{"id":9202,"date":"2026-09-29T12:00:00","date_gmt":"2026-09-29T04:00:00","guid":{"rendered":"http:\/\/124.222.197.95\/?p=9202"},"modified":"2026-09-29T12:00:00","modified_gmt":"2026-09-29T04:00:00","slug":"iso-pas-8800-with-26262-21448-21434","status":"publish","type":"post","link":"https:\/\/qinguard.cn\/en\/iso-pas-8800-with-26262-21448-21434\/","title":{"rendered":"How to Use ISO\/PAS 8800: How It Works with ISO 26262, ISO 21448, and ISO\/SAE 21434"},"content":{"rendered":"<p><strong>Overview:<\/strong>Many companies' first reaction to ISO\/PAS 8800 is: \"Aren't we already doing ISO 26262 and SOTIF \u2014 why do we need another one?\" This article puts the four standards that are often confused into a single table:<strong>what each one governs, where the boundaries lie, and how they work together in real projects.<\/strong><\/p>\n<h2>1. How the Four Standards Divide the Work<\/h2>\n<table style=\"border-collapse:collapse;width:100%;font-size:14px;\">\n<tbody>\n<tr>\n<th style=\"border:1px solid #e2e8f0;padding:10px;background:#f4f8fc;text-align:left;\">Standard<\/th>\n<th style=\"border:1px solid #e2e8f0;padding:10px;background:#f4f8fc;text-align:left;\">In one line<\/th>\n<th style=\"border:1px solid #e2e8f0;padding:10px;background:#f4f8fc;text-align:left;\">What risk it governs<\/th>\n<\/tr>\n<tr>\n<td style=\"border:1px solid #e2e8f0;padding:10px;\"><strong>ISO 26262<\/strong> Functional safety<\/td>\n<td style=\"border:1px solid #e2e8f0;padding:10px;\">Functional safety of electrical\/electronic systems<\/td>\n<td style=\"border:1px solid #e2e8f0;padding:10px;\">\"Deterministic faults\" such as random hardware failures and systematic software failures<\/td>\n<\/tr>\n<tr>\n<td style=\"border:1px solid #e2e8f0;padding:10px;\"><strong>ISO 21448<\/strong> Safety of the intended functionality (SOTIF)<\/td>\n<td style=\"border:1px solid #e2e8f0;padding:10px;\">Scenarios in which hazards can arise even without a fault<\/td>\n<td style=\"border:1px solid #e2e8f0;padding:10px;\">Limits of perception capability, insufficient scenario coverage, environmental conditions beyond the design domain<\/td>\n<\/tr>\n<tr>\n<td style=\"border:1px solid #e2e8f0;padding:10px;\"><strong>ISO\/SAE 21434<\/strong> Cybersecurity<\/td>\n<td style=\"border:1px solid #e2e8f0;padding:10px;\">Automotive cybersecurity engineering<\/td>\n<td style=\"border:1px solid #e2e8f0;padding:10px;\">External attacks, exploitation of vulnerabilities, malicious tampering, data theft<\/td>\n<\/tr>\n<tr>\n<td style=\"border:1px solid #e2e8f0;padding:10px;\"><strong>ISO\/PAS 8800<\/strong> AI safety<\/td>\n<td style=\"border:1px solid #e2e8f0;padding:10px;\">Safety engineering for in-vehicle AI \/ machine learning systems<\/td>\n<td style=\"border:1px solid #e2e8f0;padding:10px;\">Data deficiencies, insufficient model robustness, black-box inexplicability, performance drift after deployment<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>The key to understanding this table is to remember two dividing lines:<strong>\"safety\" and \"security\" are two different things<\/strong>\u2014 the former is about whether people and vehicles can be harmed, the latter is about whether the system can be breached from outside.<strong>ISO\/PAS 8800 sits on the first line, filling the gap left by AI.<\/strong><\/p>\n<h2>2. Why AI Crosses Both Lines at Once<\/h2>\n<p>Once AI systems enter the vehicle, risk comes from both sides at once:<\/p>\n<ul>\n<li><strong>On the safety side:<\/strong>the training data does not cover a particular real-world scenario, the model misjudges it, and the vehicle takes a dangerous action \u2014 not because hardware failed or because it was attacked, but because of deficiencies in the AI's own capability and data;<\/li>\n<li><strong>On the security side:<\/strong>model weights are tampered with, training data is poisoned, sensors are disturbed by adversarial samples \u2014 the AI's behavior is altered maliciously from outside.<\/li>\n<\/ul>\n<p>In practice, then, the three frameworks must work together:<strong>ISO 26262 controls failures, SOTIF controls capability limits, ISO 21434 controls external attacks, and ISO\/PAS 8800 controls the AI's own data, models and operational evolution.<\/strong>They are not substitutes for one another \u2014 they stack layer upon layer.<\/p>\n<h2>3. Good News: One Audit Can Serve Multiple Standards<\/h2>\n<p>In the case of the world's first ISO\/PAS 8800 certification, the issuing body T\u00dcV Rheinland stated explicitly that an ISO\/PAS 8800 audit<strong>can be combined with audits of ISO 26262 (functional safety) and ISO 21448 (SOTIF),<\/strong>allowing a company to cover several standards with a single system audit and reduce duplicated investment. The audit focus includes:<\/p>\n<ul>\n<li>whether AI-safety-related<strong>management processes<\/strong>are established and running under control;<\/li>\n<li>whether the evidence covers<strong>datasets, models, training processes, testing activities and operational monitoring<\/strong>;<\/li>\n<li>whether the safety claims and the test evidence are<strong>complete and traceable<\/strong>.<\/li>\n<\/ul>\n<p>For small and medium-sized companies this is a very practical insight:<strong>you do not have to wait to \"do 8800 separately later\" \u2014 add the AI-specific requirements into your existing functional safety system and go through audit together.<\/strong><\/p>\n<h2>4. Recommended Implementation Path: Three Steps<\/h2>\n<ol>\n<li><strong>Step 1 \u00b7 Current-state review and gap analysis:<\/strong>take your existing functional safety, SOTIF and cybersecurity process documents and check them clause by clause against AI characteristics \u2014 which clauses apply directly, which need AI-specific supplements, and which are entirely blank. This step usually produces conclusions within one to two weeks and is the lowest-cost, most accurate way to set direction.<\/li>\n<li><strong>Step 2 \u00b7 Fill the three shortest planks:<\/strong>\u2460 data governance (dataset suitability, scenario coverage analysis, records of collection and labeling); \u2461 model validation (normal and edge-case scenarios, robustness, behavior in unknown scenarios); \u2462 change and monitoring (version management, post-launch performance monitoring, trigger conditions and handling processes).<\/li>\n<li><strong>Step 3 \u00b7 Build the AI safety file and prepare for audit:<\/strong>thread the outputs of the five stages \u2014 requirements, design, data, testing and monitoring \u2014 into a complete evidence chain forming an auditable safety argument, and choose a route that audits jointly with your existing ISO 26262 \/ ISO 21448 system.<\/li>\n<\/ol>\n<h2>5. Three Common Misconceptions<\/h2>\n<ul>\n<li><strong>Misconception one: \"We don't do L4, so it doesn't apply to us.\"<\/strong>As long as a safety-related function on the vehicle uses machine learning (for example vision-based perception or model-based prediction), it falls within the standard's scope \u2014 there is no necessary link to the level of automation.<\/li>\n<li><strong>Misconception two: \"High accuracy equals safety.\"<\/strong>Model accuracy is a performance metric, not a safety metric. What the standard requires is traceable safety evidence \u2014 where the data came from, what scenarios it covers, how abnormal situations are handled, and how the system is monitored after launch.<\/li>\n<li><strong>Misconception three: \"This is the R&amp;D department's own business.\"<\/strong>The standard requires management processes and an evidence chain spanning data, development, testing, quality and after-sales; without organizational backing endorsed by management, the evidence chain will inevitably break at some departmental boundary.<\/li>\n<\/ul>\n<h2>6. Final Thoughts<\/h2>\n<p>From UN R155\/R156 to GB 44495\/44496, and from ISO 26262, ISO 21448 and ISO\/SAE 21434 to today's ISO\/PAS 8800, the automotive industry's safety compliance system is expanding from \"mechanical and electronic\" to \"software, networks and artificial intelligence\". And the pattern becomes clearer each time:<strong>first the standard appears, then certification cases follow, and finally it becomes a market-access condition.<\/strong><\/p>\n<p>ISO\/PAS 8800 has completed the first step and is now in the second. For companies, doing the gap analysis now costs far less than being forced to produce materials later by customers or certification bodies.<\/p>\n<h2>Related Articles<\/h2>\n<ul>\n<li><a href=\"\/en\/iso-pas-8800-published\/\">ISO\/PAS 8800 Is Published: Automotive AI Safety Now Has an International Standard, and the World's First Certification Has Been Issued<\/a><\/li>\n<li><a href=\"\/en\/iso-21434-overview\/\">What Is ISO\/SAE 21434: A Full Overview of the Automotive Cybersecurity Engineering Standard<\/a><\/li>\n<li><a href=\"\/en\/sotif-odd-mrm\/\">SOTIF, ODD and MRM: Core Concepts of Automated Driving Safety of the Intended Functionality<\/a><\/li>\n<li><a href=\"\/en\/autonomous-driving-triple-safety\/\">The \"Triple Triangle\" of Automated Driving Safety: Functional Safety, Safety of the Intended Functionality and Cybersecurity<\/a><\/li>\n<\/ul>\n<h2>Need AI Safety and Compliance Support?<\/h2>\n<p>If your organization is working on intelligent driving AI system safety, ISO\/PAS 8800, or ISO 26262 \/ ISO 21448 implementation, contact us for a free compliance diagnostic. QinGuard specializes in automotive safety and compliance consulting, providing end-to-end services from gap analysis and process development to safety argumentation and certification support.<\/p>","protected":false},"excerpt":{"rendered":"<p>\u3010\u5bfc\u8bfb\u3011\u4e0d\u5c11\u4f01\u4e1a\u7b2c\u4e00\u773c\u770b\u5230 ISO\/PA [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[5],"tags":[62,11,12,13,59,63],"class_list":["post-9202","post","type-post","status-publish","format-standard","hentry","category-zidongjiashi","tag-ai","tag-iso-21434","tag-iso-21448","tag-iso-26262","tag-iso-pas-8800","tag-63"],"_links":{"self":[{"href":"https:\/\/qinguard.cn\/en\/wp-json\/wp\/v2\/posts\/9202","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/qinguard.cn\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/qinguard.cn\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/qinguard.cn\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/qinguard.cn\/en\/wp-json\/wp\/v2\/comments?post=9202"}],"version-history":[{"count":1,"href":"https:\/\/qinguard.cn\/en\/wp-json\/wp\/v2\/posts\/9202\/revisions"}],"predecessor-version":[{"id":9221,"href":"https:\/\/qinguard.cn\/en\/wp-json\/wp\/v2\/posts\/9202\/revisions\/9221"}],"wp:attachment":[{"href":"https:\/\/qinguard.cn\/en\/wp-json\/wp\/v2\/media?parent=9202"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/qinguard.cn\/en\/wp-json\/wp\/v2\/categories?post=9202"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/qinguard.cn\/en\/wp-json\/wp\/v2\/tags?post=9202"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}