Embedding STPA into a highly successful risk management software application

• Main Authors: Björnsdóttir, Svana Helen, Rejzek, Martin
• Format: Text
• Language: English
• Published: ZHAW Zürcher Hochschule für Angewandte Wissenschaften 2017
• Subjects: Software; Risk; STPA; EERMF; 005: Computerprogrammierung; Programme und Daten; 363: Umwelt- und Sicherheitsprobleme; Reykjavík; Iceland
• Online Access: https://hdl.handle.net/11475/16831; https://doi.org/10.21256/zhaw-3306; https://digitalcollection.zhaw.ch/handle/11475/16831

Since the introduction of STPA to a broader audience through the book Engineering a Safer World and the first MIT STAMP Workshop in 2012, the interest in this method of hazard analysis has been ever increasing. During the time of introduction to now, STPA has not only been applied to many different domains, has also been constantly developed and extended. We consider the availability of a professional, state-of-the art software application supporting STPA as a crucial agitator for further evolvement and expansion of STPA. Although some software tools are currently available, we are of the opinion that none fully meets the needs for a productive application of STPA outside of the context of research projects and case studies. Furthermore, we believe enterprises demand not only a professionally developed and highly streamlined software application, but also associated support, such as a proper user manual and instructions, along with regular updates and upgrades. The decision to effectively use STPA requires an investment into more than new software, thorough training of staff and a process supporting lessons learned are crucial. This investment will pay for itself through the additional insights that will be uncovered through the STPA methodology, along with the efficiencies and effectiveness enhanced through the software tool, the investment will pay off double! Stiki - Information Security, headquartered in Reykjavík, Iceland and the Safety-Critical Systems Research Lab at the Zurich University of Applied Sciences in Switzerland have successfully applied for an EU grant to develop a software solution satisfying the above mentioned characteristics. The software solution being developed will share the same framework as the software toolkit Risk Management Studio, developed by Stiki and available on the global market since 2005. The objectives are to allow enterprises to use STPA as standalone methodology through the software, and integrated into an enhanced enterprise risk management framework, enabling efficient ...