指南 · 安全
基础设施安全与认证
认证不是最后才贴上的标签。它是一条证据路径，连接了整个生命周期的要求、风险、测试、责任和运营决策。
要求和危险日志
Each safety-critical function needs a verifiable requirement, an associated risk, a mitigation and a test. The hazard log must remain current from design through operations.
独立保证
Internal testing does not replace independent assurance. The roles of designer, builder, operator and assessor must be explicit, as must acceptance criteria.
运营与变更
Procedures, training, maintenance, incident management and change control complete safety. A certifiable system must also show how it will remain safe after opening.