Research data release FMEA

// Trace research data release failures, from use outside the permitted purpose to retained sensitive values, from cause to effect and mitigation; compare ordinal risk priorities without interpreting them as probabilities.
// Synthetic worked example: all entities, schedules and measurements are illustrative.
// Every string below is EXAMPLE text from a fictional model: replace it.
// Replace assumptions and inputs before applying this model to actual work.

fmea assessment {
  title: "Illustrative Research data release FMEA"
  system: "Research data release FMEA"
  team: "Cross-functional review"
  revision: "Workshop example"
}

failure_mode failure_0 {
  component: "Consent scope"
  mode: "Use outside permitted purpose"
  cause: "Licence and consent not reviewed"
  effect: "Release exceeds participant permission"
  severity: 8
  occurrence: 3
  detection: 6
}

mitigation mitigation_0 {
  mode: failure_0
  action: "Review use conditions against release scope"
  owner: "Assign accountable reviewer"
  target_severity: 8
  target_occurrence: 2
  target_detection: 3
}

failure_mode failure_1 {
  component: "Transformations"
  mode: "Silent row loss"
  cause: "Inner join on incomplete key"
  effect: "Biased analytic population"
  severity: 7
  occurrence: 4
  detection: 4
}

mitigation mitigation_1 {
  mode: failure_1
  action: "Report row counts and unmatched keys"
  owner: "Assign accountable reviewer"
  target_severity: 7
  target_occurrence: 2
  target_detection: 3
}

failure_mode failure_2 {
  component: "Metadata"
  mode: "Ambiguous variable coding"
  cause: "Codebook not versioned"
  effect: "Results cannot be reproduced"
  severity: 6
  occurrence: 3
  detection: 5
}

mitigation mitigation_2 {
  mode: failure_2
  action: "Publish versioned data dictionary"
  owner: "Assign accountable reviewer"
  target_severity: 6
  target_occurrence: 2
  target_detection: 3
}

failure_mode failure_3 {
  component: "Exports"
  mode: "Sensitive values retained"
  cause: "Incomplete minimisation"
  effect: "Privacy breach in public extract"
  severity: 9
  occurrence: 2
  detection: 7
}

mitigation mitigation_3 {
  mode: failure_3
  action: "Run disclosure review on exact export"
  owner: "Assign accountable reviewer"
  target_severity: 9
  target_occurrence: 2
  target_detection: 3
}

view priorities: fmea_table