Human Supervisor (Controller) Model of Model of rocess Automation Automated Displ and Decision Aiding Model of‖ Model of Process Interfaces Actuators Sensors Controlled Measured variables Controlled Process Safety and the Process Models Accidents occur when the models do not match the process Wrong from beginning Missing or incorrect feedback so not updated Must also account for time lags Explains human/machine interaction problems Pilots and others are not understanding the automation What did it just do? Why wont it let us do that? Why did it do that? What caused the failure What will it do next? What can we do so it does not How did it get us into this state? happen again? How do I get it to do what I want? Dont get feedback to update mental models or disbelieve itc ✎✞✝✞✏✄✝✞✍✄☛✞✟☞✑③❏❑▲✞✔ ￾✂✁✄✁✄☎✆✞✝✞✟✞✠✞✡☞☛✞✆✞✝✞✌✍ outputs Process variables Controlled variables Measured inputs Controlled Process and Decision Aiding Automated Display Process Interfaces Model of Model of Process Model of Process Actuators Sensors Model of (Controller) Human Supervisor Automation Safety and the Process Models Accidents occur when the models do not match the process Wrong from beginning Missing or incorrect feedback so not updated Must also account for time lags Explains human/machine interaction problems Pilots and others are not understanding the automation What did it just do? Why won’t it let us do that? Why did it do that? What caused the failure? Disturbances c ✎✞✝✞✏✄✝✞✍✄☛✞✟☞✑③❏❑▲✞✕ ￾✂✁✄✁✄☎✆✞✝✞✟✞✠✞✡☞☛✞✆✞✝✞✌✍ What will it do next? What can we do so it does not How did it get us into this state? happen again? How do I get it to do what I want? Don’t get feedback to update mental models or disbelieve it