[SystemSafety] Safety Cases

[nfr]

In the 1980s, 'the safety case' was defined as having the purpose of answering three questions:

1. What could [possibly] go wrong?

2. Why won't it?

3. But what if it did?

One or two of you might propose that each of these questions could be answered by a single sentence. But, with a bit of thought, you'll recognise that, in order to answer the questions fully, a great deal of evidence must be adduced, from a great deal of work - from complete and correct specification, through thorough design, hazard ID, risk assessment, etc., to emergency planning.

Felix.