Master'sOff-Road, Special Vehicles & Machinery Applications open

Master’s in Functional Safety and SOTIF for Off-Highway Engineering

Online master's programme of 1,900 hours in functional safety and SOTIF engineering for off-highway machinery, structured in 12 modules covering ISO 13849-1, ISO 25119 and ISO 19014, hazard analysis, safety architectures, performance level calculation, safety software, SOTIF, artificial intelligence, verification and validation and cybersecurity, with an assigned technical tutor.

Duration1900 h
ModeOnline
LanguageEnglish
Start datesSet by the faculty
AwardSEIUM Institute diploma
Virtual lab · try it before you enrol

Take the controls.

Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.

SIM · LIVE ●
Learning outcomes

What you will be able to do

01

Apply the functional safety life cycle to mobile machinery.

02

Carry out hazard analyses and determine required levels.

03

Design redundant safety architectures.

04

Calculate performance levels with recognised tools.

05

Develop safety software in compliance with standards.

06

Apply SOTIF to perception and autonomy functions.

07

Manage functional safety alongside cybersecurity.

Profile

Who it's for

  • Functional safety engineers.
  • Safety software engineers.
  • SOTIF analysts.
  • Functional safety auditors.
  • Verification and validation engineers.
  • Product safety managers.
  • Engineering or science graduates seeking to enter the construction machinery sector.
Standards & tools

What you'll work with

  • UNE-EN ISO 13849-1 (safety of control systems)
  • ISO 25119 (functional safety in agricultural machinery)
  • ISO 19014 (functional safety of earth-moving machinery)
  • IEC 61508 (functional safety)
  • ISO 21448 (safety of the intended functionality)
  • ISO/PAS 8800 (safety and artificial intelligence in vehicles)
  • ISO 26262 (functional safety of road vehicles)
  • IEC 62443 (industrial cybersecurity)
  • SISTEMA (IFA)
  • Ansys medini analyze
  • MATLAB/Simulink
  • dSPACE
Syllabus

12 modules · 1900 h

  1. 1.1Concepts of risk, hazard and safety
  2. 1.2Random and systematic failures
  3. 1.3Safety life cycle
  4. 1.4Generic and sector-specific standards
  5. 1.5ISO 13849 versus ISO 25119
  6. 1.6ISO 19014 in earth-moving
  7. 1.7Relationship with ISO 26262
  8. 1.8Functional safety and CE marking
  9. 1.9Organisation and competencies
  10. 1.10Case study: safety functions of a telehandler
  1. 2.1Identification of functions
  2. 2.2Machine operating situations
  3. 2.3HAZOP analysis of functions
  4. 2.4Severity, exposure and controllability
  5. 2.5Determination of PLr
  6. 2.6Determination of AgPLr
  7. 2.7Determination of MPLr
  8. 2.8Safety goals
  9. 2.9Documentation of the analysis
  10. 2.10Lab: hazard analysis of an electrohydraulic steering system
  1. 3.1Categories B, 1, 2, 3 and 4
  2. 3.2Redundancy and diversity
  3. 3.3Diagnostics and coverage
  4. 3.4Mean time to dangerous failure
  5. 3.5Common cause failures
  6. 3.6Architectures with monitoring
  7. 3.7Redundant sensors and plausibility
  8. 3.8Safety actuators and valves
  9. 3.9Architecture design
  10. 3.10Practical exercise: Category 3 architecture for a brake
  1. 4.1Component reliability data
  2. 4.2B10d values of components
  3. 4.3Calculation of MTTFd
  4. 4.4Diagnostic coverage
  5. 4.5Calculation of the achieved level
  6. 4.6Using the SISTEMA tool
  7. 4.7Calculations according to ISO 25119
  8. 4.8Verification of requirements
  9. 4.9Calculation report
  10. 4.10Lab: SISTEMA calculation of a safety function
  1. 5.1Software life cycle
  2. 5.2Safety software requirements
  3. 5.3Languages and coding standards
  4. 5.4MISRA C rules
  5. 5.5Software architecture
  6. 5.6Unit and integration testing
  7. 5.7Qualification of software tools
  8. 5.8Configuration management
  9. 5.9Third-party software
  10. 5.10Practical exercise: code review according to MISRA C
  1. 6.1Design FMEA
  2. 6.2Failure modes, effects and diagnostic analysis
  3. 6.3Fault tree analysis
  4. 6.4Reliability block diagram analysis
  5. 6.5Common cause analysis
  6. 6.6Dependency analysis
  7. 6.7Analysis tools
  8. 6.8Integration of results
  9. 6.9Independent review of analyses
  10. 6.10Case study: fault tree for an unintended movement
  1. 7.1SOTIF concept according to ISO 21448
  2. 7.2Limitations of sensors and algorithms
  3. 7.3Specification insufficiencies
  4. 7.4Reasonably foreseeable misuse
  5. 7.5Known and unknown scenarios
  6. 7.6Triggering condition analysis
  7. 7.7Functional improvement measures
  8. 7.8Scenario validation
  9. 7.9Acceptance argument
  10. 7.10Lab: SOTIF analysis of person detection
  1. 8.1Risks of machine-learning components
  2. 8.2Data quality
  3. 8.3Model robustness
  4. 8.4Model explainability
  5. 8.5Technical specification ISO/PAS 8800
  6. 8.6European Artificial Intelligence Act
  7. 8.7Runtime monitoring
  8. 8.8Statistical validation of performance
  9. 8.9Supervisor architectures
  10. 8.10Case study: safety supervisor for perception
  1. 9.1Verification plan
  2. 9.2Fault injection testing
  3. 9.3Safety hardware-in-the-loop testing
  4. 9.4On-machine testing
  5. 9.5Validation of reaction times
  6. 9.6Requirements coverage
  7. 9.7Traceability between requirements and tests
  8. 9.8Management of non-conformities
  9. 9.9Validation report
  10. 9.10Practical exercise: fault injection in a controller
  1. 10.1Safety plan
  2. 10.2Roles and competencies
  3. 10.3Safety assessments
  4. 10.4Independent safety audits
  5. 10.5Suppliers and development interface agreements
  6. 10.6Change management
  7. 10.7Production and service
  8. 10.8Decommissioning and end of life
  9. 10.9Safety culture
  10. 10.10Case study: functional safety plan for a project
  1. 11.1Interaction between safety and cybersecurity
  2. 11.2Attacks affecting safety functions
  3. 11.3Machinery Regulation requirements
  4. 11.4Industrial cybersecurity IEC 62443
  5. 11.5Threat analysis and risk assessment
  6. 11.6Combined technical measures
  7. 11.7Secure software updates
  8. 11.8Joint validation of both domains
  9. 11.9Integrated safety documentation
  10. 11.10Case study: combined analysis of a remote control
  1. 12.1Selection of machine and functions
  2. 12.2Hazard analysis
  3. 12.3Safety requirements
  4. 12.4System architecture
  5. 12.5Performance level calculation
  6. 12.6SOTIF analysis of the system
  7. 12.7Verification and validation plan
  8. 12.8Safety case
  9. 12.9Master's Thesis report
  10. 12.10Master's Thesis: defence before a panel
Methodology, software & labs

How you'll learn

The programme is delivered 100% online on the SEIUM campus, with downloadable material, recorded classes and an assigned technical tutor. There are no fixed timetables: you progress at your own pace within the intake, making it compatible with work.

Each module combines theory, guided reading of the original standard and applied exercises. The working software is SISTEMA (IFA), Ansys medini analyze, MATLAB/Simulink and dSPACE, in free, academic or evaluation versions. Testing is studied through real procedures for performance level calculation, fault tree analysis and fault injection testing. Assessment is continuous by module plus the final Master's Thesis.

Standards covered: UNE-EN ISO 13849-1, ISO 25119, ISO 19014, IEC 61508, ISO 21448, ISO/PAS 8800, ISO 26262, IEC 62443.

Assigned technical tutor:every module ends with a deliverable that your tutor marks individually.
Standards-based learning:guided reading of UNE-EN ISO 13849-1, ISO 25119, ISO 19014 and ISO 21448 applied to real cases, not as a theoretical annex.
Industry software:SISTEMA (IFA), Ansys medini analyze, MATLAB/Simulink and dSPACE, in free, academic or evaluation versions.
Master's Thesis with defence:A complete functional safety and SOTIF project for an off-highway machine, from hazard analysis to the safety case, defended before a panel.
Flexible format:100% online, no fixed timetables, compatible with full-time work.
Capstone project

Build it end to end

Your final project follows the real engineering workflow, step by step, reviewed by your tutor.

Hazard analysis
Select the machine and functions and carry out the hazard analysis.
Safety requirements and architecture
Define the safety requirements and the system architecture.
Performance level and SOTIF
Calculate the performance level and analyse the system for SOTIF.
V&V plan and safety case
Draw up the verification and validation plan and the safety case.
Master's Thesis
Present the complete functional safety project, defended before a panel.
Career opportunities

Where this takes you

Functional safety engineerSafety software engineerSOTIF analystFunctional safety auditorVerification and validation engineerProduct safety manager
Admissions & scholarships

Requirements

  • University degree in engineering, science or architecture, or equivalent demonstrable professional experience.
  • Internet connection and a computer capable of running the programme's software.
  • English sufficient to read technical standards.

Ready to start?

Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.

FAQ

Frequently asked questions

The programme totals 1,900 hours over 12–14 months. You set your own pace within each intake, and your tutor helps you plan the workload around your job.

You work with SISTEMA (IFA), Ansys medini analyze, MATLAB/Simulink and dSPACE, using free, academic or evaluation versions. Your tutor indicates the free alternative wherever one exists.

A SEIUM Institute diploma, awarded on passing the continuous assessment and the Master's Thesis. It is SEIUM's own qualification, not an official state degree; its recognition depends on the programme completed and the regulations of each country.

Yes. Modules passed in a course or postgraduate diploma in the same area are recognised in the higher programme. Ask about the recognition policy when you enrol.

A university degree in engineering, science or architecture (or equivalent professional experience), a computer able to run the software and English sufficient to read technical standards.

Start dates are set by SEIUM's faculty for each intake. Our admissions team will confirm the next available date when you apply.

Master’s in Functional Safety and SOTIF for Off-Highway EngineeringEnrol
Scroll to Top
SEIUM – Institute of Advanced Engineering
Privacy Overview

This website uses cookies so that we can provide you with the best user experience possible. Cookie information is stored in your browser and performs functions such as recognising you when you return to our website and helping our team to understand which sections of the website you find most interesting and useful.