Is this system tightly coupled AND interactively complex (normal accidents quadrant)? - If so, cascading failure is structurally inevitable. Design for containment, not prevention. - If not, specific failure prevention may be sufficient.