An ignition control for controlling an ignition process on a fuel-fired appliance, said ignition control comprising: a fuel control valve having an open position in which fuel flows to a burner and a closed position in which fuel flow to said burner is stopped; an ignition source operatively associated with said burner; a flame detection device adapted to detect the presence of a flame at said burner and configured to transmit a flame status signal indicating flame or no flame; a controller configured to oversee the ignition process of igniting the fuel supplied to said burner, said controller including a primary processor and a secondary processor: said primary processor having functional capability to operate the ignition source, to monitor the flame status signal from the flame detection device and to terminate the ignition process in the presence of a flame status signal indicating no flame after a specified period of time following an initiation of the ignition process; and said secondary processor having functional capability to monitor the flame status signal from the flame detection device and to terminate the ignition process in the event that the primary processor does not close the fuel control valve in the presence of a flame status signal indicating no flame after a specified period of time following an initiation of the ignition process; said secondary processor adapted to operate in an idle mode, monitor mode and lockout mode; wherein in said idle mode, said secondary processor is adapted to continuously monitor the state of the fuel control valve and the flame status signal, said secondary processor configured to transition from said idle mode to said monitor mode upon detecting said fuel control valve is open, check the flame status signal upon detecting said fuel control valve is closed, and transition from said idle mode to said lockout mode in the presence of a flame status signal indicating a flame. a fuel control valve having an open position in which fuel flows to a burner and a closed position in which fuel flow to said burner is stopped; an ignition source operatively associated with said burner; a flame detection device adapted to detect the presence of a flame at said burner and configured to transmit a flame status signal indicating flame or no flame; a controller configured to oversee the ignition process of igniting the fuel supplied to said burner, said controller including a primary processor and a secondary processor: said primary processor having functional capability to operate the ignition source, to monitor the flame status signal from the flame detection device and to terminate the ignition process in the presence of a flame status signal indicating no flame after a specified period of time following an initiation of the ignition process; and said secondary processor having functional capability to monitor the flame status signal from the flame detection device and to terminate the ignition process in the event that the primary processor does not close the fuel control valve in the presence of a flame status signal indicating no flame after a specified period of time following an initiation of the ignition process; said secondary processor adapted to operate in an idle mode, monitor mode and lockout mode; wherein in said idle mode, said secondary processor is adapted to continuously monitor the state of the fuel control valve and the flame status signal, said secondary processor configured to transition from said idle mode to said monitor mode upon detecting said fuel control valve is open, check the flame status signal upon detecting said fuel control valve is closed, and transition from said idle mode to said lockout mode in the presence of a flame status signal indicating a flame. said primary processor having functional capability to operate the ignition source, to monitor the flame status signal from the flame detection device and to terminate the ignition process in the presence of a flame status signal indicating no flame after a specified period of time following an initiation of the ignition process; and said secondary processor having functional capability to monitor the flame status signal from the flame detection device and to terminate the ignition process in the event that the primary processor does not close the fuel control valve in the presence of a flame status signal indicating no flame after a specified period of time following an initiation of the ignition process; said secondary processor adapted to operate in an idle mode, monitor mode and lockout mode; wherein in said idle mode, said secondary processor is adapted to continuously monitor the state of the fuel control valve and the flame status signal, said secondary processor configured to transition from said idle mode to said monitor mode upon detecting said fuel control valve is open, check the flame status signal upon detecting said fuel control valve is closed, and transition from said idle mode to said lockout mode in the presence of a flame status signal indicating a flame.