1 piece
The governing international standard for medical device risk management requires each risk control to be verified twice: once that it was implemented, and once that it is effective. Those are two different tests. A plan that writes only the first has done half the work, and effectiveness is the harder half.