Extending the STPA to model the control structure with Finite State Machine · Study