This webinar discusses ISO 26262 and functional safety for automotive projects. The speaker, Mr. Martin Heininger, has 15 years of experience working on functional safety projects. He will cover an overview of ISO 26262, the first steps of compliance, ASIL determination, work products required at different stages of the automotive safety lifecycle, methods for software unit implementation, and a collaboration between Embitel and Heicon for ISO 26262 consultancy services. The webinar aims to introduce functional safety standards and processes to enable compliant product development for automotive systems.

1. Live Webinar
Introduction to ISO 26262 for Functional Safety Critical Projects
Speaker-: Mr. Martin Heininger
Embitel is rated as one of the top 21 innovators in India by NASSCOM
An ISO 9001:2008 certified company
Juror’s Distinction Award for Innovation in Manthan 2008
Nominated for Best UK Entrant in 2009 by UKTI
Leading technology company award by Deloitte in Fast50 India 2012 program
Confidential

2. About the Speaker
 15 years of industry experience and has worked as a Lead
and Project Consultant for Functional Safety projects.
 Functional Safety Seminars (IEC 61508, ISO26262,
RTCA DO 178B)
 Functional Safety Consulting
 Functional Safety on Verification activities
 Consulting on Strategic Technical Project Management
Confidential

3. 3
 ISO 26262 Overview
 ISO 26262 First Steps
 ASIL Determination
 ISO 26262 Life Cycle Work Products
 Methods for Software Unit Implementation
 Embitel-Heicon Collaboration
Contents
Confidential

4. 4
 ISO 26262 is the adaption of IEC 61508 to comply with needs specific to
road vehicles
 Safety-related systems that include electrical and/or electronic (E/E)
systems
 Series production passenger cars (up to 3500kg max. vehicle mass)
 ISO 26262 addresses possible hazards caused by malfunctions behavior
of E/E safety-related systems and their interactions
 ISO 26262 does not apply to hazards related to electrical shock, fire,
smoke, heat, radiation, toxicity, flammability, reactivity, corrosion etc.
ISO 26262 Overview
Confidential

5. 5
ISO 26262 Overview
6. Software
2. Functional Safety Management
3. Concept
Phase
(Safety Lifecycle, Hazard
Analysis, Risk Assessment
Functional Safety concept)
4. System
5. Hardware
7.
Production,
Maintenance
, Repair
8. Supporting Processes
(Config.Manag, Change Manag, Verification, Documentation, Qualification of SW Tools)
9. ASIL-oriented and safety-oriented Analysis
Requirements decomposition with respect to ASIL tailoring, Criteria for coexistence of elements, Analysis of dependent failure,
Safety Analysis
Confidential

6. 6
Hazard analysis and
risk assessment
Concept
Phase
Product
development
Specification
and
management
of
safety
requirements
Derive ASIL Level
Specification of Safety Goals
Specification of System
safety requirements
Hardware safety
requirements
Software safety
requirements
ISO 26262 First steps
Architecture
Confidential

7. 7
ASIL Determination
Exposure
E0 to E4
Controllability
C0 to C3
Severity
S0 to S3
ASIL
A to D
Class
S0 S1 S2 S3
No injuries Light and moderate injuries Severe and life-threatining
injuries (survival probable)
Life-threatening injuries (survival
uncertain), fatal injuries
Class
E0 E1 E2 E3 E4
Incredible Very low probability Low probability Medium probability High probability
(Probability of exposure regarding operational situations)
Class
C0 C1 C2 C3
Controllable in general Simply controllable Normally controllable Difficult to control or uncontrollable
Confidential

8. 8
Severity class Probability
class
Controllability class
C1 C2 C3
S1
E1 QM QM QM
E2 QM QM QM
E3 QM QM A
E4 QM A B
S2
E1 QM QM QM
E2 QM QM A
E3 QM QM B
E4 A B C
S3
E1 QM QM A
E2 QM A B
E3 A B C
E4 B C D
ISO 26262-3
ASIL Determination
Note: The class QM (Quality Management) denotes no requirement to comply
with ISO 26262
Confidential

9. 9
 ISO 26262 Overview
 ISO 26262 First Steps
 ASIL Determination
 ISO 26262 Life Cycle Work Products
 Methods for Software Unit Implementation
 Embitel-Heicon Collaboration
Content
Confidential

10. 10
Hazard analysis and
risk assessment
ISO 26262 Work Products – Functional Safety Mngt.
Work Products
 Organizational-specific rules and processes for functional safety
 Evidence of competence
 Evidence of quality management
 Functional safety assessment plan
 Evidence of field monitoring
ISO/FDIS 26262-2
Functional
Safety
Management 6. Software
2. Functional Safety Management
3. Concept
Phase
(Safety Lifecycle, Hazard
Analysis, Risk Assessment
Functional Safety concept)
4. System
5. Hardware
7.
Production,
Maintenance
, Repair
8. Supporting Processes
(Config.Manag, Change Manag, Verification, Documentation, Qualification of SW Tools)
9. ASIL-oriented and safety-oriented Analysis
Requirements decomposition with respect to ASIL tailoring, Criteria for coexistence of elements, Analysis of dependent failure,
Safety Analysis
Confidential

11. 11
Hazard analysis and
risk assessment
ISO 26262 Work Products – Concept Phase
Work Products
 Impact Analysis (Development of new Product or Modification of
existing Product)
 Hazard analysis and risk assessment
 Safety goals
 Functional safety concept (Requirements)
 Verification (Review) report
ISO 26262-3
Concept
Phase 6. Software
2. Functional Safety Management
3. Concept
Phase
(Safety Lifecycle, Hazard
Analysis, Risk Assessment
Functional Safety concept)
4. System
5. Hardware
7.
Production,
Maintenance
, Repair
8. Supporting Processes
(Config.Manag, Change Manag, Verification, Documentation, Qualification of SW Tools)
9. ASIL-oriented and safety-oriented Analysis
Requirements decomposition with respect to ASIL tailoring, Criteria for coexistence of elements, Analysis of dependent failure,
Safety Analysis
Confidential

12. 12
Hazard analysis and
risk assessment
ISO 26262 Work Products – Production
ISO 26262-7
Production,
Maintenance
6. Software
2. Functional Safety Management
3. Concept
Phase
(Safety Lifecycle, Hazard
Analysis, Risk Assessment
Functional Safety concept)
4. System
5. Hardware
7.
Production,
Maintenance
, Repair
8. Supporting Processes
(Config.Manag, Change Manag, Verification, Documentation, Qualification of SW Tools)
9. ASIL-oriented and safety-oriented Analysis
Requirements decomposition with respect to ASIL tailoring, Criteria for coexistence of elements, Analysis of dependent failure,
Safety Analysis
Work Products
 Safety-related content of the production plan
 Safety-related content of the production control plan
 Control measure report
 Assessment report for capability of the production process
 Safety-related content of the maintenance plan
 Repair instructions
 Safety-related content of the information made available to the user
 Instructions regarding field observations
 Safety related content of the instructions for decommissioning
Confidential

13. 13
Hazard analysis and
risk assessment
Product
Development
ISO 26262 Work Products – Supporting Fkt.
ISO 26262-8
6. Software
2. Functional Safety Management
3. Concept
Phase
(Safety Lifecycle, Hazard
Analysis, Risk Assessment
Functional Safety concept)
4. System
5. Hardware
7.
Production,
Maintenance
, Repair
8. Supporting Processes
(Config.Manag, Change Manag, Verification, Documentation, Qualification of SW Tools)
9. ASIL-oriented and safety-oriented Analysis
Requirements decomposition with respect to ASIL tailoring, Criteria for coexistence of elements, Analysis of dependent failure,
Safety Analysis
Work Products – Distributed Development
 Supplier selection report
 Development interface agreement
 Supplier’s project plan
 Safety assessment report
 Supply agreement
Work Products – Config Managmt
 Configuration Management Plan
Work Products – Change Management
 Change management plan
 Change request
 Impact analysis and change request plan
 Change report
Work Products - Documentation Process
 Document management plan
 Documentation guideline requirements
Work Products – Tool Qualification
 Software tool criteria evaluation report
 Software tool qualification report
Confidential

14. 14
Hazard analysis and
risk assessment
ISO 26262 Work Products – ASIL and
safety oriented analysis
Work Products
 Update of the corresponding Documentation due to Requirements
decomposition with respect to ASIL tailoring
 Analysis of dependent failures
 Safety analysis
ISO 26262-9
ASIL
and
safety-oriented
analysis 6. Software
2. Functional Safety Management
3. Concept
Phase
(Safety Lifecycle, Hazard
Analysis, Risk Assessment
Functional Safety concept)
4. System
5. Hardware
7.
Production,
Maintenance
, Repair
8. Supporting Processes
(Config.Manag, Change Manag, Verification, Documentation, Qualification of SW Tools)
9. ASIL-oriented and safety-oriented Analysis
Requirements decomposition with respect to ASIL tailoring, Criteria for coexistence of elements, Analysis of dependent failure,
Safety Analysis
Confidential

15. 15
Embedded System/Software Life Cycle
5. Hardware 6. Software
2. Functional Safety Management
3. Concept
Phase
(Safety Lifecycle, Hazard
Analysis, Risk Assessment
Functional Safety concept)
4. System 7.
Production,
Maintenance
, Repair
8. Supporting Processes
(Config.Manag, Change Manag, Verification, Documentation, Qualification of SW Tools)
9. ASIL-oriented and safety-oriented Analysis
Requirements decomposition with respect to ASIL tailoring, Criteria for coexistence of elements, Analysis of dependent failure,
Safety Analysis
Technical Safety
Requirements
Software safety
requirements
System Design
Software architectural
design
Software unit testing
(HW)/Software
Integration Testing
Validation and
Integration Testing
Software unit design
Embedded Software
Details see Slide 16
Details see Slide 17
Confidential

16. 16 ISO 26262-4
5. Hardware 6. Software
2. Functional Safety Management
3. Concept
Phase
(Safety Lifecycle, Hazard
Analysis, Risk Assessment
Functional Safety concept)
4. System 7.
Production,
Maintenance
, Repair
8. Supporting Processes
(Config.Manag, Change Manag, Verification, Documentation, Qualification of SW Tools)
9. ASIL-oriented and safety-oriented Analysis
Requirements decomposition with respect to ASIL tailoring, Criteria for coexistence of elements, Analysis of dependent failure,
Safety Analysis
ISO 26262 Work Products – System Level
Technical Safety Requirements
 Technical safety requirements
specification
 System verification report
System Design
 Technical safety concept
 System design specification
 Hardware-software interface
specification (HSI)
 Specification of requirements for
production, operation service and
decommissioning
Validation and Integration Testing
 Validation plan
 Validation report
 Item integration and testing plan(s)
 Integration testing specification(s)
 Integration testing report(s)
 Functional safety assessment report
 Project Plan
 Safety Plan
Confidential

17. 17
ISO 26262 Work Products – Software Level
Software safety requirements
 Software safety requirements
specification
 Hardware-software interface
specification
 Software verification Report
Software architectural design
 Software architectural design
specification
 Safety analysis report
 Dependent failure analysis report
 Software verification Report Software unit testing
 Software verification plan
 Software verification specification
 Software verification report
(HW)/Software Integration Testing
 Software verification plan
 Software verification specification
 Software verification report
Software unit design
 Software unit design specification
 Software verification report
Embedded Software
ISO 26262-6
6. Software
2. Functional Safety Management
3. Concept
Phase
(Safety Lifecycle, Hazard
Analysis, Risk Assessment
Functional Safety concept)
4. System
5. Hardware
7.
Production,
Maintenance
, Repair
8. Supporting Processes
(Config.Manag, Change Manag, Verification, Documentation, Qualification of SW Tools)
9. ASIL-oriented and safety-oriented Analysis
Requirements decomposition with respect to ASIL tailoring, Criteria for coexistence of elements, Analysis of dependent failure,
Safety Analysis
Confidential

18. 18
Embedded System/Hardware Life Cycle
5. Hardware 6. Software
2. Functional Safety Management
3. Concept
Phase
(Safety Lifecycle, Hazard
Analysis, Risk Assessment
Functional Safety concept)
4. System 7.
Production,
Maintenance
, Repair
8. Supporting Processes
(Config.Manag, Change Manag, Verification, Documentation, Qualification of SW Tools)
9. ASIL-oriented and safety-oriented Analysis
Requirements decomposition with respect to ASIL tailoring, Criteria for coexistence of elements, Analysis of dependent failure,
Safety Analysis
Technical Safety
Requirements
Hardware safety
requirements
System Design
Hardware design
Hardware Integration
Testing
Validation and
Integration Testing
Hardware
Details see Slide 19
Confidential

19. 19
ISO 26262 Work Products – Hardware Level
ISO 26262-5
6. Software
2. Functional Safety Management
3. Concept
Phase
(Safety Lifecycle, Hazard
Analysis, Risk Assessment
Functional Safety concept)
4. System
5. Hardware
7.
Production,
Maintenance
, Repair
8. Supporting Processes
(Config.Manag, Change Manag, Verification, Documentation, Qualification of SW Tools)
9. ASIL-oriented and safety-oriented Analysis
Requirements decomposition with respect to ASIL tailoring, Criteria for coexistence of elements, Analysis of dependent failure,
Safety Analysis
Hardware safety requirements
 Hardware safety requirements
specification
 Hardware-software interface
specification
 Hardware safety requirement
verification Report
Hardware design
 Hardware design specification
 Hardware Safety analysis report
 Hardware design verification
Report
 Analysis of architecture to cope
with random hardware failures
Hardware Integration Testing
 Hardware integration test report
Hardware
Confidential

20. 20
 ISO 26262 Overview
 ISO 26262 First Steps
 ASIL Determination
 ISO 26262 Life Cycle Work Products
 Software Unit Implementation Methods
 Embitel-Heicon Collaboration
Content
Confidential

21. 21
Software Unit Implementation Methods
ISO 26262-6
Methods ASIL A ASIL B ASIL C ASIL D
One entry and one exit point in subprograms and
functions
++ ++ ++ ++
No dynamic objects or variables, or else online test
during their creation
+ ++ ++ ++
Initialization of variables ++ ++ ++ ++
No multiple use of variable names + ++ ++ ++
Avoid global variables or else justify their usage + + ++ ++
Limited use of pointers o + + ++
No implicit type conversions + ++ ++ ++
No hidden data flow or control flow + ++ ++ ++
No unconditional jumps ++ ++ ++ ++
No recursions + + ++ ++
6. Software
2. Functional Safety Management
3. Concept
Phase
(Safety Lifecycle, Hazard
Analysis, Risk Assessment
Functional Safety concept)
4. System
5. Hardware
7.
Production,
Maintenance
, Repair
8. Supporting Processes
(Config.Manag, Change Manag, Verification, Documentation, Qualification of SW Tools)
9. ASIL-oriented and safety-oriented Analysis
Requirements decomposition with respect to ASIL tailoring, Criteria for coexistence of elements, Analysis of dependent failure,
Safety Analysis
Confidential

22. 22
ISO 26262 Consultancy
Functional Safety Validation & Verification
ISO 26262 Tool Qualifications
Automotive Software & Hardware development
HEICON
Our Collaboration & Services
Confidential

23. Q & A

24. embitel – A Partner For You
International Presence
Please Send Additional queries to:
e.seminar@embitel.com