文摘
System theory provides a formal foundation for much improved hazard analysis that includes humans as part of the system. STAMP, a new model of causation built on Rasmussen's ideas, provides a way to understand accidents in sociotechnical systems. Rasmussen's abstraction hierarchy underlies Intent Specifications, which ground specifications on psychological principles. Rasmussen's model of human-task mismatch can be used to extend engineering hazard analysis to include human error.