11.1 The system configuration should allow one
of the two possibilities for the layout of the back-up and redundancy
functionality for the CAM, CAM-HMI:
-
.1 in case of a failure of the CAM-HMI, it should
be ensured that the connected systems present their alerts individually
(a system failure of the CAM-HMI functionality should not lead to
the loss of the alert announcement functionality); and
-
.2 or, if functionality from systems and equipment
is transferred to the CAM and CAM-HMI, a back-up should be provided.
The back-up arrangement should enable a safe takeover of CAM functionality
and ensure that a CAM failure does not result in a critical situation.
The power supply of the back-up arrangement solution should be resistant
against single failures.
11.2 In case of a breakdown of one task station,
at least one other task station should be able to take over the CAM-HMI
task.