The principle is simple: life critical electronic equipment are designed to be battery powered and the mains is there to charge the batteries.
Its like UPS, but unlike a UPS, the device is actually designed to operate for many hours without the mains.
When an OVP event occurs and if the protectors have tripped, an annunicator should mark that the protective circuitry have been triggered. If they are one-shot and cannot be reset, an alarm should sound tied to the devices main batteries. If they are self resetting, then optionally send a signal to the main unit that can count the number of OVP issues; in self-resetting units the device is still connected to the mains, but if the fault persists, eventually the OVP circuits will fail so the device must be disconnected from mains but still function, and thus the battery power.
MOV devices are single use when triggered, but they can be designed as a replaceable module that can be swapped out when triggered. The whole charging unit can also be designed as a module. In health care settings, OVP is built into the main distribution and every branch circuit, and even on single outlets. The devices OVP is a last resort.