What should define a candidate alarm? A candidate alarm must represent any
unwanted situation of importance that rises above a minimum threshold of impact and
that can be announced by an alarm. Moreover, without an alarm, the operator is unlikely
to observe this situation on his own.