A service works well in many cases and management considers an occasional error irrelevant. I propose to evaluate frequency and gravity separately.
In the example, a wrong outcome is a decision that is difficult to correct. Good average performance does not describe all the consequences.
The controls must be proportionate to the impact and include exceptions. A reasonable choice considers who bears the damage, how it is identified and what concrete possibility exists to intervene before or after adoption.
