Text in force at CS25-28: from CS25-5, effective 5 Sep 2008.
(See AMC 25.1709) EWIS must be designed and installed so that:
(a) Each catastrophic failure condition (1) is extremely improbable; and (2) does not result from a single failure; and
(b) Each hazardous failure condition is extremely remote.
ED Decision 2008/006/R · Source