1330 / 1456
There is never a single cause
for an incident to happen
11
Swiss cheese model of accident causation
J Reason BMJ 2000
Holes in cheese slices
•
represent flaws of individual safeguard levels
•
change constantly in a dynamic complex environment