Operator Error vs. Design Failure