Operational failure models