In case the 5 V DC system power fails hardware clock and sRAM on the central module are buffered by a lithium battery which is also on the central module. In case of an error the plant is to be driven in the safe state. For systems with a defined safety state this is the lowest energetic state.