There is a thread here: Nancy Leveson Hazard Analysis - but I didn’t make much progress understanding till I read the book.