Risk controls should be kept in their design when it effectively mitigates a risk. When a mitigation effort lowers the initial risk but introduces new issues that are even worse, such as more components that could malfunction, I believe that…   Read more»