Abstract
The OECD-S1-group developed a conceptual framework to analyse the accident process. Three elements characterise the framework. This paper explores the dynamic aspects of the model with regard to internal control. In the S1-report it was seen as a risk control model. Here is shown how the input and output of a system can be analysed in such a way that the behaviour of the system under certain inputs can be defined and possibly interpreted.