It is my understanding that in the UK a company and its CEO can be held responsible for corporate manslaughter if an accident occurs and it can be proven that the company did not take enough action to reduce the risks as much as is reasonably practical. The company will apparently have to produce evidence that states that it did consider the risks and the cost of reducing the risk and the residual risk and danger.
That seems quite a large stick to get companies moving in the direction of safer operations, as the CEO can actually end up in jail after an accident with a company helicopter. That will help against the grey suit syndrome.