The risk from hazardous behaviour in given scenarios is evaluated, using severity and controllability estimated in the manner of ISO 26262-3 clause 6, although outcomes and parameters can differ for SOTIF. In clause 6 only whether the event is controllable in general or results in harm matters, because scenario selection already implies relevant exposure. No unreasonable risk is concluded when the event is judged controllable in the general case or when no harm results; in every other case the event is SOTIF-related and its hazardous behaviour is described with measurable parameters such as speed deviation or minimum distance. Controllability counts a missing or delayed driver reaction, including from indirect misuse and the time to regain situational awareness. After a functional modification a hazard is sufficiently addressed if severity or controllability then rates as none or controllable.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.