The lack of guidance on how to specify safety requirements that are properly traceable to the architecture design and to failure propagation models is one of the main reasons for their incompleteness and inconsistency, what turns to be a root cause of safety incidents. This book describes techniques to address this challenge in early and late stages of the development process.
