Functional safety measures must protect people and the environment against faults in or failures of the electronic controller. This safety can be guaranteed by the correct design and testing methods, knowledge and extensive testing and certification programmes.