Fail safe control