Enhancing Software DFMEA Processes through ISO 26262 (Automotive Functional Safety) and ISO 21434 (Automotive Cybersecurity): Addressing RPN Limitations with Risk Priority Matrix and HAZOP Integration

References

[1] Liu, Hu-Chen & Wang, Lien & You, Xiao-Yue & Wu, Song-Man. (2017). Failure mode and effect analysis with extended grey relational analysis method in cloud setting. Total Quality Management & Business Excellence. 30. 1-23. 10.1080/14783363.2017.1337506.

[2] [Online].Available: https://www.researchgate.net/publication/317558931_Failure_mode_and_effect_analysis_with_extended_grey_relational_analysis_method_in_cloud_setting

[3] IEC 60812: IEC, "Analysis techniques for system reliability — Procedure for failure mode and effects analysis (FMEA)," International Electrotechnical Commission, 2018. [Online]. Available: https://webstore.iec.ch

[4] Stamatis, D. H., "Failure Mode and Effect Analysis: FMEA from Theory to Execution," 2nd ed., ASQ Quality Press, 2003. [Online]. Available: https://asq.org/quality-press

[5] ISO, "ISO 14971: Application of Risk Management to Medical Devices," International Organization for Standardization, 2019. [Online]. Available: https://www.iso.org

[6] McDermott, R. E., Mikulak, R. J., & Beauregard, M. R., "The Basics of FMEA," 2nd ed., CRC Press, 2009. [Online]. Available: https://www.crcpress.com

[7] Bowles, J. B., & Peláez, C. E., "Fuzzy logic prioritization of failures in a system failure mode, effects and criticality analysis," Reliability Engineering & System Safety, vol. 50, no. 2, pp. 203-213, 1995. [Online]. Available: https://www.sciencedirect.com

[8] Sharma, A., & Grover, S., "Enhanced Risk Management Framework Using Modified RPN," International Journal of Advanced Manufacturing Technology, vol. 60, pp. 1221–1235, 2012. [Online]. Available: https://www.springer.com

[9] Tang, X., & Qiu, L., "Risk Matrix Frameworks for Functional Safety Analysis in Automotive Systems," SAE Technical Papers, 2021. [Online]. Available: https://www.sae.org

[10] Andler, S., & Johnson, P., "Advanced Risk Analysis Techniques for ISO 26262 Compliance," Automotive Safety and Security Research Journal, vol. 9, no. 3, pp. 42-58, 2020. [Online]. Available: https://link.springer.com

[11] Hecht, H., & Hecht, M., "A Practical Guide to ISO 26262 for FMEA and Hazard Analysis," Automotive Functional Safety Journal, vol. 10, pp. 78-91, 2018. [Online]. Available: https://www.springer.com

[12] Misra, P., & Kumar, N., "ASIL Decomposition and Its Role in Functional Safety," SAE International Journal of Vehicle Dynamics, vol. 12, no. 5, pp. 345-360, 2018. [Online]. Available: https://www.sae.org

[13] van Eikema Hommes, Q. D., & De Jong, D., "Using ISO 26262 and Risk Priority Matrices for Functional Safety," Proceedings of the International Conference on Reliability Engineering, 2019. [Online]. Available: https://ieeexplore.ieee.org

[14] Ericson, C. A., "Hazard Analysis Techniques for System Safety," Wiley, 2015. [Online]. Available: https://www.wiley.com

[15] Zhang, H., & Lee, S. P., "A Review of FMEA and FTA Applications in Automotive Functional Safety," International Journal of Vehicle Safety, vol. 15, no. 1, pp. 22-37, 2020. [Online]. Available: https://www.inderscience.com

[16] Ruijters, E., & Stoelinga, M., "Fault Tree Analysis: A Survey of the State-of-the-Art in Modeling, Analysis, and Tools," Computer Science Review, vol. 15, pp. 29-62, 2015. [Online]. Available: https://www.sciencedirect.com

[17] Lees, F., "Loss Prevention in the Process Industries," 4th ed., Butterworth-Heinemann, 2012. [Online]. Available: https://www.sciencedirect.com

[18] Mahadevan, S., & Smith, N. G., "Integrating HAZOP with Functional Safety Requirements for Enhanced Risk Analysis," Functional Safety in the Automotive Domain, vol. 8, no. 2, pp. 112-126, 2019. [Online]. Available: https://ieeexplore.ieee.org

[19] Zhang, J., & Patel, S., "Enhancing Software Hazard Analysis with HAZOP Techniques," Functional Safety for Software Systems Journal, vol. 14, no. 3, pp. 221-239, 2019. [Online]. Available: https://www.inderscience.com

[20] Negri, E., Fumagalli, L., & Macchi, M., "Digital Twins for Risk Analysis and Safety Enhancements in Automotive Systems," Procedia CIRP, vol. 81, pp. 763-768, 2019. [Online]. Available: https://www.sciencedirect.com

[21] Tao, F., & Zhang, H., "Digital Twin Framework and its Implications for Predictive Maintenance," CIRP Annals - Manufacturing Technology, vol. 68, pp. 104-127, 2019. [Online]. Available: https://www.springer.com

[22] Wagner, S., "ISO 26262 and its Role in Addressing Safety and Cybersecurity Risks in Automotive Systems," Functional Safety and Cybersecurity Handbook, Springer, 2020. [Online]. Available: https://link.springer.com

[23] Brunner, F., & Thoma, K., "Cybersecurity and Functional Safety Integration for Autonomous Vehicles," International Journal of Automotive Engineering, vol. 27, no. 6, pp. 187-202, 2021. [Online]. Available: https://link.springer.com

[24] Krueger, D., & Anderson, R., "CFMEA: A Practical Methodology for Securing Automotive Systems," Cybersecurity and Privacy in Connected Vehicles Journal, vol. 3, no. 2, pp. 120-135, 2020. [Online]. Available: https://www.sciencedirect.com

@article{1706925,
      author = {Satyajit Lingras, Aruni Basu, Atharv M Kolhar, Stalen Rumao},
      title = {Enhancing Software DFMEA Processes through ISO 26262 (Automotive Functional Safety) and ISO 21434 (Automotive Cybersecurity): Addressing RPN Limitations with Risk Priority Matrix and HAZOP Integration},
      journal = {Iconic Research And Engineering Journals},
      year = {2025},
      volume = {8},
      number = {7},
      pages = {263-272},
      issn = {2456-8880},
      url = {https://www.irejournals.com/formatedpaper/1706925.pdf},
      abstract = {This paper presents a comprehensive guide to Software Failure Mode and Effects Analysis (SW FMEA), a critical technique for identifying and mitigating risks in complex software systems.  We detail methodologies for conducting SW FMEA based on both software functions and architecture, emphasizing the calculation of Risk Priority Numbers (RPNs) for prioritizing failure modes.  The benefits of integrating SW FMEA with Hazard and Operability studies (HAZOP) for enhanced safety analysis, particularly within the context of ISO 26262 compliance, are explored.  Case studies illustrate the application of SW FMEA to an embedded LiDAR system and discuss Karma Automotive's successful transition from RPN to a Risk Priority Matrix (RPM) for improved risk assessment of Advanced Driver Assistance Systems (ADAS).  Finally, we examine the future of SW FMEA and HAZOP, including integration with advanced technologies, enhanced collaboration, and a stronger focus on cybersecurity. Our analysis reveals the limitations of traditional RPN methods in accurately prioritizing high-severity risks within complex software, particularly highlighting the need for more sophisticated approaches like RPM.  The presented methodologies offer a structured approach to identifying potential software failures, assessing their impact, and developing effective mitigation strategies.  This comprehensive framework aims to improve the reliability, safety, and overall quality of software systems, particularly within safety-critical applications.},
      keywords = {FMEA, FTA, LiDAR, Functional Safety, ISO 26262, Automotive Cybersecurity, ISO 21434, Autonomous Driving, Pedestrian Safety, LiDAR, Software FMEA, HAZOP, Digital Twins},
      month = {January},
  }