An automotive control system, comprising: a safety processor; and a system-on-a-chip, SoC, including: a primary processor; a safety monitor configured to detect a fault condition of the primary processor and to provide an indication of the fault condition to the safety processor; a first general purpose input/output, GPIO, bank coupled to the primary processor to provide input/output operations to a non-critical function of an automobile; a second GPIO bank (124, 126) coupled to the primary processor to provide input/output operations to a first critical function of the automobile; a debug interface coupled to the second GPIO bank to form a first scan chain with input and output registers of the second GPIO bank, and coupled to the safety processor to receive first control information for the first scan chain to provide input/output operations to the first critical function of the automobile when the safety monitor provides the indication of the fault condition; a primary voltage regulator coupled to provide power to the primary processor, the safety monitor, and the first GPIO bank; and a safety voltage regulator coupled to provide power to the safety processor, the debug interface, and the second GPIO bank, wherein the processing power of the safety processor is less than the processing power of the primary processor. a safety processor; and a system-on-a-chip, SoC, including: a primary processor; a safety monitor configured to detect a fault condition of the primary processor and to provide an indication of the fault condition to the safety processor; a first general purpose input/output, GPIO, bank coupled to the primary processor to provide input/output operations to a non-critical function of an automobile; a second GPIO bank (124, 126) coupled to the primary processor to provide input/output operations to a first critical function of the automobile; a debug interface coupled to the second GPIO bank to form a first scan chain with input and output registers of the second GPIO bank, and coupled to the safety processor to receive first control information for the first scan chain to provide input/output operations to the first critical function of the automobile when the safety monitor provides the indication of the fault condition; a primary processor; a safety monitor configured to detect a fault condition of the primary processor and to provide an indication of the fault condition to the safety processor; a first general purpose input/output, GPIO, bank coupled to the primary processor to provide input/output operations to a non-critical function of an automobile; a second GPIO bank (124, 126) coupled to the primary processor to provide input/output operations to a first critical function of the automobile; a debug interface coupled to the second GPIO bank to form a first scan chain with input and output registers of the second GPIO bank, and coupled to the safety processor to receive first control information for the first scan chain to provide input/output operations to the first critical function of the automobile when the safety monitor provides the indication of the fault condition; a primary voltage regulator coupled to provide power to the primary processor, the safety monitor, and the first GPIO bank; and a safety voltage regulator coupled to provide power to the safety processor, the debug interface, and the second GPIO bank, wherein the processing power of the safety processor is less than the processing power of the primary processor.