ISO 26262 Functional Safety Lifecycle and ASIL Decomposition

ISO 26262 mandates rigorous processes for avoiding systematic software errors and handling random hardware faults. ASIL decomposition allows architects to break a stringent ASIL-D safety requirement into independent, redundant sub-requirements allocated to distinct software and hardware components, dramatically reducing development complexity while preserving compliance.

The HARA Matrix: Deriving Safety Goals from Physical Hazards

Hazard Analysis begins by enumerating operational driving situations: a vehicle cruising at 130 km/h on a highway experiencing unintended full throttle. The severity is S3 (life-threatening injuries), the exposure is E4 (highway cruising occurs regularly), and controllability is C3 (the driver cannot physically overpower an electric traction motor). Cross-referencing S3/E4/C3 in the ISO 26262 matrix dictates an ASIL-D rating, requiring a Safe State transition within 100 milliseconds.

Hazard Analysis and Risk Assessment (HARA): Classifying Severity (S), Exposure (E), and Controllability (C).
ASIL Decomposition Rules: Splitting ASIL-D into ASIL-B(D) + ASIL-B(D) or ASIL-C(D) + ASIL-A(D).
Independence Verification: Proving Freedom from Interference (FFI) via memory protection and spatial isolation.
Safety Element out of Context (SEooC): Integrating pre-certified commercial RTOS kernels into vehicle programs.

Explore Domain Portfolio