“identifying only operator error or sabotage as the root cause of the accident ignores most of the opportunities for the prevention of similar accidents in the future.” — Nancy G. Leveson Copy Share Image
