Selecting a tester with the required knowledge related to compliance and standards is a correct mitigation option, especially in a highly regulated domain like healthcare. This approach ensures that the tester understands the specific regulatory requirements and standards applicable to the software, thereby reducing the risk of non-compliance. This is more effective than just increasing the number of testers, as it directly addresses the knowledge and expertise needed to mitigate specific product risks​​.