Principle: Fault tolerance
Layered approach to achieve fault tolerance
A failure of a lower level component may/will manifest itself as a fault to a higher layer
In some cases an error at a lower layer can be completely contained or masked
When this is not possible, the layer attempts to reduce the severity of the error and manifest itself through a more benign failure