Hazards of Malfunctioning Control Subsystems