Accident modelling: from symptom to system

A series of surveys on accident investigation models show a wide variety of models, dedicated to specific industrial applications, domains and investigation aspects. In particular the investigation of human factors is exposed to a wide diversity of models. In reviewing such models, the majority proves to be a derivate from the Reason’s Swiss Cheese causation model or the Rasmussen model on system hierarchy. Most of the models origin from the process industry and the energy sector. Application in the aviation industry has revealed their conceptual limitations. Due to their simplifications and lay interpretations, their intervention potential in practice is limited to linear solutions. In order to cope with socio-technological interactions in a multi-actor perspective, a full systems engineering design approach should be applied in a mission specific operating envelope. Such an approach is submitted to three paradigmatic shifts in investigation methodology. First; disengagement is required between event modelling and systems modelling. Second; a distinction in two design classes is required. A distinction is made between linear intervention