This has always been an intriguing question…  Risk Assessments come into play including those responsible for any mitigation actions. API...

Interesting ideas and references to Codes and Standards. Thoughts on whether they are omitting any key standards