An anatomy of risk - Rowe, William D. (Wiley series on systems engineering and analysis, 1977)