Design prevention, detection, and response measures for high-priority failure modes. Produces actionable countermeasure specifications.