A method of fault propagation modeling. The analysis constructs a tree- shaped picture of the chains of events leading from an initiating event to various potential outcomes. The tree expands from the initiating event in branches of intermediate propagating events. Each branch represents a situation where a different outcome is possible. After including all of the appropriate branches, the event tree ends with multiple possible outcomes.