3.5 Documented analyses of the behaviour of "The System" under individual hazard or fault conditions: a0c0