Fault recovery needs a trigger and a defined responseRecordDefineInitial conditionHardware, firmware and product stateTriggerTimeout, reset or specified input failureResponseObserved outputs and retained informationRecoveryPermitted path back to operation