Recording a history related to an operation of a safety program contributes to a determination of a cause of a false OFF signal. A safety controller acquires, from at least one safety input device or safety sensor, extra information that is not used for obtaining an output signal and records an input signal and an output signal together with the extra information as history information at predetermined recording intervals.