2This step can be omitted if the safety function(s) and related safety requirements are explicitly given already. This is typically the case for sub-systems (on lower level).