Preventing recurrence of industrial control system accident using assurance case