2.6.1 Monitoring RAS operation
Assurance objective: Identify changes that occur during the operation of the RAS that may result in unsafe behaviour.
Contextual description: Mechanisms are required to be in place to monitor for potentially unsafe changes. It is important to identify what must be monitored during system operation in order to assure its continued safe operation. This will often be identified from considering assumptions and context defined as part of the assurance case for the RAS. Where it is identified that the assumptions or context must hold in order for the system to be considered safe, and they may become invalid during operation (e.g. certain visual sensors may require minimum lighting levels), then those need to be monitored.
Practical guidance: