During system design, the predicted reliability numbers for the individual equipment which makes up the entire autoland system (sensors, computers, controls, and so forth) are combined and an overall probability of failure is calculated. As the threat exists primarily during the flare through roll-out, this exposure time is used and the overall failure probability must be less than one in a million.[7]