Assessing risk associated with safety or missioncritical embedded systems often lacks detailed considerations of software, if at all. Performing risk assessment, which considers software in its entirety, is challenging, yet necessary. This necessity stems from the need to understand the contribution of software to the risks associated with a system. We propose a modeling approach that extends dynamic flowgraph methodology via using second order decision tables to represent functions of the system, including that of the software, and the environment.