SAE Update - October 2021 - 32

STANDARDS
& cOMMITTEES
SAE and ISO team for broad
cybersecurity standard
Years of effort among
international experts from the
engineering, product
development, and cybersecurity
disciplines have culminated in
publication of a standard
designed to ensure that
cybersecurity is entwined
throughout the entire product
lifecycle.
Available now for purchase,
ISO/SAE 21434 Road Vehicles -
Cybersecurity Engineering
provides industry cybersecurity
professionals and product
developers with a pragmatic
approach to establishing a solid
foundation for integrating
cybersecurity within the product
development lifecycle-from
project initiation through to
decommissioning.
SAE International developed
the standard in collaboration
with the International
Organization of Standardization
(ISO), powered by more than 100
experts from 14 nations.
ISO/SAE 21434 builds on the
tenets of SAE J3061 Cyber
Security Guidebook for Cyber32
October 2021
Physical Vehicle Systems, the world's first automotive
cybersecurity standard. SAE's partnership with ISO
allowed the expansion of the J3016 standard and
ensuring international harmonization that is needed to
truly progress cybersecurity into a mature discipline in
the mobility industry.
" We are pleased to see the fruits of this unique
collaborative partnership between SAE and ISO, " said
Jack Pokrzywa, director of global ground vehicle
standards, SAE International. " We see this standard as
a critical tool in the arsenal of cybersecurity
professionals and product developers around the
globe. SAE is committed to helping industry achieve
the highest levels of security in all vehicles. "
The new standard walks readers through the
fundamentals of cybersecurity including
requirements, process and goals in business
disciplines including product development,
production, operations and maintenance. Two major
elements of the standard are Threat Analysis and Risk
Assessment (TARA), and Product Development. The
TARA describes methods to determine the extent to
which a road user can be impacted by a threat
scenario. The methods can be called systematically,
and from any point in the lifecycle of an item or
component.
Product Development describes the specification of
the cybersecurity requirements and architectural
design into the product development and weaves it
into the " Systems Engineering V Model " approach
used extensively throughout industry. The Standard
UPDATE
https://www.sae.org/standards/content/iso/sae21434/ https://www.sae.org/standards/content/iso/sae21434/
SAE Update - October 2021

Table of Contents for the Digital Edition of SAE Update - October 2021
