Resilience engineeringErik Hollnagel, David D. Woods, Nancy Leveson · First published 2006Open the Tome
Assessment of Space Shuttle Flight Software Development ProcessesNancy Leveson · First published 1993Open the Tome