For those of you interested in such things here’s a link to a draft copy of Professor Nancy Leveson’s latest book on system safety Engineering a Safer World, and her STAMP methodology.
Like Safeware it looks to become another classic of the system safety canon.
Critical Uncertainties 