Master’s in Engineering: IEC 61508, EN 50126/8/9, ARP4761/4754A, IMO; LCC/RCM
Online master's programme of 1,900 hours in IEC 61508, EN 50126/8/9, ARP4761/4754A, IMO and LCC/RCM engineering. 12 modules covering functional safety, quantitative integrity, safety software, railway, aeronautical and maritime frameworks, life cycle cost, RCM and cross-sector comparison, with an assigned technical tutor.
Take the controls.
Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.
What you will be able to do
Apply the IEC 61508 safety life cycle.
Calculate the integrity of safety architectures.
Develop safety cases in accordance with EN 50126/8/9.
Carry out safety assessments with ARP4761 and ARP4754A.
Interpret IMO requirements for maritime systems.
Build life cycle cost models.
Design reliability-centred maintenance programmes.
Who it's for
- Functional safety engineers.
- Aeronautical safety engineers.
- Railway RAMS engineers.
- LCC analysts.
- RCM maintenance engineers.
- Functional safety assessors.
- Engineering or science graduates seeking to enter the railway sector.
What you'll work with
- IEC 61508 (functional safety of E/E/PE systems)
- EN 50126-1 (railway RAMS process)
- ARP4754A (development of civil aircraft and systems)
- ARP4761 (safety assessment of civil aircraft systems)
- EN 50129 (safety-related electronic systems for signalling)
- EN 50716 (railway software)
- IEC 60300-3-3 (life cycle costing)
- SAE JA1011 (evaluation criteria for RCM processes)
- exida exSILentia
- Ansys medini analyze
- Isograph FaultTree+
- ReliaSoft RCM++
- LDRA Testbed
12 modules · 1900 h
1.1Structure of the seven parts of IEC 615081.2Overall safety life cycle1.3E/E/PE hazard and risk analysis1.4Safety requirements specification1.5Systematic versus random integrity1.6Type A and type B subsystems1.7Architectural constraints and HFT1.8Routes 1H and 2H1.9Functional safety management1.10Workshop: SRS for a safety function
2.1PFDavg for low-demand mode2.2PFH for high-demand mode2.3Simplified equations of IEC 61508-62.4Common cause failures and the beta factor2.5Proof test intervals and coverage2.6Quantitative fault trees2.7Markov models for architectures2.8Failure rate databases2.9Uncertainty in SIL calculation2.10Lab: PFD calculation for a 1oo2 architecture
3.1Requirements of IEC 61508-33.2Techniques and measures by SIL3.3Safe languages and subsets3.4Static analysis and MISRA3.5Structural test coverage3.6Tools and their T1–T3 classification3.7Software configuration management3.8Pre-existing software and reuse3.9Assessment of software suppliers3.10Practical exercise: verification plan for SIL 2 software
4.1EN 50126-1 and the RAMS process4.2EN 50126-2 and the systematic approach to safety4.3EN 50129 and the generic safety case4.4Generic and specific applications4.5EN 50128 and its replacement by EN 507164.6Railway SIL levels and THR4.7Independent assessor and AsBo4.8Cross-acceptance of products4.9Relationship with the TSIs4.10Case study: structure of a GPSC safety case
5.1Aircraft and systems development under ARP4754A5.2Development assurance levels (DAL)5.3Aircraft-level and system-level FHA5.4PSSA and SSA5.5Common cause analysis (CCA)5.6Particular risk analysis and common mode analysis5.7DAL allocation to hardware and software5.8Relationship with DO-178C and DO-2545.9Evolution towards ARP4761A5.10Workshop: FHA of a flight control system
6.1Formal Safety Assessment (FSA)6.2Alternative designs and arrangements6.3SOLAS and reliability requirements6.4The ISM Code and safety management6.5Machinery control systems6.6Software-based systems on ships6.7Classification society rules6.8Dynamic positioning reliability6.9Autonomous ships and the MASS Code6.10Case study: FSA of a steering system
7.1IEC 60300-3-3 and the cost breakdown structure7.2LCC models in defence and transport7.3Maintenance and spare parts costs7.4Unavailability costs7.5Discounting and economic scenarios7.6Integrating LCC with reliability7.7LCC in award criteria7.8Obsolescence management and LCC7.9Monte Carlo sensitivity analysis7.10Practical exercise: LCC model of a railway subsystem
8.1SAE JA1011 and JA10128.2IEC 60300-3-11 and its application8.3Functional analysis and failure modes8.4Assessment of hidden consequences8.5Condition-based tasks8.6Failure-finding and proof testing8.7MSG-3 in aircraft8.8RCM on ships and platforms8.9Implementation and sustainability of RCM8.10Case study: RCM of an HVAC system
9.1Common integrity concepts across standards9.2SIL, ASIL, DAL and approximate equivalences9.3Quantitative metrics by sector9.4Independence of assessment by sector9.5Tool requirements and qualification9.6Multi-sector supplier management9.7Products that cross sectors9.8Risks of transferring evidence9.9Strategies for reusing certificates9.10Workshop: reasoned equivalence table
10.1Verification and validation plans10.2Reviews, inspections and walkthroughs10.3Requirements-based testing10.4Fault injection10.5Bench and field validation10.6Functional safety assessment (FSA)10.7Functional safety audits10.8Third-party certification10.9Maintaining certification10.10Lab: fault injection campaign
11.1Functional safety in the system architecture11.2Interaction with IEC 62443 cybersecurity11.3Change management and impact analysis11.4Field data and updating failure rates11.5Feedback from RCM into design11.6Joint RAMS and LCC optimisation11.7Digital documentation and traceability11.8Competences and personnel certification11.9Safety culture in the organisation11.10Case study: impact of a design change
12.1Selecting the system and applicable standards12.2Hazard analysis and integrity allocation12.3Architecture and quantitative calculation12.4Verification and validation plan12.5Life cycle cost model12.6RCM maintenance programme12.7Final safety argument12.8Cross-sector conclusions of the study12.9Master's Thesis report12.10Master's Thesis: defence before a panel
How you'll learn
100% online learning on the SEIUM campus, with downloadable material, recorded classes and an assigned technical tutor. There are no fixed timetables: you progress at your own pace within each intake, making it compatible with work.
Each module combines theory, guided reading of the original standard and applied exercises. The working software is exida exSILentia, Ansys medini analyze, Isograph FaultTree+, ReliaSoft RCM++ and LDRA Testbed, in free, academic or evaluation versions. Practical work is based on real procedures: PFD and PFH calculations for architectures, FHA, PSSA and SSA analyses and RCM studies of critical equipment. Assessment is continuous for each module, plus the final Master's Thesis.
Standards covered: IEC 61508, EN 50126-1, ARP4754A, ARP4761, EN 50129, EN 50716, IEC 60300-3-3 and SAE JA1011.
Build it end to end
Your final project follows the real engineering workflow, step by step, reviewed by your tutor.
Where this takes you
Requirements
- A university degree in engineering, science or architecture, or equivalent demonstrable professional experience.
- An internet connection and a computer capable of running the programme software.
- English sufficient to read technical standards.
Ready to start?
Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.
Frequently asked questions
The programme totals 1,900 hours over 12–14 months. You set your own pace within each intake, and your tutor helps you plan the workload around your job.
You work with exida exSILentia, Ansys medini analyze, Isograph FaultTree+, ReliaSoft RCM++ and LDRA Testbed, using free, academic or evaluation versions. Your tutor indicates the free alternative wherever one exists.
A SEIUM Institute diploma, awarded on passing the continuous assessment and the Master's Thesis. It is SEIUM's own qualification, not an official state degree; its recognition depends on the programme completed and the regulations of each country.
Yes. Modules passed in a course or postgraduate diploma in the same area are recognised in the higher programme. Ask about the recognition policy when you enrol.
A university degree in engineering, science or architecture (or equivalent professional experience), a computer able to run the programme software and English sufficient to read technical standards.
Start dates are set by SEIUM's faculty for each intake. Our admissions team will confirm the next available date when you apply.
Related programmes
Master’s in PEM Fuel Cells, ISO 19880, 350/700 bar, LH₂ and Material Compatibility Engineering
Online master's programme of 1,900 hours in PEM fuel cell engineering, ISO 19880, 350/700 bar storage, LH₂ and materials compatibility. 12 modules covering PEM electrochemistry, MEA…
Master’s in Route Engineering: EASA vs FAA vs CAAC/ANAC.
Online master's programme of 1,900 hours in route engineering: EASA vs FAA vs CAAC/ANAC, structured in 12 modules covering comparative aviation authorities, EASA versus FAA regulation,…
Master’s in Accident Investigation and Multimodal Technical Forensics Engineering
Online master's programme of 1,900 hours in multimodal accident investigation and technical forensics engineering. 12 modules covering investigation principles, scene management, recorders, fractography, reconstruction, human factors…
More in Regulation, Safety, RAMS & Homologation
All Regulation, Safety, RAMS & Homologation programmes → · How to apply · Fees & financing · Scholarships