A control apparatus for a fuel cell stack having an operation control module is provided. The operation control module is configured in terms of programming and circuitry in order to control a large number of sensor or actuator systems that are relevant to normal operation. The sensor or actuator systems relate to the operating state of the fuel cell stack during normal operation and have a safety control module that is designed in terms of programming and circuitry to control safety-relevant sensor or actuator systems. The safety-relevant sensor or actuator systems relate to the safety functions of the fuel cell stack and the safety control module is in the form of an assembly which operates autonomously with respect to the operation control module. A method for controlling the fuel cell stack and the operation control module is also provided.