You'll probably like Nancy Leveson's model and work if you haven't seen it: http://sunnyday.mit.edu/accidents/safetyscience-single.pdf http://sunnyday.mit.edu/

You'll probably like Nancy Leveson's model and work if you haven't seen it: http://sunnyday.mit.edu/accidents/safetyscience-single.pdf http://sunnyday.mit.edu/accidents/safetyscience-single.pdf http://sunnyday.mit.edu/ http://sunnyday.mit.edu/