Until recently, users have had little choice other than to use completely different
systems for control and safety. Some users even mandated that the
BPCS and SIS be supplied from different manufacturers. There continue to
be many other good reasons to put safety and control functions in different
controllers. They include