Sometimes a mitigation doesn’t make the product safer overall, it just transfers the risk to a different user group, workflow, or failure mode. For ex., adding too many alarms on a medical device can reduce one specific hazard, but it…   Read more»