Integrated safety and security requirements
Safety and cybersecurity requirements for control systems are developed together and traced through design and testing.
GCRI · Advanced Industry and Robotics
Systems engineering in industry
Systems engineering manages complex industrial systems across their life cycle: requirements, architecture, integration, verification and change. In this field it links automation, safety, security and production so that changes in one do not undermine the others.
01Register
Systems engineering in industry on the record.
Method recordSTEM method
- MethodSystems engineering
- Applied inAdvanced Industry and Robotics
- Data3 inputs
- Checks3 validation steps
- Canonical pageSTEM Commons
02Application
What systems engineering does here.
Systems engineering is an interdisciplinary approach to designing and managing complex systems over their life cycle. It focuses on requirements, interfaces and interactions so that the whole performs as intended. In industry and robotics, work and skills and trade, resources and supply chains, systems engineering exposes interfaces where failures propagate between components and organisations. It supports designing interconnected infrastructure with explicit dependency management. The canonical description is on the STEM Commons.
Factory and site acceptance testing
Automation systems are tested against requirements at the supplier and on site before production begins.
Obsolescence management
The life cycle of control system components is tracked so replacements are planned before support ends.
03Geography
Infrastructure exposure in Germany.
Night lights, population density and flood water over Germany, from NASA GIBS. Each layer carries its own date.
The interactive map needs JavaScript; the layer list and sources are below.
Layers 3
Infrastructure exposure, for this page
About this layer
- Evidence
- Observed
- Source
- VIIRS Black Marble (VNP46A2) (NASA LAADS DAAC)
- Provider
- NASA LAADS DAAC
- Licence
- NASA open data
- Vintage
- daily; Satellite radiance, corrected for moonlight and atmosphere
- Newest at build
- 2026-10-12
- Resolution
- about 500 m grid
- Uncertainty
- Satellite night-time radiance for the date shown; lights are a proxy for electricity use and outages, not a measurement of supply or access.
- Reached through
- gibs.earthdata.nasa.gov, only after you allow the live map
About this layer
- Evidence
- Estimated
- Source
- Gridded Population of the World v4.11 (NASA SEDAC (CIESIN, Columbia University))
- Provider
- NASA SEDAC (CIESIN, Columbia University)
- Licence
- CC BY 4.0
- Vintage
- null; Census-based estimate, static (2020)
- Resolution
- about 1 km grid
- Uncertainty
- Census-based estimate of people per square kilometre in 2020, shown as exposure context; not a count of people affected by any hazard.
- Reached through
- gibs.earthdata.nasa.gov, only after you allow the live map
About this layer
- Evidence
- Observed (clouds leave gaps)
- Source
- VIIRS Global Flood Product (NASA LANCE)
- Provider
- NASA LANCE
- Licence
- NASA open data
- Vintage
- daily; Satellite detection; clouds leave gaps
- Newest at build
- 2026-10-14
- Resolution
- about 250 m grid
- Uncertainty
- Satellite detection; clouds leave gaps. Satellite or model raster as the provider publishes it. Clouds, swath gaps and retrieval error leave gaps and noise; values are indicators, not measurements at a place.
- Reached through
- gibs.earthdata.nasa.gov, only after you allow the live map
About this layer
- Evidence
- Observed
- Source
- VIIRS NOAA-20 corrected reflectance (NASA LANCE)
- Provider
- NASA LANCE
- Licence
- NASA open data
- Vintage
- daily; Satellite image
- Newest at build
- 2026-10-14
- Resolution
- about 250 m grid
- Uncertainty
- Satellite image. Satellite or model raster as the provider publishes it. Clouds, swath gaps and retrieval error leave gaps and noise; values are indicators, not measurements at a place.
- Reached through
- gibs.earthdata.nasa.gov, only after you allow the live map
About this layer
- Evidence
- Modelled (latest year GIBS publishes)
- Source
- MODIS Terra and Aqua land cover (MCD12Q1) (NASA LP DAAC)
- Provider
- NASA LP DAAC
- Licence
- NASA open data
- Vintage
- yearly; Satellite classification; latest year GIBS publishes
- Newest at build
- 2024-01-01
- Resolution
- about 500 m grid
- Uncertainty
- Satellite land cover classes for the year shown, including croplands; a classification with known errors, not a farm register.
- Reached through
- gibs.earthdata.nasa.gov, only after you allow the live map
About this layer
- Evidence
- Observed (clouds leave gaps)
- Source
- MODIS Terra EVI (NASA LANCE)
- Provider
- NASA LANCE
- Licence
- NASA open data
- Vintage
- daily; Satellite index; clouds leave gaps
- Newest at build
- 2026-10-13
- Resolution
- about 250 m grid
- Uncertainty
- Satellite vegetation index for the 8 days to the date shown, a habitat condition indicator; not a measure of species or biodiversity.
- Reached through
- gibs.earthdata.nasa.gov, only after you allow the live map
Keyboard, with the map focused
Hold Ctrl or ⌘ and scroll to zoom
Latest available
NASA GIBS / EOSDIS · ASTER GDEM (METI, NASA) · Blue Marble (NASA) · © OpenStreetMap contributors (ODbL) · Natural Earth
Loading the latest NASA imagery.
Drag to move. Ctrl or ⌘ and scroll, pinch or the buttons to zoom; hover for the values under the pointer; reset returns to the region.
Infrastructure exposure, framed on Germany.Satellite and model products as NASA publishes them, each with its own date. They are indicators, not assessments of any place.
Data: NASA GIBS · ASTER GDEM · Blue Marble · © OpenStreetMap contributors · Natural Earth · NASA EONET · NASA/NOAA VIIRS · NASA JPL OPERA DIST-ALERTSources and licences
- We acknowledge the use of imagery provided by services from NASA’s Global Imagery Browse Services (GIBS), part of NASA’s Earth Science Data and Information System (ESDIS). Colours redrawn from the published colour map; values averaged into hexagonal cells where shown (modified). NASA open data
- We acknowledge the use of imagery provided by services from NASA’s Global Imagery Browse Services (GIBS), part of NASA’s Earth Science Data and Information System (ESDIS). Colours redrawn from the published colour map; values averaged into hexagonal cells where shown (modified). NASA open data
- VIIRS Black Marble night-time lights, NASA Goddard Space Flight Center; distributed by the NASA Level-1 and Atmosphere Archive and Distribution System (LAADS DAAC); imagery via NASA GIBS. Colours redrawn from the published colour map; values averaged into hexagonal cells where shown (modified). NASA open data
- Center for International Earth Science Information Network (CIESIN), Columbia University. 2018. Gridded Population of the World, Version 4 (GPWv4): Population Density, Revision 11. NASA Socioeconomic Data and Applications Center (SEDAC). Licensed under CC BY 4.0. Colours redrawn from the published colour map; values averaged into hexagonal cells where shown (modified). doi:10.7927/H49C6VHW. CC BY 4.0
- VIIRS near-real-time products (flood, land surface temperature, snow cover, corrected reflectance), NASA LANCE; imagery via NASA GIBS. Colours redrawn from the published colour map; values averaged into hexagonal cells where shown (modified). NASA open data
- MODIS land products (vegetation indices, gross primary production, land cover), NASA LP DAAC and LANCE; imagery via NASA GIBS. Colours redrawn from the published colour map; values averaged into hexagonal cells where shown (modified). NASA open data
- ASTER GDEM is a product of METI and NASA (ASTER Global Digital Elevation Model V003, NASA LP DAAC); imagery via NASA GIBS. Colours redrawn from the published colour map; values averaged into hexagonal cells where shown (modified). Cite as: NASA/METI/AIST/Japan Spacesystems and U.S./Japan ASTER Science Team (2019). ASTER Global Digital Elevation Model V003. doi:10.5067/ASTER/ASTGTM.003. NASA open data
- Made with Natural Earth. Free vector and raster map data @ naturalearthdata.com. Public domain
- © OpenStreetMap contributors (ODbL), via NASA GIBS (coastlines, boundaries, roads and place names). Colours redrawn from the published colour map; values averaged into hexagonal cells where shown (modified). ODbL
- Blue Marble, NASA Earth Observatory; imagery via NASA GIBS. Colours redrawn from the published colour map; values averaged into hexagonal cells where shown (modified). NASA open data
- Context on the globe and flat map: coastlines, boundaries, roads and place names from NASA GIBS reference layers (OpenStreetMap data, ODbL, © OpenStreetMap contributors); Blue Marble imagery as an optional base; 3D terrain and the elevation read-out from the ASTER GDEM elevation colour index (5 m to 200 m classes, exaggerated for legibility). Boundaries are drawn as published and imply no position on any territory.
- Live events: NASA Earth Observatory Natural Event Tracker (EONET); events are indicative and keep their original source links.
- Live: NASA EONET Events are indicative, not authority warnings.
- Observed (EO): NASA/NOAA VIIRS (Suomi NPP). We acknowledge the use of imagery provided by services from NASA’s Global Imagery Browse Services (GIBS), part of NASA’s Earth Science Data and Information System (ESDIS).
- Observed (EO): NASA JPL OPERA DIST-ALERT (contains modified Copernicus Sentinel data 2026). We acknowledge the use of imagery provided by services from NASA’s Global Imagery Browse Services (GIBS), part of NASA’s Earth Science Data and Information System (ESDIS).
- NASA GIBS: We acknowledge the use of imagery provided by services from NASA’s Global Imagery Browse Services (GIBS), part of NASA’s Earth Science Data and Information System (ESDIS).
- River discharge forecast, 30 days with range (GloFAS via Open-Meteo): Contains modified Copernicus Emergency Management Service information 2026; not a flood warning.
- Weather data by Open-Meteo.com (https://open-meteo.com/), licensed under CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/).
- Optional layers (12 sources in the layer list: live, forecast, observed and context) print their provider credit on the map and here when switched on; forecasts are model output and derived indices are estimates.
Layers and dates
- Night-time lights, daily: VIIRS Black Marble (VNP46A2), NASA LAADS DAAC · 12 Oct 2026
- Population density, 2020: Population: CIESIN, Columbia University, Gridded Population of the World v4.11 (2018), NASA SEDAC, CC BY 4.0 · static
- Flood water, 3-day composite: VIIRS Global Flood Product, NASA LANCE · 14 Oct 2026
- True colour: VIIRS NOAA-20 corrected reflectance, NASA LANCE · 13 Oct 2026
- Land cover type (IGBP), yearly: MODIS Terra and Aqua land cover (MCD12Q1), NASA LP DAAC · 2024
- Enhanced vegetation index, rolling 8 days: MODIS Terra EVI, NASA LANCE · 13 Oct 2026
04Data
What the method consumes.
Datasets and records used by systems engineering on this platform, with the role each plays and the label its values carry. Sources are listed in the source register.
| Data | Role | Label |
|---|---|---|
| Requirements documents | Traceability | DECLARED |
| Test records | Verification | OBSERVED |
| Component life cycle data | Obsolescence | DECLARED |
05Monitor
Network analysis.
The screen a team would use to follow this method: its measures, states and decisions. Names are examples and values are illustrative.
Network analysis
Industry and robotics · Systems engineering in industry · Run R-0791
Single point of failureGCRI · Advanced Industry and Robotics
Dependency graph
nodes: assets · edges: dependencies
Most central nodes
| N3 | 0.20 | 8 | Critical |
| N4 | 0.06 | 4 | Normal |
| N5 | 0.20 | 13 | Normal |
| N6 | 0.10 | 11 | Normal |
Cascade size under removal
06Validation
How results are checked.
Each requirement is traced to verification evidence from analysis, inspection, demonstration or test. Independent reviews check completeness at life cycle gates.
| Check | How it is done |
|---|---|
| Traceability review | Each requirement is traced to design and test |
| Independent testing | Acceptance tests involve parties independent of the developer |
| Change impact review | Changes are assessed across safety, security and production |
Emergent behaviour in open or socio-technical systems may not be captured by requirements. Rigid processes can slow adaptation to change.
07Simulator
A shock through an input-output economy.
A loss of output in one sector propagates through the technical coefficients to its suppliers and customers, and recovers at the rate you set; the coefficients are teaching values, not national accounts. Teaching model with stated illustrative values, not a prediction. The map on this page shows Germany; the model itself is not tied to a place.
Controls
- Sector hit first (position in the list)
- 0
- Size of the shock
- 30% of its output
- Duration of the shock
- 30 days
- Recovery rate
- 0.08 per day
- Days simulated
- 180 days
Readouts
- Output lost over the run
- 0.85% of a year’s output
- Total over direct (multiplier)
- 1.54 times
- Most affected other sector
- Manufacturing
- Its peak inoperability
- 2.8%
Numbers, methods and sources
| Sector | Peak inoperability (%) | Output weight (%) |
|---|---|---|
| Agriculture | 29.92 | 25.2 |
| Energy | 1.02 | 15.2 |
| Manufacturing | 2.80 | 11.9 |
| Transport and ports | 0.25 | 17.8 |
| Trade | 0.65 | 12.4 |
| Services | 2.56 | 17.5 |
Methods
- Input-output analysis Leontief (1936); Miller and Blair (2009), Input-Output Analysis, Cambridge University Press
- Inoperability input-output model Haimes and Jiang (2001), Journal of Infrastructure Systems 7
- Dynamic inoperability and recovery Lian and Haimes (2006), Systems Engineering 9
- Uncertainty fan (parameter Monte Carlo) Spiegelhalter, Pearson and Short (2011), Visualising uncertainty about the future, Science 333
- One-at-a-time sensitivity (tornado) Saltelli and others (2008), Global Sensitivity Analysis: The Primer, Wiley
Data
The model runs on the teaching values set by the controls. To calibrate it for a place, read it against these admitted layers and series, which this page’s map can draw:
- Seaports Natural Earth
- Maritime chokepoints Nexus (named straits and canals at their published coordinates)
- Railways Natural Earth
- Major roads Natural Earth
Across the six pillars, led by Nexus Consortium
- Experiments Labs
- Built in Advanced Industry and Robotics in Foundry
- Tested at Advanced Industry and Robotics in Universe
- Codified in Industry, Trade and Supply Chains in Standards
- Published in Advanced Industry and Robotics in Reports
- Taught in Faculty of Technology and Digital Systems in Academy
08Connections
Topics that rely on this method.
09Twin and cascade simulator
Model systems engineering in industry as a system. Run the cascade.
Assembled from the Nexus Standards area profile Industry and manufacturing: the hazards it names, the systems and sectors that carry the loss, the controls that dampen it and the data that observe it. Choose the components, pick an initiating hazard and step through the cascade. The Map view places the run on an example geography with open data. Every coupling weight is a stated assumption you can change. A teaching model, not a forecast, an assessment or a certification. To model a place of your own choosing, open the full System Builder.
Hazards
- Natech event
- Dam failure
- River flood (set off downstream)
- Flash flood (set off downstream)
- Mass displacement (set off downstream)
- Chemical spill or leak (set off downstream)
- Emergency-response overload (set off downstream)
- Widespread power outage (set off downstream)
- Water supply shortfall (set off downstream)
- Toxic gas release (set off downstream)
- Industrial fire (set off downstream)
Systems and couplings
Controls
NS-0Constitution and principlesNS-9Contextual UNIs (deployments, instances, programme instances)NS-11Verification and monitoring (evidence, attestations, zero-trust conformance observation)NS-12Software, model and AI/ML artefacts (supply chain, model cards, dataset sheets)NRS-H60Hazard family: Supply-chain and flow disruption (NHS-1 sys.supply-chain)NRS-H50Hazard family: Industrial and process accidents (NHS-1 infra.industrial)NRS-H109Hazard family: Energy-transition technology failures (NHS-1 tech.energy-transition)NRS-X10Chemical, industrial, nuclear and radiological safetyNRS-H54Hazard family: Signal and platform disruption (NHS-1 cyber.platform)NRS-K14Domain pack profile: Manufacturing industrial (DOMAIN-014)
Observation
- eMARS Major Accident Reporting System (listed for reference)
- World Development Indicators (listed for reference)
- ILOSTAT (listed for reference)
- Manufacturing value added as a proportion of GDP and per capita
- CO2 emission per unit of value added
- Manufacturing, value added (% of GDP)
- Direct economic loss to all other damaged or destroyed productive assets attributed to disasters
Example geography
- The Strait of Malacca: 227 hexagonal cells
- Night lights tonight, outages (VIIRS Day/Night Band), NASA GIBS
- Surface water through cloud, 30 m (OPERA DSWx-S1 radar), NASA GIBS
- Rain rate, last half hour (IMERG), NASA GIBS
- Surface soil moisture (SMAP), NASA GIBS
10Stewardship
Who maintains the method.
Systems Science and Modelling stewards systems engineering for the Consortium and reviews how it is applied across platforms.
11Methods and evidence
How systems engineering in industry is modelled, measured and tested.
The model, its assumptions, its data and its uncertainty, in the form a scientist or engineer would check. Structures follow published methods. The values drawn are illustrative, not findings.
System model
The couplings between the systems in systems engineering in industry: signs of influence, a reinforcing and a balancing loop, and cross-links where stress jumps.
FAIR guiding principles · GO FAIR and FORCE11W3C PROV · World Wide Web ConsortiumGuidance on consistent treatment of uncertainties · IPCCCEOS Analysis Ready Data · Committee on Earth Observation Satellites
12Connected
Where this page leads across the Consortium.
13Questions
Questions and answers.
What are the limits of systems engineering in this field?
Emergent behaviour in open or socio-technical systems may not be captured by requirements. Rigid processes can slow adaptation to change.
How are results checked?
Each requirement is traced to verification evidence from analysis, inspection, demonstration or test. Independent reviews check completeness at life cycle gates.
Are the values on this page real?
The data names, roles and checks are real descriptions of practice. The canvas shows a design of the method’s use, not a run; no result is reported here.
Where else is this method applied?
The canonical method page lists every platform that applies it.
ReportsContribute
Contribute evidence from this page.
Reports is the Consortium’s quarterly publication. What you know about this subject can become evidence, a case or a correction in the next edition, credited to you and published under CC BY 4.0 where it is your own work.
GCRIAdvanced Industry and RoboticsExponential TechnologyGlobal Sector Risk and Resilience
- EmailGateway GW-GCRISend it from this pageEvidence, a correction, a case, a method, a review, a translation or profile input. It arrives tagged with this page, so the editor who owns it receives it.
- ZenodoOpen depositDeposit it and submit to the communityPublish your own record on Zenodo with your ORCID iD, then submit it to the Reports community there. Curators review it; the DOI stays yours.
- ReportsGCRISee every way to contributeThe contribution types, how each is reviewed, what credit you receive, the licence and what is never accepted.
Never send personal data, sensitive infrastructure detail or anything you have no right to share. A contribution is reviewed before use; sending it confers no authorship or editorial rights, and sponsorship never buys a finding.
Advanced Industry and Robotics
Bring a method, a dataset or a question.
Information and enquiries are open today. An enquiry receives a reference and names the next step; applications, payments, compute allocations and registrations open only when their team, terms and review capacity exist.
Legal
Legal documents.
Maps, data and figures on this site are shown for context and general information. They are not advice, forecasts or warnings; the limits of the information are set out in the Disclaimers and Data Notices.