A method for managing a control system having triple redundancy for an aircraft, the method comprising: receiving, by a flight control electronics system, a message from a transmitting computing unit in a controller, the controller including the transmitting computing unit, a second computing unit and a third computing unit, wherein a first computing-unit-failure has occurred in the third computing unit, wherein the message includes a first status and a first cyclic redundancy check value generated by the transmitting computing unit, a second status and a second cyclic redundancy check value generated by the second computing unit and an activity indicator; identifying, by the flight control electronics system, in the message: the activity indicator; the first and second statuses; and the first and second cyclic redundancy check values, wherein each cyclic redundancy check value is generated using a respective key assigned to the respective computing unit; and disabling, by the flight control electronics system, the controller when at least one of: an anomaly is indicated in any of the statuses, the activity indicator mismatches a further activity indicator sent to the controller by the flight control electronics system, or a cyclic redundancy check value mismatch is present in the message that indicates a second computing-unit-failure has occurred. receiving, by a flight control electronics system, a message from a transmitting computing unit in a controller, the controller including the transmitting computing unit, a second computing unit and a third computing unit, wherein a first computing-unit-failure has occurred in the third computing unit, wherein the message includes a first status and a first cyclic redundancy check value generated by the transmitting computing unit, a second status and a second cyclic redundancy check value generated by the second computing unit and an activity indicator; identifying, by the flight control electronics system, in the message: the activity indicator; the first and second statuses; and the first and second cyclic redundancy check values, wherein each cyclic redundancy check value is generated using a respective key assigned to the respective computing unit; and disabling, by the flight control electronics system, the controller when at least one of: an anomaly is indicated in any of the statuses, the activity indicator mismatches a further activity indicator sent to the controller by the flight control electronics system, or a cyclic redundancy check value mismatch is present in the message that indicates a second computing-unit-failure has occurred. the activity indicator; the first and second statuses; and the first and second cyclic redundancy check values, wherein each cyclic redundancy check value is generated using a respective key assigned to the respective computing unit; and disabling, by the flight control electronics system, the controller when at least one of: an anomaly is indicated in any of the statuses, the activity indicator mismatches a further activity indicator sent to the controller by the flight control electronics system, or a cyclic redundancy check value mismatch is present in the message that indicates a second computing-unit-failure has occurred.