“There's never an easy answer to the question "Should we do more testing?" because information can guide risk reduction, but doesn't necessarily do so.”