The whole notion of priorities in safety vs. revenue never works for me. (And you can s/safety/security/ or s/safety/privacy/.) In a very limited scope, it cou

The whole notion of priorities in safety vs. revenue never works for me. (And you can s/safety/security/ or s/safety/privacy/.) In a very limited scope, it could work. If a team has a sprint or something, they can work on the safety tasks first. But that's not really how a company operates. You have a whole mess of tradeoffs and often the costs and benefits can't be clearly quantified. What they do is work out an operational model, some people work exclusively on examining safety, and they put out guidelines to management and employees who then have to practice safety themselves. Generally, you only know if it works after the fact by examining the results, maybe even tally up the costs of lawsuits or bad PR. But it's meaningless to say "safety is job #1" because you're doing all the jobs 2 and on or you're going out of business. And that means all of them; no one says "taking out the trash is job #1" or "sending out W2s is job #1" but a company grinds to a halt pretty quickly if they aren't done.