Dr. Richard Cook outlines the reasons why all complex systems are intrinsically hazardous, why disaster is always just around the corner, and how failure-free operations still require experience with failure.
http://www.ctlab.org/documents/How%20Complex%20Systems%20Fail.pdf
