A method for checking functions, to be checked, of a control system, the control system having components to be checked, in particular redundant components, and an evaluation unit which evaluates the operability of the components on the basis of status reports of the components, the method including a component-side check of the functions, to be checked, of the components to be checked, and a system-wide check of at least one, but not all, of the functions checked on the component side.