Safety Management Workflows#

Create/Maintain Safety Plan
status: valid
The Safety Manager is responsible for the planning and coordination of the safety activities for the platform.
The Safety Manager creates and maintains the safety plan.
For this a template exists to guide the creator of the safety plan.
Create Component Classification
status: valid
The Safety Manager shall approve the OSS component classification performed by an expert on this component.
Create/Maintain Safety Package
status: valid
The Safety Manager in the project is NOT responsible to provide the argument for the achievement of functional safety.
But the Safety Manager creates and maintains the safety package in the sense of a collection of safety related work products.
The generation and the maintainance of this draft safety package shall be automtated as much as possible.
It does not contain the final argumentation of the safety of the product.
As the safety package is only a collection of work products, the safety plan (template) can be used for documentation.
Perform Safety Audit
status: valid
The external auditor is responsible to perform a safety audit.
The Safety Manager and the process community shall support the external auditor during this.
The Project Manager and and the Safety Manager shall approve the audit report.
Perform Formal Reviews
status: valid
The external auditor is responsible to perform the formal reviews on safety plan, safety package and safety analysis.
The Safety Manager shall support the external auditor during the reviews.
The Project Manager and and the Safety Manager shall approve the formal reviews.
Therefore a checklists exist to guide the creator of the relevant safety documents.
Create/Maintain Safety Manual
status: valid
The Safety Engineer collects the necessary input for the safety manuals on platform and module level and documents it.
The safety manager makes sure all items are in valid state for a release of the safety manual.
Also for the safety manual a template exists as a guidance.
Monitor/Verify Safety
status: valid
The Safety Manager is responsible for the monitoring of the safety activities against the safety plan.
The Safety Manager is responsible to verify, that the preconditions for the release, which are part of the release notes, are fulfilled.
The Safety Manager is responsible to verify the correctness, completeness and consistency of the release notes.
Impact Analysis of Change Request
status: valid
In accordance with ISO 26262-2:2018 section 5.2.2.3 d/e (Impact Analysis), the project implements a dedicated workflow for analyzing change requests.
The Safety Manager is responsible for ensuring that each change request is analyzed for its impact on safety, as required by ISO 26262-2:2018.
Impact analysis is performed at the element level (e.g., module or component) rather than the item (system) level, reflecting the modular architecture of the platform. This tailoring is documented in the safety plan and justified by the project structure and scope.
The analysis includes:
- Reviewing the change request and its context
- Assessing the impact on affected elements, safety requirements, and work products
- Documenting the rationale for decisions regarding acceptance, implementation, or rejection of the change
The outcome is a change impact analysis report and a documented decision, which are reviewed and approved as part of the Safety Management process.