Abstract: A safety controller is configured to monitor at least one vehicle controller that is separate from the safety controller. The safety controller is operatively connected to monitor inputs and outputs of the vehicle controller. The safety controller includes a standard computing module with customized input and output modules. The safety controller is configured to override vehicle controller commands to items controlled by the vehicle controller. In one form, the vehicle controller handles level 1 functions and safety controller handles level 2 and 3 monitoring. In one particular example, the safety controller is at a minimum ISO 26262 ASIL C certified. The safety controller in one aspect uses an AUTomotive Open System ARchitecture (AUTOSAR).