Each EWIS must be designed and installed so that:

(a) Each catastrophic failure condition—

(1) Is extremely improbable; and

(2) Does not result from a single failure.

(b) Each hazardous failure condition is extremely remote.