An automation system includes a fieldbus, at least two automation devices which are securely connected to the fieldbus, at least two coupling points which are configured such that automated connection and disconnection of an exchanging device to and from the fieldbus is possible, wherein exchanging devices are configured to establish a functionally safe connection with the automation devices via the fieldbus, where the functional safety thus achieved serves to avoid malfunctions as a result of errors.