How do you ensure that a software failure in a motor control loop does not result in harm to a patient at Alcon?
