A control device for controlling a technical installation includes a guard module. The control device has a modular structure with an input module, which receives an input signal representing a state of the technical installation, and an output module, which outputs an output signal controlling the technical installation based on the input signal. A guard module is integrated into the modular structure to monitor operability of the input module and the output module. The guard module confirms the output signal of the output module based on its monitoring of the input module and the output module. Within the modular structure, the input module and the output module form a first potential group. The guard module forms a second potential group within in the modular structure. The second potential group is independent of the first potential group.

A safety module for a programmable logic control system, wherein the safety module is designed as an assembly consisting of a plurality of modules with a plurality of function blocks connected through at least one internal bus and comprising at least one CPU and which can be connected through at least one interface to external sensors (and switches/buttons) and actuators (and optical/acoustic indicators and displays/monitors) for detecting at least one measurement signal, wherein the safety module operates in two channels and a self-test is implemented.

A safety module for a programmable logic control system, wherein the safety module is designed as an assembly consisting of a plurality of modules with a plurality of function blocks connected through at least one internal bus and comprising at least one CPU and which can be connected through at least one interface to external sensors (and switches/buttons) and actuators (and optical/acoustic indicators and displays/monitors) for detecting at least one measurement signal, wherein the safety module operates in two channels and a self-test is implemented.

A safety module for a programmable logic control system, wherein the safety module is designed as an assembly consisting of a plurality of modules with a plurality of function blocks connected through at least one internal bus and comprising at least one CPU and which can be connected through at least one interface to external sensors (and switches/buttons) and actuators (and optical/acoustic indicators and displays/monitors) for detecting at least one measurement signal, wherein the safety module operates in two channels and a self-test is implemented.

An I/O module includes a base plate, a plurality of universal circuits, and an option module. The base plate includes a plurality of connection terminals. A plurality of field devices is electrically connectable to the connection terminals. The universal circuits correspond to the connection terminals. The universal circuits are provided on the base plate, and configured to perform an input of analog signals from the field device, an output of analog signals to the field device, an input of discrete signals from the field device, and an output of discrete signals to the field device. The option module is detachably provided in the base plate. The option module is provided between a first connection terminal of the connection terminals and a first universal circuit of the universal circuits. The option module includes a first circuit configured to performing transmitting and receiving of signals between the first connection terminal and the first universal circuit. The first connection terminal corresponds to the first universal circuit.

An I/O module includes a base plate, a plurality of universal circuits, and an option module. The base plate includes a plurality of connection terminals. A plurality of field devices is electrically connectable to the connection terminals. The universal circuits correspond to the connection terminals. The universal circuits are provided on the base plate, and configured to perform an input of analog signals from the field device, an output of analog signals to the field device, an input of discrete signals from the field device, and an output of discrete signals to the field device. The option module is detachably provided in the base plate. The option module is provided between a first connection terminal of the connection terminals and a first universal circuit of the universal circuits. The option module includes a first circuit configured to performing transmitting and receiving of signals between the first connection terminal and the first universal circuit. The first connection terminal corresponds to the first universal circuit.

An I/O module includes a base plate, a plurality of universal circuits, and an option module. The base plate includes a plurality of connection terminals. A plurality of field devices is electrically connectable to the connection terminals. The universal circuits correspond to the connection terminals. The universal circuits are provided on the base plate, and configured to perform an input of analog signals from the field device, an output of analog signals to the field device, an input of discrete signals from the field device, and an output of discrete signals to the field device. The option module is detachably provided in the base plate. The option module is provided between a first connection terminal of the connection terminals and a first universal circuit of the universal circuits. The option module includes a first circuit configured to performing transmitting and receiving of signals between the first connection terminal and the first universal circuit. The first connection terminal corresponds to the first universal circuit.

A control device for controlling a technical installation includes a guard module. The control device has a modular structure with an input module, which receives an input signal representing a state of the technical installation, and an output module, which outputs an output signal controlling the technical installation based on the input signal. A guard module is integrated into the modular structure to monitor operability of the input module and the output module. The guard module confirms the output signal of the output module based on its monitoring of the input module and the output module. Within the modular structure, the input module and the output module form a first potential group. The guard module forms a second potential group within in the modular structure. The second potential group is independent of the first potential group.