Fault tolerance and disaster recovery

摘要

In a perfect world, our control systems would install and operate indefinitely with no faults. Experience teaches us otherwise. Control system specifications should deal with fault tolerance and failure recovery issues.