← All chapters Chapter 26

Appendix E — Driving a Hazard Analysis with the Method

Naming every hazard is the malfunction derivation, one level up.

The hazard analysis is fragile at its very first step — naming, completely, the hazards a function can produce — and a whiteboard list is only as complete as the room's imagination. That step is the book's systematic malfunction derivation run at the vehicle base function. The method makes the hazard list complete and leaves the risk rating, honestly, to the people who must own it.