A while ago I posted an article about the PRISMA incident analysis model. Related to this subject is the concept of the “Swiss Cheese Model”. This model shows why things can still go wrong when there are multiple layers of protection in place.
In every layer there are holes, and sometimes these holes line up – resulting in an incident. Also see the Wikipedia Swiss Cheese Model page.