What Is Safety Critical?

Safety critical refers to systems, functions, or components whose failure or malfunction could directly result in death, serious injury, significant property damage, or major environmental harm. The term defines a category of engineering design in which the consequences of failure are severe enough to impose special requirements on the development process, the verification methods, and the evidence of reliability that must be produced before deployment. Safety-critical design is a recognized sub-discipline within systems engineering, with its own lifecycle standards, analytical tools, and certification regimes.

The distinction between safety-critical and non-safety-critical functions is important in practice because it determines which standards apply, how much testing is required, and what level of independent verification is needed. A flight-control computer, a nuclear reactor protection system, and an automotive anti-lock braking controller are all safety-critical; the infotainment system in the same vehicle is not. The IEC 61508 functional safety standard, published by the International Electrotechnical Commission, is the root standard from which most sector-specific safety-critical development standards derive.

Safety Integrity Levels

The primary quantitative tool for characterizing safety-critical requirements is the Safety Integrity Level (SIL), defined in IEC 61508. SILs run from 1 to 4, with SIL 4 representing the most demanding requirements. Each level specifies a target range for the probability of dangerous failure on demand (PFD) or the probability of dangerous failure per hour (PFH), depending on whether the safety function operates on demand or continuously. Comparative Safety Assessment is used to allocate SIL targets by comparing the residual risk of a proposed design against an acceptable risk threshold, accounting for the frequency and severity of the hazard scenario. A SIL 1 function requires a PFD of 10^-1 to 10^-2, while a SIL 4 function targets 10^-4 to 10^-5, which in practice demands substantial redundancy and independence between subsystems.

Safety Lifecycle and Development Process

IEC 61508 mandates a structured safety lifecycle that begins with hazard and risk analysis and proceeds through specification, design, implementation, integration, validation, and operation into decommissioning. Each phase produces documented evidence, and the standard specifies which design methods and verification techniques are appropriate for each SIL. For software in safety-critical applications, the standard requires formal methods, structured testing, and code coverage metrics that are not typically applied to general-purpose software. In avionics, the equivalent standard is DO-178C, governed by RTCA; in automotive applications, ISO 26262 defines automotive safety integrity levels (ASILs) for road vehicles. Product safety requirements flow into safety-critical development as constraints: a product must meet its functional safety targets across the range of environmental and use-case conditions likely to be encountered in service.

Certification and Independent Verification

Safety-critical systems in regulated industries must typically be assessed by an independent third party before they can be deployed. In the nuclear sector, national regulators require plant owners to demonstrate compliance with safety-critical software and instrumentation standards. In rail transport, the CENELEC EN 50128 standard governs software development for railway control systems, mirroring the IEC 61508 lifecycle approach within the rail domain. The independent verification process examines the development evidence, reviews the hazard analysis, and may include testing of the installed system. Certification bodies such as TÜV, Lloyd's Register, and Bureau Veritas provide this function across multiple industries. Maintaining safety-critical status throughout a product's operational life also requires change management procedures that reassess the hazard analysis whenever modifications are made.

Applications

Safety-critical engineering applies across a range of high-consequence industries, including:

• Aviation and aerospace, covering flight control, navigation, and engine management systems
• Automotive active safety systems, including brake-by-wire, steer-by-wire, and autonomous driving functions
• Medical devices, where IEC 62304 governs software in life-sustaining and diagnostic equipment
• Rail transport, through signaling, train protection, and automatic train operation systems
• Nuclear power, for reactor protection systems and safety-instrumented shutdown systems