A radar data processing system , comprising: a microcontroller comprising an outer safety monitor ; and an integrated circuit coupled to the microcontroller , the integrated circuit comprising: an error monitor; an error sensor coupled to the error monitor; and a dedicated error indicator pin coupled to the error monitor; wherein the error monitor is an inner safety monitor configured to: determine an error condition through the error sensor by receiving and collating sensor data from the error sensor ; and send, through the dedicated error indicator pin, a function warning signal to the outer safety monitor when the sensor data from the error sensor is indicative of a functional irregularity by setting the status of the dedicated error indicator pin to indicate an error; and characterised in that the outer safety monitor is configured to routinely perform a sanity check on the inner safety monitor to ensure that the inner safety module and the error sensor are healthy by using a fault injection utility to create fault conditions and monitor if the state of the dedicated error indicator pin changes accordingly. a microcontroller comprising an outer safety monitor ; and an integrated circuit coupled to the microcontroller , the integrated circuit comprising: an error monitor; an error sensor coupled to the error monitor; and a dedicated error indicator pin coupled to the error monitor; wherein the error monitor is an inner safety monitor configured to: determine an error condition through the error sensor by receiving and collating sensor data from the error sensor ; and send, through the dedicated error indicator pin, a function warning signal to the outer safety monitor when the sensor data from the error sensor is indicative of a functional irregularity by setting the status of the dedicated error indicator pin to indicate an error; and characterised in that the outer safety monitor is configured to routinely perform a sanity check on the inner safety monitor to ensure that the inner safety module and the error sensor are healthy by using a fault injection utility to create fault conditions and monitor if the state of the dedicated error indicator pin changes accordingly. an error monitor; an error sensor coupled to the error monitor; and a dedicated error indicator pin coupled to the error monitor; wherein the error monitor is an inner safety monitor configured to: determine an error condition through the error sensor by receiving and collating sensor data from the error sensor ; and send, through the dedicated error indicator pin, a function warning signal to the outer safety monitor when the sensor data from the error sensor is indicative of a functional irregularity by setting the status of the dedicated error indicator pin to indicate an error; and characterised in that the outer safety monitor is configured to routinely perform a sanity check on the inner safety monitor to ensure that the inner safety module and the error sensor are healthy by using a fault injection utility to create fault conditions and monitor if the state of the dedicated error indicator pin changes accordingly. determine an error condition through the error sensor by receiving and collating sensor data from the error sensor ; and send, through the dedicated error indicator pin, a function warning signal to the outer safety monitor when the sensor data from the error sensor is indicative of a functional irregularity by setting the status of the dedicated error indicator pin to indicate an error; and characterised in that the outer safety monitor is configured to routinely perform a sanity check on the inner safety monitor to ensure that the inner safety module and the error sensor are healthy by using a fault injection utility to create fault conditions and monitor if the state of the dedicated error indicator pin changes accordingly. <EOS>