1. Industrial Avionics Working Group 18/04/07 Design for Safety IAWG Modular Certification

2. Industrial Avionics Working Group 18/04/07 Objectives Identified To establish an optimal Software Design taking account of constraints that apply to the Product To take certification into account at the earliest possible stage where the opportunity for influencing the design is at it greatest New product or legacy system - activities range between: –Determining the suitability of the product for Modular Software Certification and recommending any adaptations required. –Providing a major input into the system and software design phases.

3. Industrial Avionics Working Group 18/04/07 Modularity Success of containing change is largely dependent upon the modularity of the design. –Safety case module boundaries are typically aligned with design interfaces. –Design modules should exhibit qualities such as: high cohesion, low coupling and well-defined interfaces. Modularity in the design is also dependent on additional factors: –How hazards are mitigated within the design, particularly modularity between high assurance and low assurance functionality –Use of COTS –Anticipated future changes to the system, particularly modularity between high change and low change functionality –Performance requirements of the system –Commercial issues, i.e. how work might be contracted to 3 rd parties