A redundant control system including at least three transmitters which generate redundant transmitter signals (12a-c), comprising: at least three failure circuits, each individual one of said at least three failure circuits being associated with an individual one of said at least three redundant signals (12a-c), said failure circuit generating a failure signal in response to an occurrence of a failure of a corresponding one of the redundant signals(12a-c); a first select circuit associated with each of the redundant signals (12a-c), said first select circuit receptive to a default signal associated with the corresponding one of the redundant signals (12a-c), to said failure signal, and to the corresponding one of the redundant signals (12a-c), said first select circuit selecting said default signal when said failure signal indicates a failure of the corresponding one of the redundant signals (12a-c), said first select circuit selecting the corresponding one of the redundant signals (12a-c) when said failure signal does not indicate a failure for the corresponding one of the redundant signals (12a-c); and a median determination circuit receptive to said default signals selected and the redundant signals (12a-c) selected to determine a median signal indicative of a median of the redundant signals (12a-c) selected, characterized in that said median determination circuit comprises means for determining a present median signal of said median signal as determined from present signals of the redundant signals, and means for determining a previous median signal of said median signal as determined from previous signals of the redundant signals, and further comprising: means for subtracting said previous median signal from said present median signal to provide a difference signal thereof; means for selecting said difference signal when the failure signal indicates that a failure of said redundant signals has been determined; means for selecting a fixed signal when the failure signal does not indicate a failure of said redundant signals; means for adding the value of one of said difference signal selected and said fixed signal selected to a current setpoint value to provide a biased setpoint value; and means for subtracting the biased setpoint value from the present median signal value to determine a difference thereof as a redundant control system output. at least three failure circuits, each individual one of said at least three failure circuits being associated with an individual one of said at least three redundant signals (12a-c), said failure circuit generating a failure signal in response to an occurrence of a failure of a corresponding one of the redundant signals(12a-c); a first select circuit associated with each of the redundant signals (12a-c), said first select circuit receptive to a default signal associated with the corresponding one of the redundant signals (12a-c), to said failure signal, and to the corresponding one of the redundant signals (12a-c), said first select circuit selecting said default signal when said failure signal indicates a failure of the corresponding one of the redundant signals (12a-c), said first select circuit selecting the corresponding one of the redundant signals (12a-c) when said failure signal does not indicate a failure for the corresponding one of the redundant signals (12a-c); and a median determination circuit receptive to said default signals selected and the redundant signals (12a-c) selected to determine a median signal indicative of a median of the redundant signals (12a-c) selected, characterized in that said median determination circuit comprises means for determining a present median signal of said median signal as determined from present signals of the redundant signals, and means for determining a previous median signal of said median signal as determined from previous signals of the redundant signals, and further comprising: means for subtracting said previous median signal from said present median signal to provide a difference signal thereof; means for selecting said difference signal when the failure signal indicates that a failure of said redundant signals has been determined; means for selecting a fixed signal when the failure signal does not indicate a failure of said redundant signals; means for adding the value of one of said difference signal selected and said fixed signal selected to a current setpoint value to provide a biased setpoint value; and means for subtracting the biased setpoint value from the present median signal value to determine a difference thereof as a redundant control system output. means for subtracting said previous median signal from said present median signal to provide a difference signal thereof; means for selecting said difference signal when the failure signal indicates that a failure of said redundant signals has been determined; means for selecting a fixed signal when the failure signal does not indicate a failure of said redundant signals; means for adding the value of one of said difference signal selected and said fixed signal selected to a current setpoint value to provide a biased setpoint value; and means for subtracting the biased setpoint value from the present median signal value to determine a difference thereof as a redundant control system output.