Prerequisites
Before you begin:- Create a HARA document following ISO 26262-3 requirements
- Define your system hierarchy with system elements in the project
- Review the ASIL Classification System concepts
Open the HARA Risksheet
- Navigate to Risks space in the sidebar
- Open your HARA document (e.g., “HAZID - AEB System”)
- Click Edit to enter risksheet editing mode
- Switch to the Hazard Identification view using the view dropdown
Define the Operational Context
Before identifying specific hazards, establish the operational context:-
Add a System Element row (Level 1):
- Click ➕ Add Row
- Select the system element work item being analyzed (e.g., “AEB System”)
- The risksheet uses this as the top-level grouping
-
Add a Hazard Category row (Level 2):
- Click ➕ Add Row under the system element
- Select category from the enum (e.g., “Functional Failure”, “Sensor Malfunction”)
- This groups related hazards by type
-
Add an Operational Phase row (Level 3):
- Click ➕ Add Row under the category
- Select operational phase (e.g., “Highway Driving”, “Urban Traffic”, “Parking”)
- Each phase represents a distinct driving scenario
Identify Specific Hazards
For each operational phase, add hazard work items (Level 4):- Click ➕ Add Row under the operational phase
- Fill in the hazard identification columns:
| Column | What to Enter | Example |
|---|---|---|
| Hazard ID | Unique identifier | HAZ-001 |
| Hazard Name | Short hazard title | ”Failure to detect obstacle” |
| Operational Situation | Specific driving context | ”Highway driving at 120 km/h” |
| Hazard Description | Detailed hazard event | ”AEB system fails to detect stationary vehicle in travel path” |
| Cause(s) | What triggers the hazard | ”Radar sensor occlusion, camera blinding, SoC processing failure” |
| Consequence(s) | Potential harm outcome | ”High-speed rear-end collision, severe injury or fatality” |
Use Systematic Hazard Discovery Methods
Apply structured techniques to ensure complete hazard identification: Method 1: System Function Analysis- For each function, ask “What if this function fails?” (loss of function)
- Ask “What if this function activates unintentionally?” (unwanted activation)
- Ask “What if this function performs incorrectly?” (degraded performance)
- No/None: Complete loss of function (e.g., “No obstacle detection”)
- More: Excessive function (e.g., “Excessive braking force”)
- Less: Insufficient function (e.g., “Insufficient braking pressure”)
- Late: Delayed activation (e.g., “Delayed braking response”)
- Early: Premature activation (e.g., “False positive braking”)
Review Against Safety Standards
Ensure your hazard identification covers:- All system functions from the functional safety concept
- All operational situations from the item definition (ISO 26262-3 Clause 5)
- Environmental conditions (temperature, weather, lighting)
- Driver interaction scenarios (inattention, misuse, over-reliance)
- System degradation modes (sensor failures, partial availability)
Verify Completeness
Check that each hazard has:- Unique hazard ID for traceability
- Clear operational situation describing when the hazard occurs
- Specific cause(s) explaining what triggers the hazard
- Defined consequence(s) stating potential harm outcomes
- Linked system element (via Level 1 hierarchy)
Once you’ve identified all hazards, proceed to Assess Severity, Exposure, and Controllability to perform ISO 26262 ASIL determination.
See Also
- HARA Risksheet Configuration — Column definitions and formula details
- Hazard Work Item Type — Field reference for hazard work items
- ISO 26262 Functional Safety — Standard requirements context
- Safety Goal Derivation — How hazards lead to safety goals
- Determine ASIL — Next step in HARA workflow