Systematic Analysis of Faults and Errors -- Example

	A	B	C	D	E	F	G	H	J	K
1	System:	PCA Interlock							System Boundary
2		Fundamentals							System	Environment
3		Name	Reference						PCA Pump	Patient
4									App Logic
5	Accident Levels:	AL.DeathOrSeriousInjury	N / A						Pulse Oximeter
6									Capnograph
7	Accidents:	Acc.PatientHarmed	AL.DeathOrSeriousInjury
8				Hazardous Factor	System Element	System Element State	Env. Element	Env. Element State
9	Hazards:	H.TooMuchAnalgesic	Acc.PatientHarmed	Analgesic	PCA Pump	Pumping	Patient	NearHarm
10
11	Safety Constraints:	SC.DontODPatient	H.TooMuchAnalgesic
12
13	Explanations
14	Reference	Explanation
15	Acc.PatientHarmed	The patient is harmed or seriously injured as a result of the App's actions
16	H.TooMuchAnalgesic	The patient is given more analgesic than they can safely tolerate
17	Architecture	As modeled by Arney-etal in ICCPS10 (in section 4.3) with some modifications
18		A lot of possibly unmeetable assumptions (guaranteed timing of network and app)
19		Modified to include RR and EtCO2 physiological monitors (in addition to SpO2)
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100