Is it Safe?: The Safety Assessment of Aircraft Systems

When systems were themselves relatively simple, the airworthiness requirements applied to them were correspondingly simple. Generally the requirements were written separately for each class of system, and spelt out some engineering detail. These earlier requirements did not specify failure rates or reliability to be achieved. The possibility of failure was recognised by requiring, in a somewhat arbitrary fashion, the need to duplicate or provide standby systems.