Prof. Dr. Mirko Conrad
Managing Director | samoconsult GmbH
More Info
If you are looking for an introduction to the topic of SOTIF and related standardization activities, namely ISO 21448, enroll in this training class.
Ensuring the safety of a driving automation system encompasses two aspects, namely
(1) the avoidance of unreasonable risk caused by malfunctioning behavior of the system as well as
(2) the avoidance of unreasonable risk caused by hazards associated with the intended functionality and its implementation, e.g. due to performance limitations.
The first aspect - known as functional safety - has been addressed by the industry for quite some time already and is described by the established ISO 26262 standard. The second aspect - referred to as safety of the intended functionality (SOTIF) - however, is more of an emerging topic and corresponding standards are still under development.
In this course, we will compare and contrast functional safety and safety of the intended functionality, review the conceptual SOTIF framework and fundamental terminology, and provide an overview of activities and methods to achieve SOTIF. The theoretical knowledge is supplemented by means of practical examples.
Target Audience
This training class is designed for automotive professionals (development engineers, engineering managers, quality and project managers) involved in the development of driving automation systems as well as other people interested in SOTIF.
Highlights
- Aspects of safety: Functional Safety vs SOTIF
- SOTIF terminology: SAE driving automation levels, use case, scene, scenario, and triggering event
- Conceptual framework: the four scenario categories and their evolution
- SOTIF activities and methods
- Standardization: ISO 21448
Agenda
- What is SOTIF?
- SOTIF vs. functional safety
- Dependability domains
- Standards and type approval regulations
Hands-on: SOTIF vs functional safety vs cyber security
- SAE levels of driving automation
- Sense plan act model and environmental perception
- Introducing SOTIF terminology: use case, scene, scenario, …
- Triggering conditions
- Concept of SOTIF areas (known/unknown and safe/hazardous scenarios)
- SOTIF lifecycle
Hands-on: Description of scenarios
- SOTIF-related hazardous event model
- Identification and evaluation of hazards caused by the intended functionality
- Risk evaluation of the intended function
- Identification and analysis of triggering conditions
- Acceptance criteria
- SOTIF V&V strategy
- Strategies for the evaluation of area 2 scenarios
- Strategies for the evaluation of area 3 scenarios
- Methodology for evaluating SOTIF for release
- Objectives to meet
- Evolution of SOTIF related standards
- Possible interaction between ISO 26262 and ISO 21448
Learning Objectives
By the end of this course, you will have:
- An understanding of the characteristics and benefits of model-based development
- Know-how to apply model-based methods to develop safety-related systems in compliance with ISO 26262
- An understanding of the model-based development process as outlined by ISO 26262
- The ability to assess elements of effective software architecture according to ISO 26262
- An understanding of how to implement software architecture in models
- The skills to analyze and evaluate model structures
- An understanding of how to ensure model quality with effective modeling guidelines
- Ability to recall the approach to tool qualification that aligns with ISO 26262
- Knowledge of how to apply methods to ensure model quality with model testing
- An understanding of the priorities for process adaptation towards ISO 26262 compliance
Certificate of Competency
A fee-based SAE Certificate of Competency can be obtained in this class by passing the evaluation test.
Please contact training@tudoor.com for more information.
Our Trainers
Available as in-house training class
- Exclusively for your team or organization.
- We adapt the content, starting times, and agenda to your specific needs and challenges.
- Delivered either online or in person at your organization.
