hazard identification; interdependent system; tool to identify the effects of trade-offs on the structure of the FSS; tool to investigate the effect of removed and added safety measures on the functional statements; tool used to evaluate the effect of trade-offs on the attributes of the safety system