Assurance of Software-Intensive Systems: What About Mental Harm?

Link for signup and the webinar will be provided closer to the event.


ISO 21448:2022 is the standard that defines the Safety of the intended functionality (SOTIF).

J3016-SAE defines a taxonomy for SAE’s six levels of driving automation and provides a series of definitions for terms related to on-road motor vehicle automated driving systems.

n this webinar, Barbara Gallina will briefly recall pieces of background information on the SAE taxonomy and on the SOTIF standard, focusing on the notion of harm, risk, and risk assessment.

The purpose of the presentation is to highlight some limitations of the standard or of its interpretation when used to ensure the safety of the intended functionality of items mounted on automated driving systems.

By the end of the seminar, the attendee is expected to gain a sufficient understanding for positioning himself/herself with respect to a set of questions including:

  • Which interpretation of harm shall be considered?
  • Shall mental harm be considered when assessing risk?
  • Which users shall be considered while estimating foreseeable misuse?
  • Shall the potential misuse of the external humans be considered when assessing the safety of the intended functionality of external human-machine interfaces?


The webinar welcomes active participation.


The webinar builds on top of two papers:

-B. Gallina. Safety of the Intended Functionality: What about Mental Harm? Proceedings of 8th International Workshop on Critical Automotive Applications: Robustness & Safety (CARS), Leuven, Belgium, April 8th, 2024. HAL archives

-M. Okada and B. Gallina. Safety of the Intended Functionality of External Human Interfaces: Gaps and Research Agenda. 48th IEEE International Computers, Software, and Applications Conference (COMPSAC-2024), Osaka, Japan, July2-4. 2024.