Slide 27 of 57
Notes:
We do not model freedom of choice although some policy researchers do.
Freedom to over-ride obligation policy
Event - component failure or error rate exceeded a threshold is used to trigger a management action