There are 8 independent engines, IIRC, mounted two by two. I think they are controlled in pairs, one on each side of the craft so as to avoid an engine on one side not knowing its counterpart on the other side failed and forcing the capsule to spin instead of fly away from the faulty booster.