SAE Update - November 2022 - 20

PROFESSIONAL
DEVELOPMENT
managing cybersecurity risks
Applying the ISO/SAE 21434
Road Vehicles - Cybersecurity
Engineering standard? SAE
International has the
professional development
course for you.
Managing Cybersecurity
Risks Using ISO/SAE 21434 is
an introductory course outlining
the methods specified to assess
cybersecurity risk to a road
vehicle product in the context of
ISO/SAE 21434. This risk-based
methodology is a modular
component of additional topics
in the standard and a necessary
concept to comprehend.
" Cybersecurity is a particular
challenge in the automotive
industry due to the increasing
connectivity of vehicles and
their dependence on software, "
course instructor David Ward,
an 11-year SAE member and
Senior Technical Manager,
Functional Safety at HORIBA
MIRA, told Update. " One of the
keys to addressing it effectively
is to have co-ordinated
approaches with related
disciplines such as functional
safety. "
This course is geared towards
electrical and software
20 November 2022
Figure 1. Attack vectors present in many modern vehicles
Illustration by Joelynn Schroeder, NREL
OEMs have included cybersecurity protection since the inception of software in vehicles.
According to the Deputy Administrator of the U.S. Department of Transportation (DOT)
National Highway Traffic and Safety Administration, none of the 6 million police-reported car
crashes in 2016 was attributed to cyberattacks (King 2018). In fact, strong evidence shows
vehicle safety features like automatic emergency braking reduce the frequency and severity of
accidents (IIHS-HLDI 2018). However, vehicles are becoming more sophisticated and more
connected, which creates different risks associated with safety and privacy.
OEms have included cybersecurity protection since the inception of software
in vehicles. According to the Deputy Administrator of the U.S. Department of
Transportation (DOT) National Highway Traffic and Safety Administration,
none of the 6 million police-reported car crashes in 2016 was attributed to
cyberattacks (King 2018). in fact, strong evidence shows vehicle safety
features like automatic emergency braking reduce the frequency and
severity of accidents (iiHS-HLDi 2018). However, vehicles are becoming
more sophisticated and more connected, which creates different risks
associated with safety and privacy.
This report is available at no cost from the National Renewable Energy Laboratory (NREL) at www.nrel.gov/publication
engineers, as well as engineers that are directly or
indirectly tied to cybersecurity. It would also be
appropriate for functional safety managers, product
planners, designers, implementers, testers,
operations analysts, regulators, and other managers.
Managing Cybersecurity Risks Using ISO/SAE
2
21434 explains the methods and logic behind the
standard and focuses on risk assessment as a basic
principle that must be applied in all other areas of
UPDATE
Illustration by Joelynn Schroeder, NREL

https://www.sae.org/standards/content/iso/sae21434/ https://www.sae.org/standards/content/iso/sae21434/ https://www.sae.org/standards/content/iso/sae21434/ https://www.sae.org/learn/content/pd532013/ https://www.sae.org/learn/content/pd532013/

SAE Update - November 2022

Table of Contents for the Digital Edition of SAE Update - November 2022