Production, Operation, Service & Decommissioning
ISO 26262-7, the forgotten half of the safety lifecycle: carry validated safety into every built unit, keep it intact through operation and service, watch the field, and take the vehicle out of service safely.
- Chapters
- 12
- Chapters
- Figures and interactive visuals
- 20
- Figures and interactive visuals
- Knowledge-check questions
- 12
- Knowledge-check questions
Quick answers
- What is ISO 26262 Part 7?
- ISO 26262-7 covers the post-development half of the safety lifecycle: production, operation, service and decommissioning. Its normative content sits in three clauses, one for planning and two for carrying out production and operation, with the release for production as the gate between planning and execution. Together they require that the functional safety achieved in development is reproduced on every manufactured unit and preserved through operation and service. Part 7 produces thirteen work products, from production and service planning to the production control reports.
- What is a safety-related special characteristic?
- It is a product or process characteristic, such as a sensor gain, a mounting angle or a solder joint, whose deviation in manufacturing could contribute to violating a safety goal. Special characteristics are identified during development, not invented in the plant, and must be traceable to the safety requirement they protect. In production each one is controlled with a defined measurement and reaction, and deviations are analyzed for their effect on functional safety.
Why it pays for itself
Build a safety-grade control plan
Link every safety-related special characteristic back to its safety goal and forward to a process step, a measurement, a reaction plan and the error-proofing that keeps it in tolerance.
Close the field-monitoring loop
Design the data, triage and containment process before production starts, so a field safety anomaly becomes a controlled correction instead of an improvised recall.
Handle service and end of life safely
Keep repairs, software updates and replacement parts from silently defeating validated safety mechanisms, and plan decommissioning of high-voltage batteries and pyrotechnic devices.
What you’ll be able to do
Carry safety into production
Plan and control production so special characteristics and released configurations are reproduced on every unit.
Keep evidence per unit
Define the control reports and production records a later field investigation will need.
Protect safety in service
Specify service, repair verification and software update rules that keep safety mechanisms intact.
Run field monitoring
Turn field signals into triage, containment and correction with clear ownership.
Plan end of life
Write decommissioning information for high-voltage and pyrotechnic systems.
Chapter by chapter
- 01
The Forgotten Half
See where safety lives after development, the four post-release phases of Part 7, and how Part 2 safety management continues after release.
- Safety after development
- Four lifecycle phases
- Part 7 and Part 2
- 02
Scope, Structure & RfP
Learn what Part 7 covers, how its clauses split planning from doing, and why release for production is the pivot between them.
- Planning versus doing
- Release for production
- Part 7 work products
- 03
Special Characteristics & PFMEA
Understand safety-related special characteristics, where they come from, and how process failure analysis and capability connect to them.
- Special characteristics
- DFMEA to PFMEA
- Process capability
- 04
Production Planning
Plan production for safety, including correct software and calibration programming, the control plan, error-proofing and pre-production.
- Production plan content
- Production control plan
- Error-proofing
- 05
Production Execution & Records
Run the released process, handle deviations, control test equipment, and keep the records and control reports each unit leaves behind.
- Handling deviations
- Worked end-of-line sequence
- Production records
- 06
Operation & User Information
Plan operation, service and decommissioning, the warning and degradation strategy, and the safety content of user and rescue information.
- Warning and degradation
- Manual as safety deliverable
- Rescue service information
- 07
Service & Repair
Keep repairs from undoing safety: service plans and instructions, diagnostics for service, post-repair verification and software updates.
- Service plan and instructions
- Post-repair verification
- Replacement parts
- 08
Field Monitoring & Change
Close the loop from field data to safety anomaly, containment and correction, and manage changes in the field.
- Field data sources
- Containment and correction
- Changes in the field
- 09
Decommissioning & EOL
Learn what Part 7 does and does not require at end of life, including high-voltage batteries, pyrotechnics and second-life use.
- End-of-life requirements
- High-voltage battery EOL
- Pyrotechnic deactivation
- 10
Audits & Confirmation
Apply confirmation measures and independence to the post-development phases, and keep quality audits and safety audits apart.
- Reviews, audit, assessment
- Independence per ASIL
- Two kinds of audit
- 11
Pitfalls & Misconceptions
Recognize recurring Part 7 pitfalls, replace common myths, and shift the mindset from development to the whole product life.
- Recurring pitfalls
- Myth versus reality
- The mindset shift
- 12
Knowledge Check
Test yourself on the guide with a set of questions and a scored result.
- How the check works
- Twelve questions
- Your result
Read all 12 chapters with Expert.
Start with a free account: the complete Functional Safety Concept guide and 5 practice exams a month, then upgrade when you need this guide.
Expert plan pricingNot just text: the visual toolkit
Post-SOP lifecycle timeline
Production, operation, service and decommissioning phases on one axis.
Work product flow map
From development inputs through planning and release to execution.
Process capability visualizer
An interactive view of Cpk and Ppk against tolerance limits.
Containment granularity
How record resolution sets the containment boundary you can defend.
Field corrective process timeline
From detection through effectiveness verification.
Who this guide is for
- Manufacturing and quality engineers who inherit safety-related special characteristics at SOP
- Safety managers extending the safety case past design release into production and the field
- Engineers writing service procedures, repair verification steps and user information
- Teams standing up field monitoring, containment and corrective action processes
Frequently Asked Questions
Common questions about Production, Operation, Service & Decommissioning
Start the course today
A free account unlocks one full concept guide, 3 work product templates, 1 guided process, the Markov and RBD simulators, and 5 practice exams per month. The Pro and Expert plans unlock more of the 93-guide library. No credit card required.
Continue with
Where this topic leads next.
- Vehicle domainsActuator SafetyMotors, valves and relays are where safety goals become physical: learn how actuation channels fail stuck or runaway, how feedback and diagnostics catch it, and how safe states from de-energize to active hold are engineered and quantified.
- Verification and assessmentVerification & ValidationLearn multi-level verification from unit testing through system and vehicle validation with ASIL-dependent coverage criteria. Covers reviews, HIL/SIL testing, fault injection, MC/DC coverage, and evidence management.
- Verification and assessmentFault Injection & Safety-Mechanism VerificationProve that safety mechanisms detect and react to faults within the Fault-Tolerant Time Interval, turning FMEDA Diagnostic Coverage claims into demonstrated evidence across hardware, software, simulation, and system-level ISO 26262 campaigns.