The principled design of computer system safety analyses. - David John Pumfrey (1999)

The HEAT/ACT Preliminary Safety Case: A case study in the use of Goal Structuring Notation. - Paul Chinneck; David John Pumfrey; John A. McDermid (SCS, 2004)