[SystemSafety] Functional hazard analysis, does it work?

[David MENTRE]

Hello,

Le 20/01/2016 08:06, DREW Rae a écrit :
> It is the
> fundamental problem of requirements engineering that strengthening
> internal validity weakens external validity. The more effort you put
> into creating an analysable model of the real world, the less that model
> looks like the real world and the greater the chance that the safety
> problems will exist outside the analysis altogether.

Could you elaborate on the point? I don't understand you. How making the 
formal(?) model breaks link to real world and helpfulness to saefty 
analysis? Would you have a minimal example?

Sincerely yours,
D. Mentré