These designs are subject to stringent internal and external review requirements to ensure that all possible risks have been accounted for and appropriate mitigation measures are planned, implemented and monitored.