Comment by ratorx

Google’s SRE STPA starts with a similar model. I haven’t read the external document, but my team went through this process internally and we considered the hazardous states and environmental triggers.

https://sre.google/stpa/teaching

Disclaimer: currently employed by Google, this message is not sponsored.