98-99 / 268
Consideration for Protection Layers
•
Each Layer of Protection must operate totally
independent from other layers;
•
The Layer of Protection must be effective in providing
the risk reduction claimed;
•
All claimed Layers of Protection must be auditable;
•
There must be sufficient Layers of Protection to
provide the required level of protection;
•
There must be sufficient Layers of Protection to
mitigate the initiating event being a failure of a
Protection Layer.