ISO/SAE 21434 Road vehicles – Cybersecurity engineering
A framework is defined that includes requirements for cybersecurity processes and a common language for communicating and managing cybersecurity risk. ISO/SAE 21434 defines the cybersecurity requirements, terminology, objectives and guidelines that organisations need to
- define cybersecurity policies and processes;
- analyse, identify and manage cybersecurity risks;
- protect security by design and the organization's cybersecurity culture.
ISO/SAE 21434 is an automotive industry standard developed by the International Organization for Standardization (ISO) in conjunction with the Society of Automotive Engineers (SAE). ISO/SAE 21434 builds on ISO 26262, which does not cover software or subsystem development. ISO/SAE 21434 focuses on the cybersecurity risks inherent in the design and development of automotive electronics. It provides updated guidelines for security management, continuous security-related activities, and methods for risk assessment and mitigation.
ISO/SAE 21434 applies to all software included in vehicles, to electronic systems and components, and also to hardware. The overall aim of the standard is to provide a comprehensive guide for vehicle developers to help them cover cyber security topics throughout the development lifecycle and to make sure that the entire supply chain is also covered.
ISO/SAE 21434 Road vehicles – Cybersecurity engineering
Implementation of management standards
CONSEJO Ltd. is a consulting company with over 20 years of practical experience in the development, implementation and maintenance of management systems in accordance with international standards and regulatory requirements. The company provides consulting services in the areas of quality management, environmental management, occupational health and safety, food safety, information security, cybersecurity, risk management and sustainable development. Our expertise covers standards and schemes such as ISO 9001, ISO 14001, ISO 45001, ISO 22000, ISO/IEC 27001, IFS Food, BRCGS and HACCP, as well as consulting services related to NIS2, DORA, GDPR and EcoVadis.
The CONSEJO team has been involved in over 1,500 projects for organizations across various sectors of the economy, including manufacturing, construction, energy, information technology, transport, trade, the food industry and services. Our approach focuses on developing management systems that work effectively in practice, tailored to the specific characteristics and needs of each organization. We work closely with our clients, providing consulting support, staff training and assistance during implementation. We strive to deliver high-quality services within the agreed deadlines and solutions that support successful certification and create long-term value for businesses.
