Under Route 2H each subsystem needs a minimum fault tolerance of 2 for SIL 4, 1 for SIL 3, 1 for SIL 2 in high demand or continuous mode, and 0 for SIL 2 in low demand and for SIL 1. For type A elements only, a lower fault tolerance may be adopted where meeting the minimum would add failures and reduce overall EUC safety, with documented justification showing that and showing that excluded failure modes have very low dangerous rates (the excluded serial elements together should stay within 1 % of the target failure measure) and that systematic faults do not undermine the exclusion. Reliability data must come from field feedback in a similar application and environment, collected to international standards, and be evaluated using the amount of feedback, expert judgement and where needed specific tests, giving the average and uncertainty of each parameter; the uncertainty is carried into the PFDavg or PFH calculation and the design improved until confidence that the target is met exceeds 90 %. Type B elements under Route 2H need at least 60 % diagnostic coverage.
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.