功能安全标准-ISO26262-2---功能安全管理

功能安全ISO26262安全管理生命周期框架如下：

a) The subphase: item definition
The initiating task of the safety lifecycle is to develop a description of the item with regard to its
functionality, interfaces, environmental conditions, legal requirements, known hazards, etc. The boundary
of the item and its interfaces, as well as assumptions concerning other items, elements, systems and
components are determined (see ISO 26262-3:2011, Clause 5).
b) The subphase: initiation of the safety lifecycle
Based on the item definition, the safety lifecycle is initiated by distinguishing between either a new
development, or a modification of an existing item.
If an existing item is modified, the results of an impact analysis are used to tailor the safety lifecycle (see
ISO 26262-3:2011, Clause 6).
c) The subphase: hazard analysis and risk assessment
After the initiation of the safety lifecycle, the hazard analysis and risk assessment is performed as given in
ISO 26262-3:2011, Clause 7. First, the hazard analysis and risk assessment estimates the probability of
exposure, the controllability and the severity of the hazardous events with regard to the item. Together,
these parameters determine the ASILs of the hazardous events. Subsequently, the hazard analysis and
risk assessment determines the safety goals for the item, with the safety goals being the top level safety
requirements for the item. The ASILs determined for the hazardous events are assigned to t