A bus system for a process system, having a first bus subscriber which transmits bus messages and having at least one first bus subscriber which receives bus messages, wherein the transmitting first bus subscriber and the receiving first bus subscriber are connected to one another via a first data bus, wherein the transmitting first bus subscriber is designed such that it transmits control commands to the receiving first bus subscriber, wherein the receiving first bus subscriber is designed such that it executes the control commands of the transmitting first bus subscriber and achieves the object of providing a bus system that is designed to be fail-safe in a special way.

A fault tolerant control system delivers an embedded functional safety core and a distributed control engine with an onboard communication link in an industrial process control environment. The fault tolerant control system includes a process control workstation connected to a first network and a fault tolerant safety controller connected to a second network, wherein a process controller module, a safety controller module and a field device system integration module are co-located on a power interface board.