STAMP Systems-Theoretic Accident Model

The STAMP (System-Theoretic Accident Model and Processes) accident model is based on these principles. Three basic constructs underlie STAMP safety constraints, hierarchical safety control structures, and process models. 

The STAMP (Systems-Theoretic Accident Model and Process) model of accident causation is built on these three basic concepts—safety constraints, a hierarchical safety control structure, and process models—along with basic systems theory concepts. All the pieces for a new causation model have been presented. It is now simply a matter of putting them together. 

Creating a richer model of causation. (Leveson and Dulac 2005) propose the STAMP accident model and the STPA hazard assessment approach. STAMP is based on systems-theoretic concepts of hierarchical control, internal models of the environment and a classification of control errors. STPA takes that classification as the basis for iterative integrated control system safety assessment. At each design iteration the design is assessed and constraints are derived (equivalent to derived safety requirements) and imposed on further design iterations. 

---