vault backup: 2021-07-18 23:37:54

This commit is contained in:
2021-07-18 23:37:54 +02:00
parent cae625b49c
commit 4c3977e3a8
+4 -3
View File
@@ -4,15 +4,16 @@
- [[pull]] [[stpa handbook]] [[stpa workshop]] - [[pull]] [[stpa handbook]] [[stpa workshop]]
- [[push]] [[stpa]] - [[push]] [[stpa]]
- I love how STPA defers key steps to a later stage so they can be done systemically, once partial but complete initial modeling has taken place. - I love how STPA defers key steps to a later stage so they can be done systemically, once partial but complete initial modeling has taken place.
- can be applied recursively
- 4 [[steps]] - 4 [[steps]]
- define the purpose of the analysis, including [[scope]], [[losses]], [[hazards]], [[constraints]] (optionally derived also from [[sub hazards]]). - define the purpose of the analysis, including [[losses]], [[scope]], [[hazards]], [[constraints]] (optionally derived also from [[sub hazards]]).
- model the control structure - model the control structure
- step one: define the purpose of the analysis - step one: define the purpose of the analysis
- start with the [[losses]], which involve something of value to stakeholders - start with the [[losses]], which involve something of value to stakeholders
- continue by defining the scope of the system - continue by defining the [[scope]] of the system
- find [[hazards]], which are systemic states or conditions to be prevented, and which together with (worst-case) environmental conditions lead to [[losses]]. - find [[hazards]], which are systemic states or conditions to be prevented, and which together with (worst-case) environmental conditions lead to [[losses]].
- [[hazards]] + [[environmental conditions]] -> [[losses]] - [[hazards]] + [[environmental conditions]] -> [[losses]]
- find [[system level constraints]]. - find [[system level constraints]].
- they can look like [[hazards]], inverted. - they can look like [[hazards]], inverted.
- or define how the system must [[minimize losses]] in case the hazards occur. - or define how the system must [[minimize losses]] in case the hazards occur.
- can be applied recursively - find [[sub hazards]], which