← All chapters Chapter 13

Verification Fault Tree

The same method builds the fault tree of a review meeting.

Because a system is anything that processes information, the method that builds an ECU's tree builds a review meeting's, changing nothing but the kind of system. The chapter analyzes how a verification can miss a defect — a poor template, missing competence, time pressure, a misread sentence. These process sub-trees are product-independent, reused across projects almost unchanged, and reuse is itself a safety measure.