4.8.1 Operation with an integrated system should
be at least as effective as it would be with individual, stand-alone
equipment. Where multifunction displays and controls are used they
should be duplicated and interchangeable.
4.8.2 Failure of one part (individual module,
equipment or subsystem) of the integrated system should not affect
the functionality of other parts, except for those functions directly
dependent upon information from the defective part.
4.8.3 A complete failure in connectivity between
parts should not affect their independent functionality.
4.8.4 An alternative means of operation, independent
of the integration, should be available for all essential functions.
4.8.5 When systems under control are required
to be duplicated and in separate compartments this should also be
applied to computer-based systems.