A medical device has a first controller that has a control section responsible for sequence control of a device and is for controlling the medical device, a second controller that operates if a failure occurs in the first controller, and an alarm that makes a notification output based on exclusive OR between notification outputs of the first controller and the second controller. The second controller, after acquiring the notification output of the first controller, outputs its own notification output as it is if the notification output of the first controller is in an OFF state, or inverts its own notification output so as to output an inversion result if the notification output of the first controller is in an ON state.