Figure 4. Rough flow of constructs for ethical system requirements derivation (CC BY-ND 4.0 SSP & MTS). Risk-based Design Process " (in line with IEEE 7000's section 9) and an " Impact assessment-led System Design Process, " as many high-risk systems require one (and has been standardized elsewhere, such as [30]). The former applies to probably most cases in system design. The latter comes into play when particularly critical values are at stake (such as health or security), when particularly risky systems are built or when the regulator mandates an impact assessment-led system design. September 2022 What a standard risk-based design approach does is that, it asks how each EVR could be put at risk of not being fulfilled. The risk of nonfulfillment comes from concrete " threats " to stakeholder values implied in the EVRs. Technical system requirements, so-called " controls, " are then developed to address each threat in such a way that the EVR can be fulfilled. In this way, potential value threats are technically mitigated before they happen. 77