SAE Update - May 2022 - 9

TECH FOCUS:
CybErSECUriTy
All about cybersecurity
Knowing where to start and what to prioritize with
cybersecurity can be a considerable challenge in the
face of an often-overwhelming level of hype and security
product offerings. What is cybersecurity? What does it
mean in the automotive industry? How does one even
begin to establish a cybersecurity protocol or begin
implementation of the ISO and SAE 21434 standard?
David Ward and Paul Wooderson, both SAE members,
set out to address all these questions and many more by
creating a practical guide for everyone in the industry
when they wrote their new book, Automotive
Cybersecurity: an Introduction to ISO/SAE 21434.
" Cybersecurity is, of course, much more than a set
of technical engineering activities or 'just' complying
with a standard but affects all aspects of an
organization and its products, driving the need for
significant transformation activities across multiple
aspects of a business, " said Ward and Wooderson.
In a report from Gartner, Inc. identifying the top
security and risk management trends for 2022, the
firm notes that organizations worldwide are facing
sophisticated ransomware, attacks on digital supply
chains, and deeply embedded vulnerabilities.
Achieving cybersecurity in automotive products
presents some unique challenges including but not
limited to safety-related implications, vehicle lifetimes,
how and when to update software in vehicles, and
" right to repair " legislation.
The ISO and SAE 21434 standard, published in
August of 2021, have begun to address this important
new engineering discipline. The book acts as a
companion to the standard by providing foundational
knowledge of cybersecurity, including meaningful
guidance to get started on implementing a
UPDATE
cybersecurity program and how
to continuously improve its
maturity over time.
Ward and Wooderson have
been involved from the outset in
developing international best
practices, standards, and
regulations, including SAE J3061,
ISO/SAE 21434, and UN
Regulation 155.
" We feel this early involvement
makes us well placed to provide
advice not only on the final
content of these documents but,
importantly, the thinking behind
the concepts and why the
requirements are formulated the
way they are, " said Ward and
Wooderson. n
AbOUT THE
AUTHOr
Sherry Nigam, Head of
SAE books, wrote this
article for Update.
May 2022
9

https://www.sae.org/publications/books/content/r-495/ https://www.sae.org/publications/books/content/r-495/ https://www.sae.org/standards/content/iso/sae21434/

SAE Update - May 2022

Table of Contents for the Digital Edition of SAE Update - May 2022