Once the risk is understood, then steps can be taken to mitigate that threat. This approach is repeated right up until all hazards are sufficiently mitigated.” Holley notes the necessity of “periodic functional testing from the safety control system. This testing will help detect faults and failures in advance of a vital need is put on the s