People design your controls, and people make mistakes
Every critical control depends on someone to install it, maintain it, and verify it works. SIF frameworks specify what controls should look like but say nothing about the conditions facing the people who keep them working.