A device for controlling an internal combustion engine has sensors That measure the operating states of the internal combustion engine. The sensor signals are used for determining control signals for the internal combustion engine. Furthermore, testing means are provided which verify the sensor signals and if implausible sensor signals are detected, control of the internal combustion engine is prevented.