Modelling Risk Control Measures in Railways: Analysing how designers and operators organise safe rail traffic