Systems-Theoretic Accident Model And Processes Research Articles

Risk assessment methods for process safety, process security and resilience in the chemical process industry: A thorough literature review

This paper presents a systematic literature review of risk assessment methods in the chemical process industry (CPI), focusing on process safety, process security, and resilience. We analyzed peer-reviewed articles from 2000 to 2022 using the PRISMA methodology and identified twelve predominant methods. Our findings reveal a shift towards dynamic, systemic-based assessments like the Functional Resonance Analysis Method (FRAM) and System-Theoretic Accident Model and Processes (STAMP). These methods are particularly effective at capturing the complexities of sociotechnical systems in the CPI. However, a significant observation from our review is the limited emphasis on the resilience paradigm within many existing methods when addressing both process safety and process security risks, which is crucial for preventing and recovering from disruptions. Given the evolving challenges in system safety and security threats, there is an urgent need for holistic methods that integrate process safety, process security, and resilience. Our review highlights the opportunity for further research to better prepare the industry for future challenges, ensuring safer, more secure, reliable, and resilient operations.

Mechanism and early warning of coal mine rockburst accident based on SD-STAMP-DEMATEL

As coal mines shift from shallow to deeper excavation, the number of mines facing the risk of rock burst disasters is gradually increasing. Rockburst, with their characteristics of vibration, suddenness, complexity, and unpredictability, make it increasingly difficult to prevent and control these disasters. Therefore, the challenges of preventing and controlling rock burst disasters are becoming more and more severe. This paper, based on the system-theoretic accident model and processes (STAMP) theory, extracts the causal factors affecting coal mine rock burst accidents. Using the interpretative structural modeling (ISM) and decision-making trial and evaluation laboratory (DEMATEL) method, the accident-causing factors are quantitatively assigned. By constructing model equations and drawing causal loop diagrams and stock-flow diagrams, the event is dynamically simulated and early warnings are issued. The results show that the control defects leading to the accident are analyzed from the perspectives of the government level, management level, grassroots level, physical layer, and the dynamic process of the accident. In the short term, safety investment in grassroots operations is the most effective control. In the long run, the most effective measure is for the management level to strengthen its supervisory work. By changing the input ratios of various variables, it can be seen that different variables in the system dynamics (SD) model have different impacts on coal mine rock burst accidents. It is necessary to continuously strengthen the implementation of the safety responsibility system, improve the work efficiency of the government and management level, and enhance the timeliness of emergency decision-making.

A stakeholder analysis of the road transport system in Tanzania using a STAMP control structure

The way the road transport system is developed in a country affects safety. This study aims to identify the roles and relationships of road transport stakeholders and to explore the understanding of control and feedback mechanisms and associated gaps influencing road safety. A System-Theoretic Accident Model and Processes (STAMP) model was applied to document and interview data (n = 30). Participants emphasised the hindrance of overlapping mandates among stakeholders on the road transport system’s operations and underlined the roles of coalitions for road safety as system enablers. Further, the withdrawal of some controls by international agencies can increase system vulnerability. Most importantly, critical control and feedback gaps were shown to increase risks for safety within the road transport system. The findings underscore the complexity of the road transport system and add to the discussion on a system’s approach to road safety. Practitioner summary: Using a STAMP methodology, we extensively studied the road transport system in Tanzania. Road transport stakeholders were identified through the review of documents, interviews were conducted, and the main findings were discussed. Control and feedback mechanisms and associated gaps were critically presented, recommendations were proposed, and policy implications were suggested.

A STAMP-Game model for accident analysis in oil and gas industry

Accidents in engineered systems are usually generated by complex socio-technical factors. It is beneficial to investigate the increasing complexity and coupling of these factors from the perspective of system safety. Based on system and control theories, System-Theoretic Accident Model and Processes (STAMP) is a widely recognized approach for accident analysis. In this paper, we propose a STAMP-Game model to analyze accidents in oil and gas storage and transportation systems. Stakeholders in accident analysis by STAMP can be regarded as players of a game. Game theory can, thus, be adopted in accident analysis to depict the competition and cooperation between stakeholders. Subsequently, we established a game model to study the strategies of both supervisory and supervised entities. The obtained results demonstrate that the proposed game model allows for identifying the effectiveness deficiency of the supervisory entity, and the safety and protection altitudes of the supervised entity. The STAMP-Game model can generate quantitative parameters for supporting the behavior and strategy selections of the supervisory and supervised entities. The quantitative data obtained can be used to guide the safety improvement, so as to reduce the costs of safety regulation violation and accident risk.

Safety analysis of catapult takeoff of carrier-based aircraft using System-Theoretic Process Analysis method

Catapult takeoff has become the main way for carrier-based aircraft to take off. However, as a complex process of multi-system coupling and multi-control actions link, it is an important task to ensure the safety of catapult takeoff. Therefore, this paper adopts the System-Theoretic Process Analysis (STPA) and establishes a model of catapult takeoff using the Systems Theoretic Accident Model and Process(STAMP) model. To carry out safety analysis, identify unsafe control actions and extract the causes of unsafe behavior, simulation analysis is also carried out for typical unsafe actions. The results show that using STPA to make safety analysis, combined with simulation, can comprehensively analyze and evaluate the safety of catapult takeoff, which helps identify the risk before the flight test and reduce the flight test risk.

The hybrid systems method integrating STAMP and HFACS for the causal analysis of the road traffic accident

The role of traditional analysis methods in improving complex socio-technical system safety has reached a ceiling, and thus systems theory has been utilised to support the investigations and countermeasures for road traffic accidents. As two widely applied systems accident analysis models, STAMP (systems theoretic accident model and process) and HFACS (human factors analysis and classification system) have their own advantages in accident analysis and safety improvement. Therefore, this study develops a new hybrid systems method integrating STAMP and HFACS for road traffic accident (SH-RTA), which can adopt HFACS to enhance the identification and analysis ability of STAMP for human factors and employ control concepts and elements of STAMP to cement the characteristic of HFACS. To illustrate the applicability of the hybrid method, a case study of ‘9·22’ major road traffic accident in China is thoroughly analysed. Finally, preventive countermeasures and suggestions are presented. Practitioner Summary: This paper proposes a new hybrid systems method integrating STAMP and HFACS for road traffic accident. The new method reveals dysfunctional interactions within the parallel level and across levels, and identifies additional human and organisational factors. The recommendations for preventing road traffic accident are provided from higher levels of system.

A preliminary study on the barriers and facilitators to improving the health, safety, and well-being of aging heavy vehicle drivers

Introduction. Managers from road freight transportation organizations were interviewed on barriers and facilitators to implementation of occupational health, safety, and well-being interventions for aging heavy vehicle drivers. As aging drivers are more likely to be seriously injured or die in a work-related incident than younger drivers, it is important to recognize strengths and weaknesses throughout the system to identify intervention that addresses their specific needs. Method: A Systems Theoretic Accident Model and Processes (STAMP) control structure was constructed to chart the controllers, controls, and feedback channels in the system to identify gaps in health, safety, and well-being intervention in the system. The STAMP control structure also charted the barriers and facilitators within levels across the system. Eleven managers were recruited into the study representing a range of road freight transportation organizations throughout Australia. Results: Interview data revealed that barriers and facilitators existed at most levels of the system. Facilitators included advice from external agencies, support from upper management, modern technology, and regular social communication with drivers. Barriers were a lack of guidance on aging issues, operational conflicts with health and safety objectives, and the drivers’ fear of disclosing health information associated with their driving role. In regards to formalized intervention in place to support aging heavy vehicle drivers, the system is reliant on fitness to drive medical assessments based on age and jurisdiction. Conclusions: As there was generally a lack of senior direction cited from the upper levels of the system on aging issues, there was much variation across the study on how aging risks are managed in the workplace for heavy vehicle drivers. Practical Applications: This study recommends that managers across the road freight transportation industry receive formalized aging-awareness health and safety training in how to manage work-related driving hazards for aging heavy vehicle drivers.

A System-Theoretic Fuzzy Analysis (STheFA) for systemic safety assessment

The interactions among distinct systems and components have attracted more attention recently due to safety concerns. Indeed, modern industrial plants could be regarded as complex socio-technical systems influenced by human, social, and organizational aspects. To model this level of complexity, System Theory (ST) and related frameworks, such as System-Theoretic Accident Model and Processes (STAMP) have been introduced. Despite their strengths and abilities, ST techniques are mainly qualitative and provide much information, eventually complicated to analyse and summarize. Fuzzy Set Theory (FST) and expert elicitation could be employed to cope with the former challenges. However, addressing the uncertainty arising from differences in expert opinions is necessary. To this end, this paper aims to develop a framework to conduct system safety assessments based on the integration of STAMP and FST. In this context, an improved version of the Similarity Aggregation Method is adopted to aggregate judgments. To demonstrate the application of the approach, a Natural Gas Regulating and Metering Station (NGRMS) is considered as the case study. The results show that the methodology is able to provide quantitative information by associating a level of criticality with each control action. Accordingly, managers could exploit the framework to identify priorities for directing efforts.

Managing the risks associated with technological disruption in the road transport system: a control structure modelling approach

Road transport is experiencing disruptive change from new first-of-a-kind technologies. While such technologies offer safety and operational benefits, they also pose new risks. It is critical to proactively identify risks during the design, development and testing of new technologies. The Systems Theoretic Accident Model and Processes (STAMP) method analyses the dynamic structure in place to manage safety risks. This study applied STAMP to develop a control structure model for emerging technologies in the Australian road transport system and identified control gaps. The control structure shows the actors responsible for managing risks associated with first-of-a-kind technologies and the existing control and feedback mechanisms. Gaps identified related to controls (e.g. legislation) and feedback mechanisms (e.g. monitoring for behavioural adaptation). The study provides an example of how STAMP can be used to identify control structure gaps requiring attention to support the safe introduction of new technologies.

A system theory (STAMP) based quantitative accident analysis model for complex engineering systems

This paper is aimed to propose a hybrid accident analysis framework for complex engineering systems based on methods of the systems theoretic accident model and process (STAMP), failure modes and effects analysis (FMEA), and analytic hierarchy process (AHP). Within the scope of the proposed model, initially, an accident is qualitatively analyzed by identifying safety constraints, constructing a hierarchical control process, and specifying links between unsafe activities. As a second step, failure modes, their causes, and their consequences are determined. Lastly, the risk scores of each failure mode are calculated by analysis of obtained expert judgments. In this step, as different from the conventional FMEA, results are calculated based on the weight scores that are found according to the AHP approach of each accident factor. For the demonstration stage, a real case study is performed to present the effectiveness of the strategy. It is observed that the proposed approach allows analyzing the accident more specifically by defining each relationship between factors and root causes corresponding to the accident and prioritizing them based on the weights, which are assigned according to the accident's nature. In addition, it may be adapted for different complex engineering systems as well as it is a suitable and useful model for the accident analysis associated with smart ship concepts.

An integrated resilience assessment methodology for emergency response systems based on multi-stage STAMP and dynamic Bayesian networks

The interactions of external disruptions and technical-human-organizational factors in emergency operations are usually observed. Resilience assessment of emergency systems can improve emergency response capability and system functional recovery. The increasing complexity and coupling of factors in emergency response systems need to be investigated from a system resilience perspective. In this paper, we propose to integrate a multi-stage System-Theoretic Accident Model and Processes (STAMP) with a dynamic Bayesian network (DBN) for the resilience assessment of emergency response systems. In the proposed methodology, emergency response systems are viewed as multi-step emergency operations for STAMP to analyze the hierarchical control and feedback structures. The output of multi-stage STAMP in controllers, actuators, sensors, and controlled processes is applied to develop a DBN for resilience assessment. For known external shocks (e.g., natural disasters), the effects of external shocks on the system are decomposed into subsystems or components. System degradation and recovery models are established. Regarding unknown external disruption (e.g., unforeseen failure modes), degeneration and recovery are temporally integrated into the analysis of system functionality. System performance is evaluated through the combination of socio-technical factors and external disasters. Eventually, the resilience of emergency response systems is obtained from the performance curves. The results demonstrate that the proposed model can evaluate system resilience after the system suffers from external disasters.

From Anti-doping-I to Anti-doping-II: Toward a paradigm shift for doping prevention in sport.

Doping remains an intractable issue in sport and occurs in a complex and dynamic environment comprising interactions between individual, situational, and environmental factors. Anti-doping efforts have previously predominantly focused on athlete behaviours and sophisticated detection methods, however, doping issues remain. As such, there is merit in exploring an alternative approach. The aim of this study was to apply a systems thinking approach to model the current anti-doping system for four football codes in Australia, using the Systems Theoretic Accident Model and Processes (STAMP). The STAMP control structure was developed and validated by eighteen subject matter experts across a five-phase validation process. Within the developed model, education was identified as a prominent approach anti-doping authorities use to combat doping. Further, the model suggests that a majority of existing controls are reactive, and hence that there is potential to employ leading indicators to proactively prevent doping and that new incident reporting systems could be developed to capture such information. It is our contention that anti-doping research and practice should consider a shift away from the current reactive and reductionist approach of detection and enforcement to a proactive and systemic approach focused on leading indicators. This will provide anti-doping agencies a new lens to look at doping in sport.

Assessment of the Explosion Accident Risk in Non-Coal Mining by Hasse Diagram Technique

The aim of is paper is to address the problem of identifying critical factors in the analysis of non-coal mine explosion accidents as well as to improve the rationality and accuracy of the risk analysis results. Hence, we developed a risk identification method for non-coal mine explosion accidents, combining the Systems-Theoretic Accident Model and Process (STAMP) and the Rank-order Centroid (ROC) method based on the Poset decision-making theory. The proposed method was applied to identify risk in engineering cases. Findings showed that four main dangerous events (out of twelve identified ones) were the primary culprits of related accidents, which were the events “Blasters without licenses and illegal operation” at the basic level, the event of “the confusion about the safety management system of non-coal mine companies” at the control level, and the event of “the failure about the emergency management departments” and “public security departments” at the supervision level. The approximate values of the average rank of the four events are 11.56, 10.4, 4.33, 4.33. The results of risk identification of non-coal mine explosion accidents based on Poset were consistent with the results obtained by the method used in the case study. This study extends the methods for identifying risks of non-coal mine explosion accidents and facilitates the formulation of effective preventive measures.

A proposed validation framework for the system theoretic process analysis (STPA) technique

Validation is a prominent challenge in the domain of risk management in general, and hazard analysis in particular. Practitioners have highlighted a lack of clear guidance on how to perform validation of hazard analyses, who should be involved, and when to stop the validation process. Aiming to contribute to addressing this issue, this study proposes a validation framework for the System Theoretic Process Analysis (STPA) technique, based on foundational concepts in risk analysis and prior theoretical work on validation in related disciplines. STPA, which is a hazard analysis technique based on System-Theoretic Accident Model and Processes (STAMP) accident causality model, is selected due to its increasing popularity in different industries, and because no validation frameworks have yet been proposed for this technique. The proposed STPA validation framework aims to support a systematic assessment of the analysis's comprehensiveness, accuracy, and credibility. It consists of a set of theory-based concepts that are elaborated as guide questions, each focusing on different aspects of STPA. The framework employs a formative approach, i.e., it aims to help stakeholders systematically reason about the analysis and advise on improvements or further elaboration. To develop this framework, theoretical validation concepts in the pertinent literature in risk science, social science, and operations research, system dynamics, and simulation modeling disciplines have been used. It is recognized that the proposed framework should be further tested to confirm its practical usefulness, and it should be investigated whether it indeed improves the hazard analysis in terms of the envisioned functions.

Insights in the safety analysis of an early microreactor design

A safety analysis of a transportable, plug-and-play, heat-pipe-cooled microreactor – or Nuclear Battery (NB)– designed at MIT is presented. The considered design is a semi-autonomous 5 MW (thermal) high-temperature heat-pipe-cooled, yttrium-hydride moderated NB envisioned to be a transportable, flexible, affordable, and distributed low-carbon energy source.The analysis makes use of a recently proposed methodology that integrates i) System-Theoretic Accident Model and Processes (STAMP) to guide a qualitative exploration of the NB threats and hazards, ii) Modeling and Simulation (M&S) to investigate the NB dynamic behavior during accident scenarios, and iii) Goal-Tree Success-Tree Master Logic Diagram (GTST-MLD) to assess risk quantitatively. The methodology has been shown to provide systematic risk insights without the need to rely on prior operating experience, and enables a dynamic evaluation of the risk profile. Moreover, it identifies unknown threats and hazards relevant to the novel microreactor design and explores the related accident scenarios. The key findings of the safety analysis performed on the nuclear microreactor considered are the identification of vulnerabilities related to the use of yttrium hydride as the moderator, the assessment of threats and accident scenarios associated with the loss of sodium from the heat pipes, and, for such scenarios, the quantification of the grace time, i.e., the period during which human operators can intervene to avoid unacceptable consequences.

Analysis of Pier Contact Accident in Busan New Port of South Korea by System-Theoretic Accident Model and Processes (STAMP)

Analysis of Pier Contact Accident in Busan New Port of South Korea by System-Theoretic Accident Model and Processes (STAMP)

Thinking in Systems, Sifting Through Simulations: A Way Ahead for Cyber Resilience Assessment

The interaction between the physical world and information technologies creates advantages and novel emerging threats. Cyber-physical systems (CPSs) result vulnerable to cyber-related disruptive scenarios, and, for some critical systems, cyber failures may have fallouts on society and environment. Traditional risk analysis in no more sufficient to deal with these problems. New techniques are gaining increasing consensus, especially those based on systems theory. In this context, the System-Theoretic Process Analysis for Security (STPA-Sec) extends the Systems-Theoretic Accident Modelling and Processes (STAMP) model considering cyber threats, and identifying unsafe and unsecure controls throughout a cyber socio-technical system. Despite its large usage as a descriptive tool, there is still limited use of STPA-Sec in (semi-)quantitative terms. This article presents System-Theoretic Process Analysis for Security with Simulations (STPA-Sec/S), a methodological interface between STPA-Sec and quantitative resilience assessment based on simulation models. The methodology is instantiated in a demonstrative case study of a water treatment plant, and its critical CPSs which may impact both community health, and environment. The obtained results show how STPA-Sec/S foster systems understanding, allow a systematic identification of its major criticalities, and the respective quantification.

Investigation of a Recurring Type Collision on the Padma Multipurpose Bridge Pillar Using Systems Theoretic Accident Model and Processes (STAMP) Approach

Investigation of a Recurring Type Collision on the Padma Multipurpose Bridge Pillar Using Systems Theoretic Accident Model and Processes (STAMP) Approach

Examining Coroners’ Recommendations for Health and Safety Management of Ageing Heavy Vehicle Drivers: A STAMP Analysis

Recommendations were analysed from coronial cases involving ageing heavy vehicle drivers (≥55 years) and mapped onto a Systems Theoretic Accident Model and Processes (STAMP) control structure to identify the controllers and control actions influential in the heavy vehicle industry with regard to health and safety. A National Coronial Information System (NCIS) database search revealed 38 coroners' recommendations arising from 14 unique cases of ageing driver involvement. There were no ageing themes identified in the analysis of coroners' findings and recommendations. An examination of the STAMP control structure identified that the highest concentration of recommendations was in the level of regulation, the second most senior level of control, although safety constraints were advised for all five levels of the system. In regard to identifying themes of control flaws in the recommendations, the study found that "unidentified hazards" were the most common type of safety failure in the analysis of cases of ageing drivers, concentrated at the regulatory level, which indicates that additional risk identification methods by upper levels of control are needed. Therefore, a recommendation arising from the current study is that additional controls in safety intervention are necessitated in the upper and middle levels of the road freight transportation system; in particular, formalising health and safety education for organisational managers, with a focus on identifying ageing issues, would fill a gap in the system for managing ageing heavy vehicle drivers. In conclusion, this study has found that improving the health and safety of ageing heavy vehicle drivers necessitates additional safety constraints with a focus on formalised safety education for organisational managers, in addition to a means to detect emerging and unforeseen hazards in the road freight transportation industry.

Protecting Chiller Systems from Cyberattack Using a Systems Thinking Approach

Recent world events and geopolitics have brought the vulnerability of critical infrastructure to cyberattacks to the forefront. While there has been considerable attention to attacks on Information Technology (IT) systems, such as data theft and ransomware, the vulnerabilities and dangers posed by industrial control systems (ICS) have received significantly less attention. What is very different is that industrial control systems can be made to do things that could destroy equipment or even harm people. For example, in 2021 the US encountered a cyberattack on a water treatment plant in Florida that could have resulted in serious injuries or even death. These risks are based on the unique physical characteristics of these industrial systems. In this paper, we present a holistic, integrated safety and security analysis, we call Cybersafety, based on the STAMP (System-Theoretic Accident Model and Processes) framework, for one such industrial system—an industrial chiller plant—as an example. In this analysis, we identify vulnerabilities emerging from interactions between technology, operator actions as well as organizational structure, and provide recommendations to mitigate resulting loss scenarios in a systematic manner.