Earlier quoted context omitted.
In safety-critical systems, we distinguish between accidents (actual loss, e.g. lives, equipment, etc.) and hazardous states . The equation is hazardous state + environmental conditions = accident Since we can only control the system, and not its environment, we focus on preventing hazardous states, rather than accidents. If we can keep the system out of all hazardous states, we also avoid accidents. (Trying to preve…
If you haven't done so: please write a book. Aim it towards software professionals in non-regulated industries. I promise to buy 50 to give to all of my software developing colleagues. As for 'N', for turboprops it is 45, for jets it is 30.
https://sre.google/stpa/teaching
Disclaimer: currently employed by Google, this message is not sponsored.