For aircraft certified to operate above 25,000 feet (FL 250; 7,600 m), it "must be designed so that occupants will not be exposed to cabin pressure altitudes in excess of 15000 feet after any probable failure condition in the pressurization system."