IT design criteria for damage reduction

In order to obtain security from the perspective of a social system, not only the damage probability but also the maximum possible damage must be reduced. Analysing social risk assessment shows us that the latter issue needs more attention. Moreover, autonomous decisions about risk as well as experience gathering are relevant factors of social risk assessment. IT systems therefore need to include appropriate features in order to comply with these factors. The paper explains how these features can be identified using requirements analysis, starting from the social goals. Ten highly reusable socio-technical criteria can be derived from social goals during this process. Complying features especially support responses of the social system in case of a technical system disturbance.