ISO 21448: safety of the intended functionality (SOTIF)
Addresses hazards from performance limitations of the intended function, such as sensors that cannot see in some conditions, rather than from component failures; requires identifying unknown unsafe scenarios and restricting operation to known safe ones.
Draft mapping. Drafted by the Register's agents from the rule's text and not yet confirmed by a person. It is the Register's reading, not legal advice: whether and how the rule applies to you is a question for counsel.
Controls this rule maps to
Required by the text The rule's text requires a measure that is this control, or plainly includes it. Implied A binding rule whose purpose needs this control, but whose text does not name it. The Register's reading. Recommended A voluntary standard or guidance recommends it; nothing binds you to it. Proposed Appears in a proposed rule or proposed provision that is not yet in force.
| Control | Strength | Where in the rule, and why | Confidence | Missing or failed in |
|---|---|---|---|---|
| Degraded-input detection C-I3 | Recommended | the standard's core concern is detecting when perception is outside its validated conditions | high | 3 cases |
| Hard domain restriction C-E2 | Recommended | restricting operation to the validated operational design domain | high | 4 cases |
| Input redundancy and disagreement check C-I2 | Recommended | redundancy and disagreement checks are the usual mitigation for sensor limitation | medium | 1 case |