Concept guide · ISO 26262-2 · 8 chapters

Functional Safety Roles & Career Paths

Master the three core ISO 26262 functional safety positions (Engineer, Manager and Assessor), how their purpose and independence differ, the confirmation measures and I1 to I3 levels, plus a concrete career ladder from junior engineer to assessor.

Chapters: 8; Chapters
Core Roles: 3; Core Roles
Confirmation Measures: 3; Confirmation Measures
Independence Levels: I1-I3; Independence Levels

Included inExpert

Start learning See the chapters

Inside the course

01Overview: Roles in the Safety Lifecycle
02The Three Pillars: Engineer vs Manager vs Assessor
03Functional Safety Engineer
04Functional Safety Manager
05Functional Safety Assessor & Confirmation Measures

Why this course · ISO 26262, Part 2, Clause 5-7

Why it pays for itself

Know who does what

See the engineer, manager and assessor side by side - their verbs, deliverables and decision power - and understand why the standard deliberately separates creating safety from managing it and confirming it.

Get independence right

Map the three confirmation measures and the I1 to I3 independence scale onto real project organizations, including when one person may legitimately hold more than one role at lower ASIL.

Plan a realistic career path

Follow a concrete five-rung ladder from junior engineer to independent assessor, with the TUV (AFSP, AFSE) and exida (CFSP, CFSE) credentials placed honestly - useful evidence, not ISO requirements.

After the course

What you’ll be able to do

Distinguish the three roles

Explain how Engineer, Manager and Assessor differ by purpose, accountability and required independence.

Map roles to the lifecycle

Place each role correctly across concept, product development and production per ISO 26262 Part 2 Clauses 5 to 7.

Apply independence levels

Select the right confirmation measure and I1 to I3 independence for a given ASIL.

Plan a safety case

Understand how the manager tailors the lifecycle and curates the safety case as a coherent argument.

Read an assessment verdict

Interpret accept, accept with conditions and reject and how the report supports release for production.

Plan your certification path

Choose between TUV AFSP and AFSE or exida CFSP and CFSE to match your career goal.

The curriculum · 8 chapters

Chapter by chapter

01
Overview: Roles in the Safety Lifecycle
Why ISO 26262 Part 2 turns functional safety into assigned responsibilities, competence and independence rather than an accident of good engineering, and where the three roles operate across the lifecycle.
- Part 2 management of functional safety as the normative anchor
- Clause 5 overall, Clause 6 project, Clause 7 production
- Role balance shifts from concept through release for production
02
The Three Pillars: Engineer vs Manager vs Assessor
The deliberate separation by purpose and independence that lets a safety argument be trusted, since the people producing evidence are not the people who sign off that it is sufficient.
- Create safety, manage safety, independently confirm safety
- Side by side comparison of verbs, deliverables and decision power
- When one person may hold more than one role at lower ASIL
03
Functional Safety Engineer
The technical practitioner who builds safety into the product phase by phase, producing HARA, FSC, TSC, safety requirements and the FMEA, FMEDA, FTA and DFA analyses behind the safety mechanisms.
- Concept, system, hardware and software work products (Parts 3 to 6)
- FMEDA driven SPFM, LFM and PMHF hardware metrics
- Tools like medini analyze, PREEvision, DOORS and Polarion
04
Functional Safety Manager
The role most explicitly anchored in Part 2: assigned responsibility and authority for the safety plan, lifecycle tailoring, confirmation planning, the safety case and the release for production.
- Safety plan as the living master document
- Tailoring justified by item and element level impact analysis
- Owns the Development Interface Agreement (DIA) for distributed work
05
Functional Safety Assessor & Confirmation Measures
Independent judgement of whether the item achieves functional safety, through the three confirmation measures (confirmation review, functional safety audit, functional safety assessment) and the I1 to I3 independence scale.
- Work product vs process vs product achievement distinction
- Independence rises with ASIL, up to I3 at ASIL D
- Report verdict: accept, accept with conditions, or reject
06
Career Path & Certifications
A realistic five rung ladder from junior engineer to independent assessor, with the TUV (AFSP, AFSE) and exida (CFSP, CFSE) credentials that demonstrate the competence the standard requires.
- Junior to engineer to architect to manager to assessor
- AFSP and CFSP foundational, AFSE and CFSE expert level
- Years are industry convention, not ISO requirements
07
Recommendations & Best Practices
Practical guidance per role plus universal habits, and the common misconceptions to avoid (no mandated certificate, no independence level I0, the safety case is built incrementally).
- End to end traceability and facilitated HARA and FMEA workshops
- Live the safety culture and respect independence boundaries
- Argue the safety case, do not just archive evidence
08
Related Resources
Pointers to the connected ISO 26262 concepts (HARA, functional and technical safety concepts, hardware metrics, the safety case) that each role produces or consumes.
- Links into concept, system, hardware and software topics
- Confirmation measures and the safety case tooling
- Cross references to SOTIF and cybersecurity co-engineering

Diagrams & Visuals

Not just text: the visual toolkit

Roles Across the Safety Lifecycle

How Engineer, Manager and Assessor effort shifts across concept, product development and production phases.

Three Pillars Comparison

Side by side map of purpose, focus, independence and main deliverable for each of the three positions.

Confirmation Measures Triad

Confirmation review, functional safety audit and functional safety assessment separated by work product, process and product achievement.

Independence Levels I1 to I3

Different person, different team and different department or organisation, mapped against rising ASIL.

Career Ladder

Five rung progression with typical years, owned work products and supporting certifications.

Assessment Verdict Flow

Decision path from assessment report to accept, accept with conditions or reject supporting release for production.

Worked Example

Staffing a Roles Matrix for an ASIL D Steering Controller

A supplier developing an electric power steering ECU at ASIL D needs to assign safety responsibilities and the right independence before kickoff. Walk through who owns what and why the assessor sits outside the team.

Safety engineer moderates the HARA, derives safety goals and owns the FSC, TSC and FMEDA evidence
Safety manager writes the safety plan, justifies any tailoring with impact analysis and owns the supplier DIA
Confirmation reviews of key work products performed at I3 because the item is ASIL D
Functional safety assessment required and performed by a different department or external body (I3)
Assessor sets scope and depth, then issues accept, accept with conditions or reject
Manager compiles the safety case and recommends release for production once conditions are met

ASIL D Roles & Independence Matrix

Engineer: owns HARA, FSC, TSC, FMEDA and V&V evidence (no independence required)

Unlock the full independence matrix and assessment checklist

Built for

Who this guide is for

Engineers moving from general embedded or systems work into a functional safety role
Managers staffing a safety project who must assign the FSM role and plan confirmation measures
Candidates preparing for functional safety engineer or manager interviews
Practitioners weighing whether an AFSP, CFSP or expert-level certification is worth pursuing

Frequently Asked Questions

Common questions about Functional Safety Roles & Career Paths

ISO 26262-2 turns functional safety into assigned responsibility rather than an accident of good engineering, and in practice this crystallizes into three core roles. The functional safety engineer builds safety into the product - producing the HARA, functional and technical safety concepts, safety requirements and the FMEA, FMEDA, FTA and DFA analyses. The functional safety manager holds responsibility and authority for the safety plan, lifecycle tailoring, the safety case and the release for production. The functional safety assessor independently judges whether the item achieves functional safety, through confirmation reviews, audits and the functional safety assessment, at an independence level that rises with ASIL.

The functional safety manager is the role most explicitly anchored in Part 2: a person with assigned responsibility and authority for planning and coordinating the safety activities of a project. The FSM owns the safety plan as the living master document, justifies lifecycle tailoring through impact analysis, plans the confirmation measures, coordinates the incremental build-up of the safety case, and carries the safety argument to release for production. In distributed development the FSM also owns the Development Interface Agreement (DIA) that splits safety responsibilities between customer and supplier. It is a management role with technical teeth - the FSM must understand the work products well enough to plan and defend them.

Sometimes - it depends on ASIL and on which roles are combined. Engineer and manager duties can be merged on smaller, lower-ASIL projects, but the assessor side is different: confirmation measures carry independence requirements graded I1 to I3, and the level rises with ASIL up to I3 at ASIL D, which demands independence from the delivering organization. The core principle is that the people producing the safety evidence must not be the people who sign off that it is sufficient. The guide covers exactly when role combination is defensible and when it becomes a finding.

The two credential families with real market recognition are the TUV automotive functional safety certificates (AFSP at professional level, AFSE at expert level) and the exida certificates (CFSP and CFSE). Neither is mandated by ISO 26262 - the standard requires demonstrated competence, not a specific certificate - but they are widely used as evidence of that competence in hiring and in assessor qualification. The guide places them on a realistic five-rung career ladder from junior engineer through architect and manager to independent assessor, and is honest that the years-of-experience figures attached to each rung are industry convention, not ISO requirements.

The guide has 8 chapters covering the three core roles, the three confirmation measures, and the I1 to I3 independence levels, plus a chapter on career paths and certifications, one on best practices and common misconceptions, and pointers into the related concept pages each role produces or consumes. A free account starts you off, and the Pro and Expert plans unlock more of the library.

Start the course today

A free account unlocks one full concept guide, 3 work product templates, 1 guided process, the Markov simulator, and 5 practice exams per month. The Pro and Expert plans unlock more of the 78-guide library. No credit card required.

Start learning View Pricing Plans