Nancy Leveson Hazard Analysis

That’s why the multilayer “stack” of control loops is important. like the one in the Sewol thesis shown in that thread. Here’s the one we did for DWH:

fig2_1

and the expanded bottom layer was

It would be interesting to construct a similar one for El Faro, all the way up to the family of lawyers in Seattle.

Cheers,

Earl

2 Likes