{ "ftaDoc": { "version": "5.0", "standard": "IEC61025", "savedAt": "2026-03-10T03:38:07.485906Z" }, "projects": [ { "id": "pfd8c12ee", "name": "Medical \u2014 Infusion Pump", "expanded": true, "settings": { "description": "Risk analysis fault tree for infusion pump delivering medication overdose to patient. Developed per ISO 14971, IEC 60601-1, IEC 62304. Addresses flow control failure, programming error, and drug library integrity failure pathways. Severity: Catastrophic. Risk reduction measures documented per ISO 14971 clause 6.", "organization": "FTA Studio Template Library", "analyst": "", "revision": "A", "standard": "IEC61025", "silTarget": "", "missionTime": 8760, "anaMethod": "exact", "sciNotation": true }, "ftas": [ { "id": "fa1e6d392", "name": "Medication Overdose via Infusion Pump", "nodes": [ { "id": "nf380d699", "uid": "TOP-001", "ntype": "top", "gateType": "OR", "name": "Patient Receives Medication Overdose", "desc": "Infusion pump delivers drug dose in excess of prescribed amount causing patient harm. Ref: IEC 60601-1, IEC 62304, ISO 14971 risk analysis. Severity: Catastrophic.", "outputId": null, "refId": null, "prob": null, "lambda": null, "mu": null, "missionTime": 8760, "sil": null, "failureMode": "", "detection": "", "hazards": [], "evidence": "", "mitigation": "", "severity": null, "occurrence": null, "detectability": null, "x": 580.0, "y": 80 }, { "id": "nc21f2856", "uid": "G-001", "ntype": "gate", "gateType": "OR", "name": "Pump Delivers Excessive Flow Rate", "desc": "Mechanical or electronic failure causing pump to deliver more than programmed rate.", "outputId": "nf380d699", "refId": null, "prob": null, "lambda": null, "mu": null, "missionTime": 8760, "sil": null, "failureMode": "", "detection": "", "hazards": [], "evidence": "", "mitigation": "", "severity": null, "occurrence": null, "detectability": null, "x": 100.0, "y": 250 }, { "id": "nd93b6e65", "uid": "G-002", "ntype": "gate", "gateType": "OR", "name": "Flow Control Mechanism Failure", "desc": "Failure of primary pumping mechanism.", "outputId": "nc21f2856", "refId": null, "prob": null, "lambda": null, "mu": null, "missionTime": 8760, "sil": null, "failureMode": "", "detection": "", "hazards": [], "evidence": "", "mitigation": "", "severity": null, "occurrence": null, "detectability": null, "x": -60.0, "y": 420 }, { "id": "n467f3cd1", "uid": "BE-001", "ntype": "basic", "gateType": null, "name": "Stepper motor controller fault", "desc": "Stepper motor or its driver circuit delivers incorrect pulse frequency.", "outputId": "nd93b6e65", "refId": null, "prob": null, "lambda": 1e-06, "mu": null, "missionTime": 8760, "sil": null, "failureMode": "Motor runs at incorrect speed", "detection": "Motor encoder feedback, step count monitoring", "hazards": [], "evidence": "", "mitigation": "Closed-loop motor control with encoder verification", "severity": null, "occurrence": null, "detectability": null, "x": -140.0, "y": 590 }, { "id": "n3112dcf9", "uid": "BE-002", "ntype": "basic", "gateType": null, "name": "Peristaltic rotor mechanism wear", "desc": "Rotor roller wear reducing compression force causing flow variation.", "outputId": "nd93b6e65", "refId": null, "prob": null, "lambda": 3e-06, "mu": null, "missionTime": 8760, "sil": null, "failureMode": "Slip \u2014 inconsistent volume per revolution", "detection": "Drop sensor or flow verification", "hazards": [], "evidence": "", "mitigation": "Scheduled maintenance replacement; drop-rate alarm", "severity": null, "occurrence": null, "detectability": null, "x": 20.0, "y": 590 }, { "id": "n32d71ee2", "uid": "G-003", "ntype": "gate", "gateType": "AND", "name": "Air-in-Line Detector Failure", "desc": "Air detector AND its alarm must both fail.", "outputId": "nc21f2856", "refId": null, "prob": null, "lambda": null, "mu": null, "missionTime": 8760, "sil": null, "failureMode": "", "detection": "", "hazards": [], "evidence": "", "mitigation": "", "severity": null, "occurrence": null, "detectability": null, "x": 260.0, "y": 420 }, { "id": "n18f0fcdf", "uid": "BE-003", "ntype": "basic", "gateType": null, "name": "Ultrasonic air-in-line sensor fault", "desc": "Ultrasonic sensor transducer failure allowing air bolus to pass undetected.", "outputId": "n32d71ee2", "refId": null, "prob": null, "lambda": 5e-07, "mu": null, "missionTime": 8760, "sil": null, "failureMode": "Air not detected \u2014 flow continues", "detection": "Self-test on power-up", "hazards": [], "evidence": "", "mitigation": "Dual-technology detection (ultrasonic + optical)", "severity": null, "occurrence": null, "detectability": null, "x": 180.0, "y": 590 }, { "id": "n2420c7ed", "uid": "BE-004", "ntype": "basic", "gateType": null, "name": "Alarm notification system failure", "desc": "Audio/visual alarm system fails \u2014 speaker, LED or alarm logic fault.", "outputId": "n32d71ee2", "refId": null, "prob": null, "lambda": 2e-07, "mu": null, "missionTime": 8760, "sil": null, "failureMode": "Alarm not generated or annunciated", "detection": "Alarm function test on startup", "hazards": [], "evidence": "", "mitigation": "Alarm system independent of flow controller", "severity": null, "occurrence": null, "detectability": null, "x": 340.0, "y": 590 }, { "id": "n689e5c21", "uid": "G-004", "ntype": "gate", "gateType": "AND", "name": "Incorrect Programming Not Intercepted", "desc": "Operator enters wrong dose AND all software/human checks fail.", "outputId": "nf380d699", "refId": null, "prob": null, "lambda": null, "mu": null, "missionTime": 8760, "sil": null, "failureMode": "", "detection": "", "hazards": [], "evidence": "", "mitigation": "", "severity": null, "occurrence": null, "detectability": null, "x": 620.0, "y": 250 }, { "id": "nb9689325", "uid": "BE-005", "ntype": "basic", "gateType": null, "name": "Operator programs incorrect dose / rate", "desc": "Nursing staff data entry error \u2014 incorrect rate, concentration or patient weight.", "outputId": "n689e5c21", "refId": null, "prob": 0.001, "lambda": null, "mu": null, "missionTime": 8760, "sil": null, "failureMode": "Wrong value entered and confirmed", "detection": "Dose error reduction software (DERS)", "hazards": [], "evidence": "", "mitigation": "Mandatory double-confirmation for high-alert medications", "severity": null, "occurrence": null, "detectability": null, "x": 500.0, "y": 420 }, { "id": "n194345a1", "uid": "G-005", "ntype": "gate", "gateType": "AND", "name": "Safety Interception Fails", "desc": "Both software limit check and independent nurse check fail.", "outputId": "n689e5c21", "refId": null, "prob": null, "lambda": null, "mu": null, "missionTime": 8760, "sil": null, "failureMode": "", "detection": "", "hazards": [], "evidence": "", "mitigation": "", "severity": null, "occurrence": null, "detectability": null, "x": 740.0, "y": 420 }, { "id": "n21dde51a", "uid": "BE-006", "ntype": "basic", "gateType": null, "name": "Drug library dose-limit check bypassed/failed", "desc": "Drug library software fails to flag or reject out-of-range entry.", "outputId": "n194345a1", "refId": null, "prob": null, "lambda": 1e-07, "mu": null, "missionTime": 8760, "sil": null, "failureMode": "Soft or hard limit not enforced", "detection": "Software self-check; audit log review", "hazards": [], "evidence": "", "mitigation": "Hard limits enforced in hardware-protected memory", "severity": null, "occurrence": null, "detectability": null, "x": 660.0, "y": 590 }, { "id": "nd5bb79d7", "uid": "BE-007", "ntype": "basic", "gateType": null, "name": "Independent nurse double-check not performed", "desc": "Required independent nurse verification not completed \u2014 time pressure or process bypass.", "outputId": "n194345a1", "refId": null, "prob": 0.005, "lambda": null, "mu": null, "missionTime": 8760, "sil": null, "failureMode": "Second nurse check omitted", "detection": "Electronic confirmation record required", "hazards": [], "evidence": "", "mitigation": "Mandatory electronic dual-check workflow for high-risk drugs", "severity": null, "occurrence": null, "detectability": null, "x": 820.0, "y": 590 }, { "id": "n2bd0c97a", "uid": "G-006", "ntype": "gate", "gateType": "OR", "name": "Drug Library / Software Integrity Failure", "desc": "Incorrect data in drug library causes pump to calculate wrong dose.", "outputId": "nf380d699", "refId": null, "prob": null, "lambda": null, "mu": null, "missionTime": 8760, "sil": null, "failureMode": "", "detection": "", "hazards": [], "evidence": "", "mitigation": "", "severity": null, "occurrence": null, "detectability": null, "x": 1060.0, "y": 250 }, { "id": "n5b3dfcaf", "uid": "BE-008", "ntype": "basic", "gateType": null, "name": "Incorrect drug concentration in library database", "desc": "Wrong concentration value programmed during drug library setup or update.", "outputId": "n2bd0c97a", "refId": null, "prob": 0.0001, "lambda": null, "mu": null, "missionTime": 8760, "sil": null, "failureMode": "Pump calculates wrong volume", "detection": "Pharmacy validation of drug library before deployment", "hazards": [], "evidence": "", "mitigation": "Change control process; dual pharmacist sign-off on library updates", "severity": null, "occurrence": null, "detectability": null, "x": 980.0, "y": 420 }, { "id": "n04121d03", "uid": "BE-009", "ntype": "basic", "gateType": null, "name": "Software version mismatch \u2014 library/firmware", "desc": "Drug library update applied to incompatible firmware version causing calculation error.", "outputId": "n2bd0c97a", "refId": null, "prob": null, "lambda": 5e-08, "mu": null, "missionTime": 8760, "sil": null, "failureMode": "Incompatible drug parameters applied", "detection": "Version check on boot; IT change management", "hazards": [], "evidence": "", "mitigation": "Compatibility matrix enforced during updates; staged rollout", "severity": null, "occurrence": null, "detectability": null, "x": 1140.0, "y": 420 } ], "cam": { "x": 360, "y": 40, "zoom": 0.72 }, "analysis": null, "ccfGroups": [], "disjointGroups": [], "diagramPages": [], "seqId": 1 } ], "eventLibrary": [] } ], "_id": 200, "_uid": {}, "ccfGroups": [] }