ISO 26262: Better be safe with modelling and simulation on system-level