of the target system.
2. Risk-Directed Design—The system’s architectural design is produced and
then used in conjunction with the risk model to define the required
dependability properties and functionalities for all system modules.