Master’s in ODD Definition and Operational Risk Management Engineering
Online master's programme of 1,900 hours in ODD definition and operational risk management engineering: 12 modules covering formal ODD specification, operational risk analysis, real-time ODD monitoring, ODD exits, safety management systems, indicators, incident management, ODD expansion, regulation and safety culture, with an assigned technical tutor.
Take the controls.
Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.
What you will be able to do
Formally specify the ODD of an automated system.
Analyse operational risks using structured techniques.
Design real-time ODD monitoring.
Manage ODD exits safely.
Implement operational safety management systems.
Define indicators and manage incidents.
Develop an ODD and operational risk management project.
Who it's for
- Operational safety managers.
- ODD engineers.
- Risk analysts.
- Autonomous fleet operations managers.
- Incident investigators.
- Regulatory specialists.
- Engineering or science graduates seeking to enter autonomous driving.
What you'll work with
- ISO 34503 (ODD taxonomy for automated driving systems)
- BSI PAS 1883 (ODD specification taxonomy)
- ISO 31000 (risk management guidelines)
- ISO 21448 (SOTIF — safety of the intended functionality)
- Implementing Regulation (EU) 2022/1426 (type approval of automated driving systems)
- UL 4600 (safety evaluation of autonomous products)
- ISO 26262 (road vehicle functional safety)
- ISO/IEC 31010 (risk assessment techniques)
- Python
- QGIS
- BowTieXP
- Power BI
- CARLA
12 modules · 1900 h
1.1Relationship between ODD, safety and operations1.2Operational risk in autonomous services1.3Differences between design risk and operational risk1.4ISO 34503 and PAS 1883 standards1.5Risk management under ISO 310001.6Safety management systems1.7Experience from aviation and rail1.8Operator responsibilities1.9Landmark operational incidents1.10Case study: analysis of an operational incident
2.1Taxonomy of ODD attributes2.2Scenery, environment and dynamics2.3Infrastructure and road attributes2.4Weather and lighting conditions2.5Traffic and road-user attributes2.6Quantitative specification of limits2.7Specification languages2.8Traceability between ODD and requirements2.9ODD review and versioning2.10Lab: formal ODD in a structured format
3.1Identification of operational hazards3.2Bow-tie analysis of threats and consequences3.3STPA analysis of operations3.4Operational risk matrices3.5ALARP acceptance criteria3.6Prevention and mitigation barriers3.7Human factors risks3.8Infrastructure risks3.9Operational risk register3.10Practical exercise: bow-tie for ODD exit
4.1Sensors for ODD conditions4.2Weather services and alerts4.3Traffic monitoring4.4Detection of roadworks on the route4.5Dynamic geofences and restricted zones4.6Exit decision logic4.7Independent ODD monitors4.8Logging and traceability4.9Monitor validation4.10Workshop: ODD monitor with open data
5.1Classification of ODD exits5.2Transition to the driver5.3Minimal risk manoeuvres5.4Remote operator assistance5.5Service recovery5.6Communication to passengers5.7Coordination with authorities5.8Analysis of exits5.9Reducing their frequency5.10Lab: simulation of ODD exits
6.1Structure of an SMS6.2Safety policy6.3Safety risk management6.4Safety assurance6.5Safety promotion6.6Just culture and reporting6.7Safety performance indicators (SPIs)6.8Management of change6.9Internal SMS audits6.10Practical exercise: SMS for a robotaxi operator
7.1Leading and lagging indicators7.2Event rate per kilometre7.3Disengagements and interventions7.4Near-miss logging7.5Exploiting fleet data7.6Operational data quality7.7Safety dashboards7.8Comparison with a human benchmark7.9Reports to authorities7.10Workshop: safety indicator dashboard
8.1Incident classification8.2Immediate incident response8.3Incident investigation methodology8.4Root cause analysis8.5Corrective and preventive actions8.6External and media communication8.7Regulatory incident reporting8.8Organisational learning after incidents8.9Crisis management8.10Case study: investigation of an incident
9.1Gradual expansion strategies9.2Evidence required to expand9.3Validation of new conditions9.4Risk management during expansion9.5Staged deployment by zone9.6Post-expansion monitoring9.7Communicating changes9.8Regulatory approvals for expansion9.9Lessons from operators9.10Practical exercise: expansion case to rain
10.1Requirements of the European ADS Regulation10.2In-service monitoring10.3Reporting requirements10.4Oversight by authorities10.5Regulation of operators in the US10.6Regulation in China10.7Regulatory audits of the operator10.8Applicable penalty regime10.9Trends in regulatory oversight10.10Workshop: in-service monitoring plan
11.1Organisational structure for safety11.2Roles and responsibilities11.3Staff training11.4Safety culture11.5Internal safety communication11.6Independence of the safety function11.7Supplier management11.8Safety resources and budget11.9Continuous organisational improvement11.10Case study: designing a safety organisation
12.1Formal ODD definition12.2Operational risk analysis12.3Monitoring design12.4Exit management12.5SMS design12.6Safety indicators12.7Expansion plan12.8Conclusions and future work12.9Master's Thesis report12.10Master's Thesis: defence before a panel
How you'll learn
100% online training on the SEIUM campus, with downloadable material, recorded classes and an assigned technical tutor. There are no fixed timetables: you progress at your own pace within each intake, making it compatible with full-time work.
Each module combines theory, guided reading of the original standards and applied exercises. The working software is Python, QGIS, BowTieXP, Power BI and CARLA, in free, academic or evaluation versions. Work is based on real procedures for bow-tie analysis of operational risks, ODD monitoring with real-time data and investigation of operational incidents. Assessment is continuous by module, plus the final Master's Thesis.
Standards covered: ISO 34503, BSI PAS 1883, ISO 31000, ISO 21448, Implementing Regulation (EU) 2022/1426 (ADS), UL 4600, ISO 26262, ISO/IEC 31010.
Build it end to end
Your final project follows the real engineering workflow, step by step, reviewed by your tutor.
Where this takes you
Requirements
- A university degree in engineering, science or architecture, or equivalent demonstrable professional experience.
- An internet connection and a computer capable of running the programme's software.
- English sufficient to read technical standards.
Ready to start?
Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.
Frequently asked questions
The programme totals 1,900 hours over 12–14 months. You set your own pace within each intake, and your tutor helps you plan the workload around your job.
You work with Python, QGIS, BowTieXP, Power BI and CARLA, using free, academic or evaluation versions. Your tutor indicates the free alternative wherever one exists.
A SEIUM Institute diploma, awarded on passing the continuous assessment and the Master's Thesis. It is SEIUM's own qualification, not an official state degree; its recognition depends on the programme completed and the regulations of each country.
Yes. Modules passed in a course or postgraduate diploma in the same area are recognised in the higher programme. Ask about the recognition policy when you enrol.
A university degree in engineering, science or architecture (or equivalent professional experience), a computer able to run the programme's software and English sufficient to read technical standards.
Start dates are set by SEIUM's faculty for each intake. Our admissions team will confirm the next available date when you apply.
Related programmes
Master’s in Heterogeneous Computing for AD (CPU/GPU/NPU)
Online master's programme of 1,900 hours in heterogeneous computing for autonomous driving (CPU/GPU/NPU). 12 modules covering GPU programming, neural network inference, task scheduling, memory, power and…
Master’s in Functional Safety, Cyber and Compliance Engineering
Online master's programme of 1,900 hours in functional safety, cybersecurity and compliance engineering, structured in 12 modules covering ISO 26262, SOTIF under ISO 21448, cybersecurity under…
Master’s in Autonomous Urban Buses and Shuttles Engineering
Online master's programme of 1,900 hours in urban autonomous bus and shuttle engineering: 12 modules covering vehicle platforms, urban perception and localisation, bus planning and control,…
More in Autonomous, ADAS & Software-Defined Vehicle
All Autonomous, ADAS & Software-Defined Vehicle programmes → · How to apply · Fees & financing · Scholarships