An elevator includes a drive, a car operatively connected to the drive to traverse along a travel path, at least one guide rail positioned along the travel path to guide the car, a safety brake arranged on the car to exert a braking force on the guide rail, and a safety system. The safety system includes a first safety control unit and a second safety control unit that monitor a safety condition of the elevator. The first safety control unit outputs a stop signal to the drive, in particular to a drive brake and/or to a frequency converter of the drive, and the second safety control unit outputs a trigger signal to the safety brake to bring the elevator into a proper safety condition when an impermissible safety condition of the elevator is detected.