A10.07
Swiss cheese model
Cards in this group · 4
- A10.07.1Each safety layer has its own gaps, and an accident needs them all to line up
- A10.07.2The distinction between active failures and latent conditions
- A10.07.3Betting an irreversible or life-threatening risk on one safeguard is not enough
- A10.07.4A tool built to explain accidents after the fact strains when used to design defenses upfront