| a configuration consisting of two control processors arranged such that if a fault occurs on the master control processor, the slave (or second) control processor starts. There is an interruption in the processing operations between the fault on the master processor and the commencement of operation of the slave processor. |