Ok... so you are guys are telling that...
"...once any copy (multiplexed) control file goes missin'... your db will come down!"

So.. I've tried to put this to the test. On a sandbox, I started the instance. It's got 3 redo log groups, each with 3 members multiplexed across 3 different volumes. It's controlfile is multiplexed 3-way across 3 different volumes.

I deleted ALL the datafiles, one of the controlfiles, and on redo member from each group.

The database is still running.

I've done some DML's since then. I've also done a "logfile switch" and forced a "checkpoint". And then did some more DMLs, but the database is still running.

What am I not simulating correctly to prove your point that the database will come down?

Also, I see errors in the alert log about missing redo logs when I do a logfile switch, but I see no errors when I force a checkpoint. Shouldn't I see errors regarding missing control files in one of both of these commands?

Any feedback would realy help...

BTW: It's a 9206 database.