Division 1.5.1

Safety devices must function independently of any measurement and/or control devices required for operation.

As far as possible, failure of a safety device must be detected sufficiently rapidly by appropriate technical means to ensure that there is only very little likelihood that dangerous situations will occur.

The fail-safe principle is to be applied in general.

Safety-related switching must in general directly actuate the relevant control devices without intermediate software command.