Understanding the system in risk assessment

In the assessment of a system, understanding the system is central. Even so, most of the current literature takes a narrow view of understanding, making only the catalog of system ``assets`` explicit, while maintaining the balance of the analyst`s understanding inside the analyst`s head. This can lead to problems with non-repeatability and incompleteness of assessment results. This paper introduces the notion of using explicit system models to document the analyst`s understanding of the system and shows that, from these models, standard assessment products, such as fault trees and event trees, can be automatically derived. This paper also presents five ``views`` of a system that can be used to document the analyst`s understanding of the system. These views go well beyond the standard instruction to identify the system`s assets to show that a much richer understanding of the system can be required for effective assessment