A Design-for-safety Methodology for Large Engineering Systems · Study