Fault-tolerant Process Control