Safety is an emergent property of systems, not a component property. — Nancy Leveson Copy Share Image
Requirement completeness: Requirements are sufficient to distinguish the desired behavior of the software from that of any other undesired program that might be designed. . — Nancy Leveson Copy Share
Reliability engineers often assume that reliability and safety are synonymous, but this assumption is true only in special cases. — Nancy Leveson Copy Share
