Alternatively this protection requirement is fulfilled when a secondary means of checking the correct operational status is available. a0c0