assessment vs. Audit
Distinguish FSA from functional safety audit by purpose, scope, examiner independence, decision authority, and evidence focus. Understand when each is appropriate and when both are required by ISO 26262.
- FSA vs. audit comparison
- Decision authority
- When both required
- 12
Best Practices
Apply best practices for efficient and effective FSAs: early assessor engagement, living evidence packages, continuous finding tracking, pre-assessment readiness reviews, and post-FSA lessons-learned integration into future safety plans.
- Early engagement
- Pre-assessment readiness
- Lessons learned
Not just text: the visual toolkit
FSA Lifecycle Integration Map
Visual overlay of FSA timing on the ISO 26262 V-model, showing when FSAs are triggered, which lifecycle artifacts are assessed at each phase, and how findings feed back into development.
Evidence Package Structure
Interactive evidence package diagram showing work product categories, traceability requirements, and completeness indicators for concept, system, hardware, and software lifecycle phases.
Finding Severity Classifier
Interactive tool for classifying FSA findings by impact and frequency: observation → minor → major → critical, with recommended response timelines and re-assessment triggers.
Assessor Independence Checker
Decision flowchart to verify assessor independence for a given ASIL: organizational separation, financial independence, technical separation, and documentation required for the independence declaration.
Assessment Phase Timeline
Gantt-style timeline showing FSA planning, document review, site visits, findings management, and final report delivery with typical durations for ASIL C and D assessments.
Corrective Action Tracking Board
Kanban-style board visualization of FSA findings moving through Open → Corrective Action Defined → Implemented → Evidence Submitted → Closed states with assessor re-evaluation gates.
ASIL D Brake-by-Wire System FSA
End-to-end FSA for an ASIL D brake-by-wire system: concept-phase pre-assessment of HARA and FSC, system-phase assessment of TSC and FMEA, hardware-phase FMEDA review, and final pre-SOP FSA with conditional acceptance.
- Phase 1 FSA: HARA completeness - 2 major findings (missing operational situations)
- Phase 2 FSA: TSC-safety goal traceability - gap found in 4 of 23 requirements
- Phase 3 FSA: FMEDA - DC calculation error found, recalculation confirmed ASIL D compliance
- Final FSA: overall assessment - conditionally acceptable with 3 open points
- Open point 1: updated safety plan delivered within 2 weeks, accepted by assessor
- Final sign-off: 5 weeks before SOP - all conditions met and documented
Unlock in course
Who this guide is for
- Safety managers preparing a project for its first independent FSA
- Engineers assigned to assemble the evidence package for an ASIL C or D release
- Prospective assessors building competency and independence arguments
- Teams working through corrective actions from a conditional acceptance
Frequently Asked Questions
Common questions about Functional Safety Assessment (FSA)
Start the course today
A free account unlocks one full concept guide, 3 work product templates, 1 guided process, the Markov simulator, and 5 practice exams per month. The Pro and Expert plans unlock more of the 77-guide library. No credit card required.