What to test

Verification

Ensure that operators can tackle all the expected situations involved in failure modes, including those related to exceptional situations. The focus is on:

• Obeying the rules, by constraining and by alarm generation
• Avoiding escalation when under hazard
• Alarm generation when under hazard
• Changing the control station in response to situation change
• Assuring inter-unit cooperation - resolving inter-unit mismatch
• Assuring situation update on mode changes

Validation

Graying out black swans: ensure that the system captures some unpredictable situations and events, such as unexpected  operational errors : identify instances in which the system resilience does not comply with the expectations of the stakeholders. The focus is on:

• Alarm optimization - towards zero missed alarms, and minimum improper alarms
• Alarm quality - alarm perception: operators awareness of risks .
• Recovery - the activity during the transition from exceptional to routine operation
• Rescue - safe-mode operation

  The subjects of the test are the resilience requirements .

Related topic

Updated on 08 Apr 2016.