What happens if the central PLC fails?

That depends on the chosen level of redundancy.

With redundant PLC

With cold redundancy, the standby PLC takes over operation. The building remains controlled without intervention.

Without redundant PLC

The field devices revert to their safe state (fail-safe). Thanks to the monthly backup and the spare pool, the central unit can be quickly replaced and restored.