Modelling for Systems with Holistic Fault Tolerance