Failure Mode and Effects Analysis (FMEA)

FMEA is a systematic method for identifying all the ways a system, process, or product can fail, assessing the consequences of each failure mode, and prioritizing actions to prevent the most dangerous ones. For each potential failure, the team assesses three factors on a 1-10 scale: Severity (how bad is it if this fails?), Occurrence (how likely is this failure?), and Detection (how likely are we to catch it before it reaches the customer?). These three scores are multiplied to produce a Risk Priority Number (RPN), which ranks failure modes for attention. A failure that is severe (10) but extremely unlikely (1) and easily detected (1) gets RPN=10. A failure that is moderate (5) but frequent (7) and hard to detect (8) gets RPN=280 and demands immediate action. The practitioner's insight: FMEA's greatest value isn't the math — it's the structured conversation it forces.

When to use it

Before launching products, processes, or systems; when you need to systematically prioritize which risks to address first; when a cross-functional team needs a structured framework for risk discussion; or when existing risk assessments are too informal or focused only on severity without considering probability and detectability.

How it can help

FMEA provides a structured framework for risk assessment that works in any domain. Product launches, project plans, process changes, and strategic initiatives all benefit from systematic 'what could go wrong?' analysis. The three-dimensional scoring (severity, probability, detectability) is especially valuable because it reveals hidden risks: failures that seem harmless individually but are undetectable until it's too late. In cybersecurity, a vulnerability that's easy to exploit (high occurrence) and hard to detect (low detection) is more dangerous than a severe vulnerability that's well-monitored.