Functional Safety Assessment (FSA) – Why Independent Assessment Matters

30 Oct 2026

Helping Organizations Move Beyond Assumption-driven Engineering Towards Objective, Evidence-based Safety Assurance

One of the defining principles within IEC 61508 is that functional safety cannot rely solely on self-confirmation. As risk increases, the need for independence, objectivity, and evidence-based assessment also increases. This is the role of Functional Safety Assessment (FSA).

Functional Safety Assessment is a structured and independent review process used to determine whether functional safety activities, work products, and systems comply with the requirements of IEC 61508.

While often associated with certification projects, FSAs provide much broader value than compliance alone. They help organizations identify weaknesses, improve lifecycle governance, strengthen traceability, and increase confidence that safety-related systems will perform as intended.

What Is Functional Safety Assessment?

IEC 61508 defines Functional Safety Assessment as an investigation based on evidence to judge whether the safety lifecycle activities and outputs comply with the objectives and requirements of the standard. An FSA is typically performed independently from the individuals directly responsible for the activities being assessed.

The assessment may review:

• Functional Safety Management systems
• Hazard and risk analysis
• Safety requirements specifications
• Hardware architectures
• Software development activities
• Verification and validation evidence
• Competence records
• Change management processes
• Proof test strategies
• Operational procedures
• Lifecycle traceability

The objective is not simply to identify nonconformities, but to determine whether sufficient confidence exists that the system can safely achieve its intended function.

FSA vs Functional Safety Audits

A common point of confusion in functional safety management is the distinction between a Functional Safety Assessment (FSA) and a functional safety audit. The terms are often used interchangeably, but they serve different purposes. An FSA is a judgement of the functional safety achieved: it examines the technical outputs of the safety lifecycle and concludes whether the safety instrumented systems actually deliver the required risk reduction. It is stage-gated and requires assessor independence commensurate with the SIL. An audit, by contrast, is a judgement of conformance to procedures: it verifies that the functional safety management system is being followed, whether internally or by an external party, without judging the adequacy of the design itself. Put simply, the audit asks "did you follow your process?", while the FSA asks "did it actually make the system safe?" Both are mandatory, and neither substitutes for the other.

Independence Is Central to FSA

One of the most important principles behind FSA is independence. IEC 61508 recognizes that individuals directly involved in design or implementation activities may unintentionally overlook weaknesses or assumptions. Independent assessment helps to reduce confirmation bias and assumption-driven engineering.

As SIL levels increase, so do the independence requirements. Depending on the application, independence may be achieved through:

• Separate internal teams
• Independent reviewers
• Corporate governance structures
• External assessment bodies
• Third-party functional safety specialists

The appropriate level of independence depends on the complexity, consequence, and SIL of the system – this is detailed in clause 8 of IEC 61508-1.

FSA Across the Safety Lifecycle

Functional Safety Assessment is not normally a single end-of-project activity. IEC 61508 identifies several assessment stages aligned to the safety lifecycle.

These stages typically include:

• Concept and hazard analysis
• Design and implementation
• Installation and commissioning
• Operation and maintenance
• Modification and decommissioning

Performing assessment activities throughout the lifecycle helps identify issues earlier, reducing costly redesign, delays, and operational risk.

Common Findings During FSAs

Functional Safety Assessments (FSAs) frequently identify recurring weaknesses within both safety management systems and safety lifecycle implementation activities. In many cases, these issues are not caused by a single technical failure, but by gaps in governance, traceability, verification, or lifecycle discipline.

Typical findings include incomplete or poorly defined Safety Requirements Specifications (SRS), weak management of change processes, inconsistent lifecycle documentation, missing verification or validation evidence, undefined competence requirements, and inadequate traceability between hazards, safety requirements, testing, and final validation activities. Assessments may also identify overreliance on supplier claims without sufficient independent verification, insufficient proof test coverage, or a lack of clearly demonstrated independence within assessment and review activities.

Importantly, these findings are often systematic management issues rather than purely hardware or software failures. This reinforces why IEC 61508 places such strong emphasis on functional safety management, competence, independence, verification, validation, and full lifecycle governance.

Final Thoughts

Functional Safety Assessment plays a critical role in achieving confidence in safety-related systems. It provides independent evidence that safety activities have been planned, implemented, verified, and maintained in accordance with IEC 61508.

More importantly, FSA helps organizations move beyond assumption-driven engineering towards objective, evidence-based safety assurance.

As systems become more automated, software-intensive, and interconnected, independent assessment will become increasingly critical to achieving trusted and defensible functional safety.