A monitor system for safety critical situations such as burner control receives at inputs 17-21 control information from a programmable logic control and reference information at inputs 12-16 from plant interlocks. This information passes via opto-isolators 40 and buffers 41 to the address bus of an EPROM so as to access information stored therein which normally mirrors the PLC information so as to control relays RL1-5 via drivers 45 to conform to the PLC instructions. The EPROM also contains reset and clock information for use by a counter 48 which allows different areas within the EPROM to be accessed. The reset information is also available to a parity check circuit 49 via oscillator 46 for dynamically testing the monitor for integrity of operation. Failure of the PLC or monitor components will cause access to shutdown addresses of the EPROM and operation of the appropriate relays including lockout relay RL6.
