At that point the system will still be subject to two sets of risks: a) residual risks deriving from design mitigated hazards (which will depend on the level of mitigation selected by the design team) and b) risks linked to hazards such as union/personnel unrest, public acceptance issues, etc., which may be independent from design mitigation, as based on public/workforce perceptions.