Title: Functional Safety Assessment & Audit | ISO 26262 Academy URL: https://iso26262.academy/features/concepts/functional-safety-assessment Description: Learn how to prepare for and execute independent functional safety assessments per ISO 26262-2. --- Concept guide · ISO 26262-2 §6 · 12 chapters # Functional Safety Assessment (FSA) ISO 26262-2: Independent Assessment Process & Methodology 12 Chapters 6 Interactive Diagrams I3 Independence ISO 2 Clause 6 Included in Expert [Start learning](https://iso26262.academy/register?plan=free&from=%2Fconcepts%2Ffunctional-safety-assessment&utm_source=website&utm_medium=cta&utm_campaign=features_concepts) See the chapters Inside the course 1. 01 **FSA Overview** 2. 02 **ISO 26262-2 Requirements** 3. 03 **Assessment Planning** 4. 04 **Assessor Qualifications** 5. 05 **Assessment Across Lifecycle Phases** The short version ## Quick answers What is a functional safety assessment in ISO 26262? The functional safety assessment (FSA) is the highest-level confirmation measure in ISO 26262, defined in ISO 26262-2 Clause 6. An independent assessor judges whether the item achieves functional safety - examining the safety plan, work products, and safety case across the lifecycle - and issues a judgement: acceptable, conditionally acceptable, or not acceptable. An FSA is required for the higher ASILs, with assessor independence scaled by ASIL up to I3, meaning independence from the department responsible for the item. It sits above confirmation reviews and functional safety audits in the evidence chain, and its report is a key input to the release for production. What is the difference between a functional safety assessment and an audit? They answer different questions. A functional safety audit examines the implementation of the processes required by the safety plan - is the organization doing what it said it would do? The FSA judges the achieved functional safety of the item itself - do the work products, analyses, and evidence actually demonstrate that safety goals are met? They differ in purpose, scope, examiner independence, and decision authority: the FSA carries the release-relevant recommendation. For higher ASILs both are required, and the course dedicates a chapter to the comparison and to when each applies. Keep going, free - [Demo exam · no account Test yourself with 7 exam-style questions](https://iso26262.academy/demo-exam) Why this course · ISO 26262, Part 2, Clause 6 ## Why it pays for itself ### Walk in assessor-ready Know exactly what a complete evidence package looks like per lifecycle phase - work products, confirmation measure records, traceability matrices - before the assessor asks, instead of assembling it under deadline pressure. ### Avoid the known non-conformities The most common FSA findings are catalogued and predictable: missing HARA traceability, thin independence evidence, incomplete FMEDA, undefined safe states. Learn them up front and close the gaps in advance. ### Findings managed to closure A structured corrective action process - classification from observation to critical, root cause analysis, implementation, assessor re-evaluation - keeps findings from stalling a release or resurfacing at the next assessment. After the course ## What you’ll be able to do ### Plan an ISO 26262-Compliant FSA Define FSA scope, select assessment objects for each lifecycle phase, establish evidence requirements, and schedule sessions with appropriate assessor independence. ### Select Qualified Assessors Evaluate assessor competency against domain expertise, ISO 26262 knowledge, and independence criteria - and justify the selection in the safety plan. ### Execute Structured Assessment Sessions Conduct FSA interviews, evidence reviews, and confirmation measure witness sessions with consistent criteria and documented rationale for each assessment judgement. ### Assemble the Evidence Package Compile lifecycle-phase work products, traceability matrices, and confirmation measure records into a coherent, assessor-ready evidence package. ### Manage Findings to Closure Classify FSA findings, define root causes, implement corrective actions, and obtain assessor confirmation before closing each finding. ### Write the Final Assessment Report Produce a structured FSA report with assessment decision rationale - acceptable, conditionally acceptable, or not acceptable - with supporting evidence references. The curriculum · 12 chapters ## Chapter by chapter 1. 01 **FSA Overview** Position the Functional Safety Assessment as the highest-level confirmation measure in ISO 26262. Understand when it is mandatory (ASIL B-D with I2/I3 independence), its relationship to audits and reviews, and its role in the safety evidence chain. - FSA mandatory triggers - vs. audit vs. review - Evidence chain role 2. 02 **ISO 26262-2 Requirements** Navigate ISO 26262-2 Clause 6 and Clause 5.4.7 FSA requirements: assessor independence levels by ASIL, timing relative to lifecycle phases, required assessment scope, and mandatory content of the FSA report. - Clause 6 requirements - Independence by ASIL - Report mandatory content 3. 03 **Assessment Planning** Develop an FSA plan: define assessment scope and objectives, select assessment objects and lifecycle phases, schedule assessment sessions, identify evidence requirements, agree on interaction protocols with the development organization. - Scope definition - Evidence requirements - Interaction protocol 4. 04 **Assessor Qualifications** Define required assessor competencies: technical expertise in assessed domains, ISO 26262 knowledge, independence from the development organization, and professional experience thresholds. Covers team FSA with multiple specialists. - Competency requirements - Independence criteria - Team FSA roles 5. 05 **Assessment Across Lifecycle Phases** Tailor assessment scope to lifecycle phases: concept-phase FSA covers HARA, FSC, and safety plan; system FSA covers TSC, FMEA, FTA, and DIA; hardware FSA covers FMEDA and hardware metrics; software FSA covers SW plans, DV results, and code review. - Phase-specific scope - Concept FSA - HW and SW FSA 6. 06 **Assessment Execution Methodology** Execute the FSA with structured interview techniques, document reviews, objective evidence sampling, and witness of confirmation measures. Apply consistent assessment criteria and document rationale for every judgement made. - Interview techniques - Evidence sampling - Assessment criteria 7. 07 **Evidence Package Assembly** Define what constitutes a complete FSA evidence package: work products per lifecycle phase, confirmation measure records, safety case arguments, and traceability matrices - and how the package is presented to the assessor. - Work product list - Safety case arguments - Package presentation 8. 08 **Common Non-Conformities** Catalog the most common FSA non-conformities found in practice: missing HARA traceability, inadequate independence evidence, incomplete FMEDA, undefined safe states, and absent corrective action records for previous findings. - Missing traceability - Independence gaps - FMEDA incompleteness 9. 09 **Corrective Action Tracking** Manage FSA findings through a structured corrective action process: finding classification (observation/minor/major/critical), root cause analysis, corrective action definition, implementation, and assessor re-evaluation before closure. - Finding classification - Root cause analysis - Re-evaluation process 10. 10 **Final Assessment Report** Structure the FSA final report: executive summary, assessment objectives, scope, assessment methodology, findings summary, corrective actions, and the final assessment decision (acceptable / conditionally acceptable / not acceptable). - Report structure - Assessment decision types - Conditional acceptance 11. 11 **Assessment vs. Audit** Distinguish FSA from functional safety audit by purpose, scope, examiner independence, decision authority, and evidence focus. Understand when each is appropriate and when both are required by ISO 26262. - FSA vs. audit comparison - Decision authority - When both required 12. 12 **Best Practices** Apply best practices for efficient and effective FSAs: early assessor engagement, living evidence packages, continuous finding tracking, pre-assessment readiness reviews, and post-FSA lessons-learned integration into future safety plans. - Early engagement - Pre-assessment readiness - Lessons learned 6 Interactive Diagrams & Tools ## Not just text: the visual toolkit ### FSA Lifecycle Integration Map Visual overlay of FSA timing on the ISO 26262 V-model, showing when FSAs are triggered, which lifecycle artifacts are assessed at each phase, and how findings feed back into development. ### Evidence Package Structure Interactive evidence package diagram showing work product categories, traceability requirements, and completeness indicators for concept, system, hardware, and software lifecycle phases. ### Finding Severity Classifier Interactive tool for classifying FSA findings by impact and frequency: observation → minor → major → critical, with recommended response timelines and re-assessment triggers. ### Assessor Independence Checker Decision flowchart to verify assessor independence for a given ASIL: organizational separation, financial independence, technical separation, and documentation required for the independence declaration. ### Assessment Phase Timeline Gantt-style timeline showing FSA planning, document review, site visits, findings management, and final report delivery with typical durations for ASIL C and D assessments. ### Corrective Action Tracking Board Kanban-style board visualization of FSA findings moving through Open → Corrective Action Defined → Implemented → Evidence Submitted → Closed states with assessor re-evaluation gates. Assessment Case Study ## ASIL D Brake-by-Wire System FSA End-to-end FSA for an ASIL D brake-by-wire system: concept-phase pre-assessment of HARA and FSC, system-phase assessment of TSC and FMEA, hardware-phase FMEDA review, and final pre-SOP FSA with conditional acceptance. - Phase 1 FSA: HARA completeness - 2 major findings (missing operational situations) - Phase 2 FSA: TSC-safety goal traceability - gap found in 4 of 23 requirements - Phase 3 FSA: FMEDA - DC calculation error found, recalculation confirmed ASIL D compliance - Final FSA: overall assessment - conditionally acceptable with 3 open points - Open point 1: updated safety plan delivered within 2 weeks, accepted by assessor - Final sign-off: 5 weeks before SOP - all conditions met and documented BbW FSA Timeline Phase 1 FSA Finding F-01 (Major): Missing OS-07 Slippery Road at High Speed - Corrective Action Accepted Unlock in course Built for ## Who this guide is for - Safety managers preparing a project for its first independent FSA - Engineers assigned to assemble the evidence package for an ASIL C or D release - Prospective assessors building competency and independence arguments - Teams working through corrective actions from a conditional acceptance ## Frequently Asked Questions Common questions about Functional Safety Assessment (FSA) ISO 26262-2 scales assessor independence with ASIL: at the highest level (I3) the assessor must be independent of the department developing the item - commonly a separate assurance function or an external assessor. Independence is necessary but not sufficient: the assessor also needs demonstrated ISO 26262 knowledge, technical expertise in the assessed domains, and relevant professional experience, and for broad systems a team FSA with multiple specialists is common. The course covers competency criteria, the independence declaration, and how to justify assessor selection in the safety plan. The scope tracks the lifecycle: a concept-phase FSA covers the HARA, functional safety concept, and safety plan; the system phase covers the technical safety concept, FMEA, FTA, and the DIA; the hardware phase reviews the FMEDA and hardware metrics; the software phase covers plans, verification results, and code review evidence. Execution combines structured interviews, document review, objective evidence sampling, and witnessing of confirmation measures, with documented rationale for every judgement. The course walks each phase and ends in a full ASIL D brake-by-wire assessment case study. It covers the full assessment lifecycle in 12 chapters: ISO 26262-2 requirements, planning, assessor qualification, phase-by-phase scope, execution methodology, evidence packages, common non-conformities, corrective action tracking, the final report, and the assessment-versus-audit distinction. You also get 6 interactive diagrams and tools, including a finding severity classifier and an assessor independence checker, plus an end-to-end ASIL D brake-by-wire FSA case study ending in conditional acceptance. A free account starts you off, and the Pro and Expert plans unlock more of the library. ## Start the course today A free account unlocks one full concept guide, 3 work product templates, 1 guided process, the Markov simulator, and 5 practice exams per month. The Pro and Expert plans unlock more of the 78-guide library. No credit card required. [Start learning](https://iso26262.academy/register?plan=free&from=%2Fconcepts%2Ffunctional-safety-assessment&utm_source=website&utm_medium=cta&utm_campaign=features_concepts) [View Pricing Plans](https://iso26262.academy/pricing)