Automotive SPICE® 4.0 · VDA scope · Security Extension
Most process work is done by people who have never had to live with the result. We have.
Before Safionyx, Alexander Much spent two decades building safety-critical software in series development, latterly leading an organisation of more than sixty engineers and co-architecting an automotive HPC platform now in production. That organisation was assessed like any other. Knowing what a finding costs to close — in headcount, in schedule, in what a team will genuinely adopt rather than perform for an auditor — is a different kind of knowledge from knowing the model.
Assessments
A rating you can act on
Alexander Much is a certified INTACS Principal Assessor for Automotive SPICE with Security Extension — the highest assessor qualification in the scheme. An assessment report is only useful if the organisation can do something with it afterwards, so ours are written to be read by engineers as well as by the customer who demanded them.
Formal assessment
Automotive SPICE® 4.0 · VDA scope
A full assessment against the current PAM, in the scope your customer requires, with ratings, findings and an evidence trail that holds up when someone disagrees with the result.
Gap analysis
Informal · two days upward
Where you stand before anyone official asks. No ratings on the record, no preparation theatre — just an honest read of the distance between your practice and the model.
Security Extension
Cybersecurity processes in the PAM
Assessment against the cybersecurity processes, and the interface to what R155 and ISO/SAE 21434 separately require of you.
Trainings for engineers
One artefact, three standards
A developer writing a software requirement does not experience three standards. They experience one requirement that has to carry traceability, an ASIL decomposition and a security property at the same time — and three different reviewers who each want something else from it.
Our trainings follow a single artefact through Automotive SPICE®, ISO 26262 and ISO/SAE 21434 together, rather than teaching each model in its own week. They are built for the people who produce the work products — software and systems engineers, architects, testers, project leads — and they run on your own project material, so the exercises leave behind artefacts you keep.
We do not offer INTACS certification training. Several good providers already do, and if you need the Process Expert or Assessor lane we will happily point you to them. What we teach is the working knowledge an engineering team needs to produce evidence that passes — which is a different course, for a different audience.
After the assessment
Closing findings without building a paper factory
The common failure after an assessment is to answer every finding with a new template. Six months later the process exists on paper, the engineers have routed around it, and the next assessment finds the same gaps wearing different clothes. We work the other way: change the smallest number of things that will actually move a rating, and make them things the team would do anyway.
On independence
We assess, and we help improve what the assessment found. What we do not do is rate our own work: where Safionyx has shaped a process, the re-assessment is carried out by an independent assessor. We would rather say that up front than have a customer’s quality organisation raise it later.
Automotive SPICE® is a registered trademark of the Verband der Automobilindustrie e. V. (VDA).