Systems Theoretic Process Analysis
Define purpose of analysis
Model of control structure
Identify unsafe control actions
Identify loss scenarios