It can be disengaged only by completely disconnecting the autopilot (this prevents accidental disengagement of the autoland system at a critical moment) or by initiating an automatic go-around. At least two and often three independent autopilot systems work in concert to carry out autoland, thus providing redundant protection against failures. Most autoland systems can operate with a single autopilot in an emergency, but they are only certified when multiple autopilots are available.