The Accident Analysis Using STAMP

With all these controls and this elaborate control structure to protect against friendly fire accidents, which was a well-known hazard, how could the shootdown occur on a clear day with all equipment operational As the Chairman of the Joint Chiefe of Staff said after the accident  

In place were not just one, but a series of safeguards—some human, some procedural, some technical—that were supposed to ensure an accident of this nature could never happen. Yet, quite clearly, these safeguards failed.  

---