https://123dok.net/document/zgw3jvp2-methodology-defining-accident-function-fault-tolerant-responsibility-purpose.html