r/systems_engineering

Hi, do you have some tips for preparation to this 90min interview? Company is Boehringer Ingelheim. Thanks :)

we are currently using DOORS for requirements and its been fine for basic requirements to test traceability, but with the CRA reporting obligations now starting, ive been questioning whether our current setup is enough. our bigger issue is knowing if a product is actually exposed when an exploited vulnerability shows up. with our own code we can usually figure our what libraires and dependencies were using. the vendor embedded software is harder. we have components from sub vendors and its not always clear what software is inside them whether a new vulnerability affects our product.

then theres everything already in the field. we can build a better process for new products, but how do you quickly figure out which existing products are impacted and pull together what you need to report?

AI can create a reasonable looking requirement very quickly. But what do you consider enough evidence before accepting it?

Is a source citation enough? Or should the requirement also include the parent context, assumptions, rationale, affected interfaces and a verification path?

In safety related work, I think the difficult part is not generating the sentence. It is showing why the sentence belongs in the system and what would prove that it is correct.

How are people handling this today?

Is there any research or tool out there that is using AI agents for model optimization and system design with SysML? Thinking on having this be a research topic but also if it’s being worked on so that I do not pursue it academically or heavily in free time. If it is being pursued a research topic in AI governance would be good as well.

How I envision it (rough thought) is that the ai agent is shown a SysML file. It knows the ins and outs of the system design and requirements. Maybe some changes within the system and it’s documented. The agent will (potentially in real time) then update the design, any potential metrics, perform an assessment of performance for predictions, trace past performances for the assessment as well. Probably have a budget that stops changes that exceed requirements as well. There would be lots of oversight with it but also there may not be regulation put in place for this to happen yet. Thoughts?