Safety assessment of computerized control and protection systems. (IAEA, 1992)