Every qualification runs a risk assessment on the system and its acceptance criteria. Almost none run one on the test execution and environment. That second risk assessment is usually forgotten.