Postgraduate Diploma in Fallback/Minimal Risk Manoeuvre Architectures
Online 800-hour Postgraduate Diploma in Fallback/Minimal Risk Manoeuvre architectures. 8 modules covering UN Regulation No. 157, ISO 23793-1:2024 and IPG CarMaker. Assigned tutor and open enrolment.
Take the controls.
Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.
What you will be able to do
Define the minimal risk condition and manoeuvre in accordance with regulations.
Design redundant fail-operational architectures.
Implement fallback detection and decision logic.
Plan safe minimal risk manoeuvres.
Design driver interaction during the transition.
Analyse the safety of degraded states.
Validate and type-approve fallback functions.
Who it's for
- Systems architect for automated driving systems who wishes to specialise in Fallback/Minimal Risk Manoeuvre Architectures.
- Functional safety engineer who wishes to specialise in Fallback/Minimal Risk Manoeuvre Architectures.
- Planning engineer who wishes to specialise in Fallback/Minimal Risk Manoeuvre Architectures.
- HMI engineer who wishes to specialise in Fallback/Minimal Risk Manoeuvre Architectures.
- Type-approval engineer who wishes to specialise in Fallback/Minimal Risk Manoeuvre Architectures.
- Validation engineer who wishes to specialise in Fallback/Minimal Risk Manoeuvre Architectures.
- Engineering or science graduates seeking to enter the automotive industry.
What you'll work with
- UN Regulation No. 157
- ISO 23793-1:2024
- ISO 26262:2018
- ISO 21448:2022 (SOTIF)
- Implementing Regulation (EU) 2022/1426
- SAE J3016:2021
- UL 4600
- ISO/TR 21959-2:2020
8 modules · 800 h
1.1Definitions of MRC and MRM1.2SAE levels and fallback responsibility1.3Transition request to the driver1.4Driver out of the loop and transition time1.5Stopping in lane and stopping on the hard shoulder1.6Requirements of UN Regulation No. 1571.7ISO 23793 framework1.8Lessons from real incidents1.9Differences between Level 3 and Level 41.10Case study: analysis of the MRM of an ALKS
2.1Redundancy of perception, computing and actuation2.2Two-channel architectures2.3Fallback channel with reduced functionality2.4Redundant power supply2.5Redundant communication2.6Redundant steering and braking2.7Design diversity2.8Cost versus availability2.9Minimum sensors for the fallback manoeuvre2.10Workshop: fallback architecture for Level 4
3.1System health monitors3.2Exit from the ODD3.3Decision arbiter3.4System states and transitions3.5Fault prioritisation3.6Driver supervision3.7Escalation of the response3.8Logging the decision3.9Time available to react3.10Practice: degradation state machine
4.1Selection of the stopping location4.2Planning with degraded information4.3Lane change towards the hard shoulder4.4Braking profiles4.5Signalling to other road users4.6Hazard lights and eCall4.7Tunnels and bridges4.8Dense traffic4.9Validity of the last planned trajectory4.10Laboratory: MRM planner in simulation
5.1Takeover warnings5.2Alert escalation5.3Driver attention5.4Recovery of control5.5Robotaxi occupants5.6Remote assistance and teleoperation5.7Communication with emergency services5.8Usability evaluation5.9Driver asleep or incapacitated5.10Case study: takeover sequence
6.1HARA of degraded states6.2FTA of the fallback chain6.3Fault tolerant time interval6.4SOTIF analysis of the MRM6.5Residual risk of stopping6.6Common cause failures6.7Derived requirements6.8Safety argument6.9Rear-end collision risk after stopping6.10Laboratory: FTA of the fallback chain
7.1MRM test scenarios7.2Track testing7.3Simulation with fault injection7.4DSSAD recording7.5UNECE type-approval procedures7.6Implementing Regulation (EU) 2022/14267.7Third-party assessment7.8Improvement after incidents7.9NATM multi-pillar assessment method7.10Workshop: MRM test plan
8.1Use case and ODD8.2Relevant faults8.3Proposed redundant architecture8.4Decision logic8.5MRM planning8.6HMI and communication8.7Safety analysis8.8Validation plan8.9Report and presentation8.10Final review with the tutor
How you'll learn
Fully 100% online training on the SEIUM campus, with downloadable material, recorded classes and an assigned technical tutor. There are no fixed timetables: students progress at their own pace within the intake, which makes it possible to combine the programme with work.
Each module combines theory, guided reading of the original standard and applied exercises. The working software is IPG CarMaker, MATLAB/Simulink, ROS 2, CARLA, Ansys medini analyze, in free, academic or evaluation versions. Tests are studied using real procedures for simulating minimal risk manoeuvres with injected faults, fault tree analysis of the fallback chain, and design of the takeover sequence. Assessment is continuous, module by module, plus the final integrative project.
Build it end to end
Your final project follows the real engineering workflow, step by step, reviewed by your tutor.
Define the minimal risk condition and manoeuvre in accordance with regulations.
Design redundant fail-operational architectures.
Implement fallback detection and decision logic.
Plan safe minimal risk manoeuvres.
Design driver interaction during the transition.
Where this takes you
Requirements
- Prior technical training or professional experience in the sector. No university degree is required.
- Internet connection and a computer capable of running the programme's software.
- Sufficient Spanish to follow technical regulatory texts.
Ready to start?
Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.
Frequently asked questions
The programme comprises 800 hours in total, spread over 6 to 8 months. That is an average of 10 to 15 hours per week, compatible with a full-time job.
You will work with IPG CarMaker, MATLAB/Simulink, ROS 2, CARLA and Ansys medini analyze. Free, academic or evaluation versions are used, and the tutor indicates the free alternative where one exists.
A SEIUM Institute diploma upon passing the continuous assessment and the integrative project. This is in-house training, not an official qualification from the Ministry.
Yes. Modules passed in a course or diploma in the same area are credited towards the advanced programme. Check the credit transfer policy when you enrol.
Related programmes
Postgraduate Diploma in Interaction Levels 2–4 and Handover
Online 800-hour Postgraduate Diploma in Interaction Levels 2–4 and Handover. 8 modules covering SAE J3016, UNECE R157 and SILAB. Assigned tutor and open enrolment.
Postgraduate Diploma in Validation of Attention Systems with Computer Vision
800-hour online Postgraduate Diploma in validation of Attention Systems with Computer Vision. 8 modules with Delegated Regulation (EU) 2023/2590, Delegated Regulation (EU) 2021/1341 and OpenCV. Assigned…
Diploma in Regulatory Strategy and International Homologation for AD
Online postgraduate diploma of 800 hours in regulatory strategy and international type approval for automated driving (AD). 8 modules covering the WP.29 framework, UN R157, R155…
More in Autonomous, ADAS & Software-Defined Vehicle
All Autonomous, ADAS & Software-Defined Vehicle programmes → · How to apply · Fees & financing · Scholarships