It is widely recognized that real-time,fault-tolerant and distributed computing technologies play a key role in the deployment of many current andfuture (civilian or Defense) critical and complex applications. Computing systems needed to support such applications are referred to as C3 systems. Lack of a clear identifrcation of those issues involved with designing and dimensioning C3 systems can only lead tofailures, as recently demonstrated by a number of sizeable projects that have been aborted or suspended in Europe and in the USA,in various application domains. Thispaper describes a Systems Engineering methodology that,given some specification <P,p> of a particular Systems Engineering problem, permits to develop a specifrcation <S, s> of a C3 system such that <S, s> provably satisfies <P, p>. It is explicitly assumed that <P, p> includes arbitrarily stringent timeliness requirements, arbitrary distribution requirements as well as arbitrarily stringent ...