5.7.3 The analysis of 5.7.1 is utilized to identify anticipated faults in the system which could lead to a hazardous condition and the types and levels of protection provided to mitigate the anticipated faults. The analysis shall consider single fault conditions in the protection circuit/scheme as part of the anticipated faults.5.7.4 When conducting the analysis of 5.7.1, active protective devices shall not be relied upon for critical safety unless they comply with the following in (a) – (c). Refer to 4.35 and 4.36 for definitions of active and passive protective devices.a) They are provided with a redundant passive protective device; orb) They are provided with redundant active protection that remains functional and energized upon loss of power/failure of the first level active protection; orc) They are determined to fail safe upon loss of power to the active circuit.