Design for minimum hazard

The first step is to design for minimum hazard. It includes the use of the safest possible energy sources and forms of energy and careful design of the hardware to ensure that the hardware itself will not fail at an unacceptable rate, that the failures that do occur are not catastrophic and do not produce unacceptable results, and that the hardware design tends to be human error reducing and tolerant rather than error inducing. 

---