Is this a good insight for safety-critical software development ?

Question

<<Somebody has to hold the keys to the vault.

If the trusted people act in a rogue manner then nothing is safe.

The choice of people for the critical position that controls what software is installed on critical computers, is the most important factor in ensuring safety-critical software is not corrupted.>>

Answer 1

No, it doesn&#039;t go far enough.

The problem is in assuming that somebody has to hold the keys, but putting all that risk on one person is too much.

Build it like a double lock-vault where two keys are needed and no individual can do it on their own.

(same as you always have two people counting the petty cash)