After an occurrence, some operators ‘fix’ what they see as the most obvious cause of a failure. And they’re perplexed when the failure happens again, because they ‘fixed’ it, didn’t they? But the real cause could be buried deep inside the operation, ready to trigger another unpleasant surprise.