SUBSAFE: An Example of a Successful Safety Program | part of Engineering a Safer World: Systems Thinking Applied to Safety | MIT Press books | IEEE Xplore