“Any large system is going to be operating most of the time in failure mode.”

— John Gall