Module 03 / Lesson 3.7 · Self-paced learning

Use risk to focus the design review

Prioritize design scrutiny using failure mechanisms and evidence rather than a score alone.

2.1 minutes · English captions · Illustrations and worked example

This lesson’s core explanations and worked-example reasoning are narrated. The table restates the example for reference; the practice activity and model answer are reading exercises.

English captions available.

Read the lesson · Download captions · Download transcript

Narration and visual explanations

Open View Technical Explanation to see each diagram, its text description and the matching narration. Standard abbreviations and numerals are used visually.

Part 1 of 4

Start with the mechanism

View Technical Explanation · Diagram 1
Start with the mechanism — diagram 1. Description below.
A design failure leads through a process effect to a quality concern; the control must address that mechanism. The left panel links the three labelled concepts in reading order. Key points: Design feature fails; Product quality affected; Control justified.

Lesson explanation

Risk informs where the design review needs depth. In our fictional case, a missing mixing protection can permit transfer after loss of agitation, potentially affecting concentration uniformity. Explain that mechanism before assigning a priority. Another issue, such as an inconsistent drawing title, may primarily affect document control. Both require action, but their consequences differ. A risk label without an explanation gives the reviewer little basis for deciding what evidence is enough.

Part 2 of 4

Do not let totals hide severity

View Technical Explanation · Diagram 2
Do not let totals hide severity — diagram 2. Description below.
Severity, evidence strength and uncertainty all influence priority; a low score cannot erase an unsupported serious consequence. The left panel links the three labelled concepts in reading order. Key points: High-severity concern; Weak evidence; Explicit review priority.

Lesson explanation

A numerical risk score can organize discussion but cannot supply missing knowledge. This lesson uses no universal score threshold. If a serious failure has weak evidence for prevention or detection, keep that uncertainty visible even when an arithmetic total looks small. Review assumptions, operating conditions and dependencies. Do not reduce a risk rating merely because a proposed control appears on the drawing; its effectiveness still needs support and later verification.

Part 3 of 4

Trace the proposed control

View Technical Explanation · Diagram 3
Trace the proposed control — diagram 3. Description below.
Loss of agitation is connected to proposed transfer inhibition and a future challenge; evidence is needed for the whole protective chain. The left panel links the three labelled concepts in reading order. Key points: Loss of agitation; Transfer inhibition; Challenge and reset.

Lesson explanation

For the mixing scenario, the proposed control inhibits transfer when loss of agitation is detected. Review sensor coverage, logic, bypass authority and reset behaviour. Ask whether the sensing arrangement could miss the failure being considered. Link the design response to a planned controlled challenge of the protective function. The teaching diagram shows failure, control and verification as connected steps, not as proof that any specific interlock is already effective.

Part 4 of 4

Document residual questions

View Technical Explanation · Diagram 4
Document residual questions — diagram 4. Description below.
Residual uncertainty is assigned to an owner and linked to a review trigger, preserving the rationale for future changes. The left panel links the three labelled concepts in reading order. Key points: Assumptions retained; Specialist owner; Review trigger.

Lesson explanation

A useful risk-informed review records what remains uncertain, who will resolve it and what change triggers another review. For example, a later product with different viscosity may invalidate the original mixing assumption. Keep that trigger linked to the requirements and design. Your activity is to compare two design findings and justify the depth of review for each. Do not force every question into a numerical ranking when a reasoned explanation is clearer.

Worked example

Fictional worked example — not an approved site record
FindingReasoned priorityEvidence/action
Transfer after loss of agitationPotential non-uniform product; important uncertaintyAssess sensing/logic/bypass and plan challenge
Drawing title duplicatedDocument ambiguity; assess configuration impactReconcile identifiers and confirm affected equipment
New viscosity rangeCould change prior mixing assumptionsReview requirement, design and verification scope

Apply it · Activity 7

Compare a missing transfer interlock with a duplicated drawing title. Explain review priority and required evidence without inventing scores.

Open workbook activity
Compare with model reasoning

The interlock concern has a potential quality mechanism and needs process/control expertise and verification planning. The title issue needs document reconciliation and impact review; determine whether it also hides a configuration error.

Knowledge check

1. A proposed protective control is drawn but its detection coverage is unclear. What is justified?

Technical sources