Major updates are underway in Automotive SPICE (PAM 4.0), ISO 26262 (3rd Edition), Functional Safety (ISO 26262 + ISO 21448 SOTIF), and Product Cybersecurity (ISO 21434). This overview covers key changes, timelines, implementation gaps, and action steps for automotive suppliers.
Automotive SPICE PAM 4.0: Core Changes
Released late November 2023, PAM 4.0 upgrades from 3.1 with these major additions:
- Machine Learning processes (new ADAS/AI domain).
- Hardware Engineering (now core from extension; includes V-model).
- Validation process (separate from verification).
VDA Scope redefined: “Basic” (project management, quality assurance, configuration management, solution/change request management) + at least one plugin (e.g., SYS.1-5, SWE.1-6). Flex processes (risk management, etc.) optional.
Net result: 10 processes removed (low adoption), 10 added; ~32 total. Terminology shifts: “testing” → “verification” (allows reviews/inspections). Aligns with ISO 26262 (e.g., “item/component”).
Base practices consolidated; capability levels refined (improved Level 3 uniformity). Guidelines now rules-only.
SPICE Assessor Path & Extensions
iNTACS levels: Process Expert (new; 4-day + exam) → Provisional (4-day + exam) → Competent/Principal.
3.1 to 4.0 upgrade: 1-day course.
Combined: 7 days.
Extensions (1-day each): Hardware, Cybersecurity, Mechanical, Agile, Machine Learning SPICE.
ISO 26262 3rd Edition Timeline
Work >2 years in; 1st draft comments now due.
- 2nd Draft: Q4 2026.
- DIS: Q4 2027.
- FDIS: Q1 2028.
- Publication: Q2 2028.
Part 6 (software) leads comments (~300); Part A next.
Identified Gaps for ISO 26262 Committees
Key gaps to address:
- ML/AI validation (training data, neural net drift).
- Scenario completeness (metrics for millions of scenarios).
- HMI/Handover (driver monitoring, mode confusion).
- Edge cases (state transitions; AI weakness).
- Runtime assurance (real-time risk timing).
ISO 21434 Product Cybersecurity & Related PWIs
Work ends 2026; FCD Q1 2028, publication Q2 2029.
- ISO 24075: CALs (3 levels; security goal attribute).
- ISO 24077: TAF (target post-countermeasures; residual risk).
- ISO 24077 V&V: Service security verification (requirements, OFF/reuse).
Functional Safety (SOTIF) Timeline
BL0 comments May 2026; DIS Q4 2028 (3+ years out).
Action Items & Implementation Tools
Start now: OEMs (Volvo/Mercedes/BMW) shifting to PAM 4.0 post-2029.
Tools: eMobility AI Platform integrates IATF/SPICE/Func Safety/Cyber (saves millions).
Free SPICE Handbook: info@omnex.com.
Training (Aug-Oct 2026): Functional Safety Overview, ISO 21434 (w/R155), ASPICE, Hardware SPICE, PAM 4.0 Upgrade. Gap assessments/implementations available worldwide.
Trends: APICE OBO audits up; integrated Functional Safety/Cyber/SPICE (time/cost savings).
Questions? Omnex offers gap assessments, implementations, and training worldwide. Contact us
