Nancy Leveson

Software−related accidents are usually caused by flawed requirements.