Hi Bruce, In the document Safety Analysis with the UML.doc in your Dependability Profile you explain that the metaclass Safety Measure is a "normal UML element that could detect or extenuate (i.e. mitigate) a fault. (Stereotype of Class)." However, when I look at the corresponding stereotype «SafetyMeasure» in the profile, it is only applicable to Requirement : In other material you have provided I have seen that you have applied this stereotypes to classes, so this must have been changed at some point. Now to my question: Why isn't the SafetyMeasure stereotype applicable to class or block? Thanks!