Functional Safety 2016

Proving that the SIF does what it should

‣

You have an SRS

‣

You know what it “should do”

‣

You have a Proof Test

‣

You can compare the SRS and Proof Test

‣

Does the Proof Test check all the points in the SRS?

‣

If YES, you know that a SIF that passes the Proof Test “does what it should”

‣

Note. You don’t know “how”

‣

The SIF is a black box

‣

But a black box that “does what it should”