DTM.8:4 - Solution

Identify the protected function, separate the intervention targets, follow their remaining effects and compare feasible combinations.

DTM.8:4.1 - Restore the reference of protection

State which system or participant performs the relevant work, who receives its result, what adverse consequence is at issue and over what horizon. Use DTM.1 before treating an unfamiliar or dependent practice as harmful.

Ask separately about harm entering the considered system and harm its operation can impose on others. This directional contrast can help clarify a discussion of security and safety, but the two words have wider, context-dependent definitions. Accidental versus intentional action is another distinction; it does not follow from the direction.

A.6.P.RI restores the standpoint of the claim. A reduction in the operator’s cost is not automatically a reduction in harm to a customer, neighboring group or constituent participant.

DTM.8:4.2 - Locate each proposed change

Follow the current account from encounter through established activity to consequence and restoration. Distinguish four target kinds:

These targets distinguish causal changes. Their quantities come from the subject practice: failed executions, unauthorized operations, incompatible exchanges or another specified event. There is no universal scalar “burden” shared by all these cases.

One action can affect several targets. Record those actual connections rather than giving it one exclusive label.

DTM.8:4.3 - Construct the change and its residual effects

For each feasible action, specify which relation in DTM.2/.3 or the subject model changes. Keep the comparison at the same recipient, horizon and relevant initial conditions.

For reduced contact, retain what happens in already affected participants. For reduced established activity, retain earlier consequences and possible return. For reduced consequence, check whether the variant can still be transmitted. For restoration, compare the restored function with the continuing rate of new impairment.

When a numerical model is warranted, vary the corresponding parameters or operations rather than replacing every protective action with a common reduction factor. MMP supplies the model change and analysis. DTM.4 examines persistence or return; DTM.9 includes response formation and indirect effects.

DTM.8:4.4 - Check implementation across the method vertical

Recover the component operations, resources and capabilities needed while the protective action is performed, and the larger work it is meant to sustain. C.32.MWA supplies this simultaneous method-vertical question.

For example, “exclude an unreliable procedure” requires an available way to distinguish it under relevant conditions, authority to change admission, and an alternative means to continue needed work. A hypothetical perfect distinction is a model assumption, not an implemented capability.

Use the existing development and operational methods to obtain missing contributions. Restoring a capability can use a different tool, partner or division of work; C.36.RP helps avoid equating cultural recovery with a return to the old arrangement.

DTM.8:4.5 - Compare combinations and the unchanged option

Pass the distinct outcomes, costs, uncertainties and feasibility conditions to the existing portfolio and decision methods. Retain the unchanged option and a smaller bounded change.

Check combinations for shared resource use and inconsistent assumptions. A result-checking operation can both stop faulty work and consume capacity needed for valid work. A repair activity can fail to catch up if new impairment continues faster than it restores function.

The first sufficient result may be a justified exclusion: “reducing new encounters alone cannot meet this deadline because the affected work is already installed.” A complete population model is unnecessary when that conclusion follows from the established causal account.