Guideline summary

Visibility assurance

  Latent hazards should be detected and manifested early, before they materialize to incidences.

  Guidelines for visibility assurance

Visibility and complexity

  The system design we should consider only two types of components: those which are essential, and those which are redundant.

• The essential components should be visible. The operators need to know about instances of faults, and they should be equipped with means to accomplish this requirement.
• The redundant components should be eliminated, to reduce complexity, in order to improve the extended reliability

Timing

  Calculation of the grace time, based on trend analysis of risk indicators.

  Alerting when the grace time approaches a predefined threshold

Alerting

  alert attributes should reflect the hazard score

  Continuous display of the grace time

Related topic

Updated on 13 Jul 2016.