731 / 1224
Reason’s Swiss Cheese Model of Failure
Propagation
Some holes due to active failures
Other holes due to latent conditions
Successive layers of defences, barriers, filters and safe guards
When holes line up an error will occur