As engineering organizations search to profit from digital engineering, many take into account strengthening how fashions are used throughout engineering work beneath the banner of model-based programs engineering (MBSE). The Worldwide Council on Programs Engineering (INCOSE) defines MBSE because the formalized software of modeling to assist necessities, design, evaluation, verification, and validation all through the system life cycle. The excellence just isn’t whether or not a company makes use of fashions, since almost all engineering actions do, however quite to undertake practices that make chosen fashions authoritative, related, and ruled. Which means fashions are used as main assist for making and verifying lifecycle choices and for decreasing technical danger.
The alternatives of related fashions depend upon the selections being confronted or technical dangers to be mitigated. Examples embody:
- a SysML v2 mannequin that hyperlinks necessities to system construction, interfaces, conduct, and verification
- an AADL mannequin that represents embedded software program and {hardware}, processor and bus bindings, communication paths, and end-to-end latency
- a necessities mannequin in IBM DOORS that manages requirement decomposition, allocation, baselines, change historical past, and verification hyperlinks
- a authorities reference structure modeled in SysML v1 in Cameo Programs Modeler that defines reusable mission, system, and interface patterns for applications to tailor
- and a UAF mannequin that connects operational targets, actions, roles, sources, and measures
These fashions reply totally different questions and require totally different experience, proof, validation, and governance.
Consequently, adopting MBSE shouldn’t be handled as a binary selection, as in, you’re both “doing MBSE” otherwise you’re not. A helpful MBSE apply names the mannequin, the selections it helps, when it’s created and up to date, the way it connects to different engineering info, how it’s validated, and the way its outcomes are checked with respect to the as-built system. A SysML v2 mannequin could also be checked for semantic consistency, design acceptance standards, and traceability; an AADL mannequin could also be instantiated and analyzed in opposition to latency or useful resource limits; an IBM DOORS necessities mannequin could also be reviewed for attribute completeness, baseline integrity, and traceability protection; a authorities reference structure in Cameo could also be checked for conformance to its SysML v1 profile and for full mission, system, and interface patterns; and a UAF mannequin could also be reviewed for alignment amongst targets, actions, roles, and sources.
Scaling concerns may be important, together with each “horizontal” throughout parts of built-in programs and “vertical” in assist of programs that should assist a number of variants and proceed to evolve. Product-line SysML fashions, for instance, should handle variants and traceability; AADL fashions spanning computing platforms should handle bindings and timing assumptions; DOORS repositories should handle baselines, entry, and hyperlink integrity; and reference architectures in SysML or UAF reused throughout applications should handle profile, library, model, and tailoring governance.
Challenges with Digital Transformation and MBSE
The Nationwide Academies’ 2025 research Digital Transformation within the Division of the Air Power describes digital transformation because the development of practices supporting MBSE, digital twins, and digital threads throughout full system life cycles. It additionally concludes that there isn’t a confirmed components for enterprise-wide success. A mannequin doesn’t create worth merely by current. It creates worth when folks use reliable, appropriately validated mannequin info to make and confirm choices.
The proof base reinforces the necessity for a measured strategy. Campo and colleagues reviewed 60 sources and coded greater than 2,900 claims about MBSE; 47 p.c of the claims rested on writer opinion, and 86 p.c weren’t supported by a metric. Henderson and Salado equally discovered that two-thirds of claimed MBSE advantages had been supported solely by perceived proof and that solely two papers of their overview reported measured proof. These findings don’t present that MBSE lacks worth. They present that organizations want specific, model-specific worth hypotheses and measures that join an outlined mannequin and its use in a call to engineering and mission outcomes.
Adoption research additionally establish sensible obstacles. Vogelsang and colleaguesinterviewed 20 specialists from 10 German embedded-systems firms and located issues about immature tooling, unsure return on funding, and migration of current knowledge and processes. Their contributors typically anticipated MBSE to handle complexity and cut back value however couldn’t all the time establish which fashions, analyses, or determination workflows would produce these advantages. The researchers concluded that poor experiences regularly started with expectations that had been too excessive or insufficiently concrete.
The SEI’s first MBSynergy Workshop introduced collectively 25 subject-matter specialists from protection and intelligence applications and recognized 5 recurring boundaries: a mismatch between program-management wants and MBSE experience, imprecise definitions of appropriate implementation, the absence of a group of apply, adoption pushed by instruments or coverage quite than mission wants, and unclear possession of the MBSE strategy. These are socio-technical issues. Shopping for a device or producing a set of diagrams doesn’t resolve them.
The SEI’s MBSynergy challenge addresses these issues by modeling the modeling course of: the mission objective, goal choices, stakeholders, mannequin sorts, abilities, triggers, inputs, actions, outputs, high quality measures, validation strategies, dangers, and governance that make modeling helpful. Its workshop collection helps a company outline, prioritize, and mannequin an preliminary MBSE technique. The group then workout routines that technique by means of a intentionally scoped pathfinder, measures what occurs, and makes use of the ensuing proof to refine the technique earlier than increasing it.
Scope of MBSE Adoption
Determine 1 supplies a scoping heuristic for that preliminary pathfinder. One axis represents product scope, from a part to a system of programs. The opposite represents enterprise scope, from a person practitioner to an enterprise functionality. The purpose labeled (1,1) represents one challenge crew utilizing a named set of fashions to assist particular choices for one goal system. For instance, a crew may use a SysML v2 mannequin to coordinate necessities, interfaces, conduct, and verification for an unmanned plane subsystem, an AADL mannequin to research timing and useful resource use in its flight-control structure, and an IBM DOORS necessities mannequin to handle allocation and verification proof. It might additionally tailor or replace a authorities reference structure modeled in SysML v1 in Cameo Programs Modeler to determine widespread mission, system, and interface patterns. That is the minimal scope prone to expose the coordination, lifecycle, and decision-making issues wanted to learn the way MBSE will work past a person modeling job.

Determine 1: A two-dimensional scoping heuristic for MBSE adoption. The (1,1) pathfinder focuses on one challenge crew and one goal system.
The classes on each axes are cumulative working definitions, not normative MBSE phrases or maturity ranges. Every stage provides scope and coordination , however technical penalties depend upon the fashions concerned. A SysML v2 mannequin for a product line introduces variant and traceability administration; an AADL mannequin spanning processors and networks introduces binding, timing, and useful resource evaluation issues; IBM DOORS necessities fashions spanning organizations introduce baseline, access-control, and link-integrity issues; and a authorities reference structure in SysML v1 in Cameo Sytems Modeler introduces profile, library, model, and tailoring governance as applications reuse it.
Product Scope
- Element. A bounded subsystem, interface, perform, or system attribute managed inside a restricted engineering scope.
- Goal system. One system of curiosity whose engineering disciplines, fashions, and lifecycle artifacts are coordinated beneath a typical determination authority.
- Product line. A household of associated programs or variants that shares property and should assist choices throughout product variants, mannequin configurations. and launch horizons.
- System of programs. Independently managed programs whose interactions create mission-level capabilities and cross-system evaluation dependencies involving mannequin possession, interfaces, and evaluation.
Enterprise Scope
- People. Practitioners apply modeling inside specialised roles, typically by means of regionally managed or sequential workflows.
- Undertaking crew. Contributors share an goal, funds, schedule, management, and a typical understanding of key phrases and authoritative info.
- Product group. A number of challenge groups coordinate modeling practices, technical scope, and planning horizons to assist associated merchandise or releases.
- Enterprise. Roles, governance, infrastructure, and modeling practices are coordinated throughout the group and its portfolio.
Why Scope Issues
An MBSE adoption technique should account for each enterprise systems-engineering wants and the selections and workflows of constituent groups. Simply as independently developed programs can create integration value and delay, disconnected engineering workflows can produce inconsistent assumptions, duplicate evaluation, and late discovery of cross-system results. Enterprise-level MBSE can allow reuse, portfolio-level tradeoffs, constant acquisition expectations, and lowered reinvention, however these advantages depend upon coordinated processes and reliable mannequin info.
A part modeled by one practitioner can exhibit a notation or device, however it could reveal little about crew coordination, governance, abilities, or lifecycle integration. On the different excessive, starting with an enterprise-wide or system-of-systems deployment introduces too many organizational and technical variables without delay. A (1,1) pathfinder creates a sensible studying surroundings: broad sufficient to reveal actual workflow and governance issues however slim sufficient to supply well timed suggestions and management danger.
This is the reason a pathfinder have to be chosen with future scale in thoughts. Its speedy goal is to not full an enterprise transformation. It’s to check assumptions about which fashions assist which choices, how their outcomes will likely be validated, what sources the work requires, and which technical and organizational choices will protect future choices.
From Technique to a Measurable Pathfinder
Earlier than selecting a pathfinder, a company ought to establish the next:
- a mission-oriented enterprise objective and a particular worth speculation for utilizing fashions
- present engineering workflows, current fashions, and the selections they assist
- the roles, abilities, and competencies required to carry out and overview the work
- knowledge, modeling instruments, digital engineering environments, and integration constraints
- relevant insurance policies, governance choices, and possession of the MBSE strategy
- success measures, dangers, and the choice standards for adapting or increasing the trouble
MBSynergy makes use of pathfinder to imply a scoped pilot whose goal is to generate proof for scaling, not an remoted demonstration {that a} device can produce a mannequin. The pathfinder ought to check an actual modeling course of for an actual goal system, with specified mannequin sorts and stakeholders who personal the selections and outputs. That might imply updating a SysML v2 structure after a requirement change and reviewing interface impacts, instantiating an AADL structure to test whether or not flight-control flows stay inside latency budgets, establishing an IBM DOORS necessities baseline and checking verification protection, or tailoring a SysML v1 authorities reference structure in Cameo for one program. It also needs to produce proof in regards to the time, abilities, tooling, governance, validation, and model-management effort that broader adoption would require.
Measures ought to replicate each near-term course of efficiency and longer-term program outcomes, and they need to match the mannequin and determination. A SysML v2 pathfinder may observe semantic validation errors, unresolved interfaces, traceability gaps, overview effort, and the time wanted to propagate a requirement change. An AADL pathfinder may observe profitable instantiation, evaluation protection, timing or resource-limit violations, and evaluation turnaround time. An IBM DOORS pathfinder may observe lacking attributes, orphan or suspect hyperlinks, baseline cycle time, and verification protection. A Cameo reference structure pathfinder may observe profile violations, reused versus tailor-made parts, unresolved deviations, and cross-program replace effort. Lagging outcomes can embody rework, qualification delays, late defect discovery, lifecycle value, and danger discount. Defining each prevents early stakeholders from judging the trouble solely by prices incurred earlier than lifecycle advantages can seem.
Modeling the Modeling Course of
MBSynergy represents modeling issues as eventualities. A state of affairs captures an MBSE course of in a multi-faceted context together with the particular fashions used and the selections they inform. It may be summarized by a sample sentence: inside an surroundings, stakeholders with particular abilities obtain a enterprise objective when a set off happens, executing a course of that makes use of named fashions to generate outputs from inputs with measured high quality attributes. An entire state of affairs additionally data preconditions, postconditions, dangers, references, tradeoffs, validation strategies, and the governance or instruments wanted for execution.
Contemplate a pathfinder targeted on evaluating a Modular Open Programs Method (MOSA) proposal. A bidder’s proposal triggers the method. Program workplace evaluators apply standards from the request for proposal and different authoritative steerage. The response is an analysis report, and measures assess its high quality, cycle time, effort, and consistency. On this case, the first modeled artifact is a UAF illustration of the analysis course of: its targets, actions, info, roles, competencies, measures, and dangers. The proposal and analysis report stay inputs and outputs. Modeling the state of affairs makes the required stakeholder roles, abilities, info, instruments, determination factors, and dangers specific earlier than the group expands the method.
Working by means of eventualities with key stakeholders helps reply sensible questions:
- Which mission end result or engineering determination ought to a particular mannequin enhance?
- Which set off, inputs, mannequin sorts, course of steps, and outputs are in scope?
- How will the group validate the mannequin and decide course of execution, mannequin high quality, and determination high quality?
- Which roles, abilities, instruments, and authoritative info are required?
- Which governance choices and dangers might forestall native success from scaling?
Every state of affairs is captured in two complementary varieties. A document-based definition helps early elicitation and overview by stakeholders who could not use modeling notation. A model-based definition maps the identical info into the Unified Structure Framework (UAF), the place specific semantics assist traceability, consistency checking, evaluation, and connection to enterprise structure. A coherent assortment of prioritized and related eventualities turns into an preliminary, analyzable MBSE technique.
How the Workshop Sequence Works
The MBSE Technique Workshop Guidebook describes a repeatable three-workshop course of for outlining, modeling, and planning a pathfinder. The workshops assemble eventualities for actions which are or will likely be supported by named fashions and different digital property. Elaborating these eventualities establishes a rationale for every modeling exercise, identifies workforce and model-quality wants, and exposes execution dangers.
Organizations are finest positioned to profit once they have begun to determine fundamental modeling instruments and have workers with foundational modeling abilities. The strategy works finest when mission wants, quite than a device mandate, drive the trouble; a modeling champion owns and guides the strategy; stakeholders from acquisition, programs engineering, software program engineering, verification and validation, and digital engineering take part; and management helps iterative studying quite than demanding an entire baseline earlier than worth may be demonstrated.
The workshop collection progresses from context to an actionable preliminary technique:
- Workshop 1 establishes this system context, introduces the MBSynergy state of affairs strategy, and brainstorms a contextual set of candidate eventualities.
- Workshop 2 prioritizes the highest-impact eventualities and elaborates a subset utilizing the MBSynergy state of affairs template.
- Workshop 3 validates a UAF mannequin of the elaborated eventualities and identifies near-term actions for piloting the preliminary technique.
The output just isn’t a completed enterprise deployment. It’s a documented, prioritized, and analyzable preliminary technique, along with the near-term actions wanted to train it by means of a pathfinder. Because the group runs the pathfinder, measures outcomes, and incorporates classes, the technique mannequin evolves.
Determine 2 reveals how the MBSynergy profile maps state of affairs content material to UAF ideas. Targets and goals set up why the state of affairs issues; actions, info, and measures describe what it does; posts and competencies establish who performs it; and high quality attributes, dangers, and tradeoffs assist evaluation. This formal construction connects organizational intent to executable modeling processes.

Determine 2: The MBSynergy profile in Cameo Enterprise Structure 2022x maps organizational targets, stakeholders, abilities, actions, info, measures, high quality attributes, and dangers to a proper UAF state of affairs.
Modeling the Path Forward
Getting by means of sq. one with MBSE doesn’t require a program to outline or deploy an enterprise-wide answer on the outset. It requires an preliminary technique and a intentionally scoped pathfinder: one challenge crew, one goal system, named mannequin sorts, particular choices, and a transparent, mission-oriented worth hypotheses. Capturing the pathfinder as eventualities connects organizational targets to stakeholders, actions, mannequin outputs, validation strategies, high quality measures, dangers, and tradeoffs. Executing these eventualities produces proof that leaders can use to refine the strategy, protect future choices, and broaden MBSE practices the place explicit fashions ship measurable worth.
The SEI’s MBSynergy: MBSE Technique, Modeling, and Situation Instruments assortment brings collectively the workshop steerage, state of affairs templates, UAF 1.2-based profile, state of affairs library, and tutorial wanted to assist that development. Collectively, these sources assist applications doc present practices, analyze different adoption paths, plan a targeted pathfinder, and evolve towards an organizationally sustainable and mission-relevant MBSE functionality.
For extra info or to collaborate with the SEI, e-mail [email protected].

