Master’s in Functional Safety and SOTIF for Off-Highway Engineering
Online master's programme of 1,900 hours in functional safety and SOTIF engineering for off-highway machinery, structured in 12 modules covering ISO 13849-1, ISO 25119 and ISO 19014, hazard analysis, safety architectures, performance level calculation, safety software, SOTIF, artificial intelligence, verification and validation and cybersecurity, with an assigned technical tutor.
Take the controls.
Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.
What you will be able to do
Apply the functional safety life cycle to mobile machinery.
Carry out hazard analyses and determine required levels.
Design redundant safety architectures.
Calculate performance levels with recognised tools.
Develop safety software in compliance with standards.
Apply SOTIF to perception and autonomy functions.
Manage functional safety alongside cybersecurity.
Who it's for
- Functional safety engineers.
- Safety software engineers.
- SOTIF analysts.
- Functional safety auditors.
- Verification and validation engineers.
- Product safety managers.
- Engineering or science graduates seeking to enter the construction machinery sector.
What you'll work with
- UNE-EN ISO 13849-1 (safety of control systems)
- ISO 25119 (functional safety in agricultural machinery)
- ISO 19014 (functional safety of earth-moving machinery)
- IEC 61508 (functional safety)
- ISO 21448 (safety of the intended functionality)
- ISO/PAS 8800 (safety and artificial intelligence in vehicles)
- ISO 26262 (functional safety of road vehicles)
- IEC 62443 (industrial cybersecurity)
- SISTEMA (IFA)
- Ansys medini analyze
- MATLAB/Simulink
- dSPACE
12 modules · 1900 h
1.1Concepts of risk, hazard and safety1.2Random and systematic failures1.3Safety life cycle1.4Generic and sector-specific standards1.5ISO 13849 versus ISO 251191.6ISO 19014 in earth-moving1.7Relationship with ISO 262621.8Functional safety and CE marking1.9Organisation and competencies1.10Case study: safety functions of a telehandler
2.1Identification of functions2.2Machine operating situations2.3HAZOP analysis of functions2.4Severity, exposure and controllability2.5Determination of PLr2.6Determination of AgPLr2.7Determination of MPLr2.8Safety goals2.9Documentation of the analysis2.10Lab: hazard analysis of an electrohydraulic steering system
3.1Categories B, 1, 2, 3 and 43.2Redundancy and diversity3.3Diagnostics and coverage3.4Mean time to dangerous failure3.5Common cause failures3.6Architectures with monitoring3.7Redundant sensors and plausibility3.8Safety actuators and valves3.9Architecture design3.10Practical exercise: Category 3 architecture for a brake
4.1Component reliability data4.2B10d values of components4.3Calculation of MTTFd4.4Diagnostic coverage4.5Calculation of the achieved level4.6Using the SISTEMA tool4.7Calculations according to ISO 251194.8Verification of requirements4.9Calculation report4.10Lab: SISTEMA calculation of a safety function
5.1Software life cycle5.2Safety software requirements5.3Languages and coding standards5.4MISRA C rules5.5Software architecture5.6Unit and integration testing5.7Qualification of software tools5.8Configuration management5.9Third-party software5.10Practical exercise: code review according to MISRA C
6.1Design FMEA6.2Failure modes, effects and diagnostic analysis6.3Fault tree analysis6.4Reliability block diagram analysis6.5Common cause analysis6.6Dependency analysis6.7Analysis tools6.8Integration of results6.9Independent review of analyses6.10Case study: fault tree for an unintended movement
7.1SOTIF concept according to ISO 214487.2Limitations of sensors and algorithms7.3Specification insufficiencies7.4Reasonably foreseeable misuse7.5Known and unknown scenarios7.6Triggering condition analysis7.7Functional improvement measures7.8Scenario validation7.9Acceptance argument7.10Lab: SOTIF analysis of person detection
8.1Risks of machine-learning components8.2Data quality8.3Model robustness8.4Model explainability8.5Technical specification ISO/PAS 88008.6European Artificial Intelligence Act8.7Runtime monitoring8.8Statistical validation of performance8.9Supervisor architectures8.10Case study: safety supervisor for perception
9.1Verification plan9.2Fault injection testing9.3Safety hardware-in-the-loop testing9.4On-machine testing9.5Validation of reaction times9.6Requirements coverage9.7Traceability between requirements and tests9.8Management of non-conformities9.9Validation report9.10Practical exercise: fault injection in a controller
10.1Safety plan10.2Roles and competencies10.3Safety assessments10.4Independent safety audits10.5Suppliers and development interface agreements10.6Change management10.7Production and service10.8Decommissioning and end of life10.9Safety culture10.10Case study: functional safety plan for a project
11.1Interaction between safety and cybersecurity11.2Attacks affecting safety functions11.3Machinery Regulation requirements11.4Industrial cybersecurity IEC 6244311.5Threat analysis and risk assessment11.6Combined technical measures11.7Secure software updates11.8Joint validation of both domains11.9Integrated safety documentation11.10Case study: combined analysis of a remote control
12.1Selection of machine and functions12.2Hazard analysis12.3Safety requirements12.4System architecture12.5Performance level calculation12.6SOTIF analysis of the system12.7Verification and validation plan12.8Safety case12.9Master's Thesis report12.10Master's Thesis: defence before a panel
How you'll learn
The programme is delivered 100% online on the SEIUM campus, with downloadable material, recorded classes and an assigned technical tutor. There are no fixed timetables: you progress at your own pace within the intake, making it compatible with work.
Each module combines theory, guided reading of the original standard and applied exercises. The working software is SISTEMA (IFA), Ansys medini analyze, MATLAB/Simulink and dSPACE, in free, academic or evaluation versions. Testing is studied through real procedures for performance level calculation, fault tree analysis and fault injection testing. Assessment is continuous by module plus the final Master's Thesis.
Standards covered: UNE-EN ISO 13849-1, ISO 25119, ISO 19014, IEC 61508, ISO 21448, ISO/PAS 8800, ISO 26262, IEC 62443.
Build it end to end
Your final project follows the real engineering workflow, step by step, reviewed by your tutor.
Where this takes you
Requirements
- University degree in engineering, science or architecture, or equivalent demonstrable professional experience.
- Internet connection and a computer capable of running the programme's software.
- English sufficient to read technical standards.
Ready to start?
Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.
Frequently asked questions
The programme totals 1,900 hours over 12–14 months. You set your own pace within each intake, and your tutor helps you plan the workload around your job.
You work with SISTEMA (IFA), Ansys medini analyze, MATLAB/Simulink and dSPACE, using free, academic or evaluation versions. Your tutor indicates the free alternative wherever one exists.
A SEIUM Institute diploma, awarded on passing the continuous assessment and the Master's Thesis. It is SEIUM's own qualification, not an official state degree; its recognition depends on the programme completed and the regulations of each country.
Yes. Modules passed in a course or postgraduate diploma in the same area are recognised in the higher programme. Ask about the recognition policy when you enrol.
A university degree in engineering, science or architecture (or equivalent professional experience), a computer able to run the software and English sufficient to read technical standards.
Start dates are set by SEIUM's faculty for each intake. Our admissions team will confirm the next available date when you apply.
Related programmes
Master’s in Terramechanics and Traction on Natural Soils Engineering
Online master's programme of 1,900 hours in terramechanics and traction on natural soils, structured in 12 modules covering natural soils and their variability, soil strength, the…
Master’s in Axles, Differentials and Torque Vectoring 4×4/6×6/8×8 Engineering
Online master's programme of 1,900 hours in axles, differentials and torque vectoring engineering for 4×4, 6×6 and 8×8 vehicles, structured in 12 modules covering multi-axle drive…
Master’s in Resilient GNSS-Free Localisation Engineering
Online master's programme of 1,900 hours in resilient GNSS-denied localisation engineering, with 12 modules covering inertial navigation, odometry, filtering and estimator fusion, LiDAR, visual and radar…
More in Off-Road, Special Vehicles & Machinery
All Off-Road, Special Vehicles & Machinery programmes → · How to apply · Fees & financing · Scholarships