Automotive Cybersecurity

  1. Standards, Regulations, and Compliance
    1. International Standards
      1. ISO/SAE 21434: Road Vehicles – Cybersecurity Engineering
        1. Standard Scope and Objectives
          1. Organizational Cybersecurity Management
            1. Project-Dependent Cybersecurity Activities
              1. Cybersecurity Validation and Verification
                1. Cybersecurity Monitoring and Response
                  1. Implementation Guidance
                  2. ISO 26262: Functional Safety
                    1. Safety Lifecycle Processes
                      1. Cybersecurity and Safety Integration
                      2. SAE J3061: Cybersecurity Guidebook for Cyber-Physical Vehicle Systems
                        1. Cybersecurity Lifecycle
                          1. Risk Assessment Guidance
                        2. UN Regulations (UNECE WP.29)
                          1. UN Regulation No. 155: Cyber Security Management System (CSMS)
                            1. CSMS Requirements
                              1. Risk Assessment and Management
                                1. Monitoring and Response
                                  1. Organizational Processes
                                    1. Type Approval Requirements
                                    2. UN Regulation No. 156: Software Update Management System (SUMS)
                                      1. SUMS Requirements
                                        1. Update Risk Assessment
                                          1. Update Validation and Verification
                                            1. Update Deployment and Monitoring
                                          2. Regional Regulations and Guidelines
                                            1. NHTSA Cybersecurity Best Practices
                                              1. Manufacturer Guidance
                                                1. Layered Approach to Vehicle Cybersecurity
                                                  1. Incident Response Requirements
                                                  2. ENISA Guidelines and Recommendations
                                                    1. European Cybersecurity Framework
                                                      1. Good Practices for Security of Smart Cars
                                                        1. Threat Landscape Analysis
                                                        2. Transport Canada Guidelines
                                                          1. Canadian Cybersecurity Requirements
                                                          2. Other National Regulations
                                                          3. Industry Collaboration and Standards Bodies
                                                            1. Automotive Information Sharing and Analysis Center (Auto-ISAC)
                                                              1. Threat Intelligence Sharing
                                                                1. Best Practice Development
                                                                  1. Incident Information Sharing
                                                                  2. Society of Automotive Engineers (SAE)
                                                                    1. Technical Standards Development
                                                                      1. Industry Collaboration
                                                                      2. International Organization for Standardization (ISO)
                                                                        1. Global Standards Development
                                                                        2. Other Industry Consortia
                                                                          1. AUTOSAR (AUTomotive Open System ARchitecture)
                                                                            1. GENIVI Alliance
                                                                              1. Automotive Edge Computing Consortium

                                                                          Previous

                                                                          7. Security Engineering and Development Lifecycle

                                                                          Go to top

                                                                          Next

                                                                          9. Incident Response and Forensics