The FRAM Sandbox Facility

Extending the capabilities of the FMV

There is an increasing interest in utilising the FRAM approach for the analysis of what exactly is going on in complex sociotechnical systems in practical high hazard environments. There are, for example, a number of ongoing projects at the moment in aviation, self-driving vehicles and, of course, on the challenges of the COVID 19 pandemic for healthcare responses. But as well as these practical applications there is an increasing interest from the academic community, in extending and developing further, the underpinning concepts, as shown in the recent review (below)

These groups are thus interested in taking the modelling power of the FRAM approach to the next level. Their interests include exploring in more detail how interactions occur and how the effects of variability can be addressed and predicted more formally, as well as enabling dynamic visualisation of processes and the quantification of expected outcomes.

What makes this now more attractive, has been the development of a rigorous model checking methodology, the FRAM Model Interpreter, FMI (Hollnagel, E,) ( )

To support these developments the FRAM Model Visualiser has also been given extra facilities, which now include an option to use, what is essentially a laboratory sand box to provide research laboratory experimental facilities for different groups to utilise.

From time to time, it is planned to add additional features that are still under development and not officially released as part of the FMV Pro version, but may be made available to groups for the purposes of experimentation and feedback from the users.


Building on the FMI functionality, the metadata feature in the FMV, now provides the ability to calculate metadata values as Functions are activated during the FMI cycles.

The manual details these here

The calculations are expressed as user defined equations that can reference other metadata keys, standard variables, standard mathematical functions, logic conditions, and mathematical operators. One or two resulting metadata values can then be expressed as a coloured visualisation within each function. The colours and value ranges can be customised by the user.

When you Ctrl-Click a Function, or select and press Ctrl-M, the metadata section will appear above the model in the visualiser window and display the extended features.

Key/Value pairs

The first two text boxes are for entering metadata as a list of key/value pairs, as is already available in the standard FMV Pro versions. A Key is entered in the first box shaded grey, but it will not be saved for the selected Function until a Value or an Equation is also entered for that Key. The corresponding Value is entered in the second text box.

When a Key is saved for a Function, It will be shown along with all saved Key names when any other Function is selected. As such, the Key names become common across all Functions. However, the corresponding Values are unique to each individual Function.

Key names can be used as Variable names and referenced in Equations if they start with a capital letter (this is to differentiate between Variables and mathematical functions).


To calculate the Value of a Key for a Function (when it is activated by the FMI) click the ‘=’ button and another text input box will appear for entering an equation.

Equations can contain Key names to reference other Values that appear above them in the same Function, or Standard Variables can be used to reference Values from upstream Functions, connected by couplings that are activated during the FMI cycles. This is explained in further sections.

To turn the equation off, click the ‘=’ button again (this is a toggle button) and the equation will disappear, it is still saved but will not be used to calculate the Value.

Functions/Variables List

The next section is a list of available mathematical functions and variables available for use in Equations. You can switch between these two types by using the Functions/Variables toggle buttons above the list. The Variables list is initially empty but will be populated as you create Keys and make selections within the model.

Display Results

The top colour range is used to display results in the inside top of each function, the bottom range in the inside bottom of each function. Click on any of the three main colour circles to change the colour. The intermediate colours are blended from the three main colours.

The number boxes below the colour ranges are used to convert the Values to the colour range for dsiplay.

The last two text boxes on the right labeled ‘Key 1’ and ‘Key 2’ are for selecting which of the Keys provide values for displaying the results, Key 1 for the top range and Key 2 for the bottom range.

Academic theses about the FRAM

Albery, S. (2014). An evaluation of the Functional resonance Analysis Method (FRAM) as a practical riask assessment tool within a manufacturing environment. Melbourne, Australia: Royal Melbourne Institute of Technology, School of Health Sciences. (Master of OHS thesis.)

Bergqvist, P. et al., (2007). Utvärdering av Functional Resonance Accident Model genom en analys av ett lokalt postcenter. (Evaluation of the FRAM in an analysis of a local mail distribution centre.) M.Sc. Thesis, University of Linköping, Sweden.

Frost, B. (2013). Risk Assessment of Safety Critical Systems: The Utility of the Functional Resonance Analysis Method in a System Hazard Analysis. Melbourne, Australia: Royal Melbourne Institute of Technology, School of Aerospace, Mechanical and Manufacturing Technology. (M.Eng. thesis.)

Hounsgaard, J. (2016). Patient safety in everyday work - Learning from what goes right. University of Southern Denmark (M.Sc. thesis)

Lundblad, K. & Speziali, J. (2007). Tunga lyft. FRAM for nuclear power. (Heavy loads. FRAM in an NPP.) M.Sc. Thesis, University of Linköping, Sweden.

Macchi, L. (2010). A Resilience Engineering approach to the evaluation of performance variability: development and application of the Functional Resonance Analysis Method for Air Traffic Management safety assessment. Ph.D. Thesis, l’École nationale supérieure des mines de Paris, France.

Mathiesen, H. A., Alm, H. & Sandstedt, E. (2008). En FRAM-analys av läkemedelshanteringen på Apoteket. (A FRAM analysis of handling of medicine at a pharmacy.) M.Sc. Thesis, University of Linköping, Sweden.

Mercadier, V. (2007). When incident command system fails. 290A Term Project, May 3. Berkely, CA: University of Berkeley.

Praetorius, G. (2014). Vessel Traffic Service (VTS): a maritime information service or traffic control system? Understanding everyday performance and resilience in a socio-technical system under change. (Doctor of Philosophy Doctoral thesis), Chalmers University of Technology, Gothenburg.

Sonnerfjord, D. (2008). En systemanalys av flygtrafikledningstjänst med hjälp av FRAM. (A systems analysis of air traffic management by means of FRAM.) M.Sc. Thesis, University of Linköping, Sweden.

Åhman, J. (2013). Analysis of interdependencies within the fire fighting function on an offshore platform. MSc thesis, University of Lund, Sweden (ISRN: LUTVDG/TVBB-5447-SE).

We are looking forward to seeing the results of using this new facility and seeing the range and scope of applications and studies significantly extended. Perhaps we will see some examples at the next FRAMily Workshop in Kyoto next year, COVID willing.

© Copyright Erik Hollnagel 2016. All Rights Reserved.