Skip to main content
Concept guide · ISO 26262-6 · 7 chapters

SW Critical Path & Dependent Failure Analysis

Find the software paths that can violate safety goals, rate component criticality, break dependent failure couplings - and spend verification effort where it changes the outcome.

Chapters
7
Chapters
Worked examples
2
Worked examples
Analysis templates
4
Analysis templates
Coupling factor classes
6
Coupling factor classes
Included inExpert
Why this course · ISO 26262, Part 6

Why it pays for itself

Verification effort where it matters

Rating components on the C1 to C4 criticality scale lets you concentrate reviews, testing, and safety mechanisms on the paths that can violate safety goals - instead of spreading effort evenly across code that cannot.

Common causes made visible

Six coupling factor classes systematically expose the shared power rails, buses, development teams, and compilers that quietly defeat your redundancy - before a single common cause takes out both channels.

Templates, not blank pages

A component criticality matrix, signal classification template, coupling factor and failure mode assessment templates, and CPA and DFA checklists mean your first analysis starts from structure, not from an empty spreadsheet.

After the course

What you’ll be able to do

Trace critical paths end to end

Follow safety-related signals from input through controllers to actuator outputs and name every path that can violate a safety goal.

Rate components C1 to C4

Classify software components from non-safety to safety-critical and use the rating to prioritize reviews and testing.

Find coupling factors early

Apply the six coupling factor classes to expose shared power, buses, teams, and toolchains that quietly defeat redundancy.

Plan analysis effort and timing

Schedule CPA and DFA at the right project phase with a realistic effort distribution and measurable quality metrics.

Justify mechanism placement

Put safety mechanisms on rated critical paths with documented rationale instead of scattering defenses by intuition.

The curriculum · 7 chapters

Chapter by chapter

  1. 01

    Overview

    Understand why critical path analysis and dependent failure analysis exist: tracing safety-related inputs through processing to safety-critical outputs, and what that buys your verification planning.

    • Input-to-output tracing
    • Why CPA + DFA
  2. 02

    Critical Path Analysis

    Run CPA step by step: identify critical software features, safety-important interfaces, and safety-significant signals, then rate components on the C1 to C4 criticality scale and place safety mechanisms.

    • Step-by-step process
    • C1-C4 criticality
    • Signal classification
  3. 03

    Dependent Failure Analysis

    Hunt common causes with DFA: six coupling factor classes - shared resources, shared inputs, systematic coupling, identical components, communication, and unintended interfaces - and the analysis process around them.

    • 6 coupling classes
    • DFA process
  4. 04

    Methodology

    Plan the work: analysis timelines and effort distribution across project weeks, quality metrics for both analyses, and when in the project to perform CPA and DFA.

    • Effort distribution
    • Quality metrics
    • When to analyze
  5. 05

    Templates & Tools

    Work from ready structures: component criticality matrix, signal classification template, coupling factor and failure mode assessment templates, recommended tooling, and CPA and DFA checklists.

    • Criticality matrix
    • CPA & DFA checklists
  6. 06

    Examples

    See both analyses on real architectures: three critical paths through a steer-by-wire system, coupling factors in a brake-by-wire design, and before-and-after analysis results.

    • Steer-by-wire CPA
    • Brake-by-wire DFA
  7. 07

    Best Practices

    Adopt what works: planning and execution practices, common pitfalls to avoid, ISO 26262 and ASIL-driven requirements on the analyses, and KPIs for analysis quality and efficiency.

    • Common pitfalls
    • ISO 26262 compliance
    • Analysis KPIs
Worked examples

Steer-by-wire critical paths and brake-by-wire coupling factors

Two worked systems show the analyses end to end - identifying critical paths in a steer-by-wire architecture, then dependent failure couplings in a brake-by-wire design.

  • Path 1, normal operation: input through the primary controller to motor and feedback
  • Path 2, failure detection: monitor to fault detection to safe state
  • Path 3, fallback operation: secondary controller with manual override
  • Brake-by-wire couplings: shared 12 V power rail, shared CAN bus, same development team, shared compiler
  • Before-and-after comparison of analysis results with mitigation strategies
Steer-by-wire critical paths
Path 2: Failure detection - Monitor to Fault detection to Safe state

Unlock in course

Built for

Who this guide is for

  • Software architects who must show independence between components of different ASILs
  • Verification leads deciding where review and test budget actually buys risk reduction
  • Safety engineers performing dependent failure analysis on redundant architectures
  • Developers of fail-operational systems such as brake-by-wire and steer-by-wire

Frequently Asked Questions

Common questions about SW Critical Path & Dependent Failure Analysis

Software critical path analysis identifies the execution paths through which a software fault can violate a safety goal: it traces safety-related inputs through processing chains to safety-critical outputs using control flow, data flow, and call graph examination. Components and signals on these paths are classified - in this guide on a C1 (non-safety) to C4 (safety-critical) scale - and the rating drives risk-based prioritization: focused code reviews, targeted testing, and deliberate placement of safety mechanisms. The result is verification effort concentrated where a defect actually matters, with a documented rationale for why the rest of the software received proportionately less scrutiny.
DFA is the analysis that checks whether elements assumed to fail independently actually do. Redundancy, monitoring, and ASIL decomposition all rest on independence claims - and common cause or cascading failures can silently void them. DFA examines the architecture for dependent failure initiators and coupling factors, evaluates whether identified couplings can defeat a safety concept, and drives mitigations such as separation, diversity, or barriers. It is the standard's answer to the question "what single event breaks both of your channels at once?"
Coupling factors are shared properties that can make supposedly independent elements fail together. This guide works with six classes: shared resources such as a common power rail or memory, shared input information, systematic coupling from common design or requirements, components of identical type, communication dependencies such as a shared bus, and unintended interfaces. The brake-by-wire worked example shows how a shared 12 V supply, a shared CAN bus, the same development team, and a shared compiler each threaten a dual-channel design.
Early enough that findings can still change the architecture - the methodology chapter places both analyses in the project timeline with an effort distribution across the phases. A first pass belongs with the software architectural design, when critical paths and couplings are cheap to redesign; the analyses are then refined as interfaces and signals stabilize and re-run on relevant changes. Treating CPA and DFA as a late documentation exercise forfeits their entire value, because mitigations discovered after integration are the expensive kind.
Seven chapters: an overview, the CPA method with its step-by-step process and C1 to C4 criticality scale, DFA with six coupling factor classes, a methodology chapter on timing, effort, and quality metrics, a templates and tools chapter with four analysis templates plus CPA and DFA checklists, two worked examples - steer-by-wire critical paths and brake-by-wire coupling factors - and a best practices chapter with pitfalls and KPIs. A free account starts you off, and the Pro and Expert plans unlock more of the concept library.

Start the course today

A free account unlocks one full concept guide, 3 work product templates, 1 guided process, the Markov simulator, and 5 practice exams per month. The Pro and Expert plans unlock more of the 78-guide library. No credit card required.