HC
The system is duplex including 2 controllers (1 running in standby, usual system). Actions in the event of failure depend on what's failed, but in the worst case it requires vacate icing as soon as possible. I know that the issue you raised was one that concerned the EASA team, which is why the EASA approval took so long. I haven't heard whether they have put any additional restrictions on the clearance. Drop round some time if you want and I will show you the relevant bits of the RFM.
Cheers
Steve