System safety engineering and management - Roland (John Wiley & Sons, 1990)