Quick answer: Best practice is often intellectual path dependency dressed up as rigour. Rebuilding risk, security, safety and ethical regulation on first-principles ground means questioning inherited assumptions rather than repeating them.
Originally published on LinkedIn: 5 March 2026.
First principles are fundamental propositions that cannot be deduced from any other proposition, the bedrock elements a problem can be stripped down to before understanding is rebuilt from the ground up. Aristotle defined them as "the first basis from which a thing is known." The discipline is not a modern management buzzword. It is an ancient method for escaping the complexity trap that borrowed conclusions create.
Relying on best practice is a form of intellectual path dependency. It assumes the context in which those practices were forged still matches the volatility of the present. First principles thinking eliminates that baggage by demanding validation of assumptions against current reality, so solutions are built for the fundamental truths of the specific challenge at hand rather than inherited from a different one.
Shared foundations across disciplines
In safety science, first-principles analysis of accident scenarios examines consequence and likelihood; security risk assessment adds vulnerability and the likelihood of intentional attack, since security deals with a calculating adversary rather than a blind hazard. Five domain-independent safety principles recur across engineering: fail-safe design, safety margins, inherently safe design, defence-in-depth and observability-in-depth. The same "defence-in-depth" logic that protects a chemical plant from a pipe failure protects a digital network from a multi-stage cyberattack, evidence that foundational truths transfer across biology, engineering and security once they are identified correctly.
Risk assessment is an ethical act, not just a calculation
Regulatory risk decisions are never purely mathematical. When a regulator sets a standard, they are making a moral judgment about whose safety matters most, not just solving an equation. Ten ethical principles, autonomy, minimising harm, transparency, fairness, stakeholder engagement and a One Health perspective among them, guide regulators integrating public values into risk decisions. These value judgments shape how populations get weighed in a cost-benefit analysis and how public trust is maintained.
The moral boundary of acceptable risk
A first principle of risk acceptance holds that fixed thresholds of hazard exist that no person should be exposed to, regardless of potential economic gain. This moves decision-making beyond simple utilitarian calculation toward respecting a prima facie right not to be endangered unless the system is genuinely equitable and beneficial to those exposed. Some strategists propose using life expectancy in good health as a concrete, human-centric baseline for evaluating interventions, one that also highlights the gap between what a distracted public will tolerate and what is genuinely, intergenerationally, ethically acceptable.
Precaution without paralysis
Where scientific uncertainty is high, the precautionary principle calls for prudence in decision-making, without tipping into the paralysis of endless analysis. First principles thinking provides the compass for that balance: it allows an organisation to deconstruct the noise of modern complexity and rebuild strategy on verifiable truth and ethical integrity, rather than on borrowed conclusions that no longer fit the risk environment.
The question worth asking
The complexity trap is only a trap if organisations insist on using the blueprints of the past to navigate the frontiers of the future. Evaluating the systems you lead means asking which of your fundamental assumptions are truly non-deducible truths, and which are simply borrowed.
If your organisation's risk, safety or security framework is built on inherited best practice rather than tested against first principles for your specific context, that gap tends to surface exactly when conditions change fastest. Tony Ridley works with boards and executive teams to strip risk and ethical decision-making back to defensible fundamentals and rebuild from there. Contact us to discuss your requirements.