If you as an individual are taking on that level of personal responsibility, your organization is broken. Part of the regulatory process is to demonstrate suff

If you as an individual are taking on that level of personal responsibility, your organization is broken. Part of the regulatory process is to demonstrate sufficient levels of resilience in both the systems produced and the development process used to produce them. It should be a really boring process with a lot of crosschecks. You should be sleeping well knowing that your work is being reviewed and tested and attacked by other people. (Reality is often different, of course. Just don't try to be the hero.)