FAULT-TREE ANALYSIS