Critical Systems : Formal Methods and Automated Verification : Joint 21st International Workshop on Formal Methods for Industrial Critical Systems and16th International Workshop on Automated Verification of Critical Systems, FMICS-AVoCS 2016, Pisa, Italy, September 26-28, 2016 : proceedings