Hardware FixRecommendedDevice not working? Your driver may be the problemCheck updates for common hardware issues.Fix DriversOctober DealsAmazon USOctober deal check: compare before you payAmazon US: current deals, useful picks and tech finds.Check DealsClean PCRecommendedOne scan can reveal what keeps slowing WindowsLook for cleanup and repair opportunities.Run Scan×
Skip to content
CarCodyAdvertise
Service recordThe Garage

Understanding ISO 26262 ASILs: What A, B, C and D Mean

ASIL A through D are risk-based integrity classes in ISO 26262. Learn how HARA assigns them, what Part 9 covers, and why a component’s ASIL capability does not certify a vehicle function.
Entry422 Date Time4 min MechanicCarCody Team
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

ISO 26262 ASILs are risk-based classes that determine how much rigor safety-related automotive electrical and electronic systems need. ASIL A is the least stringent of the four classes; ASIL D is the most stringent. Engineers assign an ASIL to a safety goal or requirement based on a hazardous event and its operating scenario—not to a component simply because of its name or advertised capability.

What ASIL means in ISO 26262

ASIL stands for Automotive Safety Integrity Level. It is part of ISO 26262, the functional-safety framework for safety-related electrical and electronic (E/E) systems in series-production road vehicles. The standard addresses hazards resulting from malfunctioning behavior of those systems; it does not assess a vehicle’s nominal performance.

ASIL is a risk-based classification used to set requirements intended to avoid unreasonable residual risk. It is not a consumer-facing vehicle safety rating, a general quality score, or a probability that a system will fail or cause a crash. The classification attaches to a safety goal or requirement arising from a particular hazardous event.

What ASIL A, B, C and D mean

Classification Relative rigor Practical meaning
QM No ASIL assigned Ordinary quality management applies. The sources summarized here do not establish a normative QM table; consult the applicable edition of ISO 26262 for its exact terminology.
ASIL A Lowest of the four ASILs Lowest required risk reduction among the ASIL classes.
ASIL B Above A More stringent safety requirements than A.
ASIL C Above B More stringent safety requirements than B.
ASIL D Highest of the four ASILs Highest required risk reduction and the most stringent safety measures.

The letters are ordered classes, not percentages or numerical risk scores. Moving from A toward D generally brings more demanding expectations for safety requirements, verification, validation, independence, and confirmation measures. The precise measures depend on the applicable ISO 26262 requirements and the system’s safety case.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

How a HARA determines an ASIL

During the concept phase, engineers perform a hazard analysis and risk assessment (HARA). The classification depends on the hazardous event and the conditions in which it can occur; a part number or component type alone is not enough to determine it.

  1. Identify malfunctioning behavior. Consider how a safety-related E/E function could behave incorrectly, fail to act, or act at the wrong time.
  2. Place it in an operational situation. Define the driving context in which the malfunction could matter, rather than treating the function in isolation.
  3. Describe the hazardous event. Connect the malfunctioning behavior to the resulting hazard in that specific situation.
  4. Assess severity, exposure and controllability. Make and justify the judgments relevant to the event and operating scenario.
  5. Derive the safety goal and ASIL. Use the assessment to establish the safety goal and the required integrity level, then carry that level into downstream requirements and safety activities.

HARA is an engineering assessment, not a calculation that can be performed from a component name alone. Because the assigned level depends on the function and scenario, changing assumptions about operation or the hazardous event can change the safety analysis and its requirements.

What an ASIL assignment changes

The ASIL gives development teams a level of rigor to apply as they turn a safety goal into system, hardware and software requirements. It influences the required safety measures and the evidence needed to show that the measures were followed. Higher assigned levels bring more demanding expectations; the ASIL is not, by itself, proof that a design is safe.

  • Requirements: safety goals and derived requirements must be developed and handled at the rigor required by their assigned level.
  • Design and analysis: teams need to address safety at the relevant system, hardware and software levels, including applicable analyses.
  • Verification and validation: activities and evidence must meet the applicable requirements for the assigned level.
  • Independence and confirmation: the required degree of independence and confirmation measures depends on the safety work and applicable standard requirements.
  • Work products: the safety case relies on evidence and records appropriate to the applicable ISO 26262 parts.

Does ASIL D mean a component is certified?

No—not on its own. An advertised “ASIL D capability” for a component does not establish that a vehicle function satisfies ISO 26262. The function’s ASIL comes from its HARA, and compliance depends on the safety goals, system architecture, implementation, analyses, verification and validation, and supporting evidence across the development lifecycle.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #3
Federal Motor Carrier Safety Regulations Pocketbook
  • FMCSA regulations book includes Parts 40, 380, 382, 383, 387, 390-397, 399 and Appendix G of the FMCSRs. Also covers the ELD rules found in Part 395, Subpart B.
  • FMCSA handbook includes a driver receipt page. Helps in documenting that the carrier has supplied drivers with proper regulatory information.
  • FMCSR handbook is reprinted every month, ensuring access to up-to-date Federal Motor Carrier Safety Regulations. You will receive the latest edition when you order.
  • FMCSR handbook contains regulatory info on a wide range of fleet safety topics: alcohol & drug testing; CDL standards; financial responsibility for motor carriers; driver qualification; safe operation of commercial motor vehicles; hours of service; vehicle inspection, repair & maintenance; transporting hazardous materials; texting ban; employee safety & health standards; minimum periodic inspection standards; & much more.
  • Federal Motor Carrier Safety Regulations FMCSR Pocketbook is softbound (perfect bound) with 624 pages and measures 5" x 7".

A component may be used in a higher-ASIL function, but the integrator still needs to show that the complete design and its use meet the applicable safety requirements. Likewise, describing a component as ASIL-capable is not the same as demonstrating that a particular vehicle system or function has met the standard.

What ISO 26262 Part 9 covers

ISO 26262-9:2018 specifies ASIL-oriented and safety-oriented analyses. Its scope includes requirements decomposition for ASIL tailoring, criteria for coexistence of elements, analysis of dependent failures, and safety analyses.

ASIL decomposition is conditional

Decomposition can distribute a requirement across sufficiently independent elements, subject to the standard’s constraints. It is not a blanket route for relabeling a high-risk function at a lower ASIL. The decomposition argument must address the required independence and relevant failure interactions.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

The ten parts of the ISO 26262:2018 package

Part Subject
Part 1 Vocabulary
Part 2 Management of functional safety
Part 3 Concept phase
Part 4 Product development at the system level
Part 5 Product development at the hardware level
Part 6 Product development at the software level
Part 7 Production, operation, service and decommissioning
Part 8 Supporting processes
Part 9 ASIL-oriented and safety-oriented analyses
Part 10 Guidelines on ISO 26262

ISO’s catalog lists these ten parts in the 2018 package. They describe connected parts of a lifecycle, rather than a standalone ASIL label that can establish compliance by itself.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Which edition applies to ISO 26262-9?

The ISO catalog identifies ISO 26262-9:2018, Edition 2, published in December 2018. The catalog record showed a systematic review in 2023–2024 and a status of “to be revised”; the 2018 edition remained the published edition displayed in that record. Check ISO’s catalog for the current publication status when selecting a standard for a project.

How to compare ASIL implementation approaches

When comparing two proposed designs or safety approaches, the ASIL letter alone is not enough. Compare the assumptions and evidence behind the safety case:

  • The HARA assumptions and operating scenarios.
  • The assigned ASIL and the scope of the safety goal.
  • Any decomposition rationale and the independence argument.
  • Hardware and software architecture metrics.
  • Verification, validation and confirmation measures.
  • The evidence and work products required by the applicable ISO 26262 parts.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

More from the Garage

  1. Entry001Date09 OCT 26Time3 minWhich Brake Pad Should You Buy From RockAuto or Elsewhere?Section: Blog
  2. Entry002Date09 OCT 26Time5 minThe Pros and Cons of Touchless Car Wash SystemsSection: Blog
  3. Entry003Date09 OCT 26Time3 minCan a Trickle Charger or Battery Tender Properly Charge a Car Battery?Section: Blog

Thanks for visiting Carcody

Carcody.com is a participant in the Amazon Services LLC Associates Program, an affiliate advertising program designed to provide a means for sites to earn advertising fees by advertising and linking to amazon.co

Recommended PC Tool
Recommended PC Tool
Crashes, No Sound, or Screen Glitches?Free driver scan
PC Slower Than It Used to Be?Free scan - under a minute

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.