What is sufficiently safe?

Hello and welcome to a new episode of "Applied FuSa," a podcast for FuSa pragmatists.Confirmation Measures, which means Confirmation Review, Audits and Assessments. In today's episode, we'll examine their significance and how to implement them in practice. We'll pay special attention to the topic of Level of Independence. Do audits and assessments always have to be conducted by external providers? Are internal auditors and assessors independent enough? These are questions we will answer.

Hello and welcome to a new episode of “Applied FuSa,” a podcast for FuSa pragmatists.“We have to do this because it’s written in the ISO.” You hear that a lot, but it’s not always true. In line with the motto “Everything goes, nothing’s a must,” ISO 26262 offers enough flexibility in how its requirements are implemented. In fact, deviations are allowed—as long as it’s demonstrated that they don’t result in an unacceptable, safety-relevant risk.In other words: everything is fine as long as functional safety concepts are implemented completely and correctly, since these are the ultimate goal from a FuSa perspective. This episode explains the ISO 26262 requirements regarding tailoring.Which raises the question: can those requirements themselves be tailored? Hmm… now it’s getting complicated… but let’s wait and see.

Hello and welcome to another episode of “Applied FuSa”, a podcast for FuSa pragmatists.Tool evaluation and qualification… there is hardly any other task in the FuSa universe that has caused so much uncertainty. At least, that’s the impression gained from many internal and external discussions (for instance, at FuSa conferences and workshops). Actually, the topic is not that complicated. But the devil is very much in the details. We will illustrate this using the example of compiler evaluation.We will also share a few suggestions on how the effort involved can be significantly reduced.

Hello and welcome to a new episode of “Applied FuSa,” a podcast for FuSa pragmatists.Release for Production Report is a work product that is created at the end of a product development process to authorize a safety-related product for production.ISO 26262 specifies only five requirements for the Release for Production in Part 2, Section 6.4.13, which will be presented in this episode. In addition, we will also answer the question:Who should own the Release for Production Report?

Hello and welcome to a new episode of “Applied FuSa,” a podcast for FuSa pragmatists.In this episode, we will answer one of the most crucial questions in any safety-related project: How do I know that my product is sufficiently safe? And what exactly is the difference between compliance and achievement of functional safety?Note: The scope of this episode is limited to the safety of a supplier's design. In addition, non-technical requirements like compliance with standards still apply, of course. 

Hello and welcome to another episode of “Applied FuSa,” a podcast for FuSa pragmatists.Functions are often broken down into sub-functions. A typical reason for this is that it can be easier to implement sub-functions rather than the complete function.This strategy is relevant to functional safety for two reasons: 1. Depending on how the function is broken down into sub-functions, the ASIL of the sub-functions may be reduced; and 2. The usually lower complexity of sub-functions not only reduces the validation effort but also the risk of failure.In ISO 26262, this type of breakdown is referred to as requirements decomposition, provided the sub-functions meet certain criteria — for instance, complete independence. In this episode, we will present the exact requirements for such a requirements decomposition in detail, explore its benefits, and discuss its limitations.

Hello and welcome to a new episode of “Applied FuSa,” a podcast for FuSa pragmatists.What’s actually the difference between functions and systems? And why is this relevant for functional safety at all? Is it enough to have requirements documents for either functions or systems, or are both always needed? Simple questions, with simple answers — but far-reaching consequences.

Hello and welcome to a new episode of “Applied FuSa,” a podcast for FuSa pragmatists. Today we'll be talking about hierarchies of functions. What this is about, and why this topic is so enormously important for functional safety... You'll find out shortly.

The strict separation of functional and technical safety concepts is one of the most important principles in functional safety—and for good reason. This not only affects the scope of the two work products but also their respective responsibilities and the impact this separation has on the efficiency of safety concepts.

According to ISO 26262, an impact analysis must be performed at the beginning of a project to identify work products that can be tailored, provided the project is based on a predecessor project. Differences between the two projects are assessed with respect to the following three categories:Changed requirements;Revised design; andNew integration environment.In this episode, we will not only introduce the method itself, but also explain why an impact analysis makes sense not just at the beginning of a project.