An electrical system, comprising: an electrical energy source; a first electrical energy sink that generates a first sink status signal indicating a safe state of operation or a risk of becoming a safety hazard; a second electrical energy sink that generates a second sink status signal indicating a safe state of operation or a risk of becoming a safety hazard; a first switch circuit that couples the electrical energy source to the first electrical energy sink and generates a first switch status signal; a second switch circuit that couples the electrical energy source to the second electrical energy sink and generates a second switch status signal; a first control circuit that receives the first sink status signal from the first electrical energy sink, and generates a first switch control signal based on the first sink status signal, wherein the first control circuit controls the first switch circuit by means of the first switch control signal; a second control circuit that receives the second sink status signal from the second electrical energy sink, and generates a second switch control signal based on the second sink status signal, wherein the second control circuit controls the second switch circuit by means of the second switch control signal; and characterised by an override control circuit that receives the first and second switch status signals, generates a first switch override signal based on the first switch status signal that overrides the first switch control signal to control the first switch circuit if a first predetermined override condition is satisfied, the first predetermined override condition being based on whether the first electrical energy sink is performing a safety-critical operation under predetermined circumstances, and generates a second switch override signal based on the second switch status signal that overrides the second switch control signal to control the second switch circuit if a second predetermined override condition is satisfied, the second predetermined override condition being based on whether the second electrical energy sink is performing a safety-critical operation under predetermined circumstances. an electrical energy source; a first electrical energy sink that generates a first sink status signal indicating a safe state of operation or a risk of becoming a safety hazard; a second electrical energy sink that generates a second sink status signal indicating a safe state of operation or a risk of becoming a safety hazard; a first switch circuit that couples the electrical energy source to the first electrical energy sink and generates a first switch status signal; a second switch circuit that couples the electrical energy source to the second electrical energy sink and generates a second switch status signal; a first control circuit that receives the first sink status signal from the first electrical energy sink, and generates a first switch control signal based on the first sink status signal, wherein the first control circuit controls the first switch circuit by means of the first switch control signal; a second control circuit that receives the second sink status signal from the second electrical energy sink, and generates a second switch control signal based on the second sink status signal, wherein the second control circuit controls the second switch circuit by means of the second switch control signal; and characterised by an override control circuit that receives the first and second switch status signals, generates a first switch override signal based on the first switch status signal that overrides the first switch control signal to control the first switch circuit if a first predetermined override condition is satisfied, the first predetermined override condition being based on whether the first electrical energy sink is performing a safety-critical operation under predetermined circumstances, and generates a second switch override signal based on the second switch status signal that overrides the second switch control signal to control the second switch circuit if a second predetermined override condition is satisfied, the second predetermined override condition being based on whether the second electrical energy sink is performing a safety-critical operation under predetermined circumstances.