Eaton Moeller MFD-CP4-CO Hardware And Engineering page 4

• Measures should be taken to ensure the
proper restart of programs interrupted
after a voltage dip or failure. This should
not cause dangerous operating states even
for a short time. If necessary, emergency-
stop devices should be implemented.
II
• Wherever faults in the automation system
may cause damage to persons or property,
external measures must be implemented to
ensure a safe operating state in the event
of a fault or malfunction (for example, by
means of separate limit switches,
mechanical interlocks etc.).