Apply now
Master'sRegulation, Safety, RAMS & Homologation Applications open

Master’s in SOTIF & Integrated Functional Safety Engineering

Online master's programme of 1,900 hours in SOTIF and integrated functional safety engineering. 12 modules covering ISO 26262, ISO 21448 (SOTIF), safety analyses, perception limitations, AI safety, safety–cybersecurity integration, verification and validation and safety cases, with an assigned technical tutor.

Duration1900 h
ModeOnline
LanguageEnglish
Start datesSet by the faculty
AwardSEIUM Institute diploma
Enrol now View syllabus Ask an advisor
Virtual lab · try it before you enrol

Take the controls.

Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.

SIM · LIVE ●
Learning outcomes

What you will be able to do

01

Apply ISO 26262 throughout the product life cycle.

02

Perform quantitative and qualitative safety analyses.

03

Apply ISO 21448 to manage functional insufficiencies.

04

Assess the safety of AI-based functions.

05

Integrate functional safety and cybersecurity.

06

Plan the verification and validation of critical functions.

07

Build well-argued safety cases.

Profile

Who it's for

  • Functional safety engineers.
  • SOTIF engineers working on ADAS and automated driving.
  • Functional safety assessors.
  • E/E system architects.
  • Verification and validation engineers.
  • Safety case managers.
  • Engineering or science graduates seeking to enter the automotive sector.
Standards & tools

What you'll work with

  • ISO 26262:2018 (functional safety of road vehicles)
  • ISO 21448:2022 (safety of the intended functionality, SOTIF)
  • ISO/SAE 21434:2021 (road vehicle cybersecurity engineering)
  • ISO/PAS 8800:2024 (safety and artificial intelligence in road vehicles)
  • UL 4600 (safety evaluation of autonomous products)
  • IEC 61508 (general functional safety)
  • Automotive SPICE 4.0 (process assessment model)
  • ISO 34502:2022 (scenario-based safety evaluation for automated driving)
  • medini analyze
  • Ansys SCADE
  • MATLAB/Simulink
  • Vector PREEvision
  • Astah GSN
Syllabus

12 modules · 1900 h

  1. 1.1Complexity of electronic systems
  2. 1.2Systematic and random failures
  3. 1.3Functional insufficiencies and misuse
  4. 1.4Functional safety versus SOTIF
  5. 1.5Safety and cybersecurity
  6. 1.6History of the ISO 26262 standard
  7. 1.7Product liability
  8. 1.8Safety culture
  9. 1.9Cases of field failures
  10. 1.10Case study: analysis of a recall caused by a software fault
  1. 2.1Parts of the standard
  2. 2.2Functional safety management
  3. 2.3Safety plan
  4. 2.4Item definition
  5. 2.5Hazard analysis and risk assessment
  6. 2.6ASIL levels A to D
  7. 2.7Safety goals
  8. 2.8Functional safety concept
  9. 2.9Confirmation measures
  10. 2.10Practical exercise: item definition for a brake-by-wire system
  1. 3.1Technical safety concept
  2. 3.2System architectures
  3. 3.3SPFM and LFM hardware metrics
  4. 3.4PMHF failure probability
  5. 3.5Software requirements
  6. 3.6Software architectural design
  7. 3.7Unit and integration testing
  8. 3.8Software tool qualification
  9. 3.9ASIL decomposition with redundancy
  10. 3.10Lab: calculating hardware metrics
  1. 4.1System and design FMEA
  2. 4.2FMEDA of electronic components
  3. 4.3Fault tree analysis
  4. 4.4Dependent failure analysis
  5. 4.5HAZOP analysis of functions
  6. 4.6Freedom from interference analysis
  7. 4.7STPA analysis of systems
  8. 4.8Integration of analyses
  9. 4.9Analysis tools
  10. 4.10Practical exercise: fault tree for a steering function
  1. 5.1Scope of SOTIF
  2. 5.2Specification insufficiencies
  3. 5.3Performance insufficiencies
  4. 5.4Triggering conditions
  5. 5.5Known and unknown scenarios
  6. 5.6Areas of the scenario model
  7. 5.7Acceptance criteria
  8. 5.8SOTIF validation
  9. 5.9Relationship with ISO 26262
  10. 5.10Lab: identifying triggering conditions for an AEB system
  1. 6.1Camera limitations
  2. 6.2Radar and lidar limitations
  3. 6.3Adverse weather conditions
  4. 6.4Perception edge cases
  5. 6.5Redundancy and diversity
  6. 6.6Performance metrics
  7. 6.7Sensor testing
  8. 6.8Controlled degradation of functions
  9. 6.9Mitigation of insufficiencies
  10. 6.10Case study: SOTIF analysis of night-time pedestrian perception
  1. 7.1Machine learning in safety functions
  2. 7.2The ISO/PAS 8800 specification
  3. 7.3Quality of training data
  4. 7.4Robustness and generalisation
  5. 7.5Model explainability
  6. 7.6Runtime monitoring
  7. 7.7Validation of neural networks
  8. 7.8The AI Act and the automotive sector
  9. 7.9Open challenges in AI
  10. 7.10Practical exercise: data plan for a perception model
  1. 8.1Interfaces between ISO 26262 and ISO/SAE 21434
  2. 8.2Joint safety analyses
  3. 8.3Conflicts between requirements
  4. 8.4Cyberattacks with safety effects
  5. 8.5Team coordination
  6. 8.6Integrated compliance evidence
  7. 8.7Updates and safety
  8. 8.8Integrated safety case
  9. 8.9Industrial examples of integration
  10. 8.10Workshop: joint analysis of a brake control unit
  1. 9.1Verification strategies
  2. 9.2Requirements-based testing
  3. 9.3Fault injection
  4. 9.4Hardware-in-the-loop testing of ECUs
  5. 9.5Scenario simulation
  6. 9.6Track and road testing
  7. 9.7Coverage and completion criteria
  8. 9.8Statistical validation of functions
  9. 9.9Validation reports
  10. 9.10Lab: fault injection in a Simulink model
  1. 10.1Structure of the safety case
  2. 10.2GSN argument notation
  3. 10.3Arguments and evidence
  4. 10.4Argumentation patterns
  5. 10.5Confidence in evidence
  6. 10.6Functional safety assessment
  7. 10.7Functional safety audits
  8. 10.8The UL 4600 standard
  9. 10.9Maintaining the safety case
  10. 10.10Practical exercise: GSN argument for a safety goal
  1. 11.1The Automotive SPICE model
  2. 11.2Requirements management
  3. 11.3Configuration and change management
  4. 11.4Distributed development (DIA)
  5. 11.5Safety competences
  6. 11.6Engineering tools
  7. 11.7Safety in agile methodologies
  8. 11.8Production and operation
  9. 11.9Field monitoring
  10. 11.10Case study: distributed development agreement with a supplier
  1. 12.1Item definition
  2. 12.2HARA and safety goals
  3. 12.3Functional and technical concept
  4. 12.4SOTIF analysis of the item
  5. 12.5Integrated safety analyses
  6. 12.6Verification and validation plan
  7. 12.7Safety case
  8. 12.8Conclusions and future work
  9. 12.9Master's Thesis report
  10. 12.10Master's Thesis: defence before a panel
Methodology, software & labs

How you'll learn

100% online learning on the SEIUM campus, with downloadable material, recorded classes and an assigned technical tutor. There are no fixed timetables: you progress at your own pace within each intake, making it compatible with work.

Each module combines theory, guided reading of the original standard and applied exercises. The working software is medini analyze, Ansys SCADE, MATLAB/Simulink, Vector PREEvision and Astah GSN, in free, academic or evaluation versions. Practical work is based on real procedures: HARA and FMEDA analyses, identification of SOTIF triggering conditions and fault injection in models. Assessment is continuous for each module, plus the final Master's Thesis.

Standards covered: ISO 26262:2018, ISO 21448:2022 (SOTIF), ISO/SAE 21434:2021, ISO/PAS 8800:2024, UL 4600, IEC 61508, Automotive SPICE 4.0 and ISO 34502:2022.

Assigned technical tutor:every module ends with a deliverable that your tutor marks individually.
Standards-based learning:guided reading of ISO 26262, ISO 21448 and ISO/SAE 21434 applied to real cases, not as a theoretical annex.
Industry software:medini analyze, Ansys SCADE, MATLAB/Simulink, Vector PREEvision and Astah GSN, in free, academic or evaluation versions.
Master's Thesis with defence:a complete integrated safety project for an item, from HARA and SOTIF analysis to the verification plan and safety case, defended before a panel.
Flexible format:100% online, no fixed timetables, compatible with full-time work.
Capstone project

Build it end to end

Your final project follows the real engineering workflow, step by step, reviewed by your tutor.

Define the item
Define the item and carry out the HARA to derive ASIL-rated safety goals.
Analyse hardware and faults
Calculate hardware metrics and build fault trees for a safety-critical function.
Identify SOTIF triggering conditions
Identify triggering conditions and performance insufficiencies for an AEB or perception function.
Validate with fault injection
Plan verification and validation, including fault injection in a Simulink model.
Master's Thesis
Deliver an integrated safety project with SOTIF analysis and a GSN safety case, defended before a panel.
Career opportunities

Where this takes you

Functional Safety EngineerSOTIF EngineerFunctional Safety AssessorE/E Systems ArchitectVerification and Validation EngineerSafety Case Manager
Admissions & scholarships

Requirements

  • A university degree in engineering, science or architecture, or equivalent demonstrable professional experience.
  • An internet connection and a computer capable of running the programme software.
  • English sufficient to read technical standards.

Ready to start?

Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.

Apply now Scholarships
FAQ

Frequently asked questions

The programme totals 1,900 hours over 12–14 months. You set your own pace within each intake, and your tutor helps you plan the workload around your job.

You work with medini analyze, Ansys SCADE, MATLAB/Simulink, Vector PREEvision and Astah GSN, using free, academic or evaluation versions. Your tutor indicates the free alternative wherever one exists.

A SEIUM Institute diploma, awarded on passing the continuous assessment and the Master's Thesis. It is SEIUM's own qualification, not an official state degree; its recognition depends on the programme completed and the regulations of each country.

Yes. Modules passed in a course or postgraduate diploma in the same area are recognised in the higher programme. Ask about the recognition policy when you enrol.

A university degree in engineering, science or architecture (or equivalent professional experience), a computer able to run the programme software and English sufficient to read technical standards.

Start dates are set by SEIUM's faculty for each intake. Our admissions team will confirm the next available date when you apply.

Keep exploring

Related programmes

See all in Regulation, Safety, RAMS & Homologation
Master's9,970 $

Master’s in Multisector Engineering (UNECE/EASA/IMO/IEC) with an International Focus

Online master's programme of 1,900 hours in multi-sector engineering (UNECE/EASA/IMO/IEC) with an international focus, structured in 12 modules covering international technical governance, the UNECE vehicle framework,…

1900 hOnlineRegulation, Safety, RAMS & Homologation
Master's9,970 $

Master’s in Global NCAP Strategy and Design for Stars Euro/US/Latin/ANCAP/JNCAP/C-NCAP

Online master's programme of 1,900 hours in global NCAP strategy and design for stars across Euro NCAP, US NCAP, Latin NCAP, ANCAP, JNCAP and C-NCAP. 12…

12–14 monthsOnlineRegulation, Safety, RAMS & Homologation
Master's6,610 $

Master’s in ADAS and Autonomous Driving: Regulations & Testing

Online master's programme of 1,900 hours in ADAS and autonomous driving: regulations and testing. 12 modules covering automation fundamentals, international ADAS regulations, sensors and perception, functional…

12–14 monthsOnlineRegulation, Safety, RAMS & Homologation
Master’s in SOTIF & Integrated Functional Safety EngineeringEnrol
Related programmes

More in Regulation, Safety, RAMS & Homologation

Master’s in RAMS Engineering for TransportView programme →Master’s in EASA Engineering (Open/Specific/Certified, SC-VTOL), FAA Part 107/135, Local CAAs; U-Space/UTM.View programme →Master’s in LATAM Type-Approval EngineeringView programme →Master’s in Transport of Dangerous Goods and Batteries: ADR/RID/IMDG/IATA-DGR, UN 38.3, Marking and PackagingView programme →Master’s in HV Safety (UN R100), EMC (R10), Connectors/Standards (IEC/SAE/GB/T, ISO 15118), OCPP and Battery Passport EngineeringView programme →Master’s in Route Engineering: EU/US/Asia Key Differences.View programme →

All Regulation, Safety, RAMS & Homologation programmes → · How to apply · Fees & financing · Scholarships

Scroll to Top
SEIUM – Institute of Advanced Engineering
Powered by  GDPR Cookie Compliance
Privacy Overview

This website uses cookies so that we can provide you with the best user experience possible. Cookie information is stored in your browser and performs functions such as recognising you when you return to our website and helping our team to understand which sections of the website you find most interesting and useful.