ISO 26262 Part 12 Motorcycles, MSIL & HARA Explained

Hello, motorcycle engineers, two-wheeler safety professionals, and functional safety enthusiasts! Welcome to the twelfth and final deep-dive post in our comprehensive ISO 26262 series at PiEmbSysTech. In this article, we will explore ISO 26262 Part 12 – Adaptation of ISO 26262 for Motorcycles, the normative part introduced in the 2018 second edition that brings two-wheeled vehicles into the scope of the functional safety standard.

Motorcycles present fundamentally different safety challenges compared to passenger cars. The rider is physically exposed – there is no protective cabin, no seatbelt, no crumple zone, and no airbag (in most cases). The motorcycle’s dynamic behavior is inherently different – it requires active rider input to maintain balance, and its stability is affected by speed, lean angle, road surface, and rider actions in ways that have no equivalent in four-wheeled vehicles. The rider’s ability to control the motorcycle during a system malfunction – the controllability parameter – is fundamentally different from a car driver’s controllability, and this difference has profound implications for HARA and ASIL classification.

Part 12 addresses these unique characteristics by adapting key elements of the ISO 26262 framework for the motorcycle context, while maintaining the fundamental safety lifecycle philosophy that applies to all road vehicles.

ISO 26262 Part 12 Motorcycles Table of Contents

1. What is ISO 26262 Part 12 and Why Was It Needed?

ISO 26262 Part 12: Adaptation of ISO 26262 for Motorcycles was introduced in the 2018 second edition to extend the functional safety framework to two-wheeled motor vehicles (excluding mopeds). The first edition (2011) was limited to passenger cars with a maximum gross vehicle mass of 3,500 kg, explicitly excluding motorcycles from scope. As motorcycle electronics became increasingly sophisticated – with features like electronic throttle control, cornering ABS, motorcycle stability control (MSC), electronic suspension, and ride-by-wire systems – the need for a motorcycle-specific functional safety framework became urgent.

The fundamental reason Part 12 was needed is that motorcycles cannot be treated simply as two-wheeled cars. The dynamics, the rider interaction, the exposure of the rider, and the operational scenarios are all fundamentally different. A HARA performed using passenger car assumptions would produce incorrect ASIL classifications for motorcycle systems. The controllability of a motorcycle during a system malfunction is governed by unique factors such as lean angle, gyroscopic effects, rider balance, and the absence of a protective structure. These motorcycle-specific factors required a dedicated adaptation of the standard.

2. Normative Status and Precedence Rules

Unlike Parts 10 and 11 (which are informative), Part 12 is normative. This means its requirements are binding and must be followed for motorcycle E/E systems claiming ISO 26262 compliance. Critically, Part 12 establishes a precedence rule: where Part 12 specifies motorcycle-specific requirements that differ from the corresponding requirements in other parts (Parts 2–9), the Part 12 requirements take precedence.

In all other areas where Part 12 does not provide a motorcycle-specific adaptation, the general requirements of Parts 1–9 apply unchanged. This means that motorcycle developers must follow the full ISO 26262 framework (safety management, concept phase, system/hardware/software development, production, supporting processes) with specific adaptations only where Part 12 explicitly provides them. The main areas of adaptation are safety culture, confirmation measures, HARA (including the introduction of MSIL), vehicle integration and testing, and safety validation.

3. Structure of Part 12

ISO 26262-12:2018 is organized into the following clauses:

Clause 5: Safety Culture – Motorcycle-specific requirements for safety culture, adapted from Part 2.

Clause 6: Confirmation Measures – Adapted confirmation measure requirements for motorcycle development.

Clause 7: General Topics for Adaptation – General guidance on how Parts 1–9 apply to motorcycles.

Clause 8: Hazard Analysis and Risk Assessment – The most substantially adapted clause, introducing motorcycle-specific S, E, C parameters and the Motorcycle Safety Integrity Level (MSIL).

Clause 9: Vehicle Integration and Testing – Adapted requirements for motorcycle-level integration testing.

Clause 10: Safety Validation – Adapted requirements for motorcycle-level safety validation.

Annex A (Informative): Overview and workflow of the adaptation.

Annex B (Informative): Detailed guidance on HARA for motorcycles, including examples.

Annex C (Informative): Examples of controllability classification techniques considering motorcycle dynamics – a particularly valuable annex for practitioners.

4. Why Motorcycles Are Different – Key Safety Challenges

Several fundamental characteristics differentiate motorcycles from passenger cars in the context of functional safety:

Rider physical exposure: The motorcycle rider has no protective cabin, no crumple zones, no seatbelts, and limited airbag protection (available on only a few models). The physical exposure means that even relatively low-severity accidents (in car terms) can result in serious injuries for motorcycle riders. This significantly affects the Severity parameter in HARA.

Dynamic instability: A motorcycle is inherently dynamically unstable – it requires continuous active rider input to maintain balance, especially at low speeds. The stability depends on speed, lean angle, steering input, throttle, and braking – all interacting in complex, non-linear ways. A system malfunction that disrupts any of these inputs can have immediate and severe consequences for stability.

Rider as a critical control element: The rider’s body position, weight distribution, and physical inputs (steering, throttle, brakes, body lean) are integral to the motorcycle’s dynamic control loop. Unlike a car driver who is largely isolated from the vehicle dynamics by the chassis, the motorcycle rider is part of the vehicle dynamics. This makes the Controllability parameter fundamentally different for motorcycles.

Different operational scenarios: Motorcycle operational situations include scenarios with no car equivalent – such as low-speed maneuvering requiring active balance, cornering at significant lean angles, and riding in conditions where the motorcycle’s stability margins are inherently reduced (wet roads, gravel, strong crosswinds). The Exposure parameter must account for these motorcycle-specific scenarios.

Rider protective equipment as an external measure: Helmets, protective clothing, boots, and gloves serve as external protective measures that can reduce injury severity. Part 12 considers whether credit can be taken for these external measures in the HARA.

Rider voluntary risk acceptance: Motorcycle riding inherently involves a higher baseline risk than car driving. The standard recognizes that certain hazardous situations arise from the rider’s voluntary choice to ride in specific conditions (such as off-road riding or riding in extreme weather), and these voluntary risk scenarios may be outside the scope of Part 12.

5. Safety Culture Adaptation for Motorcycle OEMs (Clause 5)

Part 12, Clause 5 adapts the Part 2 safety culture requirements for motorcycle organizations. The key adaptation recognizes that the motorcycle industry includes many smaller manufacturers, some with limited prior experience in formal functional safety processes. The clause requires that the organization define process and work instructions specific to Part 12 compliance within their quality management system, that the organization ensure integration between functional safety and other relevant standards (including cybersecurity under ISO 21434), and that training and competence management address motorcycle-specific knowledge – including motorcycle dynamics, rider behavior, and the unique aspects of motorcycle HARA.

The emphasis on motorcycle-specific knowledge is important because engineers with deep experience in passenger car functional safety may not have adequate understanding of motorcycle dynamics and rider behavior to correctly perform HARA for two-wheeled vehicles. Cross-training between functional safety expertise and motorcycle engineering domain knowledge is essential.

6. Confirmation Measures for Motorcycles (Clause 6)

Part 12, Clause 6 adapts the confirmation measure requirements from Part 2. The key adaptation relates to the MSIL-to-ASIL mapping (discussed below) – since MSIL levels map to different ASIL levels than the direct car-based classification would produce, the independence requirements for confirmation measures are determined based on the mapped ASIL, not the MSIL directly. This ensures that the confirmation rigor is proportional to the actual development requirements, as determined by the MSIL-to-ASIL mapping.

7. Motorcycle-Specific HARA (Clause 8)

Clause 8 is the most substantially adapted clause in Part 12 and represents the core of the motorcycle adaptation. It modifies the Part 3 HARA process to account for motorcycle-specific factors in the classification of Severity, Exposure, and Controllability.

The motorcycle HARA process follows the same fundamental methodology as the passenger car HARA: identify operational situations, identify malfunctioning behaviors, combine them into hazardous events, classify each hazardous event using S, E, and C parameters, and determine the safety integrity level. However, the classification criteria for S, E, and C are adapted for the motorcycle context, and the result is expressed as an MSIL (Motorcycle Safety Integrity Level) rather than directly as an ASIL. The MSIL is then mapped to an ASIL for determining the development requirements.

8. Severity for Motorcycles – The Rider Exposure Factor

The Severity classification for motorcycles must account for the rider’s physical exposure – the lack of a protective cabin means that the same accident scenario typically results in more severe injuries for a motorcycle rider than for a car occupant. Part 12 provides motorcycle-specific severity tables that account for this difference.

A key consideration is whether rider protective equipment (helmet, protective clothing, body armor) should be credited in the severity assessment. Part 12 allows consideration of rider equipment that is mandated by law or regulation in the target market (such as helmets, which are legally required in most jurisdictions). However, voluntary equipment (such as armored jackets or boots) typically cannot be credited because their use is not guaranteed.

The severity classification ranges remain S0 through S3 (consistent with the general Part 3 framework), but the specific criteria for each level are interpreted in the context of motorcycle accident characteristics – including the typically higher injury severity for unprotected body regions, the higher risk of ejection from the vehicle, and the potential for the motorcycle itself to become a hazard to the rider (e.g., landing on the rider after a fall).

9. Exposure for Motorcycles – Operational Situations

The Exposure classification for motorcycles must account for motorcycle-specific operational situations that have no direct equivalent in passenger car driving. These include low-speed maneuvering requiring active balance (parking, U-turns, slow-speed filtering through traffic), cornering at significant lean angles (where the motorcycle’s stability margins are reduced and the available traction is shared between cornering forces and any braking or acceleration forces), riding on surfaces with reduced friction (wet roads, painted road markings, manhole covers, gravel), riding in crosswind conditions (where the motorcycle’s narrow profile makes it more susceptible to wind gusts than a car), and riding with a passenger (which changes the motorcycle’s center of gravity, weight distribution, and handling characteristics).

The exposure levels (E0 through E4) retain the same general definitions as in Part 3, but the assessment must consider the frequency of motorcycle-specific situations for the intended motorcycle category (sport, touring, commuter, off-road) and market.

10. Controllability for Motorcycles – The Critical Adaptation

Controllability is the most significantly adapted parameter for motorcycles. In passenger cars, controllability assesses the driver’s ability to take corrective action while remaining seated in a stable, enclosed vehicle. For motorcycles, controllability must account for the rider’s need to maintain balance while responding to the malfunction, the motorcycle’s dynamic response to the malfunction (which may include sudden changes in steering torque, lean angle, or traction that directly threaten stability), the interaction between the rider’s corrective input and the motorcycle’s dynamics (which can be counterintuitive in some scenarios – for example, counter-steering effects at different speeds), and the time available for the rider to perceive, diagnose, and physically respond before the motorcycle’s stability is compromised.

The controllability levels (C0 through C3) retain the same general definitions, but the specific classification criteria are adapted for motorcycle dynamics. What might be “normally controllable” (C2) in a car could be “difficult to control” (C3) on a motorcycle, particularly at high lean angles or at very low speeds where balance is already demanding.

Part 12, Annex C provides valuable examples of controllability evaluation techniques that consider motorcycle dynamics, including the use of motorcycle-specific test procedures, rider studies, and expert rider assessments.

11. Expert Riders for Controllability Evaluation

Part 12 introduces the concept of expert riders for evaluating controllability classifications. Expert riders are defined as individuals with specific knowledge and skills to evaluate motorcycle controllability characteristics with respect to a representative range of riders and riding conditions. Expert riders may participate in controllability studies, provide judgment on whether a specific malfunction is controllable in a given motorcycle-specific operational situation, and evaluate the effectiveness of rider warnings and degradation strategies.

The use of expert riders is analogous to the use of expert drivers in car-based controllability studies, but with motorcycle-specific qualifications – including demonstrated proficiency across different motorcycle types, understanding of motorcycle dynamics at various speeds and lean angles, and the ability to assess situations from the perspective of the general rider population (not just their own expert-level abilities). Part 12 Annex C provides guidance on the selection and qualification of expert riders.

12. MSIL – Motorcycle Safety Integrity Level

The motorcycle HARA produces a Motorcycle Safety Integrity Level (MSIL) rather than directly producing an ASIL. MSIL is a motorcycle-specific risk classification that is determined by combining the motorcycle-adapted S, E, and C parameters. Like ASIL, MSIL has four levels – MSIL A (lowest), MSIL B, MSIL C, and MSIL D (highest) – plus MSIL QM for non-safety-relevant functions.

The MSIL determination follows the same tabular lookup approach as ASIL – the combination of S, E, and C determines the MSIL classification for each hazardous event. The safety goal inherits the MSIL of the hazardous event it addresses. If multiple hazardous events are addressed by a single safety goal, the safety goal inherits the highest MSIL.

The introduction of MSIL as a separate classification from ASIL reflects the recognition that the motorcycle-specific S, E, and C parameters produce risk classifications that are not directly equivalent to the car-based ASIL classifications. The MSIL-to-ASIL mapping (discussed next) provides the bridge between the motorcycle-specific risk assessment and the development requirements defined in Parts 4–9.

13. MSIL-to-ASIL Mapping – Translating Motorcycle Risk to Development Rigor

Once the MSIL is determined, it must be mapped to an ASIL for the purpose of applying the development requirements from Parts 4 through 9 (system, hardware, software development methods, testing rigor, structural coverage, hardware metrics, etc.). Part 12, Table 6 provides the official mapping:

MSIL	Mapped ASIL (Minimum Requirement)
MSIL QM	QM
MSIL A	QM
MSIL B	ASIL A
MSIL C	ASIL B
MSIL D	ASIL C

Key observations from the mapping table:

MSIL A maps to QM – motorcycle functions classified as MSIL A are developed according to quality management processes only, with no specific ISO 26262 safety requirements. This is one level lower than the direct ASIL A equivalent for cars.

MSIL D maps to ASIL C (not ASIL D) – the highest motorcycle safety integrity level maps to ASIL C, not ASIL D. This means that no motorcycle system is required to be developed to ASIL D methods under Part 12. The practical implication is significant: MC/DC structural coverage, 99% SPFM, and 10 FIT PMHF targets (which are ASIL D requirements) are not required for motorcycle systems. The mapped ASIL C requires branch coverage, 97% SPFM, and 100 FIT PMHF instead.

The rationale for this one-level reduction is that the motorcycle HARA already accounts for the rider’s increased vulnerability through the adapted severity and controllability parameters. The MSIL classification inherently incorporates the motorcycle-specific risk factors, and the MSIL-to-ASIL mapping adjusts the development rigor accordingly.

Important note: The mapped ASIL represents the minimum requirement. The motorcycle manufacturer may choose to develop to a higher ASIL than the minimum if their risk assessment or business considerations warrant it. The Part 12 requirements always supersede the general Part requirements where they conflict.

14. Vehicle Integration and Testing for Motorcycles (Clause 9)

Part 12, Clause 9 adapts the vehicle integration and testing requirements from Part 4 for the motorcycle context. The key adaptations include testing the integrated system in motorcycle-specific conditions – including the full range of lean angles, speed conditions, road surfaces, and rider input combinations that the motorcycle will encounter in service. Testing must verify that safety mechanisms operate correctly during motorcycle-specific dynamic scenarios – such as hard braking while cornering, throttle transients during lean, and stability control interventions during low-friction surface transitions. The test program must include motorcycle-specific operational scenarios identified during HARA, ensuring that the safety concept is validated in the actual motorcycle operating environment.

15. Safety Validation for Motorcycles (Clause 10)

Part 12, Clause 10 adapts the safety validation requirements to confirm that the safety goals are achieved in the real motorcycle operational environment. Safety validation for motorcycles includes on-motorcycle testing in representative riding conditions, evaluation of safety mechanism responses during motorcycle-specific fault injection scenarios (for example, injecting a sensor fault during cornering), assessment of the rider’s ability to perceive and respond to safety warnings under realistic riding conditions (considering that motorcycle riders wear helmets, gloves, and are subjected to wind noise and vibration that can affect their perception of visual, audible, and haptic warnings), and validation that the degradation strategy provides a safe transition to a reduced-capability operating mode without destabilizing the motorcycle.

The rider’s perception of warnings is a particularly important consideration for motorcycles. A dashboard warning that is easily visible to a car driver at a glance may be much more difficult for a motorcycle rider to notice – the rider’s visual attention is more constrained, helmet visors may reduce visibility, and the rider’s hands are occupied with controls (making haptic feedback through the handlebars a potentially more effective warning channel than visual indicators alone).

16. Common Motorcycle Safety-Critical E/E Systems

The following E/E systems in modern motorcycles are commonly subject to ISO 26262 Part 12 analysis:

Anti-lock Braking System (ABS): Cornering ABS for motorcycles is one of the most safety-critical motorcycle E/E systems. It must function correctly across the full range of lean angles and braking conditions – a malfunction during hard braking while cornering could cause an immediate loss of traction and crash.

Electronic Throttle Control (Ride-by-Wire): Replacing the mechanical throttle cable with an electronic system introduces potential hazards – unintended acceleration or loss of throttle response can have severe consequences on a motorcycle.

Motorcycle Stability Control (MSC): Systems that modulate braking force, engine torque, or both to maintain motorcycle stability – particularly during cornering, braking, and acceleration. A malfunction could either fail to provide the expected stability assistance or actively destabilize the motorcycle through inappropriate interventions.

Electronic Suspension: Electronically controlled damping and spring preload adjustments. A malfunction could result in inappropriate suspension settings that affect handling and stability.

Traction Control Systems (TCS): Systems that detect and mitigate rear wheel spin. Incorrect intervention (or failure to intervene) can cause loss of traction, particularly on slippery surfaces or during aggressive acceleration.

LED Lighting Systems: Safety-related lighting (headlight, brake light, turn indicators) with electronic control – failure to illuminate correctly affects visibility and conspicuity.

Instrument Cluster and Warning Systems: The rider interface for safety-critical information and warnings – including ABS fault indicators, engine management warnings, and traction control status.

17. Key Work Products of Part 12

Part 12 produces the same general categories of work products as the other normative parts, with motorcycle-specific adaptations: the motorcycle-specific item definition (including motorcycle dynamics and rider interaction characteristics), the motorcycle HARA report (with MSIL classifications and the MSIL-to-ASIL mapping), safety goals with mapped ASIL assignments, the functional and technical safety concepts (adapted for motorcycle architecture and rider interface), motorcycle-specific integration test reports (including cornering, lean angle, and rider-input-specific test scenarios), and the motorcycle safety validation report (including on-motorcycle testing evidence and rider perception assessment). These work products are included in the safety case alongside the work products from Parts 4–9 that are generated using the mapped ASIL requirements.

18. Common Mistakes and How to Avoid Them

Mistake 1: Applying car-based HARA parameters to motorcycles. Using the Part 3 S, E, C parameters without motorcycle-specific adaptation will produce incorrect risk classifications. Always use the Part 12 adapted parameters and classification tables for motorcycle HARA.

Mistake 2: Assuming MSIL D requires ASIL D development methods. MSIL D maps to ASIL C, not ASIL D. Applying ASIL D methods when ASIL C is sufficient wastes resources. Conversely, applying ASIL B methods when ASIL C is required (based on MSIL D mapping) creates a compliance gap.

Mistake 3: Underestimating motorcycle-specific controllability challenges. The controllability of a motorcycle during a system malfunction is inherently more challenging than for a car. A malfunction that is “normally controllable” (C2) for a car driver may be “difficult to control” (C3) for a motorcycle rider, particularly at high lean angles or low speeds. Engage expert riders and consider the full range of motorcycle dynamic scenarios.

Mistake 4: Not considering the motorcycle rider’s limited perception of warnings. Dashboard warnings that work well in a car may not be effective on a motorcycle due to helmet wear, wind noise, vibration, and the rider’s constrained visual attention. Design warning strategies that are effective in the motorcycle riding context – including haptic feedback through handlebars, contrasting visual indicators visible through helmet visors, and audible warnings loud enough to be heard through helmets.

Mistake 5: Ignoring motorcycle-specific operational scenarios. Cornering at lean, low-speed maneuvering, riding with a passenger, and riding on varied road surfaces are motorcycle-specific scenarios that must be included in the HARA. A motorcycle HARA that only considers straight-line riding is fundamentally incomplete.

Mistake 6: Treating Part 12 as entirely separate from Parts 1–9. Part 12 adapts specific aspects of Parts 2–4 for motorcycles. All other Parts (5, 6, 7, 8, 9) apply to motorcycles at the mapped ASIL level without modification. The hardware development (Part 5), software development (Part 6), production (Part 7), supporting processes (Part 8), and safety-oriented analyses (Part 9) are not changed by Part 12 – they are applied at the ASIL level determined by the MSIL-to-ASIL mapping.

19. Frequently Asked Questions

Q1: Do mopeds need to comply with ISO 26262?

No. The scope of ISO 26262 explicitly excludes mopeds. Only motorcycles (powered two-wheelers that are not classified as mopeds under applicable regulations) are covered by Part 12.

Q2: Why does MSIL D map to ASIL C instead of ASIL D?

The MSIL classification already incorporates motorcycle-specific risk factors through the adapted S, E, and C parameters. The one-level reduction in the MSIL-to-ASIL mapping reflects the standard committee’s assessment that the motorcycle-adapted HARA, combined with ASIL C development rigor, provides an appropriate level of safety for motorcycle systems. The mapping represents the minimum requirement – manufacturers may choose to develop to a higher ASIL if their analysis warrants it.

Q3: Can I reuse car-based ISO 26262 components in a motorcycle?

Yes, components developed to ISO 26262 for passenger car applications can be reused in motorcycle applications, provided the component’s ASIL capability meets or exceeds the mapped ASIL determined by the motorcycle HARA. If a component was developed to ASIL D for a car application, it can certainly be used in a motorcycle application requiring ASIL C (the maximum mapped ASIL from MSIL D). However, the item-level safety analysis, HARA, and safety concept must be motorcycle-specific.

Q4: How do I assess controllability for motorcycles?

Part 12, Annex C provides examples of controllability evaluation techniques considering motorcycle dynamics. Practical approaches include expert rider assessments (qualified riders evaluating controllability in representative scenarios), motorcycle dynamics simulation (using validated motorcycle models to predict vehicle response to malfunctions at various speeds and lean angles), analysis of accident databases for motorcycles (to understand real-world rider responses to failure-like scenarios), and rider studies (structured tests with representative riders under controlled conditions). The controllability assessment should consider the general rider population, not just expert riders.

Q5: Does Part 12 apply to electric motorcycles?

Yes. Part 12 applies to all motorcycles with E/E systems, regardless of propulsion type. Electric motorcycles have additional safety considerations – such as the high-voltage battery system, the electric drive motor, and the regenerative braking system – that require motorcycle-specific HARA and safety concept development. The electrification-specific safety aspects are addressed through the general ISO 26262 framework at the mapped ASIL level.

Q6: Is there a complementary technical report for Part 12?

Yes. ISO/TR 5340:2023 provides use case examples of MSIL classification for motorcycle HARA. It demonstrates the application of the Part 12 HARA methodology to specific motorcycle E/E systems and operational scenarios, providing valuable practical reference for practitioners performing motorcycle functional safety analysis for the first time.

20. Conclusion

ISO 26262 Part 12 – Adaptation of ISO 26262 for Motorcycles completes the ISO 26262 standard series by extending the functional safety framework to two-wheeled motor vehicles. Through its motorcycle-specific adaptations of the HARA process, the introduction of MSIL as a motorcycle-appropriate risk classification, and the MSIL-to-ASIL mapping that translates motorcycle risk assessments into development requirements, Part 12 provides the framework that motorcycle OEMs and their suppliers need to develop functionally safe motorcycle E/E systems.

The key takeaway for practitioners is that motorcycle functional safety is not simply “ISO 26262 for cars, but with two wheels.” The unique dynamics, the rider’s physical exposure, the different controllability characteristics, and the motorcycle-specific operational scenarios all require dedicated consideration. Engineers who approach motorcycle functional safety with genuine understanding of these differences – and who invest in building motorcycle-specific HARA competence, including expert rider involvement – will produce safety analyses that are both rigorous and realistic.

This article concludes our comprehensive 12-part deep-dive series covering every part of the ISO 26262 standard. Visit our ISO 26262 Complete Guide (Main Page) for links to all articles, and continue to check back as we add additional topic-specific deep-dive posts on ASIL decomposition examples, FMEDA worked calculations, interview questions, and more.

Stay safe. Stay balanced. Keep engineering the future.

– The PiEmbSysTech Team