Discussed in class in response to 1986 Challenger explosion:

When you cannot guarantee safety, you shouldn't shift the burden of proof to prove unsafe conditions.

Yet

In court,
When you cannot prove your innocence you should not shift the burden of proof to prove your guilt.

However, NASA is such a huge organization with so many stakeholders that they must assume responsibility to create controls and policies to check for safety. It would be unethical not to. It would be negligent and irresponsible to ignore these protocols.

I believe an organization must hire good people -- good in both skills and ethics -- and implement controls that do not yield like employees might yield under pressure.