ISO/PAS 21448:2019 – Safety of the Intended Functionality (SOTIF) Training Course
ISO/PAS 21448:2019, commonly referred to as Safety of the Intended Functionality (SOTIF), is a standard developed to mitigate safety risks stemming from functional inadequacies or the misuse of advanced driver assistance systems (ADAS) and autonomous driving technologies.
This instructor-led, live training (available online or on-site) is designed for quality management professionals with intermediate expertise who aim to master the concepts, scope, and practical application of SOTIF. Participants will learn how to design, implement, and verify the safety of intended functionality within ADAS and autonomous driving features.
Upon completion of this training, participants will be capable of:
- Identifying potential functional insufficiencies and misuse scenarios.
- Conducting hazard analysis and classifying risks according to SOTIF principles.
- Integrating SOTIF requirements throughout the system design, development, and validation stages.
- Applying validation methods to address edge cases and unforeseeable risks.
- Ensuring continuous monitoring and post-deployment enhancements to uphold safety standards.
- Recognizing and resolving challenges specific to emerging technologies and SOTIF processes.
Course Format
- Interactive lectures and discussions.
- Extensive exercises and practical practice.
- Hands-on implementation in a live-lab environment.
Course Customization Options
- To request customized training for this course, please contact us to arrange.
Course Outline
Introduction to SOTIF and ISO/PAS 21448:2019
- Background and evolution of the standard
- Comparison between ISO 26262 and ISO/PAS 21448
- Scope and purpose of SOTIF
Key Concepts and Definitions
- Safety of the Intended Functionality (SOTIF)
- Distinction between functional safety and SOTIF
- Terminology: Hazard, Triggering Events, Safe State, and Unsafe State
SOTIF Process and Framework Overview
- Stages of the SOTIF life cycle
- Relationship between hazard analysis and risk assessment (HARA)
- Concept of controllability and situational awareness
Identifying and Classifying Hazards
- Potential hazards related to ADAS and automated driving
- Use cases and examples of functional insufficiencies
- Triggering events in real-world scenarios
Hazard Analysis and Risk Assessment (HARA)
- Techniques for identifying and evaluating risks
- Addressing unknown and foreseeable hazards
- Determining appropriate risk reduction measures
Design and Implementation for SOTIF Compliance
- System architecture with a focus on safety
- Software and hardware development considerations
- Integration of safety requirements into design phases
Verification and Validation Techniques
- Testing strategies: simulation, on-road testing, and field tests
- Systematic and random failure detection methods
- Validation of intended functionality in edge cases
Monitoring and Continuous Improvement
- Techniques for real-time monitoring of safety systems
- Collection and use of field data for refinement
- Post-deployment safety strategies
Documentation and Reporting Requirements
- SOTIF process documentation standards
- Key deliverables: Safety plan, safety case, and hazard reports
- Communication between stakeholders and regulatory compliance
SOTIF in Practice: Case Studies and Best Practices
- Review of SOTIF implementations in ADAS and autonomous driving systems
- Lessons learned from safety-critical incidents
- Best practices for maintaining SOTIF compliance
Future Trends and the Role of SOTIF in Autonomous Vehicles
- Evolution of standards and regulatory frameworks
- Trends in autonomous driving and safety technologies
- Relationship with other safety-related standards (ISO 26262, UNECE WP.29)
Summary and Next Steps
Requirements
- Foundational knowledge of automotive systems
- Understanding of system engineering processes and software development lifecycles
Target Audience
- Automotive safety engineers
- System and software engineers
- Functional safety managers
- Automotive project managers
- Quality management professionals
Open Training Courses require 5+ participants.
ISO/PAS 21448:2019 – Safety of the Intended Functionality (SOTIF) Training Course - Booking
ISO/PAS 21448:2019 – Safety of the Intended Functionality (SOTIF) Training Course - Enquiry
ISO/PAS 21448:2019 – Safety of the Intended Functionality (SOTIF) - Consultancy Enquiry
Testimonials (2)
Theory followed by practical examples and exercices. Job well done!
Vincenzo Delle Donne - Department of National Defence
Course - ISO 37301 Compliance Management System
the expertise & knowledge of the trainer
Erica DeRosa DeRosa - Aecon Group INc.
Course - ISO 37001 Anti-Bribery Management System
Upcoming Courses
Related Courses
Interpretation of Environmental Management System Standard ISO 14001:2015
24 HoursISO 14001:2015 serves as the international benchmark for establishing, implementing, and enhancing an Environmental Management System (EMS).
This instructor-led live training, available both online and onsite, is designed for professionals at beginner and intermediate levels who aim to comprehend, interpret, and implement the requirements of ISO 14001:2015 within their respective organizations.
After completing this workshop, participants will be equipped to:
- Interpret the structure, requirements, and underlying intent of ISO 14001:2015.
- Identify environmental aspects and associated risks in compliance with the standard.
- Assess organizational context and leadership responsibilities.
- Evaluate operational controls, performance metrics, and improvement processes.
Course Format
- Guided presentations supported by real-world examples.
- Practical exercises, case studies, and scenario-based discussions.
- Interactive activities focused on interpreting and applying ISO 14001:2015 requirements.
Customization Options
- To tailor this course to meet your organization’s specific EMS needs, please contact us to discuss customization options.
Applied Interpretation and Implementation of ISO 20560 for Industrial Safety Signage
21 HoursISO 20560 serves as a worldwide standard establishing unified safety signage and pipe marking protocols for industrial settings.
This instructor-led training, available both online and on-site, targets advanced industrial and safety professionals seeking to apply ISO 20560 requirements in practical operational contexts.
After completing this training, participants will be able to:
- Accurately interpret the structure, terminology, and application guidelines of ISO 20560.
- Design and implement compliant systems for safety signage and pipe identification.
- Evaluate risks linked to industrial substances and processes using standardized visual communication methods.
- Adapt ISO 20560 requirements to align with local regulations and specific sector needs, such as those in cosmetic manufacturing.
Course Format
- Expert-led presentations combined with guided discussions.
- Scenario-based exercises and applied workshops.
- Hands-on evaluation of signage and pipe marking within simulated industrial environments.
Course Customization Options
- To tailor this course to your organization’s operational context or facility layout, please contact us to arrange a customized session.
ISO 10012:2003 – Measurement Management Systems
14 HoursThis instructor-led, live training in Serbia (online or onsite) is aimed at intermediate-level quality and measurement professionals who wish to implement, audit, or improve a measurement management system based on ISO 10012:2003 to support quality assurance and regulatory compliance.
By the end of this training, participants will be able to:
- Understand the structure, scope, and intent of ISO 10012:2003.
- Implement a measurement management system that ensures equipment reliability and measurement traceability.
- Define roles, responsibilities, and documentation required for measurement control.
- Integrate ISO 10012 with broader quality and risk management frameworks (e.g., ISO 9001, ISO/IEC 17025).
ISO 22000 Certification: Food Safety Management Systems
14 HoursThis instructor-led, live training in Serbia (online or onsite) is targeted at intermediate to advanced professionals in the food industry who wish to understand, implement, and achieve ISO 22000 certification.
By the end of this training, participants will be able to:
- Understand the principles and requirements of ISO 22000.
- Implement a Food Safety Management System (FSMS).
- Identify and manage food safety hazards using HACCP principles.
- Prepare for ISO 22000 certification audits.
- Ensure compliance with international food safety regulations.
PECB ISO/IEC 27001 Foundation
14 HoursWhy participate?
The ISO/IEC 27001 Foundation training equips you with the fundamental knowledge required to implement and manage an Information Security Management System (ISMS) in accordance with ISO/IEC 27001. Throughout this course, you will gain a comprehensive understanding of the various ISMS components, such as ISMS policies, procedures, performance metrics, management commitment, internal auditing, management review, and the principle of continual improvement.
Upon successful completion of the course, you will be eligible to take the examination and apply for the “PECB Certified ISO/IEC 27001 Foundation” credential. This certificate validates your grasp of the essential methodologies, requirements, frameworks, and management approaches defined by the standard.
Target Audience
- Professionals engaged in Information Security Management
- Individuals aiming to acquire knowledge about the core processes of Information Security Management Systems (ISMS)
- Career seekers interested in Information Security Management
Training Methodology
- Lectures are enhanced with practical questions and real-world examples
- Practical exercises feature illustrative examples and interactive discussions
- Practice tests mirror the format and style of the Certification Exam
PECB ISO/IEC 27001 Lead Auditor
35 HoursISO/IEC 27001 Lead Auditor
The ISO/IEC 27001 Lead Auditor training program equips you with the essential expertise to conduct Information Security Management System (ISMS) audits by applying internationally recognized audit principles, procedures, and techniques.
Why should you attend?
Through this training course, you will gain the knowledge and skills required to plan and execute both internal and external audits in accordance with ISO 19011 and the ISO/IEC 17021-1 certification process.
Based on practical exercises, you will master audit techniques and become competent in managing audit programs and teams, handling customer communications, and resolving conflicts.
Upon acquiring the necessary expertise to perform this audit, you may sit for the exam and apply for the “PECB Certified ISO/IEC 27001 Lead Auditor” credential. Holding a PECB Lead Auditor Certificate demonstrates that you possess the capabilities and competencies to audit organizations based on best practices.
Who should attend?
- Auditors seeking to perform and lead Information Security Management System (ISMS) certification audits
- Managers or consultants seeking to master an Information Security Management System audit process
- Individuals responsible for maintaining conformance with Information Security Management System requirements
- Technical experts seeking to prepare for an Information Security Management System audit
- Expert advisors in Information Security Management
Learning objectives
- Understand the operations of an Information Security Management System based on ISO/IEC 27001
- Acknowledge the correlation between ISO/IEC 27001, ISO/IEC 27002 and other standards and regulatory frameworks
- Understand an auditor’s role to: plan, lead and follow-up on a management system audit in accordance with ISO 19011
- Learn how to lead an audit and audit team
- Learn how to interpret the requirements of ISO/IEC 27001 in the context of an ISMS audit
- Acquire the competencies of an auditor to: plan an audit, lead an audit, draft reports, and follow-up on an audit in compliance with ISO 19011
Educational approach
- This training is based on both theory and best practices used in ISMS audits
- Lecture sessions are illustrated with examples based on case studies
- Practical exercises are based on a case study which includes role playing and discussions
- Practice tests are similar to the Certification Exam
ISO/IEC 27005 Lead Risk Manager
35 HoursThe ISO/IEC 27005 Lead Risk Manager training program equips you with the essential expertise to assist organizations in managing risks associated with all assets critical to Information Security, using the ISO/IEC 27005 standard as a guiding framework. Throughout this course, you will develop a comprehensive understanding of the process model for designing and implementing an Information Security Risk Management program. You will also gain in-depth knowledge of best practices for risk assessment methods, including OCTAVE, EBIOS, MEHARI, and harmonized TRA. This course supports the implementation of the ISMS framework outlined in the ISO/IEC 27001 standard.
Upon mastering the key concepts of Information Security Risk Management based on ISO/IEC 27005, you may take the exam to apply for the "PECB Certified ISO/IEC 27005 Lead Risk Manager" credential. Holding a PECB Lead Risk Manager Certificate demonstrates that you possess the practical knowledge and professional capabilities to support and lead teams in managing Information Security Risks.
Target Audience
- Information Security risk managers
- Members of Information Security teams
- Professionals responsible for Information Security, compliance, and risk within an organization
- Individuals implementing or seeking compliance with ISO/IEC 27001, or those involved in risk management programs
- IT consultants
- IT professionals
- Information Security officers
- Privacy officers
Examination - Duration: 3 hours
The "PECB Certified ISO/IEC 27005 Lead Risk Manager" exam fully complies with the requirements of the PECB Examination and Certification Programme (ECP). The exam assesses the following competency domains:
- Domain 1: Fundamental principles and concepts of Information Security Risk Management
- Domain 2: Implementation of an Information Security Risk Management program
- Domain 3: Information security risk assessment
- Domain 4: Information security risk treatment
- Domain 5: Information security risk communication, monitoring, and improvement
- Domain 6: Information security risk assessment methodologies
General Information
- Certification fees are included in the exam price
- Training materials, comprising over 350 pages of content and practical examples, will be provided
- A participation certificate granting 21 CPD (Continuing Professional Development) credits will be issued
- In the event of exam failure, you may retake the exam within 12 months at no additional cost
ISO 27017: Information Security Controls for Cloud Services
14 HoursThis instructor-led, live training in Serbia (online or onsite) is aimed at intermediate-level IT and security professionals who wish to implement ISO 27017 controls to enhance cloud security and compliance.
By the end of this training, participants will be able to:
- Understand the principles and objectives of ISO 27017.
- Identify key security controls specific to cloud environments.
- Implement ISO 27017 controls within cloud service providers and cloud customers.
- Align cloud security strategies with ISO 27001 requirements.
- Ensure compliance with international cloud security best practices.
ISO/IEC 27035 Lead Incident Manager
35 HoursThe ISO/IEC 27035 Lead Incident Manager program focuses on applying the ISO/IEC 27035 standard to effectively plan, manage, and enhance an organization’s information security incident management processes.
Delivered as an instructor-led live session (available online or onsite), this training is designed for seasoned security professionals aiming to lead and manage incident response teams in alignment with ISO/IEC 27035 best practices.
Upon completion of this training, participants will be equipped to:
- Comprehend the structure, core principles, and requirements of ISO/IEC 27035.
- Create and execute a comprehensive information security incident management plan.
- Guide an incident response team through detection, analysis, containment, and recovery phases.
- Integrate incident management into the organization’s ISMS to ensure continual improvement.
Course Format
- Interactive lectures and group discussions.
- Extensive exercises and practical application.
- Hands-on implementation within a live-lab environment.
Customization Options
- For customized training arrangements, please contact us directly.
ISO 37001 Anti-Bribery Management System
14 HoursISO 37001:2025 is an international standard for Anti-Bribery Management Systems (ABMS) that establishes requirements and provides guidance for preventing, detecting, and addressing bribery risks within organizations of any size or industry.
This instructor-led, live training (available online or onsite) is designed for beginner to intermediate-level professionals seeking to understand and support the implementation or auditing of an anti-bribery management system aligned with ISO 37001:2025.
Upon completion of this training, participants will be able to:
- Comprehend the structure and objectives of ISO 37001:2025.
- Apply anti-bribery requirements in practical organizational settings.
- Develop and monitor effective internal controls and reporting mechanisms.
- Support organizational efforts to achieve regulatory compliance and uphold ethical integrity.
Format of the Course
- Interactive lectures and discussions.
- Real-world case studies and examples.
- Scenario-based exercises and group work.
Course Customization Options
- To request customized training for this course, please contact us to arrange it.
ISO 37301 Compliance Management System
14 HoursISO 37301 is an international standard that outlines the requirements for establishing, developing, implementing, evaluating, maintaining, and improving an effective compliance management system (CMS).
This instructor-led, live training (online or onsite) is aimed at beginner-level to intermediate-level professionals who wish to understand, implement, or audit a compliance management system based on ISO 37301.
By the end of this training, participants will be able to:
- Understand the structure, purpose, and scope of ISO 37301.
- Implement the key elements of a compliance management system (CMS).
- Identify compliance risks and opportunities across the organization.
- Integrate ISO 37301 CMS with existing governance, risk, or ISO systems.
Format of the Course
- Interactive lecture and discussion.
- Hands-on exercises and real-world case studies.
- Group activities and compliance scenario simulations.
Course Customization Options
- To request a customized training for this course, please contact us to arrange.
PECB ISO/IEC 42001 Lead Auditor
35 HoursThis ISO/IEC 42001 Lead Auditor training course is designed to equip you with the essential expertise required to audit Artificial Intelligence Management Systems (AIMS). By leveraging widely recognized audit principles, procedures, and techniques, you will develop the skills necessary to evaluate and ensure the effectiveness of AIMS.
ISO 9001 and ISO 27001 – Interpretation and Internal Auditor
21 HoursISO 9001 and ISO 27001 stand as globally acknowledged benchmarks for quality management and information security management systems, respectively.
Delivered through instructor-led live sessions, available either online or on-site, this training is designed for professionals at an intermediate level who aim to master the interpretation of ISO 9001 and ISO 27001 standards and execute internal audits with confidence.
Upon completing this course, participants will be equipped to:
- Grasp the fundamental principles and mandatory requirements of both ISO 9001 and ISO 27001.
- Apply the interpretation of specific clauses and controls to practical, real-world situations.
- Effectively plan and carry out internal audits in accordance with ISO standards.
- Detect nonconformities and propose appropriate corrective measures.
Course Delivery Format
- Engaging interactive lectures paired with group discussions.
- Practical auditing exercises and in-depth case studies.
- Direct analysis of quality and security scenarios to reinforce learning.
Customization Options
- For tailored training solutions based on this curriculum, please reach out to us to coordinate arrangements.
PECB ISO/IEC 27001 Transition
14 HoursThe ISO/IEC 27001 Transition training course allows participants to gain a comprehensive understanding of the distinctions between ISO/IEC 27001:2013 and ISO/IEC 27001:2022. Furthermore, participants will learn about the new concepts introduced by ISO/IEC 27001:2022.
ISO/IEC 27001 Lead Auditor (certification course)
35 HoursWho can attend?
- Auditors seeking to perform and lead information security management system (ISMS) audits
- Managers or consultants seeking to master the information security management system audit process
- Individuals responsible to maintain conformity with the ISMS requirements in an organization
- Technical experts seeking to prepare for the information security management system audit
- Expert advisors in information security management
Learning objectives
By the end of this training course, the participants will be able to:
- Explain the fundamental concepts and principles of an information security management system (ISMS) based on ISO/IEC 27001
- Interpret the ISO/IEC 27001 requirements for an ISMS from the perspective of an auditor
- Evaluate the ISMS conformity to ISO/IEC 27001 requirements, in accordance with the fundamental audit concepts and principles
- Plan, conduct, and close an ISO/IEC 27001 compliance audit, in accordance with ISO/IEC 17021-1 requirements, ISO 19011 guidelines, and other best practices of auditing
- Manage an ISO/IEC 27001 audit program
Educational approach
- This training is based on both theory and best practices used in ISMS audits
- Lecture sessions are illustrated with examples based on case studies
- Practical exercises are based on a case study which includes role playing and discussions
- Practice tests are similar to the Certification Exam