auto

Safety of the Intended Functionality

Safety of the Intended Functionality (SOTIF) addresses risks from non-fault conditions, where a system behaves as designed but its performance limitations cause hazards. Defined in ISO 21448, it is critical for ADAS and autonomous driving, ensuring safety even when no component has failed, mitigating risks from sensor limitations or unexpected environmental interactions.

Curated by Winners Consulting Services Co., Ltd.

Questions & Answers

What is SOTIF?

SOTIF, or Safety of the Intended Functionality, is an automotive safety discipline defined by the ISO 21448 standard. It addresses hazards that arise not from system malfunctions, but from the inherent performance limitations of a correctly operating system within specific scenarios. Unlike traditional functional safety (ISO 26262), which focuses on mitigating risks due to electronic or electrical failures, SOTIF targets risks from 'unknown unsafe' scenarios. For example, an ADAS camera failing to detect a pedestrian in heavy fog is not a component failure but a performance limitation. SOTIF provides a systematic methodology to identify these potentially hazardous scenarios, evaluate their risks, and implement measures to reduce them to an acceptable level. In enterprise risk management, it complements functional safety and cybersecurity (ISO/SAE 21434) to form a comprehensive safety case for modern vehicles.

How is SOTIF applied in enterprise risk management?

Applying SOTIF in enterprise risk management involves a structured, multi-stage process. First, **Hazard Identification and Scenario Analysis**: Teams systematically identify operational scenarios (e.g., adverse weather, complex intersections) where the intended functionality might be insufficient, using methods like brainstorming and data analysis. Second, **Risk Assessment and Functional Modification**: For each identified hazardous scenario, the risk is evaluated. If unacceptable, the system's functionality is modified, such as by improving sensor fusion algorithms or adding driver warnings. Third, **Verification and Validation**: A comprehensive testing strategy is executed, combining simulation, closed-course testing, and real-world driving to validate that the modifications have sufficiently mitigated the risks. For instance, a global Tier-1 supplier used this process to reduce false positives in their AEB system by 15% after identifying a high-risk scenario at tunnel exits, directly improving product reliability and passing Euro NCAP assessments.

What challenges do Taiwan enterprises face when implementing SOTIF?

Taiwanese enterprises face several key challenges when implementing SOTIF. First, a **lack of localized scenario data**: Taiwan's unique traffic environment, with a high density of scooters, is underrepresented in global test databases, making comprehensive validation difficult. Second, **talent integration**: SOTIF requires a cross-disciplinary team of experts in systems engineering, AI, and validation, which can be difficult to assemble. Third, **cost and time-to-market pressure**: The extensive analysis required by ISO 21448 can be resource-intensive, posing a barrier for SMEs. To overcome these, companies should collaborate with local research institutions like ARTC to build localized scenario databases. A priority action is to form a dedicated cross-functional team and seek external expert consultation to accelerate knowledge building. Adopting Model-Based Systems Engineering (MBSE) early in the design phase can also help manage complexity and reduce late-stage costs.

Why choose Winners Consulting for SOTIF?

Winners Consulting specializes in SOTIF for Taiwan enterprises, delivering compliant management systems within 90 days. Free consultation: https://winners.com.tw/contact

Related Services

Need help with compliance implementation?

Request Free Assessment