Redundancy
Duplicate or alternate capacity that tolerates a single failure.
Using duplicate or alternate components, paths, or services so one failure does not stop the required function. OT redundancy must consider common-cause failures, switchover behavior, synchronization, testing, and the process safe state.
See also: DCS · EtherCAT · Functional safety