3. Understanding and controlling deviations from required behaviour

Assurance objective: Deviations from required behaviour during operation will not result in unacceptable safety risk.

Contextual description: Even if sufficient effort is made to implement a system that satisfies all the safety requirements, it is still necessary to also explicitly consider the ways in which the system may deviate from that required behaviour during operation. Deviations may arise due to random failures (such as component degradation during operation) or systematic failures (such as design errors) in the system. To provide assurance, the potential for unsafe deviations must be identified and mitigated as considered in the following sub-objectives described below.

Practical guidance

 

Next sections: