Quantifying safety with a QRA: To agree on the results, the method should be explicit