A methodical analysis is made of possible functional insufficiencies and the conditions that trigger them, drawing on field experience, similar projects and experts, working from known insufficiencies toward scenarios that trigger hazardous behaviour and from known environmental conditions and misuse toward insufficiencies, qualitatively or quantitatively and by inductive, deductive or exploratory methods. A suitable combination of methods from the listed set (such as requirement, ODD, scenario and accident analysis, boundary values, equivalence classes, common triggering conditions, system architecture, sensor and actuator design, algorithms, ageing, environmental change, interfaces and misuse) is applied. Element insufficiencies are classified as single-point or multiple-point, which informs modification and validation targets, and traceability is kept between hazardous behaviours, triggering conditions and insufficiencies.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.