Autonomous driving systems (ADS) in recent years have been the subject of focus, evolving as one of the major mobility disruptors and being a potential candidate for deployment in urban cities due to urbanization. ADS is the system within the Autonomous Vehicle (AV) that enables automation. The different ADS technologies that enable autonomous vehicles have reached a certain maturity that no longer focus on technological deployment, but rather on the safe deployment on public roads. However, existing standards that validate functional safety and Risk Assessment (RA) may not be sufficient to tackle the increased complexity of ADS compared to traditional vehicles. This demand in ADS safety is exponentially increasing in tandem with the increase of AV automation levels. ADS are exposed to diverse environmental conditions and therefore subjected to operational risks while attempting to mimic the human driver responses. Moreover, the recent use of artificial intelligence and machine learning in the industry further shapes the way how ADS development will become in the future. This paper explains the importance of RA coverage for AV and provides a comparison and summary of existing RA methodologies. Thereafter, a recommendation of RAs for AV as potential solutions in meeting ISO 26262 and ISO/PAS 21448 standards.

Adverse incidents in the privacy of patients' medical records can result in multiple negative impacts. Effective mechanisms are needed to communicate the lessons from the incidents into the Information Security Management Systems (ISMS) so as to prevent similar incidents. The Generic Security Template (G.S.T.) has been developed to enhance current mechanism and has demonstrated significant benefits in communicating the lessons compared to the more conventional use of text-based incident reports. This paper extends the work to evaluate the G.S.T. in healthcare. A case study with healthcare professionals working in a China healthcare organization shows that, the G.S.T. can enhance the current mechanism in communicating the lessons with the ISMS.

Due to the rise of Cyber crime it is important to explore the Cyber security area. The threats are real and can cause severe damage to both the system and its clients. Many examples can be given; one of them is BitBucket which encountered a denial of service attack (based on Amazon Cloud infrastructure) and led to 19 hours outage [6]. Bearing in mind the importance of the Cyber security and the factors that play a major role, the human factor was recognized as one of the most important.

Social media provides a new and potentially rich source of information for emergency management services. However, extracting the relevant information from such streams poses a number of difficult challenges. In this short paper, we survey emergency management professionals to ascertain how social media is used when responding to incidents, the search strategies that they undertake, and the challenges that they face when using social media streams. This research indicates that emergency management professionals employ two main strategies when searching social media streams: keyword-centric and account-centric search strategies. Furthermore, current search interfaces are inadequate regarding the requirements of command and control environments in the emergency management domain, where the process of information seeking is collaborative in nature and needs to support multiple information seekers.

The collapse of buildings, such as terminal 2E at Paris' Charles de Gaule Airport, and of fires, such as the Rhode Island, Station Night Club tragedy, has focused public attention on the safety of large public buildings. Initiatives in the United States and in Europe have led to the development of interactive simulators that model evacuation from these buildings. The tools avoid some of the ethical and legal problems from simulating evacuations; many people were injured during the 1993 evacuation of the World Trade Center (WTC) complex. They also use many concepts that originate within the CHI communities. For instance, some simulators use simple task models to represent the occupants' goal structures as they search for an available exit. However, the recent release of the report from the National Commission on Terrorist Attacks upon the United States (the '9/11 commission') has posed serious questions about the design and use of this particular class of interactive systems. This paper argues that simulation research needs to draw on insights from the CHI communities in order to meet some the challenges identified by the 9/11 commission.

Abstract Mishap investigations provide important information about adverse events and are intended to help avoid any recurrence of previous failures. However, the complexity of many safety critical systems poses new challenges for mishap analysis. Similarly, the recognition that many failures have complex, systemic causes has helped to widen the scope of many mishap investigations. A new generation of mishap analysis techniques has been proposed to help investigators address these problems. For instance, Leveson has recently developed the Systems Theory Accident Modelling and Process (STAMP) approach to address some of the weaknesses associated with previous ‘chain of event’ approaches that can miss the systemic causes of adverse events. There are relatively few examples of the STAMP approach. This paper, therefore, presents the results obtained when two analysts performed an independent application of this technique to analyse the causes, including software problems, which led to the mission interruption of the joint European Space Agency (ESA) and National Aeronautics and Space Administration (NASA) Solar and Heliocentric Observatory (SOHO). Copyright © 2003 John Wiley & Sons, Ltd.

Until the 1980s, human reliability analysis focused upon individual erroneous actions. More recently, attention has shifted to the managerial and organizational contexts that create the latent conditions for such failures. Unfortunately, these developments have had little impact upon many industries. The problems of technology transfer are less due to commercial neglect than to the failure of human-factors' research to seriously consider the problems of systems development. For example, most error-modeling techniques are poorly documented. In consequence, errors are likely to be made when designers apply error modeling techniques. There are further ironies. Many of these techniques depend entirely upon the skill and intuition of human factors' experts. The lack of professional accreditation procedures prevents companies from assessing the quality both of those experts and their advice. Until these practical problems are addressed, increasingly esoteric models of human and organizational failure will be of little practical benefit. Over the last 5 years, a number of researchers have become increasingly concerned to support technology transfer between human error modeling and constructive systems development [1]. As a result, workshops were staged in Glasgow (1997), Seattle (1998) and Liège (1999). This special edition presents a collection of papers from these meetings.

This special issue presents current work on modelling interactive information retrieval systems and users' interactions with them. This introductory paper analyses the papers in the context of evaluation in information retrieval (IR) by examining the different layers at which IR system use could be evaluated. IR poses the double evaluation problem of evaluating both the underlying system effectiveness and the overall ability of the system to aid users. The papers in this collection look at different issues in combining human-computer interaction (HCI) research with IR research and provide insights into the problems of evaluating the information seeking process.

Time plays a central role in our understanding of human `error' and system `failure'. Without a detailed knowledge of the flow of events, investigators cannot hope to arrive at well founded conclusions about the causes of major accidents. This paper argues that formal and semi-formal notations can be used to build time-lines that show the ordering of events leading to a failure. These time-lines help to improve the quality of an accident report by identifying the temporal inconsistencies that often arise between human factors and system engineering accounts of the same accident. This, in turn, can help to ensure that any recommendations for the future design of interactive systems are based upon coherent accounts of previous failures.

“Time is money”, especially if you are downloading web pages over low-bandwidth telephone lines. All too often this investment goes unrewarded. Users simply cannot extract relevant information from the mass of data that is being provided over the Internet. This information saturation is exacerbated by the problems of electronic gridlock. The increasing demand for remote resources has led to increasing delays during peak periods on popular sites. This paper argues that, in the short term, technological solutions to these problems will not keep pace with the exponential growth in demand. The world's communications infrastructure cannot be improved at the rate that would be required to combat increasing retrieval delays. We, therefore, advocate interface design techniques as the only effective means of addressing the usability problems that frustrate interaction with Internet resources. Later sections introduce a central argument that links the papers in this special edition. Collaborative approaches to information retrieval, where search engines are augmented by advice from human experts, can reduce the problems of electronic gridlock and information saturation.

The design of safety-critical user interfaces is typically very different from that of many other applications. Reactor control systems and aircraft cockpits are complex and dynamic, open to input from many different users and devices. A number of formal notations, including Z and temporal logic, have been developed to address these problems. They provide precise and concise means of representing a potential design before designers incur the expense of implementation. Consequently, government bodies and commercial organizations have recommended that these techniques be used when tendering for their contracts. However, there are a number of limitations that restrict the use of mathematical specifications for interface development in large scale projects. In particular, formal notations cannot easily be used to coordinate the activities of human factors and systems engineering teams. This creates particular difficulties if some group members have only a limited understanding of discrete mathematics. A further problem is that the development of a safety-critical application may take many months, or even years, to complete. This creates difficulties because abstract mathematical specifications cannot be used easily by new members of a development team to understand past design decisions. To avoid these limitations I have developed a literate approach to interface specification. This technique uses a formal development language and a semiformal design rationale to support the design of safety-critical user interfaces.

A number of techniques have been developed to map out the ‘design space’ of interactive systems. For instance, design rationale notations represent the various options that must be considered during interface development. Such notations offer important benefits. For instance, they can be shown to regulatory authorities to demonstrate that sufficient attention has been paid to particular design issues. Unfortunately, these notations are semi-formal. This leads to a number of weaknesses. They cannot be used to determine whether criteria and options have been used consistently during the development of an interactive system. Nor do they provide any procedures to determine whether interface design decisions have indeed been guided by a rationale. These are important limitations when regulatory authorities, such as the UK Health and Safety Executive, expect designers to demonstrate the consistency and coherence of their decisions. This paper addresses these problems and shows how decision theory can be employed to support design rationale during the development of human-computer interfaces for safety-critical systems.