Master’s in DO-178C/ARP4754A & ARP4761 Engineering
Online master's programme of 1,900 hours in DO-178C, ARP4754A and ARP4761 engineering, structured in 12 modules covering the certification context, aircraft and systems development, DAL assignment, safety assessment, DO-178C planning, development and verification, the DO-330 to DO-333 supplements, configuration management, interaction with the authority and emerging trends, with an assigned technical tutor.
Take the controls.
Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.
What you will be able to do
Understand the certification framework for aeronautical systems.
Apply the ARP4754A development process.
Assign DAL levels to functions and items.
Carry out safety assessments according to ARP4761.
Plan the software life cycle in compliance with DO-178C.
Apply the DO-330 to DO-333 supplements.
Manage the relationship with the authority during certification.
Who it's for
- Software certification engineers.
- System safety engineers.
- Verification engineers.
- Process assurance managers.
- Requirements engineers.
- Aeronautical certification consultants.
- Engineering or science graduates seeking to enter aircraft manufacturing.
What you'll work with
- RTCA DO-178C / EUROCAE ED-12C (software considerations in airborne systems)
- SAE ARP4754A / EUROCAE ED-79A (development of civil aircraft and systems)
- SAE ARP4761A (safety assessment process for civil aircraft)
- RTCA DO-330 (software tool qualification)
- RTCA DO-331 (model-based development supplement)
- RTCA DO-332 (object-oriented technology supplement)
- RTCA DO-333 (formal methods supplement)
- AMC 20-115D (EASA acceptable means of compliance for airborne software)
- IBM DOORS
- LDRA Testbed
- Isograph FaultTree+
- VectorCAST
- SCADE Suite
12 modules · 1900 h
1.1Part 21 regulation and type certification1.2CS-25.1309 and safety objectives1.3Relationship between ARP4754A, ARP4761 and DO-178C1.4Role of the authority and the DOA1.5Development life cycle1.6Development assurance levels1.7AMC 20-115D and its application1.8Certification Review Items1.9Lessons from recent programmes1.10Case study: document map of a certification programme
2.1Development planning2.2Aircraft functions2.3Allocation to systems2.4System requirements2.5Requirements validation2.6Implementation of systems and items2.7Systems verification2.8Systems configuration management2.9Process assurance in ARP4754A2.10Workshop: development plan for a braking system
3.1Classification of failure conditions3.2Functional development assurance level3.3Item development assurance level3.4Functional and item independence3.5DAL downgrading rules3.6Assignment examples3.7Common cause analysis3.8Review with the authority3.9Common mistakes in assignment3.10Practical exercise: DAL assignment for a dual architecture
4.1Aircraft-level and system-level FHA4.2Preliminary system safety assessment (PSSA)4.3System safety assessment (SSA)4.4Fault trees4.5Dependence diagrams4.6Markov analysis4.7FMEA and FMES4.8Common cause analysis4.9ARP4761A and what is new4.10Lab: fault tree with FaultTree+
5.1Plan for Software Aspects of Certification (PSAC)5.2Software Development Plan (SDP)5.3Software Verification Plan (SVP)5.4Software Configuration Management Plan (SCMP)5.5Software Quality Assurance Plan (SQAP)5.6Requirements, design and code standards5.7Transition criteria between processes5.8SOI stages of involvement5.9Supplier management5.10Practical exercise: writing a PSAC
6.1High-level requirements6.2Software architecture6.3Low-level requirements6.4Derived requirements and their feedback6.5Coding to code standards6.6Software and hardware integration6.7Traceability between software artefacts6.8Dead and deactivated code6.9Software partitioning and protection6.10Case study: traceability from requirements to code
7.1Reviews and analyses7.2Requirements-based testing7.3Normal and robustness testing7.4Requirements coverage7.5Structural coverage by DAL level7.6MC/DC coverage at level A7.7Coupling analysis7.8Object code verification7.9Independence in verification7.10Lab: requirements-based testing and coverage
8.1DO-330 tool qualification8.2Tool qualification levels (TQL)8.3DO-331 model-based development8.4DO-332 object-oriented technology8.5DO-333 formal methods8.6Combining supplements8.7Industrial use cases8.8Benefits and risks8.9Planning for supplements8.10Practical exercise: qualification of a verification tool
9.1Configuration identification9.2Configuration baselines9.3Change control9.4Problem report management9.5Configuration audits9.6Software process assurance9.7Software conformity review9.8Certification records9.9Software Accomplishment Summary9.10Case study: managing an open problem report
10.1Stages of involvement10.2Audit preparation10.3Findings and actions10.4Technical communication with specialists10.5CRIs and Issue Papers10.6Delegation within the DOA10.7Certification of changes10.8Audit experiences10.9Good practice in audits10.10Workshop: SOI 2 simulation
11.1Multicore processors under AMC 20-19311.2COTS and previously developed software11.3Tool software11.4Artificial intelligence and machine learning11.5EASA AI roadmaps11.6FAA Overarching Properties approach11.7Agile and certifiable DevOps11.8eVTOL and new entrants11.9Cybersecurity and DO-326A11.10Case study: certification strategy for ML-based software
12.1System definition12.2ARP4754A development plan12.3FHA and DAL assignment12.4PSSA and architecture12.5DO-178C software plans12.6Verification plan12.7Configuration management12.8Strategy for the authority12.9Master's Thesis report12.10Master's Thesis: defence before a panel
How you'll learn
The programme is delivered 100% online on the SEIUM campus, with downloadable material, recorded classes and an assigned technical tutor. There are no fixed timetables: you progress at your own pace within each intake, so you can combine it with your job.
Each module combines theory, guided reading of the original standard and applied exercises. The working software is IBM DOORS, LDRA Testbed, Isograph FaultTree+, VectorCAST and SCADE Suite, in free, academic or evaluation versions. Exercises are based on real procedures: drafting certification plans, safety analysis with fault trees and structural coverage verification. Assessment is continuous for each module, plus the final Master's Thesis.
Standards covered: RTCA DO-178C / EUROCAE ED-12C, SAE ARP4754A / EUROCAE ED-79A, SAE ARP4761A, RTCA DO-330, RTCA DO-331, RTCA DO-332, RTCA DO-333, AMC 20-115D.
Build it end to end
Your final project follows the real engineering workflow, step by step, reviewed by your tutor.
Where this takes you
Requirements
- University degree in engineering, science or architecture, or equivalent demonstrable professional experience.
- Internet connection and a computer capable of running the programme's software.
- English sufficient to read technical standards.
Ready to start?
Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.
Frequently asked questions
The programme totals 1,900 hours over 12–14 months. You set your own pace within each intake, and your tutor helps you plan the workload around your job.
You work with IBM DOORS, LDRA Testbed, Isograph FaultTree+, VectorCAST and SCADE Suite, using free, academic or evaluation versions. Your tutor indicates the free alternative wherever one exists.
A SEIUM Institute diploma, awarded on passing the continuous assessment and the Master's Thesis. It is SEIUM's own qualification, not an official state degree; its recognition depends on the programme completed and the regulations of each country.
Yes. Modules passed in a course or postgraduate diploma in the same area are recognised in the higher programme. Ask about the recognition policy when you enrol.
A university degree in engineering, science or architecture (or equivalent professional experience), a computer able to run the software, and English sufficient to read technical standards.
Start dates are set by SEIUM's faculty for each intake. Our admissions team will confirm the next available date when you apply.
Related programmes
Master’s in Human Factors & HMI Engineering for UAM
Online master's programme of 1,900 hours in human factors and HMI engineering for UAM, structured in 12 modules covering aviation human factors, UAM specifics, cockpit ergonomics,…
Master’s in Digital ATM/ATC Engineering
Online master's programme of 1,900 hours in digital ATM/ATC engineering. 12 modules covering ATM system architecture, digital air-ground communications, modern surveillance, trajectory-based operations, SWIM, remote towers,…
Master’s in UTM/U-Space & UAM Traffic Management Engineering
Online master's programme of 1,900 hours in UTM/U-space and UAM traffic management engineering, with 12 modules covering conventional ATM, UTM architecture, the U-space regulatory framework and…
More in Aerospace, UAM, Drones & Space
All Aerospace, UAM, Drones & Space programmes → · How to apply · Fees & financing · Scholarships