The authors describe a method for using a simulated scenario to identify latent failures. Reviewing videotape of the simulation revealed vulnerabilities in the system even though regulations were met.