Browse Publications Technical Papers 2013-01-0195

ASIL Decomposition: The Good, the Bad, and the Ugly 2013-01-0195

ASIL decomposition is a method described in the ISO 26262 standard for the assignment of ASILs to redundant requirements. Although ASIL decomposition appears to have similar intent to the hardware fault tolerance concept of IEC 61508-2, ASIL decomposition is not intended to reduce ASIL assignments to hardware elements for random hardware failures, but instead focuses on functions and requirements in the context of systematic failures. Based on our participation in the development of the standard, the method has been applied in different ways in practice, not all of which are fully consistent with the intent of the standard. Two potential reasons that may result in the use of “modified” ASIL algebra include the need of OEMs to partition a system and specify subsystem requirements to suppliers and the need for designers to construct systems bottom up. Constructing systems bottom up has the goal of achieving a target system level ASIL from component elements that have some notion of ASIL already associated with them. In this paper, we examine the origins of ASIL decomposition in the ISO 26262 standard, potential benefits and limitations of the approach, and by examining publications on this subject, how it is currently being applied in industry programs.


Subscribers can view annotate, and download all of SAE's content. Learn More »


Members save up to 16% off list price.
Login to see discount.
Special Offer: Download multiple Technical Papers each year? TechSelect is a cost-effective subscription option to select and download 12-100 full-text Technical Papers per year. Find more information here.
We also recommend:

Effort Reduction for Analysis of Safety Critical Software with Criticality Analysis


View Details


Functional Safety Industry Best Practices for Introducing and Using ISO 26262


View Details


Introducing Quality Attributes for a Safety Concept


View Details