Towards System Safety