Though the presumption is that physical separation is needed between control and safety systems to avoid common cause failures, “effective” separation may be enough with proper analysis and the right ...