2.6.1 Monitoring RAS operation

Contextual description: Mechanisms are required to be in place to monitor for potentially unsafe changes. It is important to identify what must be monitored during system operation in order to assure its continued safe operation. This will often be identified from considering assumptions and context defined as part of the assurance case for the RAS. Where it is identified that the assumptions or context must hold in order for the system to be considered safe, and they may become invalid during operation (e.g. certain visual sensors may require minimum lighting levels), then those need to be monitored.

Practical guidance: