Homepage for Felix Redmill

Computing Science



A number of papers by Felix Redmill are available under the following headings:

  1. Risk-based Testing
  2. Engineering Education
  3. Safety Engineering and Management
  4. IEC 61508
  5. Risk Analysis and its Subjectivity
  6. Management and Safety
  7. The ALARP Principle
  8. Fagan's Inspection
  9. Management in Cricket

Risk-based Testing

Exploring Risk-based Testing and Its Implications.
Felix Redmill.
Published in Software Testing, Verification and Reliability, Vol. 14, No. 1, March 2004.
Synopsis: This paper examines what is implied by risk-based testing, shows that its practice requires an understanding of risk, and points to the need for research into the topic and the development of a body of knowledge to underpin it.

Theory and Practice of Risk-based Testing.
Felix Redmill.
Published in Software Testing, Verification and Reliability, Vol. 15, No. 1, March 2005.
Synopsis: This paper explains three methods of risk-based testing.

Risk-based Test Planning During System Development.
Felix Redmill.
Invited paper at KKIO 2004, Gdansk, Poland, 5-8 October 2004.
Synopsis: This paper advocates taking a risk-based and test-based approach throughout the development life cycle.

Engineering Education

Some Suggestions for the (Software) Engineering Curriculum.
Felix Redmill.
Published in Engineering Science and Education Journal, Vol. 4 No. 3, IEE, London, June 1995.
Synopsis: This paper considers why engineering graduates are not immediately suited to their industrial requirements and, based on experience, it makes proposals for how the mismatch may be mitigated by changes to the syllabus.

Strategic Perspectives on Engineering Education.
Felix Redmill.
Published in Engineering Education 2002, IEE, 3-4 January 2002.
Synopsis: This paper proposes that the engineering syllabus should be planned strategically such that what is taught in each year depends on what we want students to be at the end of it.

Safety Engineering and Management

Understanding the Use, Misuse and Abuse of Safety Integrity Levels.
Felix Redmill.
This is a slightly edited version of a paper given with a tutorial at:
Lessons in System Safety: Proceedings of the Eighth Safety-critical Systems Symposium, Southampton, UK, 2000.
Synopsis: This paper attempts to explain the tricky subject of SILs and to show how the concept can be confusing as well as difficult.

Analysis of the COTS Debate.
Felix Redmill.
Safety Science, Vol. 42, 2004, 355-367.
Synopsis: This paper explains why there is a desire to use commercial off-the-shelf systems and components, and it examines the various aspects of the arguments for and against them - from a safety point of view.

Grasping at the Shadow of Safety and Missing the Substance.
Felix Redmill.
Invited paper at Sixth International Symposium on Programmable Electronic Systems in Safety Related Applications, Cologne, 4-5 May 2004.
Synopsis: This paper provides a number of examples of how short-cuts can lead to the illusion rather than the reality of achieving safety.

IEC 61508

An Introduction to the Safety Standard IEC 61508.
Felix Redmill.
Journal of the System Safety Society, Volume 35, No. 1, First Quarter 1999.
Synopsis: This paper introduces the standard and the safety principles on which it is based.

Installing IEC 61508 and Supporting its Users - Nine Necessities.
Felix Redmill.
Invited paper at the Fifth Australian Workshop on Safety Critical Systems and Software, Melbourne, Australia, 24 November 2000.
Synopsis: This paper, based on experience of observing the attempted use of the standard, shows why many such attempts have not been successful and offers a number of requirements for success.

Risk Analysis and its Subjectivity

Subjectivity in Risk Analysis.
A Report (unpublished).
Felix Redmill.
Synopsis: This report explores technical and psychological reasons why all aspects of risk analysis carry a great deal of subjectivity. It provides the base material for a number of the shorter articles included in this cache.

How Much Risk Reduction is Enough?
Felix Redmill.
Journal of System Safety, 36, 1, First Quarter 2000.
Also included (in Japanese) on website of JICOSH, the Japanese International Centre for Occupational Safety and Health, http://www.jicosh.gr.jp/, July 2000.
Synopsis: A short article on subjective decisions that contribute to the assessment of risk tolerability.

Some Dimensions of Risk Not Often Considered by Engineers.
Felix Redmill.
Journal of System Safety, Vol. 38, No. 4, Fourth Quarter 2002.
Also published in the Computing & Control Engineering Journal (IEE), Vol. 13, No. 6, December 2002.
Synopsis: A short article aimed at showing that the subject of risk involves more than the techniques of risk analysis.

Risk Analysis - A Subjective Process.
Felix Redmill.
Engineering Management Journal (IEE), Vol. 12, No. 2, April 2002.
Synopsis: The first of three short articles to expose engineers to the subjectivity that is necessarily involved in employing a risk-based approach.

Exploring Subjectivity in Hazard Analysis.
Felix Redmill.
Engineering Management Journal (IEE), Vol. 12, No. 3, June 2002.
Synopsis: The second of three short articles to expose engineers to the subjectivity that is necessarily involved in employing a risk-based approach.

The Significance to Risk Analysis of Risks Posed by Humans.
Felix Redmill.
Engineering Management Journal, Vol. 12, No. 4, August 2002.
Journal of System Safety, September-October 2005.
Synopsis: The third of three short articles to expose engineers to the subjectivity that is necessarily involved in employing a risk-based approach.

Thoughts on Risk Communication.
Felix Redmill.
Published as “Risk Communication” in:
The eJournal of System Safety, Volume 42, No. 3, May - June 2006
Synopsis: Those who conduct risk analysis are seldom the persons who must make decisions based on its results. Risk information, therefore, must be communicated, but there are many ways in which miscommunication can occur.

Management and Safety

Understanding the Risks Posed by Management.
Felix Redmill.
Developments in Risk-based Approaches to Safety: Proceedings of the 14th Safety-critical Systems Symposium, Bristol, UK, 7-9 February 2006.
Synopsis: Though the risks posed by senior management have been shown to be significant contributors to accidents, they are, typically, neither addressed by risk analysis nor included in safety cases. This paper highlights the problem.

Thoughts on Safety Responsibilities of Management.
Felix Redmill.
Invited paper at the 12th Australian Conference on Safety Critical Systems and Software, Adelaide, Australia, 30-31 August 2007.
Synopsis: Safety depends on senior management as well as on those on the ‘front line’. Yet, senior management is too often unaware both of safety principles and of their own responsibilities.

The ALARP Principle

ALARP Explored.
Felix Redmill.
This long paper was published as a Report:
No. CS-TR-1197 in University of Newcastle upon Tyne, Computing Science, Technical Reeport Series, March 2010.
Synopsis: Though the ALARP Principle is widely claimed to be used, there is not a commensurately widespread understanding of it or its implications. This paper explores its origin, its place in risk-based safety engineering and management, and its application.

Fagan's Inspection

Document Quality - Inspection.
Felix Redmill, Eric Johnson and Bjorn Runge.
British Telecommunications Engineering, Vol. 6, No. 4, January 1988.
Synopsis: This paper describes Fagan’s Inspection and offers advice, based on experience, on its implementation and use.

Management in Cricket

Quality in Cricket Demands Quality in Management.
Felix Redmill.
Caribbean Cricket Quarterly, Vol. 9, No. 4, October/December 1999.
Synopsis: This article offers thoughts on the requirements for the management of West Indies (and other countries’) cricket.