Each EWIS must be designed and installed so that:
(a) Each catastrophic failure condition—
(1) Is extremely improbable; and
(2) Does not result from a single failure.
(b) Each hazardous failure condition is extremely remote.
