On the causation analysis for hazards involved in the engine room fire-fighting system by integrating STPA and BN · Study