Using STPA for RAFIA

This section describes how System Theoretic Process Analysis is used as part of Risk Analysis. While other analysis techniques may be used to accomplish the same goals, the provided procedure and glossary introduce and discuss some of the core concepts that underpin RAFIA.

Note that many of the examples and some of the terminology used are focussed on safety-related hazard analysis, but the STPA methodology and RAFIA itself are also intended to be applicable to the analysis and management of risk in other domains, most notably cyber-security.

The tabular data structures used to record STPA results as described in the STPA procedure are documented in an informal schema.