A Cause-Consequence Chart of a Redundant Protection System

A cause-consequence chart is applied in analysing failures of a redundant protection system (a core spray system in a nuclear power plant). It is shown how the diagram provides a basis for calculating two probability measures for malfunctioning of the protection system. The test policy of components is taken into account. The possibility of using parameter variation as a basis for the choice of test policy is indicated.