RAMS Core

PublishedMIL-STD-1629A · IEC 60812

FMECA

Failure modes, their effects at every level up, and the criticality numbers that rank them by consequence rather than by rate.

Every other analysis in this knowledgebase starts from a number that somebody had to produce. A prediction gives an item a failure rate; an RBD needs to know which failures stop the system; a fault tree needs a probability for each basic event; a diagnostic argument needs to know what the test is looking for. All four are asking the same question, and FMECA is the analysis that answers it: what are the ways this thing fails, what happens when it does, and how much of its failure rate belongs to each way.

The letters are two analyses stacked. FMEA asks what fails and what follows: for every item, every failure mode, and for every mode the effect locally, at the next level up, and at the system boundary, along with how the failure is detected and what compensates for it. Add criticality to that and it becomes FMECA: each mode carries a share of its item's failure rate and a probability that it produces the effect claimed, and the product ranks the worksheet.

The order matters and is often reversed in practice. Severity is a judgement about consequence that needs no rate at all, which is why it can be settled early and survives every later change to the numbers. Criticality then weights that judgement by how often the mode occurs. A worksheet with criticality numbers and unexamined end effects is precise about the wrong thing.

What it is and why it exists

The two ways into a worksheet. The functional approach reasons down from what the system must do and is available before there is hardware; the piece-part approach adds up from the parts list and finds the modes judgement did not think of. Mature programmes run both, and the criticality numbers live in the second.
The two ways into a worksheet. The functional approach reasons down from what the system must do and is available before there is hardware; the piece-part approach adds up from the parts list and finds the modes judgement did not think of. Mature programmes run both, and the criticality numbers live in the second.

MIL-STD-1629A, Procedures for Performing a Failure Mode, Effects and Criticality Analysis, issued 24 November 1980, is where the discipline's grammar comes from: the worksheet columns, the four severity classes, the indenture-level coding, and the criticality arithmetic that this module works through. It defines the analysis as five tasks: the first two are the analysis proper, the next two are what you do with it afterwards, and the fifth, numbered last and written first, is the plan the other four run under.

TaskWhat it produces
101 · FMEAModes, causes, the three levels of effect, detection method, compensating provisions, severity class
102 · Criticality analysisCm = β·α·λp·t per mode, Cr per item, and the criticality matrix
103 · FMECA-maintainability informationThe same rows read for repair: what each mode costs to find, isolate and fix
104 · Damage mode and effects analysisThe effects of damage from a stated threat, rather than of a random failure
105 · FMECA planThe ground rules: indenture levels and the coding system, worksheet formats, failure definitions, and how the analysis is coordinated with the rest of the programme

The technique is older than the standard. It came out of US aerospace and missile work in the 1950s and 60s, reached the civil world through the automotive industry, and now exists in three dialects that share a worksheet and disagree about the last column. IEC 60812 carries the international definition and treats criticality as one of several ways to prioritise. SAE J1739 and the AIAG-VDA FMEA Handbook carry the automotive line, where the ranking is by occurrence, severity and detection rather than by rate, and where the risk priority number was replaced by an action-priority table in 2019 for reasons the pitfalls chapter goes into. This module teaches the MIL-STD-1629A form, because it is the one whose output other analyses can consume.

Where it sits in the programme

A prediction knows that a capacitor fails at 2.4 per 10⁶ hours. Only the FMECA says that a tenth of that is a short and the rest is not, and every model downstream needs the tenth rather than the whole.
A prediction knows that a capacitor fails at 2.4 per 10⁶ hours. Only the FMECA says that a tenth of that is a short and the rest is not, and every model downstream needs the tenth rather than the whole.

A functional FMECA can begin as soon as there is a functional breakdown, which is usually before there is a drawing. A piece-part FMECA begins when there is a parts list, and it is the version that feeds the rest of the programme, because a mode rate is what the other models actually consume.

Programme stageWhat the FMECA is
ConceptFunctional, on the block diagram: which functions can fail, and how badly it matters
Preliminary designPiece-part where the design is settled, functional where it is not; severity classes agreed
Detailed designPiece-part throughout, with α and λp from the prediction and criticality computed
Verification and serviceRe-run against test findings and field returns; the α ratios are the first thing real data corrects

Downstream, the worksheet is the most widely read artefact a reliability group produces. Safety takes the severity classes and the single-point failures. A fault tree takes mode rates as basic events, and its top event is usually one of the end effects in this worksheet. An RBD takes mode rates where a mode rather than an item defeats a path. Testability analysis takes the detection column and turns it into fault detection and isolation figures. Maintainability prediction takes Task 103 and turns it into repair times and task lists.


Want to see this on a live system model? Request a walkthrough.