The author contends that designers of systems of care can make them safer by attending to three tasks: designing the system to prevent errors; designing procedures to make errors visible when they do occur so that they may be intercepted; and designing procedures for mitigating the adverse effects of errors when they are not detected and intercepted.