A machine includes an engine, one or more machine retarder systems, a grade sensor, a load sensor, and a controller. Each of the retarder systems has a retarding capability including an amount of energy the respective retarder system can dissipate in one or more systems of the machine powering or transmitting power to propel the machine. The grade sensor is configured to measure a grade at which the machine is disposed. The load sensor configured to measure a load on the machine. The controller is in electrical communication with the engine, the one or more retarder systems, the grade sensor, and the load sensor. The controller determines a machine speed limit based on the grade, the load and the retarding capability of each of the one or more retarder systems.