This was based on a review of historical incident data; project risk registers; incidents with significant potential consequences; significant incident reports and the results of safety management system audits.