A method for operating a redundant automation system having a plurality of subsystems, wherein one subsystem of the plurality of subsystems operates as a master and assumes process control and the other subsystem operates as a reserve during redundant operation, where measures are provided by which the availability of the redundant automation system is increased, and where regardless of whether transient errors occur on the subsystem of the plurality of subsystems operating as the master or on the subsystem operating as the reserve, a total failure of the automation system is largely avoided.