A method for managing a control system having triple redundancy for an aircraft , the method comprising: receiving, by a flight control electronics system , a message from a transmitting computing unit in a controller , the controller including the transmitting computing unit, a second computing unit and a third computing unit, wherein a first computing-unit-failure has occurred in the third computing unit, wherein the message includes a first status and a first cyclic redundancy check value generated by the transmitting computing unit, a second status and a second cyclic redundancy check value generated by the second computing unit and an activity indicator ; identifying, by the flight control electronics system , in the message : the activity indicator ; the first and second statuses; and the first and second cyclic redundancy check values, wherein each cyclic redundancy check value is generated using a respective key assigned to the respective computing unit; and disabling, by the flight control electronics system , the controller when at least one of: an anomaly is indicated in any of the statuses, the activity indicator mismatches a further activity indicator sent to the controller by the flight control electronics system , or a cyclic redundancy check value mismatch is present in the message that indicates a second computing-unit-failure has occurred. receiving, by a flight control electronics system , a message from a transmitting computing unit in a controller , the controller including the transmitting computing unit, a second computing unit and a third computing unit, wherein a first computing-unit-failure has occurred in the third computing unit, wherein the message includes a first status and a first cyclic redundancy check value generated by the transmitting computing unit, a second status and a second cyclic redundancy check value generated by the second computing unit and an activity indicator ; identifying, by the flight control electronics system , in the message : the activity indicator ; the first and second statuses; and the first and second cyclic redundancy check values, wherein each cyclic redundancy check value is generated using a respective key assigned to the respective computing unit; and disabling, by the flight control electronics system , the controller when at least one of: an anomaly is indicated in any of the statuses, the activity indicator mismatches a further activity indicator sent to the controller by the flight control electronics system , or a cyclic redundancy check value mismatch is present in the message that indicates a second computing-unit-failure has occurred. the activity indicator ; the first and second statuses; and the first and second cyclic redundancy check values, wherein each cyclic redundancy check value is generated using a respective key assigned to the respective computing unit; and disabling, by the flight control electronics system , the controller when at least one of: an anomaly is indicated in any of the statuses, the activity indicator mismatches a further activity indicator sent to the controller by the flight control electronics system , or a cyclic redundancy check value mismatch is present in the message that indicates a second computing-unit-failure has occurred. <EOS>