Item Definition & Safety Planning

Stages

1. Item Definition & Safety Planning (this stage)^A
2. Hazard Analysis & Safety Goals^AO
3. Functional & Technical Safety Concept^AO

Product, safety and quality milestones

• Concept approval (CA)

Chip milestones

• Safety plan agreed (SPA)
• Safety goals agreed (SGA)
• Safety concept approved (SCA)
• TR1: Automotive technology readiness (ATR) (technical readiness review TR1)

Disciplines

• Product and customer program management^A
  • Item Definition & Safety Planning: maturity 0.0, Planned. Business case approved, with the development interface agreement and the mission profile agreed with the lead customer.^A
  • Hazard Analysis & Safety Goals: maturity 0.3, Early draft. Customer requirements specification final against the agreed safety goals, with customer program reviews running.
  • Functional & Technical Safety Concept: maturity 0.5, Draft. Long-term supply plan drafted on the process and package assessed at technology readiness; customer program reviews continue while the chip is designed.
• Functional safety management^AO
  • Item Definition & Safety Planning: maturity 0.0, Planned. Safety plan approved, with the confirmation measures and their independence named.^A; Safety plan baselined (milestone for one item)
  • Hazard Analysis & Safety Goals: maturity 0.3, Early draft. Confirmation measures planned in detail, and the hazard analysis confirmation reviewed.
  • Functional & Technical Safety Concept: maturity 0.5, Draft. Confirmation reviews held on the safety concepts, the technology readiness and the safety analyses, with findings tracked to closure.
• Safety engineering and analysis^O
  • Item Definition & Safety Planning: maturity 0.0, Planned. Item definition or out-of-context assumptions reviewed, and the hazard analysis planned.
  • Hazard Analysis & Safety Goals: maturity 0.3, Early draft. Hazard analysis complete and confirmation reviewed, with the safety goals and their ASILs agreed; the safety concept is outlined.^A; Safety goals baselined (milestone for one item)
  • Functional & Technical Safety Concept: maturity 0.5, Draft. Functional and technical safety concepts and the hardware safety requirements approved; the FMEDA, fault tree and dependent failure analyses are drafted on the architecture.
• Chip and safety architecture^A
  • Item Definition & Safety Planning: maturity 0.0, Planned. Architecture concept outlined for the business case, with its safety partitioning options.
  • Hazard Analysis & Safety Goals: maturity 0.3, Early draft. Preferred architecture chosen against the safety goals and their ASILs, with the main safety mechanism families named.
  • Functional & Technical Safety Concept: maturity 0.5, Draft. Architecture and safety mechanism specifications final against the hardware safety requirements, and the technology readiness assessed.
• Hardware design^A
  • Item Definition & Safety Planning: maturity 0.0, Planned. Design lead named, the blocks to reuse or build listed and the design effort estimated for the business case; no design work yet.
  • Hazard Analysis & Safety Goals: maturity 0.3, Early draft. Design approach outlined from the architecture concept: the blocks to reuse, the expected safety mechanism families, and coding and review rules with safety items.
  • Functional & Technical Safety Concept: maturity 0.5, Draft. Base RTL and reused blocks in place, and the hardware design description drafted against the approved safety concept.
• Safety verification^D
  • Item Definition & Safety Planning: maturity 0.0, Planned. Verification lead named, and the verification and fault injection effort for the target ASIL estimated and listed in the safety plan; no environment yet.
  • Hazard Analysis & Safety Goals: maturity 0.3, Early draft. Verification strategy outlined with the design approach: the methods for each ASIL, the fault injection approach and the tools that need confidence evidence.
  • Functional & Technical Safety Concept: maturity 0.5, Draft. Safety verification plan drafted from the hardware safety requirements, with the testbench, checkers and fault injection environment built alongside the RTL.
• Cybersecurity^A
  • Item Definition & Safety Planning: maturity 0.0, Planned. Cybersecurity plan agreed alongside the safety plan.
  • Hazard Analysis & Safety Goals: maturity 0.3, Early draft. Threat analysis and risk assessment under way on the item definition, with the assets and attack paths outlined.
  • Functional & Technical Safety Concept: maturity 0.5, Draft. Threat analysis and risk assessment complete and the cybersecurity requirements final; security verification is planned against them.^A
• DFT and in-system test^A
  • Hazard Analysis & Safety Goals: maturity 0.0, Planned. DFT lead named, and the in-system test the expected ASIL calls for, such as start-up and periodic self-tests, estimated with the production test effort; no test concept yet.
  • Functional & Technical Safety Concept: maturity 0.3, Early draft. In-system test concept outlined from the technical safety concept: start-up and periodic self-tests, and the production test approach.
• Physical design and reliability sign-off^A
  • Functional & Technical Safety Concept: maturity 0.0, Planned. Process, die size and package feasibility checked with the architects for technology readiness, and the implementation effort estimated; no floorplan yet.
• Safety software and drivers^A
  • Functional & Technical Safety Concept: maturity 0.0, Planned. Software safety requirements derived in outline from the technical safety concept.
• Qualification and reliability^A
  • Item Definition & Safety Planning: maturity 0.0, Planned. Qualification needs set from the mission profile and the temperature grade.
  • Hazard Analysis & Safety Goals: maturity 0.0, Planned. Qualification needs set from the mission profile and the temperature grade.
  • Functional & Technical Safety Concept: maturity 0.3, Early draft. Qualification plan outlined on the process, package and reused IP qualification status assessed at technology readiness.
• Automotive quality and PPAP^A
  • Item Definition & Safety Planning: maturity 0.0, Planned. Quality planning timeline set against the product quality plan.
  • Hazard Analysis & Safety Goals: maturity 0.0, Planned. Quality planning timeline set against the product quality plan.
  • Functional & Technical Safety Concept: maturity 0.3, Early draft. Process and package technology assessed for the automotive grade at technology readiness.