APPLYING RISK MODELS TO FORMULATION OF SAFETY CASES

Importance measures have been useful in the process of extracting insi ghts from risk analyses. Importance measures have also been suggested for use in component classification. However, there are difficulties o f interpretation associated with component classification based on imp ortance measures. This paper briefly reviews an alternative method, '' Top Event Prevention Analysis,'' and, based on a simple example, compa res its key characteristics to those of conventional applications of i mportance measures. The methods are compared with respect to the task of formulating a safety case for a complex and potentially hazardous f acility, in which component classification plays an important role. A key subtask is identification of a collection of design elements that is necessary and sufficient to achieve the desired level of protection of the public, the workers, and the environment. At the design stage, identifying this set helps to determine what elements to include in t he final design. Separately, a similar selection process could be used in order to justify limiting the scope of regulatory oversight to a s ubset of design elements, on which a safety case is to be based. This step could be taken during initial review of a design, or later as par t of an effort to justify relief from regulatory requirements that are burdensome but provide little actual risk reduction.