Diploma in Operational Risk Management and Safety Metrics
Online postgraduate diploma of 800 hours in operational risk management and safety metrics. 8 modules covering risk in automated driving, hazard analysis, safety metrics and indicators, rare-event statistics, fleet monitoring, operational risk management and the safety case, with ISO 26262, ISO 21448 (SOTIF) and UL 4600, with an assigned technical tutor.
Take the controls.
Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.
What you will be able to do
Identify the operational hazards of an automated driving system within its ODD.
Apply HARA, STPA and FMEA to assess the risk of ADAS functions.
Define leading and lagging operational safety indicators.
Estimate rare-event rates with their statistical uncertainty.
Design in-service monitoring for an automated fleet.
Draw up incident response plans and degraded modes.
Build and maintain a safety case in line with UL 4600.
Who it's for
- Functional safety managers extending their work into operations.
- ADAS safety engineers responsible for hazard analysis.
- Operational risk analysts in automated mobility services.
- Autonomous fleet safety managers running day-to-day safety programmes.
- Automated systems validation engineers who need sound statistics.
- Automated vehicle safety auditors reviewing safety cases.
- Engineering or science graduates looking to enter vehicle manufacturing.
What you'll work with
- ISO 26262 (road vehicle functional safety)
- ISO 21448 (safety of the intended functionality, SOTIF)
- UL 4600 (safety of autonomous products)
- ISO/TS 5083 (safety for automated driving systems)
- UN Regulation R157 (Automated Lane Keeping Systems)
- ISO 34502 (scenario-based safety evaluation)
- SAE J3016 (levels of driving automation)
- ISO 31000 (risk management guidelines)
- MATLAB/Simulink
- Python (pandas, SciPy)
- CARLA Simulator
- Ansys medini analyze
- Grafana
8 modules
1.1SAE J3016 taxonomy and levels of automation1.2The operational design domain and its limits1.3Hazards, scenarios and triggering events1.4Residual risk and absence of unreasonable risk1.5Relationship between functional safety and SOTIF1.6Interaction between safety and cybersecurity1.7Safety culture in fleet operators1.8Lessons from public robotaxi incidents1.9The Swiss cheese model applied to ADAS1.10Case study: analysis of a disengagement incident
2.1HARA: severity, exposure and controllability2.2ASIL allocation and safety goals2.3STPA: unsafe control actions2.4FMEA of sensors and the perception chain2.5Fault trees for automatic braking2.6Triggering conditions in SOTIF2.7Bow-tie diagrams and operational barriers2.8Calibrating risk matrices2.9Reasonably foreseeable misuse2.10Workshop: STPA of a lane change function
3.1Leading versus lagging indicators3.2Collisions per million kilometres driven3.3Disengagements and takeovers as a signal3.4Time-to-collision and post-encroachment time3.5Responsibility-Sensitive Safety as a formal metric3.6Required deceleration and other criticality metrics3.7ODD exit indicators3.8Safety Performance Indicators according to UL 46003.9Traffic rule compliance as a metric3.10Practical exercise: calculating TTC on recorded trajectories
4.1Confidence intervals for low rates4.2The Poisson distribution and required mileage4.3Bayesian inference applied to reliability4.4Importance sampling of critical scenarios4.5Extreme value theory in criticality4.6Exposure biases and normalisation by environment4.7Comparison with human driver accident rates4.8Communicating uncertainty to management4.9Designing on-road validation sampling4.10Laboratory: mileage estimation with a Poisson interval
5.1DSSAD and EDR recorders5.2Event pipelines and incident labelling5.3Automatic near-miss detection5.4Operational safety dashboards5.5Alert thresholds and escalation5.6Tracking deployed OTA updates5.7In-service monitoring required by UN R1575.8Field feedback to development5.9Privacy and retention of event data5.10Workshop: SPI dashboard for a fleet
6.1Safety management system for autonomous fleets6.2Incident response plans6.3Risks of teleoperation and remote assistance6.4Adverse weather and service restriction6.5Sensor degradation and recalibration6.6Minimal risk manoeuvre and degraded modes6.7Coordination with emergency services6.8Incident reporting under the Standing General Order6.9Training of onboard safety operators6.10Case study: response plan for a robotaxi service
7.1Structuring the safety case with GSN7.2Verification, validation and operational evidence7.3Positive risk balance arguments7.4The dynamic safety case during operation7.5Independent assessment and confidence levels7.6Alignment with UL 4600 and ISO/TS 50837.7Presenting the safety case to regulators7.8Counter-arguments and managing defeaters7.9Evidence management and documentary traceability7.10Practical exercise: GSN argument for a fleet indicator
8.1Definition of the service and the ODD8.2Hazard analysis of the chosen case8.3Selection of metrics and indicators8.4Statistical validation model8.5Monitoring system design8.6Incident response plan8.7Safety case fragment in GSN8.8Assessment of the service's residual risk8.9Report and presentation8.10Final project: final review with the tutor
How you'll learn
The programme is delivered 100% online on the SEIUM campus, with downloadable material, recorded classes and an assigned technical tutor. There are no fixed timetables: you progress at your own pace within each intake, so it fits around your job.
Each module combines theory, guided reading of the original standard and applied exercises. You work with MATLAB/Simulink, Python (pandas, SciPy), CARLA Simulator, Ansys medini analyze and Grafana, in free, academic or evaluation versions. Testing is studied through real procedures: analysing logs from a fleet in operation, calculating criticality indicators on real trajectories, and building a safety case in GSN notation. Assessment is continuous by module, plus the final project.
Standards covered: ISO 26262, ISO 21448 (SOTIF), UL 4600, ISO/TS 5083, UN Regulation R157 (ALKS), ISO 34502, SAE J3016, ISO 31000.
Build it end to end
Your final project follows the real engineering workflow, step by step, reviewed by your tutor.
Where this takes you
Requirements
- Prior technical training or professional experience in the sector. A university degree is not required.
- An internet connection and a computer capable of running the programme software.
- English sufficient to read technical standards.
Ready to start?
Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.
Frequently asked questions
The programme totals 800 hours over 6–8 months. You set your own pace within each intake, and your tutor helps you plan the workload around your job.
You work with MATLAB/Simulink, Python (pandas, SciPy), CARLA Simulator, Ansys medini analyze and Grafana, using free, academic or evaluation versions. Your tutor indicates the free alternative wherever one exists.
A SEIUM Institute diploma, awarded on passing the continuous assessment and the final project. It is SEIUM's own qualification, not an official state degree; its recognition depends on the programme completed and the regulations of each country.
Yes. Modules passed are recognised in a higher programme in the same area (postgraduate diploma or master's). Ask about the recognition policy when you enrol.
Prior technical training or professional experience in the sector (no university degree required), a computer able to run the software and English sufficient to read technical standards.
Start dates are set by SEIUM's faculty for each intake. Our admissions team will confirm the next available date when you apply.
Related programmes
Postgraduate Diploma in Hierarchical Learning and Transferable Policies
Online 800-hour Postgraduate Diploma in Hierarchical Learning and Transferable Policies. 8 modules covering ISO/PAS 8800:2024, ISO 21448:2022 (SOTIF) and PyTorch. Assigned tutor and open enrolment.
Postgraduate Diploma in Sim↔Real-World Correlation Metrics
Online postgraduate diploma of 800 hours in sim-to-real correlation metrics. 8 modules covering model verification and validation, signal and trajectory metrics, vehicle dynamics, sensor and scenario-level…
Postgraduate Diploma in DMS/OMS: Fatigue, Distraction and Standards
Online 800-hour Postgraduate Diploma in DMS/OMS: Fatigue, Distraction and Standards. 8 modules covering Delegated Regulation (EU) 2023/2590, Delegated Regulation (EU) 2021/1341 and OpenCV. Assigned tutor and…
More in Autonomous, ADAS & Software-Defined Vehicle
All Autonomous, ADAS & Software-Defined Vehicle programmes → · How to apply · Fees & financing · Scholarships