Resilience engineering has consistently argued that safety is more than the absence of failures. This book presents a detailed and tested method that can be used to model how complex and dynamic socio-technical systems work, and understand both why things sometimes go wrong but also why they normally succeed.