6.3 Redundancy Requirements for Sensors