Essential Questions in System Safety: A Guide for Safety Decision Makers