Hazards resulting from functional insufficiencies are systematically identified at vehicle level, based on knowledge of the function and its possible deviations, using the methods of ISO 26262-3 where suitable. A hazardous behaviour can produce several hazards. Unlike functional safety, no ASIL is assigned to a SOTIF hazardous event, though severity, exposure and controllability may adjust validation effort. The exposure to a scenario must be treated with the statistical dependence between the scenario and the triggering condition. Further hazards are found by considering driver or user interaction and reasonably foreseeable misuse, whose direct form creates a triggering condition and whose indirect form reduces controllability or raises severity.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.