Division 3.3.2

Systems and constituents, considered collectively, separately and in relation to each other, shall be designed in such a way that an inverse relationship exists between the probability that any failure can result in a total system failure and the severity of its effect on the safety of services.