We have years of experience of developing mission and safety critical systems, making us a reliable partner for safety critical projects. How does the HW or SW element achieve or maintain a safe state? Performance and functional safety requirements mean that we have to be able to monitor the safety aspects of each of the components within the powertrain. The first aspect is that the system level must be seen as something that needs explicit attention. Cooperation between the two specialist areas is often poorly organised. Technical Safety Concept at the System Level. Download the white paper * to learn more about functional safety concept for HV battery electric vehicles. WebDefinition of technical safety requirements relating to the total system and allocated sub-systems Elaboration of a technical safety concept using an example, derived in module K3, incl. WebUnderstand technical safety inputs/requirements at each stage of a project lifecycle from concept, design through to operation, and decommissioning; Appreciate the purpose and Feel free to contact me for any comments/opinions. WebTechnical Safety Requirements FUNCTIONAL AREA GOAL: Contractor has developed, maintained, and received DOE Field Office Approval for the necessary operating 1st-tier suppliers are usually responsible for the system level, while the carmaker is usually responsible for the concept phase. WebPurpose of the Technical Safety Concept Technical safety requirements describes what a system will do when a malfunction violates a safety goal. Web[C.3-7] Functional safety concept is developed by deriving functional safety requirements from safety goals. TSR_01. Our purpose is to provide technological design expertise to our customers on their journey beyond tomorrow, safely and securely. - what do you mean for "diagnostic features concerning the hardware, to be implemented in software"? Software is partitioned into separate pieces so that the failures do not spread. Briefly, suppose we have a system composed of multiple subsystems and sys_A & Sys_B belong to this system. example Detection of over-current, short-circuit or over-temperature. Hannibal: If there are just two effects for each subsystem so I shall conduct ( 2 X 20) = 40 FTAs while I can make one system FMEA and only 20 DFMEA for my system. FSRs define safety mechanisms and other safety measures to minimize the risks. Safety analyses can be classified according to the way they are conducted. This is primarily due to cost increases, chances of having inconsistencies within work products and its impact on the overall project schedule. 2014 Rolls-Royce Phantom Bespoke Chicane Phantom Coup. Be able to advise on the type of formal safety assessment technique best suited at different stages of an installation life cycle, and actively contribute to and take part in such assessments; Understand the principle of ALARP and other risk reduction approaches, how and when they can be applied; Be able to identify safety critical elements, understand how performance standards are developed and used, how safety critical faults or failures are defined and should be recorded, and how the concept of SCE and Performance standards aligns with maintenance management system; Senior Safety & Loss Prevention Officer, Total E&P, Risk Communication and Operationalization, Fundamentals of Technical Safety and Risk Management, Process Hazard Assessment using HAZOP Technique and HAZOP Team Leader Training, Risk Assessments Techniques (Qualitative, Semi-quantitative and Quantitative), Detailed Risk Assessment (including Bowtie Risk Assessment etc. How does a safety engineer know he has covered enough fault scenarios or whether he has over specified? Good technical safety requirements are in fact the foundation for an effective functional safety implementation. This safety architecture describes the overall technical safety concept, diagnosis strategy and measures to reduce the probability of systematic and random faults. He then joined BTC Embedded Systems AG where he currently works as a Senior Pilot Engineer in Paris/France. Safety analyses should be carried out in order to systematically identify the causes of failures and the effects of faults. The course content and outline are listed below followed by a description of each element and what to expect in the training: The training programme is an introductory course to Technical Safety and Safety Case Development. Learn More , Effective Functional Safety Concept Generation in the Context of ISO 26262, Developing Functional Safety Requirements using Process Model Variables, ASIL Decomposition: The Good, the Bad, and the Ugly. b) the diagnostic features concerning the hardware, to be implemented in software, shall be defined. The paper is intended to support those safety engineers tasked with developing We are looking at the system level here, for which a system architecture must be developed for implementing the functional (in the sense of the actual desired functionality) and the functional safety requirements. HSI is used to describe the configuration and functionality of the SOC/processor/ microcontroller peripherals and how they interact with CPUs. A big part of functional safety is documenting your work. We have to have a sufficient detailed system architecture to conduct the analyses in an efficient way by making a balance between quality and cost. WebThis course is a study of the basic concepts in social interaction, analyzing aspects of the immediate culture, defining and evaluating the individual behavior in inter-group relations, The experience has shown that theAUTOSAR architecture standardis a good candidate to fulfil the ISO requirements as it supports most of them. Safety analyses should be carried out in order to systematically identify the causes of failures and the effects of faults. Fusa Manager: I believe now that we will have blockbuster products. What if it fails to? The system an engineering task in its own right, Reference phase model of the system level, Product development at system level (part 4 of ISO 26262), Automotive SPICE Provisional Assessor (intacs), Automotive SPICE Competent Assessor (intacs), Introduction to ME SPICE (Mechanical Engineering), Introduction to HWE SPICE (Hardware Engineering), Upgrade: Automotive SPICE v3.1 guidelines, People a potential weakness: security course on social engineering. Our basic assumption is that the discovery of new catalysts can be accelerated by developing a Managed the day-to-day activities of a group of 4 Electrical, WebThe 2023 BMW M2 MotoGP Safety Car measures 74.30 inches in width, The 2023 BMW M2 MotoGP Safety Car measures 180.30 inches in length, and has a wheelbase of 108.10 inches. This includes the hardware resources that support the execution of the embedded software, but also of all hardware devices that are controlled by software. A common safety goal will take the highest ASIL rating of the hazard events. 5Eh(@ & J[m0F4="r Safety Analyses They are modeling techniques that are performed on the system architectural design to identify the safety gaps in the architecture. Not all stakeholders are aware by all of these types; that being said, clear word/spreadsheet format is easy to understand. 2013 Chevrolet Malibu If you would like to try out our tools, we will gladly provide an evaluation license free of charge. Technical Safety concept indicates that all HW Safety Requirements and SW Safety Requirements shall be defined along with their respective Safety tests. In addition, the technical safety requirements which refine the functional safety concept considering system architecture are developed. Software requirements specify variable names, signal paths, and software protocols and mechanisms. Digital Innovation is born when technology, business viability and human desirability meet. This series is dedicated to the absolute functional safety beginners, system engineers or software engineers or anyone who wants to know about automotive functional safety ISO 26262 standard from ZERO. 1.4K views 1 I would now like to explain the clauses of the reference phase model individually. Who wrote the classic manual on Functional Safety in Practice, or Functional Safety Essentials? e) electrical I/O; write down the input/output digital/analog channels that receive/transmit safety-related signals, see figure 5. All of our safety specialists are TV Sd certified Functional Safety Professionals. Adam: My system is composed of 8 subsystem and each subsystem has only one possible effect that violates the safety goal. WebThe functional safety concept defines the key safety requirements, the high-level hardware and software architecture and the diagnostics approach. WebFunctional Safety Concept (FSC) and Requirements (FSRs) and Technical Safety Requirements (TSRs). Adequate hazard analysis techniques like FMEA or HAZOP can be used to support this task. A minimal cut set is a cut set such that if any basic event is removed the remaining events will not be a cut set. In which time tolerance? https://www.linkedin.com/pulse/how-organize-safety-analysis-function-system-subsystem-freese/, Supporting the verification of the safety concept, safety requirements, and the identification of design requirements and test requirements; that being said, it assists the design, the validation of safety goals and safety concept, the verification of safety concept and safety requirements, the identification of additional safety requirements for faults detection. What will be the emergency action? Next Post: How can we specify safety-critical time intervals? With a methodological approach, the development requirement phases answer conceptual and technical questions to elaborate the system architecture including hardware and software parts, and allocates functional and safety mechanisms to each part in order to implement the E/E system. 2023 SAE International. First, on the hardware-software integration level, second on the system level, and third on the vehicle level. FMEA proceeds forward from the potential causes of all the failure modes of a system to the effect. TSRs consist of safety limits, operating limits, surveillance requirements, administrative controls, use and application instructions, and the basis thereof. 2014 Rolls-Royce Wraith. WebIt is a specific category of PLC, which in recent years have become a commonly used means of performing safety functions, especially in industrial applications. Safety analyses are performed at the appropriate level of abstraction during the concept and product development phases. In a nutshell, by conducting safety analyses, we reduce the likelihood of systematic failures . ISO 26262, on behalf of Functional Safety defines a dedicated requirement engineering process with different phases. Based on the results of the functional safety concept, the technical safety concept is carried out at the signal level and Technical Safety Requirements (TSR) are derived. Our technical manager requested a C# developer from another business line to help us for the next two weeks. Software bugs are a very important source of error if not the number one source of error in terms of automotive functional safety. It defines several system deliverables that customers can use to build their own concept more quickly. The technical safety requirements specification refines the fimctional safety concept, considering both the functional concept and the preliminary architectural assumptions (see ISO 26262-3). Managed the day-to-day activities of a group of 4 Electrical, In parallel, hardware requirements are also derived to develop the hardware elements. Technical Safety Requirements(TSR) define which safety mechanisms to implement to satisfy the FSRs. Great article, but I think most of section #2 HSI characteristics are TSC requirements more than HSI. WebThe TSR specify how to identify and control faults in the system that is developed, detail how to achieve or maintain the safe state (including the transition time to the safe state, the We help and support our clients also in these aspects. Unfortunately, as important as the HSI is in theory, the devil is in the details. 2014 Caterham Seven 620R. Considering the point 3 (i.e. The section above was a walk-through system-level development from a functional safety perspective according to ISO 26262. How can I avoid the test explosion problem? You also have to think about tolerance times, which depend very much on the specific application and other safety mechanisms. >l/>|2Mrn|aL>SnP3z}YgraU~BUtT. Hazard Analysis and Risk Assessment: PHA, OHA, FFA, FHA, HazOp, HAZID, etc. This is a topic well discuss in an upcoming article featuring ISO 26262 requirements engineering. The technical safety concept is Our team can take full responsibility of developing a safety concept for your system. According to me the best practice would be in derriving a HSI document is by doing a HSI testing using a dedicated software and updating it with realistic data always! At the end, you will write down safety mechanisms to prevent the basic events from occurring. Feb 24th, 2020, Issue no.17, ISO 26262-4:2018, Technical Safety Concept (TSC). Do the systems behave as expected? Were the experts! The functional safety concept and technical safety concept are similar. Sometimes our clients will assess their own readiness to develop safety critical products. WebFunctional Safety Concept (FSC) and Requirements (FSRs) and Technical Safety Requirements (TSRs). A strategy must be specified for coordinating test objectives and how tests are organised. Technical Safety Requirements (TSR) define which safety mechanisms to implement to satisfy the FSRs. The first step in developing a safety critical product, which meets functional safety standards such as the IEC 61508, is to develop a high-level solution called the functional safety concept. a) the hardware diagnostic features shall be defined; and. We can identify four stages or levels in the ISO 26262 requirements process: Safety goals(SG) are specified during the Concept phase and identify the high-level safety requirements resulting from two tasks: Item definition: The task identifies the system, the intended functions and it answers whether they can present any risks or hazards to the vehicle occupants. The distinction between point estimation and confidence interval estimation for failure rates is described. Evaluations include a free launch workshop and also provide an opportunity for youto meet one-on-one with our support and engineering teams. So we select the safety-related interfaces to be documented. The system level follows the concept phase in the lifecycle. HSI document is used to communicate how we talk to HW elements (sensor, register, slave, memory, converter, multiplexer, IO, watchdog, CAN, LIN) via software code with the stakeholders: system engineers, system architects, software developers, safety engineers, and testers to name a few. &$?4p`| DowJ1['x4B]'3mqNqs>e!-zU/T#IYp7zm5YP(oG2sU8Yx>9/AUcupZdm`Zmw;!J9| a On-board test during power-up? The In addition, well-trusted system design principles should be applies where applicable. In organizations, there are best practices for the modeling methods but I think there is systematic good model like System Failure Frame Analysis [1]. Ready for a quick summary on the system level in functional safety? The specification of the HSI is initiated during the sub-phase Technical safety concept. The HSI specification is refined as development continues through hardware and software development, see the following figure of the HSI interaction with different phases. The HSI characteristics are for instance operating modes of the hardware parts, hardware configurationparameters, hardware resources that will support the software execution, software partitioning feature, hardware diagnostic feature implemented in the software (e.g watchdog, etc.). Overall, evidence must be provided here that the safety goals have been reached and that the item is functionally safe. processing sensor signal)? Part 4 of ISO 26262 contains the corresponding requirements. hmO0}M_84!ttcRz%RT;'i+wg;4p"P|RC BZ!C Dq@D,A We bring you the competencies you need to prepare the required Safety Documentation and conduct. ), SW / HW / System Safety Analysis, Safety Case, SIL verification analysis, general industry where IEC61508 is applicable. The TSRs are safety requirements asking for the implementation of safety mechanisms. Look at the following figure.3, each item can be decomposed into multiple systems and each system is composed of ECU at least and each ECU contains a system-on-chip, SOC. 1 The HSI specification shall specify the hardware and software interaction and be consistent with the technical safety concept. Then the technical safety concept is developed to specify the technical safety requirements within the system architecture. What are these rectangular drawings? Technical Safety comprises a set of discrete elements that are applied in the field of risk analysis and management to help identify, understand and evaluate risks, and to specify solutions necessary to reduce risks levels as low as reasonably practicable. They describe the capabilities of the software element to act in its operating situations and express a specific reaction to a certain input stimulus. The minimal cut sets, along with their associated probabilities and costs, help identify the most likely or least costly ways for the top event to occur [2]. Traditionally, suppliers in the automotive industry have hardware development departments and software development departments. Nevertheless, the norm did not mention that the HSI is for safety-related interfaces but we understand that from the context. It currently exists as a standard in the IEC/ISO basic safety publication, which covers general functional safety, for a number of industries. WebLeading TSE team as a Process safety/Technical safety lead for all ongoing offshore, Onshore and LNG projects. It is the project manager who often also takes on coordination of activities. If so, please use the link below to schedule a meeting, where a member of our engineering team will be happy to show you the features and use cases and directly answer any questions you might have. The TSRs form the basis from which specific hardware and software safety requirements are derived. Discover some of the main features of our products in these short videos. Afterwards, we will end u with the basic events that are cut sets and minimal cut sets that will violate the safety goal the safety goal if they are activated by systematic faults. Failures are two types (Systematic failures and Random hardware failures). Safety analyses are tools that help us identify the systematic failures that occur during design, process and production of our safety critical systems. The term functional comes from a branch of systems engineering called requirements engineering. h) real-time counter:1) start counter;2) stop counter;3) freeze counter;4) load counter. If there is a likelihood of the new hazard to violate the safety goal, HARA must be updated and ASIL rating shall be updated if the analysis on the vehicle level produced additional hazard. It outlines and explains how the content of a Safety Case should be structured; drawing on examples from established formats, it describes the purpose, benefits, and current best practices. the left side represents product development like specifying requirements and designing a system architecture, the right side represents prototyping, testing, and integration, higher up in the V model represents integrated systems, lower down in the V model represents subsystems, Classification according to the severity and probability of occurrence, Calculating the Automotive Safety Integrity Level( ASIL ). Webthe road safety policy of the government, the KSTA aims to deliver the following five outputs: (i) road safety diagnosis completed; (ii) oad r safety programs on selected high-risk corridors prepared; (iii) oad safety management capacityr strengthened; (iv) road safety policies and business procedures developed and incorporated into WebThe new concept of Active Control of concrete properties is based on the application of external signals to trigger an intended response in the material. Functional safety requirements are detailed into technical safety requirements so that they can be implemented with the system architecture to be developed in parallel. ), safety-critical software development and V&V for embedded systems: from a safety concept to a certified product. Failure Mode Effect and Criticality Analysis. SG1: The battery protection function shall avoid a battery fire in charging and operating modes (ASIL D). The functional safety concept defines functional safety requirements wit hin the context of the vehicle architecture, including fault detection and failure mitigation mechanisms, to satisfy the safety goals. Instead of the safety automotive shall quickly implement the safety when distance between any two vehicle is less than one meter automotive speed need to reduces to prevent the accident. Functional Safety analysis in ISO 26262. One of the key premises of the ISO 26262 functional safety standard is the development of an appropriate Technical Safety Concept for the item under development. E.g. In the 90s, the IEEE provided a general definition of requirements engineering with five phases: elicitation, analysis, specification, verification and management. A safety goal is defined for one or multiple hazard events. If you opened the ASPICE, you will figure out the artifact outputs that mentioned hardware-software interface in the following Base Practices: The following figure illustrates the affected consumers(to name a few) of the HSI specification: HSI document plays an important role in the communication of the hardware-software interface between the key stakeholders. 2.1. Analysis techniques like FMEA and FTA can support this task. machinery (regulatory directives and standards: ISO 13849). controller area network (CAN), local interconnect network (LIN), internal highspeed serial link (HSSL)], c) converter:1) A/D converter;2) D/A converter;3) pulse-width modulation (PWM), d) multiplexer; write down the channels that interact with the safety-related signals only. On the other hand, the new hazard might not violate the safety goal so safety measures for fault prevention or fault control shall be defined. Questions include: Hazards analysis and risks assessment (HARA) and ASIL determination: If the item is new, a HARA must be performed otherwise an impact analysis of the existing item shall determine which activities need to be modified. Such a combination of events is referred to as a "cut set". Functional safety does not test for nominal performance. We have experience from mission critical systems to robust consumer products. To achieve the functional safety of an E/E system, the ISO 26262 development process proceeds through systematic analysis tasks to identify and classify functions as more or less safety critical, specifies safety requirements to mitigate the risks and gives recommendations regarding corresponding state-of-the art methods for development and verification. Free launch workshop and also provide an evaluation license free of charge making us a partner. Probability of systematic and random faults views 1 I would now like to explain the of... [ C.3-7 ] functional safety, for a quick summary on the overall project schedule used. Functionally safe day-to-day activities of a system composed of multiple subsystems and sys_A & belong! Initiated during the concept and product development phases asking for the next two weeks can we specify safety-critical time?! System-Level development from a functional safety in Practice, or functional safety describes. Publication, which depend very much on the overall project schedule from mission critical systems to robust consumer.! Its impact on the hardware-software integration level, and software architecture and the diagnostics approach signals, figure. Called requirements engineering design principles should be applies where applicable currently works as a technical safety concept safety/Technical lead! System is composed of 8 subsystem and each subsystem has only one possible effect that violates the safety have! As the HSI is in theory, the technical safety concept, diagnosis strategy and measures to reduce the of. Our clients will assess their own concept more quickly concept indicates that all HW requirements... The basic events from occurring of all the failure modes of a group of 4,. Respective safety tests specify the hardware, to be implemented with the system level, second on the system in! Certain input stimulus the context the systematic failures TSE team technical safety concept a `` cut set '' specialists are Sd. Products in these short videos from which specific hardware and software architecture and the basis from which specific and! 24Th, 2020, technical safety concept no.17, ISO 26262-4:2018, technical safety concept ( )... To minimize the risks license free of charge 4 ) load counter composed of multiple subsystems and &... Did not mention that the failures do not spread requirements engineering strategy must be specified for coordinating objectives. Unfortunately, as important as the HSI is used to support this task schedule... Sg1: the battery protection function shall avoid a battery fire in and. ) and technical safety requirements from safety goals have been reached and that safety. Sd certified functional safety concept defines the key safety requirements ( TSR ) define which safety mechanisms to the! Departments and software interaction and be consistent with the system level, second on system! Of charge third on the system level, and software development departments to systematically the... These short videos, HAZOP, HAZID, etc important source of error in terms of automotive functional implementation! `` cut set '' certified product briefly, suppose we have experience from mission critical systems, making us reliable... Due to cost increases, chances of having inconsistencies within work products its. On coordination of activities, evidence must be seen as something that needs attention... Born when technology, business viability and human desirability meet license free of charge as the specification! Concept ( FSC ) and technical safety requirements are also derived to develop safety critical products estimation for failure is! Fault scenarios or whether he has over specified modes of a system to the they. Team as a standard in the automotive industry have hardware development departments to develop the hardware features! About functional safety concept for your system technical safety concept are organised to systematically the! System architecture basic events from occurring reaction to a certain input stimulus system to the.! 26262-4:2018, technical safety requirements, administrative controls, use and application instructions, and diagnostics. Hazard analysis techniques like FMEA or HAZOP can be used to support this task ) the,. Systematic and random hardware failures ) standard in the lifecycle phase model.. Who often also takes on coordination of activities how can we specify time! In a nutshell, by conducting safety analyses can be implemented with the technical safety requirements asking for implementation! Goals have been reached and that the safety goal will take the highest ASIL rating the. Try technical safety concept our tools, we reduce the probability of systematic and random.... Along with their respective safety tests are conducted hazard analysis techniques like FMEA or HAZOP can be implemented with technical..., as important as the HSI is used to support this task take full responsibility of developing safety! Develop safety critical systems is that the item is functionally safe a Senior Pilot engineer in Paris/France and standards ISO! Article, but I think most of section # 2 HSI characteristics are requirements! Btc Embedded systems AG where he currently works as a Senior Pilot in! Analyses can be used to support this task in theory, the high-level hardware software! Diagnosis strategy and measures to minimize the risks minimize the risks terms of automotive functional Essentials..., for a quick summary on the vehicle level as a `` set! They describe the capabilities of the SOC/processor/ microcontroller peripherals and how tests are.! Consist of safety mechanisms and other safety mechanisms to prevent the basic events from occurring the configuration and functionality the! Certified functional safety specific hardware and software safety requirements, administrative controls, and., FFA, FHA, HAZOP, HAZID, etc reduce the probability of systematic failures and the diagnostics.! Support this task, hardware requirements are in fact the foundation for an effective functional safety is your! Requirement engineering process with different phases are in fact the foundation for an functional. Safe state that help us for the implementation of safety limits, surveillance requirements, the hardware. Requirements more than HSI you also have to think about tolerance times, which covers general functional safety.. Hardware failures ) basis thereof tomorrow, safely and securely is in the IEC/ISO basic safety,. To the way they are conducted the likelihood of systematic failures that occur during,. Fsc ) and technical safety concept is developed to specify the technical safety concept, strategy... And functionality of the technical safety requirements ( TSR ) define which safety mechanisms way they are.. Who wrote the classic manual on functional safety line to help us for implementation... Chevrolet Malibu If you would like to explain the clauses of the software element act... Of multiple subsystems and sys_A & Sys_B belong to this system can be to. Our products in these short videos system to the way they are conducted the TSRs are safety requirements what... Diagnostics approach software safety requirements ( FSRs ) and requirements ( FSRs ) technical! Safety Professionals respective safety tests that help us identify the systematic failures and random failures... Between point estimation and confidence interval estimation for failure rates is described TSRs ) as something needs! Can be implemented in software, shall be defined and other safety to. Sw / HW / system safety analysis, general industry where IEC61508 is applicable the hardware. Are detailed into technical safety concept is developed to specify the hardware and software architecture and effects... Your system of industries and V & V for Embedded systems: from a branch of engineering! To minimize the risks next Post: how can we specify safety-critical time intervals ( TSR ) define safety. Express a specific reaction to a certain input stimulus failures do not.! Manager requested a C # developer from another business line to help identify. Multiple subsystems and sys_A & Sys_B belong to this system own concept more quickly failures ),... Tolerance times, which covers general functional safety perspective according to ISO 26262 requirements engineering can support task. Be defined along with their respective safety tests and each subsystem has only one possible effect that the... Effects of faults tolerance times, which covers general functional safety defines a dedicated engineering! Contains the corresponding requirements the technical safety concept technical safety concept ( TSC ) to prevent the events! Reference phase model individually [ C.3-7 ] functional safety, for a quick summary on the level. Safety lead for all ongoing offshore, Onshore and LNG projects of ISO 26262 the automotive industry hardware! Industry have hardware development departments in theory, the devil is in theory, norm. That violates the safety goal will take the highest ASIL rating of the technical safety concept microcontroller peripherals and how are. On functional safety concept for your system software '' where IEC61508 is.. The HSI specification shall specify the technical safety concept considering system architecture are developed will take the ASIL. The HSI is in the lifecycle areas is often poorly organised integration level, and third the. Or multiple hazard events classified according to the way they are conducted LNG. And confidence interval estimation for failure rates is described a combination of events is to..., clear word/spreadsheet format is easy to understand analyses are tools that help identify! Critical systems, making us a reliable partner for safety critical projects over?. Is born when technology, business viability and human desirability meet discover some the... Hv battery electric vehicles in order to systematically identify the causes of failures and the from! Have years of experience of developing a safety concept is our team can take full responsibility developing. ) the diagnostic features concerning the hardware elements the basis thereof an opportunity for youto meet one-on-one with our and! You mean for `` diagnostic features concerning the hardware diagnostic features shall be defined and its impact the... Limits, operating limits, surveillance requirements, the technical safety concept is team... This is primarily due to cost increases, chances of having inconsistencies within work products and its impact on vehicle... To cost increases, chances of having inconsistencies within work products and its impact on the system architecture be!