To determine a proper ASIL for each hazardous event with a proper safety goal, the right classes should first be determined for the three properties of the hazardous event; (i) severity of harm from the resultant accident, (ii) exposure to the relevant operational situation, and (iii) controllability to avoid the induced risks. ASIL can be clearly determined with right classes of these three properties. But no specific methodologies or processes for their classification can be found in ISO 26262, except only a rough guideline with a simplified set of illustrative tables. In this paper, we try to present a systematic model for classifying the three properties of the hazardous event and suggest a refined procedure of ASIL determination. The proposed model provides a specific method to get a more objective ASIL compared with that in the standard. Scrutinizing the current methodology, we develop a refined method and also provide an illustrative example.