Trustworthiness in Industrial System Design
Characteristic, the model’s completeness is
proven. The Trustworthiness Target Model
in Figure 2 demonstrates this graphically:
There are four quadrants of targets which
T RUSTWORTHINESS AND ITS
A PPROACH OF C OMPLETENESS
Humans
Environment
employees, customers,
visitors, guests
nature, neighbor systems,
public infrastructure
Safety
Trustworthiness
R e li a b i l i t y
R e s i li e n c e
S e c u r it y
System
ready to execute
of the system, staff
Figure 2: The Trustworthiness Target Model
require a specific protection from harm:
While most experts agree that the five
trustworthiness characteristics and their
interaction are an important goal for any
industrial system design, there are ongoing
discussions about whether a design which
fulfills all requirements of trustworthiness
can be automatically trusted by all parties.
One way to answer the question is to analyze
how these five characteristics address the
specific targets which they protect. If the list
of targets is complete and every target has
at least one assigned Trustworthy
September 2018
- 12 -
Humans (top left quadrant) represent
not only customers (like patients in a
hospital) but also employees, visitors or
guests. It is obvious that privacy will
protect this quadrant. But safety is also
responsible to shield humans from harm.
Security, reliability and resilience of the
system as part of trustworthiness,
however, have no direct relation to this
quadrant.