eyeson Design for Controllability Make system easier to control, both for humans and computers Use incremental control Perform critical steps incrementally rather than in one step Provide feedback To test validity of assumptions and models upon which decisions made To allow taking corrective action before significant damage done Provide various types of fallback or intermediate states · Lower time pressures ● Provide decision aids Use monitoring Monitoring Difficult to make monitors independent Checks require access to information being monitored but usually involves possibility of corrupting that information Depends on assumptions about structure of system and about errors that may or may not occur May be incorrect under certain conditions Common incorrect assumptions may be reflected both in design of monitor and devices being monitoredc ��������������������� ���������� Design for Controllability Make system easier to control, both for humans and computers. Use incremental control: Perform critical steps incrementally rather than in one step. Provide feedback To test validity of assumptions and models upon which decisions made To allow taking corrective action before significant damage done. Provide various types of fallback or intermediate states Lower time pressures Provide decision aids Use monitoring c ��������������������� ���������� Monitoring Difficult to make monitors independent: Checks require access to information being monitored but usually involves possibility of corrupting that information. Depends on assumptions about structure of system and about errors that may or may not occur May be incorrect under certain conditions Common incorrect assumptions may be reflected both in design of monitor and devices being monitored