Automotive SPICE for Cybersecurity - MAN.7 Cybersecurity Risk Management and TARA

Result code in IS VaVaI
<a href="https://www.isvavai.cz/riv?ss=detail&h=RIV%2F61989100%3A27240%2F22%3A10250476" target="_blank" >RIV/61989100:27240/22:10250476 - isvavai.cz</a>
Result on the web
<a href="https://link.springer.com/chapter/10.1007/978-3-031-15559-8_23" target="_blank" >https://link.springer.com/chapter/10.1007/978-3-031-15559-8_23</a>
DOI - Digital Object Identifier
<a href="http://dx.doi.org/10.1007/978-3-031-15559-8_23" target="_blank" >10.1007/978-3-031-15559-8_23</a>

Result language
angličtina
Original language name
Automotive SPICE for Cybersecurity - MAN.7 Cybersecurity Risk Management and TARA
Original language description
The Automotive SPICE for Cybersecurity Assessor Course has been developed in Q4/2021 and launched in Jan. 2022. From 6th July 2022 onwards Automotive projects need to declare the coverage of cybersecurity norms (UNECE 155, UNECE 156, ISO 21434) for the homologation of the vehicles in the EU. All car makers request in their customer requirements documents the performance of a TARA (Cybersecurity Threat and Risk Analysis) and all ASPICE assessments for cybersecurity need to evaluate the capability of the process MAN.7 Risk management for Cybersecurity. The Base Practices of MAN.7 are related to the steps of performing and tracking a TARA. In the EU project CyberENG a training for cybersecurity managers and cybersecurity assessors is currently developed which explains how such a TARA is performed and what steps and attributes need to be considered. For the development of the iNTACS ASPICE for cybersecurity assessor training the SOQRATES group contributed practical examples for MAN.7, and SEC.1 to SEC.4 to the course development. This paper outlines how the TARA based on ISO 21434 and ASPICE for cybersecurity is structured and uses the example from the CyberENG project to explain it in practice.
Czech name
—
Czech description
—

Publication year
2022
Confidentiality
S - Úplné a pravdivé údaje o projektu nepodléhají ochraně podle zvláštních právních předpisů

Article name in the collection
Communications in Computer and Information Science. Volume 1646
ISBN
978-3-031-15558-1
ISSN
1865-0929
e-ISSN
1865-0937
Number of pages
16
Pages from-to
319-334
Publisher name
Springer
Place of publication
Cham
Event location
Salzburg
Event date
Aug 31, 2022
Type of event by nationality
WRD - Celosvětová akce
UT code for WoS article
—

Similar results(10)