Safety in the event of an internal fault: modelling or tests? | IET Conference Publication | IEEE Xplore