A control system has regular ECUs and a recovery ECU. Each regular ECU controls driving of current consumers, respectively, drivable by driving methods and connected through output channels. The recovery ECU has output drivers, respectively, producing driving currents based on the driving methods and channel changing blocks corresponding to the respective driving methods. When receiving information indicating failure of an output channel of one regular ECU, the recovery ECU specifies the driving method of the failed channel, controls the driver of the specified driving method to produce a driving current, and controls the changing block of the specified driving method to select one output channel, through which the current consumer connected with the failed ECU through the failed channel is also connected with the changing unit. The recovery ECU performs substitute driving instead of the failed ECU to supply the current to the consumer.