Judith Cooke has pointed out that a combination of things – equipment failure, management failure, human error are usually responsible for safety problems and hazards. How can firms design systems to cope with these rare, even unique, combinations of events? L01