Kubie, J. (2001). One safeguard too many. Engineering Management, 11(2), 67-76. https://doi.org/10.1049/em%3A20010208