The SHEL model was modified into a building block concept in 1984 by Frank H. Hawkins
Assumptions of the SHEL model
No arrangement of hardware, software, and liveware exists in vacuo
These resources operate in the context of an environment made up of physical, economic,
political, and social factors
3
o The environment consists of those factors or elements that are NOT in the control of
system designers
o Further, this is simply a convention to distinguish our system from the rest of the
universe
Livewarequintessentially it!
Liveware (or the human) is the most important component of the SHEL model
The study of liveware interactions between and among other SHEL components requires a
multi and interdisciplinary approach, for example . . .
o Medicine
o Physiology
o Psychology
o Ergonomics
The SHEL model: LH Interface
Knowledge of both component types is necessary
o The ergonomist provides expertise concerning the liveware component
o The systems engineer provides expertise concerning the hardware component
However, each system component may, to some extent, be tailored to suit the characteristics
of the other
Liveware CANNOT be fundamentally redesigned
o Its properties are variable only within relatively narrow limits
Other system resources may be contrived to fulfill their roles
o Design decisions are bounded only by the laws of nature, constraints imposed by the
environment, and by the limit of the designers ingenuity
System design must first accept liveware characteristics followed by the design of other
resources to match these human properties, which must be accepted as a given
o This approach is frequently inhibited by an inherent human tendency to design for
individuals as they should be, or as they are mistakenly believed to be
The SHEL model: LS Interface
The pilot must conform to several sets of rules, regulations, conventions, and operating
procedures
Software must not be in conflict with human characteristics
o It is futile to formulate rules that cannot be followed
o Thus, during a violations investigation, were the rules, rather than the violators, at fault?
Since most rules and regulations are codified in paper form, these documents are hardware
o Therein lies another issue: the relative availability and interpretability of these documents
The SHEL model: LE Interface
Factors over which designers and operators have no control
physical environment
o temperature
o radiation
o air pressure
4
o weather
political and economic constraints
o deregulation
o oil prices
o supply and demand
changing circumstances
Examples of SHEL interface errors
Poor Equipment Design
Poor Procedures and Difficult Manuals
Poor Comfort Environment and Effects of Jet Lag
Poor Communication, Leadership, Followership, Teamwork, and DecisionMaking
Adding the Third Dimension
Systems typically comprise several units of each type of resource thus, more opportunity for
failures
HH
o plug and socket design
o signal data formats
o impedance matching
SS
o operating procedures versus rules and regulations versus aircraft certification
LL
o interrelations among crews, cabin staff, ATC, ground crews, and other personnel
ThreeDimensional SHEL Model
The threedimensional SHEL Model: additional dimensions have been added to the model to
emphasize that systems typically comprise several units of each type of resource
SHELSystem Stability
A welldesigned system exists in a state of equilibrium, which is dependent upon highly
interactive links between its component parts
Any changeseven smallwithin a SHEL system may have far-reaching, undesirable,
deleterious consequences
Even in the absence of modifications to resource components, continuous review of a
dynamic system is necessary in order to adjust for changes beyond the control of the system
designers and managers
SHELSkill & Error To Err is Human!!
Humans have the capacity to acquire and employ skills
However, the notion of skill is inseparable from that of error
The philosophy of HF is to study the nature of error, and having done so, to take the
necessary steps to control it, minimize it, mitigate it, and eliminate any deleterious effects of
it
From this posture, it is known that errors can be classified into types having different
etiologies and different treatments
LCentered Approaches to Error
The most fruitful component to modify is L?
o Through training
o Through education
However, there may be tradeoffs to consider between the choice of training (L), of
equipment modification (H), or of procedural changes (S)
A second humancentered approach to error is to determine the point in the sequential chain
of human information processing at which a breakdown occurred
When assessing human information processing error, the result of such an analysis should
suggest
o ways in which the probability of error may be diminished, and
o appropriate means of detection and correction
Management skills are equally susceptible to this approach
o Failures in communication
o Inadequacies in the form of leadership provided