The defense-in-depth engineering concept (multiple independent levels of defense to prevent hazards to the population and to the environment) was systematically applied also to (internal and external) extreme incident scenarios.