Training on Integrated Functional Safety and Cybersecurity

As systems become more interconnected, the boundaries between functional safety and cybersecurity are blurring. Failures in either domain can lead to catastrophic consequences—from safety-critical malfunctions to cyberattacks on industrial systems. This course provides participants with an in-depth understanding of how to integrate functional safety (FuSa) principles with robust cybersecurity measures. Using international standards such as ISO 26262, IEC 61508, and IEC 62443, the training highlights best practices, tools, and frameworks for designing, assessing, and managing safety- and security-critical systems.

Duration

5 Days

Who Should Attend

• Safety engineers and managers

• Cybersecurity professionals in industrial or safety-critical domains

• Automotive, aerospace, rail, and industrial system engineers

• Compliance, risk, and quality managers

• Project managers overseeing safety-critical or connected systems

Organization Impact

• Enhanced resilience of safety-critical systems against cyber threats

• Compliance with global functional safety and cybersecurity standards

• Reduced risk of operational downtime, liability, and reputational damage

• Improved integration of safety, security, and compliance teams

Individual Impact

• Ability to design and implement integrated FuSa-cybersecurity frameworks

• Skills to evaluate and mitigate risks in safety- and security-critical environments

• Professional growth in high-demand safety and cybersecurity fields

• Confidence in aligning safety, security, and compliance requirements

By the end of the course, participants will be able to:

• Explain the relationship between functional safety and cybersecurity in connected systems.

• Apply ISO 26262, IEC 61508, and IEC 62443 principles in integrated safety and security contexts.

• Conduct joint risk assessments for safety and cybersecurity vulnerabilities.

• Design architectures that address both safety hazards and cyber threats.

• Implement lifecycle approaches for monitoring, compliance, and continuous improvement.

• Evaluate case studies of integrated safety-security incidents and best practices.

Module 1: Foundations of Functional Safety and Cybersecurity

• Understand the core principles of FuSa and cybersecurity in industrial and automotive systems

• Explore the impact of interconnectivity on safety-critical functions

• Review key regulations shaping the industry landscape

• Case study: Stuxnet worm vs. Toyota acceleration recalls — contrasting consequences of neglecting security vs. safety

Module 2: Standards and Compliance Alignment

• Map FuSa standards (ISO 26262, IEC 61508) with cybersecurity frameworks (IEC 62443, ISO/SAE 21434)

• Identify overlaps and integration opportunities for compliance efficiency

• Learn how global industries interpret and apply these standards

• Case study: Automotive OEMs implementing ISO 26262 alongside cybersecurity standards; Oil & Gas firms applying IEC 62443 to critical assets

Module 3: Risk Assessment and Threat Modeling

• Apply hazard analysis tools (HAZOP, FMEA) for functional safety

• Integrate cybersecurity models such as STRIDE and DREAD

• Develop joint safety-security risk assessment methods

• Case study: Colonial Pipeline cyberattack and European rail safety assessments as examples of inadequate joint modeling

Module 4: Designing for Safety and Security

• Explore safe-by-design and secure-by-design approaches

• Compare fail-safe vs. fail-secure strategies

• Learn how redundancy and system partitioning improve resilience

• Case study: Tesla Autopilot software incidents vs. Siemens industrial controller redesign illustrating critical design choices

Module 5: Lifecycle Management and Continuous Improvement

• Implement governance frameworks for integrated FuSa and cybersecurity

• Establish monitoring, auditing, and incident response practices

• Address compliance and certification processes across lifecycles

• Case study: Boeing 737 MAX safety breakdowns vs. medical device cybersecurity regulations showing lifecycle governance strengths and failures