Start Date: November 12, 16, 23, 25, 27 & 29, 2024

Time: 4 PM CET - 8 PM CET (4 hours each day)

Total Duration: 24 hours

Prerequisite: None

COURSE OUTLINE

Module 1: Introduction to ISO/SAE 21434 and Automotive Cybersecurity

• Challenges in Automotive Cybersecurity

• Fundamentals of Cybersecurity

• Fundamentals of Automotive Cybersecurity

Module 2: Overview of ISO/SAE 21434

• Purpose of the ISO/SAE 21434 standard

• Cybersecurity in the context of road vehicles

• Overview of document structure

• Reference to ISO 21434: Introduction and Scope (Clause 1, 2 and 3)

Module 3: General Considerations

• Context and perspective on automotive cybersecurity engineering

• Application limits of the document

• Relation to other cybersecurity and functional safety standards

Reference to ISO 21434: General Considerations (Clause 4)

Module 4: Organizational Cybersecurity Management

• Cybersecurity governance

• Cybersecurity culture

• Information sharing

• Management systems

• Tool management

• Information security management

• Organizational cybersecurity audit

Reference to ISO 21434: Organizational Cybersecurity Management (Clause 5)

Module 5: Project-dependent Cybersecurity Management

• Cybersecurity responsibilities

• Cybersecurity planning

• Tailoring

• Reuse

• Component out-of-context

• Off-the-shelf component

• Cybersecurity case

• Cybersecurity assessment

• Release for post-development

Reference to ISO 21434: Project-dependent Cybersecurity Management (Clause 6)

Module 5: Distributed Cybersecurity Activities

• Supplier capability for cybersecurity

• Request for quotation (RFQ)

• Alignment of cybersecurity responsibilities

Reference to ISO 21434: Distributed Cybersecurity Activities (Clause 7)

Module 6: Continual Cybersecurity Activities

• Cybersecurity monitoring

• Cybersecurity event evaluation

• Vulnerability analysis

• Vulnerability management

Reference to ISO 21434: Continual Cybersecurity Activities (Clause 8)

Module 7: Concept Phase

• Item definition

• Cybersecurity goals

• Cybersecurity concept

Reference to ISO 21434: Concept Phase (Clause 9)

Module 8: Product Development

• Design

• Integration and verification

Reference to ISO 21434: Product Development (Clause 10)

Module 9: Cybersecurity Validation

• Strategies for validating cybersecurity at the item level

• Integration of cybersecurity validation into overall vehicle validation

 Reference to ISO 21434: Cybersecurity Validation (Clause 11)

Module 10: Production

• Cybersecurity considerations in manufacturing and assembly processes

• Quality assurance for cybersecurity in production

Reference to ISO 21434: Production (Clause 12)

Module 11: Operation, Maintenance, and Service

• Cybersecurity incident response

• Cybersecurity Updates

 Reference to ISO 21434: Operation and Maintenance (Clause 13)

Module 12: End of Life and Decommissioning

• Secure decommissioning practices

• Management of cybersecurity risks during decommissioning

Reference to ISO 21434: Decommissioning (Clause 14)

Module 13: Threat Analysis and Risk Assessment Methods

• Asset identification

• Threat scenario identification

• Impact rating

• Attack path analysis

• Attack feasibility rating

• Risk value determination

• Risk treatment decision

Reference: Threat Analysis and Risk Assessment Methods (Clause 15)