the Safety authority continues to be responsible for clearly articulating control objectives within the organization’s policies and standards, as well as articulating risk appetite suited to context. Prescriptive, one-size-fits-all, lowest common denominator approaches should be avoided, allowing the value stream aligned Safety team to “right-size” the controls suited to context (minimal viable compliance [MVC]).
