Aase, K., Wiig, S. & Høyland, S. (2009). Safety first!? Organizational efficiency trends and their influence on safety. Safety Science Monitor, 13(2) article 7. [12]
ACCOMPLI: http://www.aviation-civile.gouv.fr/publications.htm. [2]
Åkerstedt, T. & Gillberg, M. (1990). Subjective and objective sleepiness in the active individual. The International Journal of Neurosciences, 52(1–2), 29–37. [6]
Alderson, D.L. & Doyle, J.C. (2010). Contrasting views of complexity and their implications for network-centric infrastructures. IEEE Systems, Man and Cybernetics, Part A. 40(4), 839–52. [10]
Amalberti, R. (1996). La Conduite des Systèmes à Risques. Paris: PUF, Coll. Le travail humain. [3]
Amalberti, R. (2001). The paradoxes of almost totally safe transportation systems. Safety Science, 37(2–3), 109–126. [3] [18]
Amalberti, R. (2006). Optimum system safety and optimum system resilience: Agonistic or antagonistic concepts? In E. Hollnagel, D.D. Woods & N.G. Leveson (eds), Resilience Engineering: Concepts and Precepts. Aldershot, UK: Ashgate (pp. 253–74). [Prologue] [18]
Amalberti, R., Auroy, Y., Berwick, D. & Barach, P. (2005). Five system barriers to achieving ultrasafe health care. Annals of Internal Medicine, 142, 756–64. [3]
Andersson, K.P. & Ostrom, E. (2008). Analyzing decentralized resource regimes form a polycentric perspective. Policy Science, 41, 71–93. [9]
Babin, L., Lee, S., Halko, S., Boudreau, A.C. & George, C.F.P. (1997). Determining sleep-wake activity using Actiwatch. Sleep Research, 26, 640. [6]
Bærentsen, K.B. (1996). Episodic knowledge in system control. In B. Holmqvist, P.B. Andersen, H. Klein & R. Posner (eds), Signs of Work: Semiosis and Information. Berlin: Walter de Gruyter & Co (pp. 283–319). [3]
Bainbridge, L. (1987). The ironies of automation. In J. Rasmussen, K. Duncan & J. Leplat (eds), New Technology and Human Error. London: Wiley (pp. 271–83). [2]
Bank of England (2007). Financial Stability Report, October 2007, Issue 22. www.bankofengland.co.uk, accessed September 2008. [13]
Bengtsson, J., Angelstam, P., Elmqvist, T., Emanuelsson, U., Folke, C., Ihse, M., Moberg, F. & Nyström, M. (2003). Reserves, resilience and dynamic landscapes. Ambio, 32(6), 389–96. [10]
Bergström, J., Dahlström, N., van Winsen, R., Lützhöft, M., Dekker, S.W.A. & Nyce, J. (2009). Rule- and role-retreat: An empirical study of procedures and resilience. Journal of Maritime Research, 6(1), 75–90. [4]
Bernstein, P.L. (2007). To botch an economic forecast, rely on past experience. International Herald Tribune, Sunday, December 30. [13]
Bertrand, M. & Mullainathan, S. (2001). Do people mean what they say? Implications for Subjective Survey Data. The American Economic Review, 91, 67–72. [18]
Bertuglia, C.S. & Vaio, F. (2005). Non-Linearity, Chaos and Complexity (2nd Edition). Oxford, UK: Oxford University Press. [15]
Bird Strike Committee-USA (2009). Significant bird and other wildlife strikes. http://www.birdstrike.org/commlink/signif.htm, accessed December 2009. [2]
Bird, F.E. Jr., Germain, G.L. & Clark, M.D. (2003). Practical Loss Control Leadership (3rd ed.). Det Norske Veritas (USA) [7]
Bisseret, A., Sebillotte, S. & Falzon, P. (1999). Techniques Pratiques pour L’étude des Activités Expertes. Toulouse: Octarès-Editions. [3]
Bjørnskau. T. (2005). Aviation safety in Norway: Results from a questionnaire survey to employees in Norwegian aviation (in Norwegian). The Institute of Transport Economics (TØI) report no 782/2005. [12]
Bonabeau, E. & Teraulaz, G. (1994). Intelligence Collective. Paris: Hermès. [16]
Bowlby, J. (1973). Attachment and Loss. Vol 2: Separation. New York: Basic Books. [16]
Branlat, M., Fern, L., Voshell, M. & Trent, S. (2009). Coordination in urban fire-fighting: A study of critical incident reports. Proceedings of the Human Factors and Ergonomics Society 53rd Annual Meeting, San Antonio, TX. [10]
Brehmer, B. (2008). Från Funktioner till Konkret Ledningssystem för Komplexa Operationer. Stockholm: Försvarshögskolan. [4]
Bressolle, M.C., Decortis, F., Pavard, B. & Salembier, P. (1996). Traitement cognitif et organisationnel des micro-incidents dans le domaine du contrôle aérien: analyse des boucles de régulation formelles et informelles. In G. De Terssac & E. Friedberg (eds), Coopération et Conception. Toulouse: Octares (pp. 267–88). [16]
Brown, J.P. (2005). Key themes in healthcare safety dilemmas. In M.S. Patankar, J.P. Brown, & M.D. Treadwell (eds), Safety Ethics: Cases From Aviation, Healthcare, and Occupational and Environmental Health. Aldershot, UK: Ashgate (pp. 103–48). [10]
Burke, K. (1969). A Grammar of Motives. Berkeley & Los Angeles, CA: University of California Press. [17]
Burr, V. (2003). Social Constructionism. East Sussex, UK: Routledge. [18]
Cabon, P. (2008). De la Gestion de la Fatigue à la Gestion Organisationnelle du Risque Fatigue. Habilitation à Diriger des Recherches. Paris, Université René Descartes. [6]
Cabon, P., Mollard, R., Debouck, F., Chaudron, L., Grau, J.Y. & Deharvengt, S. (2008). From flight time limitations to fatigue risk management systems. 3rd Symposium on Resilience Engineering, Antibes Juan-Les-Pins, France, October, 28–30. [6]
Carruthers, I. & Philip, P. (2006). Safety first – A report for patients, clinicians and healthcare managers. Department of Health. http://www.dh.gov.uk/prod_consum_dh/groups/dh_digitalassets/@dh/@en/documents/digitalasset/dh_064159.pdf, accessed June 2010. [17]
Carthey, J., De Leval, M.R., Wright, D.J., Farewell, V.T. & Reason, J.T. (2003). Behavioural markers of surgical excellence. Safety Science, 41(5), 409–25. [2]
Civil Aviation Authority (1998). CAP 681: Global Fatal Accident Review 1980–1996. http://www.caa.co.uk/docs/33/CAP681.pdf, accessed January 2008. [18]
Civil Aviation Authority of New Zealand (2007). Part 121 Air Operations: Large Aeroplanes. Wellington: Civil Aviation Authority of New Zealand. [6]
Cohen, M.S., Freeman, J.T. & Wolf, S.P. (1996). Meta-recognition in time stressed decision making: Recognizing critiquing and correcting. Human Factors, 38, 206–19. [8]
Committee on the Future of Emergency Care in the US (2006). Hospital-Based Emergency Care: At the Breaking Point. Washington, DC: National Academic Press. [10]
Committee on Transportation and Infrastructure, (2009). http://transportation.house.gov/hearings/Testimony.aspx?TID=12805&NewsID=809, accessed July, 2010. [2]
Cook, R.I. (2006). Being bumpable: Consequences of resource saturation and near-saturation for cognitive demands on ICU practitioners. In D.D. Woods & E. Hollnagel (eds), Joint Cognitive Systems: Patterns in Cognitive Systems Engineering. Boca Raton, FL: CRC Press. Taylor & Francis Group (pp. 23–35). [10]
Cook, R.I. & Nemeth, C.P. (2006). Taking things in one’s stride: Cognitive features of two resilient performances. In E. Hollnagel, D.D. Woods & N.G. Leveson (eds), Resilience Engineering: Concepts and Precepts. Aldershot, UK: Ashgate (pp. 205–21). [Epilogue]
Cook, R.I. & Rasmussen, J. (2005). “Going solid”: A model of system dynamics and consequences for patient safety. Quality and Safety in Health Care, 14, 130–34. [9]
Cook, R.I. & Woods, D.D. (2006). Distancing through differencing: An obstacle to learning following accidents. In E. Hollnagel, D.D. Woods and N. Leveson (eds), Resilience Engineering: Concepts and Precepts. Aldershot, UK: Ashgate. (pp. 329–38.) [10]
Cook, R.I., Woods, D.D. & McDonald, J.S. (1991). Human Performance in Anesthesia: A Corpus of Cases. Cognitive Systems Engineering Laboratory Report, prepared for Anesthesia Patient Safety Foundation, April 1991. [10]
Cook, R.I., Woods, D.D. & Miller, C. (1998). A Tale of Two Stories: Contrasting Views of Patient Safety. North Adams, MA: US National Patient Safety Foundation. [10] [17]
Coutarel, F., Daniellou, F. & Dugué, B. (2003). Interroger l’organisation du travail au regard des marges de manoeuvre en conception et en fonctionnement [Examining work organization in relation to margins of manoeuvre in design and in operation]. Pistes, 5(2). Online at http://www.pistes.uqam.ca/v5n2/articles/v5n2a2.htm, accessed April 2010. [10]
Csete, M.E. & Doyle, J.C. (2002). Reverse engineering of biological complexity. Science, 295, 1664–1669. [10]
Cuvelier, L. & Falzon, P. (2008). Methodological issues in the quest of resilience factors. In E. Hollnagel, F. Pieri & E. Rigaud (eds),3rd International Symposium on Resilience Engineering. October 28–30, Antibes – Juan-les-Pins, France. [3]
Cyrulnik, B. (2003). Le Murmure des Fantômes. Paris: Odile Jacobs. [16]
De Keyser, V. & Nyssen, A.S. (1993). L’erreur humaine en anesthésie. Le travail humain, 56, 243–66. [16]
de Larosière, J. (2009). The High-Level Group of Financial Supervision in the EU. Brussels, February 25. http://ec.europa.eu/internal_market/finances/docs/de_larosiere_report_en.pdf, accessed February 2010. [13]
Deharvengt, S. (2007). Barriers to Regulating Resilience: Example of Pilots’ Crew Resource Management Training. Paper presented at the Resilience Engineering Workshop, Vadstena, Sweden, 25–27 June. [6]
Dekker, S.W.A. (1996). Cognitive complexity in management by exception: deriving early human factors requirements for an envisioned air traffic management world. In D. Harris (ed.), Engineering Psychology and Cognitive Ergonomics. Vol. I. Aldershot, UK: Ashgate (pp. 201–210). [8]
Dekker, S.W.A. (2005). Ten Questions About Human Error: A New View of Human Factors and System Safety. New Jersey, USA: Lawrence Erlbaum Publishers. [18]
Dekker, S.W.A. (2006). Resilience engineering: Chronicling the emergence of confused consensus. In E. Hollnagel, D.D. Woods, and N. Leveson (eds), Resilience Engineering Concepts and Precepts. Farnham, UK: Ashgate (pp. 77–92). [12]
Dekker, S.W.A. (2007). Just Culture: Balancing Safety and Accountability. Aldershot, UK: Ashgate. [10] [17]
Dekker, S.W.A., Dahlström, N., van Winsen, R. & Nyce, J. (2008). Crew resilience and simulator training in aviation. In E. Hollnagel, C. Nemeth & S.W.A. Dekker (eds), Resilience Engineering Perspectives, Remaining Sensitive to the Possibility of Failure. Aldershot, UK: Ashgate (pp. 119–26). [4]
Dekker, S.W.A. & Woods, D.D. (1999). To intervene or not to intervene: The dilemma of management by exception. Cognition Technology and Work, 1, 86–96. [8]
Dekker, S.W.A. & Woods, D.D. (2002). MABA-MABA or abracadabra? Progress on human-automation co-ordination. Cognition, Technology & Work, 4, 240–4. [18]
Department of Health. (2000). An Organisation With a Memory: Learning From Adverse Events in the NHS. London, UK: The Stationary Office. [17]
Dörner, D. (1996). The Logic of Failure. New York: Metropolitan Books. [4]
Downer, J. (2009). Epistemological Chicken: What Do We Learn From Aircraft ‘Bird-Ingestion’ Tests? Centre for Analysis of Risk and Regulation, The Economic and Social Research Council (ESRC), London School of Economics and Political Science, Houghton Street, London, UK. [2]
Doyle, J.C. (2000). Multiscale networking, robustness, and rigor. In T. Samad & J. Weyrauch (eds), Automation, Control, and Complexity: An Integrated Approach. New York: John Wiley & Sons, Inc. (pp. 287–301). [1] [10]
ESSAI: http://essai.nlr.nl/introduction.htm. [2]
EUROCONTROL. (2000). ESARR 3 – EUROCONTROL Safety Regulatory Requirement. Use of Safety Management Systems by ATM Service Providers. [17]
European Technology Platform on Industrial Safety (ETPIS) (2005). Safety for Sustainable European Industry Growth: Strategic Research Agenda. www.industrialsafety-tp.org accessed July 2010. [Epilogue]
Falzon, P. (2005). Ergonomics, knowledge development and the design of enabling environments. In Humanizing Work and Work Environment Conference. December 10–12, Guwahati, India. [3]
Federal Aviation Administration (FAA). (2009). Transcript of New York TRACON La Guardia Departure Air Traffic Controller communications. [2]
Feltovich, P.J., Spiro, R.J. & Coulson, R.L. (1989). The nature of conceptual understanding in biomedicine: The deep structure of complex ideas and the development of misconceptions. In D. Evans & V. Patel (eds), The Cognitive Sciences in Medicine. Cambridge MA: MIT Press (pp. 113–72). [10]
Feltovich, P.J., Spiro, R.J. & Coulson, R.L. (1997). Issues of expert flexibility in contexts characterized by complexity and change. In P.J. Feltovich, K.M. Ford, & R.R. Hoffman (eds), Expertise in Context: Human and Machine. Menlo Park, CA: AAAI/MIT Press (pp. 113–172). [10]
Ferguson, E. & Cox, T. (1993). Exploratory factor analysis: A users’ guide. International Journal of Selection and Assessment, 1(2), 84–94. [11]
Ferreira, P., Clarke, T., Wilson, J.R., Sharples, S. & Ryan, B. (2008). Resilience in Rail Engineering Work. In E. Hollnagel, F. Pieri & E. Rigaud (eds), Proceedings of the 3rd Resilience Engineering Symposium (October, 28–30, 2008 Antibes, France). Paris, France: Ecole des Mines de Paris. [11]
Financial Stability Board (April, 2009). Report of the Financial Stability Forum on Addressing Procyclicality in the Financial System. http://www.financialstabilityboard.org/publications/r_0904a.pdf, accessed February 2010. [13]
Financial Stability Forum (2008). FSF Working Group on Market and Institutional Resilience – Interim Report. February 2008. http://www.financialstabilityboard.org/publications/r_0802.htm, accessed February 2010. [13]
Financial Stability Forum (2008). Report of the Financial Stability Forum on Enhancing Market and Institutional Resilience. April 2008. http://www.financialstabilityboard.org/publications/r_0804.pdf, accessed February 2010. [13]
Flanagan, J.C. (1954). La technique de l’incident critique. Revue de Psychologie Appliquée, 4(3), 267–95. [3]
Fletcher, G., Flin, R., McGeorge, P., Glavin, R., Maran, N. & Patey R. (2004). Rating non-technical skills: Developing a behavioural marker system for use in anaesthesia. Cognition Technology and Work, 6, 165–71. [8]
Flin, R., Martin, L., Goeters, K., Hoermann, J., Amalberti, R., Valot, C. & Nijhuis, H. (2003). Development of the NOTECHS (Non-Technical Skills) system for assessing pilots’ CRM skills. Human Factors and Aerospace Safety, 3, 95–117. [8]
Folkard, S. & Åkerstedt, T. (2004). Trends in the risk of accidents and injuries and their implications for models of fatigue and performance. Aviation, Space and Environmental Medicine, 75(3, Suppl.): A161–7. [6]
Foushee, C.H., Lauber, J.K., Baetge, M.M. & Acomb, D.B. (1986). Crew Factors in flight operations. Part 3: The operational significance of exposure to short-haul air transport operations. Moffett Field, CA Ames Research Center, National Aeronautics and Space Administration: 67. [6]
Fowlkes, J., Dwyer, D., Oser, R., (1998). Event-based approach to training. International Journal of Aviation Psychology, 8, 209–22. [8]
Freer, D. (1994). ICAO at 50 years: Riding the flywheel of technology. ICAO Journal, 49(7), 9 19–32. [15]
Gaba, D. M. (2000). Structural and organizational issues in patient safety. A comparison of health care to other high-hazard industries. California Management Review, 43(1), 83–102. [12]
Gallati, R. (2003). Risk Management and Capital Adequacy. New York, NY: McGraw Hill. [13]
Gergen, K.J. (1999). An Invitation to Social Constructionism. London: UK: Sage Publications Ltd. [18]
Gilbert, N. & Conte, R. (1995). Artificial Societies: The Computer Simulation of Social Life. London, UCL Press [16].
Grote, G. (2004). Uncertainty management at core of the system design. Annual Reviews in Control, 28(2), 267–74. [12]
Grote, G. (2008). Rules management as source for loose coupling in high-risk systems. In E. Hollnagel, C.P. Nemeth & S.W.A. Dekker (eds), Remaining Sensitive to the Possibility of Failure, Resilience Engineering Perspectives, Volume 1. Farnham, UK: Ashgate (pp. 91–100). [12]
Guérin, F., Laville, A., Daniellou, F., Duraffourg, J. & Kerguelen, A. (1997). Comprendre le travail pour le transformer. La pratique de l’ergonomie. Lyon. ANACT [3]
Hale, A.R. (2009). Why safety performance indicators? Safety Science, 47(4), 479–80. [5]
Hale, A.R. & Swuste, P. (1998). Safety rules: procedural freedom or action constraint. Safety Science, 29, 163–77. [12]
Hauland, G., Serck-Hanssen, C. & Rolfsen, J. (2007). Exploring methodology for change processes: An aviation case of combined behaviour- and culture change to improve safety. In T. Aven and J.E Vinnem (eds), Risk Reliability and Societal Safety, Volume 2, 1665–1662. Taylor & Francis. [12]
Heath, R. (1998). Dealing with the complete crisis-the crisis management shell structure. Safety Science, 30(1–2), 139–50. [4]
Helmreich, R.L. & Merritt, A.C. (1998). Culture at Work in Aviation and Medicine. Aldershot, UK: Ashgate. [18]
Hendriksen, B. (2008). Feasibility of the Complexity Theory in Learning from Naval Disasters. Masters Thesis Faculty of Policy, Technology and Management. Delft University of Technology, [15]
Herrera, I.A., Norsdkag, A.O., Myhre, G. & Halvorsen, K. (2009). Aviation safety and maintenance under major organizational changes, investigating non-existing accidents. Accident Analysis and Prevention, 41(6), 1155–63. [14]
Hofstede, G. (2001). Culture’s Consequences: Comparing Values, Behaviors, Institutions, and Organizations Across Nations (2nd edition). California, USA: Sage Publications, Inc. [18]
Holling, C.S. (1973). Resilience and stability of ecological systems. Annual Review of Ecology and Systematics, 4, 1–23. [18]
Hollnagel, E. (1983). Human error. Position Paper for NATO Conference on Human Error. Bellagio, Italy. [18]
Hollnagel, E. (1993). Human Reliability Analysis: Context and Control. London: Academic Press. [Epilogue]
Hollnagel, E. (2002). Understanding accidents – from root causes to performance variability. In J.J Persensky, B. Halbert & H. Blackman (eds). Proceedings from IEEE 7th Conference on Human Factors and Power Plants. New century, New trends. 15–19 September 2002, Scottsdale. [12]
Hollnagel, E. (2004). Barrier and Accident Prevention. Aldershot, UK: Ashgate. [3] [12] [13] [17][18]
Hollnagel, E. (2007). Resilience Engineering: Why, what and how? In NoFS 2007 – Nordic Research Conference on Safety, 13–15 June 2007, Tampere, Finland. [10]
Hollnagel, E. (2008). From protection to resilience: Changing views on how to achieve safety. 8th International Symposium of the Australian Aviation Psychology Association. 8–11 April, Sydney, Australia.
Hollnagel, E. (2009a). Extending the scope of the human factor. In E. Hollnagel (ed.), Safer Complex Industrial Environments. Boca Raton, FL: CRC Press. (pp. 37–60). [Prologue]
Hollnagel, E. (2009b). The ETTO Principle: Efficiency-Thoroughness Trade-Off, Why Things That Go Right Sometimes Go Wrong. Farnham, UK: Ashgate. [10] [11] [12] [Epilogue]
Hollnagel, E., Nemeth, C.P. & Dekker, S.W.A. (2008). Remaining Sensitive to the Possibility of Failure. Aldershot, UK: Ashgate. [15] [Epilogue]
Hollnagel, E., Pruchnicki, S., Woltjer, R. & Etcher, S. (2008). A functional resonance accident analysis of Comair flight 5191. Paper presented at the 8th International Symposium of the Australian Aviation Psychology Association. Sydney, Australia. [13]
Hollnagel, E. & Sundström, G.A. (2006). States of resilience. In E. Hollnagel, D.D. Woods & N. Leveson (eds), Resilience Engineering: Concepts and Precepts. Aldershot, UK: Ashgate (pp. 339–344). [3]
Hollnagel, E. & Woods, D.D. (1983). Cognitive systems engineering. New wine in new bottles. International Journal of Man-Machine Studies, 18, 583–600. [18]
Hollnagel, E. & Woods, D.D. (2005). Joint Cognitive Systems: Foundations of Cognitive Systems Engineering. Boca Raton, FL: CRC Press. Taylor & Francis Group. [8]
Hollnagel, E. & Woods, D.D. (2006). Epilogue: Resilience Engineering precepts. In E. Hollnagel, D.D. Woods & N. Leveson (eds), Resilience Engineering: Concepts and Precepts. Aldershot, UK: Ashgate. [8]
Hollnagel, E., Woods, D.D. & Leveson N.G. (2006). Resilience Engineering: Concepts and Precepts. Aldershot, UK: Ashgate Publishing. [2] [6] [11] [17] [18]
Hoogendorp, G. (2007). The Bijlmermeer Aviation Disaster. Thesis Risk Management, Faculty Aerospace Engineering, Delft University of Technology. [15]
Hopkins, A. (2009a). Reply to comments. Safety Science, 47(4), 508–10. [5]
Hopkins, A. (2009b). Thinking about process safety indicators. Safety Science, 47(4), 460–5. [5]
House, R.J., Hanges, P.J., Javidan, M., Dorfman, P.W. & Gupta, V. (2004). Culture, Leadership, and Organizations: The GLOBE Study of 62 Societies. California, USA: Sage Publications, Inc. [18]
Houtman, H. (2008). Your Life Will Never be the Same After an Accident Has Happened. Presentation at School of Aviation, Lund University Sweden. [15]
Høyland, S. & Aase, K. (2009). Does change challenge safety? Complexity in the civil aviation transport system. In S. Martorell, et al. (eds), Safety, Reliability and Risk Analysis: Theory, Methods, and Applications. Boca Raton, FL: CRC Press (pp. 1385–93). [12]
Høyland, S., Aase, K., Pettersen K.A. & Tjørhom, B. (2008). Risk challenges and parallel change processes within the Norwegian transportation sector (in Norwegian). Report from University of Stavanger, No.14. [12]
Hubbard, D.W. (2009). The Failure of Risk Management. USA: John Wiley & Son Inc. [12]
Hutchins, E. (1995). Cognition in the Wild. Cambridge, MA: MIT Press. [8]
Hutchins, E., Holder, B.E. & Pérez, R.A. (2002). Culture and Flight Deck Operations. White paper for The Boeing Company. Retrieved July 2008 from http://hci.ucsd.edu/lab/hci_papers/EH2002-2.pdf. [18]
ICAO (2006). Safety Management Manual (Doc 9859, AN/460). Montreal, Canada: International Civil Aviation Organization. [Epilogue]
ICAO (2007). Air Traffic Management. Procedures for Air Navigation Services, DOC 4444 ATM/501, (15th Edition). ICAO. [8]
ICAO (2008). Fatigue Risk Management Systems, 9th Meeting of the Operations Panel (OPSP). Montréal. [6]
Jentsch, F. & Bowers, C.A. (1998). Evidence for the validity of low-fidelity simulations in air crew coordination research and training. International Journal of Aviation Psychology, 8, 243–60. [8]
Johansson, B. & Hollnagel, E. (2007). Pre-requisites for large scale coordination. Cognition, Technology & Work, 9, 5–13. [16]
Johnson, C.W. (2002). Reasons for the Failure of Incident Reporting in the Healthcare and Rail Industries. Paper presented at the Components of System Safety: Proceedings of the 10th Safety-Critical Systems Symposium, Southampton, UK. [17]
Johnson, C.W. (2003). Failure in Safety-Critical Systems: A Handbook of Incident and Accident Reporting. Glasgow, UK: University of Glasgow Press. [17]
Jones, A. & Wreathall, J. (2000). Leading indicators of human performance – the story so far. 6th Annual Human Performance/Root Cause/Trending Conference, Philadelphia, PA. [5]
Klaene, B.J. & Sanders, R.E. (2008). Structural Firefighting: Strategies and Tactics (2nd ed.). Sudbury, MA: Jones & Bartlett Publishers. [10]
Klein, G.A. & Armstrong, A.A. (2005). Critical decision method. In N. Stanton, A. Hedge, K. Brookhuis, E. Salas & H.W. Hendrick (eds), Handbook on Human Factors and Ergonomics Methods. Boca Raton, FL: CRC Press (pp. 35.31–35.38). [3]
Klein, G.A. (1998). Sources of Power: How People Make Decisions. Cambridge, MA: MIT Press. [8]
Klein, G.A., Feltovich, P.J., Bradshaw, J. & Woods, D.D. (2005). Common ground and coordination in joint activity. In W. Rouse & K. Boff (eds), Organizational Simulation. Chichester, UK: John Wiley & Sons. (pp. 139–84). [4]
Klein, G. A., Pliske, R., Crandall, B. & Woods, D. D. (2005). Problem detection. Cognition, Technology & Work, 7, 1, 14–28. [12]
Kline, P. (1994). An Easy Guide to Factor Analysis. London, UK: Routledge. [11]
Kluger, M.T., Tham, E.J., Coleman, N.A., Runciman, W.B. & Bullock, M.F. (2000). Inadequate pre-operative evaluation and preparation: a review of 197 reports from the Australian Incident Monitoring Study. Anaesthesia, 55(12), 1173–78. [16]
Kontogiannis, T. (1999). Training effective human performance in the managing of stressful emergencies. Cognition Technology and Work, 1, 7–24. [8]
Krauss, R.M. & Fussel, S.R. (1990). Mutual Knowledge and Communicative Effectiveness. In J. Galegher et al. (eds), Intellectual Teamwork: Social and Technological Foundations of Cooperative Work. Hillsdale: IEA Lawrence Erlbaum Associates (pp. 111–45). [16]
Lagadec, P. (2004). Understanding the French 2003 heat wave experience: Beyond the heat, a multi-layered challenge. Journal of Contingencies and Crisis Management, 12(4), 160–9. [16]
Lamond, N. & Dawson, D. (1999). Quantifying the performance impairment associated with fatigue. Journal of Sleep Research, 8(4), 255–62. [6]
Lanir, Z. (1986). Fundamental Surprise. Eugene, Oregon: Decision Research. [1] [2]
Lave, J. & Wenger, E. (1991). Situated Learning. Legitimate Peripheral Participation. Cambridge, MA: Cambridge University Press. [17]
Le Coze, J.-C. (2005). Are organisations too complex to be integrated in technical risk assessment and current safety auditing? Safety Science, 43, 613–38. [18]
Leape, L.L., Brennan, T.A., Laird, N., Lawthers, A.G., Localio, A.R., Barnes, B.A., et al. (1991). The nature of adverse events in hospitalized patients. Results of the Harvard Medical Practice Study II, 324, (pp. 377–84). [17]
Leplat, J. (1988). Task complexity in work situations. In L.P. Goodstein, H.B. Andersen & S.E. Olsen (eds), Task, Errors and Mental Models. London, UK: Taylor and Francis (pp. 105–115). [3]
Leplat, J. (1991). Organization of Activity in Collective tasks. In J. Rasmussen, B. Brehmer, & J. Leplat (eds), Distributed Decision Making: Cognitive Models for Cooperative Work. New York: J. Wiley & Sons Ltd (pp. 51–71). [16]
Leveson, N.G. (2002). Systems Safety Engineering: Back to the Future. http://sunnyday.mit.edu/book2.pdf, accessed September 2003. [18]
Lewis, D. (1969). Convention: A Philosophical Study. Cambridge, MA: Harvard University Press. [16]
Lumpé, M.-P. (2008). Leadership and Organization in the Aviation Industry. Aldershot, UK: Ashgate. [18]
Lundberg, J., Rollenhagen, C. & Hollnagel, E. (2009). What-you-look-for-is-what-you-find – The consequences of underlying accident models in eight accident investigation manuals. Safety Science, 47(10), 1297–1311. [14] [18] [Epilogue]
Malakis, S., Kontogiannis, T. & Kirwan, B. (2010a). Managing emergencies and abnormal situations in air traffic control (part I): Taskwork strategies. Applied Ergonomics, doi:10.1016/j.apergo.2009.12.019. Published online. [8]
Malakis, S., Kontogiannis, T. & Kirwan, B. (2010b). Managing emergencies and abnormal situations in air traffic control (part II): Teamwork strategies. Applied Ergonomics, doi:10.1016/j.apergo.2009.12.018. Published online. [8]
Manganelli, S. & Engle, R.F. (2001). Value at Risk in Finance. Working Paper No 75, European Central Bank (ECB) Working Paper Series, August. [13]
Marais, K., Dulac, L. & Leveson, N.G. (2004). Beyond Normal Accidents and High Reliability Organizations: The Need for an Alternative Approach to Safety in Complex Systems, in proceedings of the MIT ESD Symposium (online), retrieved January 2007 from http://sunnyday.mit.edu/papers/hro.pdf. [18]
Mataric, M.J. (1992). Minimizing complexity in controlling a mobile robot population. In Proceedings of the 1992 International Conference on Robotics and Automation, Los Alamitos: IEEE Computer Society Press. [16]
McDonald, N. (2006). Organizational Resilience and Industrial Risk. In E. Hollnagel, D.D. Woods. and N. Leveson (eds), Resilience Engineering Concepts and Precepts. Farnham, UK: Ashgate (pp. 155–80). [12]
Mendonça, D. (2008). Measures of Resilient Performance. In C. Nemeth, C.E. Hollnagel & S.W.A. Dekker, (eds), Resilience Engineering Perspectives Vol.1: Remaining Sensitive to the Possibility of Failure. Aldershot, UK: Ashgate (pp. 29–38). [11]
Merton, R.C. (1995). A functional perspective of financial intermediation. Financial Management, 24(2), 21–41. [13]
Merton, R.C. & Bodie, Z. (1995). A conceptual framework for analysing the financial environment. In D.B. Crane, K.A. Froot, S.P. Mason, A.F. Perold & R.C. Merton (eds), The Global Financial System. Cambridge, MA: Harvard Business School Press (pp. 3–31). [13]
Merton, R.C. & Bodie, Z. (2005). Design of financial systems: Towards a synthesis of function and structure. Journal of Investment Management, 3(1), 1–23. [13]
Miller, A. & Xiao, Y. (2007). Multi-level strategies to achieve resilience for an organisation operating at capacity: a case study at a trauma centre. Cognition, Technology & Work, 9, 51–66. [3]
Ministerie van Verkeer en Waterstaat (Ministry of Transportation), (2008). Ontwikkeling van Schiphol en haar omgeving op middellange termijn. Alderstafel, Ministerie van Verkeer en Waterstaat. [15]
Mintzberg, H. (1996). The Rise and Fall of Strategic Planning. New York, USA: Free Press. [1] [2]
Mollo, V. & Falzon, P. (2004). Auto- and allo-confrontation as tools for reflective activities. Applied Ergonomics, 35(6), 531–40. [3]
Morel, G., Amalberti, R. & Chauvin, C. (2008). Articulating the differences between safety and resilience: The decision-making process of professional sea-fishing skippers. Human Factors: The Journal of the Human Factors and Ergonomics Society, 50(1), 1–16. [12]
NASB, (1994). Aircraft Accident report 92-11. El-Al Flight 1862. Netherlands Aviation Safety Board. [15]
National Transportation Safety Board (1994). Uncontrolled Collision with Terrain. American International Airways Flight 808. NTSB/AAR-94/04, National Transportation Board, Washington DC. [6]
National Transportation Safety Board (NTSB) (1999). Evaluation of U.S. Department of Transportation Efforts in the 1990s to Address Operator Fatigue. NTSB/SR-99/01. National Transportation Safety Board, Washington D.C. [6]
Neri, D.F. & Nunneley, S.A. (2004). Proceedings of the fatigue and performance modeling workshop, June 13–14 2002, Seattle, WA. Aviation, Space and Environmental Medicine, 75(3, Section II), A1–A199. [6]
Norman, D.A. (1987). The Psychology of Everyday Things. New York: Basic Books. [16]
Norman, D.A. (1990). The ‘problem’ of automation: Inappropriate feedback and interaction, not ‘over-automation.’ Philosophical Transactions of the Royal Society of London, B, 327, 585–93. [10]
Nyssen, A.S. (2008). Coordination in hospitals: organized or emergent process? Towards the idea of resilience as the agents,’ groups,’ systems’ capacity to project themselves into future. In E. Hollnagel, F. Pieri & E. Rigaud (eds), 3rd International Symposium on Resilience Engineering. October 28–30, France: Antibes – Juan-les-Pins. [3]
Nyssen, A.S. & Javaux, D. (1996). Analysis of synchronization constraints and associated errors in collective work environments. Ergonomics, 39, 1249–64. [16]
Ombredane, A. & Faverge, J.-M. (1955). L’Analyse du Travail. Paris: PUF. [3]
Ostrom, E. (1990). Governing the Commons: The Evolution of Institutions for Collective Action. New York: Cambridge University Press, 1990. [10]
Ostrom, E. (1999). Coping with tragedies of the commons. Annual Review of Political Science, 2, 493–535. [10]
Pariès, J. (1996). Evolution of the aviation safety paradigm: Towards systemic causality and proactive actions. In B. Hayward & A. Lowe (eds.) Proceedings of the Australian Aviation Psychology Symposium 1995: Applied Aviation Psychology: Achievement, Change and Challenge. Manly, Australia (pp. 39–49). [18]
Pariès, J. (1999). Shift in Aviation Safety Paradigm is Key to Future Success in Reducing Air Accidents. Presentation to the ICAO Regional Symposium on Human Factors and Aviation Safety, Santiago du Chili. ICAO Journal, 54(5). Montréal, Canada. [18]
Pariès, J. & Amalberti, R. (2000). Aviation safety paradigms and training implications. In N.S. Sarter & R. Amalberti (eds), Cognitive Engineering in the Aviation Domain. New Jersey: Lawrence Erbaum Associates (pp. 253–86). [1] [8]
Parliamentary Inquiry, (1999). Een beladen vlucht. Enquetecommissie Vliegramp Bijlmermeer. [15]
Patterson, E.S. & Woods, D.D. (2001). Shift changes, updates, and the on-call model in space shuttle mission control. Computer supported cooperative work. The Journal of Collaborative Computing, 10, 3–4, 317–46. [12]
Pavard, B. (1994). Système Coopératifs: de la Modélisation à la Coopération. Toulouse: Octares. [16]
Perrenoud, P. (1999). Gestion de l’imprévu, analyse de l’action et construction de compétences. Education Permanente, 140(3), 123–44. [3]
Perrow, C. (1984). Normal Accidents: Living with High-Risk Technologies. New York, USA: Basic books. [10] [12] [18]
Pettersen, K.A. (2006). Operational problem solving in aviation - the role of social and organisational factors in safety. In G. Soares & Sio (eds), Safety and Reliability for Managing Risk. London, Taylor & Francis Group. [12]
Pettersen, K.A. (2008). The Social Production of Safety. Theorising the Human Role in Aircraft Line Maintenance. PhD thesis, University of Stavanger, No.59, December 2008 (pp. 407–412). [12]
Pettersen, K.A. & Aase, K. (2008). Explaining safe work practices in aviation line maintenance. Safety Science, 42, 10–19. [12]
Piaget, J. (1967). Biologie et Connaissance. Paris: Gallimard. [1]
Piaget, J. (1967/1992). Biologie et Connaissance. Lausanne: Delachaux et Niestlé. (Première édition: 1967, Paris: Gallimard). [16]
Potter, J. & Wetherell, M. (1987). Discourse and Social Psychology: Beyond Attitudes and Behaviour. Thousand Oaks, CA: Sage Publications. [18]
PRC, (2006). Evaluatie Functioneren VACS. Eindrapport. Policy Research Corporation, Antwerp, Belgium. [15]
RAND Europe, (1993). Airport Growth and Safety. A Study of the External Risks of Schiphol Airport and Possible Safety-Enhancement measures. EAC Rand, Delft, the Netherlands. [15]
Rasmussen, J. (1997). Risk management in a dynamic society: a modelling problem. Safety Science, 27(2–3), 183–213. [3] [12] [13]
Reason, J.T. (1990). Human Error. Cambridge, UK: Cambridge University Press. [12] [17]
Reason, J.T. (1997). Managing the Risks of Organizational Accidents. Aldershot, UK: Ashgate. [17]
Reason, J.T. (1998). Managing the Risks of Organizational Accidents. Brookfield, VT: Ashgate. [5]
Reason, J.T. (2009). The Human Contribution. Aldershot, UK: Ashgate. [7]
Reason, J.T. & Hobbs, A. (2003). Managing Maintenance Error. Aldershot, UK: Ashgate. [7]
Reynolds, C.W. (1987). Flocks, herds, and schools: A distributed behavioral models. Computer Graphics, 21, 25–34. [16]
Rochlin, G.I. (1999). Safe operation as a social construct. Ergonomics, 42(11), 1549–60. [10]
Roelen, A. (2008). Causal Risk Models of Air Transport. Comparison of user Needs and Model capabilities. Doctoral Thesis. Delft University of Technology. [15]
Rosenthal, U. (1999). International Conference on the Future of European Crisis Management. The Hague, November 7–9. Challenges of crisis management in Europe. [15]
Rudolph, J.W., Morrison, J.B. & Carroll, J.S. (2009). The dynamics of action-oriented problem solving: Linking interpretation and choice. Academy of Management Review, 34(4), 733–56. [10]
Salas, E., Bowers, C.A. & Rhodenizer, L. (1998). It is not how much you have but how you use it: Toward a rational use of simulation to support aviation training. International Journal of Aviation Psychology, 8, 97–208. [8]
Salas, E., Sims, D.E. & Burke, C.S. (2005). Is there a ‘big five’ in teamwork? Small Group Research, 36, 555–99. [8]
Savoyant, A. & Leplat, J. (1983). Statut et fonction des communications dans l’activité des équipes de travail (Statut and function of the communications in the activities of the workteams). Psychol. fr., 28(3), 247–53. [16]
Scheffer, M., Bascompte, J., Brock, W.A., Brovkin, V., Carpenter, S.R., Dakos, V., Held, H., van Nes, E.H., Rietkerk, M. & Sugihara, G. (2009). Early-warning signals for critical transitions. Nature, 461(7260), 53–59. [10]
Schmidt, R.H. & Tyrell, M (2004). What constitutes a financial system in general and the German financial system in particular? In J.P. Krahnen & R.H. Schmidt (eds), The German Financial System. Oxford, UK: Oxford University Press (pp. 19–67). [13]
Schwarz, N. (2007). Attitude construction: Evaluation in context. Social Cognition, 25, 638–56. [18]
Shattuck, L.G. & Woods, D.D. (1997). Communication of intent in distributed supervisory control system. In Proceedings of the 41st Annual Meeting of the Human Factors and Ergonomics Society, September 1997. [12]
Signal, T.L., Ratieta, D. & Gander, P.H. (2008). Flight crew fatigue management in a more flexible regulatory environment: an overview of the New Zealand aviation industry. Chronobiology International, 25(2–3), 373–88. [6]
Simon, H. (1982). Models of Bounded Rationality: Behavioral Economics and Business Organization (Vols 1 & 2). Cambridge, MA: The MIT Press. [2]
Simpson, R. (1996). Neither clear nor present: The social construction of safety and danger. Sociological Forum, 11(3), 549–62. [18]
Sklet, S. (2002). Methods for Accident Investigation. Department of Production and Quality Engineering. NTNU Norwegian University of Science and technology. [15]
Snook, S.A. (2000). Friendly Fire. New Jersey: Princeton University Press. [12]
Spencer, M.B., Robertson, K.A., Cabon, P., Mollard, R., Åkerstedt, T., Guillberg, M., Simon, R., Valk, P., Samel, A. & Gundel, A. (2002). Modelling of Aircrew Alertness in Future Ultra Long-Range Schedules, Based on a City Pair. QinetiQ Report No QINETIQ/CHS/P&D/CR020047/1.1, February 2002. [6]
Spencer, M.B. & Robertson, K.A. (2007). The application of an alertness model to ultra-long-range civil air operations. Somnologie, 11, 159–66. [6]
Stanton, N.A., Salmon, P., Walker, G.H., Baber, C. & Jenkins, D.P. (2005). Human Factors Methods – A Practical Guide for Engineering and Design. Aldershot, UK: Ashgate. [3]
Steele, K.R. & Pariès, J. (2007). Barriers to safety innovation: Experiences applying the ‘Safety Model Based Analysis’ approach in European aviation. Proceedings of the 14th International Symposium on Aviation Psychology. Ohio, USA. [18]
Steenhuisen, B. & Van Eeten, M. (2008). Invisible trade-offs of public values: Inside Dutch railways. Public Money & Management, June 2008, 147–52. [15]
Stewart, S. (2007). An integrated system for managing fatigue risk within a low cost carrier. In Proceedings of the International Aviation Safety Seminar, Flight Safety Foundation, October 23–26, Paris, France. [6]
Stoop, J. (1990). Safety and the Design Process. Doctoral Thesis. Delft University of Technology, April 1990. [15]
Stoop, J. (1997). Airport growth and safety: improvement of the external and internal risks of airports. International Aviation Safety Conference, IASC-79, August 27–29. The Netherlands: Rotterdam Airport. [15]
Stoop, J. (2003). Critical size events: a new tool for crisis management resource allocation? Safety Science, 41, 465–80. [15]
Stoop, J. (2009). Before, during and after the event; the Boeing 747 case study. 36th ESReDA Lessons Learned from Accident Investigations, 2–3 June 2009, Seminar Coimbra, Portugal. [15]
Stoop, J. & Dekker, S.W.A. (2007). Are safety investigates proactive? 33rd ESReDA Seminar Future Challenges of Accident Investigation. Ispra, Italy, November 13–14. [15]
Stoop, J., Baggen, J.H., De Kroes, J.L., Vleugel, J.M. & Vrancken, J.L.M. (2007). HSL safety signalling system ERTMS. An independent investigation into the usefulness of adapting the ERTMS safety signalling system. Commissioned by the Research and Verification Department of the Dutch Parliament. Delft University of Technology, 23 May 2007 (In Dutch with English summary). [15]
Strohschneider, S. & Gerdes, J. (2004). MS: ANTWERPEN: Emergency management training for low-risk environments. Simulation & Gaming, 35. [4]
Sundström, G.A. & Hollnagel, E. (2006). Learning how to create resilience in business systems. In E. Hollnagel, D.D. Woods & N. Leveson (eds), Resilience Engineering. Concepts and Precepts. Aldershot, UK: Ashgate. [13]
Tabachnick, B. & Fidell, L. (2007). Using Multivariate Statistics (5th Edition). Boston, USA: Allyn and Bacon. [11]
Thomas, M. J. W., Petrilli, R.M., Lamond, N., Dawson, D. & Roach, G.D. (2006). Australian Long Haul Fatigue Study. In Enhancing Safety Worldwide: Proceedings of the 59th Annual IASS. Alexandria, Virginia, U.S.: Flight Safety Foundation. [6]
Tjørhom, B. & Aase, K. (2007). Safety and changes in the Norwegian aviation transport system – What is the role of the legislator and the regulator? In T. Aven and J.E. Vinnem. (eds), Risk Reliability and Societal Safety. Volume 3, 2143–49. Taylor & Francis. [12]
Tjørhom, B. & Aase, K. (2010). The role of complexity in accident investigation practice. International Journal of Emergency Management, 7(2), 167–189. [12]
Touchman, B.W. (1985). The March of Folly: From Troy to Vietnam. New York: Ballantine Books. [14]
Turner, B. (1978). Man-Made Disasters. London: Wykeham. [18]
Turoff, M. & Linstone, H.A. (eds), (1975). The Delphi Method – Techniques and Applications. (www.is.njit.edu/pubs/delphibook/) London, UK: Addison-Wesley. [11]
Uhr, C. (2009). Multi-organizational Emergency Response Management – A Framework for Further Development. Department of Fire Safety Engineering and Systems Safety. Lund, Lund University. Doctoral thesis. [4]
Van Binsbergen, A., Van Eeghen, M., Polinder, B., Stoop, J., Wiegmans, B. & Zigterman, L. (2008). Quick-scan Double Rail. TRAIL Research School, Delft University of Technology, June 2008. [15]
Van Dam, S., Mulder, M. & Van Paassen, M.M. (2008). Ecological interface design of a tactical airborne separation assistance tool. Journal of IEEE Transactions on Systems, Man, and Cybernetics, 38(6), 1221–33. [15]
Van der Shaaf, T.W., Lucas, D.A. & Hale, A.R. (1991). Near Miss Reporting as a Safety Tool. Oxford, UK: Butterworth-Heinemann. [17]
Van Dongen, H.A., Maislin, G., Mullington, J. & Dinges, D.F. (2003). The cumulative cost of additional wakefulness: dose-response effects on neurobehavioral functions and sleep physiology from chronic sleep restriction and total sleep deprivation. Sleep, 26, 117–26. [6]
Van Eijndhoven, J. (2008). Increasing flexibility by combining business processes with business rules. M.Sc. Thesis Business Information Technology. Enschede, The Netherlands: TNO-ICT. [15]
Vaughan, D (2006). The social shaping of commission reports. Sociological Forum, 21, 2, 291–306. [12]
Vaughan, D. (1996). The Challenger Launch Decision: Risky Technology, Culture, and Deviance at NASA. Chicago: University of Chicago Press. [12]
Vincent, C.A. (2006). Patient Safety. Amsterdam, The Netherlands: Churchill Livingstone (Elsevier). [17]
Von Bertalanffy, L. (1975). Perspectives on General Systems Theory. New York: George Braziller. [13]
Wears, R.L. & Woods, D.D. (2007). Always adapting. Annals of Emergency Medicine, 50(5), 517–19. [10]
Wears, R.L., Perry, S. & McFauls, A. (2006). ‘Free fall’ – A case study of resilience, its degradation, and recovery in an emergency department. In E. Hollnagel & E. Rigaud (eds), 2nd International Symposium on Resilience Engineering. 8–10 November, France, Juan-les-Pins. [3]
Wears, R.L., Perry, S., Anders, S. & Woods, D.. (2008). Resilience in the emergency department. In E. Hollnagel, C. Nemeth & S.W.A. Dekker (eds), Resilience Engineering Perspectives: Remaining Sensitive to the Possibility of Failure (Vol. 1, pp. 193–210). Aldershot, UK: Ashgate. [3]
Weick, K. (1993). Collapse of sensemaking in organizations: The Mann Gulch Disaster. Administrative Science Quarterly, 38, 628–52. [2] [3]
Weick, K. & Sutcliffe, K. (2001). Managing the Unexpected. San-Francisco: John Wiley & Sons, Inc. [16]
Westrum, R. (1993). Cultures with requisite imagination In J.A. Wise, V.D. Hopkin & P. Stager (eds), Verification and Validation of Complex Systems: Human Factor Issues. New York, NY: Springer-Verlag. [17]
Westrum, R. (1999). Faint hearts and faint signals – how organizations manage signs of trouble. 1999 Workshop of the Center for Human Performance in Complex Systems, Madison, WI, University of Wisconsin. [5]
Westrum, R. (2006). A typology of resilience situations. In E. Hollnagel, D.D. Woods & N.G. Leveson (eds), Resilience Engineering: Concepts and Precepts. Aldershot, UK: Ashgate (pp. 55–65). [Prologue] [1] [2] [3] [13]
Wilson, K.A., Salas, E., Priest, H.A. & Andrews, D. (2007). Errors in the heat of battle: Taking a closer look at shared cognition breakdowns through teamwork. Human Factors, 49, 243–56. [8]
Woods, D.D. (2004). Creating Foresight: Lessons for enhancing resilience from Columbia. Retrieved January 17th, 2006 from http://csel.eng.ohio-state.edu/woods/space/Create%20foresight%20Col-draft.pdf. [18]
Woods, D.D. (2005). Creating foresight: Lessons for resilience from Columbia. In M. Farjoun and W.H. Starbuck (eds), Organization at the Limit: NASA and the Columbia Disaster. Hoboken, NJ: Blackwell (pp. 289–308).[10] [12]
Woods, D.D. (2006a). Essential characteristics of resilience. In E. Hollnagel, D.D. Woods, N.G. Leveson (eds), Resilience Engineering: Concepts and Precepts. Aldershot, UK: Ashgate (pp. 21–33). [1] [2] [3] [10] [11] [12] [17]
Woods, D.D. (2006b). How to design a safety organization: Test case for resilience engineering. In E. Hollnagel, D.D. Woods and N. Leveson (eds), Resilience Engineering Concepts and Precepts. Farnham, UK: Ashgate (pp. 315–24). [12]
Woods, D.D. (2009a). Escaping failures of foresight. Safety Science, 47(4), 498–501. [10]
Woods, D.D. (2009b). Fundamentals to engineer resilient systems: How human adaptive systems fail and the quest for polycentric control architectures. Keynote presentation, 2nd International Symposium on Resilient Control Systems, Idaho Falls, ID, August 11–13 2009 (https://secure.inl.gov/isrcs2009/default.aspx accessed September 8, 2009). [10]
Woods, D.D. & Cook, R.I. (2002). Nine steps to move forward from error. Cognition, Technology, and Work, 4(2), 137–44. [14]
Woods, D.D. & Cook, R.I. (2006). Incidents – markers of resilience or brittleness? In E. Hollnagel, D.D. Woods & N. Leveson (eds), Resilience Engineering: Concepts and Precepts. Aldershot, UK: Ashgate (pp. 69–76). [3] [10]
Woods, D.D., Dekker, S.W.A., Cook, R.I., Johannesen, L.L. & Sarter, N.B. (2010). Behind Human Error (2nd Edition). Farnham, UK: Ashgate. [10]
Woods, D.D. & Hollnagel, E. (2006). Joint Cognitive Systems: Patterns in Cognitive Systems Engineering. Boca Raton, FL: CRC Press. Taylor & Francis Group. [8] [10]
Woods, D.D., Johannesen, L.J., Cook, R.I. & Sarter, N.B. (1994). Behind Human Error: Cognitive Systems, Computers, and Hindsight. Wright-Patterson Air Force Base, OH: Crew Systems Ergonomics Information Analysis Center. [8] [12]
Woods, D.D. & Patterson, E.S. (2000). How unexpected events produce an escalation of cognitive and coordinative demands. In P.A. Hancock and P. Desmond (eds), Stress, Workload and Fatigue. Hillsdale NJ: Lawrence Erlbaum (pp. 290–302). [4]
Woods, D.D., Patterson, E.S. & Cook, R.I. (2007). Behind human error: Taming complexity to improve patient safety. In P. Carayon. (ed.), Handbook of Human Factors and Ergonomics in Health Care and Patient Safety. Lawrence Erlbaum Associates. New Jersey: Mahwah. [8]
Woods, D.D., Patterson, E.S. & Roth, E.M. (2002). Can we ever escape from data overload? A cognitive systems diagnosis. Cognition, Technology & Work, 14, 22–36. [4]
Woods, D.D. & Sarter, N.B. (2000). Learning from automation surprises and ‘going sour’ accidents. In N. Sarter & R. Amalberti (eds), Cognitive Engineering in the Aviation Domain. Hillsdale NJ: Erlbaum (pp. 327–54). [10 [14]
Woods, D.D. & Shattuck, L.G. (2000). Distant supervision – Local action given the potential for surprise. Cognition, Technology & Work, 2, 242–45. [10] [12]
Woods, D.D. & Wreathall, J. (2008). Stress-strain plots as a basis for assessing system resilience. In E. Hollnagel, C. Nemeth & S.W.A. Dekker (Eds.) Remaining Sensitive to the Possibility of Failure. Aldershot, UK: Ashgate. (pp. 143–158). [7] [3] [10]
Wreathall, J. (2006). Properties of resilient organizations: An initial view. In Hollnagel, E., Woods, D. D., Leveson, N. (eds), Resilience Engineering: Concepts and Precepts. Aldershot, UK: Ashgate. (pp. 275–85) [11] [5]
Wreathall, J. (2009). Leading? Lagging? Whatever! Safety Science, 47(4), 493–94. [5]
Wreathall, J. & Jones, A. (2000). Leading indicators of human performance – the story so sar. 6th Annual Human Performance/Root Cause/Trending Conference, Philadelphia, PA. [5]
Wreathall, J. & Merritt, A.C. (2003). Managing Human Performance in the Modern World: Developments in the US Nuclear Industry. In Edkins, G. & Pfister, P. (eds), Innovation and Consolidation in Aviation. Aldershot, UK: Ashgate. (pp. 159–70). [7]
Zaller, J. & Feldman, S. (1992). A simple theory of survey response: Answering questions versus revealing preferences. American Journal of Political Science, 36, 579–616. [18]
Zhou, T., Carlson, J.M. & Doyle, J. (2005). Evolutionary dynamics and highly optimized tolerance. Journal of Theoretical Biology, 236, 438–47. [10]
Zimmermann, K. (2009). Unpublished interview data. [18]