eyeson-63 Risk Modeling In practice, models only include events that can be measured Most causal factors involved in major accidents are unmeasurable Unmeasurable factors tend to be ignored or forgotten Can we measure software?(what does it mean to measure design?) Human error? Risk assessment data can be like the captured spy, if you torture it long enough, it will tell you anything you want to know William ruckelshaus Risk in a Free Society Misinterpreting Risk Risk assessments can easily be misinterpreted 10 Extended system boundary 10 System Boundary 10·10c ������������������ Risk Modeling In practice, models only include events that can be measured. Most causal factors involved in major accidents are unmeasurable. Unmeasurable factors tend to be ignored or forgotten. Can we measure software? (what does it mean to measure design?) Human error? Risk assessment data can be like the captured spy; if you torture it long enough, it will tell you anything you want to know. William Ruckelshaus Risk in a Free Society c ������������������ Misinterpreting Risk Risk assessments can easily be misinterpreted: 10 −4 −3 System Boundary Extended system boundary 10 10 −3 −3 −6 . 10 = 10