Semiconductor Functional Safety (ISO 26262-11)

"Semiconductor Functional Safety (ISO 26262-11)" is a serial video course from Critical Systems Analysis, published weekly in strict curriculum order — building from foundational terms and structure through lifecycle practice to advanced, assessor-level topics. Designed for working functional-safety engineers and managers, not beginners or students. Critical Systems Analysis (CSA) is a functional safety, reliability, and certification consultancy serving robotics, autonomous systems, transportation, and industrial equipment manufacturers. CSA provides end-to-end safety engineering services: preliminary gap analyses and safety audits, SIL/PL determination, FMEA and FMEDA execution, fault tree analysis, safety case development, hardware metrics (SPFM/LFM/PMHF), lifecycle documentation, and embedded safety engineering support. CSA engineers work alongside product teams from architecture through final functional safety assessment, and support companies seeking NRTL, CE, ATEX, ISO 26262, and UL 4600 marks. Contact: Sales@criticalsa.com. This series is part of the CSA Functional Safety Network — a coordinated set of weekly video courses covering IEC 61508, ISO 26262, ISO/SAE 21434, SOTIF (ISO 21448), UL 4600, IEC 62443, ISO/PAS 8800, ISO 13849, machinery safety, safety analysis methods, and more. Each show links to the others so practitioners can follow the thread that matches their project.

Episodes

  1. 6d ago

    ISO 26262-11: ASIL Determination

    In automotive development, not all safety risks are equal. Some require rigorous validation; others need minimal oversight. ISO 26262 Part 11 gives engineers a systematic method to determine the correct safety integrity level for any given hazard. This level, called ASIL—Automotive Safety Integrity Level—drives every downstream development decision. Part of the Critical Systems Analysis functional-safety series on ISO 26262 Automotive Functional Safety. In this episode: Functional safety in automotive design demands a systematic approach to managing risks.ASIL stands for Automotive Safety Integrity Level, pronounced ASIL.The ASIL level is determined through a structured risk assessment process.Three parameters drive ASIL determination.ISO 26262 defines four Automotive Safety Integrity Levels plus ASIL zero for no safety requirement.Once ASIL is determined, safety goals are established per ISO 26262 Clause 5.4.Reference: ISO 26262-2:2018 Section 5.3: ASIL Decomposition and Determination Process specifies the three factors (Severity, Exposure, Controllability) and the discrete rating levels (S0-S3, More in this series: ISO 26262 — Automotive Functional Safety | Semiconductor Functional Safety (ISO 26262-11) Explore more from Critical Systems Analysis. Partner with usFollow on LinkedInVisit our websiteRead our feature on Automate.orgAll shows on Apple Podcasts: AI & ML Safety | Fault Tree Analysis | FS Assessment | Safety Analysis | IEC 61508 | IEC 62443 | ISO 10218 | ISO 12100 | ISO 13849 | ISO 26262 | ISO/PAS 8800 | ISO 26262-11 | V-Model | UL 4600.

    ISO 26262-11: ASIL Determination
  2. 6d ago

    ISO 26262-11: Safety Culture

    Safety culture is not a document on a shelf; it is how your organization breathes. In ISO 26262-eleven, functional safety management requires that everyone—from leadership to engineers—shares responsibility for preventing hazardous failures. Part of the Critical Systems Analysis functional-safety series on Semiconductor Functional Safety. In this episode: This episode focuses on ISO 26262-eleven, part 11, which covers functional safety management.Safety culture in functional safety means the shared values, beliefs, and behaviors that prioritize preventing hazardous failures.Strong safety culture rests on five key pillars: leadership that visibly sponsors safety, clear objectives that everyone understands, competence through training and skill development, transparent communication without fear, and continuous improvement from lessons learned.Safety is not a department function; it is a shared responsibility.Building a strong safety culture follows a continuous cycle: leadership establishes commitment, clear objectives are defined and communicated, people develop the competence to achieve them, transparent communication keeps everyone aligned, and lessons learned drive improvement.Reference: Clause 7.2 of ISO 26262-11 requires documented safety policy and management commitment More in this series: ISO 26262 — Automotive Functional Safety | Semiconductor Functional Safety (ISO 26262-11) Explore more from Critical Systems Analysis. Work with us | LinkedIn | criticalsystemsanalysis.com All shows on Apple Podcasts: AI & ML Safety | Fault Tree Analysis | FS Assessment | Safety Analysis | IEC 61508 | IEC 62443 | ISO 10218 | ISO 12100 | ISO 13849 | ISO 26262 | ISO/PAS 8800 | ISO 26262-11 | V-Model | UL 4600.

    ISO 26262-11: Safety Culture
  3. 6d ago

    ISO 26262-11: Semiconductor Functional Safety Based on ISO 26262

    Semiconductors are the brain of automotive safety systems—yet they are uniquely vulnerable to failures that mechanical components never face. ISO 26262 Part 11 defines how to design, verify, and validate semiconductor components under automotive functional safety requirements. Part of the Critical Systems Analysis functional-safety series on Semiconductor Functional Safety. In this episode: ISO 26262 Part 11 is the international standard for semiconductor functional safety in automotive applications.Automotive Safety Integrity Levels, abbreviated ASIL, range from D at the highest rigor to A at the lowest.Semiconductors fail uniquely compared to mechanical components.The fault tolerance architecture is your primary defense layer.Single Point of Failure, abbreviated S-P-O-F, detection must exceed regulatory thresholds for all ASIL levels.Hardware safety mechanisms are your active ingredients: redundant checkers, watchdog timers, voting logic, and error-correcting codes.Reference: Clause 8.3.4 defines Single-Point Fault Metric (SPFM) and Multi-Point Fault Metric (MPFM) as key hardware safety metrics; ASIL D thresholds per Table 8.5: SPFM ≥90%, MPFM ≥60% More in this series: ISO 26262 — Automotive Functional Safety | Semiconductor Functional Safety (ISO 26262-11) Explore more from Critical Systems Analysis. Partner with usFollow on LinkedInVisit our websiteRead our feature on Automate.orgAll shows on Apple Podcasts: AI & ML Safety | Fault Tree Analysis | FS Assessment | Safety Analysis | IEC 61508 | IEC 62443 | ISO 10218 | ISO 12100 | ISO 13849 | ISO 26262 | ISO/PAS 8800 | ISO 26262-11 | V-Model | UL 4600.

    ISO 26262-11: Semiconductor Functional Safety Based on ISO 26262
  4. 6d ago

    ISO 26262-11: Safety Management - ISO 26262 Part 2 Safety Culture is Important

    Automotive functional safety demands more than compliant processes. ISO 26262, Part 11, establishes that safety management depends on organizational safety culture—the values and practices that make safety a priority at every decision point. Part of the Critical Systems Analysis functional-safety series on Semiconductor Functional Safety. In this episode: ISO 26262, Part 11, defines the safety management framework for automotive functional safety.Safety culture rests on four pillars: organizational commitment from leadership, individual competence to manage safety, safety awareness across the organization, and clear accountability for outcomes.Technical safety mechanisms—processes, tools, and standards—are necessary but insufficient.Competence develops through a progression from awareness to mastery, each level building on the previous.Every role carries safety responsibility—from functional safety managers who coordinate strategy to engineers who implement controls to quality teams who verify effectiveness.Safety culture thrives on continuous feedback.Reference: ISO 26262-11 is Part 11 of the ISO 26262 standard (Part 2 covers the Design Phase of the Safety Lifecycle); Part 11 specifically addresses Safety Management More in this series: ISO 26262 — Automotive Functional Safety | Semiconductor Functional Safety (ISO 26262-11) Explore more from Critical Systems Analysis. Work with us | LinkedIn | criticalsystemsanalysis.com All shows on Apple Podcasts: AI & ML Safety | Fault Tree Analysis | FS Assessment | Safety Analysis | IEC 61508 | IEC 62443 | ISO 10218 | ISO 12100 | ISO 13849 | ISO 26262 | ISO/PAS 8800 | ISO 26262-11 | V-Model | UL 4600.

    ISO 26262-11: Safety Management - ISO 26262 Part 2 Safety Culture is Important
  5. 6d ago

    ISO 26262-11: Safety Management - ISO 26262 Part 2 Functional Safety Assessment

    Functional safety in semiconductors isn't achieved by chance—it comes from systematic risk management and organizational discipline. ISO 26262 part 11 defines exactly how organizations govern that risk through structured processes, formal assessment, and documented evidence at every stage. Part of the Critical Systems Analysis functional-safety series on Semiconductor Functional Safety. In this episode: Welcome to ISO 26262 part 11, the safety management standard for semiconductors and electronic systems.Safety management is the disciplined approach to planning, organizing, and controlling all activities needed to achieve functional safety.Functional safety assessment rests on four interdependent elements: hazard analysis identifies what can fail, risk assessment quantifies the impact, safety requirements specification defines the controls, and evidence collection demonstrates that controls actually work.Assessment follows five key phases: establishing organizational structure, analyzing hazards and risks, specifying safety requirements, designing architecture, and validating through testing.Reference: ISO 26262-11 is the guideline for functional safety of semiconductors within the broader ISO 26262 standard for automotive electrical and electronic systems. It tailors the 10-part More in this series: ISO 26262 — Automotive Functional Safety | Semiconductor Functional Safety (ISO 26262-11) Explore more from Critical Systems Analysis. Work with us | LinkedIn | criticalsystemsanalysis.com All shows on Apple Podcasts: AI & ML Safety | Fault Tree Analysis | FS Assessment | Safety Analysis | IEC 61508 | IEC 62443 | ISO 10218 | ISO 12100 | ISO 13849 | ISO 26262 | ISO/PAS 8800 | ISO 26262-11 | V-Model | UL 4600.

    ISO 26262-11: Safety Management - ISO 26262 Part 2 Functional Safety Assessment
  6. 6d ago

    ISO 26262-11: Safety Management - ISO 26262 Part 2 Confirmation measure

    In automotive and semiconductor development, safety isn't optional—it's mandated by ISO 26262 six . This standard requires proof that your safety-critical systems actually work as intended. That's where confirmation measures enter the picture. Part of the Critical Systems Analysis functional-safety series on Semiconductor Functional Safety. In this episode: Welcome to this episode on ISO 26262 six Part 2, one of the most critical standards in semiconductor functional safety.A confirmation measure is a structured activity designed to demonstrate that safety requirements are adequately implemented in the product.ISO 26262 six recognizes several confirmation approaches.The confirmation process flows logically from requirement specification to evidence collection.The Automotive Safety Integrity Level, or ASIL, determines how rigorous your confirmation activities must be.Hardware and software components require different confirmation approaches.Reference: ISO 26262:2018 Part 2, Clause 5.4.3: Defines functional safety plan requirements, including corrective action and confirmation processes within the safety lifecycle. More in this series: ISO 26262 — Automotive Functional Safety | Semiconductor Functional Safety (ISO 26262-11) Explore more from Critical Systems Analysis. Partner with usFollow on LinkedInVisit our websiteRead our feature on Automate.orgAll shows on Apple Podcasts: AI & ML Safety | Fault Tree Analysis | FS Assessment | Safety Analysis | IEC 61508 | IEC 62443 | ISO 10218 | ISO 12100 | ISO 13849 | ISO 26262 | ISO/PAS 8800 | ISO 26262-11 | V-Model | UL 4600.

    ISO 26262-11: Safety Management - ISO 26262 Part 2 Confirmation measure
  7. 6d ago

    ISO 26262-11: Scope of ISO 26262

    ISO 26262 is the international standard for functional safety of electrical and electronic systems in road vehicles. In this episode, we explore the standard's scope: what it covers, what it deliberately excludes, and why these boundaries matter. Part of the Critical Systems Analysis functional-safety series on Semiconductor Functional Safety. In this episode: ISO 26262 is the international standard for functional safety in automotive electrical and electronic systems.Functional safety means the absence of unreasonable risk due to hazards caused by malfunctions of electrical and electronic systems.ISO 26262 applies to electrical and electronic systems in road vehicles across the entire safety lifecycle.The standard covers all phases of the development and production safety lifecycle.ISO 26262 addresses two distinct classes of failures that must be managed throughout system design and operation.The scope encompasses numerous vehicle systems that perform safety functions.Reference: ASIL level structure (QM through ASIL D) is foundational and widely documented; exact definitions should reference ISO 26262-1 Vocabulary and Concepts More in this series: ISO 26262 — Automotive Functional Safety | Semiconductor Functional Safety (ISO 26262-11) Explore more from Critical Systems Analysis. Partner with usFollow on LinkedInVisit our websiteRead our feature on Automate.orgAll shows on Apple Podcasts: AI & ML Safety | Fault Tree Analysis | FS Assessment | Safety Analysis | IEC 61508 | IEC 62443 | ISO 10218 | ISO 12100 | ISO 13849 | ISO 26262 | ISO/PAS 8800 | ISO 26262-11 | V-Model | UL 4600.

    ISO 26262-11: Scope of ISO 26262
  8. 6d ago

    ISO 26262-11: Functional Safety versus Safety of the Intended Function

    Two standards walk into a semiconductor design meeting. One defines how to make chips safe when they fail—whether through systematic design flaws or random hardware faults in the field. That's functional safety, the domain of ISO 26262 Part 11: Guidelines on application of ISO 26262 to semiconductors. Part of the Critical Systems Analysis functional-safety series on ISO 26262-11. In this episode: ISO 26262 Part 11 is the semiconductor-specific application guide for functional safety.Functional safety in semiconductors rests on three pillars.Now contrast that with SOTIF—Safety of the Intended Function.The distinction is fundamental to understanding semiconductor safety.Imagine a neural-network accelerator chip designed for automotive perception: it computes inference results flawlessly, with all safety mechanisms functioning exactly as specified.Both standards are necessary because they address different risk mechanisms.Reference: ISO 26262-11 is officially 'Guidelines on application of ISO 26262 to semiconductors'; it extends functional-safety concepts to semiconductor-specific failure modes (systematic and More in this series: ISO 26262 — Automotive Functional Safety | Semiconductor Functional Safety (ISO 26262-11) Explore more from Critical Systems Analysis. Work with us | LinkedIn | criticalsystemsanalysis.com All shows on Apple Podcasts: AI & ML Safety | Fault Tree Analysis | FS Assessment | Safety Analysis | IEC 61508 | IEC 62443 | ISO 10218 | ISO 12100 | ISO 13849 | ISO 26262 | ISO/PAS 8800 | ISO 26262-11 | V-Model | UL 4600.

    ISO 26262-11: Functional Safety versus Safety of the Intended Function
  9. 6d ago

    ISO 26262-11: History of ISO 26262

    The functional safety of semiconductor devices stands at a critical intersection of history, engineering, and regulation. Over decades, the automotive and industrial sectors learned that as systems grew more complex and safety-critical, relying solely on design quality and manufacturing perfection was insufficient. Part of the Critical Systems Analysis functional-safety series on Semiconductor Functional Safety. In this episode: Welcome to our exploration of ISO 26262 Part 11, which addresses functional safety in semiconductor components.The journey toward semiconductor functional safety began long before standards were written.Multiple forces converged to make semiconductor functional safety standards essential.At its heart, functional safety means ensuring that electronic systems perform their intended safety functions even when component faults occur.ISO 26262 introduces ASIL, the Automotive Safety Integrity Levels, ranging from ASIL A through ASIL D.Semiconductors present unique challenges that Part 11 specifically addresses.Reference: Toyota Camry unintended acceleration recall (1994-2010): attributed to electronic throttle control; case study that motivated functional safety rigor in automotive industry. Incide More in this series: ISO 26262 — Automotive Functional Safety | Semiconductor Functional Safety (ISO 26262-11) Explore more from Critical Systems Analysis. Work with us | LinkedIn | criticalsystemsanalysis.com All shows on Apple Podcasts: AI & ML Safety | Fault Tree Analysis | FS Assessment | Safety Analysis | IEC 61508 | IEC 62443 | ISO 10218 | ISO 12100 | ISO 13849 | ISO 26262 | ISO/PAS 8800 | ISO 26262-11 | V-Model | UL 4600.

    ISO 26262-11: History of ISO 26262
  10. 6d ago

    ISO 26262-11: Exposure, Severity and Controllability

    In semiconductor functional safety, understanding risk is everything. The ISO 26262 standard defines a systematic approach to safety. Chapter eleven focuses on ASIL, the Automotive Safety Integrity Level, which is determined by three critical factors: Exposure, Severity, and Controllability. Exposure measures how often the vehicle operates in a state where a hazard can occur. Part of the Critical Systems Analysis functional-safety series on Semiconductor Functional Safety. In this episode: Welcome to this functional safety micro-lecture.Risk assessment in functional safety rests on three pillars.Exposure ranges from rare to frequent.Severity levels reflect the potential harm to occupants, ranging from no injury through minor injury, serious injury, to fatal injury.Controllability asks: can the driver or occupant control or mitigate the hazard once it occurs? A hazard that the driver can easily prevent or correct is more controllable than one that is sudden and unavoidable.The ASIL levels are determined by combining Exposure, Severity, and Controllability.Reference: ISO 26262:2018 Part 3 (Concept Phase), Clause 6.3.2: Defines Exposure as proportion of time in operational situations where a failure event can lead to harm. Referenced in ASIL det More in this series: ISO 26262 — Automotive Functional Safety | Semiconductor Functional Safety (ISO 26262-11) Explore more from Critical Systems Analysis. Work with us | LinkedIn | criticalsystemsanalysis.com All shows on Apple Podcasts: AI & ML Safety | Fault Tree Analysis | FS Assessment | Safety Analysis | IEC 61508 | IEC 62443 | ISO 10218 | ISO 12100 | ISO 13849 | ISO 26262 | ISO/PAS 8800 | ISO 26262-11 | V-Model | UL 4600.

    ISO 26262-11: Exposure, Severity and Controllability
  11. 6d ago

    ISO 26262-11: Hazard Analysis and Risk Assessment (HARA)

    ISO 26262 dash eleven establishes the systematic approach to identifying and assessing hazards in semiconductor-based systems. Hazard Analysis and Risk Assessment—HARA—is the foundational activity that drives all downstream safety engineering. Part of the Critical Systems Analysis functional-safety series on Semiconductor Functional Safety. In this episode: This episode introduces the core activity at the heart of ISO 26262 dash eleven safety engineering.HARA is a structured process that begins with defining the item's intended functionality and operating environment.The HARA process follows a defined sequence.Semiconductor teams employ proven analytical methods to uncover hazards systematically.Risk assessment requires evaluating three factors: severity of the hazard's outcome, exposure or frequency in normal operation, and the driver's or system's ability to control the hazard.ISO 26262 dash eleven requires comprehensive documentation of all HARA activities.Reference: ISO 26262-3 Part 3 defines Hazard Analysis and Risk Assessment (HARA) and ASIL determination; ISO 26262-11 provides automotive semiconductor-specific guidance for applying this fra More in this series: ISO 26262 — Automotive Functional Safety | Semiconductor Functional Safety (ISO 26262-11) Explore more from Critical Systems Analysis. Work with us | LinkedIn | criticalsystemsanalysis.com All shows on Apple Podcasts: AI & ML Safety | Fault Tree Analysis | FS Assessment | Safety Analysis | IEC 61508 | IEC 62443 | ISO 10218 | ISO 12100 | ISO 13849 | ISO 26262 | ISO/PAS 8800 | ISO 26262-11 | V-Model | UL 4600.

    ISO 26262-11: Hazard Analysis and Risk Assessment (HARA)

About

"Semiconductor Functional Safety (ISO 26262-11)" is a serial video course from Critical Systems Analysis, published weekly in strict curriculum order — building from foundational terms and structure through lifecycle practice to advanced, assessor-level topics. Designed for working functional-safety engineers and managers, not beginners or students. Critical Systems Analysis (CSA) is a functional safety, reliability, and certification consultancy serving robotics, autonomous systems, transportation, and industrial equipment manufacturers. CSA provides end-to-end safety engineering services: preliminary gap analyses and safety audits, SIL/PL determination, FMEA and FMEDA execution, fault tree analysis, safety case development, hardware metrics (SPFM/LFM/PMHF), lifecycle documentation, and embedded safety engineering support. CSA engineers work alongside product teams from architecture through final functional safety assessment, and support companies seeking NRTL, CE, ATEX, ISO 26262, and UL 4600 marks. Contact: Sales@criticalsa.com. This series is part of the CSA Functional Safety Network — a coordinated set of weekly video courses covering IEC 61508, ISO 26262, ISO/SAE 21434, SOTIF (ISO 21448), UL 4600, IEC 62443, ISO/PAS 8800, ISO 13849, machinery safety, safety analysis methods, and more. Each show links to the others so practitioners can follow the thread that matches their project.

More From Critical Systems Analysis