It is probably a DCS type control system.
And I believe that it must have triple redundancy for the parts of the system that are critically important for monitoring and safe shutdown. The PLCs systems with redundancy that I know of, have only regular redundancy.