What is ASIL (Automotive Safety Integrity Level)?

In ISO 26262, the level of safety requirements assigned to each hazardous event from three factors: severity S, exposure E and controllability C. There are four levels, A to D, with D the most stringent; low-risk items that need no ASIL are classed as QM.

Japanese name: ASIL(自動車安全度水準)

ASIL (Automotive Safety Integrity Level) appears in 10 practice questions across 1 topic, including Automotive Semiconductors and Functional Safety.

Field: Automotive Semiconductors and Functional Safety

Try it: questions about ASIL (Automotive Safety Integrity Level)

In ISO 26262, which correctly lists the three factors evaluated when determining the ASIL through hazard analysis and risk assessment (HARA)?

  1. ASeverity (S), exposure (E), controllability (C)
  2. BFailure rate (λ), diagnostic coverage (DC), fault tolerant time interval (FTTI)
  3. CComponent price, production volume, development period
Show answer and explanation

Answer: A. Severity (S), exposure (E), controllability (C)

The ASIL is determined for each hazardous event by evaluating three factors: severity S, representing how serious the injuries are; exposure E, representing the frequency or duration of exposure to driving situations in which the hazard can occur; and controllability C, representing how likely the driver or others are to avoid the hazard. For example, sudden loss of braking at high speed has high severity and is hard to avoid, so it receives a high ASIL. Failure rate, diagnostic coverage and FTTI are quantities used after the ASIL is determined, to evaluate whether a design meets its requirements.

Which correctly describes the ASIL in ISO 26262?

  1. AIt ranges from A to D, with ASIL A representing the most stringent requirements. QM represents even more stringent requirements than ASIL D
  2. BIt ranges from A to D, with ASIL D representing the most stringent requirements. When the risk is sufficiently low, the classification is QM and it is handled by ordinary quality management
  3. CIt ranges from A to D, with ASIL D representing the components with the highest failure rate. QM represents components with no quality issues, for which all testing may be skipped
Show answer and explanation

Answer: B. It ranges from A to D, with ASIL D representing the most stringent requirements. When the risk is sufficiently low, the classification is QM and it is handled by ordinary quality management

ASIL (Automotive Safety Integrity Level) has four levels, A, B, C and D, with D the most stringent, imposing high requirements on development processes, safety mechanisms, failure rate targets and so on. For example, parts of airbag, brake and steering control are typical cases that often require ASIL D. When the risk is low and no ASIL needs to be assigned, the classification is QM (Quality Management) and development is carried out under ordinary quality management. Quality still has to be assured under QM, and testing cannot be skipped.

ASIL (Automotive Safety Integrity Level) in the explanations

Questions that mention ASIL (Automotive Safety Integrity Level) (10)

  1. In ISO 26262, which correctly lists the three factors evaluated when determining the ASIL through hazard analysis and risk assessment (HARA)?
  2. Which correctly describes the ASIL in ISO 26262?
  3. A hazardous event was assessed as severity S3, exposure E4 and controllability C3, giving ASIL D. If, for the same event, only controllability were C2 (most drivers can normally avoid the hazard), what would the ASIL be?
  4. For PMHF, the metric for the probability that a safety goal is violated due to random hardware failures, the target guideline for ASIL D is less than 10 FIT. What is this expressed as a probability per hour?
  5. Which is the correct target guideline for the single-point fault metric (SPFM) required for ASIL D?
  6. In ISO 26262 ASIL decomposition, which combination is permitted for splitting an ASIL D safety requirement and allocating it to two sufficiently independent redundant elements?
  7. Which correctly describes a "safety goal" in ISO 26262?
  8. Which correctly pairs the descriptions of random hardware failures and systematic failures as distinguished in ISO 26262?
  9. The total failure rate of safety-related hardware is 1000 FIT, of which single-point faults and residual faults (faults that remain undetected by safety mechanisms) total 5 FIT. What is the single-point fault metric (SPFM)?
  10. When the functions of multiple ECUs are integrated into a single high-performance SoC and software of different ASILs runs together, which is required?

Books on Automotive Semiconductors and Functional Safety Ad

As an Amazon Associate I earn from qualifying purchases.

Related terms

ISO 26262 Safety goal SPFM (single-point fault metric) HARA (hazard analysis and risk assessment) Diagnostic coverage FTTI (fault tolerant time interval) SoC (system on chip) CPU time Hypervisor AEC-Q100

Back to the glossary