Skip to main content

Overview

HARA is the systematic process of identifying hazards, analyzing their severity and exposure, assessing controllability, and determining Automotive Safety Integrity Levels (ASIL) for safety-critical systems. The HARA risksheet provides an interactive interface for conducting this analysis in compliance with ISO 26262 Part 3 (Concept Phase). Key Artifacts:
  • Hazard work items: Identified system-level hazards with potential for harm
  • Harm work items: Consequences of hazards to occupants or environment
  • Safety Goal work items: High-level safety objectives derived from hazards
  • Risk Record work items: Post-mitigation risk assessment and closure

Configuration Properties

Core Risksheet Settings

PropertyTypeDefaultDescription
document_titleString”HAZID - AEB System”Display title of the HARA analysis document
descriptionString""Document description for context
work_item_typeEnumhazardPrimary work item type for level 1 (see Hazard Work Item Type)
parent_link_roleStringanalyzedInLink role connecting hazards to risksheet document
risksheet_versionString”3.0”Risksheet configuration schema version
standards_profileEnumiso26262Regulatory framework (ISO 26262, ISO 14971, custom)

Multi-Level Hierarchy Configuration

PropertyTypeDefaultDescription
level_definitionsArraySee belowHierarchical structure with 4 levels
level_1_typeStringhazardWork item type at Level 1 (Hazard)
level_2_typeStringharmWork item type at Level 2 (Harm/Consequence)
level_3_typeStringsafetyGoalWork item type at Level 3 (Safety Goal)
level_4_typeStringriskRecordWork item type at Level 4 (Risk Record/Control)
hierarchy_depthInteger4Number of nesting levels in analysis
Level Definitions Detail:
{
  "levels": [
    {
      "level": 1,
      "name": "Hazard",
      "work_item_type": "hazard",
      "link_role": "causes",
      "expansion_enabled": true,
      "columns": ["hazardId", "hazardName", "description", "operationalPhase"]
    },
    {
      "level": 2,
      "name": "Harm",
      "work_item_type": "harm",
      "link_role": "causedBy",
      "expansion_enabled": true,
      "columns": ["harmId", "harmDescription", "severity"]
    },
    {
      "level": 3,
      "name": "Safety Goal",
      "work_item_type": "safetyGoal",
      "link_role": "refines",
      "expansion_enabled": true,
      "columns": ["sgId", "sgTitle", "sgDescription"]
    },
    {
      "level": 4,
      "name": "Risk Record",
      "work_item_type": "riskRecord",
      "link_role": "mitigates",
      "expansion_enabled": false,
      "columns": ["rrId", "rrTitle", "rrStatus"]
    }
  ]
}

Column Groups and Layout

The HARA risksheet organizes columns into five functional groups with color-coded headers:

1. Situation Analysis Group (Blue Header, #1e88e5)

Column IDDisplay NameData TypeSourceFormulaRequired
systemElementSystem ElementBackLinkhazard.analyzedElementYes
categoryCategoryEnumhazard.categoryYes
operationalPhaseOperational PhaseEnumhazard.operationalPhaseYes
operationalSituationOperational SituationStringhazard.operationalSituationNo
Rendering Notes:
  • System Element renders as clickable link to system architecture
  • Category enum values: SensorFailure, ComputationFailure, ActuatorFailure, InterfaceFailure, ExternalEvent
  • Operational Phase enum values: Initialization, Normal, Degraded, Shutdown, Emergency

2. Hazard Identification Group (Purple Header, #7e57c2)

Column IDDisplay NameData TypeSourceFormulaRequired
hazardIdHazard IDStringhazard.idAuto
hazardNameHazard NameStringhazard.titleYes
hazardDescriptionDescriptionTexthazard.descriptionYes
hazardCauseCause(s)Texthazard.causeYes
hazardConsequenceConsequence(s)Texthazard.consequenceYes
Example Entry:
Hazard ID: H-001
Name: Loss of obstacle detection
Description: AEB system fails to detect vehicle or pedestrian ahead
Cause(s): Camera module malfunction, radar interference, processing delay
Consequence(s): No braking command issued, collision with obstacle

3. HARA Classification Group (Red Header, #c62828)

This group implements the ISO 26262 ASIL determination algorithm.
Column IDDisplay NameData TypeSourceFormulaRequired
severitySeverity (S)Enum(S0-S3)hazard.severityYes
exposureExposure (E)Enum(E0-E4)hazard.exposureYes
controllabilityControllability (C)Enum(C0-C3)hazard.controllabilityYes
asilASILEnum(QM,A,B,C,D)hazard.asilASIL_MATRIX(severity, exposure, controllability)Calculated
See HARA Severity, HARA Exposure, HARA Controllability, and ASIL Classification for enumeration details. ASIL Determination Formula:
function ASIL_MATRIX(S, E, C) {
  // ISO 26262-3 Table A.1 ASIL Matrix
  const matrix = {
    'S0': 'QM',                          // Severity 0 → QM (no safety requirement)
    'S1': (E,C) => E=='E0' || C=='C3' ? 'QM' : 'A',
    'S2': (E,C) => {
      if (E=='E0' || E=='E1' || C=='C3') return 'QM';
      if (E=='E2' && C=='C0') return 'B';
      if (E=='E3' && C=='C0') return 'C';
      if (E=='E4' && C=='C0') return 'D';
      return 'A';
    },
    'S3': (E,C) => {
      if (E=='E0') return 'QM';
      if (E=='E1' && C=='C3') return 'QM';
      if (E=='E2' && C=='C2') return 'A';
      if (E=='E3' && C=='C2') return 'B';
      if (E=='E4' && C=='C2') return 'C';
      return 'D';
    }
  };
  return matrix[S](/automotive/reference/risksheet-configs/E, C);
}
Cell Styling:
  • QM (Quality Managed): Light gray background (#f5f5f5)
  • ASIL A: Light green (#c8e6c9)
  • ASIL B: Light yellow (#fff9c4)
  • ASIL C: Light orange (#ffe0b2)
  • ASIL D: Light red (#ffcdd2)

4. Safety Goal Derivation Group (Green Header, #43a047)

Column IDDisplay NameData TypeSourceFormulaRequired
safetyGoalIdSG IDStringsafetyGoal.idAuto
safetyGoalTitleSafety GoalStringsafetyGoal.titleYes
safetyGoalDescriptionSG DescriptionTextsafetyGoal.descriptionNo
sgAsilSG ASILEnumsafetyGoal.asilMIN(all_hazards_asil)Calculated
Safety Goal Derivation Logic: Each hazard must derive at least one safety goal. Safety goals are typically stated as:
  • “Ensure [system capability] is maintained”
  • “Prevent [failure mode] from occurring”
  • “Provide [failsafe action] on [failure condition]”
Example mapping: Hazard H-001 (Loss of obstacle detection, ASIL D) ↓ derives Safety Goal SG-02: Ensure obstacle detection reliability with ASIL D coverage Hazard H-002 (Delayed braking, ASIL B) ↓ derives Safety Goal SG-03: Ensure timely braking response (<200ms) with ASIL B coverage

5. Risk Control and Closure Group (Orange Header, #fb8c00)

Column IDDisplay NameData TypeSourceFormulaRequired
riskControlIdRC IDStringriskRecord.idAuto
riskControlTitleRisk ControlStringriskRecord.titleYes
riskControlTypeRC TypeEnumriskRecord.controlTypeYes
evaluationStatusStatusEnumriskRecord.statusYes
Risk Control Type Enum Values: See Control Type for complete enumeration.
- ARCHITECTURAL: System-level design choice that prevents hazard
- DESIGN: Design feature or component that detects/prevents failure
- PROCESS: Manufacturing or operational control that mitigates risk
- VERIFICATION: Test or analysis that confirms effectiveness
- OPERATIONAL: Training, procedure, or maintenance requirement
Evaluation Status Workflow:

Expand/Collapse Controls

Each row includes expansion controls for navigating the hierarchy:
ControlLevelPurposeEffect
+/- icon Level 1HazardShow/hide child harmsExpands/collapses all harms linked to hazard
+/- icon Level 2HarmShow/hide child safety goalsExpands/collapses all safety goals derived from harm
+/- icon Level 3Safety GoalShow/hide child risk controlsExpands/collapses all risk records linked to SG
Zoom icon Level 4Risk ControlNavigate to detail recordOpens related Risk Record work item in full form

Predefined Views

The HARA risksheet includes six workflow-optimized views:

View 1: Identify Risks (Hazard Identification Phase)

Visible Columns: systemElement, hazardName, hazardDescription, hazardCause, hazardConsequence Purpose: Focus on hazard discovery and documentation before assessment Typical Users: Safety analyst, system architect
System Element | Hazard Name | Description | Cause(s) | Consequence(s)
Sensor Unit    | Power loss  | ...         | ...      | ...
ECU            | Computation | ...         | ...      | ...

View 2: Initial Assessment (HARA Classification Phase)

Visible Columns: hazardName, severity, exposure, controllability, asil, safetyGoalTitle Purpose: Document S/E/C assessment and confirm ASIL calculation Typical Users: Safety engineer, systems engineer

View 3: Risk Control Planning (Mitigation Phase)

Visible Columns: hazardName, asil, safetyGoalTitle, riskControlId, riskControlTitle, riskControlType Purpose: Link risk controls to safety goals and define mitigation strategy Typical Users: Design lead, safety engineer

View 4: All Columns

Visible Columns: All columns in all groups Purpose: Complete analysis view for detailed review Typical Users: Auditor, quality engineer

View 5: Dashboard Summary (QM Filtering)

Visible Columns: All, filtered to exclude QM hazards Purpose: Executive view showing only ASIL A/B/C/D items requiring safety processes Typical Users: Project manager, safety lead

View 6: Export Ready

Visible Columns: All safety-critical fields + formatting for PDF export Purpose: Prepare data for compliance reporting Typical Users: Document manager, compliance officer

Formulas and Calculations

ASIL Determination

Implemented as server-side formula in hazard work item custom field:
#set($severity = $item.getCustomFieldValue('severity'))
#set($exposure = $item.getCustomFieldValue('exposure'))
#set($controllability = $item.getCustomFieldValue('controllability'))
#set($matrix = {
  'S0': 'QM',
  'S1_E0': 'QM', 'S1_E1': 'QM', 'S1_E2': 'A', 'S1_E3': 'A', 'S1_E4': 'A',
  'S2_E0': 'QM', 'S2_E1': 'QM', 'S2_E2': 'A', 'S2_E3': 'B', 'S2_E4': 'C',
  'S3_E0': 'QM', 'S3_E1': 'A', 'S3_E2': 'B', 'S3_E3': 'C', 'S3_E4': 'D'
})
$matrix.get("${severity}_${exposure}")

Safety Goal ASIL (Minimum of Linked Hazards)

function safetyGoalASIL(safetyGoalId) {
  const linkedHazards = getLinkedWorkItems(safetyGoalId, 'derivedFrom');
  const asilValues = linkedHazards.map(h => h.asil);
  return minimumASIL(asilValues);  // Returns worst-case ASIL
}

Traceability Coverage Percentage

function haraTraceabilityPercent() {
  const hazardsTotal = queryWorkItems("type:hazard").length;
  const hazardsWithSG = queryWorkItems("type:hazard AND exists:linkedSafetyGoals").length;
  return Math.round(hazardsWithSG / hazardsTotal * 100);
}

Integration Points

Each Safety Goal derived in HARA flows downstream to System FMEA analysis. Failure modes in SFMEA should link back to Safety Goals using the implements link role.
See System FMEA Risksheet Configuration for integration details. Link Pattern: diagram HARA-derived Safety Goals are tracked in the Risk Control Plan risksheet, which documents how each goal is achieved through design controls, verification tests, and manufacturing controls. See Risk Control Plan Risksheet Configuration. System Requirements are traced back to Safety Goals in the Whole RTM PowerSheet using the implements link role. This establishes the complete chain:

Zoom Columns (Detail Navigation)

Each hierarchical level includes a zoom column for opening the linked work item in detail form:
LevelZoom ColumnOpens
1Hazard detailFull Hazard Work Item form
2Harm detailFull Harm Work Item form
3Safety Goal detailFull Safety Goal Work Item form
4Risk Control detailFull Risk Record Work Item form
Usage: Click the zoom icon (🔍) in any zoom column to open the work item in a side panel or new tab. This allows editing of detailed properties (custom fields, attachments, links) while maintaining the risksheet context.

Row Control and Filtering

Row Expand/Collapse Buttons

Each row at Level 1, 2, and 3 shows a + or - icon controlling visibility of child rows:
  • + (collapsed): Click to expand and show children
  • - (expanded): Click to collapse and hide children
  • (blank): No children, cannot expand

Column-Based Filtering

Filter rows by column value using the filter icon in each column header: Example Filters:
FilterEffect
ASIL = DShow only ASIL D hazards
Severity = S3Show only severity S3 items
Category = SensorFailureShow only sensor-related hazards
Status = ProposedShow risk controls still in proposal phase
Type in the global search box to filter all visible rows containing the search term.

Custom Field Mappings

Work Item FieldRisksheet ColumnEditableDefault
hazard.severitySeverity (S)YesS1
hazard.exposureExposure (E)YesE1
hazard.controllabilityControllability (C)YesC1
hazard.asilASILNo(calculated)
hazard.operationalPhaseOperational PhaseYesNormal
hazard.operationalSituationOperational SituationYes(empty)
safetyGoal.titleSafety GoalYes(empty)
safetyGoal.asilSG ASILNo(calculated)
riskRecord.controlTypeRisk Control TypeYes(empty)
riskRecord.statusEvaluation StatusYesProposed

Data Persistence and Sync

Write-Back Behavior

When a user edits a cell in the risksheet:
  1. Immediate: Cell value updated in browser (optimistic UI)
  2. Background: Change saved to Polarion work item custom field
  3. Sync: Related calculated fields (e.g., ASIL, SG ASIL) recalculated server-side
  4. Propagation: Dashboard statistics and reports updated within 30 seconds

Validation Rules

Mandatory Field Validation:
  • Severity, Exposure, Controllability must be set before ASIL is valid
  • Each Hazard must have at least one linked Safety Goal
  • Each Safety Goal must have at least one linked Risk Control
Warnings (non-blocking):
⚠ Hazard H-001 has ASIL D but no verification test case linked
⚠ Safety Goal SG-02 not linked to any System Requirement (traceability gap)
⚠ Risk Control RC-05 status is 'Proposed' but implementation due date has passed

Performance Considerations

Large Document Handling

For HARA documents with >100 hazards:
  1. Use progressive views (Identify Risks, Initial Assessment) instead of All Columns
  2. Apply filters to reduce rendered row count (e.g., filter to ASIL D only)
  3. Collapse all top-level rows initially, then expand only needed subsections
  4. Consider splitting into multiple documents by subsystem (one HARA per major component)
  • Rows per view: 20-50 (configurable)
  • Load strategy: Lazy-load children on expand
  • Cache timeout: 60 seconds (reload if upstream FMEA changes)

Version History

VersionDateChanges
3.02026-02-15Current: Four-level hierarchy (Hazard/Harm/SafetyGoal/RiskRecord), ASIL matrix formula, six predefined views
2.52025-10-01Added Safety Goal ASIL calculation, improved zoom column navigation
2.02025-06-15Three-level hierarchy (Hazard/SafetyGoal/RiskControl), basic S/E/C assessment