II• Measures should be taken to ensure theproper restart of programs interruptedafter a voltage dip or failure. This shouldnot cause dangerous operating states evenfor a short time. If necessary, emergency-stop devices should be implemented.• Wherever faults in the automation systemmay cause damage to persons or property,external measures must be implemented toensure a safe operating state in the eventof a fault or malfunction (for example, bymeans of separate limit switches,mechanical interlocks etc.).www.comoso.com