All terms
Fault Tree Analysis
Top-down deductive analysis tracing how faults can combine to cause an undesired event.
Reviewed by Christian Espinosa, Founder, Blue Goat CyberLast reviewed May 5, 2026
Definition
FTA per IEC 61025 uses Boolean logic to model how component-level faults and external events combine to cause a defined top-level hazardous event, supporting both qualitative and quantitative analysis. What the regulation says
Fault Tree Analysis (FTA) is recognized by regulatory bodies as a systematic risk analysis technique. For instance, the FDA emphasizes comprehensive risk management per 21 CFR Part 820, Quality System Regulation, which can include FTA. Under the EU MDR (Regulation (EU) 2017/745) Annex I, General Safety and Performance Requirements, manufacturers are required to establish, implement, document, and maintain a risk management system, for which FTA can be a valuable tool.
What this means in practice
Often paired with FMEA: FTA reasons backward from a harm; FMEA reasons forward from components. FTA is favored for systems with safety-critical software and rare catastrophic failure modes.Examples
- A medical device manufacturer uses FTA to analyze how a combination of software bugs, sensor malfunctions, and user errors could lead to an incorrect drug dosage delivery by an infusion pump.
- A team developing an AI-powered diagnostic tool employs FTA to map out how various system component failures and data integrity issues could result in a misdiagnosis, identifying critical control points.
- A cybersecurity team utilizes FTA to determine the pathways by which a denial-of-service attack could successfully incapacitate a networked hospital imaging system, informing their mitigation strategies.
Common pitfalls
- •Failing to clearly define the top-level event can lead to a convoluted and ineffective fault tree.
- •Overlooking common cause failures or human error in the fault tree can significantly underestimate risk.
- •Treating FTA as a standalone activity rather than an iterative part of the product lifecycle reduces its effectiveness.
- •Applying FTA to systems without well-defined failure modes or clear causal relationships can yield misleading results.
- •Not adequately validating the fault tree against real-world data or expert opinion can compromise its accuracy and credibility.
Frequently asked questions
FTA provides a structured, top-down approach to identify root causes of system failures, directly supporting the requirements of ISO 14971:2019 for risk analysis by helping to identify hazards and hazardous situations.
Cross-references
Used by
Things that build on this term.
Often confused with
Distinct concept frequently mistaken for this one.
Related terms
Grouped by themeEditor's picks
· Hand-selected related conceptsMore in Quality & Risk
· Same categoryQuality & Risk
Biocompatibility
Ability of a material to perform with an appropriate host response in a specific application.
Quality & Risk
CAPA Effectiveness Check
Verification step confirming a corrective or preventive action actually fixed the problem.
Quality & Risk
Change Control
Formal QMS process for evaluating, approving, and implementing changes that could affect product quality or compliance.
Quality & Risk
Complaint Handling
Process for receiving, evaluating, and responding to device complaints.
Primary references
3 sourcesLink health: 3 verified· last checked 2026-06-20
IEC·1MDIC·1FDA·1
- 1
IEC 61025VerifiedIECwebstore.iec.ch
- 2
MDIC Case for QualityVerifiedMDICmdic.org
- 3
FDA - Quality SystemsVerifiedFDAfda.gov
Inline markers like [1] jump to the matching reference above.