Author: Institution of Electrical Engineers. Safety Critical Systems Committee.