Master’s in Functional Safety, Cyber and Compliance Engineering
Online master's programme of 1,900 hours in functional safety, cybersecurity and compliance engineering, structured in 12 modules covering ISO 26262, SOTIF under ISO 21448, cybersecurity under ISO/SAE 21434, UNECE regulations, AI safety, safety cases, Automotive SPICE, software compliance and supply chain management, with an assigned technical tutor.
Take the controls.
Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.
What you will be able to do
Integrate functional safety, SOTIF and cybersecurity into development.
Apply ISO 26262 across the product lifecycle.
Analyse functional insufficiencies according to ISO 21448.
Carry out TARA in accordance with ISO/SAE 21434.
Comply with UNECE regulations on cybersecurity and software updates.
Build safety arguments using GSN.
Develop an integrated safety and compliance project.
Who it's for
- Functional safety engineers extending their scope to SOTIF and cybersecurity.
- SOTIF engineers analysing perception and automated driving functions.
- Automotive cybersecurity engineers working on TARA and CSMS.
- Compliance managers responsible for type approval and regulatory readiness.
- Safety advisors and consultants supporting OEMs and suppliers.
- Process auditors working with Automotive SPICE.
- Engineering or science graduates aiming to enter the automotive sector.
What you'll work with
- ISO 26262 (functional safety of road vehicles)
- ISO 21448 (safety of the intended functionality, SOTIF)
- ISO/SAE 21434 (road vehicle cybersecurity engineering)
- UN ECE R155 (cybersecurity management system)
- UN ECE R156 (software update management system)
- ISO/PAS 8800 (safety and AI in road vehicles)
- UL 4600 (safety of autonomous products)
- Automotive SPICE 4.0 (process assessment model)
- medini analyze
- ANSYS medini
- Polarion ALM
- Polyspace
- Astah GSN
12 modules · 1900 h
1.1Functional safety, SOTIF and cybersecurity1.2Relationships between the three disciplines1.3European and international regulatory framework1.4Safety management systems1.5Safety culture in the organisation1.6Reference accidents and incidents1.7Product liability1.8Safety in automated driving1.9Compliance trends1.10Case study: analysis of a software recall
2.1Structure of ISO 262622.2Safety lifecycle2.3Item definition and its boundaries2.4HARA and ASIL2.5Functional and technical safety concepts2.6Safe hardware development2.7Safe software development2.8Supporting processes2.9Functional safety assessment2.10Lab: HARA of an ADAS function
3.1Scope of ISO 214483.2Specification insufficiencies3.3Identification of triggering conditions3.4Known and unknown scenarios3.5Acceptance criteria3.6SOTIF verification and validation3.7Field operation3.8Relationship with machine learning3.9SOTIF product documentation3.10Practical exercise: SOTIF analysis of perception
4.1Structure of ISO/SAE 214344.2Cybersecurity management4.3System TARA4.4Cybersecurity goals4.5Secure design and verification4.6Vulnerability management4.7Operations and response4.8Relationship with functional safety4.9Cybersecurity assessment4.10Workshop: TARA of a gateway
5.1Regulation R155 and the CSMS5.2Regulation R156 and the SUMS5.3Regulation R157 and ALKS5.4General Safety Regulation5.5Regulation on automated systems5.6Type-approval procedure5.7Technical service audits5.8Post-market fleet monitoring5.9International regulatory trends5.10Case study: preparing a CSMS audit
6.1Requirements of ISO/PAS 88006.2The EU AI Act and high-risk systems6.3Lifecycle of AI components6.4Training data quality6.5Robustness and generalisation6.6Explainability of AI models6.7Field monitoring6.8Safety argumentation for AI6.9Relationship with SOTIF6.10Practical exercise: data requirements for a detector
7.1Structure of a safety case7.2GSN notation and its elements7.3Argumentation patterns7.4Evidence and traceability7.5Confidence arguments7.6Dynamic safety case7.7Requirements of UL 46007.8Independent review of the argument7.9Modelling tools7.10Lab: safety case in GSN
8.1The Automotive SPICE 4.0 model8.2Process maturity model8.3Requirements management8.4Configuration management8.5Change management8.6Verification and validation8.7Tool qualification8.8Process audits8.9Integration with agile methodologies8.10Workshop: ASPICE assessment of a project
9.1MISRA coding standards9.2AUTOSAR C++14 guidelines9.3Static code analysis9.4MC/DC structural coverage9.5Unit and integration testing9.6Third-party and open-source software9.7SBOM and licences9.8Traceability between requirements and code9.9Compliance tools9.10Practical exercise: MISRA analysis with tools
10.1Development interface agreements (DIA)10.2Cybersecurity interface agreements (CIA)10.3Supplier assessment10.4Safety elements out of context (SEooC)10.5Proven-in-use components10.6Management of third-party components10.7Supplier audits10.8Vulnerability management across the chain10.9Shared responsibility matrix10.10Case study: DIA with a radar supplier
11.1Integrated management system11.2Organisation and roles11.3Compliance indicators11.4Risk management11.5Incident management11.6Internal compliance audits11.7Training and competences11.8Management tools11.9Continuous improvement of the system11.10Workshop: safety governance model
12.1Definition of the system12.2HARA of the system12.3SOTIF analysis of the system12.4TARA of the project system12.5Safety concepts12.6Verification plan12.7Integrated safety case12.8Conclusions and future work12.9Thesis report12.10Master's Thesis: defence before a panel
How you'll learn
Training is 100% online on the SEIUM campus, with downloadable material, recorded classes and an assigned technical tutor. There are no fixed timetables: you progress at your own pace within the intake, so the programme can be combined with work.
Each module combines theory, guided reading of the original standard and applied exercises. The working software is medini analyze, ANSYS medini, Polarion ALM, Polyspace and Astah GSN, in free, academic or evaluation versions. Exercises are based on real procedures for HARA of driver assistance functions, TARA of control units and ASPICE process audits. Assessment is continuous by module, plus the final Master's Thesis.
Standards covered: ISO 26262, ISO 21448, ISO/SAE 21434, UN ECE R155, UN ECE R156, ISO/PAS 8800, UL 4600, Automotive SPICE 4.0.
Build it end to end
Your final project follows the real engineering workflow, step by step, reviewed by your tutor.
Where this takes you
Requirements
- A university degree in engineering, science or architecture, or equivalent demonstrable professional experience.
- An internet connection and a computer capable of running the programme's software.
- English sufficient to read technical standards.
Ready to start?
Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.
Frequently asked questions
The programme totals 1,900 hours over 12–14 months. You set your own pace within each intake, and your tutor helps you plan the workload around your job.
You work with medini analyze, ANSYS medini, Polarion ALM, Polyspace and Astah GSN, using free, academic or evaluation versions. Your tutor indicates the free alternative wherever one exists.
A SEIUM Institute diploma, awarded on passing the continuous assessment and the Master's Thesis. It is SEIUM's own qualification, not an official state degree; its recognition depends on the programme completed and the regulations of each country.
Yes. Modules passed in a course or postgraduate diploma in the same area are recognised in the higher programme. Ask about the recognition policy when you enrol.
A university degree in engineering, science or architecture (or equivalent professional experience), a computer able to run the programme's software and English sufficient to read technical standards.
Start dates are set by SEIUM's faculty for each intake. Our admissions team will confirm the next available date when you apply.
Related programmes
Master’s in Reinforcement and Imitation Learning Engineering for Driving
Online master's programme of 1,900 hours in reinforcement and imitation learning engineering for driving, structured in 12 modules covering deep networks for control, imitation learning, inverse…
Master’s in Runtime Monitoring Engineering
Online master's programme of 1,900 hours in runtime monitoring engineering, structured in 12 modules covering runtime verification with temporal logic, perception, planning and ODD monitoring, safe…
Master’s in Visual-Inertial Odometry & Precise Positioning Engineering
Online master's programme of 1,900 hours in visual-inertial odometry and precise positioning engineering, structured in 12 modules covering state estimation, inertial sensors, geometric vision, VIO, high-precision…
More in Autonomous, ADAS & Software-Defined Vehicle
All Autonomous, ADAS & Software-Defined Vehicle programmes → · How to apply · Fees & financing · Scholarships