Low probability — high consequence accidents: Application of systems theory for preventing hazardous failures