@QuietMisdreavus came across MIT's STPA by random walk. not from a job, but its also one of the systems they use to make the charts like this :ablobcatderpy:

structured practice of listing concrete losses, hazards that result in said losses, and which controls are in place to mitigate hazards