ABSTRACT
Earlier chapters have shown that much complication in plant design is the result of adding protective equipment to control risk. I have tried to show that in many cases we can change the design, avoid the risk, and end up with a simpler plant. Another way of simplifying the design is to add less protective equipment and accept a higher degree of risk. Do we go too far in trying to control every conceivable risk, however trivial, however unlikely?
