If part of a redundant system, unit of equipment, module, or component becomes inoperable, an alarm signaling the loss of redundancy should be provided to the user immediately.
Additional Information:
Users should be able to acknowledge such an alarm, but the lack of available redundancy should be continuously displayed until the redundant system, equipment, module, or component becomes operable again.