Generally, if all practicable risk control measures are insufficient to satisfy the risk acceptability criteria in therisk management plan, the design shall be abandoned. In some instances, however, greater risks can bejustified, if they are outweighed by the expected benefits of using the device. This International Standardallows manufacturers an opportunity to do a risk/benefit analysis to determine whether the residual risk isacceptable based on benefit.