Cybersecurity Management and Engineering (ISO/SAE 21434 und IEC 62443)
Testing standard:
Product information
Design and implementation of cybersecurity management and engineering in accordance with ISO/SAE 21434 and IEC 62443. The goal is a demonstrably robust, compliant system that is secured throughout its lifecycle (cybersecurity case)—from the concept phase through operation and maintenance.
Scope of Services
- Establishment and maintenance of a cybersecurity plan and security lifecycle activities
- Conducting TARA, threat modeling, and attack path analyses, including risk assessment (CAL)
- Derivation and specification of cybersecurity requirements, as well as establishment of traceability
- Development or review of security architecture and security mechanisms (secure-by-design)
- Vulnerability analyses, security reviews, and gap analyses against standards/OEM specifications
- Planning and support for verification/validation, security testing, and penetration tests
- Creation, consolidation, and maintenance of the Cybersecurity Case, including documentation of evidence
Technical data
| Department: | Engineering Integration & Management Services |
|---|---|
| Project goal: | Quality & safety |
| Service-Type: | Development & Engineering |
