A top-down risk analysis method that models pathways leading to an undesired event to identify contributing failures and controls.