Division 4.1.2 Verification of the safety concept referred to in point 3.4

The reaction of ‘the System’ shall, at the discretion of the approval authority, be checked under the influence of a failure in any individual unit by applying corresponding output signals to electrical units or mechanical elements in order to simulate the effects of internal faults within the unit.

The verification results shall correspond with the documented summary of the failure analysis, to a level of overall effect such that the safety concept and execution are confirmed as being adequate.