Cybersecurity in Cars
New standard just published to help keep the hackers at bayAs our cars get more connected, the risk of cybersecurity breaches increases on board. While the industry charged with combatting vehicle hackers is booming, it’s a constant battle to keep up with increasingly sophisticated technology. A new standard has just been published to help manufacturers get one step ahead.
ISO/SAE 21434, Road vehicles – Cybersecurity engineering, addresses the cybersecurity perspective in engineering of electrical and electronic (E/E) systems within road vehicles. It will help manufacturers keep abreast of changing technologies and cyber-attack methods, and defines the vocabulary, objectives, requirements and guidelines related to cybersecurity engineering for a common understanding throughout the supply chain.
The standard, developed in collaboration with SAE International, a global association of engineers and a key ISO partner, draws on the recommendations detailed in SAE J3061, Cybersecurity guidebook for cyber-physical vehicle systems, offering more comprehensive guidance and the input of experts all around the world.
Dr Gido Scharfenberger-Fabian, Convenor of the group of ISO experts that developed the standard, said it will enable organizations to define cybersecurity policies and processes, manage cybersecurity risk and foster a cybersecurity culture.
“ISO/SAE 21434 will help consider cybersecurity issues at every stage of the development process and in the field, increasing the vehicle’s own cybersecurity defences and mitigating the risk of potential vulnerabilities for every component,” he said.
“What’s more, the framework provided in this standard will enhance the collaboration on cybersecurity within the industry and thereby lead to technology and solutions that better meet today’s and tomorrow’s cybersecurity challenges.”
Jack Pokrzywa, Director of global ground vehicle standards at SAE International, said: “We are pleased to see the fruits of this unique collaborative partnership between SAE and ISO. We see this standard as a critical tool in the arsenal of cybersecurity professionals and product developers around the globe.”
ISO/SAE 21434 was developed by technical committee ISO/TC 22, Road vehicles, subcommittee SC 32, Electrical and electronic components and general system aspects, in collaboration with SAE International’s Vehicle Cybersecurity Systems Engineering Committee. The secretariat of ISO/TC 22/SC 32 is JISC, ISO’s member for Japan.
iso.org
Implementation of management standards
CONSEJO Ltd. is a consulting company with over 20 years of practical experience in the development, implementation and maintenance of management systems in accordance with international standards and regulatory requirements. The company provides consulting services in the areas of quality management, environmental management, occupational health and safety, food safety, information security, cybersecurity, risk management and sustainable development. Our expertise covers standards and schemes such as ISO 9001, ISO 14001, ISO 45001, ISO 22000, ISO/IEC 27001, IFS Food, BRCGS and HACCP, as well as consulting services related to NIS2, DORA, GDPR and EcoVadis.
The CONSEJO team has been involved in over 1,500 projects for organizations across various sectors of the economy, including manufacturing, construction, energy, information technology, transport, trade, the food industry and services. Our approach focuses on developing management systems that work effectively in practice, tailored to the specific characteristics and needs of each organization. We work closely with our clients, providing consulting support, staff training and assistance during implementation. We strive to deliver high-quality services within the agreed deadlines and solutions that support successful certification and create long-term value for businesses.
