Legislation requires that due diligence is performed to minimise risks – so far as is reasonably practicable (SFARP) .
There is no formula for determining what is “reasonably practicable”, rather there are a set of considerations which inevitably track to the cost and whether the cost is grossly disproportionate to the risk. Its a tricky but critical area when deciding on control.

