Risk Analysis and Assessment Modeling language (RAAML)

The Risk Analysis and Assessment Modeling language (RAAML) is an Object Management Group (OMG) standard for modeling the safety, reliability, and security analyses of a system. It is published as a Systems Modeling Language (SysML) profile, and so transitively a Unified Modeling Language (UML) profile, which lets analysts capture the artifacts of established hazard and risk methods inside the same model that describes the system under study.

RAAML’s stated purpose is to give tool vendors a common, model-based foundation for safety, reliability, and security work, in place of the disjoint tree, table, and worksheet representations that each method traditionally keeps in its own silo. Because the analyses live in the SysML model of interest, they link directly to the system’s blocks, activities, and requirements, giving traceability from a hazard back to the design elements that mitigate or cause it.

The specification defines a small core of concepts that recur across methods, then layers method-specific libraries on top. The current version, 1.1, formalized in December 2025, ships libraries for several widely-used techniques.

  • Failure Mode and Effects Analysis (FMEA)
  • Fault Tree Analysis (FTA)
  • System-Theoretic Process Analysis (STPA)
  • Goal Structuring Notation (GSN)
  • Reliability Block Diagrams (RBD)
  • The ISO 26262 road-vehicle functional-safety standard

A dedicated security library extends the same core for security analyses.

RAAML is most relevant to teams building safety-critical systems, where regulatory frameworks such as ISO 26262 (automotive) and the analogous aerospace and medical-device standards expect structured safety analyses to be produced and maintained alongside the system design. Keeping those analyses in the model, rather than in external spreadsheets, aims to keep them consistent with the design as it evolves.

See also

References