Safety-related components (e. g. components or system parts) must be designed in such a way that
- an individual error in any of these parts will not lead to the loss of the safety function, and
- the individual error will be detected during or before the next safety function request or, if this is not possible, an accumulation of errors will not lead to the loss of the safety function.
