Chris Johnson,
Index
IEC 61508
Zero safety is impossible (cf Perrow).
Must understand the risks.
and reduce unacceptable risks.
and DEMONSTRATE this reduction.